kubectl describe pod -n aqua aqua-enforcer-ds-q95r4                                                                                                                                                                                                                                                                       
Name:             aqua-enforcer-ds-q95r4
Namespace:        aqua
Priority:         0
Service Account:  aqua-enforcer-sa
Node:             ip-10-0-120-213.us-west-2.compute.internal/10.0.120.213
Start Time:       Thu, 14 Mar 2024 17:32:36 +0000
Labels:           app=aqua-enforcer-ds
                  app.kubernetes.io/instance=aqua-enforcer
                  app.kubernetes.io/managed-by=Helm
                  app.kubernetes.io/name=enforcer
                  app.kubernetes.io/version=2022.4
                  aqua.component=enforcer
                  controller-revision-hash=5575f5d885
                  helm.sh/chart=enforcer-2022.4.20
                  pod-template-generation=1
Annotations:      checksum/config: 29dc5284eedf0b1302e8ece8d3baafcacfc6e30ca84b5a97c467ad937f9a166e
                  container.apparmor.security.beta.kubernetes.io/enforcer: unconfined
                  kubearmor-policy: enabled
                  kubearmor-visibility: process,file,network,capabilities
Status:           Running
IP:               10.0.124.5
IPs:
  IP:           10.0.124.5
Controlled By:  DaemonSet/aqua-enforcer-ds
Containers:
  enforcer:
    Container ID:   containerd://d8115a39dff6999463671c366465ec80ef5fd396b0d623a6d07753955e6a8a59
    Image:          registry.aquasec.com/enforcer:2022.4.460
    Image ID:       registry.aquasec.com/enforcer@sha256:c7ec3c28b05f2580cc488e2223c455d86c8c97ab64a5648a39544d09a886f3d7
    Port:           <none>
    Host Port:      <none>
    State:          Running
      Started:      Thu, 14 Mar 2024 17:32:37 +0000
    Ready:          True
    Restart Count:  0
    Liveness:       http-get http://:8096/healthz delay=60s timeout=1s period=30s #success=1 #failure=3
    Readiness:      http-get http://:8096/readinessz delay=60s timeout=1s period=30s #success=1 #failure=3
    Environment Variables from:
      aqua-enforcer-enforcer-config  ConfigMap  Optional: false
    Environment:
      AQUA_NODE_NAME:      (v1:spec.nodeName)
      AQUA_LOGICAL_NAME:   (v1:spec.nodeName)
      AQUA_TOKEN:         <set to the key 'token' in secret 'aqua-enforcer-agent-token'>  Optional: false
    Mounts:
      /data from aquasec-data (rw)
      /dev from dev (rw)
      /host/etc from etc (ro)
      /host/opt/aquasec from aquasec (ro)
      /host/proc from proc (ro)
      /host/sys from sys (ro)
      /opt/aquasec/audit from aquasec-audit (rw)
      /opt/aquasec/tmp from aquasec-tmp (rw)
      /var/lib/containers from containers (rw)
      /var/run from var-run (rw)
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-d2bbn (ro)
Conditions:
  Type              Status
  Initialized       True 
  Ready             True 
  ContainersReady   True 
  PodScheduled      True 
Volumes:
  var-run:
    Type:          HostPath (bare host directory volume)
    Path:          /var/run
    HostPathType:  
  dev:
    Type:          HostPath (bare host directory volume)
    Path:          /dev
    HostPathType:  
  sys:
    Type:          HostPath (bare host directory volume)
    Path:          /sys
    HostPathType:  
  proc:
    Type:          HostPath (bare host directory volume)
    Path:          /proc
    HostPathType:  
  etc:
    Type:          HostPath (bare host directory volume)
    Path:          /etc
    HostPathType:  
  aquasec:
    Type:          HostPath (bare host directory volume)
    Path:          /var/lib/aquasec
    HostPathType:  
  aquasec-tmp:
    Type:          HostPath (bare host directory volume)
    Path:          /var/lib/aquasec/tmp
    HostPathType:  
  aquasec-audit:
    Type:          HostPath (bare host directory volume)
    Path:          /var/lib/aquasec/audit
    HostPathType:  
  aquasec-data:
    Type:          HostPath (bare host directory volume)
    Path:          /var/lib/aquasec/data
    HostPathType:  
  containers:
    Type:          HostPath (bare host directory volume)
    Path:          /var/lib/containers
    HostPathType:  
  kube-api-access-d2bbn:
    Type:                    Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:  3607
    ConfigMapName:           kube-root-ca.crt
    ConfigMapOptional:       <nil>
    DownwardAPI:             true
QoS Class:                   BestEffort
Node-Selectors:              <none>
Tolerations:                 node.kubernetes.io/disk-pressure:NoSchedule op=Exists
                             node.kubernetes.io/memory-pressure:NoSchedule op=Exists
                             node.kubernetes.io/not-ready:NoExecute op=Exists
                             node.kubernetes.io/pid-pressure:NoSchedule op=Exists
                             node.kubernetes.io/unreachable:NoExecute op=Exists
                             node.kubernetes.io/unschedulable:NoSchedule op=Exists
Events:
  Type    Reason     Age   From               Message
  ----    ------     ----  ----               -------
  Normal  Scheduled  12m   default-scheduler  Successfully assigned aqua/aqua-enforcer-ds-q95r4 to ip-10-0-120-213.us-west-2.compute.internal
  Normal  Pulling    12m   kubelet            Pulling image "registry.aquasec.com/enforcer:2022.4.460"
  Normal  Pulled     12m   kubelet            Successfully pulled image "registry.aquasec.com/enforcer:2022.4.460" in 453ms (453ms including waiting)
  Normal  Created    12m   kubelet            Created container enforcer
  Normal  Started    12m   kubelet            Started container enforcer