---
apiVersion: v1
kind: Pod
metadata:
  annotations:
    hypershift.openshift.io/release-image: quay.io/openshift-release-dev/ocp-release:4.20.14-multi
  creationTimestamp: "2026-02-17T12:46:34Z"
  generateName: konnectivity-agent-
  generation: 1
  labels:
    app: konnectivity-agent
    controller-revision-hash: 5db96d65d9
    pod-template-generation: "1"
  managedFields:
  - apiVersion: v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .: {}
          f:hypershift.openshift.io/release-image: {}
        f:generateName: {}
        f:labels:
          .: {}
          f:app: {}
          f:controller-revision-hash: {}
          f:pod-template-generation: {}
        f:ownerReferences:
          .: {}
          k:{"uid":"b8d45b74-4072-49b8-9813-69d481310d85"}: {}
      f:spec:
        f:affinity:
          .: {}
          f:nodeAffinity:
            .: {}
            f:requiredDuringSchedulingIgnoredDuringExecution: {}
        f:automountServiceAccountToken: {}
        f:containers:
          k:{"name":"konnectivity-agent"}:
            .: {}
            f:args: {}
            f:command: {}
            f:env:
              .: {}
              k:{"name":"HTTP_PROXY"}:
                .: {}
                f:name: {}
              k:{"name":"HTTPS_PROXY"}:
                .: {}
                f:name: {}
              k:{"name":"NO_PROXY"}:
                .: {}
                f:name: {}
            f:image: {}
            f:imagePullPolicy: {}
            f:livenessProbe:
              .: {}
              f:failureThreshold: {}
              f:httpGet:
                .: {}
                f:path: {}
                f:port: {}
                f:scheme: {}
              f:periodSeconds: {}
              f:successThreshold: {}
              f:timeoutSeconds: {}
            f:name: {}
            f:readinessProbe:
              .: {}
              f:failureThreshold: {}
              f:httpGet:
                .: {}
                f:path: {}
                f:port: {}
                f:scheme: {}
              f:periodSeconds: {}
              f:successThreshold: {}
              f:timeoutSeconds: {}
            f:resources:
              .: {}
              f:requests:
                .: {}
                f:cpu: {}
                f:memory: {}
            f:securityContext:
              .: {}
              f:allowPrivilegeEscalation: {}
              f:capabilities:
                .: {}
                f:drop: {}
              f:readOnlyRootFilesystem: {}
              f:runAsNonRoot: {}
            f:startupProbe:
              .: {}
              f:failureThreshold: {}
              f:httpGet:
                .: {}
                f:path: {}
                f:port: {}
                f:scheme: {}
              f:periodSeconds: {}
              f:successThreshold: {}
              f:timeoutSeconds: {}
            f:terminationMessagePath: {}
            f:terminationMessagePolicy: {}
            f:volumeMounts:
              .: {}
              k:{"mountPath":"/etc/konnectivity/agent"}:
                .: {}
                f:mountPath: {}
                f:name: {}
              k:{"mountPath":"/etc/konnectivity/ca"}:
                .: {}
                f:mountPath: {}
                f:name: {}
        f:dnsPolicy: {}
        f:enableServiceLinks: {}
        f:hostNetwork: {}
        f:priorityClassName: {}
        f:restartPolicy: {}
        f:schedulerName: {}
        f:securityContext:
          .: {}
          f:runAsUser: {}
        f:terminationGracePeriodSeconds: {}
        f:tolerations: {}
        f:volumes:
          .: {}
          k:{"name":"agent-certs"}:
            .: {}
            f:name: {}
            f:secret:
              .: {}
              f:defaultMode: {}
              f:secretName: {}
          k:{"name":"konnectivity-ca"}:
            .: {}
            f:configMap:
              .: {}
              f:defaultMode: {}
              f:name: {}
            f:name: {}
    manager: kube-controller-manager
    operation: Update
    time: "2026-02-17T12:46:34Z"
  - apiVersion: v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"ContainersReady"}:
            .: {}
            f:lastProbeTime: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"Initialized"}:
            .: {}
            f:lastProbeTime: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"PodReadyToStartContainers"}:
            .: {}
            f:lastProbeTime: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"Ready"}:
            .: {}
            f:lastProbeTime: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
        f:containerStatuses: {}
        f:hostIP: {}
        f:hostIPs: {}
        f:phase: {}
        f:podIP: {}
        f:podIPs:
          .: {}
          k:{"ip":"10.0.131.118"}:
            .: {}
            f:ip: {}
        f:startTime: {}
    manager: kubelet
    operation: Update
    subresource: status
    time: "2026-02-17T12:46:57Z"
  name: konnectivity-agent-kmsrd
  namespace: kube-system
  ownerReferences:
  - apiVersion: apps/v1
    blockOwnerDeletion: true
    controller: true
    kind: DaemonSet
    name: konnectivity-agent
    uid: b8d45b74-4072-49b8-9813-69d481310d85
  resourceVersion: "6646"
  uid: 30392cb9-7527-44af-833b-567cd508520e
spec:
  affinity:
    nodeAffinity:
      requiredDuringSchedulingIgnoredDuringExecution:
        nodeSelectorTerms:
        - matchFields:
          - key: metadata.name
            operator: In
            values:
            - ip-10-0-131-118.ec2.internal
  automountServiceAccountToken: false
  containers:
  - args:
    - --logtostderr=true
    - --ca-cert
    - /etc/konnectivity/ca/ca.crt
    - --agent-cert
    - /etc/konnectivity/agent/tls.crt
    - --agent-key
    - /etc/konnectivity/agent/tls.key
    - --proxy-server-host
    - konnectivity-server-clusters-d48236af-1db7-45b0-a057--84dd95e1.apps.kflux-prd-es01.1ion.p1.openshiftapps.com
    - --proxy-server-port
    - "443"
    - --health-server-port
    - "2041"
    - --agent-identifiers=default-route=true
    - --keepalive-time
    - 30s
    - --probe-interval
    - 5s
    - --sync-interval
    - 5s
    - --sync-interval-cap
    - 30s
    - --v
    - "3"
    command:
    - /usr/bin/proxy-agent
    env:
    - name: HTTP_PROXY
    - name: HTTPS_PROXY
    - name: NO_PROXY
    image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4ef1ad89d0c1172325d18b54a91a87a282b0c2ca832cf74e01e1b3705333bf58
    imagePullPolicy: IfNotPresent
    livenessProbe:
      failureThreshold: 6
      httpGet:
        path: healthz
        port: 2041
        scheme: HTTP
      periodSeconds: 30
      successThreshold: 1
      timeoutSeconds: 5
    name: konnectivity-agent
    readinessProbe:
      failureThreshold: 1
      httpGet:
        path: readyz
        port: 2041
        scheme: HTTP
      periodSeconds: 30
      successThreshold: 1
      timeoutSeconds: 5
    resources:
      requests:
        cpu: 40m
        memory: 50Mi
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
        - ALL
      readOnlyRootFilesystem: true
      runAsNonRoot: true
    startupProbe:
      failureThreshold: 60
      httpGet:
        path: healthz
        port: 2041
        scheme: HTTP
      periodSeconds: 5
      successThreshold: 1
      timeoutSeconds: 5
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: FallbackToLogsOnError
    volumeMounts:
    - mountPath: /etc/konnectivity/agent
      name: agent-certs
    - mountPath: /etc/konnectivity/ca
      name: konnectivity-ca
  dnsPolicy: Default
  enableServiceLinks: true
  hostNetwork: true
  imagePullSecrets:
  - name: default-dockercfg-9k8j8
  nodeName: ip-10-0-131-118.ec2.internal
  preemptionPolicy: PreemptLowerPriority
  priority: 2000001000
  priorityClassName: system-node-critical
  restartPolicy: Always
  schedulerName: default-scheduler
  securityContext:
    runAsUser: 1000
  serviceAccount: default
  serviceAccountName: default
  terminationGracePeriodSeconds: 30
  tolerations:
  - operator: Exists
  volumes:
  - name: agent-certs
    secret:
      defaultMode: 416
      secretName: konnectivity-agent
  - configMap:
      defaultMode: 416
      name: konnectivity-ca-bundle
    name: konnectivity-ca
status:
  conditions:
  - lastProbeTime: null
    lastTransitionTime: "2026-02-17T12:46:55Z"
    status: "True"
    type: PodReadyToStartContainers
  - lastProbeTime: null
    lastTransitionTime: "2026-02-17T12:46:35Z"
    status: "True"
    type: Initialized
  - lastProbeTime: null
    lastTransitionTime: "2026-02-17T12:46:57Z"
    status: "True"
    type: Ready
  - lastProbeTime: null
    lastTransitionTime: "2026-02-17T12:46:57Z"
    status: "True"
    type: ContainersReady
  - lastProbeTime: null
    lastTransitionTime: "2026-02-17T12:46:34Z"
    status: "True"
    type: PodScheduled
  containerStatuses:
  - allocatedResources:
      cpu: 40m
      memory: 50Mi
    containerID: cri-o://1d255ba9a35bdcf8598f2a3e23da615d6664a458ef2554e83421c7473d2f1904
    image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4ef1ad89d0c1172325d18b54a91a87a282b0c2ca832cf74e01e1b3705333bf58
    imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13a09a6df1ef0cdfb7ee154e93f06d651c0157d13b9c617ade91d7a82f425fe4
    lastState: {}
    name: konnectivity-agent
    ready: true
    resources:
      requests:
        cpu: 40m
        memory: 50Mi
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2026-02-17T12:46:54Z"
    user:
      linux:
        gid: 0
        supplementalGroups:
        - 0
        uid: 1000
    volumeMounts:
    - mountPath: /etc/konnectivity/agent
      name: agent-certs
    - mountPath: /etc/konnectivity/ca
      name: konnectivity-ca
  hostIP: 10.0.131.118
  hostIPs:
  - ip: 10.0.131.118
  phase: Running
  podIP: 10.0.131.118
  podIPs:
  - ip: 10.0.131.118
  qosClass: Burstable
  startTime: "2026-02-17T12:46:35Z"