---
apiVersion: apps/v1
items:
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      console.openshift.io/authn-ca-trust-config-version: "10455"
      console.openshift.io/console-config-version: "10552"
      console.openshift.io/image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:adb54ad15db0980dd59a6f915d3fad23c7650ce07495d010fc030e108083d4f2
      console.openshift.io/infrastructure-config-version: "1419"
      console.openshift.io/oauth-secret-version: "10487"
      console.openshift.io/proxy-config-version: "1398"
      console.openshift.io/service-ca-config-version: "10556"
      console.openshift.io/serving-cert-secret-version: "10493"
      console.openshift.io/trusted-ca-config-version: "10581"
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "2"
      operator.openshift.io/spec-hash: 9e213645a25de558960d2f520ee95febbada11a2cd4432fe10618f2abfc4f96f
    creationTimestamp: "2026-06-08T12:14:36Z"
    generation: 2
    labels:
      app: console
      component: ui
      pod-template-hash: 5496f9649
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:console.openshift.io/authn-ca-trust-config-version: {}
            f:console.openshift.io/console-config-version: {}
            f:console.openshift.io/image: {}
            f:console.openshift.io/infrastructure-config-version: {}
            f:console.openshift.io/oauth-secret-version: {}
            f:console.openshift.io/proxy-config-version: {}
            f:console.openshift.io/service-ca-config-version: {}
            f:console.openshift.io/serving-cert-secret-version: {}
            f:console.openshift.io/trusted-ca-config-version: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
            f:operator.openshift.io/spec-hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:component: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"6290fc26-c76f-49e5-8ac4-aedce43d2e31"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:console.openshift.io/authn-ca-trust-config-version: {}
                f:console.openshift.io/console-config-version: {}
                f:console.openshift.io/image: {}
                f:console.openshift.io/infrastructure-config-version: {}
                f:console.openshift.io/oauth-secret-version: {}
                f:console.openshift.io/proxy-config-version: {}
                f:console.openshift.io/service-ca-config-version: {}
                f:console.openshift.io/serving-cert-secret-version: {}
                f:console.openshift.io/trusted-ca-config-version: {}
                f:openshift.io/required-scc: {}
                f:target.workload.openshift.io/management: {}
              f:labels:
                .: {}
                f:app: {}
                f:component: {}
                f:pod-template-hash: {}
              f:name: {}
            f:spec:
              f:affinity: {}
              f:containers:
                k:{"name":"console"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"POD_NAME"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:lifecycle:
                    .: {}
                    f:preStop:
                      .: {}
                      f:exec:
                        .: {}
                        f:command: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":8443,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources:
                    .: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:readOnlyRootFilesystem: {}
                  f:startupProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/console-config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/oauth-config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/oauth-serving-cert"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/service-ca"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/serving-cert"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:priorityClassName: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:runAsNonRoot: {}
                f:seccompProfile:
                  .: {}
                  f:type: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:tolerations: {}
              f:volumes:
                .: {}
                k:{"name":"console-config"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"console-oauth-config"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"console-serving-cert"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"oauth-serving-cert"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"service-ca"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"trusted-ca-bundle"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-06-08T12:15:47Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:observedGeneration: {}
          f:replicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-06-08T12:15:47Z"
    name: console-5496f9649
    namespace: openshift-console
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: console
      uid: 6290fc26-c76f-49e5-8ac4-aedce43d2e31
    resourceVersion: "11988"
    uid: 0e8736fa-eafb-46d5-8e0b-00aadb492eed
  spec:
    replicas: 0
    selector:
      matchLabels:
        app: console
        component: ui
        pod-template-hash: 5496f9649
    template:
      metadata:
        annotations:
          console.openshift.io/authn-ca-trust-config-version: "10455"
          console.openshift.io/console-config-version: "10552"
          console.openshift.io/image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:adb54ad15db0980dd59a6f915d3fad23c7650ce07495d010fc030e108083d4f2
          console.openshift.io/infrastructure-config-version: "1419"
          console.openshift.io/oauth-secret-version: "10487"
          console.openshift.io/proxy-config-version: "1398"
          console.openshift.io/service-ca-config-version: "10556"
          console.openshift.io/serving-cert-secret-version: "10493"
          console.openshift.io/trusted-ca-config-version: "10581"
          openshift.io/required-scc: restricted-v2
          target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
        labels:
          app: console
          component: ui
          pod-template-hash: 5496f9649
        name: console
      spec:
        affinity: {}
        containers:
        - command:
          - /opt/bridge/bin/bridge
          - --public-dir=/opt/bridge/static
          - --config=/var/console-config/console-config.yaml
          - --service-ca-file=/var/service-ca/service-ca.crt
          - --v=2
          env:
          - name: POD_NAME
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.name
          image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:adb54ad15db0980dd59a6f915d3fad23c7650ce07495d010fc030e108083d4f2
          imagePullPolicy: IfNotPresent
          lifecycle:
            preStop:
              exec:
                command:
                - sleep
                - "25"
          livenessProbe:
            failureThreshold: 1
            httpGet:
              path: /health
              port: 8443
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 10
          name: console
          ports:
          - containerPort: 8443
            name: https
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /health
              port: 8443
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          resources:
            requests:
              cpu: 10m
              memory: 100Mi
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            readOnlyRootFilesystem: false
          startupProbe:
            failureThreshold: 30
            httpGet:
              path: /health
              port: 8443
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 10
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /var/serving-cert
            name: console-serving-cert
            readOnly: true
          - mountPath: /var/oauth-config
            name: console-oauth-config
            readOnly: true
          - mountPath: /var/console-config
            name: console-config
            readOnly: true
          - mountPath: /var/service-ca
            name: service-ca
            readOnly: true
          - mountPath: /etc/pki/ca-trust/extracted/pem
            name: trusted-ca-bundle
            readOnly: true
          - mountPath: /var/oauth-serving-cert
            name: oauth-serving-cert
            readOnly: true
        dnsPolicy: ClusterFirst
        priorityClassName: system-cluster-critical
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          runAsNonRoot: true
          seccompProfile:
            type: RuntimeDefault
        serviceAccount: console
        serviceAccountName: console
        terminationGracePeriodSeconds: 40
        tolerations:
        - effect: NoSchedule
          key: node-role.kubernetes.io/master
          operator: Exists
        - effect: NoExecute
          key: node.kubernetes.io/unreachable
          operator: Exists
          tolerationSeconds: 120
        volumes:
        - name: console-serving-cert
          secret:
            defaultMode: 420
            secretName: console-serving-cert
        - name: console-oauth-config
          secret:
            defaultMode: 420
            secretName: console-oauth-config
        - configMap:
            defaultMode: 420
            name: console-config
          name: console-config
        - configMap:
            defaultMode: 420
            name: service-ca
          name: service-ca
        - configMap:
            defaultMode: 420
            items:
            - key: ca-bundle.crt
              path: tls-ca-bundle.pem
            name: trusted-ca-bundle
          name: trusted-ca-bundle
        - configMap:
            defaultMode: 420
            name: oauth-serving-cert
          name: oauth-serving-cert
  status:
    observedGeneration: 2
    replicas: 0
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      console.openshift.io/authn-ca-trust-config-version: "10455"
      console.openshift.io/console-config-version: "11887"
      console.openshift.io/image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:adb54ad15db0980dd59a6f915d3fad23c7650ce07495d010fc030e108083d4f2
      console.openshift.io/infrastructure-config-version: "1419"
      console.openshift.io/oauth-secret-version: "10487"
      console.openshift.io/proxy-config-version: "1398"
      console.openshift.io/service-ca-config-version: "10556"
      console.openshift.io/serving-cert-secret-version: "10493"
      console.openshift.io/trusted-ca-config-version: "10581"
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "3"
      operator.openshift.io/spec-hash: 4650db5c35987c0e0e37ebc201583f2f134a7955a64099261222649f9695692f
    creationTimestamp: "2026-06-08T12:15:36Z"
    generation: 2
    labels:
      app: console
      component: ui
      pod-template-hash: 5c7bd6498f
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:console.openshift.io/authn-ca-trust-config-version: {}
            f:console.openshift.io/console-config-version: {}
            f:console.openshift.io/image: {}
            f:console.openshift.io/infrastructure-config-version: {}
            f:console.openshift.io/oauth-secret-version: {}
            f:console.openshift.io/proxy-config-version: {}
            f:console.openshift.io/service-ca-config-version: {}
            f:console.openshift.io/serving-cert-secret-version: {}
            f:console.openshift.io/trusted-ca-config-version: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
            f:operator.openshift.io/spec-hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:component: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"6290fc26-c76f-49e5-8ac4-aedce43d2e31"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:console.openshift.io/authn-ca-trust-config-version: {}
                f:console.openshift.io/console-config-version: {}
                f:console.openshift.io/image: {}
                f:console.openshift.io/infrastructure-config-version: {}
                f:console.openshift.io/oauth-secret-version: {}
                f:console.openshift.io/proxy-config-version: {}
                f:console.openshift.io/service-ca-config-version: {}
                f:console.openshift.io/serving-cert-secret-version: {}
                f:console.openshift.io/trusted-ca-config-version: {}
                f:openshift.io/required-scc: {}
                f:target.workload.openshift.io/management: {}
              f:labels:
                .: {}
                f:app: {}
                f:component: {}
                f:pod-template-hash: {}
              f:name: {}
            f:spec:
              f:affinity: {}
              f:containers:
                k:{"name":"console"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"POD_NAME"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:lifecycle:
                    .: {}
                    f:preStop:
                      .: {}
                      f:exec:
                        .: {}
                        f:command: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":8443,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources:
                    .: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:readOnlyRootFilesystem: {}
                  f:startupProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/console-config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/oauth-config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/oauth-serving-cert"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/service-ca"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/serving-cert"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:priorityClassName: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:runAsNonRoot: {}
                f:seccompProfile:
                  .: {}
                  f:type: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:tolerations: {}
              f:volumes:
                .: {}
                k:{"name":"console-config"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"console-oauth-config"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"console-serving-cert"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"oauth-serving-cert"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"service-ca"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"trusted-ca-bundle"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-06-08T12:19:47Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:observedGeneration: {}
          f:replicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-06-08T12:19:47Z"
    name: console-5c7bd6498f
    namespace: openshift-console
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: console
      uid: 6290fc26-c76f-49e5-8ac4-aedce43d2e31
    resourceVersion: "19737"
    uid: 12d48144-6962-4725-9269-e93e8f091a48
  spec:
    replicas: 0
    selector:
      matchLabels:
        app: console
        component: ui
        pod-template-hash: 5c7bd6498f
    template:
      metadata:
        annotations:
          console.openshift.io/authn-ca-trust-config-version: "10455"
          console.openshift.io/console-config-version: "11887"
          console.openshift.io/image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:adb54ad15db0980dd59a6f915d3fad23c7650ce07495d010fc030e108083d4f2
          console.openshift.io/infrastructure-config-version: "1419"
          console.openshift.io/oauth-secret-version: "10487"
          console.openshift.io/proxy-config-version: "1398"
          console.openshift.io/service-ca-config-version: "10556"
          console.openshift.io/serving-cert-secret-version: "10493"
          console.openshift.io/trusted-ca-config-version: "10581"
          openshift.io/required-scc: restricted-v2
          target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
        labels:
          app: console
          component: ui
          pod-template-hash: 5c7bd6498f
        name: console
      spec:
        affinity: {}
        containers:
        - command:
          - /opt/bridge/bin/bridge
          - --public-dir=/opt/bridge/static
          - --config=/var/console-config/console-config.yaml
          - --service-ca-file=/var/service-ca/service-ca.crt
          - --v=2
          env:
          - name: POD_NAME
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.name
          image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:adb54ad15db0980dd59a6f915d3fad23c7650ce07495d010fc030e108083d4f2
          imagePullPolicy: IfNotPresent
          lifecycle:
            preStop:
              exec:
                command:
                - sleep
                - "25"
          livenessProbe:
            failureThreshold: 1
            httpGet:
              path: /health
              port: 8443
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 10
          name: console
          ports:
          - containerPort: 8443
            name: https
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /health
              port: 8443
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          resources:
            requests:
              cpu: 10m
              memory: 100Mi
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            readOnlyRootFilesystem: false
          startupProbe:
            failureThreshold: 30
            httpGet:
              path: /health
              port: 8443
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 10
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /var/serving-cert
            name: console-serving-cert
            readOnly: true
          - mountPath: /var/oauth-config
            name: console-oauth-config
            readOnly: true
          - mountPath: /var/console-config
            name: console-config
            readOnly: true
          - mountPath: /var/service-ca
            name: service-ca
            readOnly: true
          - mountPath: /etc/pki/ca-trust/extracted/pem
            name: trusted-ca-bundle
            readOnly: true
          - mountPath: /var/oauth-serving-cert
            name: oauth-serving-cert
            readOnly: true
        dnsPolicy: ClusterFirst
        priorityClassName: system-cluster-critical
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          runAsNonRoot: true
          seccompProfile:
            type: RuntimeDefault
        serviceAccount: console
        serviceAccountName: console
        terminationGracePeriodSeconds: 40
        tolerations:
        - effect: NoSchedule
          key: node-role.kubernetes.io/master
          operator: Exists
        - effect: NoExecute
          key: node.kubernetes.io/unreachable
          operator: Exists
          tolerationSeconds: 120
        volumes:
        - name: console-serving-cert
          secret:
            defaultMode: 420
            secretName: console-serving-cert
        - name: console-oauth-config
          secret:
            defaultMode: 420
            secretName: console-oauth-config
        - configMap:
            defaultMode: 420
            name: console-config
          name: console-config
        - configMap:
            defaultMode: 420
            name: service-ca
          name: service-ca
        - configMap:
            defaultMode: 420
            items:
            - key: ca-bundle.crt
              path: tls-ca-bundle.pem
            name: trusted-ca-bundle
          name: trusted-ca-bundle
        - configMap:
            defaultMode: 420
            name: oauth-serving-cert
          name: oauth-serving-cert
  status:
    observedGeneration: 2
    replicas: 0
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      console.openshift.io/authn-ca-trust-config-version: "10455"
      console.openshift.io/console-config-version: "19124"
      console.openshift.io/image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:adb54ad15db0980dd59a6f915d3fad23c7650ce07495d010fc030e108083d4f2
      console.openshift.io/infrastructure-config-version: "1419"
      console.openshift.io/oauth-secret-version: "10487"
      console.openshift.io/proxy-config-version: "1398"
      console.openshift.io/service-ca-config-version: "10556"
      console.openshift.io/serving-cert-secret-version: "10493"
      console.openshift.io/trusted-ca-config-version: "10581"
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "4"
      operator.openshift.io/spec-hash: 759a9fcde3e006ff5d2bb47359ea1177e2eb48dd8e143148c2ca59d74c1bddc4
    creationTimestamp: "2026-06-08T12:19:36Z"
    generation: 1
    labels:
      app: console
      component: ui
      pod-template-hash: 5d7db6f7df
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:console.openshift.io/authn-ca-trust-config-version: {}
            f:console.openshift.io/console-config-version: {}
            f:console.openshift.io/image: {}
            f:console.openshift.io/infrastructure-config-version: {}
            f:console.openshift.io/oauth-secret-version: {}
            f:console.openshift.io/proxy-config-version: {}
            f:console.openshift.io/service-ca-config-version: {}
            f:console.openshift.io/serving-cert-secret-version: {}
            f:console.openshift.io/trusted-ca-config-version: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
            f:operator.openshift.io/spec-hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:component: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"6290fc26-c76f-49e5-8ac4-aedce43d2e31"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:console.openshift.io/authn-ca-trust-config-version: {}
                f:console.openshift.io/console-config-version: {}
                f:console.openshift.io/image: {}
                f:console.openshift.io/infrastructure-config-version: {}
                f:console.openshift.io/oauth-secret-version: {}
                f:console.openshift.io/proxy-config-version: {}
                f:console.openshift.io/service-ca-config-version: {}
                f:console.openshift.io/serving-cert-secret-version: {}
                f:console.openshift.io/trusted-ca-config-version: {}
                f:openshift.io/required-scc: {}
                f:target.workload.openshift.io/management: {}
              f:labels:
                .: {}
                f:app: {}
                f:component: {}
                f:pod-template-hash: {}
              f:name: {}
            f:spec:
              f:affinity: {}
              f:containers:
                k:{"name":"console"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"POD_NAME"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:lifecycle:
                    .: {}
                    f:preStop:
                      .: {}
                      f:exec:
                        .: {}
                        f:command: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":8443,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources:
                    .: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:readOnlyRootFilesystem: {}
                  f:startupProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/console-config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/oauth-config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/oauth-serving-cert"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/service-ca"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/serving-cert"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:priorityClassName: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:runAsNonRoot: {}
                f:seccompProfile:
                  .: {}
                  f:type: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:tolerations: {}
              f:volumes:
                .: {}
                k:{"name":"console-config"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"console-oauth-config"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"console-serving-cert"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"oauth-serving-cert"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"service-ca"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"trusted-ca-bundle"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-06-08T12:19:36Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:fullyLabeledReplicas: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-06-08T12:19:47Z"
    name: console-5d7db6f7df
    namespace: openshift-console
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: console
      uid: 6290fc26-c76f-49e5-8ac4-aedce43d2e31
    resourceVersion: "19720"
    uid: 69a60c41-4891-4d00-9df3-8663de11e803
  spec:
    replicas: 1
    selector:
      matchLabels:
        app: console
        component: ui
        pod-template-hash: 5d7db6f7df
    template:
      metadata:
        annotations:
          console.openshift.io/authn-ca-trust-config-version: "10455"
          console.openshift.io/console-config-version: "19124"
          console.openshift.io/image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:adb54ad15db0980dd59a6f915d3fad23c7650ce07495d010fc030e108083d4f2
          console.openshift.io/infrastructure-config-version: "1419"
          console.openshift.io/oauth-secret-version: "10487"
          console.openshift.io/proxy-config-version: "1398"
          console.openshift.io/service-ca-config-version: "10556"
          console.openshift.io/serving-cert-secret-version: "10493"
          console.openshift.io/trusted-ca-config-version: "10581"
          openshift.io/required-scc: restricted-v2
          target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
        labels:
          app: console
          component: ui
          pod-template-hash: 5d7db6f7df
        name: console
      spec:
        affinity: {}
        containers:
        - command:
          - /opt/bridge/bin/bridge
          - --public-dir=/opt/bridge/static
          - --config=/var/console-config/console-config.yaml
          - --service-ca-file=/var/service-ca/service-ca.crt
          - --v=2
          env:
          - name: POD_NAME
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.name
          image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:adb54ad15db0980dd59a6f915d3fad23c7650ce07495d010fc030e108083d4f2
          imagePullPolicy: IfNotPresent
          lifecycle:
            preStop:
              exec:
                command:
                - sleep
                - "25"
          livenessProbe:
            failureThreshold: 1
            httpGet:
              path: /health
              port: 8443
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 10
          name: console
          ports:
          - containerPort: 8443
            name: https
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /health
              port: 8443
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          resources:
            requests:
              cpu: 10m
              memory: 100Mi
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            readOnlyRootFilesystem: false
          startupProbe:
            failureThreshold: 30
            httpGet:
              path: /health
              port: 8443
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 10
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /var/serving-cert
            name: console-serving-cert
            readOnly: true
          - mountPath: /var/oauth-config
            name: console-oauth-config
            readOnly: true
          - mountPath: /var/console-config
            name: console-config
            readOnly: true
          - mountPath: /var/service-ca
            name: service-ca
            readOnly: true
          - mountPath: /etc/pki/ca-trust/extracted/pem
            name: trusted-ca-bundle
            readOnly: true
          - mountPath: /var/oauth-serving-cert
            name: oauth-serving-cert
            readOnly: true
        dnsPolicy: ClusterFirst
        priorityClassName: system-cluster-critical
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          runAsNonRoot: true
          seccompProfile:
            type: RuntimeDefault
        serviceAccount: console
        serviceAccountName: console
        terminationGracePeriodSeconds: 40
        tolerations:
        - effect: NoSchedule
          key: node-role.kubernetes.io/master
          operator: Exists
        - effect: NoExecute
          key: node.kubernetes.io/unreachable
          operator: Exists
          tolerationSeconds: 120
        volumes:
        - name: console-serving-cert
          secret:
            defaultMode: 420
            secretName: console-serving-cert
        - name: console-oauth-config
          secret:
            defaultMode: 420
            secretName: console-oauth-config
        - configMap:
            defaultMode: 420
            name: console-config
          name: console-config
        - configMap:
            defaultMode: 420
            name: service-ca
          name: service-ca
        - configMap:
            defaultMode: 420
            items:
            - key: ca-bundle.crt
              path: tls-ca-bundle.pem
            name: trusted-ca-bundle
          name: trusted-ca-bundle
        - configMap:
            defaultMode: 420
            name: oauth-serving-cert
          name: oauth-serving-cert
  status:
    availableReplicas: 1
    fullyLabeledReplicas: 1
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      console.openshift.io/authn-ca-trust-config-version: "10455"
      console.openshift.io/console-config-version: "10552"
      console.openshift.io/image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:adb54ad15db0980dd59a6f915d3fad23c7650ce07495d010fc030e108083d4f2
      console.openshift.io/infrastructure-config-version: "1419"
      console.openshift.io/oauth-secret-version: "10487"
      console.openshift.io/proxy-config-version: "1398"
      console.openshift.io/service-ca-config-version: "10553"
      console.openshift.io/serving-cert-secret-version: "10493"
      console.openshift.io/trusted-ca-config-version: "10555"
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "1"
      operator.openshift.io/spec-hash: cedd827c6ea63c3fccbd2d04904961cbe61aeb22784f1071f45fd572e12c2e19
    creationTimestamp: "2026-06-08T12:14:28Z"
    generation: 2
    labels:
      app: console
      component: ui
      pod-template-hash: 7f74df9c9d
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:console.openshift.io/authn-ca-trust-config-version: {}
            f:console.openshift.io/console-config-version: {}
            f:console.openshift.io/image: {}
            f:console.openshift.io/infrastructure-config-version: {}
            f:console.openshift.io/oauth-secret-version: {}
            f:console.openshift.io/proxy-config-version: {}
            f:console.openshift.io/service-ca-config-version: {}
            f:console.openshift.io/serving-cert-secret-version: {}
            f:console.openshift.io/trusted-ca-config-version: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
            f:operator.openshift.io/spec-hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:component: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"6290fc26-c76f-49e5-8ac4-aedce43d2e31"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:console.openshift.io/authn-ca-trust-config-version: {}
                f:console.openshift.io/console-config-version: {}
                f:console.openshift.io/image: {}
                f:console.openshift.io/infrastructure-config-version: {}
                f:console.openshift.io/oauth-secret-version: {}
                f:console.openshift.io/proxy-config-version: {}
                f:console.openshift.io/service-ca-config-version: {}
                f:console.openshift.io/serving-cert-secret-version: {}
                f:console.openshift.io/trusted-ca-config-version: {}
                f:openshift.io/required-scc: {}
                f:target.workload.openshift.io/management: {}
              f:labels:
                .: {}
                f:app: {}
                f:component: {}
                f:pod-template-hash: {}
              f:name: {}
            f:spec:
              f:affinity: {}
              f:containers:
                k:{"name":"console"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"POD_NAME"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:lifecycle:
                    .: {}
                    f:preStop:
                      .: {}
                      f:exec:
                        .: {}
                        f:command: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":8443,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources:
                    .: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:readOnlyRootFilesystem: {}
                  f:startupProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/console-config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/oauth-config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/oauth-serving-cert"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/service-ca"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/serving-cert"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:priorityClassName: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:runAsNonRoot: {}
                f:seccompProfile:
                  .: {}
                  f:type: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:tolerations: {}
              f:volumes:
                .: {}
                k:{"name":"console-config"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"console-oauth-config"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"console-serving-cert"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"oauth-serving-cert"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"service-ca"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-06-08T12:14:47Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:observedGeneration: {}
          f:replicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-06-08T12:14:47Z"
    name: console-7f74df9c9d
    namespace: openshift-console
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: console
      uid: 6290fc26-c76f-49e5-8ac4-aedce43d2e31
    resourceVersion: "11033"
    uid: 43b428da-ac0e-44ea-a382-1d752523ae01
  spec:
    replicas: 0
    selector:
      matchLabels:
        app: console
        component: ui
        pod-template-hash: 7f74df9c9d
    template:
      metadata:
        annotations:
          console.openshift.io/authn-ca-trust-config-version: "10455"
          console.openshift.io/console-config-version: "10552"
          console.openshift.io/image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:adb54ad15db0980dd59a6f915d3fad23c7650ce07495d010fc030e108083d4f2
          console.openshift.io/infrastructure-config-version: "1419"
          console.openshift.io/oauth-secret-version: "10487"
          console.openshift.io/proxy-config-version: "1398"
          console.openshift.io/service-ca-config-version: "10553"
          console.openshift.io/serving-cert-secret-version: "10493"
          console.openshift.io/trusted-ca-config-version: "10555"
          openshift.io/required-scc: restricted-v2
          target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
        labels:
          app: console
          component: ui
          pod-template-hash: 7f74df9c9d
        name: console
      spec:
        affinity: {}
        containers:
        - command:
          - /opt/bridge/bin/bridge
          - --public-dir=/opt/bridge/static
          - --config=/var/console-config/console-config.yaml
          - --service-ca-file=/var/service-ca/service-ca.crt
          - --v=2
          env:
          - name: POD_NAME
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.name
          image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:adb54ad15db0980dd59a6f915d3fad23c7650ce07495d010fc030e108083d4f2
          imagePullPolicy: IfNotPresent
          lifecycle:
            preStop:
              exec:
                command:
                - sleep
                - "25"
          livenessProbe:
            failureThreshold: 1
            httpGet:
              path: /health
              port: 8443
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 10
          name: console
          ports:
          - containerPort: 8443
            name: https
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /health
              port: 8443
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          resources:
            requests:
              cpu: 10m
              memory: 100Mi
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            readOnlyRootFilesystem: false
          startupProbe:
            failureThreshold: 30
            httpGet:
              path: /health
              port: 8443
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 10
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /var/serving-cert
            name: console-serving-cert
            readOnly: true
          - mountPath: /var/oauth-config
            name: console-oauth-config
            readOnly: true
          - mountPath: /var/console-config
            name: console-config
            readOnly: true
          - mountPath: /var/service-ca
            name: service-ca
            readOnly: true
          - mountPath: /var/oauth-serving-cert
            name: oauth-serving-cert
            readOnly: true
        dnsPolicy: ClusterFirst
        priorityClassName: system-cluster-critical
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          runAsNonRoot: true
          seccompProfile:
            type: RuntimeDefault
        serviceAccount: console
        serviceAccountName: console
        terminationGracePeriodSeconds: 40
        tolerations:
        - effect: NoSchedule
          key: node-role.kubernetes.io/master
          operator: Exists
        - effect: NoExecute
          key: node.kubernetes.io/unreachable
          operator: Exists
          tolerationSeconds: 120
        volumes:
        - name: console-serving-cert
          secret:
            defaultMode: 420
            secretName: console-serving-cert
        - name: console-oauth-config
          secret:
            defaultMode: 420
            secretName: console-oauth-config
        - configMap:
            defaultMode: 420
            name: console-config
          name: console-config
        - configMap:
            defaultMode: 420
            name: service-ca
          name: service-ca
        - configMap:
            defaultMode: 420
            name: oauth-serving-cert
          name: oauth-serving-cert
  status:
    observedGeneration: 2
    replicas: 0
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "1"
      operator.openshift.io/spec-hash: fb08d2482540c36d394cd3c77a922981f4f28b2d4b2f57e8ad8df4fca862bef5
    creationTimestamp: "2026-06-08T12:14:19Z"
    generation: 1
    labels:
      app: console
      component: downloads
      pod-template-hash: 6657875f97
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
            f:operator.openshift.io/spec-hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:component: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"5bb3922e-f106-41f7-9650-4dda21e224bf"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:openshift.io/required-scc: {}
                f:target.workload.openshift.io/management: {}
              f:labels:
                .: {}
                f:app: {}
                f:component: {}
                f:pod-template-hash: {}
              f:name: {}
            f:spec:
              f:affinity: {}
              f:containers:
                k:{"name":"download-server"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":8080,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources:
                    .: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:readOnlyRootFilesystem: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
              f:dnsPolicy: {}
              f:nodeSelector: {}
              f:priorityClassName: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:runAsNonRoot: {}
                f:seccompProfile:
                  .: {}
                  f:type: {}
              f:terminationGracePeriodSeconds: {}
              f:tolerations: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-06-08T12:14:19Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:fullyLabeledReplicas: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-06-08T12:14:38Z"
    name: downloads-6657875f97
    namespace: openshift-console
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: downloads
      uid: 5bb3922e-f106-41f7-9650-4dda21e224bf
    resourceVersion: "10763"
    uid: e7bee67d-9a20-40dc-9c80-2c1ee1f3da19
  spec:
    replicas: 1
    selector:
      matchLabels:
        app: console
        component: downloads
        pod-template-hash: 6657875f97
    template:
      metadata:
        annotations:
          openshift.io/required-scc: restricted-v2
          target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
        labels:
          app: console
          component: downloads
          pod-template-hash: 6657875f97
        name: downloads
      spec:
        affinity: {}
        containers:
        - args:
          - -c
          - "cat <<EOF >/tmp/serve.py\nimport errno, http.server, os, re, signal,
            socket, sys, tarfile, tempfile, threading, time, zipfile\n\ndef shutdown_handler(signum,
            frame):\n  print(\"Received signal {}, shutting down...\".format(signum),
            flush=True)\n  os._exit(0)\nsignal.signal(signal.SIGTERM, shutdown_handler)\n\ndef
            write_index(path, message):\n  with open(path, 'wb') as f:\n    f.write('\\n'.join([\n
            \     '<!doctype html>',\n      '<html lang=\"en\">',\n      '<head>',\n
            \     '  <meta charset=\"utf-8\">',\n      '</head>',\n      '<body>',\n
            \     '  {}'.format(message),\n      '</body>',\n      '</html>',\n      '',\n
            \   ]).encode('utf-8'))\n\n# Launch multiple listeners as threads\nclass
            Thread(threading.Thread):\n  def __init__(self, i, socket):\n    threading.Thread.__init__(self)\n
            \   self.i = i\n    self.socket = socket\n    self.daemon = True\n    self.start()\n\n
            \ def run(self):\n    server = http.server.SimpleHTTPRequestHandler\n
            \   server.server_version = \"OpenShift Downloads Server\"\n    server.sys_version
            = \"\"\n    httpd = http.server.HTTPServer(addr, server, False)\n\n    #
            Prevent the HTTP server from re-binding every handler.\n    # https://stackoverflow.com/questions/46210672/\n
            \   httpd.socket = self.socket\n    httpd.server_bind = self.server_close
            = lambda self: None\n\n    httpd.serve_forever()\n\nprint('Starting downloads
            server...', flush=True)\ntemp_dir = tempfile.mkdtemp()\nprint('Serving
            from: {}'.format(temp_dir), flush=True)\nos.chdir(temp_dir)\n\nprint('Creating
            arch directories...', flush=True)\nfor arch in ['amd64', 'arm64', 'ppc64le',
            's390x']:\n  os.mkdir(arch)\n\ncontent = ['<a href=\"oc-license\">license</a>']\nprint('Creating
            license symlink...', flush=True)\nos.symlink('/usr/share/openshift/LICENSE',
            'oc-license')\n\n# Function to create archives in background\ndef create_archives_async(arch,
            operating_system, path, basename, archive_path_root):\n  try:\n    print('
            \ [Background] Creating archives for {} {}...'.format(arch, operating_system),
            flush=True)\n    \n    print('    [Background] Creating tar archive...',
            flush=True)\n    with tarfile.open('{}.tar'.format(archive_path_root),
            'w') as tar:\n      tar.add(path, basename)\n    \n    print('    [Background]
            Creating zip archive...', flush=True)\n    with zipfile.ZipFile('{}.zip'.format(archive_path_root),
            'w') as zip:\n      zip.write(path, basename)\n    \n    print('  [Background]
            Done with archives for {} {}'.format(arch, operating_system), flush=True)\n
            \ except Exception as e:\n    print('  [Background] ERROR creating archives
            for {} {}: {}'.format(arch, operating_system, str(e)), flush=True)\n\nprint('Creating
            oc binary symlinks (archives will be created asynchronously)...', flush=True)\narchive_threads
            = []\n\nfor arch, operating_system, path in [\n    ('amd64', 'linux',
            '/usr/share/openshift/linux_amd64/oc'),\n    ('amd64', 'linux', '/usr/share/openshift/linux_amd64/oc.rhel8'),\n
            \   ('amd64', 'linux', '/usr/share/openshift/linux_amd64/oc.rhel9'),\n
            \   ('amd64', 'mac', '/usr/share/openshift/mac/oc'),\n    ('amd64', 'windows',
            '/usr/share/openshift/windows/oc.exe'),\n    ('arm64', 'linux', '/usr/share/openshift/linux_arm64/oc'),\n
            \   ('arm64', 'linux', '/usr/share/openshift/linux_arm64/oc.rhel8'),\n
            \   ('arm64', 'linux', '/usr/share/openshift/linux_arm64/oc.rhel9'),\n
            \   ('arm64', 'mac', '/usr/share/openshift/mac_arm64/oc'),\n    ('ppc64le',
            'linux', '/usr/share/openshift/linux_ppc64le/oc'),\n    ('ppc64le', 'linux',
            '/usr/share/openshift/linux_ppc64le/oc.rhel8'),\n    ('ppc64le', 'linux',
            '/usr/share/openshift/linux_ppc64le/oc.rhel9'),\n    ('s390x', 'linux',
            '/usr/share/openshift/linux_s390x/oc'),\n    ('s390x', 'linux', '/usr/share/openshift/linux_s390x/oc.rhel8'),\n
            \   ('s390x', 'linux', '/usr/share/openshift/linux_s390x/oc.rhel9'),\n
            \   ]:\n  try:\n    print('  Processing {} {} ({})...'.format(arch, operating_system,
            path), flush=True)\n    \n    # Check if source file exists\n    if not
            os.path.exists(path):\n      print('    WARNING: {} does not exist, skipping'.format(path),
            flush=True)\n      continue\n    \n    file_size = os.path.getsize(path)\n
            \   print('    Source file size: {} MB'.format(file_size // (1024*1024)),
            flush=True)\n    \n    basename = os.path.basename(path)\n    target_path
            = os.path.join(arch, operating_system, basename)\n    \n    print('    Creating
            directory...', flush=True)\n    os.makedirs(os.path.join(arch, operating_system),
            exist_ok=True)\n    \n    print('    Creating symlink...', flush=True)\n
            \   os.symlink(path, target_path)\n    \n    # Only strip .exe extension,
            keep everything else (e.g., oc.rhel8 stays oc.rhel8)\n    if basename.endswith('.exe'):\n
            \     base_root = basename[:-4]\n    else:\n      base_root = basename\n
            \   archive_path_root = os.path.join(arch, operating_system, base_root)\n
            \   \n    # Start background thread to create archives\n    archive_thread
            = threading.Thread(\n      target=create_archives_async,\n      args=(arch,
            operating_system, path, basename, archive_path_root),\n      daemon=True\n
            \   )\n    archive_thread.start()\n    archive_threads.append(archive_thread)\n
            \   \n    content.append(\n      '<a href=\"{0}\">oc ({1} {2})</a> (<a
            href=\"{3}.tar\">tar</a> <a href=\"{3}.zip\">zip</a>)'.format(\n        target_path,
            arch, operating_system, archive_path_root\n      )\n    )\n    print('
            \ Done with {} {} (archives creating in background)'.format(arch, operating_system),
            flush=True)\n  except Exception as e:\n    print('  ERROR processing {}
            {}: {}'.format(arch, operating_system, str(e)), flush=True)\n\nprint('All
            symlinks created. {} background threads creating archives...'.format(len(archive_threads)),
            flush=True)\n\nfor root, directories, filenames in os.walk(temp_dir):\n
            \ root_link = os.path.relpath(temp_dir, os.path.join(root, 'child')).replace(os.path.sep,
            '/')\n  for directory in directories:\n    write_index(\n      path=os.path.join(root,
            directory, 'index.html'),\n      message='<p>Directory listings are disabled.
            \ See <a href=\"{}\">here</a> for available content.</p>'.format(root_link),\n
            \   )\n\nwrite_index(\n  path=os.path.join(temp_dir, 'index.html'),\n
            \ message='\\n'.join(\n    ['<p><em>Note: Archive files (.tar, .zip) are
            generated on server startup and may take a few moments to become available.</em></p>']
            +\n    ['<ul>'] +\n    ['  <li>{}</li>'.format(entry) for entry in content]
            +\n    ['</ul>']\n  ),\n)\n\n# Create socket\n# IPv6 should handle IPv4
            passively so long as it is not bound to a\n# specific address or set to
            IPv6_ONLY\n# https://stackoverflow.com/questions/25817848/python-3-does-http-server-support-ipv6\ntry:\n
            \ addr = ('::', 8080)\n  sock = socket.socket(socket.AF_INET6, socket.SOCK_STREAM)\nexcept
            socket.error as err:\n  # errno.EAFNOSUPPORT is \"socket.error: [Errno
            97] Address family not supported by protocol\"\n  # When IPv6 is disabled,
            socket will bind using IPv4.\n  if err.errno == errno.EAFNOSUPPORT:\n
            \   addr = ('', 8080)\n    sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)\n
            \ else:\n    raise    \nsock.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR,
            1)\nprint('Binding to {}...'.format(addr), flush=True)\nsock.bind(addr)\nsock.listen(5)\n\nprint('Starting
            100 worker threads...', flush=True)\n[Thread(i, socket=sock) for i in
            range(100)]\nprint('Server ready on port 8080!', flush=True)\ntime.sleep(9e9)\nEOF\nexec
            python3 /tmp/serve.py\n"
          command:
          - /bin/sh
          image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:35c765f6df6ce24ca271c97fc72e22c3d959cc73898ed301f9cfc7205f1f7bb8
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 8080
              scheme: HTTP
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          name: download-server
          ports:
          - containerPort: 8080
            name: http
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /
              port: 8080
              scheme: HTTP
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          resources:
            requests:
              cpu: 10m
              memory: 50Mi
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            readOnlyRootFilesystem: false
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
        dnsPolicy: ClusterFirst
        nodeSelector:
          kubernetes.io/os: linux
        priorityClassName: system-cluster-critical
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          runAsNonRoot: true
          seccompProfile:
            type: RuntimeDefault
        terminationGracePeriodSeconds: 5
        tolerations:
        - effect: NoSchedule
          key: node-role.kubernetes.io/master
          operator: Exists
        - effect: NoExecute
          key: node.kubernetes.io/unreachable
          operator: Exists
          tolerationSeconds: 120
  status:
    availableReplicas: 1
    fullyLabeledReplicas: 1
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
kind: ReplicaSetList
metadata:
  resourceVersion: "51173"