--- apiVersion: v1 items: - apiVersion: v1 kind: Pod metadata: annotations: openshift.io/required-scc: restricted-v2 openshift.io/scc: restricted-v2 seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user creationTimestamp: "2026-10-31T02:34:12Z" generateName: networking-console-plugin-86c478bb88- generation: 1 labels: app.kubernetes.io/component: networking-console-plugin app.kubernetes.io/managed-by: cluster-network-operator app.kubernetes.io/name: networking-console-plugin app.kubernetes.io/part-of: cluster-network-operator pod-template-hash: 86c478bb88 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:openshift.io/required-scc: {} f:target.workload.openshift.io/management: {} f:generateName: {} f:labels: .: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:pod-template-hash: {} f:ownerReferences: .: {} k:{"uid":"1e1dc22a-14e2-4588-8adc-1c5d29bde76c"}: {} f:spec: f:automountServiceAccountToken: {} f:containers: k:{"name":"networking-console-plugin"}: .: {} f:command: {} f:env: .: {} k:{"name":"POD_IP"}: .: {} f:name: {} f:valueFrom: .: {} f:fieldRef: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:ports: .: {} k:{"containerPort":9443,"protocol":"TCP"}: .: {} f:containerPort: {} f:name: {} f:protocol: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:allowPrivilegeEscalation: {} f:capabilities: .: {} f:drop: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/etc/nginx/nginx.conf"}: .: {} f:mountPath: {} f:name: {} f:readOnly: {} f:subPath: {} k:{"mountPath":"/var/cert"}: .: {} f:mountPath: {} f:name: {} f:readOnly: {} f:dnsPolicy: {} f:enableServiceLinks: {} f:nodeSelector: {} f:priorityClassName: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: .: {} f:runAsNonRoot: {} f:seccompProfile: .: {} f:type: {} f:serviceAccount: {} f:serviceAccountName: {} f:terminationGracePeriodSeconds: {} f:volumes: .: {} k:{"name":"networking-console-plugin-cert"}: .: {} f:name: {} f:secret: .: {} f:defaultMode: {} f:secretName: {} k:{"name":"nginx-conf"}: .: {} f:configMap: .: {} f:defaultMode: {} f:name: {} f:name: {} manager: kube-controller-manager operation: Update time: "2026-10-31T02:34:12Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"PodScheduled"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:message: {} f:observedGeneration: {} f:reason: {} f:status: {} f:type: {} manager: kube-scheduler operation: Update subresource: status time: "2026-10-31T02:34:12Z" name: networking-console-plugin-86c478bb88-lrdfn namespace: openshift-network-console ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: networking-console-plugin-86c478bb88 uid: 1e1dc22a-14e2-4588-8adc-1c5d29bde76c resourceVersion: "179063" uid: 84e957d9-4e09-4414-b079-276095629d3c spec: automountServiceAccountToken: false containers: - command: - /bin/sh - -c - | if echo "$POD_IP" | grep -qE '^([0-9]{1,3}\.){3}[0-9]{1,3}$'; then LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME="9443" else LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME="[::]:9443" fi sed "s/LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME/$LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME/g" /etc/nginx/nginx.conf > /tmp/nginx.conf exec nginx -c /tmp/nginx.conf -g 'daemon off;' env: - name: POD_IP valueFrom: fieldRef: apiVersion: v1 fieldPath: status.podIP image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:469af660c98eb234e0497e5da7bb4d72bd8bee9a83b202a6f7edb50f51ca4ddb imagePullPolicy: IfNotPresent name: networking-console-plugin ports: - containerPort: 9443 name: https protocol: TCP resources: requests: cpu: 10m memory: 50Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsUser: 1000580000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /var/cert name: networking-console-plugin-cert readOnly: true - mountPath: /etc/nginx/nginx.conf name: nginx-conf readOnly: true subPath: nginx.conf dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: networking-console-plugin-dockercfg-x5pvd nodeSelector: kubernetes.io/os: linux preemptionPolicy: PreemptLowerPriority priority: 2000000000 priorityClassName: system-cluster-critical restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 1000580000 runAsNonRoot: true seLinuxOptions: level: s0:c24,c14 seccompProfile: type: RuntimeDefault serviceAccount: networking-console-plugin serviceAccountName: networking-console-plugin terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 - effect: NoSchedule key: node.kubernetes.io/memory-pressure operator: Exists volumes: - configMap: defaultMode: 420 name: networking-console-plugin name: nginx-conf - name: networking-console-plugin-cert secret: defaultMode: 420 secretName: networking-console-plugin-cert status: conditions: - lastProbeTime: null lastTransitionTime: "2026-10-31T02:34:12Z" message: '0/1 nodes are available: 1 node(s) had untolerated taint(s). no new claims to deallocate, preemption: 0/1 nodes are available: 1 Preemption is not helpful for scheduling.' observedGeneration: 1 reason: Unschedulable status: "False" type: PodScheduled phase: Pending qosClass: Burstable kind: PodList metadata: resourceVersion: "179707"