Skip to content
fzymgc-house Cluster Docs

Label Snapshot for cilium-cnp-redesign — 2026-05-13

Frozen reference for selectors used in the cilium-cnp-redesign plan (2026-05-13-cilium-cnp-redesign.md). All endpointSelector matchLabels in the new CiliumNetworkPolicies MUST match labels present in this snapshot. If the live cluster’s pod labels diverge from this snapshot at apply time, STOP and re-snapshot before proceeding.

=== external-secrets ===
NAME                                                         READY   STATUS    RESTARTS   AGE   LABELS
external-secrets-operator-bb4565485-dnk77                    1/1     Running   0          40m   app.kubernetes.io/instance=external-secrets-operator,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=external-secrets,app.kubernetes.io/version=v1.1.1,helm.sh/chart=external-secrets-1.1.1,pod-template-hash=bb4565485
external-secrets-operator-cert-controller-679779dd55-vtwww   1/1     Running   0          12h   app.kubernetes.io/instance=external-secrets-operator,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=external-secrets-cert-controller,app.kubernetes.io/version=v1.1.1,helm.sh/chart=external-secrets-1.1.1,pod-template-hash=679779dd55
external-secrets-operator-webhook-6df6964d99-6ch56           1/1     Running   0          12h   app.kubernetes.io/instance=external-secrets-operator,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=external-secrets-webhook,app.kubernetes.io/version=v1.1.1,helm.sh/chart=external-secrets-1.1.1,pod-template-hash=6df6964d99


=== cert-manager ===
NAME                                       READY   STATUS    RESTARTS   AGE   LABELS
cert-manager-76ffff6d56-dcvsb              1/1     Running   0          13h   app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.1,app=cert-manager,helm.sh/chart=cert-manager-v1.19.1,pod-template-hash=76ffff6d56
cert-manager-76ffff6d56-w8tfg              1/1     Running   0          12h   app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=cert-manager,app.kubernetes.io/version=v1.19.1,app=cert-manager,helm.sh/chart=cert-manager-v1.19.1,pod-template-hash=76ffff6d56
cert-manager-cainjector-6648dd7598-5rzzc   1/1     Running   0          12h   app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.1,app=cainjector,helm.sh/chart=cert-manager-v1.19.1,pod-template-hash=6648dd7598
cert-manager-cainjector-6648dd7598-b2kjh   1/1     Running   0          13h   app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=cainjector,app.kubernetes.io/version=v1.19.1,app=cainjector,helm.sh/chart=cert-manager-v1.19.1,pod-template-hash=6648dd7598
cert-manager-webhook-57bb5d5c45-d9jk7      1/1     Running   0          13h   app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.1,app=webhook,helm.sh/chart=cert-manager-v1.19.1,pod-template-hash=57bb5d5c45
cert-manager-webhook-57bb5d5c45-pgpkc      1/1     Running   0          12h   app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/managed-by=Helm,app.kubernetes.io/name=webhook,app.kubernetes.io/version=v1.19.1,app=webhook,helm.sh/chart=cert-manager-v1.19.1,pod-template-hash=57bb5d5c45


=== vault ===
NAME                                    READY   STATUS    RESTARTS      AGE   LABELS
vault-0                                 1/1     Running   0             12h   app.kubernetes.io/instance=vault,app.kubernetes.io/name=vault,apps.kubernetes.io/pod-index=0,component=server,controller-revision-hash=vault-79b8c8d78b,helm.sh/chart=vault-0.31.0,statefulset.kubernetes.io/pod-name=vault-0,vault-active=false,vault-initialized=true,vault-perf-standby=false,vault-sealed=false,vault-version=1.20.4
vault-1                                 1/1     Running   1 (12h ago)   22h   app.kubernetes.io/instance=vault,app.kubernetes.io/name=vault,apps.kubernetes.io/pod-index=1,component=server,controller-revision-hash=vault-79b8c8d78b,helm.sh/chart=vault-0.31.0,statefulset.kubernetes.io/pod-name=vault-1,vault-active=true,vault-initialized=true,vault-perf-standby=false,vault-sealed=false,vault-version=1.20.4
vault-2                                 1/1     Running   1 (12h ago)   13h   app.kubernetes.io/instance=vault,app.kubernetes.io/name=vault,apps.kubernetes.io/pod-index=2,component=server,controller-revision-hash=vault-79b8c8d78b,helm.sh/chart=vault-0.31.0,statefulset.kubernetes.io/pod-name=vault-2,vault-active=false,vault-initialized=true,vault-perf-standby=false,vault-sealed=false,vault-version=1.20.4
vault-agent-injector-79dd974dbc-qfttc   1/1     Running   0             12h   app.kubernetes.io/instance=vault,app.kubernetes.io/name=vault-agent-injector,component=webhook,pod-template-hash=79dd974dbc


Snapshot taken: 2026-05-13T01:20:23Z