Name: envoy-gateway-gateway-helm-certgen-fzvh6 Namespace: envoy-gateway-system Priority: 0 Service Account: envoy-gateway-gateway-helm-certgen Node: instance/162.253.55.183 Start Time: Thu, 27 Aug 2026 00:32:08 +0000 Labels: app=certgen batch.kubernetes.io/controller-uid=cb1f056c-c485-4747-af3c-16f7713f07a8 batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen controller-uid=cb1f056c-c485-4747-af3c-16f7713f07a8 job-name=envoy-gateway-gateway-helm-certgen Annotations: Status: Pending IP: 10.0.0.141 IPs: IP: 10.0.0.141 Controlled By: Job/envoy-gateway-gateway-helm-certgen Containers: envoy-gateway-certgen: Container ID: Image: docker.io/envoyproxy/gateway:v1.7.0 Image ID: Port: Host Port: SeccompProfile: RuntimeDefault Command: envoy-gateway certgen State: Waiting Reason: ErrImagePull Ready: False Restart Count: 0 Environment: ENVOY_GATEWAY_NAMESPACE: envoy-gateway-system (v1:metadata.namespace) KUBERNETES_CLUSTER_DOMAIN: cluster.local Mounts: /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-295cx (ro) Conditions: Type Status Initialized True Ready False ContainersReady False PodScheduled True Volumes: kube-api-access-295cx: Type: Projected (a volume that contains injected data from multiple sources) TokenExpirationSeconds: 3607 ConfigMapName: kube-root-ca.crt ConfigMapOptional: DownwardAPI: true QoS Class: BestEffort Node-Selectors: Tolerations: node.kubernetes.io/not-ready:NoExecute op=Exists for 300s node.kubernetes.io/unreachable:NoExecute op=Exists for 300s Events: Type Reason Age From Message ---- ------ ---- ---- ------- Warning FailedScheduling 5m22s default-scheduler 0/1 nodes are available: 1 node(s) had untolerated taint {node.kubernetes.io/not-ready: }. preemption: 0/1 nodes are available: 1 Preemption is not helpful for scheduling.. Normal Scheduled 3m38s default-scheduler Successfully assigned envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fzvh6 to instance Warning Failed 2m47s kubelet Failed to pull image "docker.io/envoyproxy/gateway:v1.7.0": rpc error: code = DeadlineExceeded desc = failed to pull and unpack image "docker.io/envoyproxy/gateway:v1.7.0": failed to copy: httpReadSeeker: failed open: failed to authorize: failed to fetch anonymous token: Get "https://auth.docker.io/token?scope=%5BREDACTED%5D&service=%5BREDACTED%5D": dial tcp [2a06:98c1:3104::6812:2bb2]:443: i/o timeout Warning Failed 85s kubelet Failed to pull image "docker.io/envoyproxy/gateway:v1.7.0": failed to pull and unpack image "docker.io/envoyproxy/gateway:v1.7.0": failed to resolve image: failed to do request: Head "https://registry-1.docker.io/v2/envoyproxy/gateway/manifests/v1.7.0": dial tcp: lookup registry-1.docker.io on 127.0.0.53:53: server misbehaving Normal Pulling 40s (x4 over 3m38s) kubelet Pulling image "docker.io/envoyproxy/gateway:v1.7.0" Warning Failed 18s (x4 over 2m47s) kubelet Error: ErrImagePull Warning Failed 18s (x2 over 2m3s) kubelet Failed to pull image "docker.io/envoyproxy/gateway:v1.7.0": failed to pull and unpack image "docker.io/envoyproxy/gateway:v1.7.0": failed to copy: httpReadSeeker: failed open: failed to do request: Get "https://registry-1.docker.io/v2/envoyproxy/gateway/manifests/sha256:66bfa45b557aeb086223064261d51dfb983fe962f35f821f8135e67e1b1a981f": dial tcp: lookup registry-1.docker.io on 127.0.0.53:53: server misbehaving Normal BackOff 6s (x5 over 2m46s) kubelet Back-off pulling image "docker.io/envoyproxy/gateway:v1.7.0" Warning Failed 6s (x5 over 2m46s) kubelet Error: ImagePullBackOff