---
apiVersion: apps/v1
items:
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "1"
      imageregistry.operator.openshift.io/checksum: sha256:57eb35150698994b4cbc65952019d76955982afc0ae0de663a465540b5588439
      operator.openshift.io/spec-hash: 0e41a4aba243347f2a1849357285b57a3b901aff605f77b40d413b1c74cb1d4f
      release.openshift.io/version: 4.21.26
    creationTimestamp: "2026-07-29T20:57:39Z"
    generation: 2
    labels:
      docker-registry: default
      pod-template-hash: 64b8979875
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
            f:imageregistry.operator.openshift.io/checksum: {}
            f:operator.openshift.io/spec-hash: {}
            f:release.openshift.io/version: {}
          f:labels:
            .: {}
            f:docker-registry: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"eb27a192-22e0-4a6b-8bbd-422b4f23f863"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:imageregistry.operator.openshift.io/dependencies-checksum: {}
                f:openshift.io/required-scc: {}
                f:target.workload.openshift.io/management: {}
              f:labels:
                .: {}
                f:docker-registry: {}
                f:pod-template-hash: {}
            f:spec:
              f:containers:
                k:{"name":"registry"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"REGISTRY_HEALTH_STORAGEDRIVER_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_ADDR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_NET"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_SECRET"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_TLS_CERTIFICATE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_TLS_KEY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_LOG_LEVEL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_OPENSHIFT_METRICS_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_OPENSHIFT_QUOTA_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_OPENSHIFT_SERVER_ADDR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_DELETE_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_BUCKET"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_ENCRYPT"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_FORCEPATHSTYLE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_REGION"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_USEDUALSTACK"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:lifecycle:
                    .: {}
                    f:preStop:
                      .: {}
                      f:exec:
                        .: {}
                        f:command: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":5000,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources:
                    .: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:securityContext:
                    .: {}
                    f:readOnlyRootFilesystem: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/pki/ca-trust/source/anchors"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/secrets"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/share/pki/ca-trust-source"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kubelet/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/run/secrets/cloud"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/run/secrets/openshift/serviceaccount"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:nodeSelector: {}
              f:priorityClassName: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:fsGroup: {}
                f:fsGroupChangePolicy: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:topologySpreadConstraints:
                .: {}
                k:{"topologyKey":"kubernetes.io/hostname","whenUnsatisfiable":"DoNotSchedule"}:
                  .: {}
                  f:labelSelector: {}
                  f:maxSkew: {}
                  f:topologyKey: {}
                  f:whenUnsatisfiable: {}
                k:{"topologyKey":"node-role.kubernetes.io/worker","whenUnsatisfiable":"DoNotSchedule"}:
                  .: {}
                  f:labelSelector: {}
                  f:maxSkew: {}
                  f:topologyKey: {}
                  f:whenUnsatisfiable: {}
              f:volumes:
                .: {}
                k:{"name":"bound-sa-token"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"ca-trust-extracted"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"image-registry-private-configuration"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:optional: {}
                    f:secretName: {}
                k:{"name":"installation-pull-secrets"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:optional: {}
                    f:secretName: {}
                k:{"name":"registry-certificates"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"registry-tls"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"trusted-ca"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                    f:optional: {}
                  f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-29T21:08:05Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:observedGeneration: {}
          f:replicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-07-29T21:08:06Z"
    name: image-registry-64b8979875
    namespace: openshift-image-registry
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: image-registry
      uid: eb27a192-22e0-4a6b-8bbd-422b4f23f863
    resourceVersion: "9104"
    uid: ac586a62-b961-48bd-806a-d5cc0d8775ad
  spec:
    replicas: 0
    selector:
      matchLabels:
        docker-registry: default
        pod-template-hash: 64b8979875
    template:
      metadata:
        annotations:
          imageregistry.operator.openshift.io/dependencies-checksum: sha256:cd0d970283f978bb39fad0e46c960e2200964e91b992c3ca34327c627afba54c
          openshift.io/required-scc: restricted-v2
          target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
        labels:
          docker-registry: default
          pod-template-hash: 64b8979875
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java
            /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem &&
            update-ca-trust extract --output /etc/pki/ca-trust/extracted/ && exec
            /usr/bin/dockerregistry
          env:
          - name: REGISTRY_STORAGE
            value: s3
          - name: REGISTRY_STORAGE_S3_BUCKET
            value: 555f2283af1e-image-registry-us-east-1-fqiigyomqtfxrosbbstvqtqe
          - name: REGISTRY_STORAGE_S3_REGION
            value: us-east-1
          - name: REGISTRY_STORAGE_S3_ENCRYPT
            value: "true"
          - name: REGISTRY_STORAGE_S3_FORCEPATHSTYLE
            value: "true"
          - name: REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH
            value: /var/run/secrets/cloud/credentials
          - name: REGISTRY_STORAGE_S3_USEDUALSTACK
            value: "true"
          - name: REGISTRY_HTTP_ADDR
            value: :5000
          - name: REGISTRY_HTTP_NET
            value: tcp
          - name: REGISTRY_HTTP_SECRET
            value: 71eba639715aeef77ce70a7d06977ef8a639e313b1730476dd4a7e31ad12845920ba96ab679507a7fc45a239e1eaa7179082bd88e46a302a4bb9b2074433ebea
          - name: REGISTRY_LOG_LEVEL
            value: info
          - name: REGISTRY_OPENSHIFT_QUOTA_ENABLED
            value: "true"
          - name: REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR
            value: inmemory
          - name: REGISTRY_STORAGE_DELETE_ENABLED
            value: "true"
          - name: REGISTRY_HEALTH_STORAGEDRIVER_ENABLED
            value: "true"
          - name: REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL
            value: 10s
          - name: REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD
            value: "1"
          - name: REGISTRY_OPENSHIFT_METRICS_ENABLED
            value: "true"
          - name: REGISTRY_OPENSHIFT_SERVER_ADDR
            value: image-registry.openshift-image-registry.svc:5000
          - name: REGISTRY_HTTP_TLS_CERTIFICATE
            value: /etc/secrets/tls.crt
          - name: REGISTRY_HTTP_TLS_KEY
            value: /etc/secrets/tls.key
          image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:843b51893f8a3884f1fe56948902e4dd166193b21cc34e099aa8d96a8ff2ea09
          imagePullPolicy: IfNotPresent
          lifecycle:
            preStop:
              exec:
                command:
                - sleep
                - "25"
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthz
              port: 5000
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          name: registry
          ports:
          - containerPort: 5000
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthz
              port: 5000
              scheme: HTTPS
            initialDelaySeconds: 15
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          resources:
            requests:
              cpu: 100m
              memory: 256Mi
          securityContext:
            readOnlyRootFilesystem: true
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /var/run/secrets/cloud
            name: image-registry-private-configuration
            readOnly: true
          - mountPath: /etc/secrets
            name: registry-tls
          - mountPath: /etc/pki/ca-trust/extracted
            name: ca-trust-extracted
          - mountPath: /etc/pki/ca-trust/source/anchors
            name: registry-certificates
          - mountPath: /usr/share/pki/ca-trust-source
            name: trusted-ca
          - mountPath: /var/lib/kubelet/
            name: installation-pull-secrets
          - mountPath: /var/run/secrets/openshift/serviceaccount
            name: bound-sa-token
            readOnly: true
        dnsPolicy: ClusterFirst
        nodeSelector:
          kubernetes.io/os: linux
        priorityClassName: system-cluster-critical
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          fsGroup: 1000290000
          fsGroupChangePolicy: OnRootMismatch
        serviceAccount: registry
        serviceAccountName: registry
        terminationGracePeriodSeconds: 55
        topologySpreadConstraints:
        - labelSelector:
            matchLabels:
              docker-registry: default
          maxSkew: 1
          topologyKey: kubernetes.io/hostname
          whenUnsatisfiable: DoNotSchedule
        - labelSelector:
            matchLabels:
              docker-registry: default
          maxSkew: 1
          topologyKey: node-role.kubernetes.io/worker
          whenUnsatisfiable: DoNotSchedule
        volumes:
        - name: image-registry-private-configuration
          secret:
            defaultMode: 420
            optional: false
            secretName: image-registry-private-configuration
        - name: registry-tls
          projected:
            defaultMode: 420
            sources:
            - secret:
                name: image-registry-tls
        - emptyDir: {}
          name: ca-trust-extracted
        - configMap:
            defaultMode: 420
            name: image-registry-certificates
          name: registry-certificates
        - configMap:
            defaultMode: 420
            items:
            - key: ca-bundle.crt
              path: anchors/ca-bundle.crt
            name: trusted-ca
            optional: true
          name: trusted-ca
        - name: installation-pull-secrets
          secret:
            defaultMode: 420
            items:
            - key: .dockerconfigjson
              path: config.json
            optional: true
            secretName: installation-pull-secrets
        - name: bound-sa-token
          projected:
            defaultMode: 420
            sources:
            - serviceAccountToken:
                audience: openshift
                expirationSeconds: 3600
                path: token
  status:
    observedGeneration: 2
    replicas: 0
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "3"
      imageregistry.operator.openshift.io/checksum: sha256:583ce055dfc28755b85b3e53426cfa50ef8fcc7bfd24471972f27bdd3da26203
      operator.openshift.io/spec-hash: da500defc8c841c3923284a2f902c27a63eab82ca67e3d0dc4beff9a71a8d61f
      release.openshift.io/version: 4.21.26
    creationTimestamp: "2026-07-29T21:08:05Z"
    generation: 2
    labels:
      docker-registry: default
      pod-template-hash: 6b6b796dcf
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
            f:imageregistry.operator.openshift.io/checksum: {}
            f:operator.openshift.io/spec-hash: {}
            f:release.openshift.io/version: {}
          f:labels:
            .: {}
            f:docker-registry: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"eb27a192-22e0-4a6b-8bbd-422b4f23f863"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:imageregistry.operator.openshift.io/dependencies-checksum: {}
                f:openshift.io/required-scc: {}
                f:target.workload.openshift.io/management: {}
              f:labels:
                .: {}
                f:docker-registry: {}
                f:pod-template-hash: {}
            f:spec:
              f:containers:
                k:{"name":"registry"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"REGISTRY_HEALTH_STORAGEDRIVER_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_ADDR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_NET"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_SECRET"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_TLS_CERTIFICATE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_TLS_KEY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_LOG_LEVEL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_OPENSHIFT_METRICS_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_OPENSHIFT_QUOTA_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_OPENSHIFT_SERVER_ADDR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_DELETE_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_BUCKET"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_ENCRYPT"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_FORCEPATHSTYLE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_REGION"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_USEDUALSTACK"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:lifecycle:
                    .: {}
                    f:preStop:
                      .: {}
                      f:exec:
                        .: {}
                        f:command: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":5000,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources:
                    .: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:securityContext:
                    .: {}
                    f:readOnlyRootFilesystem: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/pki/ca-trust/source/anchors"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/secrets"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/share/pki/ca-trust-source"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kubelet/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/run/secrets/cloud"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/run/secrets/openshift/serviceaccount"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:nodeSelector: {}
              f:priorityClassName: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:fsGroup: {}
                f:fsGroupChangePolicy: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:topologySpreadConstraints:
                .: {}
                k:{"topologyKey":"kubernetes.io/hostname","whenUnsatisfiable":"DoNotSchedule"}:
                  .: {}
                  f:labelSelector: {}
                  f:maxSkew: {}
                  f:topologyKey: {}
                  f:whenUnsatisfiable: {}
                k:{"topologyKey":"node-role.kubernetes.io/worker","whenUnsatisfiable":"DoNotSchedule"}:
                  .: {}
                  f:labelSelector: {}
                  f:maxSkew: {}
                  f:topologyKey: {}
                  f:whenUnsatisfiable: {}
                k:{"topologyKey":"topology.kubernetes.io/zone","whenUnsatisfiable":"DoNotSchedule"}:
                  .: {}
                  f:labelSelector: {}
                  f:maxSkew: {}
                  f:topologyKey: {}
                  f:whenUnsatisfiable: {}
              f:volumes:
                .: {}
                k:{"name":"bound-sa-token"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"ca-trust-extracted"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"image-registry-private-configuration"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:optional: {}
                    f:secretName: {}
                k:{"name":"installation-pull-secrets"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:optional: {}
                    f:secretName: {}
                k:{"name":"registry-certificates"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"registry-tls"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"trusted-ca"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                    f:optional: {}
                  f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-29T21:08:05Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:fullyLabeledReplicas: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-07-29T21:08:38Z"
    name: image-registry-6b6b796dcf
    namespace: openshift-image-registry
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: image-registry
      uid: eb27a192-22e0-4a6b-8bbd-422b4f23f863
    resourceVersion: "10397"
    uid: 2714750d-4fcd-4552-85e2-759ef4973d1c
  spec:
    replicas: 1
    selector:
      matchLabels:
        docker-registry: default
        pod-template-hash: 6b6b796dcf
    template:
      metadata:
        annotations:
          imageregistry.operator.openshift.io/dependencies-checksum: sha256:619b5d215987def372fdbfa3197ef104c2bb400969585495b9a7065b51978bb1
          openshift.io/required-scc: restricted-v2
          target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
        labels:
          docker-registry: default
          pod-template-hash: 6b6b796dcf
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java
            /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem &&
            update-ca-trust extract --output /etc/pki/ca-trust/extracted/ && exec
            /usr/bin/dockerregistry
          env:
          - name: REGISTRY_STORAGE
            value: s3
          - name: REGISTRY_STORAGE_S3_BUCKET
            value: 555f2283af1e-image-registry-us-east-1-fqiigyomqtfxrosbbstvqtqe
          - name: REGISTRY_STORAGE_S3_REGION
            value: us-east-1
          - name: REGISTRY_STORAGE_S3_ENCRYPT
            value: "true"
          - name: REGISTRY_STORAGE_S3_FORCEPATHSTYLE
            value: "true"
          - name: REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH
            value: /var/run/secrets/cloud/credentials
          - name: REGISTRY_STORAGE_S3_USEDUALSTACK
            value: "true"
          - name: REGISTRY_HTTP_ADDR
            value: :5000
          - name: REGISTRY_HTTP_NET
            value: tcp
          - name: REGISTRY_HTTP_SECRET
            value: 71eba639715aeef77ce70a7d06977ef8a639e313b1730476dd4a7e31ad12845920ba96ab679507a7fc45a239e1eaa7179082bd88e46a302a4bb9b2074433ebea
          - name: REGISTRY_LOG_LEVEL
            value: info
          - name: REGISTRY_OPENSHIFT_QUOTA_ENABLED
            value: "true"
          - name: REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR
            value: inmemory
          - name: REGISTRY_STORAGE_DELETE_ENABLED
            value: "true"
          - name: REGISTRY_HEALTH_STORAGEDRIVER_ENABLED
            value: "true"
          - name: REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL
            value: 10s
          - name: REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD
            value: "1"
          - name: REGISTRY_OPENSHIFT_METRICS_ENABLED
            value: "true"
          - name: REGISTRY_OPENSHIFT_SERVER_ADDR
            value: image-registry.openshift-image-registry.svc:5000
          - name: REGISTRY_HTTP_TLS_CERTIFICATE
            value: /etc/secrets/tls.crt
          - name: REGISTRY_HTTP_TLS_KEY
            value: /etc/secrets/tls.key
          image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:843b51893f8a3884f1fe56948902e4dd166193b21cc34e099aa8d96a8ff2ea09
          imagePullPolicy: IfNotPresent
          lifecycle:
            preStop:
              exec:
                command:
                - sleep
                - "25"
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthz
              port: 5000
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          name: registry
          ports:
          - containerPort: 5000
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthz
              port: 5000
              scheme: HTTPS
            initialDelaySeconds: 15
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          resources:
            requests:
              cpu: 100m
              memory: 256Mi
          securityContext:
            readOnlyRootFilesystem: true
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /var/run/secrets/cloud
            name: image-registry-private-configuration
            readOnly: true
          - mountPath: /etc/secrets
            name: registry-tls
          - mountPath: /etc/pki/ca-trust/extracted
            name: ca-trust-extracted
          - mountPath: /etc/pki/ca-trust/source/anchors
            name: registry-certificates
          - mountPath: /usr/share/pki/ca-trust-source
            name: trusted-ca
          - mountPath: /var/lib/kubelet/
            name: installation-pull-secrets
          - mountPath: /var/run/secrets/openshift/serviceaccount
            name: bound-sa-token
            readOnly: true
        dnsPolicy: ClusterFirst
        nodeSelector:
          kubernetes.io/os: linux
        priorityClassName: system-cluster-critical
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          fsGroup: 1000290000
          fsGroupChangePolicy: OnRootMismatch
        serviceAccount: registry
        serviceAccountName: registry
        terminationGracePeriodSeconds: 55
        topologySpreadConstraints:
        - labelSelector:
            matchLabels:
              docker-registry: default
          maxSkew: 1
          topologyKey: kubernetes.io/hostname
          whenUnsatisfiable: DoNotSchedule
        - labelSelector:
            matchLabels:
              docker-registry: default
          maxSkew: 1
          topologyKey: node-role.kubernetes.io/worker
          whenUnsatisfiable: DoNotSchedule
        - labelSelector:
            matchLabels:
              docker-registry: default
          maxSkew: 1
          topologyKey: topology.kubernetes.io/zone
          whenUnsatisfiable: DoNotSchedule
        volumes:
        - name: image-registry-private-configuration
          secret:
            defaultMode: 420
            optional: false
            secretName: image-registry-private-configuration
        - name: registry-tls
          projected:
            defaultMode: 420
            sources:
            - secret:
                name: image-registry-tls
        - emptyDir: {}
          name: ca-trust-extracted
        - configMap:
            defaultMode: 420
            name: image-registry-certificates
          name: registry-certificates
        - configMap:
            defaultMode: 420
            items:
            - key: ca-bundle.crt
              path: anchors/ca-bundle.crt
            name: trusted-ca
            optional: true
          name: trusted-ca
        - name: installation-pull-secrets
          secret:
            defaultMode: 420
            items:
            - key: .dockerconfigjson
              path: config.json
            optional: true
            secretName: installation-pull-secrets
        - name: bound-sa-token
          projected:
            defaultMode: 420
            sources:
            - serviceAccountToken:
                audience: openshift
                expirationSeconds: 3600
                path: token
  status:
    availableReplicas: 1
    fullyLabeledReplicas: 1
    observedGeneration: 2
    readyReplicas: 1
    replicas: 1
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "2"
      imageregistry.operator.openshift.io/checksum: sha256:1750e6264702704cceb41a9b68cac459dbb3a4423250228f7af4d8ee2a3c9851
      operator.openshift.io/spec-hash: 0e8ce93015b63b72556ff8ff33c09819986325e7732a3b7ff9fc403b5ab178b2
      release.openshift.io/version: 4.21.26
    creationTimestamp: "2026-07-29T21:03:28Z"
    generation: 2
    labels:
      docker-registry: default
      pod-template-hash: 7687fddd6d
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
            f:imageregistry.operator.openshift.io/checksum: {}
            f:operator.openshift.io/spec-hash: {}
            f:release.openshift.io/version: {}
          f:labels:
            .: {}
            f:docker-registry: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"eb27a192-22e0-4a6b-8bbd-422b4f23f863"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:imageregistry.operator.openshift.io/dependencies-checksum: {}
                f:openshift.io/required-scc: {}
                f:target.workload.openshift.io/management: {}
              f:labels:
                .: {}
                f:docker-registry: {}
                f:pod-template-hash: {}
            f:spec:
              f:containers:
                k:{"name":"registry"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"REGISTRY_HEALTH_STORAGEDRIVER_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_ADDR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_NET"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_SECRET"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_TLS_CERTIFICATE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_TLS_KEY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_LOG_LEVEL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_OPENSHIFT_METRICS_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_OPENSHIFT_QUOTA_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_OPENSHIFT_SERVER_ADDR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_DELETE_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_BUCKET"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_ENCRYPT"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_FORCEPATHSTYLE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_REGION"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_USEDUALSTACK"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:lifecycle:
                    .: {}
                    f:preStop:
                      .: {}
                      f:exec:
                        .: {}
                        f:command: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":5000,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources:
                    .: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:securityContext:
                    .: {}
                    f:readOnlyRootFilesystem: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/pki/ca-trust/source/anchors"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/secrets"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/share/pki/ca-trust-source"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kubelet/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/run/secrets/cloud"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/run/secrets/openshift/serviceaccount"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:nodeSelector: {}
              f:priorityClassName: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:fsGroup: {}
                f:fsGroupChangePolicy: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:topologySpreadConstraints:
                .: {}
                k:{"topologyKey":"kubernetes.io/hostname","whenUnsatisfiable":"DoNotSchedule"}:
                  .: {}
                  f:labelSelector: {}
                  f:maxSkew: {}
                  f:topologyKey: {}
                  f:whenUnsatisfiable: {}
                k:{"topologyKey":"node-role.kubernetes.io/worker","whenUnsatisfiable":"DoNotSchedule"}:
                  .: {}
                  f:labelSelector: {}
                  f:maxSkew: {}
                  f:topologyKey: {}
                  f:whenUnsatisfiable: {}
                k:{"topologyKey":"topology.kubernetes.io/zone","whenUnsatisfiable":"DoNotSchedule"}:
                  .: {}
                  f:labelSelector: {}
                  f:maxSkew: {}
                  f:topologyKey: {}
                  f:whenUnsatisfiable: {}
              f:volumes:
                .: {}
                k:{"name":"bound-sa-token"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"ca-trust-extracted"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"image-registry-private-configuration"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:optional: {}
                    f:secretName: {}
                k:{"name":"installation-pull-secrets"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:optional: {}
                    f:secretName: {}
                k:{"name":"registry-certificates"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"registry-tls"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"trusted-ca"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                    f:optional: {}
                  f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-29T21:08:38Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:observedGeneration: {}
          f:replicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-07-29T21:08:38Z"
    name: image-registry-7687fddd6d
    namespace: openshift-image-registry
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: image-registry
      uid: eb27a192-22e0-4a6b-8bbd-422b4f23f863
    resourceVersion: "10409"
    uid: 948665dc-efed-4e53-b7ee-f94f6a65f7a1
  spec:
    replicas: 0
    selector:
      matchLabels:
        docker-registry: default
        pod-template-hash: 7687fddd6d
    template:
      metadata:
        annotations:
          imageregistry.operator.openshift.io/dependencies-checksum: sha256:cd0d970283f978bb39fad0e46c960e2200964e91b992c3ca34327c627afba54c
          openshift.io/required-scc: restricted-v2
          target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
        labels:
          docker-registry: default
          pod-template-hash: 7687fddd6d
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java
            /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem &&
            update-ca-trust extract --output /etc/pki/ca-trust/extracted/ && exec
            /usr/bin/dockerregistry
          env:
          - name: REGISTRY_STORAGE
            value: s3
          - name: REGISTRY_STORAGE_S3_BUCKET
            value: 555f2283af1e-image-registry-us-east-1-fqiigyomqtfxrosbbstvqtqe
          - name: REGISTRY_STORAGE_S3_REGION
            value: us-east-1
          - name: REGISTRY_STORAGE_S3_ENCRYPT
            value: "true"
          - name: REGISTRY_STORAGE_S3_FORCEPATHSTYLE
            value: "true"
          - name: REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH
            value: /var/run/secrets/cloud/credentials
          - name: REGISTRY_STORAGE_S3_USEDUALSTACK
            value: "true"
          - name: REGISTRY_HTTP_ADDR
            value: :5000
          - name: REGISTRY_HTTP_NET
            value: tcp
          - name: REGISTRY_HTTP_SECRET
            value: 71eba639715aeef77ce70a7d06977ef8a639e313b1730476dd4a7e31ad12845920ba96ab679507a7fc45a239e1eaa7179082bd88e46a302a4bb9b2074433ebea
          - name: REGISTRY_LOG_LEVEL
            value: info
          - name: REGISTRY_OPENSHIFT_QUOTA_ENABLED
            value: "true"
          - name: REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR
            value: inmemory
          - name: REGISTRY_STORAGE_DELETE_ENABLED
            value: "true"
          - name: REGISTRY_HEALTH_STORAGEDRIVER_ENABLED
            value: "true"
          - name: REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL
            value: 10s
          - name: REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD
            value: "1"
          - name: REGISTRY_OPENSHIFT_METRICS_ENABLED
            value: "true"
          - name: REGISTRY_OPENSHIFT_SERVER_ADDR
            value: image-registry.openshift-image-registry.svc:5000
          - name: REGISTRY_HTTP_TLS_CERTIFICATE
            value: /etc/secrets/tls.crt
          - name: REGISTRY_HTTP_TLS_KEY
            value: /etc/secrets/tls.key
          image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:843b51893f8a3884f1fe56948902e4dd166193b21cc34e099aa8d96a8ff2ea09
          imagePullPolicy: IfNotPresent
          lifecycle:
            preStop:
              exec:
                command:
                - sleep
                - "25"
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthz
              port: 5000
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          name: registry
          ports:
          - containerPort: 5000
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthz
              port: 5000
              scheme: HTTPS
            initialDelaySeconds: 15
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          resources:
            requests:
              cpu: 100m
              memory: 256Mi
          securityContext:
            readOnlyRootFilesystem: true
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /var/run/secrets/cloud
            name: image-registry-private-configuration
            readOnly: true
          - mountPath: /etc/secrets
            name: registry-tls
          - mountPath: /etc/pki/ca-trust/extracted
            name: ca-trust-extracted
          - mountPath: /etc/pki/ca-trust/source/anchors
            name: registry-certificates
          - mountPath: /usr/share/pki/ca-trust-source
            name: trusted-ca
          - mountPath: /var/lib/kubelet/
            name: installation-pull-secrets
          - mountPath: /var/run/secrets/openshift/serviceaccount
            name: bound-sa-token
            readOnly: true
        dnsPolicy: ClusterFirst
        nodeSelector:
          kubernetes.io/os: linux
        priorityClassName: system-cluster-critical
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          fsGroup: 1000290000
          fsGroupChangePolicy: OnRootMismatch
        serviceAccount: registry
        serviceAccountName: registry
        terminationGracePeriodSeconds: 55
        topologySpreadConstraints:
        - labelSelector:
            matchLabels:
              docker-registry: default
          maxSkew: 1
          topologyKey: kubernetes.io/hostname
          whenUnsatisfiable: DoNotSchedule
        - labelSelector:
            matchLabels:
              docker-registry: default
          maxSkew: 1
          topologyKey: node-role.kubernetes.io/worker
          whenUnsatisfiable: DoNotSchedule
        - labelSelector:
            matchLabels:
              docker-registry: default
          maxSkew: 1
          topologyKey: topology.kubernetes.io/zone
          whenUnsatisfiable: DoNotSchedule
        volumes:
        - name: image-registry-private-configuration
          secret:
            defaultMode: 420
            optional: false
            secretName: image-registry-private-configuration
        - name: registry-tls
          projected:
            defaultMode: 420
            sources:
            - secret:
                name: image-registry-tls
        - emptyDir: {}
          name: ca-trust-extracted
        - configMap:
            defaultMode: 420
            name: image-registry-certificates
          name: registry-certificates
        - configMap:
            defaultMode: 420
            items:
            - key: ca-bundle.crt
              path: anchors/ca-bundle.crt
            name: trusted-ca
            optional: true
          name: trusted-ca
        - name: installation-pull-secrets
          secret:
            defaultMode: 420
            items:
            - key: .dockerconfigjson
              path: config.json
            optional: true
            secretName: installation-pull-secrets
        - name: bound-sa-token
          projected:
            defaultMode: 420
            sources:
            - serviceAccountToken:
                audience: openshift
                expirationSeconds: 3600
                path: token
  status:
    observedGeneration: 2
    replicas: 0
kind: ReplicaSetList
metadata:
  resourceVersion: "76287"