---
apiVersion: apps/v1
items:
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "3"
      imageregistry.operator.openshift.io/checksum: sha256:b38bb2837c03e977633dfbea0ba3fa3f3002ac69a7509b531c4a41136c1b6d12
      operator.openshift.io/spec-hash: 3245a7bbbfd12fe1815e908e6b936ce512b5bc29a18aace196a4e6be508440b9
      release.openshift.io/version: 4.20.23
    creationTimestamp: "2026-05-26T16:01:36Z"
    generation: 2
    labels:
      docker-registry: default
      pod-template-hash: 67474545cf
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
            f:imageregistry.operator.openshift.io/checksum: {}
            f:operator.openshift.io/spec-hash: {}
            f:release.openshift.io/version: {}
          f:labels:
            .: {}
            f:docker-registry: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"2e4849f0-785f-4f11-81cb-4b742bd1b295"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:imageregistry.operator.openshift.io/dependencies-checksum: {}
                f:openshift.io/required-scc: {}
                f:target.workload.openshift.io/management: {}
              f:labels:
                .: {}
                f:docker-registry: {}
                f:pod-template-hash: {}
            f:spec:
              f:containers:
                k:{"name":"registry"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"REGISTRY_HEALTH_STORAGEDRIVER_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_ADDR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_NET"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_SECRET"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_TLS_CERTIFICATE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_TLS_KEY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_LOG_LEVEL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_OPENSHIFT_METRICS_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_OPENSHIFT_QUOTA_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_OPENSHIFT_SERVER_ADDR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_DELETE_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_BUCKET"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_ENCRYPT"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_FORCEPATHSTYLE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_REGION"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_USEDUALSTACK"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:lifecycle:
                    .: {}
                    f:preStop:
                      .: {}
                      f:exec:
                        .: {}
                        f:command: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":5000,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources:
                    .: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:securityContext:
                    .: {}
                    f:readOnlyRootFilesystem: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/pki/ca-trust/source/anchors"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/secrets"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/share/pki/ca-trust-source"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kubelet/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/run/secrets/cloud"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/run/secrets/openshift/serviceaccount"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:nodeSelector: {}
              f:priorityClassName: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:fsGroup: {}
                f:fsGroupChangePolicy: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:topologySpreadConstraints:
                .: {}
                k:{"topologyKey":"kubernetes.io/hostname","whenUnsatisfiable":"DoNotSchedule"}:
                  .: {}
                  f:labelSelector: {}
                  f:maxSkew: {}
                  f:topologyKey: {}
                  f:whenUnsatisfiable: {}
                k:{"topologyKey":"node-role.kubernetes.io/worker","whenUnsatisfiable":"DoNotSchedule"}:
                  .: {}
                  f:labelSelector: {}
                  f:maxSkew: {}
                  f:topologyKey: {}
                  f:whenUnsatisfiable: {}
                k:{"topologyKey":"topology.kubernetes.io/zone","whenUnsatisfiable":"DoNotSchedule"}:
                  .: {}
                  f:labelSelector: {}
                  f:maxSkew: {}
                  f:topologyKey: {}
                  f:whenUnsatisfiable: {}
              f:volumes:
                .: {}
                k:{"name":"bound-sa-token"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"ca-trust-extracted"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"image-registry-private-configuration"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:optional: {}
                    f:secretName: {}
                k:{"name":"installation-pull-secrets"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:optional: {}
                    f:secretName: {}
                k:{"name":"registry-certificates"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"registry-tls"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"trusted-ca"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                    f:optional: {}
                  f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-05-26T16:01:36Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:fullyLabeledReplicas: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-05-26T16:01:59Z"
    name: image-registry-67474545cf
    namespace: openshift-image-registry
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: image-registry
      uid: 2e4849f0-785f-4f11-81cb-4b742bd1b295
    resourceVersion: "8284"
    uid: 78200b1a-7e54-4e98-ae33-0319d1b6516d
  spec:
    replicas: 1
    selector:
      matchLabels:
        docker-registry: default
        pod-template-hash: 67474545cf
    template:
      metadata:
        annotations:
          imageregistry.operator.openshift.io/dependencies-checksum: sha256:e1620455be115abb421659765959639d4860d912d56fc3ae7f3ea8d21209b644
          openshift.io/required-scc: restricted-v2
          target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
        creationTimestamp: null
        labels:
          docker-registry: default
          pod-template-hash: 67474545cf
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java
            /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem &&
            update-ca-trust extract --output /etc/pki/ca-trust/extracted/ && exec
            /usr/bin/dockerregistry
          env:
          - name: REGISTRY_STORAGE
            value: s3
          - name: REGISTRY_STORAGE_S3_BUCKET
            value: 54216086c5c2-image-registry-us-east-1-qmaptwqdnecnbfxoflxdubii
          - name: REGISTRY_STORAGE_S3_REGION
            value: us-east-1
          - name: REGISTRY_STORAGE_S3_ENCRYPT
            value: "true"
          - name: REGISTRY_STORAGE_S3_FORCEPATHSTYLE
            value: "true"
          - name: REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH
            value: /var/run/secrets/cloud/credentials
          - name: REGISTRY_STORAGE_S3_USEDUALSTACK
            value: "true"
          - name: REGISTRY_HTTP_ADDR
            value: :5000
          - name: REGISTRY_HTTP_NET
            value: tcp
          - name: REGISTRY_HTTP_SECRET
            value: 36e676a771c331c670bcdb97b31eb23a71a10dbe75efc6f48900571033beff09d1d3b04db1b6658305aee29dd60a005413211d17db81c58a8dde5d1446020d7c
          - name: REGISTRY_LOG_LEVEL
            value: info
          - name: REGISTRY_OPENSHIFT_QUOTA_ENABLED
            value: "true"
          - name: REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR
            value: inmemory
          - name: REGISTRY_STORAGE_DELETE_ENABLED
            value: "true"
          - name: REGISTRY_HEALTH_STORAGEDRIVER_ENABLED
            value: "true"
          - name: REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL
            value: 10s
          - name: REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD
            value: "1"
          - name: REGISTRY_OPENSHIFT_METRICS_ENABLED
            value: "true"
          - name: REGISTRY_OPENSHIFT_SERVER_ADDR
            value: image-registry.openshift-image-registry.svc:5000
          - name: REGISTRY_HTTP_TLS_CERTIFICATE
            value: /etc/secrets/tls.crt
          - name: REGISTRY_HTTP_TLS_KEY
            value: /etc/secrets/tls.key
          image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7991aa41ad8151182e090204d157f772274e97e3e0ce0eb1f33e885476e146f7
          imagePullPolicy: IfNotPresent
          lifecycle:
            preStop:
              exec:
                command:
                - sleep
                - "25"
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthz
              port: 5000
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          name: registry
          ports:
          - containerPort: 5000
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthz
              port: 5000
              scheme: HTTPS
            initialDelaySeconds: 15
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          resources:
            requests:
              cpu: 100m
              memory: 256Mi
          securityContext:
            readOnlyRootFilesystem: true
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /var/run/secrets/cloud
            name: image-registry-private-configuration
            readOnly: true
          - mountPath: /etc/secrets
            name: registry-tls
          - mountPath: /etc/pki/ca-trust/extracted
            name: ca-trust-extracted
          - mountPath: /etc/pki/ca-trust/source/anchors
            name: registry-certificates
          - mountPath: /usr/share/pki/ca-trust-source
            name: trusted-ca
          - mountPath: /var/lib/kubelet/
            name: installation-pull-secrets
          - mountPath: /var/run/secrets/openshift/serviceaccount
            name: bound-sa-token
            readOnly: true
        dnsPolicy: ClusterFirst
        nodeSelector:
          kubernetes.io/os: linux
        priorityClassName: system-cluster-critical
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          fsGroup: 1000300000
          fsGroupChangePolicy: OnRootMismatch
        serviceAccount: registry
        serviceAccountName: registry
        terminationGracePeriodSeconds: 55
        topologySpreadConstraints:
        - labelSelector:
            matchLabels:
              docker-registry: default
          maxSkew: 1
          topologyKey: kubernetes.io/hostname
          whenUnsatisfiable: DoNotSchedule
        - labelSelector:
            matchLabels:
              docker-registry: default
          maxSkew: 1
          topologyKey: node-role.kubernetes.io/worker
          whenUnsatisfiable: DoNotSchedule
        - labelSelector:
            matchLabels:
              docker-registry: default
          maxSkew: 1
          topologyKey: topology.kubernetes.io/zone
          whenUnsatisfiable: DoNotSchedule
        volumes:
        - name: image-registry-private-configuration
          secret:
            defaultMode: 420
            optional: false
            secretName: image-registry-private-configuration
        - name: registry-tls
          projected:
            defaultMode: 420
            sources:
            - secret:
                name: image-registry-tls
        - emptyDir: {}
          name: ca-trust-extracted
        - configMap:
            defaultMode: 420
            name: image-registry-certificates
          name: registry-certificates
        - configMap:
            defaultMode: 420
            items:
            - key: ca-bundle.crt
              path: anchors/ca-bundle.crt
            name: trusted-ca
            optional: true
          name: trusted-ca
        - name: installation-pull-secrets
          secret:
            defaultMode: 420
            items:
            - key: .dockerconfigjson
              path: config.json
            optional: true
            secretName: installation-pull-secrets
        - name: bound-sa-token
          projected:
            defaultMode: 420
            sources:
            - serviceAccountToken:
                audience: openshift
                expirationSeconds: 3600
                path: token
  status:
    availableReplicas: 1
    fullyLabeledReplicas: 1
    observedGeneration: 2
    readyReplicas: 1
    replicas: 1
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "2"
      imageregistry.operator.openshift.io/checksum: sha256:4597de545787aa31213cffc61760e701744bfc8ce4a66564c1dda1fe6b0df044
      operator.openshift.io/spec-hash: 29da0a60ab36487aab7ac84127a9ca34656c8affcd2de42c0b8ea89f2ee0e57a
      release.openshift.io/version: 4.20.23
    creationTimestamp: "2026-05-26T16:00:20Z"
    generation: 2
    labels:
      docker-registry: default
      pod-template-hash: 6b95cc6695
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
            f:imageregistry.operator.openshift.io/checksum: {}
            f:operator.openshift.io/spec-hash: {}
            f:release.openshift.io/version: {}
          f:labels:
            .: {}
            f:docker-registry: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"2e4849f0-785f-4f11-81cb-4b742bd1b295"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:imageregistry.operator.openshift.io/dependencies-checksum: {}
                f:openshift.io/required-scc: {}
                f:target.workload.openshift.io/management: {}
              f:labels:
                .: {}
                f:docker-registry: {}
                f:pod-template-hash: {}
            f:spec:
              f:containers:
                k:{"name":"registry"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"REGISTRY_HEALTH_STORAGEDRIVER_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_ADDR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_NET"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_SECRET"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_TLS_CERTIFICATE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_TLS_KEY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_LOG_LEVEL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_OPENSHIFT_METRICS_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_OPENSHIFT_QUOTA_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_OPENSHIFT_SERVER_ADDR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_DELETE_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_BUCKET"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_ENCRYPT"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_FORCEPATHSTYLE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_REGION"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_USEDUALSTACK"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:lifecycle:
                    .: {}
                    f:preStop:
                      .: {}
                      f:exec:
                        .: {}
                        f:command: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":5000,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources:
                    .: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:securityContext:
                    .: {}
                    f:readOnlyRootFilesystem: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/pki/ca-trust/source/anchors"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/secrets"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/share/pki/ca-trust-source"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kubelet/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/run/secrets/cloud"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/run/secrets/openshift/serviceaccount"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:nodeSelector: {}
              f:priorityClassName: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:fsGroup: {}
                f:fsGroupChangePolicy: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:topologySpreadConstraints:
                .: {}
                k:{"topologyKey":"kubernetes.io/hostname","whenUnsatisfiable":"DoNotSchedule"}:
                  .: {}
                  f:labelSelector: {}
                  f:maxSkew: {}
                  f:topologyKey: {}
                  f:whenUnsatisfiable: {}
                k:{"topologyKey":"node-role.kubernetes.io/worker","whenUnsatisfiable":"DoNotSchedule"}:
                  .: {}
                  f:labelSelector: {}
                  f:maxSkew: {}
                  f:topologyKey: {}
                  f:whenUnsatisfiable: {}
                k:{"topologyKey":"topology.kubernetes.io/zone","whenUnsatisfiable":"DoNotSchedule"}:
                  .: {}
                  f:labelSelector: {}
                  f:maxSkew: {}
                  f:topologyKey: {}
                  f:whenUnsatisfiable: {}
              f:volumes:
                .: {}
                k:{"name":"bound-sa-token"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"ca-trust-extracted"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"image-registry-private-configuration"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:optional: {}
                    f:secretName: {}
                k:{"name":"installation-pull-secrets"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:optional: {}
                    f:secretName: {}
                k:{"name":"registry-certificates"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"registry-tls"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"trusted-ca"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                    f:optional: {}
                  f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-05-26T16:01:59Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:observedGeneration: {}
          f:replicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-05-26T16:01:59Z"
    name: image-registry-6b95cc6695
    namespace: openshift-image-registry
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: image-registry
      uid: 2e4849f0-785f-4f11-81cb-4b742bd1b295
    resourceVersion: "8299"
    uid: 19fd5415-161d-477e-84f5-bc5a7dc38c1d
  spec:
    replicas: 0
    selector:
      matchLabels:
        docker-registry: default
        pod-template-hash: 6b95cc6695
    template:
      metadata:
        annotations:
          imageregistry.operator.openshift.io/dependencies-checksum: sha256:48bd9b960f9282b73c565d1e340f0bd5d4cea0c407d6f4c712844202607d22f1
          openshift.io/required-scc: restricted-v2
          target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
        creationTimestamp: null
        labels:
          docker-registry: default
          pod-template-hash: 6b95cc6695
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java
            /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem &&
            update-ca-trust extract --output /etc/pki/ca-trust/extracted/ && exec
            /usr/bin/dockerregistry
          env:
          - name: REGISTRY_STORAGE
            value: s3
          - name: REGISTRY_STORAGE_S3_BUCKET
            value: 54216086c5c2-image-registry-us-east-1-qmaptwqdnecnbfxoflxdubii
          - name: REGISTRY_STORAGE_S3_REGION
            value: us-east-1
          - name: REGISTRY_STORAGE_S3_ENCRYPT
            value: "true"
          - name: REGISTRY_STORAGE_S3_FORCEPATHSTYLE
            value: "true"
          - name: REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH
            value: /var/run/secrets/cloud/credentials
          - name: REGISTRY_STORAGE_S3_USEDUALSTACK
            value: "true"
          - name: REGISTRY_HTTP_ADDR
            value: :5000
          - name: REGISTRY_HTTP_NET
            value: tcp
          - name: REGISTRY_HTTP_SECRET
            value: 36e676a771c331c670bcdb97b31eb23a71a10dbe75efc6f48900571033beff09d1d3b04db1b6658305aee29dd60a005413211d17db81c58a8dde5d1446020d7c
          - name: REGISTRY_LOG_LEVEL
            value: info
          - name: REGISTRY_OPENSHIFT_QUOTA_ENABLED
            value: "true"
          - name: REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR
            value: inmemory
          - name: REGISTRY_STORAGE_DELETE_ENABLED
            value: "true"
          - name: REGISTRY_HEALTH_STORAGEDRIVER_ENABLED
            value: "true"
          - name: REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL
            value: 10s
          - name: REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD
            value: "1"
          - name: REGISTRY_OPENSHIFT_METRICS_ENABLED
            value: "true"
          - name: REGISTRY_OPENSHIFT_SERVER_ADDR
            value: image-registry.openshift-image-registry.svc:5000
          - name: REGISTRY_HTTP_TLS_CERTIFICATE
            value: /etc/secrets/tls.crt
          - name: REGISTRY_HTTP_TLS_KEY
            value: /etc/secrets/tls.key
          image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7991aa41ad8151182e090204d157f772274e97e3e0ce0eb1f33e885476e146f7
          imagePullPolicy: IfNotPresent
          lifecycle:
            preStop:
              exec:
                command:
                - sleep
                - "25"
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthz
              port: 5000
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          name: registry
          ports:
          - containerPort: 5000
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthz
              port: 5000
              scheme: HTTPS
            initialDelaySeconds: 15
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          resources:
            requests:
              cpu: 100m
              memory: 256Mi
          securityContext:
            readOnlyRootFilesystem: true
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /var/run/secrets/cloud
            name: image-registry-private-configuration
            readOnly: true
          - mountPath: /etc/secrets
            name: registry-tls
          - mountPath: /etc/pki/ca-trust/extracted
            name: ca-trust-extracted
          - mountPath: /etc/pki/ca-trust/source/anchors
            name: registry-certificates
          - mountPath: /usr/share/pki/ca-trust-source
            name: trusted-ca
          - mountPath: /var/lib/kubelet/
            name: installation-pull-secrets
          - mountPath: /var/run/secrets/openshift/serviceaccount
            name: bound-sa-token
            readOnly: true
        dnsPolicy: ClusterFirst
        nodeSelector:
          kubernetes.io/os: linux
        priorityClassName: system-cluster-critical
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          fsGroup: 1000300000
          fsGroupChangePolicy: OnRootMismatch
        serviceAccount: registry
        serviceAccountName: registry
        terminationGracePeriodSeconds: 55
        topologySpreadConstraints:
        - labelSelector:
            matchLabels:
              docker-registry: default
          maxSkew: 1
          topologyKey: kubernetes.io/hostname
          whenUnsatisfiable: DoNotSchedule
        - labelSelector:
            matchLabels:
              docker-registry: default
          maxSkew: 1
          topologyKey: node-role.kubernetes.io/worker
          whenUnsatisfiable: DoNotSchedule
        - labelSelector:
            matchLabels:
              docker-registry: default
          maxSkew: 1
          topologyKey: topology.kubernetes.io/zone
          whenUnsatisfiable: DoNotSchedule
        volumes:
        - name: image-registry-private-configuration
          secret:
            defaultMode: 420
            optional: false
            secretName: image-registry-private-configuration
        - name: registry-tls
          projected:
            defaultMode: 420
            sources:
            - secret:
                name: image-registry-tls
        - emptyDir: {}
          name: ca-trust-extracted
        - configMap:
            defaultMode: 420
            name: image-registry-certificates
          name: registry-certificates
        - configMap:
            defaultMode: 420
            items:
            - key: ca-bundle.crt
              path: anchors/ca-bundle.crt
            name: trusted-ca
            optional: true
          name: trusted-ca
        - name: installation-pull-secrets
          secret:
            defaultMode: 420
            items:
            - key: .dockerconfigjson
              path: config.json
            optional: true
            secretName: installation-pull-secrets
        - name: bound-sa-token
          projected:
            defaultMode: 420
            sources:
            - serviceAccountToken:
                audience: openshift
                expirationSeconds: 3600
                path: token
  status:
    observedGeneration: 2
    replicas: 0
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "1"
      imageregistry.operator.openshift.io/checksum: sha256:7b4af6649770b30535a1ebd8e3eb2b6a105425ef02b0f56d16d36ba7e699b688
      operator.openshift.io/spec-hash: 10545b6b2df6345b6666dac27207df16037120640fcaa0419893006571a349a7
      release.openshift.io/version: 4.20.23
    creationTimestamp: "2026-05-26T15:57:53Z"
    generation: 2
    labels:
      docker-registry: default
      pod-template-hash: f5f98ff48
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
            f:imageregistry.operator.openshift.io/checksum: {}
            f:operator.openshift.io/spec-hash: {}
            f:release.openshift.io/version: {}
          f:labels:
            .: {}
            f:docker-registry: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"2e4849f0-785f-4f11-81cb-4b742bd1b295"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:imageregistry.operator.openshift.io/dependencies-checksum: {}
                f:openshift.io/required-scc: {}
                f:target.workload.openshift.io/management: {}
              f:labels:
                .: {}
                f:docker-registry: {}
                f:pod-template-hash: {}
            f:spec:
              f:containers:
                k:{"name":"registry"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"REGISTRY_HEALTH_STORAGEDRIVER_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_ADDR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_NET"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_SECRET"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_TLS_CERTIFICATE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_TLS_KEY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_LOG_LEVEL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_OPENSHIFT_METRICS_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_OPENSHIFT_QUOTA_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_OPENSHIFT_SERVER_ADDR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_DELETE_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_BUCKET"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_ENCRYPT"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_FORCEPATHSTYLE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_REGION"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_USEDUALSTACK"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:lifecycle:
                    .: {}
                    f:preStop:
                      .: {}
                      f:exec:
                        .: {}
                        f:command: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":5000,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources:
                    .: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:securityContext:
                    .: {}
                    f:readOnlyRootFilesystem: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/pki/ca-trust/source/anchors"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/secrets"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/share/pki/ca-trust-source"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kubelet/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/run/secrets/cloud"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/run/secrets/openshift/serviceaccount"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:nodeSelector: {}
              f:priorityClassName: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:fsGroup: {}
                f:fsGroupChangePolicy: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:topologySpreadConstraints:
                .: {}
                k:{"topologyKey":"kubernetes.io/hostname","whenUnsatisfiable":"DoNotSchedule"}:
                  .: {}
                  f:labelSelector: {}
                  f:maxSkew: {}
                  f:topologyKey: {}
                  f:whenUnsatisfiable: {}
                k:{"topologyKey":"node-role.kubernetes.io/worker","whenUnsatisfiable":"DoNotSchedule"}:
                  .: {}
                  f:labelSelector: {}
                  f:maxSkew: {}
                  f:topologyKey: {}
                  f:whenUnsatisfiable: {}
              f:volumes:
                .: {}
                k:{"name":"bound-sa-token"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"ca-trust-extracted"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"image-registry-private-configuration"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:optional: {}
                    f:secretName: {}
                k:{"name":"installation-pull-secrets"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:optional: {}
                    f:secretName: {}
                k:{"name":"registry-certificates"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"registry-tls"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"trusted-ca"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                    f:optional: {}
                  f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-05-26T16:01:36Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:observedGeneration: {}
          f:replicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-05-26T16:01:36Z"
    name: image-registry-f5f98ff48
    namespace: openshift-image-registry
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: image-registry
      uid: 2e4849f0-785f-4f11-81cb-4b742bd1b295
    resourceVersion: "7577"
    uid: 9e947d99-09a4-47ab-b36b-5d2f48967fd5
  spec:
    replicas: 0
    selector:
      matchLabels:
        docker-registry: default
        pod-template-hash: f5f98ff48
    template:
      metadata:
        annotations:
          imageregistry.operator.openshift.io/dependencies-checksum: sha256:48bd9b960f9282b73c565d1e340f0bd5d4cea0c407d6f4c712844202607d22f1
          openshift.io/required-scc: restricted-v2
          target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
        creationTimestamp: null
        labels:
          docker-registry: default
          pod-template-hash: f5f98ff48
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java
            /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem &&
            update-ca-trust extract --output /etc/pki/ca-trust/extracted/ && exec
            /usr/bin/dockerregistry
          env:
          - name: REGISTRY_STORAGE
            value: s3
          - name: REGISTRY_STORAGE_S3_BUCKET
            value: 54216086c5c2-image-registry-us-east-1-qmaptwqdnecnbfxoflxdubii
          - name: REGISTRY_STORAGE_S3_REGION
            value: us-east-1
          - name: REGISTRY_STORAGE_S3_ENCRYPT
            value: "true"
          - name: REGISTRY_STORAGE_S3_FORCEPATHSTYLE
            value: "true"
          - name: REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH
            value: /var/run/secrets/cloud/credentials
          - name: REGISTRY_STORAGE_S3_USEDUALSTACK
            value: "true"
          - name: REGISTRY_HTTP_ADDR
            value: :5000
          - name: REGISTRY_HTTP_NET
            value: tcp
          - name: REGISTRY_HTTP_SECRET
            value: 36e676a771c331c670bcdb97b31eb23a71a10dbe75efc6f48900571033beff09d1d3b04db1b6658305aee29dd60a005413211d17db81c58a8dde5d1446020d7c
          - name: REGISTRY_LOG_LEVEL
            value: info
          - name: REGISTRY_OPENSHIFT_QUOTA_ENABLED
            value: "true"
          - name: REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR
            value: inmemory
          - name: REGISTRY_STORAGE_DELETE_ENABLED
            value: "true"
          - name: REGISTRY_HEALTH_STORAGEDRIVER_ENABLED
            value: "true"
          - name: REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL
            value: 10s
          - name: REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD
            value: "1"
          - name: REGISTRY_OPENSHIFT_METRICS_ENABLED
            value: "true"
          - name: REGISTRY_OPENSHIFT_SERVER_ADDR
            value: image-registry.openshift-image-registry.svc:5000
          - name: REGISTRY_HTTP_TLS_CERTIFICATE
            value: /etc/secrets/tls.crt
          - name: REGISTRY_HTTP_TLS_KEY
            value: /etc/secrets/tls.key
          image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7991aa41ad8151182e090204d157f772274e97e3e0ce0eb1f33e885476e146f7
          imagePullPolicy: IfNotPresent
          lifecycle:
            preStop:
              exec:
                command:
                - sleep
                - "25"
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthz
              port: 5000
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          name: registry
          ports:
          - containerPort: 5000
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthz
              port: 5000
              scheme: HTTPS
            initialDelaySeconds: 15
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          resources:
            requests:
              cpu: 100m
              memory: 256Mi
          securityContext:
            readOnlyRootFilesystem: true
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /var/run/secrets/cloud
            name: image-registry-private-configuration
            readOnly: true
          - mountPath: /etc/secrets
            name: registry-tls
          - mountPath: /etc/pki/ca-trust/extracted
            name: ca-trust-extracted
          - mountPath: /etc/pki/ca-trust/source/anchors
            name: registry-certificates
          - mountPath: /usr/share/pki/ca-trust-source
            name: trusted-ca
          - mountPath: /var/lib/kubelet/
            name: installation-pull-secrets
          - mountPath: /var/run/secrets/openshift/serviceaccount
            name: bound-sa-token
            readOnly: true
        dnsPolicy: ClusterFirst
        nodeSelector:
          kubernetes.io/os: linux
        priorityClassName: system-cluster-critical
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          fsGroup: 1000300000
          fsGroupChangePolicy: OnRootMismatch
        serviceAccount: registry
        serviceAccountName: registry
        terminationGracePeriodSeconds: 55
        topologySpreadConstraints:
        - labelSelector:
            matchLabels:
              docker-registry: default
          maxSkew: 1
          topologyKey: kubernetes.io/hostname
          whenUnsatisfiable: DoNotSchedule
        - labelSelector:
            matchLabels:
              docker-registry: default
          maxSkew: 1
          topologyKey: node-role.kubernetes.io/worker
          whenUnsatisfiable: DoNotSchedule
        volumes:
        - name: image-registry-private-configuration
          secret:
            defaultMode: 420
            optional: false
            secretName: image-registry-private-configuration
        - name: registry-tls
          projected:
            defaultMode: 420
            sources:
            - secret:
                name: image-registry-tls
        - emptyDir: {}
          name: ca-trust-extracted
        - configMap:
            defaultMode: 420
            name: image-registry-certificates
          name: registry-certificates
        - configMap:
            defaultMode: 420
            items:
            - key: ca-bundle.crt
              path: anchors/ca-bundle.crt
            name: trusted-ca
            optional: true
          name: trusted-ca
        - name: installation-pull-secrets
          secret:
            defaultMode: 420
            items:
            - key: .dockerconfigjson
              path: config.json
            optional: true
            secretName: installation-pull-secrets
        - name: bound-sa-token
          projected:
            defaultMode: 420
            sources:
            - serviceAccountToken:
                audience: openshift
                expirationSeconds: 3600
                path: token
  status:
    observedGeneration: 2
    replicas: 0
kind: ReplicaSetList
metadata:
  resourceVersion: "20733"