apiVersion: v1 items: - apiVersion: v1 kind: Pod metadata: creationTimestamp: "2026-06-09T13:14:20Z" generateName: coredns-7db6d8ff4d- labels: k8s-app: kube-dns pod-template-hash: 7db6d8ff4d name: coredns-7db6d8ff4d-hmm8v namespace: kube-system ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: coredns-7db6d8ff4d uid: d4b50eeb-d810-48d8-8d61-09a1e342683f resourceVersion: "478" uid: 929c6c22-8035-4fe1-8614-54541a23c3d5 spec: affinity: podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - key: k8s-app operator: In values: - kube-dns topologyKey: kubernetes.io/hostname weight: 100 containers: - args: - -conf - /etc/coredns/Corefile image: registry.k8s.io/coredns/coredns:v1.11.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 httpGet: path: /health port: 8080 scheme: HTTP initialDelaySeconds: 60 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 name: coredns ports: - containerPort: 53 name: dns protocol: UDP - containerPort: 53 name: dns-tcp protocol: TCP - containerPort: 9153 name: metrics protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /ready port: 8181 scheme: HTTP periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: limits: memory: 170Mi requests: cpu: 100m memory: 70Mi securityContext: allowPrivilegeEscalation: false capabilities: add: - NET_BIND_SERVICE drop: - ALL readOnlyRootFilesystem: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/coredns name: config-volume readOnly: true - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-4hldf readOnly: true dnsPolicy: Default enableServiceLinks: true nodeName: chart-test-swarm-run-34-control-plane nodeSelector: kubernetes.io/os: linux preemptionPolicy: PreemptLowerPriority priority: 2000000000 priorityClassName: system-cluster-critical restartPolicy: Always schedulerName: default-scheduler securityContext: {} serviceAccount: coredns serviceAccountName: coredns terminationGracePeriodSeconds: 30 tolerations: - key: CriticalAddonsOnly operator: Exists - effect: NoSchedule key: node-role.kubernetes.io/control-plane - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - configMap: defaultMode: 420 items: - key: Corefile path: Corefile name: coredns name: config-volume - name: kube-api-access-4hldf projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:23Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:21Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:23Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:23Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:21Z" status: "True" type: PodScheduled containerStatuses: - containerID: containerd://78e007e81344983af9328e63c17035735506a666d678e8b243f0a25811190ce6 image: registry.k8s.io/coredns/coredns:v1.11.1 imageID: sha256:2437cf762177702dec2dfe99a09c37427a15af6d9a57c456b65352667c223d93 lastState: {} name: coredns ready: true restartCount: 0 started: true state: running: startedAt: "2026-06-09T13:14:22Z" hostIP: 172.20.0.2 hostIPs: - ip: 172.20.0.2 phase: Running podIP: 10.244.0.4 podIPs: - ip: 10.244.0.4 qosClass: Burstable startTime: "2026-06-09T13:14:21Z" - apiVersion: v1 kind: Pod metadata: creationTimestamp: "2026-06-09T13:14:20Z" generateName: coredns-7db6d8ff4d- labels: k8s-app: kube-dns pod-template-hash: 7db6d8ff4d name: coredns-7db6d8ff4d-pg7pf namespace: kube-system ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: coredns-7db6d8ff4d uid: d4b50eeb-d810-48d8-8d61-09a1e342683f resourceVersion: "482" uid: 7a312961-6827-4363-b3f3-1efc32cba144 spec: affinity: podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - key: k8s-app operator: In values: - kube-dns topologyKey: kubernetes.io/hostname weight: 100 containers: - args: - -conf - /etc/coredns/Corefile image: registry.k8s.io/coredns/coredns:v1.11.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 httpGet: path: /health port: 8080 scheme: HTTP initialDelaySeconds: 60 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 name: coredns ports: - containerPort: 53 name: dns protocol: UDP - containerPort: 53 name: dns-tcp protocol: TCP - containerPort: 9153 name: metrics protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /ready port: 8181 scheme: HTTP periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: limits: memory: 170Mi requests: cpu: 100m memory: 70Mi securityContext: allowPrivilegeEscalation: false capabilities: add: - NET_BIND_SERVICE drop: - ALL readOnlyRootFilesystem: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/coredns name: config-volume readOnly: true - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-x9xsr readOnly: true dnsPolicy: Default enableServiceLinks: true nodeName: chart-test-swarm-run-34-control-plane nodeSelector: kubernetes.io/os: linux preemptionPolicy: PreemptLowerPriority priority: 2000000000 priorityClassName: system-cluster-critical restartPolicy: Always schedulerName: default-scheduler securityContext: {} serviceAccount: coredns serviceAccountName: coredns terminationGracePeriodSeconds: 30 tolerations: - key: CriticalAddonsOnly operator: Exists - effect: NoSchedule key: node-role.kubernetes.io/control-plane - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - configMap: defaultMode: 420 items: - key: Corefile path: Corefile name: coredns name: config-volume - name: kube-api-access-x9xsr projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:23Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:21Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:23Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:23Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:21Z" status: "True" type: PodScheduled containerStatuses: - containerID: containerd://7a32a8be684e9d1f50d5adc2c42837416333693620c9a101ae55a1264e622714 image: registry.k8s.io/coredns/coredns:v1.11.1 imageID: sha256:2437cf762177702dec2dfe99a09c37427a15af6d9a57c456b65352667c223d93 lastState: {} name: coredns ready: true restartCount: 0 started: true state: running: startedAt: "2026-06-09T13:14:22Z" hostIP: 172.20.0.2 hostIPs: - ip: 172.20.0.2 phase: Running podIP: 10.244.0.3 podIPs: - ip: 10.244.0.3 qosClass: Burstable startTime: "2026-06-09T13:14:21Z" - apiVersion: v1 kind: Pod metadata: annotations: kubectl.kubernetes.io/default-container: secrets-store creationTimestamp: "2026-06-09T13:14:32Z" generateName: csi-secrets-store-secrets-store-csi-driver- labels: app: secrets-store-csi-driver app.kubernetes.io/instance: csi-secrets-store app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: secrets-store-csi-driver app.kubernetes.io/version: 1.4.8 controller-revision-hash: b4b48dd9c helm.sh/chart: secrets-store-csi-driver-1.4.8 pod-template-generation: "1" name: csi-secrets-store-secrets-store-csi-driver-x6zml namespace: kube-system ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: DaemonSet name: csi-secrets-store-secrets-store-csi-driver uid: 827392ec-5f11-41b3-89b7-02b376d43f70 resourceVersion: "583" uid: 813ec2ce-976b-4690-9b01-2251a3fbd765 spec: affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchFields: - key: metadata.name operator: In values: - chart-test-swarm-run-34-control-plane containers: - args: - --v=5 - --csi-address=/csi/csi.sock - --kubelet-registration-path=/var/lib/kubelet/plugins/csi-secrets-store/csi.sock image: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.11.1 imagePullPolicy: IfNotPresent name: node-driver-registrar resources: limits: cpu: 100m memory: 100Mi requests: cpu: 10m memory: 20Mi terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /csi name: plugin-dir - mountPath: /registration name: registration-dir - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-j98cb readOnly: true - args: - --endpoint=$(CSI_ENDPOINT) - --nodeid=$(KUBE_NODE_NAME) - --provider-volume=/var/run/secrets-store-csi-providers - --additional-provider-volume-paths=/etc/kubernetes/secrets-store-csi-providers - --metrics-addr=:8095 - --provider-health-check-interval=2m - --max-call-recv-msg-size=4194304 env: - name: CSI_ENDPOINT value: unix:///csi/csi.sock - name: KUBE_NODE_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: spec.nodeName image: registry.k8s.io/csi-secrets-store/driver:v1.4.8 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 httpGet: path: /healthz port: healthz scheme: HTTP initialDelaySeconds: 30 periodSeconds: 15 successThreshold: 1 timeoutSeconds: 10 name: secrets-store ports: - containerPort: 9808 name: healthz protocol: TCP - containerPort: 8095 name: metrics protocol: TCP resources: limits: cpu: 200m memory: 200Mi requests: cpu: 50m memory: 100Mi securityContext: privileged: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /csi name: plugin-dir - mountPath: /var/lib/kubelet/pods mountPropagation: Bidirectional name: mountpoint-dir - mountPath: /var/run/secrets-store-csi-providers name: providers-dir - mountPath: /etc/kubernetes/secrets-store-csi-providers name: providers-dir-0 - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-j98cb readOnly: true - args: - --csi-address=/csi/csi.sock - --probe-timeout=3s - --http-endpoint=0.0.0.0:9808 - -v=2 image: registry.k8s.io/sig-storage/livenessprobe:v2.13.1 imagePullPolicy: IfNotPresent name: liveness-probe resources: limits: cpu: 100m memory: 100Mi requests: cpu: 10m memory: 20Mi terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /csi name: plugin-dir - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-j98cb readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true nodeName: chart-test-swarm-run-34-control-plane nodeSelector: kubernetes.io/os: linux preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: {} serviceAccount: secrets-store-csi-driver serviceAccountName: secrets-store-csi-driver terminationGracePeriodSeconds: 30 tolerations: - operator: Exists - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists - effect: NoSchedule key: node.kubernetes.io/disk-pressure operator: Exists - effect: NoSchedule key: node.kubernetes.io/memory-pressure operator: Exists - effect: NoSchedule key: node.kubernetes.io/pid-pressure operator: Exists - effect: NoSchedule key: node.kubernetes.io/unschedulable operator: Exists volumes: - hostPath: path: /var/lib/kubelet/pods type: DirectoryOrCreate name: mountpoint-dir - hostPath: path: /var/lib/kubelet/plugins_registry/ type: Directory name: registration-dir - hostPath: path: /var/lib/kubelet/plugins/csi-secrets-store/ type: DirectoryOrCreate name: plugin-dir - hostPath: path: /var/run/secrets-store-csi-providers type: DirectoryOrCreate name: providers-dir - hostPath: path: /etc/kubernetes/secrets-store-csi-providers type: DirectoryOrCreate name: providers-dir-0 - name: kube-api-access-j98cb projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:44Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:32Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:44Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:44Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:32Z" status: "True" type: PodScheduled containerStatuses: - containerID: containerd://7c7dfe57e6d4e3493dc9adc06e19d2cd6fc2a24b89192160c831492c895361c5 image: registry.k8s.io/sig-storage/livenessprobe:v2.13.1 imageID: registry.k8s.io/sig-storage/livenessprobe@sha256:d2a9027a4876e039185e9bef7c61a0142c8ea14e7440860285c34ac73fee4ffb lastState: {} name: liveness-probe ready: true restartCount: 0 started: true state: running: startedAt: "2026-06-09T13:14:44Z" - containerID: containerd://02872cd2b30bda953022f754104a926f75efd8bcc7ab4e6328c72bb763c86149 image: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.11.1 imageID: registry.k8s.io/sig-storage/csi-node-driver-registrar@sha256:e01facb9fb9cffaf52d0053bdb979fbd8c505c8e411939a6e026dd061a6b4fbe lastState: {} name: node-driver-registrar ready: true restartCount: 0 started: true state: running: startedAt: "2026-06-09T13:14:36Z" - containerID: containerd://a09ed798a8ba465f898706ce1de9fc6811da8c072d08603d48359ed84dda2339 image: registry.k8s.io/csi-secrets-store/driver:v1.4.8 imageID: registry.k8s.io/csi-secrets-store/driver@sha256:f2fe5cbe2988754ae601c8b8bb1efbec100c443c02a16988c00b4204d287c240 lastState: {} name: secrets-store ready: true restartCount: 0 started: true state: running: startedAt: "2026-06-09T13:14:43Z" hostIP: 172.20.0.2 hostIPs: - ip: 172.20.0.2 phase: Running podIP: 10.244.0.6 podIPs: - ip: 10.244.0.6 qosClass: Burstable startTime: "2026-06-09T13:14:32Z" - apiVersion: v1 kind: Pod metadata: annotations: kubeadm.kubernetes.io/etcd.advertise-client-urls: https://172.20.0.2:2379 kubernetes.io/config.hash: 1484bc9482d735c61a8b12db1a74019d kubernetes.io/config.mirror: 1484bc9482d735c61a8b12db1a74019d kubernetes.io/config.seen: "2026-06-09T13:14:06.520468298Z" kubernetes.io/config.source: file creationTimestamp: "2026-06-09T13:14:06Z" labels: component: etcd tier: control-plane name: etcd-chart-test-swarm-run-34-control-plane namespace: kube-system ownerReferences: - apiVersion: v1 controller: true kind: Node name: chart-test-swarm-run-34-control-plane uid: ee414650-9363-486f-8baa-dfd14c5c7335 resourceVersion: "322" uid: af582add-7534-45d0-b406-8421dac59fae spec: containers: - command: - etcd - --advertise-client-urls=https://172.20.0.2:2379 - --cert-file=/etc/kubernetes/pki/etcd/server.crt - --client-cert-auth=true - --data-dir=/var/lib/etcd - --experimental-initial-corrupt-check=true - --experimental-watch-progress-notify-interval=5s - --initial-advertise-peer-urls=https://172.20.0.2:2380 - --initial-cluster=chart-test-swarm-run-34-control-plane=https://172.20.0.2:2380 - --key-file=/etc/kubernetes/pki/etcd/server.key - --listen-client-urls=https://127.0.0.1:2379,https://172.20.0.2:2379 - --listen-metrics-urls=http://127.0.0.1:2381 - --listen-peer-urls=https://172.20.0.2:2380 - --name=chart-test-swarm-run-34-control-plane - --peer-cert-file=/etc/kubernetes/pki/etcd/peer.crt - --peer-client-cert-auth=true - --peer-key-file=/etc/kubernetes/pki/etcd/peer.key - --peer-trusted-ca-file=/etc/kubernetes/pki/etcd/ca.crt - --snapshot-count=10000 - --trusted-ca-file=/etc/kubernetes/pki/etcd/ca.crt image: registry.k8s.io/etcd:3.5.12-0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 8 httpGet: host: 127.0.0.1 path: /health?exclude=NOSPACE&serializable=true port: 2381 scheme: HTTP initialDelaySeconds: 10 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 15 name: etcd resources: requests: cpu: 100m memory: 100Mi startupProbe: failureThreshold: 24 httpGet: host: 127.0.0.1 path: /health?serializable=false port: 2381 scheme: HTTP initialDelaySeconds: 10 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 15 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /var/lib/etcd name: etcd-data - mountPath: /etc/kubernetes/pki/etcd name: etcd-certs dnsPolicy: ClusterFirst enableServiceLinks: true hostNetwork: true nodeName: chart-test-swarm-run-34-control-plane preemptionPolicy: PreemptLowerPriority priority: 2000001000 priorityClassName: system-node-critical restartPolicy: Always schedulerName: default-scheduler securityContext: seccompProfile: type: RuntimeDefault terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute operator: Exists volumes: - hostPath: path: /etc/kubernetes/pki/etcd type: DirectoryOrCreate name: etcd-certs - hostPath: path: /var/lib/etcd type: DirectoryOrCreate name: etcd-data status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:06Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:06Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:13Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:13Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:06Z" status: "True" type: PodScheduled containerStatuses: - containerID: containerd://05e732844b2de206bd86c263bb89bf322d5021a4832fc0949b9c348ce72f5542 image: registry.k8s.io/etcd:3.5.12-0 imageID: sha256:014faa467e29798aeef733fe6d1a3b5e382688217b053ad23410e6cccd5d22fd lastState: {} name: etcd ready: true restartCount: 0 started: true state: running: startedAt: "2026-06-09T13:14:03Z" hostIP: 172.20.0.2 hostIPs: - ip: 172.20.0.2 phase: Running podIP: 172.20.0.2 podIPs: - ip: 172.20.0.2 qosClass: Burstable startTime: "2026-06-09T13:14:06Z" - apiVersion: v1 kind: Pod metadata: creationTimestamp: "2026-06-09T13:14:20Z" generateName: kindnet- labels: app: kindnet controller-revision-hash: 845ccdb979 k8s-app: kindnet pod-template-generation: "1" tier: node name: kindnet-kf9n9 namespace: kube-system ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: DaemonSet name: kindnet uid: c9359da4-bc6a-41e6-abaf-6aa3775aedec resourceVersion: "448" uid: 97ca77d8-456b-48d4-b4d6-70dd6d005858 spec: affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchFields: - key: metadata.name operator: In values: - chart-test-swarm-run-34-control-plane containers: - env: - name: HOST_IP valueFrom: fieldRef: apiVersion: v1 fieldPath: status.hostIP - name: POD_IP valueFrom: fieldRef: apiVersion: v1 fieldPath: status.podIP - name: POD_SUBNET value: 10.244.0.0/16 - name: CONTROL_PLANE_ENDPOINT value: chart-test-swarm-run-34-control-plane:6443 image: docker.io/kindest/kindnetd:v20240202-8f1494ea imagePullPolicy: IfNotPresent name: kindnet-cni resources: limits: cpu: 100m memory: 50Mi requests: cpu: 100m memory: 50Mi securityContext: capabilities: add: - NET_RAW - NET_ADMIN privileged: false terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/cni/net.d name: cni-cfg - mountPath: /run/xtables.lock name: xtables-lock - mountPath: /lib/modules name: lib-modules readOnly: true - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-ck2ps readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true hostNetwork: true nodeName: chart-test-swarm-run-34-control-plane nodeSelector: kubernetes.io/os: linux preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: {} serviceAccount: kindnet serviceAccountName: kindnet terminationGracePeriodSeconds: 30 tolerations: - operator: Exists - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists - effect: NoSchedule key: node.kubernetes.io/disk-pressure operator: Exists - effect: NoSchedule key: node.kubernetes.io/memory-pressure operator: Exists - effect: NoSchedule key: node.kubernetes.io/pid-pressure operator: Exists - effect: NoSchedule key: node.kubernetes.io/unschedulable operator: Exists - effect: NoSchedule key: node.kubernetes.io/network-unavailable operator: Exists volumes: - hostPath: path: /etc/cni/net.d type: "" name: cni-cfg - hostPath: path: /run/xtables.lock type: FileOrCreate name: xtables-lock - hostPath: path: /lib/modules type: "" name: lib-modules - name: kube-api-access-ck2ps projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:22Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:20Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:22Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:22Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:20Z" status: "True" type: PodScheduled containerStatuses: - containerID: containerd://f222947cf503a67b4fd3b722019276f2ac71d2eb0ee068c2eb69042dc84cb113 image: docker.io/kindest/kindnetd:v20240202-8f1494ea imageID: sha256:4740c1948d3fceb8d7dacc63033aa6299d80794ee4f4811539ec1081d9211f3d lastState: {} name: kindnet-cni ready: true restartCount: 0 started: true state: running: startedAt: "2026-06-09T13:14:21Z" hostIP: 172.20.0.2 hostIPs: - ip: 172.20.0.2 phase: Running podIP: 172.20.0.2 podIPs: - ip: 172.20.0.2 qosClass: Guaranteed startTime: "2026-06-09T13:14:20Z" - apiVersion: v1 kind: Pod metadata: annotations: kubeadm.kubernetes.io/kube-apiserver.advertise-address.endpoint: 172.20.0.2:6443 kubernetes.io/config.hash: bea2edb0ced41aa66902a15cabbde78a kubernetes.io/config.mirror: bea2edb0ced41aa66902a15cabbde78a kubernetes.io/config.seen: "2026-06-09T13:14:06.520469173Z" kubernetes.io/config.source: file creationTimestamp: "2026-06-09T13:14:06Z" labels: component: kube-apiserver tier: control-plane name: kube-apiserver-chart-test-swarm-run-34-control-plane namespace: kube-system ownerReferences: - apiVersion: v1 controller: true kind: Node name: chart-test-swarm-run-34-control-plane uid: ee414650-9363-486f-8baa-dfd14c5c7335 resourceVersion: "333" uid: 1e146e22-f14d-4c6d-b977-3f1b24149219 spec: containers: - command: - kube-apiserver - --advertise-address=172.20.0.2 - --allow-privileged=true - --authorization-mode=Node,RBAC - --client-ca-file=/etc/kubernetes/pki/ca.crt - --enable-admission-plugins=NodeRestriction - --enable-bootstrap-token-auth=true - --etcd-cafile=/etc/kubernetes/pki/etcd/ca.crt - --etcd-certfile=/etc/kubernetes/pki/apiserver-etcd-client.crt - --etcd-keyfile=/etc/kubernetes/pki/apiserver-etcd-client.key - --etcd-servers=https://127.0.0.1:2379 - --kubelet-client-certificate=/etc/kubernetes/pki/apiserver-kubelet-client.crt - --kubelet-client-key=/etc/kubernetes/pki/apiserver-kubelet-client.key - --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname - --proxy-client-cert-file=/etc/kubernetes/pki/front-proxy-client.crt - --proxy-client-key-file=/etc/kubernetes/pki/front-proxy-client.key - --requestheader-allowed-names=front-proxy-client - --requestheader-client-ca-file=/etc/kubernetes/pki/front-proxy-ca.crt - --requestheader-extra-headers-prefix=X-Remote-Extra- - --requestheader-group-headers=X-Remote-Group - --requestheader-username-headers=X-Remote-User - --runtime-config= - --secure-port=6443 - --service-account-issuer=https://kubernetes.default.svc.cluster.local - --service-account-key-file=/etc/kubernetes/pki/sa.pub - --service-account-signing-key-file=/etc/kubernetes/pki/sa.key - --service-cluster-ip-range=10.96.0.0/16 - --tls-cert-file=/etc/kubernetes/pki/apiserver.crt - --tls-private-key-file=/etc/kubernetes/pki/apiserver.key image: registry.k8s.io/kube-apiserver:v1.30.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 8 httpGet: host: 172.20.0.2 path: /livez port: 6443 scheme: HTTPS initialDelaySeconds: 10 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 15 name: kube-apiserver readinessProbe: failureThreshold: 3 httpGet: host: 172.20.0.2 path: /readyz port: 6443 scheme: HTTPS periodSeconds: 1 successThreshold: 1 timeoutSeconds: 15 resources: requests: cpu: 250m startupProbe: failureThreshold: 24 httpGet: host: 172.20.0.2 path: /livez port: 6443 scheme: HTTPS initialDelaySeconds: 10 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 15 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/ssl/certs name: ca-certs readOnly: true - mountPath: /etc/ca-certificates name: etc-ca-certificates readOnly: true - mountPath: /etc/kubernetes/pki name: k8s-certs readOnly: true - mountPath: /usr/local/share/ca-certificates name: usr-local-share-ca-certificates readOnly: true - mountPath: /usr/share/ca-certificates name: usr-share-ca-certificates readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true hostNetwork: true nodeName: chart-test-swarm-run-34-control-plane preemptionPolicy: PreemptLowerPriority priority: 2000001000 priorityClassName: system-node-critical restartPolicy: Always schedulerName: default-scheduler securityContext: seccompProfile: type: RuntimeDefault terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute operator: Exists volumes: - hostPath: path: /etc/ssl/certs type: DirectoryOrCreate name: ca-certs - hostPath: path: /etc/ca-certificates type: DirectoryOrCreate name: etc-ca-certificates - hostPath: path: /etc/kubernetes/pki type: DirectoryOrCreate name: k8s-certs - hostPath: path: /usr/local/share/ca-certificates type: DirectoryOrCreate name: usr-local-share-ca-certificates - hostPath: path: /usr/share/ca-certificates type: DirectoryOrCreate name: usr-share-ca-certificates status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:06Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:06Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:17Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:17Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:06Z" status: "True" type: PodScheduled containerStatuses: - containerID: containerd://cef3a7de356d5bb32ec06167a1b7fa97a0a6cba92bd02366828b7f19bf634d47 image: registry.k8s.io/kube-apiserver-arm64:v1.30.0 imageID: docker.io/library/import-2024-05-13@sha256:91ca1c81e44a332253b9588418418de977942a50ae0d9a84f9a288c4030f8653 lastState: {} name: kube-apiserver ready: true restartCount: 0 started: true state: running: startedAt: "2026-06-09T13:14:02Z" hostIP: 172.20.0.2 hostIPs: - ip: 172.20.0.2 phase: Running podIP: 172.20.0.2 podIPs: - ip: 172.20.0.2 qosClass: Burstable startTime: "2026-06-09T13:14:06Z" - apiVersion: v1 kind: Pod metadata: annotations: kubernetes.io/config.hash: b4de2931a949ab5aaccf45488e89c02f kubernetes.io/config.mirror: b4de2931a949ab5aaccf45488e89c02f kubernetes.io/config.seen: "2026-06-09T13:14:06.520469631Z" kubernetes.io/config.source: file creationTimestamp: "2026-06-09T13:14:06Z" labels: component: kube-controller-manager tier: control-plane name: kube-controller-manager-chart-test-swarm-run-34-control-plane namespace: kube-system ownerReferences: - apiVersion: v1 controller: true kind: Node name: chart-test-swarm-run-34-control-plane uid: ee414650-9363-486f-8baa-dfd14c5c7335 resourceVersion: "344" uid: 32c4477c-e165-464f-90d6-c2a7c091f986 spec: containers: - command: - kube-controller-manager - --allocate-node-cidrs=true - --authentication-kubeconfig=/etc/kubernetes/controller-manager.conf - --authorization-kubeconfig=/etc/kubernetes/controller-manager.conf - --bind-address=127.0.0.1 - --client-ca-file=/etc/kubernetes/pki/ca.crt - --cluster-cidr=10.244.0.0/16 - --cluster-name=chart-test-swarm-run-34 - --cluster-signing-cert-file=/etc/kubernetes/pki/ca.crt - --cluster-signing-key-file=/etc/kubernetes/pki/ca.key - --controllers=*,bootstrapsigner,tokencleaner - --enable-hostpath-provisioner=true - --kubeconfig=/etc/kubernetes/controller-manager.conf - --leader-elect=true - --requestheader-client-ca-file=/etc/kubernetes/pki/front-proxy-ca.crt - --root-ca-file=/etc/kubernetes/pki/ca.crt - --service-account-private-key-file=/etc/kubernetes/pki/sa.key - --service-cluster-ip-range=10.96.0.0/16 - --use-service-account-credentials=true image: registry.k8s.io/kube-controller-manager:v1.30.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 8 httpGet: host: 127.0.0.1 path: /healthz port: 10257 scheme: HTTPS initialDelaySeconds: 10 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 15 name: kube-controller-manager resources: requests: cpu: 200m startupProbe: failureThreshold: 24 httpGet: host: 127.0.0.1 path: /healthz port: 10257 scheme: HTTPS initialDelaySeconds: 10 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 15 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/ssl/certs name: ca-certs readOnly: true - mountPath: /etc/ca-certificates name: etc-ca-certificates readOnly: true - mountPath: /usr/libexec/kubernetes/kubelet-plugins/volume/exec name: flexvolume-dir - mountPath: /etc/kubernetes/pki name: k8s-certs readOnly: true - mountPath: /etc/kubernetes/controller-manager.conf name: kubeconfig readOnly: true - mountPath: /usr/local/share/ca-certificates name: usr-local-share-ca-certificates readOnly: true - mountPath: /usr/share/ca-certificates name: usr-share-ca-certificates readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true hostNetwork: true nodeName: chart-test-swarm-run-34-control-plane preemptionPolicy: PreemptLowerPriority priority: 2000001000 priorityClassName: system-node-critical restartPolicy: Always schedulerName: default-scheduler securityContext: seccompProfile: type: RuntimeDefault terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute operator: Exists volumes: - hostPath: path: /etc/ssl/certs type: DirectoryOrCreate name: ca-certs - hostPath: path: /etc/ca-certificates type: DirectoryOrCreate name: etc-ca-certificates - hostPath: path: /usr/libexec/kubernetes/kubelet-plugins/volume/exec type: DirectoryOrCreate name: flexvolume-dir - hostPath: path: /etc/kubernetes/pki type: DirectoryOrCreate name: k8s-certs - hostPath: path: /etc/kubernetes/controller-manager.conf type: FileOrCreate name: kubeconfig - hostPath: path: /usr/local/share/ca-certificates type: DirectoryOrCreate name: usr-local-share-ca-certificates - hostPath: path: /usr/share/ca-certificates type: DirectoryOrCreate name: usr-share-ca-certificates status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:06Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:06Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:18Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:18Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:06Z" status: "True" type: PodScheduled containerStatuses: - containerID: containerd://7c2f1585a52b8e48d432dc9456efd4085e5a5e4844f50499cb0f08d209008c0a image: registry.k8s.io/kube-controller-manager-arm64:v1.30.0 imageID: docker.io/library/import-2024-05-13@sha256:66851d132bc433174ca3ded1bccbfe461cb7766bfd941f956224eafc2c8ec39f lastState: {} name: kube-controller-manager ready: true restartCount: 0 started: true state: running: startedAt: "2026-06-09T13:14:02Z" hostIP: 172.20.0.2 hostIPs: - ip: 172.20.0.2 phase: Running podIP: 172.20.0.2 podIPs: - ip: 172.20.0.2 qosClass: Burstable startTime: "2026-06-09T13:14:06Z" - apiVersion: v1 kind: Pod metadata: creationTimestamp: "2026-06-09T13:14:20Z" generateName: kube-proxy- labels: controller-revision-hash: 79cf874c65 k8s-app: kube-proxy pod-template-generation: "1" name: kube-proxy-kjglz namespace: kube-system ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: DaemonSet name: kube-proxy uid: 616333d7-14fa-45f1-96b7-190f9bdc5b20 resourceVersion: "428" uid: 1cae606e-1bd5-4f30-991b-47e233dd53d4 spec: affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchFields: - key: metadata.name operator: In values: - chart-test-swarm-run-34-control-plane containers: - command: - /usr/local/bin/kube-proxy - --config=/var/lib/kube-proxy/config.conf - --hostname-override=$(NODE_NAME) env: - name: NODE_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: spec.nodeName image: registry.k8s.io/kube-proxy:v1.30.0 imagePullPolicy: IfNotPresent name: kube-proxy resources: {} securityContext: privileged: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /var/lib/kube-proxy name: kube-proxy - mountPath: /run/xtables.lock name: xtables-lock - mountPath: /lib/modules name: lib-modules readOnly: true - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-mpzng readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true hostNetwork: true nodeName: chart-test-swarm-run-34-control-plane nodeSelector: kubernetes.io/os: linux preemptionPolicy: PreemptLowerPriority priority: 2000001000 priorityClassName: system-node-critical restartPolicy: Always schedulerName: default-scheduler securityContext: {} serviceAccount: kube-proxy serviceAccountName: kube-proxy terminationGracePeriodSeconds: 30 tolerations: - operator: Exists - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists - effect: NoSchedule key: node.kubernetes.io/disk-pressure operator: Exists - effect: NoSchedule key: node.kubernetes.io/memory-pressure operator: Exists - effect: NoSchedule key: node.kubernetes.io/pid-pressure operator: Exists - effect: NoSchedule key: node.kubernetes.io/unschedulable operator: Exists - effect: NoSchedule key: node.kubernetes.io/network-unavailable operator: Exists volumes: - configMap: defaultMode: 420 name: kube-proxy name: kube-proxy - hostPath: path: /run/xtables.lock type: FileOrCreate name: xtables-lock - hostPath: path: /lib/modules type: "" name: lib-modules - name: kube-api-access-mpzng projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:21Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:20Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:21Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:21Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:20Z" status: "True" type: PodScheduled containerStatuses: - containerID: containerd://25c7186248228f95f95fed00a84445062d49ec106fb2d5afba17fff7eb8fe527 image: registry.k8s.io/kube-proxy-arm64:v1.30.0 imageID: docker.io/library/import-2024-05-13@sha256:b7267730b5d235ec9500112663c8b244e2d09f0d9f92f1c6bb5caadf73d7a90c lastState: {} name: kube-proxy ready: true restartCount: 0 started: true state: running: startedAt: "2026-06-09T13:14:21Z" hostIP: 172.20.0.2 hostIPs: - ip: 172.20.0.2 phase: Running podIP: 172.20.0.2 podIPs: - ip: 172.20.0.2 qosClass: BestEffort startTime: "2026-06-09T13:14:20Z" - apiVersion: v1 kind: Pod metadata: annotations: kubernetes.io/config.hash: e6ec3dffdd87a73a987a62deb499b94d kubernetes.io/config.mirror: e6ec3dffdd87a73a987a62deb499b94d kubernetes.io/config.seen: "2026-06-09T13:14:06.520465089Z" kubernetes.io/config.source: file creationTimestamp: "2026-06-09T13:14:06Z" labels: component: kube-scheduler tier: control-plane name: kube-scheduler-chart-test-swarm-run-34-control-plane namespace: kube-system ownerReferences: - apiVersion: v1 controller: true kind: Node name: chart-test-swarm-run-34-control-plane uid: ee414650-9363-486f-8baa-dfd14c5c7335 resourceVersion: "327" uid: d680ba56-5bfc-4e20-85a9-508c8db8c3a6 spec: containers: - command: - kube-scheduler - --authentication-kubeconfig=/etc/kubernetes/scheduler.conf - --authorization-kubeconfig=/etc/kubernetes/scheduler.conf - --bind-address=127.0.0.1 - --kubeconfig=/etc/kubernetes/scheduler.conf - --leader-elect=true image: registry.k8s.io/kube-scheduler:v1.30.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 8 httpGet: host: 127.0.0.1 path: /healthz port: 10259 scheme: HTTPS initialDelaySeconds: 10 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 15 name: kube-scheduler resources: requests: cpu: 100m startupProbe: failureThreshold: 24 httpGet: host: 127.0.0.1 path: /healthz port: 10259 scheme: HTTPS initialDelaySeconds: 10 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 15 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/kubernetes/scheduler.conf name: kubeconfig readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true hostNetwork: true nodeName: chart-test-swarm-run-34-control-plane preemptionPolicy: PreemptLowerPriority priority: 2000001000 priorityClassName: system-node-critical restartPolicy: Always schedulerName: default-scheduler securityContext: seccompProfile: type: RuntimeDefault terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute operator: Exists volumes: - hostPath: path: /etc/kubernetes/scheduler.conf type: FileOrCreate name: kubeconfig status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:06Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:06Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:15Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:15Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-09T13:14:06Z" status: "True" type: PodScheduled containerStatuses: - containerID: containerd://2d759bccdb1b72bf553d0fe057feb02e12274e478fc7060f6e9b335ec1a256ba image: registry.k8s.io/kube-scheduler-arm64:v1.30.0 imageID: docker.io/library/import-2024-05-13@sha256:45c561194466a77e2ad957a3ead7e40af710be745eab60aa556e670cc526e1e9 lastState: {} name: kube-scheduler ready: true restartCount: 0 started: true state: running: startedAt: "2026-06-09T13:14:02Z" hostIP: 172.20.0.2 hostIPs: - ip: 172.20.0.2 phase: Running podIP: 172.20.0.2 podIPs: - ip: 172.20.0.2 qosClass: Burstable startTime: "2026-06-09T13:14:06Z" - apiVersion: v1 kind: Service metadata: annotations: prometheus.io/port: "9153" prometheus.io/scrape: "true" creationTimestamp: "2026-06-09T13:14:06Z" labels: k8s-app: kube-dns kubernetes.io/cluster-service: "true" kubernetes.io/name: CoreDNS name: kube-dns namespace: kube-system resourceVersion: "283" uid: d38f46b6-b50f-453e-89bc-16ae5c8935b7 spec: clusterIP: 10.96.0.10 clusterIPs: - 10.96.0.10 internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: dns port: 53 protocol: UDP targetPort: 53 - name: dns-tcp port: 53 protocol: TCP targetPort: 53 - name: metrics port: 9153 protocol: TCP targetPort: 9153 selector: k8s-app: kube-dns sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: apps/v1 kind: DaemonSet metadata: annotations: deprecated.daemonset.template.generation: "1" meta.helm.sh/release-name: csi-secrets-store meta.helm.sh/release-namespace: kube-system creationTimestamp: "2026-06-09T13:14:32Z" generation: 1 labels: app: secrets-store-csi-driver app.kubernetes.io/instance: csi-secrets-store app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: secrets-store-csi-driver app.kubernetes.io/version: 1.4.8 helm.sh/chart: secrets-store-csi-driver-1.4.8 name: csi-secrets-store-secrets-store-csi-driver namespace: kube-system resourceVersion: "584" uid: 827392ec-5f11-41b3-89b7-02b376d43f70 spec: revisionHistoryLimit: 10 selector: matchLabels: app: secrets-store-csi-driver template: metadata: annotations: kubectl.kubernetes.io/default-container: secrets-store creationTimestamp: null labels: app: secrets-store-csi-driver app.kubernetes.io/instance: csi-secrets-store app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: secrets-store-csi-driver app.kubernetes.io/version: 1.4.8 helm.sh/chart: secrets-store-csi-driver-1.4.8 spec: affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchExpressions: - key: type operator: NotIn values: - virtual-kubelet containers: - args: - --v=5 - --csi-address=/csi/csi.sock - --kubelet-registration-path=/var/lib/kubelet/plugins/csi-secrets-store/csi.sock image: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.11.1 imagePullPolicy: IfNotPresent name: node-driver-registrar resources: limits: cpu: 100m memory: 100Mi requests: cpu: 10m memory: 20Mi terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /csi name: plugin-dir - mountPath: /registration name: registration-dir - args: - --endpoint=$(CSI_ENDPOINT) - --nodeid=$(KUBE_NODE_NAME) - --provider-volume=/var/run/secrets-store-csi-providers - --additional-provider-volume-paths=/etc/kubernetes/secrets-store-csi-providers - --metrics-addr=:8095 - --provider-health-check-interval=2m - --max-call-recv-msg-size=4194304 env: - name: CSI_ENDPOINT value: unix:///csi/csi.sock - name: KUBE_NODE_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: spec.nodeName image: registry.k8s.io/csi-secrets-store/driver:v1.4.8 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 httpGet: path: /healthz port: healthz scheme: HTTP initialDelaySeconds: 30 periodSeconds: 15 successThreshold: 1 timeoutSeconds: 10 name: secrets-store ports: - containerPort: 9808 name: healthz protocol: TCP - containerPort: 8095 name: metrics protocol: TCP resources: limits: cpu: 200m memory: 200Mi requests: cpu: 50m memory: 100Mi securityContext: privileged: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /csi name: plugin-dir - mountPath: /var/lib/kubelet/pods mountPropagation: Bidirectional name: mountpoint-dir - mountPath: /var/run/secrets-store-csi-providers name: providers-dir - mountPath: /etc/kubernetes/secrets-store-csi-providers name: providers-dir-0 - args: - --csi-address=/csi/csi.sock - --probe-timeout=3s - --http-endpoint=0.0.0.0:9808 - -v=2 image: registry.k8s.io/sig-storage/livenessprobe:v2.13.1 imagePullPolicy: IfNotPresent name: liveness-probe resources: limits: cpu: 100m memory: 100Mi requests: cpu: 10m memory: 20Mi terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /csi name: plugin-dir dnsPolicy: ClusterFirst nodeSelector: kubernetes.io/os: linux restartPolicy: Always schedulerName: default-scheduler securityContext: {} serviceAccount: secrets-store-csi-driver serviceAccountName: secrets-store-csi-driver terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: - hostPath: path: /var/lib/kubelet/pods type: DirectoryOrCreate name: mountpoint-dir - hostPath: path: /var/lib/kubelet/plugins_registry/ type: Directory name: registration-dir - hostPath: path: /var/lib/kubelet/plugins/csi-secrets-store/ type: DirectoryOrCreate name: plugin-dir - hostPath: path: /var/run/secrets-store-csi-providers type: DirectoryOrCreate name: providers-dir - hostPath: path: /etc/kubernetes/secrets-store-csi-providers type: DirectoryOrCreate name: providers-dir-0 updateStrategy: rollingUpdate: maxSurge: 0 maxUnavailable: 1 type: RollingUpdate status: currentNumberScheduled: 1 desiredNumberScheduled: 1 numberAvailable: 1 numberMisscheduled: 0 numberReady: 1 observedGeneration: 1 updatedNumberScheduled: 1 - apiVersion: apps/v1 kind: DaemonSet metadata: annotations: deprecated.daemonset.template.generation: "1" creationTimestamp: "2026-06-09T13:14:07Z" generation: 1 labels: app: kindnet k8s-app: kindnet tier: node name: kindnet namespace: kube-system resourceVersion: "449" uid: c9359da4-bc6a-41e6-abaf-6aa3775aedec spec: revisionHistoryLimit: 10 selector: matchLabels: app: kindnet template: metadata: creationTimestamp: null labels: app: kindnet k8s-app: kindnet tier: node spec: containers: - env: - name: HOST_IP valueFrom: fieldRef: apiVersion: v1 fieldPath: status.hostIP - name: POD_IP valueFrom: fieldRef: apiVersion: v1 fieldPath: status.podIP - name: POD_SUBNET value: 10.244.0.0/16 - name: CONTROL_PLANE_ENDPOINT value: chart-test-swarm-run-34-control-plane:6443 image: docker.io/kindest/kindnetd:v20240202-8f1494ea imagePullPolicy: IfNotPresent name: kindnet-cni resources: limits: cpu: 100m memory: 50Mi requests: cpu: 100m memory: 50Mi securityContext: capabilities: add: - NET_RAW - NET_ADMIN privileged: false terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/cni/net.d name: cni-cfg - mountPath: /run/xtables.lock name: xtables-lock - mountPath: /lib/modules name: lib-modules readOnly: true dnsPolicy: ClusterFirst hostNetwork: true nodeSelector: kubernetes.io/os: linux restartPolicy: Always schedulerName: default-scheduler securityContext: {} serviceAccount: kindnet serviceAccountName: kindnet terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: - hostPath: path: /etc/cni/net.d type: "" name: cni-cfg - hostPath: path: /run/xtables.lock type: FileOrCreate name: xtables-lock - hostPath: path: /lib/modules type: "" name: lib-modules updateStrategy: rollingUpdate: maxSurge: 0 maxUnavailable: 1 type: RollingUpdate status: currentNumberScheduled: 1 desiredNumberScheduled: 1 numberAvailable: 1 numberMisscheduled: 0 numberReady: 1 observedGeneration: 1 updatedNumberScheduled: 1 - apiVersion: apps/v1 kind: DaemonSet metadata: annotations: deprecated.daemonset.template.generation: "1" creationTimestamp: "2026-06-09T13:14:06Z" generation: 1 labels: k8s-app: kube-proxy name: kube-proxy namespace: kube-system resourceVersion: "429" uid: 616333d7-14fa-45f1-96b7-190f9bdc5b20 spec: revisionHistoryLimit: 10 selector: matchLabels: k8s-app: kube-proxy template: metadata: creationTimestamp: null labels: k8s-app: kube-proxy spec: containers: - command: - /usr/local/bin/kube-proxy - --config=/var/lib/kube-proxy/config.conf - --hostname-override=$(NODE_NAME) env: - name: NODE_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: spec.nodeName image: registry.k8s.io/kube-proxy:v1.30.0 imagePullPolicy: IfNotPresent name: kube-proxy resources: {} securityContext: privileged: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /var/lib/kube-proxy name: kube-proxy - mountPath: /run/xtables.lock name: xtables-lock - mountPath: /lib/modules name: lib-modules readOnly: true dnsPolicy: ClusterFirst hostNetwork: true nodeSelector: kubernetes.io/os: linux priorityClassName: system-node-critical restartPolicy: Always schedulerName: default-scheduler securityContext: {} serviceAccount: kube-proxy serviceAccountName: kube-proxy terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: - configMap: defaultMode: 420 name: kube-proxy name: kube-proxy - hostPath: path: /run/xtables.lock type: FileOrCreate name: xtables-lock - hostPath: path: /lib/modules type: "" name: lib-modules updateStrategy: rollingUpdate: maxSurge: 0 maxUnavailable: 1 type: RollingUpdate status: currentNumberScheduled: 1 desiredNumberScheduled: 1 numberAvailable: 1 numberMisscheduled: 0 numberReady: 1 observedGeneration: 1 updatedNumberScheduled: 1 - apiVersion: apps/v1 kind: Deployment metadata: annotations: deployment.kubernetes.io/revision: "1" creationTimestamp: "2026-06-09T13:14:06Z" generation: 1 labels: k8s-app: kube-dns name: coredns namespace: kube-system resourceVersion: "487" uid: 0674f599-8d55-4953-b9f3-56c146c1437c spec: progressDeadlineSeconds: 600 replicas: 2 revisionHistoryLimit: 10 selector: matchLabels: k8s-app: kube-dns strategy: rollingUpdate: maxSurge: 25% maxUnavailable: 1 type: RollingUpdate template: metadata: creationTimestamp: null labels: k8s-app: kube-dns spec: affinity: podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - key: k8s-app operator: In values: - kube-dns topologyKey: kubernetes.io/hostname weight: 100 containers: - args: - -conf - /etc/coredns/Corefile image: registry.k8s.io/coredns/coredns:v1.11.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 httpGet: path: /health port: 8080 scheme: HTTP initialDelaySeconds: 60 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 name: coredns ports: - containerPort: 53 name: dns protocol: UDP - containerPort: 53 name: dns-tcp protocol: TCP - containerPort: 9153 name: metrics protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /ready port: 8181 scheme: HTTP periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: limits: memory: 170Mi requests: cpu: 100m memory: 70Mi securityContext: allowPrivilegeEscalation: false capabilities: add: - NET_BIND_SERVICE drop: - ALL readOnlyRootFilesystem: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/coredns name: config-volume readOnly: true dnsPolicy: Default nodeSelector: kubernetes.io/os: linux priorityClassName: system-cluster-critical restartPolicy: Always schedulerName: default-scheduler securityContext: {} serviceAccount: coredns serviceAccountName: coredns terminationGracePeriodSeconds: 30 tolerations: - key: CriticalAddonsOnly operator: Exists - effect: NoSchedule key: node-role.kubernetes.io/control-plane volumes: - configMap: defaultMode: 420 items: - key: Corefile path: Corefile name: coredns name: config-volume status: availableReplicas: 2 conditions: - lastTransitionTime: "2026-06-09T13:14:23Z" lastUpdateTime: "2026-06-09T13:14:23Z" message: Deployment has minimum availability. reason: MinimumReplicasAvailable status: "True" type: Available - lastTransitionTime: "2026-06-09T13:14:20Z" lastUpdateTime: "2026-06-09T13:14:23Z" message: ReplicaSet "coredns-7db6d8ff4d" has successfully progressed. reason: NewReplicaSetAvailable status: "True" type: Progressing observedGeneration: 1 readyReplicas: 2 replicas: 2 updatedReplicas: 2 - apiVersion: apps/v1 kind: ReplicaSet metadata: annotations: deployment.kubernetes.io/desired-replicas: "2" deployment.kubernetes.io/max-replicas: "3" deployment.kubernetes.io/revision: "1" creationTimestamp: "2026-06-09T13:14:20Z" generation: 1 labels: k8s-app: kube-dns pod-template-hash: 7db6d8ff4d name: coredns-7db6d8ff4d namespace: kube-system ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: Deployment name: coredns uid: 0674f599-8d55-4953-b9f3-56c146c1437c resourceVersion: "486" uid: d4b50eeb-d810-48d8-8d61-09a1e342683f spec: replicas: 2 selector: matchLabels: k8s-app: kube-dns pod-template-hash: 7db6d8ff4d template: metadata: creationTimestamp: null labels: k8s-app: kube-dns pod-template-hash: 7db6d8ff4d spec: affinity: podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchExpressions: - key: k8s-app operator: In values: - kube-dns topologyKey: kubernetes.io/hostname weight: 100 containers: - args: - -conf - /etc/coredns/Corefile image: registry.k8s.io/coredns/coredns:v1.11.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 httpGet: path: /health port: 8080 scheme: HTTP initialDelaySeconds: 60 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 name: coredns ports: - containerPort: 53 name: dns protocol: UDP - containerPort: 53 name: dns-tcp protocol: TCP - containerPort: 9153 name: metrics protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /ready port: 8181 scheme: HTTP periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: limits: memory: 170Mi requests: cpu: 100m memory: 70Mi securityContext: allowPrivilegeEscalation: false capabilities: add: - NET_BIND_SERVICE drop: - ALL readOnlyRootFilesystem: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/coredns name: config-volume readOnly: true dnsPolicy: Default nodeSelector: kubernetes.io/os: linux priorityClassName: system-cluster-critical restartPolicy: Always schedulerName: default-scheduler securityContext: {} serviceAccount: coredns serviceAccountName: coredns terminationGracePeriodSeconds: 30 tolerations: - key: CriticalAddonsOnly operator: Exists - effect: NoSchedule key: node-role.kubernetes.io/control-plane volumes: - configMap: defaultMode: 420 items: - key: Corefile path: Corefile name: coredns name: config-volume status: availableReplicas: 2 fullyLabeledReplicas: 2 observedGeneration: 1 readyReplicas: 2 replicas: 2 kind: List metadata: resourceVersion: ""