---
apiVersion: apps/v1
items:
- apiVersion: apps/v1
  kind: DaemonSet
  metadata:
    annotations:
      deprecated.daemonset.template.generation: "1"
    creationTimestamp: "2026-02-17T12:42:30Z"
    generation: 1
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deprecated.daemonset.template.generation: {}
        f:spec:
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:labels:
                .: {}
                f:hypershift.openshift.io/globalps-config-hash: {}
                f:name: {}
            f:spec:
              f:automountServiceAccountToken: {}
              f:containers:
                k:{"name":"global-pull-secret-syncer"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources:
                    .: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:securityContext:
                    .: {}
                    f:privileged: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/original-pull-secret"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kubelet"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/run/dbus"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:nodeSelector: {}
              f:priorityClassName: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:terminationGracePeriodSeconds: {}
              f:tolerations: {}
              f:volumes:
                .: {}
                k:{"name":"dbus"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"kubelet-config"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"original-pull-secret"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:maxSurge: {}
              f:maxUnavailable: {}
            f:type: {}
      manager: hosted-cluster-config-operator-manager
      operation: Update
      time: "2026-02-17T12:42:30Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:currentNumberScheduled: {}
          f:desiredNumberScheduled: {}
          f:numberAvailable: {}
          f:numberReady: {}
          f:observedGeneration: {}
          f:updatedNumberScheduled: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-17T12:51:45Z"
    name: global-pull-secret-syncer
    namespace: kube-system
    resourceVersion: "11132"
    uid: a6a88a39-fefa-43f3-814e-a68283e938eb
  spec:
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        name: global-pull-secret-syncer
    template:
      metadata:
        creationTimestamp: null
        labels:
          hypershift.openshift.io/globalps-config-hash: 448b387c
          name: global-pull-secret-syncer
      spec:
        automountServiceAccountToken: false
        containers:
        - args:
          - sync-global-pullsecret
          command:
          - /usr/bin/control-plane-operator
          image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7a4413909acceedaf1ee88f5fbb0ef3e6e3d2fd1178608ef3356e967d7b83f8a
          imagePullPolicy: IfNotPresent
          name: global-pull-secret-syncer
          resources:
            requests:
              cpu: 5m
              memory: 35Mi
          securityContext:
            privileged: true
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /var/lib/kubelet
            name: kubelet-config
          - mountPath: /var/run/dbus
            name: dbus
          - mountPath: /etc/original-pull-secret
            name: original-pull-secret
            readOnly: true
        dnsPolicy: Default
        nodeSelector:
          hypershift.openshift.io/nodepool-globalps-enabled: "true"
        priorityClassName: openshift-user-critical
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        terminationGracePeriodSeconds: 30
        tolerations:
        - operator: Exists
        volumes:
        - hostPath:
            path: /var/lib/kubelet
            type: Directory
          name: kubelet-config
        - hostPath:
            path: /var/run/dbus
            type: Directory
          name: dbus
        - name: original-pull-secret
          secret:
            defaultMode: 420
            secretName: original-pull-secret
    updateStrategy:
      rollingUpdate:
        maxSurge: 0
        maxUnavailable: 1
      type: RollingUpdate
  status:
    currentNumberScheduled: 3
    desiredNumberScheduled: 3
    numberAvailable: 3
    numberMisscheduled: 0
    numberReady: 3
    observedGeneration: 1
    updatedNumberScheduled: 3
- apiVersion: apps/v1
  kind: DaemonSet
  metadata:
    annotations:
      deprecated.daemonset.template.generation: "1"
    creationTimestamp: "2026-02-17T12:42:30Z"
    generation: 1
    labels:
      hypershift.openshift.io/managed: "true"
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deprecated.daemonset.template.generation: {}
          f:labels:
            .: {}
            f:hypershift.openshift.io/managed: {}
        f:spec:
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:hypershift.openshift.io/release-image: {}
              f:labels:
                .: {}
                f:app: {}
            f:spec:
              f:automountServiceAccountToken: {}
              f:containers:
                k:{"name":"konnectivity-agent"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"HTTP_PROXY"}:
                      .: {}
                      f:name: {}
                    k:{"name":"HTTPS_PROXY"}:
                      .: {}
                      f:name: {}
                    k:{"name":"NO_PROXY"}:
                      .: {}
                      f:name: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources:
                    .: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:readOnlyRootFilesystem: {}
                    f:runAsNonRoot: {}
                  f:startupProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/konnectivity/agent"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/konnectivity/ca"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:hostNetwork: {}
              f:priorityClassName: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:runAsUser: {}
              f:terminationGracePeriodSeconds: {}
              f:tolerations: {}
              f:volumes:
                .: {}
                k:{"name":"agent-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"konnectivity-ca"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
          f:updateStrategy:
            f:rollingUpdate:
              .: {}
              f:maxSurge: {}
              f:maxUnavailable: {}
            f:type: {}
      manager: hosted-cluster-config-operator-manager
      operation: Update
      time: "2026-02-17T12:42:30Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:currentNumberScheduled: {}
          f:desiredNumberScheduled: {}
          f:numberAvailable: {}
          f:numberReady: {}
          f:observedGeneration: {}
          f:updatedNumberScheduled: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-02-17T12:46:57Z"
    name: konnectivity-agent
    namespace: kube-system
    resourceVersion: "6647"
    uid: b8d45b74-4072-49b8-9813-69d481310d85
  spec:
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app: konnectivity-agent
    template:
      metadata:
        annotations:
          hypershift.openshift.io/release-image: quay.io/openshift-release-dev/ocp-release:4.20.14-multi
        creationTimestamp: null
        labels:
          app: konnectivity-agent
      spec:
        automountServiceAccountToken: false
        containers:
        - args:
          - --logtostderr=true
          - --ca-cert
          - /etc/konnectivity/ca/ca.crt
          - --agent-cert
          - /etc/konnectivity/agent/tls.crt
          - --agent-key
          - /etc/konnectivity/agent/tls.key
          - --proxy-server-host
          - konnectivity-server-clusters-d48236af-1db7-45b0-a057--84dd95e1.apps.kflux-prd-es01.1ion.p1.openshiftapps.com
          - --proxy-server-port
          - "443"
          - --health-server-port
          - "2041"
          - --agent-identifiers=default-route=true
          - --keepalive-time
          - 30s
          - --probe-interval
          - 5s
          - --sync-interval
          - 5s
          - --sync-interval-cap
          - 30s
          - --v
          - "3"
          command:
          - /usr/bin/proxy-agent
          env:
          - name: HTTP_PROXY
          - name: HTTPS_PROXY
          - name: NO_PROXY
          image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4ef1ad89d0c1172325d18b54a91a87a282b0c2ca832cf74e01e1b3705333bf58
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 6
            httpGet:
              path: healthz
              port: 2041
              scheme: HTTP
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 5
          name: konnectivity-agent
          readinessProbe:
            failureThreshold: 1
            httpGet:
              path: readyz
              port: 2041
              scheme: HTTP
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 5
          resources:
            requests:
              cpu: 40m
              memory: 50Mi
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            readOnlyRootFilesystem: true
            runAsNonRoot: true
          startupProbe:
            failureThreshold: 60
            httpGet:
              path: healthz
              port: 2041
              scheme: HTTP
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 5
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /etc/konnectivity/agent
            name: agent-certs
          - mountPath: /etc/konnectivity/ca
            name: konnectivity-ca
        dnsPolicy: Default
        hostNetwork: true
        priorityClassName: system-node-critical
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          runAsUser: 1000
        terminationGracePeriodSeconds: 30
        tolerations:
        - operator: Exists
        volumes:
        - name: agent-certs
          secret:
            defaultMode: 416
            secretName: konnectivity-agent
        - configMap:
            defaultMode: 416
            name: konnectivity-ca-bundle
          name: konnectivity-ca
    updateStrategy:
      rollingUpdate:
        maxSurge: 0
        maxUnavailable: 10%
      type: RollingUpdate
  status:
    currentNumberScheduled: 3
    desiredNumberScheduled: 3
    numberAvailable: 3
    numberMisscheduled: 0
    numberReady: 3
    observedGeneration: 1
    updatedNumberScheduled: 3
kind: DaemonSetList
metadata:
  resourceVersion: "18808"