{ "apiVersion": "v1", "items": [ { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "monitoring-registry-in-cluster-local:apps/DaemonSet:appstudio-registry-exporter/registry-exporter-ds", "deprecated.daemonset.template.generation": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"monitoring-registry-in-cluster-local:apps/DaemonSet:appstudio-registry-exporter/registry-exporter-ds\"},\"name\":\"registry-exporter-ds\",\"namespace\":\"appstudio-registry-exporter\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"registry-exporter\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"registry-exporter\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"konflux-ci.dev/workload\",\"operator\":\"In\",\"values\":[\"konflux-tenants\",\"konflux-services\"]}]}]}}},\"containers\":[{\"args\":[\"registryexporter\"],\"env\":[{\"name\":\"QUAY_URL\",\"value\":\"quay.io/redhat-user-workloads-stage/appstudio-registry-exporter/appstudio-registry-exporter\"},{\"name\":\"DOCKER_CONFIG\",\"value\":\"/.docker/\"},{\"name\":\"NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}}],\"image\":\"quay.io/redhat-appstudio/o11y:65494bbfb32c1dbaa93167c1b99c4957a9a898f2\",\"name\":\"exporters\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true},\"volumeMounts\":[{\"mountPath\":\"/.docker/config.json\",\"name\":\"quay-auth\",\"subPath\":\".dockerconfigjson\"},{\"mountPath\":\"/mnt/storage\",\"name\":\"container-storage\"}]},{\"args\":[\"--secure-listen-address=0.0.0.0:8443\",\"--upstream=http://127.0.0.1:9101/\",\"--logtostderr=true\",\"--v=10\"],\"image\":\"quay.io/brancz/kube-rbac-proxy:v0.14.0\",\"name\":\"kube-rbac-proxy-registry\",\"ports\":[{\"containerPort\":8443,\"name\":\"https\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"64Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true}}],\"serviceAccountName\":\"exporter-sa\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"key\":\"konflux-ci.dev/workload\",\"operator\":\"Equal\",\"value\":\"konflux-tenants\"}],\"volumes\":[{\"emptyDir\":{},\"name\":\"container-storage\"},{\"name\":\"quay-auth\",\"secret\":{\"secretName\":\"appstudio-registry-exporter-image-push\"}}]}}}}\n" }, "creationTimestamp": "2026-05-12T21:20:58Z", "generation": 1, "name": "registry-exporter-ds", "namespace": "appstudio-registry-exporter", "resourceVersion": "27694", "uid": "5021889a-55a0-41a9-b613-11a6e74948ee" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "registry-exporter" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "registry-exporter" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "konflux-ci.dev/workload", "operator": "In", "values": [ "konflux-tenants", "konflux-services" ] } ] } ] } } }, "containers": [ { "args": [ "registryexporter" ], "env": [ { "name": "QUAY_URL", "value": "quay.io/redhat-user-workloads-stage/appstudio-registry-exporter/appstudio-registry-exporter" }, { "name": "DOCKER_CONFIG", "value": "/.docker/" }, { "name": "NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/redhat-appstudio/o11y:65494bbfb32c1dbaa93167c1b99c4957a9a898f2", "imagePullPolicy": "IfNotPresent", "name": "exporters", "resources": { "limits": { "cpu": "200m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/.docker/config.json", "name": "quay-auth", "subPath": ".dockerconfigjson" }, { "mountPath": "/mnt/storage", "name": "container-storage" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:8443", "--upstream=http://127.0.0.1:9101/", "--logtostderr=true", "--v=10" ], "image": "quay.io/brancz/kube-rbac-proxy:v0.14.0", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-registry", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "100m", "memory": "128Mi" }, "requests": { "cpu": "50m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "exporter-sa", "serviceAccountName": "exporter-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ], "volumes": [ { "emptyDir": {}, "name": "container-storage" }, { "name": "quay-auth", "secret": { "defaultMode": 420, "secretName": "appstudio-registry-exporter-image-push" } } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": 1 }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-05-12T20:56:59Z", "generation": 1, "labels": { "hypershift.openshift.io/managed": "true" }, "name": "konnectivity-agent", "namespace": "kube-system", "resourceVersion": "9751", "uid": "69f1dd4b-3ef4-46b9-a495-ed854ee19851" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "konnectivity-agent" } }, "template": { "metadata": { "annotations": { "hypershift.openshift.io/release-image": "quay.io/openshift-release-dev/ocp-release@sha256:dafd6d1fe6008bf1a3e5baea3420aa0344412bf3167e1e92bec5c92098dc6464" }, "creationTimestamp": null, "labels": { "app": "konnectivity-agent" } }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "--logtostderr=true", "--ca-cert", "/etc/konnectivity/ca/ca.crt", "--agent-cert", "/etc/konnectivity/agent/tls.crt", "--agent-key", "/etc/konnectivity/agent/tls.key", "--proxy-server-host", "konnectivity-server.apps.kx-44241d90c1.hypershift.local", "--proxy-server-port", "443", "--health-server-port", "2041", "--agent-identifiers=default-route=true", "--keepalive-time", "30s", "--probe-interval", "5s", "--sync-interval", "5s", "--sync-interval-cap", "30s", "--v", "3" ], "command": [ "/usr/bin/proxy-agent" ], "env": [ { "name": "HTTP_PROXY" }, { "name": "HTTPS_PROXY" }, { "name": "NO_PROXY" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:db73c8cfc081ee27ef2f13fb2a1e004307b174e60c1af45121c0284d1f2af2bb", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 6, "httpGet": { "path": "healthz", "port": 2041, "scheme": "HTTP" }, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "konnectivity-agent", "readinessProbe": { "failureThreshold": 1, "httpGet": { "path": "readyz", "port": 2041, "scheme": "HTTP" }, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "40m", "memory": "50Mi" } }, "startupProbe": { "failureThreshold": 60, "httpGet": { "path": "healthz", "port": 2041, "scheme": "HTTP" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 5 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/konnectivity/agent", "name": "agent-certs" }, { "mountPath": "/etc/konnectivity/ca", "name": "konnectivity-ca" } ] } ], "dnsPolicy": "Default", "hostNetwork": true, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsUser": 1000 }, "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "name": "agent-certs", "secret": { "defaultMode": 416, "secretName": "konnectivity-agent" } }, { "configMap": { "defaultMode": 416, "name": "konnectivity-ca-bundle" }, "name": "konnectivity-ca" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-05-12T21:24:36Z", "generation": 1, "labels": { "component": "velero", "name": "node-agent" }, "name": "node-agent", "namespace": "openshift-adp", "ownerReferences": [ { "apiVersion": "oadp.openshift.io/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "DataProtectionApplication", "name": "velero-aws", "uid": "5431ec91-ba71-4403-9b02-ecd24cf054c2" } ], "resourceVersion": "37754", "uid": "367b4049-9a9f-4b66-b4d3-27cc36bf6bed" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "component": "velero", "name": "node-agent" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "component": "velero", "name": "node-agent" } }, "spec": { "containers": [ { "args": [ "node-agent", "server" ], "command": [ "/velero" ], "env": [ { "name": "NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "VELERO_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "VELERO_SCRATCH_DIR", "value": "/scratch" } ], "image": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c1fce30641dec0001ffa3fbc50bf641e61141c1e787cdb8e0cbe78cd4c845d29", "imagePullPolicy": "IfNotPresent", "name": "node-agent", "ports": [ { "containerPort": 8085, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "500m", "memory": "128Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/host_pods", "mountPropagation": "HostToContainer", "name": "host-pods" }, { "mountPath": "/var/lib/kubelet/plugins", "mountPropagation": "HostToContainer", "name": "host-plugins" }, { "mountPath": "/scratch", "name": "scratch" }, { "mountPath": "/etc/ssl/certs", "name": "certs" }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsUser": 0 }, "serviceAccount": "velero", "serviceAccountName": "velero", "terminationGracePeriodSeconds": 30, "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/pods", "type": "" }, "name": "host-pods" }, { "hostPath": { "path": "/var/lib/kubelet/plugins", "type": "" }, "name": "host-plugins" }, { "emptyDir": {}, "name": "scratch" }, { "emptyDir": {}, "name": "certs" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": 1 }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "config.openshift.io/inject-proxy": "csi-driver", "config.openshift.io/inject-proxy-cabundle": "csi-driver", "deprecated.daemonset.template.generation": "1", "operator.openshift.io/spec-hash": "7ecf5b6e5ecf18f585dadeec6a7b75bb6b10f1db6e5630696dc3ccd0d98b77a0" }, "creationTimestamp": "2026-05-12T20:56:59Z", "generation": 1, "name": "aws-ebs-csi-driver-node", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "9506", "uid": "45234e2d-2469-4af8-a162-f847a14cdc2d" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "aws-ebs-csi-driver-node" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "openshift.io/required-scc": "privileged", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "aws-ebs-csi-driver-node" } }, "spec": { "containers": [ { "args": [ "node", "--endpoint=$(CSI_ENDPOINT)", "--logtostderr", "--v=2", "--reserved-volume-attachments=1" ], "env": [ { "name": "CSI_ENDPOINT", "value": "unix:/csi/csi.sock" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:967542857e0607674105c25151e0470aa8f8427f4b7b4598b5933ce80e79887f", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "csi-driver", "ports": [ { "containerPort": 10300, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet", "mountPropagation": "Bidirectional", "name": "kubelet-dir" }, { "mountPath": "/csi", "name": "socket-dir" }, { "mountPath": "/dev", "name": "device-dir" }, { "mountPath": "/etc/selinux", "name": "etc-selinux" }, { "mountPath": "/sys/fs", "name": "sys-fs" } ] }, { "args": [ "--csi-address=/csi/csi.sock", "--kubelet-registration-path=/var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock", "--http-endpoint=:10309", "--v=2" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5e87ba403f9e9fff3002a8275aba0d6c36aed54fb4754d90fa0516ad989f187a", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "/bin/sh", "-c", "rm -rf /registration/ebs.csi.aws.com-reg.sock /csi/csi.sock" ] } } }, "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/healthz", "port": "rhealthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "csi-node-driver-registrar", "ports": [ { "containerPort": 10309, "name": "rhealthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/csi", "name": "socket-dir" }, { "mountPath": "/registration", "name": "registration-dir" } ] }, { "args": [ "--csi-address=/csi/csi.sock", "--health-port=10300", "--v=2", "--probe-timeout=3s" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3a2c82b772ea6072e1eca0efc5303f002189e80b0e985fb3e3b8ea9a12fe8060", "imagePullPolicy": "IfNotPresent", "name": "csi-liveness-probe", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/csi", "name": "socket-dir" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "aws-ebs-csi-driver-node-sa", "serviceAccountName": "aws-ebs-csi-driver-node-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet", "type": "Directory" }, "name": "kubelet-dir" }, { "hostPath": { "path": "/var/lib/kubelet/plugins/ebs.csi.aws.com/", "type": "DirectoryOrCreate" }, "name": "socket-dir" }, { "hostPath": { "path": "/var/lib/kubelet/plugins_registry/", "type": "Directory" }, "name": "registration-dir" }, { "hostPath": { "path": "/dev", "type": "Directory" }, "name": "device-dir" }, { "hostPath": { "path": "/etc/selinux", "type": "DirectoryOrCreate" }, "name": "etc-selinux" }, { "hostPath": { "path": "/sys/fs", "type": "Directory" }, "name": "sys-fs" }, { "name": "metrics-serving-cert", "secret": { "defaultMode": 420, "secretName": "aws-ebs-csi-driver-node-metrics-serving-cert" } } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-05-12T20:57:18Z", "generation": 1, "labels": { "openshift-app": "tuned" }, "name": "tuned", "namespace": "openshift-cluster-node-tuning-operator", "ownerReferences": [ { "apiVersion": "tuned.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Tuned", "name": "default", "uid": "1e2f1624-c9dd-4404-a187-704a778038e0" } ], "resourceVersion": "9481", "uid": "b8709608-6d6e-44b3-bc6e-ffb828bfae03" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "openshift-app": "tuned" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "openshift-app": "tuned" } }, "spec": { "containers": [ { "command": [ "/usr/bin/cluster-node-tuning-operator", "ocp-tuned", "--in-cluster", "-v=0" ], "env": [ { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "OCP_NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "RESYNC_PERIOD", "value": "600" }, { "name": "RELEASE_VERSION", "value": "4.18.9" }, { "name": "CLUSTER_NODE_TUNED_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:02283a64c1936a5dd09d5c6bc0ecbcf9196fe4df6a4055c8be22cebd850aa7a3" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:02283a64c1936a5dd09d5c6bc0ecbcf9196fe4df6a4055c8be22cebd850aa7a3", "imagePullPolicy": "IfNotPresent", "name": "tuned", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/modprobe.d", "mountPropagation": "HostToContainer", "name": "etc-modprobe-d" }, { "mountPath": "/etc/sysconfig", "mountPropagation": "HostToContainer", "name": "etc-sysconfig" }, { "mountPath": "/etc/kubernetes", "mountPropagation": "HostToContainer", "name": "etc-kubernetes", "readOnly": true }, { "mountPath": "/etc/sysctl.d", "mountPropagation": "HostToContainer", "name": "etc-sysctl-d", "readOnly": true }, { "mountPath": "/etc/sysctl.conf", "mountPropagation": "HostToContainer", "name": "etc-sysctl-conf", "readOnly": true }, { "mountPath": "/etc/systemd", "mountPropagation": "HostToContainer", "name": "etc-systemd" }, { "mountPath": "/etc/tuned", "name": "etc-tuned" }, { "mountPath": "/run", "mountPropagation": "HostToContainer", "name": "run" }, { "mountPath": "/sys", "mountPropagation": "HostToContainer", "name": "sys" }, { "mountPath": "/tmp", "name": "tmp" }, { "mountPath": "/lib/modules", "mountPropagation": "HostToContainer", "name": "lib-modules", "readOnly": true }, { "mountPath": "/var/lib/kubelet", "mountPropagation": "HostToContainer", "name": "var-lib-kubelet", "readOnly": true }, { "mountPath": "/host", "mountPropagation": "HostToContainer", "name": "host" } ] } ], "dnsPolicy": "ClusterFirst", "hostIPC": true, "hostNetwork": true, "hostPID": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "tuned", "serviceAccountName": "tuned", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/modprobe.d", "type": "Directory" }, "name": "etc-modprobe-d" }, { "hostPath": { "path": "/etc/sysconfig", "type": "Directory" }, "name": "etc-sysconfig" }, { "hostPath": { "path": "/etc/kubernetes", "type": "Directory" }, "name": "etc-kubernetes" }, { "hostPath": { "path": "/etc/sysctl.d", "type": "Directory" }, "name": "etc-sysctl-d" }, { "hostPath": { "path": "/etc/sysctl.conf", "type": "File" }, "name": "etc-sysctl-conf" }, { "hostPath": { "path": "/etc/systemd", "type": "Directory" }, "name": "etc-systemd" }, { "hostPath": { "path": "/run", "type": "Directory" }, "name": "run" }, { "hostPath": { "path": "/sys", "type": "Directory" }, "name": "sys" }, { "hostPath": { "path": "/lib/modules", "type": "Directory" }, "name": "lib-modules" }, { "hostPath": { "path": "/var/lib/kubelet", "type": "Directory" }, "name": "var-lib-kubelet" }, { "hostPath": { "path": "/", "type": "Directory" }, "name": "host" }, { "emptyDir": { "medium": "Memory" }, "name": "etc-tuned" }, { "emptyDir": { "medium": "Memory" }, "name": "tmp" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-05-12T20:56:58Z", "generation": 1, "labels": { "dns.operator.openshift.io/owning-dns": "default" }, "name": "dns-default", "namespace": "openshift-dns", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "controller": true, "kind": "DNS", "name": "default", "uid": "cc0f1ac1-1e57-4f6f-b624-e9ccdcdf4526" } ], "resourceVersion": "13537", "uid": "8b34e4c4-1a76-4a07-a890-b5a7030a8523" }, "spec": { "minReadySeconds": 9, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "dns.operator.openshift.io/daemonset-dns": "default" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "true", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "dns.operator.openshift.io/daemonset-dns": "default" } }, "spec": { "containers": [ { "args": [ "-conf", "/etc/coredns/Corefile" ], "command": [ "coredns" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8562a483f4568254250f19fc68d79f88c94a48508aefe59a70c1021a3aad000a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/health", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "dns", "ports": [ { "containerPort": 5353, "name": "dns", "protocol": "UDP" }, { "containerPort": 5353, "name": "dns-tcp", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": 8181, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 3, "successThreshold": 1, "timeoutSeconds": 3 }, "resources": { "requests": { "cpu": "50m", "memory": "70Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/coredns", "name": "config-volume", "readOnly": true } ] }, { "args": [ "--logtostderr", "--secure-listen-address=:9154", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", "--upstream=http://127.0.0.1:9153/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9154, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "40Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-tls", "readOnly": true } ] } ], "dnsPolicy": "Default", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "dns", "serviceAccountName": "dns", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "Corefile", "path": "Corefile" } ], "name": "dns-default" }, "name": "config-volume" }, { "name": "metrics-tls", "secret": { "defaultMode": 420, "secretName": "dns-default-metrics-tls" } } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": "10%", "maxUnavailable": 0 }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-05-12T20:56:58Z", "generation": 1, "name": "node-resolver", "namespace": "openshift-dns", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "controller": true, "kind": "DNS", "name": "default", "uid": "cc0f1ac1-1e57-4f6f-b624-e9ccdcdf4526" } ], "resourceVersion": "9477", "uid": "32b72d82-32a7-44f6-94f1-cce49fde32dc" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "dns.operator.openshift.io/daemonset-node-resolver": "" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "dns.operator.openshift.io/daemonset-node-resolver": "" } }, "spec": { "containers": [ { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -uo pipefail\n\ntrap 'jobs -p | xargs kill || true; wait; exit 0' TERM\n\nOPENSHIFT_MARKER=\"openshift-generated-node-resolver\"\nHOSTS_FILE=\"/etc/hosts\"\nTEMP_FILE=\"/etc/hosts.tmp\"\n\nIFS=', ' read -r -a services \u003c\u003c\u003c \"${SERVICES}\"\n\n# Make a temporary file with the old hosts file's attributes.\nif ! cp -f --attributes-only \"${HOSTS_FILE}\" \"${TEMP_FILE}\"; then\n echo \"Failed to preserve hosts file. Exiting.\"\n exit 1\nfi\n\nwhile true; do\n declare -A svc_ips\n for svc in \"${services[@]}\"; do\n # Fetch service IP from cluster dns if present. We make several tries\n # to do it: IPv4, IPv6, IPv4 over TCP and IPv6 over TCP. The two last ones\n # are for deployments with Kuryr on older OpenStack (OSP13) - those do not\n # support UDP loadbalancers and require reaching DNS through TCP.\n cmds=('dig -t A @\"${NAMESERVER}\" +short \"${svc}.${CLUSTER_DOMAIN}\"|grep -v \"^;\"'\n 'dig -t AAAA @\"${NAMESERVER}\" +short \"${svc}.${CLUSTER_DOMAIN}\"|grep -v \"^;\"'\n 'dig -t A +tcp +retry=0 @\"${NAMESERVER}\" +short \"${svc}.${CLUSTER_DOMAIN}\"|grep -v \"^;\"'\n 'dig -t AAAA +tcp +retry=0 @\"${NAMESERVER}\" +short \"${svc}.${CLUSTER_DOMAIN}\"|grep -v \"^;\"')\n for i in ${!cmds[*]}\n do\n ips=($(eval \"${cmds[i]}\"))\n if [[ \"$?\" -eq 0 \u0026\u0026 \"${#ips[@]}\" -ne 0 ]]; then\n svc_ips[\"${svc}\"]=\"${ips[@]}\"\n break\n fi\n done\n done\n\n # Update /etc/hosts only if we get valid service IPs\n # We will not update /etc/hosts when there is coredns service outage or api unavailability\n # Stale entries could exist in /etc/hosts if the service is deleted\n if [[ -n \"${svc_ips[*]-}\" ]]; then\n # Build a new hosts file from /etc/hosts with our custom entries filtered out\n if ! sed --silent \"/# ${OPENSHIFT_MARKER}/d; w ${TEMP_FILE}\" \"${HOSTS_FILE}\"; then\n # Only continue rebuilding the hosts entries if its original content is preserved\n sleep 60 \u0026 wait\n continue\n fi\n\n # Append resolver entries for services\n rc=0\n for svc in \"${!svc_ips[@]}\"; do\n for ip in ${svc_ips[${svc}]}; do\n echo \"${ip} ${svc} ${svc}.${CLUSTER_DOMAIN} # ${OPENSHIFT_MARKER}\" \u003e\u003e \"${TEMP_FILE}\" || rc=$?\n done\n done\n if [[ $rc -ne 0 ]]; then\n sleep 60 \u0026 wait\n continue\n fi\n\n\n # TODO: Update /etc/hosts atomically to avoid any inconsistent behavior\n # Replace /etc/hosts with our modified version if needed\n cmp \"${TEMP_FILE}\" \"${HOSTS_FILE}\" || cp -f \"${TEMP_FILE}\" \"${HOSTS_FILE}\"\n # TEMP_FILE is not removed to avoid file create/delete and attributes copy churn\n fi\n sleep 60 \u0026 wait\n unset svc_ips\ndone\n" ], "env": [ { "name": "SERVICES", "value": "image-registry.openshift-image-registry.svc" }, { "name": "NAMESERVER", "value": "172.30.0.10" }, { "name": "CLUSTER_DOMAIN", "value": "cluster.local" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:751bd7eb62f632c0eef0ca91b6c57c64d4f1279d4dbe1a9b875ac4020a7b693f", "imagePullPolicy": "IfNotPresent", "name": "dns-node-resolver", "resources": { "requests": { "cpu": "5m", "memory": "21Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/hosts", "name": "hosts-file" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "node-resolver", "serviceAccountName": "node-resolver", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/hosts", "type": "File" }, "name": "hosts-file" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "33%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "operator.openshift.io/spec-hash": "5ab4fe2f00624804fc84b9e78dbfd260bc3fe650241cd8589250a896633485ed" }, "creationTimestamp": "2026-05-12T20:57:33Z", "generation": 1, "name": "node-ca", "namespace": "openshift-image-registry", "resourceVersion": "9475", "uid": "f032a540-38d2-4dfb-b6dd-0c0bcd58a5cb" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "name": "node-ca" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "node-ca" } }, "spec": { "containers": [ { "command": [ "/bin/sh", "-c", "trap 'jobs -p | xargs -r kill; echo shutting down node-ca; exit 0' TERM\nwhile [ true ];\ndo\n for f in $(ls /tmp/serviceca); do\n echo $f\n ca_file_path=\"/tmp/serviceca/${f}\"\n f=$(echo $f | sed -r 's/(.*)\\.\\./\\1:/')\n reg_dir_path=\"/etc/docker/certs.d/${f}\"\n if [ -e \"${reg_dir_path}\" ]; then\n cp -u $ca_file_path $reg_dir_path/ca.crt\n else\n mkdir $reg_dir_path\n cp $ca_file_path $reg_dir_path/ca.crt\n fi\n done\n for d in $(ls /etc/docker/certs.d); do\n echo $d\n dp=$(echo $d | sed -r 's/(.*):/\\1\\.\\./')\n reg_conf_path=\"/tmp/serviceca/${dp}\"\n if [ ! -e \"${reg_conf_path}\" ]; then\n rm -rf /etc/docker/certs.d/$d\n fi\n done\n sleep 60 \u0026 wait ${!}\ndone\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0242cefbf0bb876101c4d67ab4e07401cb0ba6c02be2b73a4f17ba33b2960005", "imagePullPolicy": "IfNotPresent", "name": "node-ca", "resources": { "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "privileged": true, "runAsGroup": 0, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp/serviceca", "name": "serviceca" }, { "mountPath": "/etc/docker/certs.d", "name": "host" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "node-ca", "serviceAccountName": "node-ca", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/docker/certs.d", "type": "" }, "name": "host" }, { "configMap": { "defaultMode": 420, "name": "image-registry-certificates" }, "name": "serviceca" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-05-12T20:57:04Z", "generation": 1, "labels": { "ingress.openshift.io/canary": "canary_controller" }, "name": "ingress-canary", "namespace": "openshift-ingress-canary", "resourceVersion": "12774", "uid": "dfb3d0da-e0ba-46d4-a8ba-ff4c456deb0b" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "ingresscanary.operator.openshift.io/daemonset-ingresscanary": "canary_controller" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "ingresscanary.operator.openshift.io/daemonset-ingresscanary": "canary_controller" } }, "spec": { "containers": [ { "command": [ "ingress-operator", "serve-healthcheck" ], "env": [ { "name": "TLS_CERT", "value": "/etc/tls-cert/tls.crt" }, { "name": "TLS_KEY", "value": "/etc/tls-cert/tls.key" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ed0c9631d6e424912cd8ce78ca7a2c4f76b3fc15e9e34fe00999170ccf19a611", "imagePullPolicy": "IfNotPresent", "name": "serve-healthcheck-canary", "ports": [ { "containerPort": 8443, "protocol": "TCP" }, { "containerPort": 8888, "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls-cert", "name": "cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "node-role.kubernetes.io/infra", "operator": "Exists" } ], "volumes": [ { "name": "cert", "secret": { "defaultMode": 272, "secretName": "canary-serving-cert" } } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-05-12T21:07:54Z", "generation": 1, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "node-exporter", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "1.8.2" }, "name": "node-exporter", "namespace": "openshift-monitoring", "resourceVersion": "12001", "uid": "13be0a8c-8c1a-4665-88d1-74bad551d9a5" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/name": "node-exporter", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "kubectl.kubernetes.io/default-container": "node-exporter", "openshift.io/required-scc": "node-exporter", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "node-exporter", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "1.8.2" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--web.listen-address=127.0.0.1:9100", "--path.sysfs=/host/sys", "--path.rootfs=/host/root", "--path.udev.data=/host/root/run/udev/data", "--no-collector.wifi", "--collector.filesystem.mount-points-exclude=^/(dev|proc|sys|run/k3s/containerd/.+|var/lib/docker/.+|var/lib/kubelet/pods/.+)($|/)", "--collector.netclass.ignored-devices=^(veth.*|[a-f0-9]{15}|enP.*|ovn-k8s-mp[0-9]*|br-ex|br-int|br-ext|br[0-9]*|tun[0-9]*|cali[a-f0-9]*)$", "--collector.netdev.device-exclude=^(veth.*|[a-f0-9]{15}|enP.*|ovn-k8s-mp[0-9]*|br-ex|br-int|br-ext|br[0-9]*|tun[0-9]*|cali[a-f0-9]*)$", "--collector.cpu.info", "--collector.textfile.directory=/var/node_exporter/textfile", "--no-collector.btrfs", "--runtime.gomaxprocs=0", "--no-collector.cpufreq", "--no-collector.tcpstat", "--collector.netdev", "--collector.netclass", "--collector.netclass.netlink", "--no-collector.buddyinfo", "--no-collector.mountstats", "--no-collector.ksmd", "--no-collector.processes", "--no-collector.systemd" ], "command": [ "/bin/sh", "-c", "export GOMAXPROCS=4\n# We don't take CPU affinity into account as the container doesn't have integer CPU requests.\n# In case of error, fallback to the default value.\nNUM_CPUS=$(grep -c '^processor' \"/proc/cpuinfo\" 2\u003e/dev/null || echo \"0\")\nif [ \"$NUM_CPUS\" -lt \"$GOMAXPROCS\" ]; then\n export GOMAXPROCS=\"$NUM_CPUS\"\nfi\necho \"ts=$(date --iso-8601=seconds) num_cpus=$NUM_CPUS gomaxprocs=$GOMAXPROCS\"\nexec /bin/node_exporter \"$0\" \"$@\"\n" ], "env": [ { "name": "DBUS_SYSTEM_BUS_ADDRESS", "value": "unix:path=/host/root/var/run/dbus/system_bus_socket" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:68abf16a3b6c33fdd22a823c7d00f96aaaa8015d370116962a5835984908645a", "imagePullPolicy": "IfNotPresent", "name": "node-exporter", "resources": { "requests": { "cpu": "8m", "memory": "32Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/host/sys", "mountPropagation": "HostToContainer", "name": "sys", "readOnly": true }, { "mountPath": "/host/root", "mountPropagation": "HostToContainer", "name": "root", "readOnly": true }, { "mountPath": "/var/node_exporter/textfile", "name": "node-exporter-textfile", "readOnly": true } ], "workingDir": "/var/node_exporter/textfile" }, { "args": [ "--secure-listen-address=[$(IP)]:9100", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:9100/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "env": [ { "name": "IP", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "status.podIP" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9100, "hostPort": 9100, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "node-exporter-tls" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca" }, { "mountPath": "/etc/kube-rbac-policy", "name": "node-exporter-kube-rbac-proxy-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "hostPID": true, "initContainers": [ { "command": [ "/bin/sh", "-c", "[[ ! -d /node_exporter/collectors/init ]] || find /node_exporter/collectors/init -perm /111 -type f -exec {} \\;" ], "env": [ { "name": "TMPDIR", "value": "/tmp" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:68abf16a3b6c33fdd22a823c7d00f96aaaa8015d370116962a5835984908645a", "imagePullPolicy": "IfNotPresent", "name": "init-textfile", "resources": { "requests": { "cpu": "1m", "memory": "1Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/node_exporter/textfile", "name": "node-exporter-textfile" }, { "mountPath": "/var/log/wtmp", "name": "node-exporter-wtmp", "readOnly": true } ], "workingDir": "/var/node_exporter/textfile" } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "node-exporter", "serviceAccountName": "node-exporter", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/sys", "type": "" }, "name": "sys" }, { "hostPath": { "path": "/", "type": "" }, "name": "root" }, { "emptyDir": {}, "name": "node-exporter-textfile" }, { "name": "node-exporter-tls", "secret": { "defaultMode": 420, "secretName": "node-exporter-tls" } }, { "hostPath": { "path": "/var/log/wtmp", "type": "File" }, "name": "node-exporter-wtmp" }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "name": "node-exporter-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "node-exporter-kube-rbac-proxy-config" } } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "kubernetes.io/description": "This daemon set launches the Multus networking component on each node.\n", "release.openshift.io/version": "4.18.9" }, "creationTimestamp": "2026-05-12T20:57:16Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "2q8k90ogo7oil7ndv0ulp13mlbjfgf2u" }, "name": "multus", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "3680da42-c3a8-438a-ac64-558de2a529bc" } ], "resourceVersion": "9601", "uid": "246cbfc3-83be-4ae0-b548-585885b2a98e" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "multus" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "multus", "component": "network", "openshift.io/component": "network", "type": "infra" } }, "spec": { "containers": [ { "args": [ "MULTUS_DAEMON_OPT=\"\"\n/entrypoint/cnibincopy.sh; exec /usr/src/multus-cni/bin/multus-daemon $MULTUS_DAEMON_OPT\n" ], "command": [ "/bin/bash", "-ec", "--" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/usr/src/multus-cni/rhel8/bin/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/usr/src/multus-cni/rhel9/bin/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/usr/src/multus-cni/bin/" }, { "name": "KUBERNETES_SERVICE_PORT", "value": "443" }, { "name": "KUBERNETES_SERVICE_HOST", "value": "api.kx-44241d90c1.hypershift.local" }, { "name": "MULTUS_NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "K8S_NODE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c7aa910ca06f8fd89cdf2519136e0f3533bdacfc6bd58a3f6683f9f08756c7b1", "imagePullPolicy": "IfNotPresent", "name": "kube-multus", "resources": { "requests": { "cpu": "10m", "memory": "65Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/etc/os-release", "name": "os-release" }, { "mountPath": "/host/etc/cni/net.d", "name": "system-cni-dir" }, { "mountPath": "/host/run/multus/cni/net.d", "name": "multus-cni-dir" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/run/multus", "mountPropagation": "HostToContainer", "name": "multus-socket-dir-parent" }, { "mountPath": "/run/k8s.cni.cncf.io", "name": "host-run-k8s-cni-cncf-io" }, { "mountPath": "/run/netns", "mountPropagation": "HostToContainer", "name": "host-run-netns" }, { "mountPath": "/var/lib/cni/bin", "name": "host-var-lib-cni-bin" }, { "mountPath": "/var/lib/cni/multus", "name": "host-var-lib-cni-multus" }, { "mountPath": "/var/lib/kubelet", "mountPropagation": "HostToContainer", "name": "host-var-lib-kubelet" }, { "mountPath": "/hostroot", "mountPropagation": "HostToContainer", "name": "hostroot" }, { "mountPath": "/etc/cni/multus/net.d", "name": "multus-conf-dir" }, { "mountPath": "/etc/cni/net.d/multus.d", "name": "multus-daemon-config", "readOnly": true }, { "mountPath": "/etc/cni/multus/certs", "name": "host-run-multus-certs" }, { "mountPath": "/etc/kubernetes", "name": "etc-kubernetes" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "hostPID": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/kubernetes/cni/net.d", "type": "Directory" }, "name": "system-cni-dir" }, { "hostPath": { "path": "/var/run/multus/cni/net.d", "type": "Directory" }, "name": "multus-cni-dir" }, { "hostPath": { "path": "/var/lib/cni/bin", "type": "Directory" }, "name": "cnibin" }, { "hostPath": { "path": "/etc/os-release", "type": "File" }, "name": "os-release" }, { "configMap": { "defaultMode": 484, "name": "cni-copy-resources" }, "name": "cni-binary-copy" }, { "hostPath": { "path": "/run/multus", "type": "DirectoryOrCreate" }, "name": "multus-socket-dir-parent" }, { "hostPath": { "path": "/run/k8s.cni.cncf.io", "type": "" }, "name": "host-run-k8s-cni-cncf-io" }, { "hostPath": { "path": "/run/netns/", "type": "" }, "name": "host-run-netns" }, { "hostPath": { "path": "/var/lib/cni/bin", "type": "" }, "name": "host-var-lib-cni-bin" }, { "hostPath": { "path": "/var/lib/cni/multus", "type": "" }, "name": "host-var-lib-cni-multus" }, { "hostPath": { "path": "/var/lib/kubelet", "type": "" }, "name": "host-var-lib-kubelet" }, { "hostPath": { "path": "/", "type": "" }, "name": "hostroot" }, { "hostPath": { "path": "/etc/cni/multus/net.d", "type": "" }, "name": "multus-conf-dir" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "daemon-config.json", "path": "daemon-config.json" } ], "name": "multus-daemon-config" }, "name": "multus-daemon-config" }, { "hostPath": { "path": "/etc/cni/multus/certs", "type": "" }, "name": "host-run-multus-certs" }, { "hostPath": { "path": "/etc/kubernetes", "type": "" }, "name": "etc-kubernetes" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "kubernetes.io/description": "This daemon installs and configures auxiliary CNI plugins on each node.\n", "release.openshift.io/version": "4.18.9" }, "creationTimestamp": "2026-05-12T20:57:16Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "2q8k90ogo7oil7ndv0ulp13mlbjfgf2u" }, "name": "multus-additional-cni-plugins", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "3680da42-c3a8-438a-ac64-558de2a529bc" } ], "resourceVersion": "9792", "uid": "58c31be6-2bad-41e7-9a17-6152584e2782" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "multus-additional-cni-plugins" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "multus-additional-cni-plugins", "component": "network", "openshift.io/component": "network", "type": "infra" } }, "spec": { "containers": [ { "args": [ "trap : TERM INT; sleep infinity \u0026 wait\n" ], "command": [ "/bin/bash", "-ec", "--" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c7aa910ca06f8fd89cdf2519136e0f3533bdacfc6bd58a3f6683f9f08756c7b1", "imagePullPolicy": "IfNotPresent", "name": "kube-multus-additional-cni-plugins", "resources": { "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "initContainers": [ { "command": [ "/entrypoint/cnibincopy.sh" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/usr/src/egress-router-cni/rhel8/bin/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/usr/src/egress-router-cni/rhel9/bin/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/usr/src/egress-router-cni/bin/" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:726adbde6a230e7b4da4a27508a67875b5579d80f6cdeb3324f90993d4de386a", "imagePullPolicy": "IfNotPresent", "name": "egress-router-binary-copy", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/os-release", "name": "os-release", "readOnly": true } ] }, { "command": [ "/bin/bash", "-c", "/entrypoint/cnibincopy.sh \u0026\u0026 cp -n /sysctls/allowlist.conf /host/etc/cni/tuning/" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/usr/src/plugins/rhel8/bin/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/usr/src/plugins/rhel9/bin/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/usr/src/plugins/bin/" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1eee856bde9bad71c4444c494225a0cf02d1f4a5293acf0bd6e7e1814efa0064", "imagePullPolicy": "IfNotPresent", "name": "cni-plugins", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/os-release", "name": "os-release", "readOnly": true }, { "mountPath": "/host/etc/cni/tuning/", "name": "tuning-conf-dir" }, { "mountPath": "/sysctls", "name": "cni-sysctl-allowlist" } ] }, { "command": [ "/entrypoint/cnibincopy.sh" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/bondcni/rhel8/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/bondcni/rhel9/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/bondcni/rhel9/" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e67b1ecadffe8bcaa8953d449d1559f5419c3296f6fc065f34d53985b07becdb", "imagePullPolicy": "IfNotPresent", "name": "bond-cni-plugin", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/os-release", "name": "os-release", "readOnly": true } ] }, { "command": [ "/entrypoint/cnibincopy.sh" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/usr/src/route-override/rhel8/bin/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/usr/src/route-override/rhel9/bin/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/usr/src/route-override/bin/" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f132095bb816921d7780c4525219aa183a9fc18975e0e615c98374c2bc5a9d3b", "imagePullPolicy": "IfNotPresent", "name": "routeoverride-cni", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/os-release", "name": "os-release", "readOnly": true } ] }, { "command": [ "/entrypoint/cnibincopy.sh" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/usr/src/whereabouts/rhel8/bin/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/usr/src/whereabouts/rhel9/bin/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/usr/src/whereabouts/bin/" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:612ffcbc92e84af62541d34ca47957fe0a683fe504ec87d1998cacbd8180f793", "imagePullPolicy": "IfNotPresent", "name": "whereabouts-cni-bincopy", "resources": { "requests": { "cpu": "10m", "memory": "10Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/os-release", "name": "os-release", "readOnly": true } ] }, { "command": [ "/bin/sh", "-c", "#!/bin/sh\n\nset -u -e\n\nCNI_BIN_DIR=${CNI_BIN_DIR:-\"/host/opt/cni/bin/\"}\nWHEREABOUTS_KUBECONFIG_FILE_HOST=${WHEREABOUTS_KUBECONFIG_FILE_HOST:-\"/etc/cni/net.d/whereabouts.d/whereabouts.kubeconfig\"}\nCNI_CONF_DIR=${CNI_CONF_DIR:-\"/host/etc/cni/net.d\"}\n\n# Make a whereabouts.d directory (for our kubeconfig)\n\nmkdir -p $CNI_CONF_DIR/whereabouts.d\nWHEREABOUTS_KUBECONFIG=$CNI_CONF_DIR/whereabouts.d/whereabouts.kubeconfig\nWHEREABOUTS_GLOBALCONFIG=$CNI_CONF_DIR/whereabouts.d/whereabouts.conf\n\n# ------------------------------- Generate a \"kube-config\"\nSERVICE_ACCOUNT_PATH=/var/run/secrets/kubernetes.io/serviceaccount\nKUBE_CA_FILE=${KUBE_CA_FILE:-$SERVICE_ACCOUNT_PATH/ca.crt}\nSERVICEACCOUNT_TOKEN=$(cat $SERVICE_ACCOUNT_PATH/token)\nSKIP_TLS_VERIFY=${SKIP_TLS_VERIFY:-false}\n\n\n# Check if we're running as a k8s pod.\nif [ -f \"$SERVICE_ACCOUNT_PATH/token\" ]; then\n # We're running as a k8d pod - expect some variables.\n if [ -z ${KUBERNETES_SERVICE_HOST} ]; then\n error \"KUBERNETES_SERVICE_HOST not set\"; exit 1;\n fi\n if [ -z ${KUBERNETES_SERVICE_PORT} ]; then\n error \"KUBERNETES_SERVICE_PORT not set\"; exit 1;\n fi\n\n if [ \"$SKIP_TLS_VERIFY\" == \"true\" ]; then\n TLS_CFG=\"insecure-skip-tls-verify: true\"\n elif [ -f \"$KUBE_CA_FILE\" ]; then\n TLS_CFG=\"certificate-authority-data: $(cat $KUBE_CA_FILE | base64 | tr -d '\\n')\"\n fi\n\n # Write a kubeconfig file for the CNI plugin. Do this\n # to skip TLS verification for now. We should eventually support\n # writing more complete kubeconfig files. This is only used\n # if the provided CNI network config references it.\n touch $WHEREABOUTS_KUBECONFIG\n chmod ${KUBECONFIG_MODE:-600} $WHEREABOUTS_KUBECONFIG\n cat \u003e $WHEREABOUTS_KUBECONFIG \u003c\u003cEOF\n# Kubeconfig file for Multus CNI plugin.\napiVersion: v1\nkind: Config\nclusters:\n- name: local\n cluster:\n server: ${KUBERNETES_SERVICE_PROTOCOL:-https}://${KUBERNETES_SERVICE_HOST}:${KUBERNETES_SERVICE_PORT}\n $TLS_CFG\nusers:\n- name: whereabouts\n user:\n token: \"${SERVICEACCOUNT_TOKEN}\"\ncontexts:\n- name: whereabouts-context\n context:\n cluster: local\n user: whereabouts\n namespace: ${WHEREABOUTS_NAMESPACE}\ncurrent-context: whereabouts-context\nEOF\n\n# Kubeconfig file for Whereabouts CNI plugin.\ncat \u003e $WHEREABOUTS_GLOBALCONFIG \u003c\u003cEOF\n{\n \"datastore\": \"kubernetes\",\n \"kubernetes\": {\n \"kubeconfig\": \"/etc/kubernetes/cni/net.d/whereabouts.d/whereabouts.kubeconfig\"\n },\n \"reconciler_cron_expression\": \"30 4 * * *\",\n \"log_level\": \"debug\"\n}\nEOF\nchmod 600 $WHEREABOUTS_GLOBALCONFIG\n\nelse\n warn \"Doesn't look like we're running in a kubernetes environment (no serviceaccount token)\"\nfi\n\n# copy whereabouts to the cni bin dir\n# SKIPPED DUE TO FIPS COPY.\n# cp -f /whereabouts $CNI_BIN_DIR\n\n# ---------------------- end Generate a \"kube-config\".\n\n# Unless told otherwise, sleep forever.\n# This prevents Kubernetes from restarting the pod repeatedly.\nshould_sleep=${SLEEP:-\"true\"}\necho \"Done configuring CNI. Sleep=$should_sleep\"\nwhile [ \"$should_sleep\" == \"true\" ]; do\n sleep 1000000000000\ndone\n" ], "env": [ { "name": "KUBERNETES_SERVICE_PORT", "value": "443" }, { "name": "KUBERNETES_SERVICE_HOST", "value": "api.kx-44241d90c1.hypershift.local" }, { "name": "CNI_BIN_DIR", "value": "/host/opt/cni/bin/" }, { "name": "CNI_CONF_DIR", "value": "/host/etc/cni/net.d" }, { "name": "SLEEP", "value": "false" }, { "name": "WHEREABOUTS_NAMESPACE", "value": "openshift-multus" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:612ffcbc92e84af62541d34ca47957fe0a683fe504ec87d1998cacbd8180f793", "imagePullPolicy": "IfNotPresent", "name": "whereabouts-cni", "resources": { "requests": { "cpu": "10m", "memory": "10Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/cni/net.d", "name": "system-cni-dir" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "multus-ancillary-tools", "serviceAccountName": "multus-ancillary-tools", "terminationGracePeriodSeconds": 10, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/kubernetes/cni/net.d", "type": "" }, "name": "system-cni-dir" }, { "hostPath": { "path": "/var/run/multus/cni/net.d", "type": "" }, "name": "multus-cni-dir" }, { "hostPath": { "path": "/var/lib/cni/bin", "type": "" }, "name": "cnibin" }, { "hostPath": { "path": "/etc/os-release", "type": "File" }, "name": "os-release" }, { "configMap": { "defaultMode": 484, "name": "cni-copy-resources" }, "name": "cni-binary-copy" }, { "hostPath": { "path": "/etc/cni/tuning/", "type": "DirectoryOrCreate" }, "name": "tuning-conf-dir" }, { "configMap": { "defaultMode": 484, "name": "default-cni-sysctl-allowlist" }, "name": "cni-sysctl-allowlist" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "kubernetes.io/description": "This daemonset launches the network metrics daemon on each node\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.18.9" }, "creationTimestamp": "2026-05-12T20:57:17Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "2q8k90ogo7oil7ndv0ulp13mlbjfgf2u" }, "name": "network-metrics-daemon", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "3680da42-c3a8-438a-ac64-558de2a529bc" } ], "resourceVersion": "13041", "uid": "1349d104-179c-4f41-adfc-877b74add925" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "network-metrics-daemon" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "network-metrics-daemon", "component": "network", "openshift.io/component": "network", "type": "infra" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "network.operator.openshift.io/dpu-host", "operator": "DoesNotExist" }, { "key": "network.operator.openshift.io/dpu", "operator": "DoesNotExist" } ] } ] } } }, "containers": [ { "args": [ "--node-name", "$(NODE_NAME)" ], "command": [ "/usr/bin/network-metrics" ], "env": [ { "name": "NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:80fdd5049bd2815e49c198a795a116976a852e8de630be74872439ba6c08758a", "imagePullPolicy": "IfNotPresent", "name": "network-metrics-daemon", "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--logtostderr", "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "--upstream=http://127.0.0.1:9091/", "--tls-private-key-file=/etc/metrics/tls.key", "--tls-cert-file=/etc/metrics/tls.crt" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/metrics", "name": "metrics-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "metrics-daemon-sa", "serviceAccountName": "metrics-daemon-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "name": "metrics-certs", "secret": { "defaultMode": 420, "secretName": "metrics-daemon-secret" } } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "33%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "kubernetes.io/description": "This daemonset deploys the network-check-target pods that run\na dummy app to be checked by network-check-source pod\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.18.9" }, "creationTimestamp": "2026-05-12T20:57:30Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "" }, "name": "network-check-target", "namespace": "openshift-network-diagnostics", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "3680da42-c3a8-438a-ac64-558de2a529bc" } ], "resourceVersion": "10847", "uid": "4ec3fff0-bc40-4589-bb21-ac34481d99c1" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "network-check-target" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "network-check-target", "kubernetes.io/os": "linux" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "network.operator.openshift.io/dpu-host", "operator": "DoesNotExist" }, { "key": "network.operator.openshift.io/dpu", "operator": "DoesNotExist" } ] } ] } } }, "containers": [ { "command": [ "cluster-network-check-target" ], "env": [ { "name": "K8S_NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:894452e6587de55d04e37163d3da53e11fced8fb08bd0acf61e6d49f7964284e", "imagePullPolicy": "IfNotPresent", "name": "network-check-target-container", "ports": [ { "containerPort": 8080, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "10m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "default", "serviceAccountName": "default", "terminationGracePeriodSeconds": 10, "tolerations": [ { "operator": "Exists" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "kubernetes.io/description": "This daemon set runs the iptables-alerter on each node\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.18.9" }, "creationTimestamp": "2026-05-12T20:57:33Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "2q8k90ogo7oil7ndv0ulp13mlbjfgf2u" }, "name": "iptables-alerter", "namespace": "openshift-network-operator", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "3680da42-c3a8-438a-ac64-558de2a529bc" } ], "resourceVersion": "9780", "uid": "bf41e7cc-e26c-4326-9f59-c87dd81583ce" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "iptables-alerter" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "iptables-alerter", "component": "network", "openshift.io/component": "network", "type": "infra" } }, "spec": { "containers": [ { "command": [ "/iptables-alerter/iptables-alerter.sh" ], "env": [ { "name": "CONTAINER_RUNTIME_ENDPOINT", "value": "unix:///run/crio/crio.sock" }, { "name": "ALERTER_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:751bd7eb62f632c0eef0ca91b6c57c64d4f1279d4dbe1a9b875ac4020a7b693f", "imagePullPolicy": "IfNotPresent", "name": "iptables-alerter", "resources": { "limits": { "cpu": "10m" }, "requests": { "cpu": "10m", "memory": "65Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/iptables-alerter", "name": "iptables-alerter-script" }, { "mountPath": "/host", "mountPropagation": "HostToContainer", "name": "host-slash", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "hostPID": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "iptables-alerter", "serviceAccountName": "iptables-alerter", "terminationGracePeriodSeconds": 10, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 484, "name": "iptables-alerter-script" }, "name": "iptables-alerter-script" }, { "hostPath": { "path": "/", "type": "" }, "name": "host-slash" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "2", "kubernetes.io/description": "This daemonset launches the ovn-kubernetes per node networking components.\n", "networkoperator.openshift.io/cluster-network-cidr": "10.128.0.0/14", "networkoperator.openshift.io/default-masquerade-network-cidrs": "169.254.0.0/17,fd69::/112", "networkoperator.openshift.io/hybrid-overlay-status": "disabled", "networkoperator.openshift.io/ip-family-mode": "single-stack", "release.openshift.io/version": "4.18.9" }, "creationTimestamp": "2026-05-12T20:57:27Z", "generation": 2, "labels": { "networkoperator.openshift.io/generates-operator-status": "2q8k90ogo7oil7ndv0ulp13mlbjfgf2u" }, "name": "ovnkube-node", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "3680da42-c3a8-438a-ac64-558de2a529bc" } ], "resourceVersion": "9762", "uid": "816efa9e-aeed-4e18-b5e8-dc3f10a46dd2" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "ovnkube-node" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "network.operator.openshift.io/ovnkube-script-lib-hash": "13e224c93ca4d8637e7cda355fd89432c933d0ea", "networkoperator.openshift.io/cluster-network-cidr": "10.128.0.0/14", "networkoperator.openshift.io/hybrid-overlay-status": "disabled", "networkoperator.openshift.io/ip-family-mode": "single-stack", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "ovnkube-node", "component": "network", "kubernetes.io/os": "linux", "openshift.io/component": "network", "ovn-db-pod": "true", "type": "infra" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "network.operator.openshift.io/dpu-host", "operator": "DoesNotExist" }, { "key": "network.operator.openshift.io/smart-nic", "operator": "DoesNotExist" }, { "key": "network.operator.openshift.io/dpu", "operator": "DoesNotExist" } ] } ] } } }, "containers": [ { "command": [ "/bin/bash", "-c", "set -e\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nstart-ovn-controller ${OVN_LOG_LEVEL}\n" ], "env": [ { "name": "OVN_LOG_LEVEL", "value": "info" }, { "name": "K8S_NODE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:45b1f11898d403139a45977726e024816081b684d6f9cb4eb9093fb2881f40dd", "imagePullPolicy": "IfNotPresent", "name": "ovn-controller", "resources": { "requests": { "cpu": "10m", "memory": "300Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/run/openvswitch", "name": "run-openvswitch" }, { "mountPath": "/run/ovn/", "name": "run-ovn" }, { "mountPath": "/etc/openvswitch", "name": "etc-openvswitch" }, { "mountPath": "/etc/ovn/", "name": "etc-openvswitch" }, { "mountPath": "/var/lib/openvswitch", "name": "var-lib-openvswitch" }, { "mountPath": "/env", "name": "env-overrides" }, { "mountPath": "/var/log/ovn/", "name": "node-log" }, { "mountPath": "/dev/log", "name": "log-socket" } ] }, { "command": [ "/bin/bash", "-c", "set -euo pipefail\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nstart-audit-log-rotation\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:45b1f11898d403139a45977726e024816081b684d6f9cb4eb9093fb2881f40dd", "imagePullPolicy": "IfNotPresent", "name": "ovn-acl-logging", "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/var/log/ovn/", "name": "node-log" }, { "mountPath": "/run/ovn/", "name": "run-ovn" } ] }, { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -euo pipefail\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nstart-rbac-proxy-node ovn-node-metrics 9103 29103 /etc/pki/tls/metrics-cert/tls.key /etc/pki/tls/metrics-cert/tls.crt\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-node", "ports": [ { "containerPort": 9103, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/etc/pki/tls/metrics-cert", "name": "ovn-node-metrics-cert", "readOnly": true } ] }, { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -euo pipefail\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nstart-rbac-proxy-node ovn-metrics 9105 29105 /etc/pki/tls/metrics-cert/tls.key /etc/pki/tls/metrics-cert/tls.crt\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-ovn-metrics", "ports": [ { "containerPort": 9105, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/etc/pki/tls/metrics-cert", "name": "ovn-node-metrics-cert", "readOnly": true } ] }, { "command": [ "/bin/bash", "-c", "set -xem\nif [[ -f /env/_master ]]; then\n set -o allexport\n source /env/_master\n set +o allexport\nfi\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\n\ntrap quit-ovn-northd TERM INT\nstart-ovn-northd \"${OVN_LOG_LEVEL}\"\n" ], "env": [ { "name": "OVN_LOG_LEVEL", "value": "info" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:45b1f11898d403139a45977726e024816081b684d6f9cb4eb9093fb2881f40dd", "imagePullPolicy": "IfNotPresent", "name": "northd", "resources": { "requests": { "cpu": "10m", "memory": "300Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/etc/ovn", "name": "etc-openvswitch" }, { "mountPath": "/var/log/ovn", "name": "node-log" }, { "mountPath": "/run/ovn/", "name": "run-ovn" }, { "mountPath": "/env", "name": "env-overrides" } ] }, { "command": [ "/bin/bash", "-c", "set -xem\nif [[ -f /env/_master ]]; then\n set -o allexport\n source /env/_master\n set +o allexport\nfi\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\n\ntrap quit-nbdb TERM INT\nstart-nbdb ${OVN_LOG_LEVEL}\n" ], "env": [ { "name": "OVN_LOG_LEVEL", "value": "info" }, { "name": "K8S_NODE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:45b1f11898d403139a45977726e024816081b684d6f9cb4eb9093fb2881f40dd", "imagePullPolicy": "IfNotPresent", "lifecycle": { "postStart": { "exec": { "command": [ "/bin/bash", "-c", "set -x\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nnbdb-post-start 5000\n" ] } } }, "name": "nbdb", "readinessProbe": { "exec": { "command": [ "/bin/bash", "-c", "set -xeo pipefail\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\novndb-readiness-probe \"nb\"\n" ] }, "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "10m", "memory": "300Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/etc/ovn/", "name": "etc-openvswitch" }, { "mountPath": "/var/log/ovn", "name": "node-log" }, { "mountPath": "/run/ovn/", "name": "run-ovn" }, { "mountPath": "/env", "name": "env-overrides" } ] }, { "command": [ "/bin/bash", "-c", "set -xem\nif [[ -f /env/_master ]]; then\n set -o allexport\n source /env/_master\n set +o allexport\nfi\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\n\ntrap quit-sbdb TERM INT\nstart-sbdb ${OVN_LOG_LEVEL}\n" ], "env": [ { "name": "OVN_LOG_LEVEL", "value": "info" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:45b1f11898d403139a45977726e024816081b684d6f9cb4eb9093fb2881f40dd", "imagePullPolicy": "IfNotPresent", "lifecycle": { "postStart": { "exec": { "command": [ "/bin/bash", "-c", "set -x\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nsbdb-post-start\n" ] } } }, "name": "sbdb", "readinessProbe": { "exec": { "command": [ "/bin/bash", "-c", "set -xeo pipefail\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\novndb-readiness-probe \"sb\"\n" ] }, "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "10m", "memory": "300Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/etc/ovn/", "name": "etc-openvswitch" }, { "mountPath": "/run/ovn/", "name": "run-ovn" }, { "mountPath": "/var/log/ovn", "name": "node-log" }, { "mountPath": "/env", "name": "env-overrides" } ] }, { "command": [ "/bin/bash", "-c", "set -xe\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nstart-ovnkube-node ${OVN_KUBE_LOG_LEVEL} 29103 29105\n" ], "env": [ { "name": "KUBERNETES_SERVICE_PORT", "value": "443" }, { "name": "KUBERNETES_SERVICE_HOST", "value": "api.kx-44241d90c1.hypershift.local" }, { "name": "OVN_CONTROLLER_INACTIVITY_PROBE", "value": "180000" }, { "name": "OVN_KUBE_LOG_LEVEL", "value": "4" }, { "name": "K8S_NODE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:45b1f11898d403139a45977726e024816081b684d6f9cb4eb9093fb2881f40dd", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "rm", "-f", "/etc/cni/net.d/10-ovn-kubernetes.conf" ] } } }, "name": "ovnkube-controller", "ports": [ { "containerPort": 29105, "name": "ovnmetrics-port", "protocol": "TCP" } ], "readinessProbe": { "exec": { "command": [ "test", "-f", "/etc/cni/net.d/10-ovn-kubernetes.conf" ] }, "failureThreshold": 3, "initialDelaySeconds": 5, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "600Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/var/lib/kubelet", "mountPropagation": "HostToContainer", "name": "host-kubelet", "readOnly": true }, { "mountPath": "/etc/systemd/system", "name": "systemd-units", "readOnly": true }, { "mountPath": "/host", "mountPropagation": "HostToContainer", "name": "host-slash", "readOnly": true }, { "mountPath": "/run/ovn-kubernetes/", "name": "host-run-ovn-kubernetes" }, { "mountPath": "/run/netns", "mountPropagation": "HostToContainer", "name": "host-run-netns", "readOnly": true }, { "mountPath": "/run/systemd/private", "mountPropagation": "HostToContainer", "name": "run-systemd", "readOnly": true, "subPath": "private" }, { "mountPath": "/cni-bin-dir", "name": "host-cni-bin" }, { "mountPath": "/etc/cni/net.d", "name": "host-cni-netd" }, { "mountPath": "/var/lib/cni/networks/ovn-k8s-cni-overlay", "name": "host-var-lib-cni-networks-ovn-kubernetes" }, { "mountPath": "/run/openvswitch", "name": "run-openvswitch" }, { "mountPath": "/var/log/ovnkube/", "name": "etc-openvswitch" }, { "mountPath": "/run/ovn/", "name": "run-ovn" }, { "mountPath": "/etc/openvswitch", "name": "etc-openvswitch" }, { "mountPath": "/etc/ovn/", "name": "etc-openvswitch" }, { "mountPath": "/var/lib/openvswitch", "name": "var-lib-openvswitch" }, { "mountPath": "/run/ovnkube-config/", "name": "ovnkube-config" }, { "mountPath": "/env", "name": "env-overrides" } ] } ], "dnsPolicy": "Default", "hostNetwork": true, "hostPID": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "ovn-kubernetes-node", "serviceAccountName": "ovn-kubernetes-node", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet", "type": "" }, "name": "host-kubelet" }, { "hostPath": { "path": "/etc/systemd/system", "type": "" }, "name": "systemd-units" }, { "hostPath": { "path": "/", "type": "" }, "name": "host-slash" }, { "hostPath": { "path": "/run/netns", "type": "" }, "name": "host-run-netns" }, { "hostPath": { "path": "/run/systemd", "type": "" }, "name": "run-systemd" }, { "hostPath": { "path": "/var/lib/openvswitch/data", "type": "" }, "name": "var-lib-openvswitch" }, { "hostPath": { "path": "/var/lib/ovn-ic/etc", "type": "" }, "name": "etc-openvswitch" }, { "hostPath": { "path": "/var/run/openvswitch", "type": "" }, "name": "run-openvswitch" }, { "hostPath": { "path": "/var/run/ovn-ic", "type": "" }, "name": "run-ovn" }, { "hostPath": { "path": "/var/log/ovn", "type": "" }, "name": "node-log" }, { "hostPath": { "path": "/dev/log", "type": "" }, "name": "log-socket" }, { "hostPath": { "path": "/run/ovn-kubernetes", "type": "" }, "name": "host-run-ovn-kubernetes" }, { "hostPath": { "path": "/var/lib/cni/bin", "type": "" }, "name": "host-cni-bin" }, { "hostPath": { "path": "/var/run/multus/cni/net.d", "type": "" }, "name": "host-cni-netd" }, { "hostPath": { "path": "/var/lib/cni/networks/ovn-k8s-cni-overlay", "type": "" }, "name": "host-var-lib-cni-networks-ovn-kubernetes" }, { "configMap": { "defaultMode": 420, "name": "ovnkube-config" }, "name": "ovnkube-config" }, { "configMap": { "defaultMode": 420, "name": "env-overrides", "optional": true }, "name": "env-overrides" }, { "name": "ovn-node-metrics-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "ovn-node-metrics-cert" } }, { "configMap": { "defaultMode": 484, "name": "ovnkube-script-lib" }, "name": "ovnkube-script-lib" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 2, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "vector-kubearchive-log-collector-in-cluster-local:apps/DaemonSet:product-kubearchive-logging/vector", "deprecated.daemonset.template.generation": "1", "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector runs requires access to socket.\"\n", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Minio post-jobs from chart require write access to filesystem.\"\n", "ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy": "\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector runs requires certain host mounts to watch files being created by pods.\"\n", "ignore-check.kube-linter.io/unset-cpu-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "ignore-check.kube-linter.io/unset-memory-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"vector-kubearchive-log-collector-in-cluster-local:apps/DaemonSet:product-kubearchive-logging/vector\",\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Minio post-jobs from chart require write access to filesystem.\\\"\\n\",\"ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy\":\"\\\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector runs requires certain host mounts to watch files being created by pods.\\\"\\n\",\"ignore-check.kube-linter.io/unset-cpu-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"ignore-check.kube-linter.io/unset-memory-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\"},\"labels\":{\"app.kubernetes.io/component\":\"Agent\",\"app.kubernetes.io/instance\":\"vector\",\"app.kubernetes.io/managed-by\":\"Helm\",\"app.kubernetes.io/name\":\"vector\",\"app.kubernetes.io/version\":\"0.54.0-distroless-libc\",\"helm.sh/chart\":\"vector-0.51.0\"},\"name\":\"vector\",\"namespace\":\"product-kubearchive-logging\"},\"spec\":{\"minReadySeconds\":0,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"Agent\",\"app.kubernetes.io/instance\":\"vector\",\"app.kubernetes.io/name\":\"vector\"}},\"template\":{\"metadata\":{\"annotations\":{\"checksum/config\":\"a3e847c92f6e7f33a962df31f68e8cd58d39c30913ac1021048b79bb9d9dbeba\",\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Minio post-jobs from chart require write access to filesystem.\\\"\\n\",\"ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy\":\"\\\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector runs requires certain host mounts to watch files being created by pods.\\\"\\n\",\"ignore-check.kube-linter.io/unset-cpu-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"ignore-check.kube-linter.io/unset-memory-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\"},\"labels\":{\"app.kubernetes.io/component\":\"Agent\",\"app.kubernetes.io/instance\":\"vector\",\"app.kubernetes.io/name\":\"vector\",\"vector.dev/exclude\":\"true\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"preference\":{\"matchExpressions\":[{\"key\":\"konflux-ci.dev/workload\",\"operator\":\"In\",\"values\":[\"konflux-tenants\"]}]},\"weight\":1}]}},\"containers\":[{\"args\":[\"--config-dir\",\"/etc/vector/\"],\"env\":[{\"name\":\"VECTOR_LOG\",\"value\":\"info\"},{\"name\":\"LOKI_USERNAME\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"USERNAME\",\"name\":\"kubearchive-loki\"}}},{\"name\":\"LOKI_PASSWORD\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"PASSWORD\",\"name\":\"kubearchive-loki\"}}},{\"name\":\"VECTOR_SELF_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}},{\"name\":\"VECTOR_SELF_POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}},{\"name\":\"VECTOR_SELF_POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"PROCFS_ROOT\",\"value\":\"/host/proc\"},{\"name\":\"SYSFS_ROOT\",\"value\":\"/host/sys\"}],\"image\":\"quay.io/kubearchive/vector:0.54.0-distroless-libc\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"vector\",\"ports\":[{\"containerPort\":8686,\"name\":\"api\",\"protocol\":\"TCP\"}],\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"ephemeral-storage\":\"5Gi\",\"memory\":\"2048Mi\"},\"requests\":{\"cpu\":\"200m\",\"ephemeral-storage\":\"2Gi\",\"memory\":\"1024Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"CHOWN\",\"DAC_OVERRIDE\",\"FOWNER\",\"FSETID\",\"KILL\",\"NET_BIND_SERVICE\",\"SETGID\",\"SETPCAP\",\"SETUID\"]},\"readOnlyRootFilesystem\":true,\"runAsUser\":0,\"seLinuxOptions\":{\"type\":\"spc_t\"},\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"volumeMounts\":[{\"mountPath\":\"/vector-data-dir\",\"name\":\"data\"},{\"mountPath\":\"/etc/vector/\",\"name\":\"config\",\"readOnly\":true},{\"mountPath\":\"/var/log/\",\"name\":\"var-log\",\"readOnly\":true},{\"mountPath\":\"/var/lib\",\"name\":\"var-lib\",\"readOnly\":true},{\"mountPath\":\"/host/proc\",\"name\":\"procfs\",\"readOnly\":true},{\"mountPath\":\"/host/sys\",\"name\":\"sysfs\",\"readOnly\":true},{\"mountPath\":\"/var/log/pods\",\"name\":\"varlog\",\"readOnly\":true},{\"mountPath\":\"/var/lib/containers\",\"name\":\"varlibdockercontainers\",\"readOnly\":true}]}],\"dnsPolicy\":\"ClusterFirst\",\"serviceAccountName\":\"vector\",\"terminationGracePeriodSeconds\":60,\"tolerations\":[{\"effect\":\"NoExecute\",\"key\":\"node.kubernetes.io/not-ready\",\"operator\":\"Exists\",\"tolerationSeconds\":300},{\"effect\":\"NoExecute\",\"key\":\"node.kubernetes.io/unreachable\",\"operator\":\"Exists\",\"tolerationSeconds\":300},{\"effect\":\"NoSchedule\",\"key\":\"node.kubernetes.io/memory-pressure\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"key\":\"node.kubernetes.io/disk-pressure\",\"operator\":\"Exists\"},{\"effect\":\"NoSchedule\",\"key\":\"node.kubernetes.io/pid-pressure\",\"operator\":\"Exists\"}],\"volumes\":[{\"name\":\"config\",\"projected\":{\"sources\":[{\"configMap\":{\"name\":\"vector\"}}]}},{\"hostPath\":{\"path\":\"/var/lib/vector\"},\"name\":\"data\"},{\"hostPath\":{\"path\":\"/var/log/\"},\"name\":\"var-log\"},{\"hostPath\":{\"path\":\"/var/lib/\"},\"name\":\"var-lib\"},{\"hostPath\":{\"path\":\"/proc\"},\"name\":\"procfs\"},{\"hostPath\":{\"path\":\"/sys\"},\"name\":\"sysfs\"},{\"hostPath\":{\"path\":\"/var/log/pods\",\"type\":\"Directory\"},\"name\":\"varlog\"},{\"hostPath\":{\"path\":\"/var/lib/containers\",\"type\":\"DirectoryOrCreate\"},\"name\":\"varlibdockercontainers\"}]}}}}\n" }, "creationTimestamp": "2026-05-12T21:23:07Z", "generation": 1, "labels": { "app.kubernetes.io/component": "Agent", "app.kubernetes.io/instance": "vector", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "vector", "app.kubernetes.io/version": "0.54.0-distroless-libc", "helm.sh/chart": "vector-0.51.0" }, "name": "vector", "namespace": "product-kubearchive-logging", "resourceVersion": "34320", "uid": "05db01df-c270-453c-ae5c-b896051b9bc6" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "Agent", "app.kubernetes.io/instance": "vector", "app.kubernetes.io/name": "vector" } }, "template": { "metadata": { "annotations": { "checksum/config": "a3e847c92f6e7f33a962df31f68e8cd58d39c30913ac1021048b79bb9d9dbeba", "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector runs requires access to socket.\"\n", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Minio post-jobs from chart require write access to filesystem.\"\n", "ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy": "\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector runs requires certain host mounts to watch files being created by pods.\"\n", "ignore-check.kube-linter.io/unset-cpu-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "ignore-check.kube-linter.io/unset-memory-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "Agent", "app.kubernetes.io/instance": "vector", "app.kubernetes.io/name": "vector", "vector.dev/exclude": "true" } }, "spec": { "affinity": { "nodeAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "preference": { "matchExpressions": [ { "key": "konflux-ci.dev/workload", "operator": "In", "values": [ "konflux-tenants" ] } ] }, "weight": 1 } ] } }, "containers": [ { "args": [ "--config-dir", "/etc/vector/" ], "env": [ { "name": "VECTOR_LOG", "value": "info" }, { "name": "LOKI_USERNAME", "valueFrom": { "secretKeyRef": { "key": "USERNAME", "name": "kubearchive-loki" } } }, { "name": "LOKI_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "PASSWORD", "name": "kubearchive-loki" } } }, { "name": "VECTOR_SELF_NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "VECTOR_SELF_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "VECTOR_SELF_POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "PROCFS_ROOT", "value": "/host/proc" }, { "name": "SYSFS_ROOT", "value": "/host/sys" } ], "image": "quay.io/kubearchive/vector:0.54.0-distroless-libc", "imagePullPolicy": "IfNotPresent", "name": "vector", "ports": [ { "containerPort": 8686, "name": "api", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "1", "ephemeral-storage": "5Gi", "memory": "2Gi" }, "requests": { "cpu": "200m", "ephemeral-storage": "2Gi", "memory": "1Gi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "CHOWN", "DAC_OVERRIDE", "FOWNER", "FSETID", "KILL", "NET_BIND_SERVICE", "SETGID", "SETPCAP", "SETUID" ] }, "readOnlyRootFilesystem": true, "runAsUser": 0, "seLinuxOptions": { "type": "spc_t" }, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/vector-data-dir", "name": "data" }, { "mountPath": "/etc/vector/", "name": "config", "readOnly": true }, { "mountPath": "/var/log/", "name": "var-log", "readOnly": true }, { "mountPath": "/var/lib", "name": "var-lib", "readOnly": true }, { "mountPath": "/host/proc", "name": "procfs", "readOnly": true }, { "mountPath": "/host/sys", "name": "sysfs", "readOnly": true }, { "mountPath": "/var/log/pods", "name": "varlog", "readOnly": true }, { "mountPath": "/var/lib/containers", "name": "varlibdockercontainers", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "vector", "serviceAccountName": "vector", "terminationGracePeriodSeconds": 60, "tolerations": [ { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 300 }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 300 }, { "effect": "NoSchedule", "key": "node.kubernetes.io/memory-pressure", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/disk-pressure", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/pid-pressure", "operator": "Exists" } ], "volumes": [ { "name": "config", "projected": { "defaultMode": 420, "sources": [ { "configMap": { "name": "vector" } } ] } }, { "hostPath": { "path": "/var/lib/vector", "type": "" }, "name": "data" }, { "hostPath": { "path": "/var/log/", "type": "" }, "name": "var-log" }, { "hostPath": { "path": "/var/lib/", "type": "" }, "name": "var-lib" }, { "hostPath": { "path": "/proc", "type": "" }, "name": "procfs" }, { "hostPath": { "path": "/sys", "type": "" }, "name": "sysfs" }, { "hostPath": { "path": "/var/log/pods", "type": "Directory" }, "name": "varlog" }, { "hostPath": { "path": "/var/lib/containers", "type": "DirectoryOrCreate" }, "name": "varlibdockercontainers" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": 1 }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "argocd.argoproj.io/sync-wave": "-1", "argocd.argoproj.io/tracking-id": "vector-tekton-logs-collector-in-cluster-local:apps/DaemonSet:tekton-logging/vector-tekton-logs-collector", "deprecated.daemonset.template.generation": "1", "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector Runs requires access to socket.\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector Runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector Runs requires certain host mounts to watch files being created by pods.\"\n", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"DaemonSet\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-wave\":\"-1\",\"argocd.argoproj.io/tracking-id\":\"vector-tekton-logs-collector-in-cluster-local:apps/DaemonSet:tekton-logging/vector-tekton-logs-collector\",\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector Runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector Runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector Runs requires certain host mounts to watch files being created by pods.\\\"\\n\"},\"labels\":{\"app.kubernetes.io/component\":\"Agent\",\"app.kubernetes.io/instance\":\"vector-tekton-logs-collector\",\"app.kubernetes.io/managed-by\":\"Helm\",\"app.kubernetes.io/name\":\"vector\",\"app.kubernetes.io/version\":\"0.45.0-distroless-libc\",\"helm.sh/chart\":\"vector-0.41.0\"},\"name\":\"vector-tekton-logs-collector\",\"namespace\":\"tekton-logging\"},\"spec\":{\"minReadySeconds\":0,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"Agent\",\"app.kubernetes.io/instance\":\"vector-tekton-logs-collector\",\"app.kubernetes.io/name\":\"vector\"}},\"template\":{\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-wave\":\"-1\",\"checksum/config\":\"cf158a14847a80f1b32e2666111dd136c8c7ca52a2ac19ace8c89c276f4bb8bb\",\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector Runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector Runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector Runs requires certain host mounts to watch files being created by pods.\\\"\\n\"},\"labels\":{\"app.kubernetes.io/component\":\"Agent\",\"app.kubernetes.io/instance\":\"vector-tekton-logs-collector\",\"app.kubernetes.io/name\":\"vector\",\"vector.dev/exclude\":\"true\"}},\"spec\":{\"containers\":[{\"args\":[\"--config-dir\",\"/etc/vector/\"],\"env\":[{\"name\":\"VECTOR_LOG\",\"value\":\"info\"},{\"name\":\"VECTOR_SELF_NODE_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.nodeName\"}}},{\"name\":\"VECTOR_SELF_POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}},{\"name\":\"VECTOR_SELF_POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"PROCFS_ROOT\",\"value\":\"/host/proc\"},{\"name\":\"SYSFS_ROOT\",\"value\":\"/host/sys\"}],\"image\":\"quay.io/openshift-pipeline/vector:0.45.0-distroless-libc\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"vector\",\"ports\":[{\"containerPort\":8686,\"name\":\"api\",\"protocol\":\"TCP\"}],\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"512Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"CHOWN\",\"DAC_OVERRIDE\",\"FOWNER\",\"FSETID\",\"KILL\",\"NET_BIND_SERVICE\",\"SETGID\",\"SETPCAP\",\"SETUID\"]},\"readOnlyRootFilesystem\":true,\"seLinuxOptions\":{\"type\":\"spc_t\"},\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"volumeMounts\":[{\"mountPath\":\"/vector-data-dir\",\"name\":\"data\"},{\"mountPath\":\"/etc/vector/\",\"name\":\"config\",\"readOnly\":true},{\"mountPath\":\"/var/log/\",\"name\":\"var-log\",\"readOnly\":true},{\"mountPath\":\"/var/lib\",\"name\":\"var-lib\",\"readOnly\":true},{\"mountPath\":\"/host/proc\",\"name\":\"procfs\",\"readOnly\":true},{\"mountPath\":\"/host/sys\",\"name\":\"sysfs\",\"readOnly\":true}]}],\"dnsPolicy\":\"ClusterFirst\",\"nodeSelector\":{\"konflux-ci.dev/workload\":\"konflux-tenants\"},\"serviceAccountName\":\"vector-tekton-logs-collector\",\"terminationGracePeriodSeconds\":60,\"tolerations\":[{\"effect\":\"NoSchedule\",\"key\":\"konflux-ci.dev/workload\",\"operator\":\"Equal\",\"value\":\"konflux-tenants\"}],\"volumes\":[{\"name\":\"config\",\"projected\":{\"sources\":[{\"configMap\":{\"name\":\"vector-tekton-logs-collector\"}}]}},{\"hostPath\":{\"path\":\"/var/lib/vector\"},\"name\":\"data\"},{\"hostPath\":{\"path\":\"/var/log/\"},\"name\":\"var-log\"},{\"hostPath\":{\"path\":\"/var/lib/\"},\"name\":\"var-lib\"},{\"hostPath\":{\"path\":\"/proc\"},\"name\":\"procfs\"},{\"hostPath\":{\"path\":\"/sys\"},\"name\":\"sysfs\"}]}}}}\n" }, "creationTimestamp": "2026-05-12T21:19:50Z", "generation": 1, "labels": { "app.kubernetes.io/component": "Agent", "app.kubernetes.io/instance": "vector-tekton-logs-collector", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "vector", "app.kubernetes.io/version": "0.45.0-distroless-libc", "helm.sh/chart": "vector-0.41.0" }, "name": "vector-tekton-logs-collector", "namespace": "tekton-logging", "resourceVersion": "23200", "uid": "55e4d11e-d3bd-40af-a3bb-7562324bec5d" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "Agent", "app.kubernetes.io/instance": "vector-tekton-logs-collector", "app.kubernetes.io/name": "vector" } }, "template": { "metadata": { "annotations": { "argocd.argoproj.io/sync-wave": "-1", "checksum/config": "cf158a14847a80f1b32e2666111dd136c8c7ca52a2ac19ace8c89c276f4bb8bb", "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector Runs requires access to socket.\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector Runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector Runs requires certain host mounts to watch files being created by pods.\"\n" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "Agent", "app.kubernetes.io/instance": "vector-tekton-logs-collector", "app.kubernetes.io/name": "vector", "vector.dev/exclude": "true" } }, "spec": { "containers": [ { "args": [ "--config-dir", "/etc/vector/" ], "env": [ { "name": "VECTOR_LOG", "value": "info" }, { "name": "VECTOR_SELF_NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "VECTOR_SELF_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "VECTOR_SELF_POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "PROCFS_ROOT", "value": "/host/proc" }, { "name": "SYSFS_ROOT", "value": "/host/sys" } ], "image": "quay.io/openshift-pipeline/vector:0.45.0-distroless-libc", "imagePullPolicy": "IfNotPresent", "name": "vector", "ports": [ { "containerPort": 8686, "name": "api", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "CHOWN", "DAC_OVERRIDE", "FOWNER", "FSETID", "KILL", "NET_BIND_SERVICE", "SETGID", "SETPCAP", "SETUID" ] }, "readOnlyRootFilesystem": true, "seLinuxOptions": { "type": "spc_t" }, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/vector-data-dir", "name": "data" }, { "mountPath": "/etc/vector/", "name": "config", "readOnly": true }, { "mountPath": "/var/log/", "name": "var-log", "readOnly": true }, { "mountPath": "/var/lib", "name": "var-lib", "readOnly": true }, { "mountPath": "/host/proc", "name": "procfs", "readOnly": true }, { "mountPath": "/host/sys", "name": "sysfs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "konflux-ci.dev/workload": "konflux-tenants" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "vector-tekton-logs-collector", "serviceAccountName": "vector-tekton-logs-collector", "terminationGracePeriodSeconds": 60, "tolerations": [ { "effect": "NoSchedule", "key": "konflux-ci.dev/workload", "operator": "Equal", "value": "konflux-tenants" } ], "volumes": [ { "name": "config", "projected": { "defaultMode": 420, "sources": [ { "configMap": { "name": "vector-tekton-logs-collector" } } ] } }, { "hostPath": { "path": "/var/lib/vector", "type": "" }, "name": "data" }, { "hostPath": { "path": "/var/log/", "type": "" }, "name": "var-log" }, { "hostPath": { "path": "/var/lib/", "type": "" }, "name": "var-lib" }, { "hostPath": { "path": "/proc", "type": "" }, "name": "procfs" }, { "hostPath": { "path": "/sys", "type": "" }, "name": "sysfs" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": 1 }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } } ], "kind": "List", "metadata": { "resourceVersion": "" } }