--- apiVersion: apps/v1 items: - apiVersion: apps/v1 kind: DaemonSet metadata: annotations: capability.openshift.io/name: Insights deprecated.daemonset.template.generation: "1" include.release.openshift.io/hypershift: "true" include.release.openshift.io/ibm-cloud-managed: "true" include.release.openshift.io/self-managed-high-availability: "true" include.release.openshift.io/single-node-developer: "true" creationTimestamp: "2026-02-17T12:49:09Z" generation: 1 labels: app.kubernetes.io/name: insights-runtime-extractor managedFields: - apiVersion: apps/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:capability.openshift.io/name: {} f:deprecated.daemonset.template.generation: {} f:include.release.openshift.io/hypershift: {} f:include.release.openshift.io/ibm-cloud-managed: {} f:include.release.openshift.io/self-managed-high-availability: {} f:include.release.openshift.io/single-node-developer: {} f:labels: .: {} f:app.kubernetes.io/name: {} f:ownerReferences: .: {} k:{"uid":"7e539b58-bfcb-42f5-8fd4-1a6475b7c4a5"}: {} f:spec: f:revisionHistoryLimit: {} f:selector: {} f:template: f:metadata: f:annotations: .: {} f:openshift.io/required-scc: {} f:target.workload.openshift.io/management: {} f:labels: .: {} f:app.kubernetes.io/name: {} f:spec: f:containers: k:{"name":"exporter"}: .: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:allowPrivilegeEscalation: {} f:capabilities: .: {} f:drop: {} f:privileged: {} f:readOnlyRootFilesystem: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/data"}: .: {} f:mountPath: {} f:name: {} k:{"name":"extractor"}: .: {} f:env: .: {} k:{"name":"CONTAINER_RUNTIME_ENDPOINT"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:livenessProbe: .: {} f:exec: .: {} f:command: {} f:failureThreshold: {} f:periodSeconds: {} f:successThreshold: {} f:timeoutSeconds: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:capabilities: .: {} f:add: {} f:drop: {} f:privileged: {} f:readOnlyRootFilesystem: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/crio.sock"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/data"}: .: {} f:mountPath: {} f:name: {} k:{"name":"kube-rbac-proxy"}: .: {} f:args: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:ports: .: {} k:{"containerPort":8443,"protocol":"TCP"}: .: {} f:containerPort: {} f:name: {} f:protocol: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:allowPrivilegeEscalation: {} f:capabilities: .: {} f:drop: {} f:privileged: {} f:readOnlyRootFilesystem: {} f:runAsNonRoot: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/etc/kube-rbac-proxy"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/etc/tls/private"}: .: {} f:mountPath: {} f:name: {} f:dnsPolicy: {} f:hostPID: {} f:nodeSelector: {} f:priorityClassName: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: {} f:serviceAccount: {} f:serviceAccountName: {} f:terminationGracePeriodSeconds: {} f:volumes: .: {} k:{"name":"crio-socket"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"data-volume"}: .: {} f:emptyDir: {} f:name: {} k:{"name":"insights-runtime-extractor-tls"}: .: {} f:name: {} f:secret: .: {} f:defaultMode: {} f:secretName: {} k:{"name":"kube-rbac-proxy-cm"}: .: {} f:configMap: .: {} f:defaultMode: {} f:name: {} f:name: {} f:updateStrategy: f:rollingUpdate: .: {} f:maxSurge: {} f:maxUnavailable: {} f:type: {} manager: cluster-version-operator operation: Update time: "2026-02-17T12:49:09Z" - apiVersion: apps/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:currentNumberScheduled: {} f:desiredNumberScheduled: {} f:numberAvailable: {} f:numberReady: {} f:observedGeneration: {} f:updatedNumberScheduled: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-02-17T12:49:21Z" name: insights-runtime-extractor namespace: openshift-insights ownerReferences: - apiVersion: config.openshift.io/v1 controller: true kind: ClusterVersion name: version uid: 7e539b58-bfcb-42f5-8fd4-1a6475b7c4a5 resourceVersion: "8433" uid: 9b2e089e-ddcb-4fd3-b4cd-d483c88659d2 spec: revisionHistoryLimit: 10 selector: matchLabels: app.kubernetes.io/name: insights-runtime-extractor template: metadata: annotations: openshift.io/required-scc: insights-runtime-extractor-scc target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}' creationTimestamp: null labels: app.kubernetes.io/name: insights-runtime-extractor spec: containers: - args: - --secure-listen-address=:8443 - --upstream=http://127.0.0.1:8000 - --config-file=/etc/kube-rbac-proxy/config.yaml - --tls-cert-file=/etc/tls/private/tls.crt - --tls-private-key-file=/etc/tls/private/tls.key image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:890bcb4e15a58b5fb9ee5641042ea42e78505f18f95d019e6d6582994151027e imagePullPolicy: IfNotPresent name: kube-rbac-proxy ports: - containerPort: 8443 name: https protocol: TCP resources: requests: cpu: 10m memory: 100Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false readOnlyRootFilesystem: true runAsNonRoot: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /etc/tls/private name: insights-runtime-extractor-tls - mountPath: /etc/kube-rbac-proxy name: kube-rbac-proxy-cm - image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7678f71d1950cfc3a5b2ae08731f17fb09ef8e8c10951ecdbd92df2cb13ce1d1 imagePullPolicy: Always name: exporter resources: requests: cpu: 10m memory: 200Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false readOnlyRootFilesystem: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /data name: data-volume - env: - name: CONTAINER_RUNTIME_ENDPOINT value: unix:///crio.sock image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1fcf2e7579c2061e03103543ec814e21f3af6d32ece7d9905e06d9bc70e834e6 imagePullPolicy: Always livenessProbe: exec: command: - crictl - info failureThreshold: 3 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 name: extractor resources: requests: cpu: 10m memory: 200Mi securityContext: capabilities: add: - CAP_SYS_ADMIN drop: - ALL privileged: true readOnlyRootFilesystem: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /crio.sock name: crio-socket - mountPath: /data name: data-volume dnsPolicy: ClusterFirst hostPID: true nodeSelector: kubernetes.io/os: linux priorityClassName: openshift-user-critical restartPolicy: Always schedulerName: default-scheduler securityContext: {} serviceAccount: insights-runtime-extractor-sa serviceAccountName: insights-runtime-extractor-sa terminationGracePeriodSeconds: 30 volumes: - hostPath: path: /run/crio/crio.sock type: Socket name: crio-socket - emptyDir: {} name: data-volume - configMap: defaultMode: 420 name: kube-rbac-proxy name: kube-rbac-proxy-cm - name: insights-runtime-extractor-tls secret: defaultMode: 420 secretName: insights-runtime-extractor-tls updateStrategy: rollingUpdate: maxSurge: 0 maxUnavailable: 33% type: RollingUpdate status: currentNumberScheduled: 3 desiredNumberScheduled: 3 numberAvailable: 3 numberMisscheduled: 0 numberReady: 3 observedGeneration: 1 updatedNumberScheduled: 3 kind: DaemonSetList metadata: resourceVersion: "18912"