---
apiVersion: v1
items:
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.132.0.3/23"],"mac_address":"0a:58:0a:84:00:03","gateway_ips":["10.132.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.132.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.132.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.132.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.132.0.1"}],"ip_address":"10.132.0.3/23","gateway_ip":"10.132.0.1","role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.132.0.3"
            ],
            "mac": "0a:58:0a:84:00:03",
            "default": true,
            "dns": {}
        }]
    creationTimestamp: "2026-07-23T13:17:37Z"
    generateName: global-pull-secret-syncer-
    generation: 1
    labels:
      controller-revision-hash: 58c69ff56
      hypershift.openshift.io/globalps-config-hash: 448b387c
      name: global-pull-secret-syncer
      pod-template-generation: "1"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:generateName: {}
          f:labels:
            .: {}
            f:controller-revision-hash: {}
            f:hypershift.openshift.io/globalps-config-hash: {}
            f:name: {}
            f:pod-template-generation: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"dbdd83e6-75e8-4b68-9121-2bbafbf91a38"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
          f:automountServiceAccountToken: {}
          f:containers:
            k:{"name":"global-pull-secret-syncer"}:
              .: {}
              f:args: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:privileged: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/original-pull-secret"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/var/lib/kubelet"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/var/run/dbus"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"dbus"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"kubelet-config"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"original-pull-secret"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-23T13:17:37Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:k8s.ovn.org/pod-networks: {}
      manager: ip-10-0-141-235
      operation: Update
      subresource: status
      time: "2026-07-23T13:18:07Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2026-07-23T13:18:43Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              f:observedGeneration: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:observedGeneration: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.132.0.3"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-07-23T13:18:54Z"
    name: global-pull-secret-syncer-hjt2v
    namespace: kube-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: DaemonSet
      name: global-pull-secret-syncer
      uid: dbdd83e6-75e8-4b68-9121-2bbafbf91a38
    resourceVersion: "8084"
    uid: 7c202944-4918-447e-b505-4bb6ffb66ac6
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchFields:
            - key: metadata.name
              operator: In
              values:
              - ip-10-0-141-235.ec2.internal
    automountServiceAccountToken: false
    containers:
    - args:
      - sync-global-pullsecret
      command:
      - /usr/bin/control-plane-operator
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2b42eaf2ae868d8a4e6fdce45076aee6fb7b13fc629d888195469b1adfa700bc
      imagePullPolicy: IfNotPresent
      name: global-pull-secret-syncer
      resources:
        requests:
          cpu: 5m
          memory: 35Mi
      securityContext:
        privileged: true
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /var/lib/kubelet
        name: kubelet-config
      - mountPath: /var/run/dbus
        name: dbus
      - mountPath: /etc/original-pull-secret
        name: original-pull-secret
        readOnly: true
    dnsPolicy: Default
    enableServiceLinks: true
    imagePullSecrets:
    - name: default-dockercfg-8zqc6
    nodeName: ip-10-0-141-235.ec2.internal
    nodeSelector:
      hypershift.openshift.io/nodepool-globalps-enabled: "true"
    preemptionPolicy: PreemptLowerPriority
    priority: 1000000000
    priorityClassName: openshift-user-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext: {}
    serviceAccount: default
    serviceAccountName: default
    terminationGracePeriodSeconds: 30
    tolerations:
    - operator: Exists
    volumes:
    - hostPath:
        path: /var/lib/kubelet
        type: Directory
      name: kubelet-config
    - hostPath:
        path: /var/run/dbus
        type: Directory
      name: dbus
    - name: original-pull-secret
      secret:
        defaultMode: 420
        secretName: original-pull-secret
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:18:54Z"
      observedGeneration: 1
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:17:38Z"
      observedGeneration: 1
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:18:54Z"
      observedGeneration: 1
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:18:54Z"
      observedGeneration: 1
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:17:37Z"
      observedGeneration: 1
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 5m
        memory: 35Mi
      containerID: cri-o://7382b98a05ae8ac7230e0884605695733908fdba00fe13d533051fccccb2d268
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2b42eaf2ae868d8a4e6fdce45076aee6fb7b13fc629d888195469b1adfa700bc
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2b42eaf2ae868d8a4e6fdce45076aee6fb7b13fc629d888195469b1adfa700bc
      lastState: {}
      name: global-pull-secret-syncer
      ready: true
      resources:
        requests:
          cpu: 5m
          memory: 35Mi
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-07-23T13:18:53Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          uid: 0
      volumeMounts:
      - mountPath: /var/lib/kubelet
        name: kubelet-config
      - mountPath: /var/run/dbus
        name: dbus
      - mountPath: /etc/original-pull-secret
        name: original-pull-secret
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.0.141.235
    hostIPs:
    - ip: 10.0.141.235
    observedGeneration: 1
    phase: Running
    podIP: 10.132.0.3
    podIPs:
    - ip: 10.132.0.3
    qosClass: Burstable
    startTime: "2026-07-23T13:17:38Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.134.0.3/23"],"mac_address":"0a:58:0a:86:00:03","gateway_ips":["10.134.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.134.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.134.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.134.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.134.0.1"}],"ip_address":"10.134.0.3/23","gateway_ip":"10.134.0.1","role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.134.0.3"
            ],
            "mac": "0a:58:0a:86:00:03",
            "default": true,
            "dns": {}
        }]
    creationTimestamp: "2026-07-23T13:18:47Z"
    generateName: global-pull-secret-syncer-
    generation: 1
    labels:
      controller-revision-hash: 58c69ff56
      hypershift.openshift.io/globalps-config-hash: 448b387c
      name: global-pull-secret-syncer
      pod-template-generation: "1"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:generateName: {}
          f:labels:
            .: {}
            f:controller-revision-hash: {}
            f:hypershift.openshift.io/globalps-config-hash: {}
            f:name: {}
            f:pod-template-generation: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"dbdd83e6-75e8-4b68-9121-2bbafbf91a38"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
          f:automountServiceAccountToken: {}
          f:containers:
            k:{"name":"global-pull-secret-syncer"}:
              .: {}
              f:args: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:privileged: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/original-pull-secret"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/var/lib/kubelet"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/var/run/dbus"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"dbus"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"kubelet-config"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"original-pull-secret"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-23T13:18:47Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:k8s.ovn.org/pod-networks: {}
      manager: ip-10-0-130-74
      operation: Update
      subresource: status
      time: "2026-07-23T13:19:16Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2026-07-23T13:19:54Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              f:observedGeneration: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:observedGeneration: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.134.0.3"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-07-23T13:20:00Z"
    name: global-pull-secret-syncer-rkrxd
    namespace: kube-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: DaemonSet
      name: global-pull-secret-syncer
      uid: dbdd83e6-75e8-4b68-9121-2bbafbf91a38
    resourceVersion: "10430"
    uid: 6cb953cb-ebf2-4227-b94d-1dccf4086e9e
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchFields:
            - key: metadata.name
              operator: In
              values:
              - ip-10-0-130-74.ec2.internal
    automountServiceAccountToken: false
    containers:
    - args:
      - sync-global-pullsecret
      command:
      - /usr/bin/control-plane-operator
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2b42eaf2ae868d8a4e6fdce45076aee6fb7b13fc629d888195469b1adfa700bc
      imagePullPolicy: IfNotPresent
      name: global-pull-secret-syncer
      resources:
        requests:
          cpu: 5m
          memory: 35Mi
      securityContext:
        privileged: true
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /var/lib/kubelet
        name: kubelet-config
      - mountPath: /var/run/dbus
        name: dbus
      - mountPath: /etc/original-pull-secret
        name: original-pull-secret
        readOnly: true
    dnsPolicy: Default
    enableServiceLinks: true
    imagePullSecrets:
    - name: default-dockercfg-8zqc6
    nodeName: ip-10-0-130-74.ec2.internal
    nodeSelector:
      hypershift.openshift.io/nodepool-globalps-enabled: "true"
    preemptionPolicy: PreemptLowerPriority
    priority: 1000000000
    priorityClassName: openshift-user-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext: {}
    serviceAccount: default
    serviceAccountName: default
    terminationGracePeriodSeconds: 30
    tolerations:
    - operator: Exists
    volumes:
    - hostPath:
        path: /var/lib/kubelet
        type: Directory
      name: kubelet-config
    - hostPath:
        path: /var/run/dbus
        type: Directory
      name: dbus
    - name: original-pull-secret
      secret:
        defaultMode: 420
        secretName: original-pull-secret
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:20:00Z"
      observedGeneration: 1
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:18:50Z"
      observedGeneration: 1
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:20:00Z"
      observedGeneration: 1
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:20:00Z"
      observedGeneration: 1
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:18:47Z"
      observedGeneration: 1
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 5m
        memory: 35Mi
      containerID: cri-o://abebe35154972a8282c2cac3e9efaab63135366bf7060511fa0f19f1b097f06e
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2b42eaf2ae868d8a4e6fdce45076aee6fb7b13fc629d888195469b1adfa700bc
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2b42eaf2ae868d8a4e6fdce45076aee6fb7b13fc629d888195469b1adfa700bc
      lastState: {}
      name: global-pull-secret-syncer
      ready: true
      resources:
        requests:
          cpu: 5m
          memory: 35Mi
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-07-23T13:19:59Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          uid: 0
      volumeMounts:
      - mountPath: /var/lib/kubelet
        name: kubelet-config
      - mountPath: /var/run/dbus
        name: dbus
      - mountPath: /etc/original-pull-secret
        name: original-pull-secret
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.0.130.74
    hostIPs:
    - ip: 10.0.130.74
    observedGeneration: 1
    phase: Running
    podIP: 10.134.0.3
    podIPs:
    - ip: 10.134.0.3
    qosClass: Burstable
    startTime: "2026-07-23T13:18:50Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.133.0.5/23"],"mac_address":"0a:58:0a:85:00:05","gateway_ips":["10.133.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.133.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.133.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.133.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.133.0.1"}],"ip_address":"10.133.0.5/23","gateway_ip":"10.133.0.1","role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.133.0.5"
            ],
            "mac": "0a:58:0a:85:00:05",
            "default": true,
            "dns": {}
        }]
    creationTimestamp: "2026-07-23T13:17:49Z"
    generateName: global-pull-secret-syncer-
    generation: 1
    labels:
      controller-revision-hash: 58c69ff56
      hypershift.openshift.io/globalps-config-hash: 448b387c
      name: global-pull-secret-syncer
      pod-template-generation: "1"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:generateName: {}
          f:labels:
            .: {}
            f:controller-revision-hash: {}
            f:hypershift.openshift.io/globalps-config-hash: {}
            f:name: {}
            f:pod-template-generation: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"dbdd83e6-75e8-4b68-9121-2bbafbf91a38"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
          f:automountServiceAccountToken: {}
          f:containers:
            k:{"name":"global-pull-secret-syncer"}:
              .: {}
              f:args: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:privileged: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/original-pull-secret"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/var/lib/kubelet"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/var/run/dbus"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"dbus"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"kubelet-config"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"original-pull-secret"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-23T13:17:49Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:k8s.ovn.org/pod-networks: {}
      manager: ip-10-0-136-232
      operation: Update
      subresource: status
      time: "2026-07-23T13:18:19Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2026-07-23T13:18:56Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              f:observedGeneration: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:observedGeneration: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.133.0.5"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-07-23T13:19:04Z"
    name: global-pull-secret-syncer-z5rhr
    namespace: kube-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: DaemonSet
      name: global-pull-secret-syncer
      uid: dbdd83e6-75e8-4b68-9121-2bbafbf91a38
    resourceVersion: "8356"
    uid: f498563d-5c40-4fdb-b1b1-6b255440eff6
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchFields:
            - key: metadata.name
              operator: In
              values:
              - ip-10-0-136-232.ec2.internal
    automountServiceAccountToken: false
    containers:
    - args:
      - sync-global-pullsecret
      command:
      - /usr/bin/control-plane-operator
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2b42eaf2ae868d8a4e6fdce45076aee6fb7b13fc629d888195469b1adfa700bc
      imagePullPolicy: IfNotPresent
      name: global-pull-secret-syncer
      resources:
        requests:
          cpu: 5m
          memory: 35Mi
      securityContext:
        privileged: true
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /var/lib/kubelet
        name: kubelet-config
      - mountPath: /var/run/dbus
        name: dbus
      - mountPath: /etc/original-pull-secret
        name: original-pull-secret
        readOnly: true
    dnsPolicy: Default
    enableServiceLinks: true
    imagePullSecrets:
    - name: default-dockercfg-8zqc6
    nodeName: ip-10-0-136-232.ec2.internal
    nodeSelector:
      hypershift.openshift.io/nodepool-globalps-enabled: "true"
    preemptionPolicy: PreemptLowerPriority
    priority: 1000000000
    priorityClassName: openshift-user-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext: {}
    serviceAccount: default
    serviceAccountName: default
    terminationGracePeriodSeconds: 30
    tolerations:
    - operator: Exists
    volumes:
    - hostPath:
        path: /var/lib/kubelet
        type: Directory
      name: kubelet-config
    - hostPath:
        path: /var/run/dbus
        type: Directory
      name: dbus
    - name: original-pull-secret
      secret:
        defaultMode: 420
        secretName: original-pull-secret
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:19:04Z"
      observedGeneration: 1
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:17:51Z"
      observedGeneration: 1
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:19:04Z"
      observedGeneration: 1
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:19:04Z"
      observedGeneration: 1
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:17:49Z"
      observedGeneration: 1
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 5m
        memory: 35Mi
      containerID: cri-o://76da6ef664cc89b3ee8a55a761c74b67866960969091c5a308777a6f0a129d68
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2b42eaf2ae868d8a4e6fdce45076aee6fb7b13fc629d888195469b1adfa700bc
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2b42eaf2ae868d8a4e6fdce45076aee6fb7b13fc629d888195469b1adfa700bc
      lastState: {}
      name: global-pull-secret-syncer
      ready: true
      resources:
        requests:
          cpu: 5m
          memory: 35Mi
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-07-23T13:19:03Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          uid: 0
      volumeMounts:
      - mountPath: /var/lib/kubelet
        name: kubelet-config
      - mountPath: /var/run/dbus
        name: dbus
      - mountPath: /etc/original-pull-secret
        name: original-pull-secret
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.0.136.232
    hostIPs:
    - ip: 10.0.136.232
    observedGeneration: 1
    phase: Running
    podIP: 10.133.0.5
    podIPs:
    - ip: 10.133.0.5
    qosClass: Burstable
    startTime: "2026-07-23T13:17:51Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      hypershift.openshift.io/release-image: quay.io/openshift-release-dev/ocp-release:4.21.25-multi
    creationTimestamp: "2026-07-23T13:17:49Z"
    generateName: konnectivity-agent-
    generation: 1
    labels:
      app: konnectivity-agent
      controller-revision-hash: 77b56d7f54
      pod-template-generation: "1"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hypershift.openshift.io/release-image: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:app: {}
            f:controller-revision-hash: {}
            f:pod-template-generation: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"86e09151-3d07-4093-85d3-4d2d66be891b"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
          f:automountServiceAccountToken: {}
          f:containers:
            k:{"name":"konnectivity-agent"}:
              .: {}
              f:args: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"HTTP_PROXY"}:
                  .: {}
                  f:name: {}
                k:{"name":"HTTPS_PROXY"}:
                  .: {}
                  f:name: {}
                k:{"name":"NO_PROXY"}:
                  .: {}
                  f:name: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:readinessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:allowPrivilegeEscalation: {}
                f:capabilities:
                  .: {}
                  f:drop: {}
                f:readOnlyRootFilesystem: {}
                f:runAsNonRoot: {}
              f:startupProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/konnectivity/agent"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/konnectivity/ca"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext:
            .: {}
            f:runAsUser: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"agent-certs"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"konnectivity-ca"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
              f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-23T13:17:49Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              f:observedGeneration: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:observedGeneration: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.0.136.232"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-07-23T13:18:14Z"
    name: konnectivity-agent-6tpkf
    namespace: kube-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: DaemonSet
      name: konnectivity-agent
      uid: 86e09151-3d07-4093-85d3-4d2d66be891b
    resourceVersion: "6753"
    uid: 23df0f51-8206-4026-bdd0-4406375372c9
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchFields:
            - key: metadata.name
              operator: In
              values:
              - ip-10-0-136-232.ec2.internal
    automountServiceAccountToken: false
    containers:
    - args:
      - --logtostderr=true
      - --ca-cert
      - /etc/konnectivity/ca/ca.crt
      - --agent-cert
      - /etc/konnectivity/agent/tls.crt
      - --agent-key
      - /etc/konnectivity/agent/tls.key
      - --proxy-server-host
      - konnectivity-server-clusters-c6e57923-046d-41b0-8cd9--ecc0ce8f.apps.kflux-prd-es01.1ion.p1.openshiftapps.com
      - --proxy-server-port
      - "443"
      - --health-server-host
      - 127.0.0.1
      - --health-server-port
      - "2041"
      - --agent-identifiers=default-route=true
      - --keepalive-time
      - 30s
      - --probe-interval
      - 5s
      - --sync-interval
      - 5s
      - --sync-interval-cap
      - 30s
      - --v
      - "3"
      command:
      - /usr/bin/proxy-agent
      env:
      - name: HTTP_PROXY
      - name: HTTPS_PROXY
      - name: NO_PROXY
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9e6cee53a67cbe2094b527990bd1d0d668c31dc268b25bb101309f07fab93715
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 6
        httpGet:
          host: 127.0.0.1
          path: healthz
          port: 2041
          scheme: HTTP
        periodSeconds: 30
        successThreshold: 1
        timeoutSeconds: 5
      name: konnectivity-agent
      readinessProbe:
        failureThreshold: 1
        httpGet:
          host: 127.0.0.1
          path: readyz
          port: 2041
          scheme: HTTP
        periodSeconds: 30
        successThreshold: 1
        timeoutSeconds: 5
      resources:
        requests:
          cpu: 40m
          memory: 50Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        readOnlyRootFilesystem: true
        runAsNonRoot: true
      startupProbe:
        failureThreshold: 60
        httpGet:
          host: 127.0.0.1
          path: healthz
          port: 2041
          scheme: HTTP
        periodSeconds: 5
        successThreshold: 1
        timeoutSeconds: 5
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/konnectivity/agent
        name: agent-certs
      - mountPath: /etc/konnectivity/ca
        name: konnectivity-ca
    dnsPolicy: Default
    enableServiceLinks: true
    hostNetwork: true
    imagePullSecrets:
    - name: default-dockercfg-8zqc6
    nodeName: ip-10-0-136-232.ec2.internal
    preemptionPolicy: PreemptLowerPriority
    priority: 2000001000
    priorityClassName: system-node-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      runAsUser: 1000
    serviceAccount: default
    serviceAccountName: default
    terminationGracePeriodSeconds: 30
    tolerations:
    - operator: Exists
    volumes:
    - name: agent-certs
      secret:
        defaultMode: 416
        secretName: konnectivity-agent
    - configMap:
        defaultMode: 416
        name: konnectivity-ca-bundle
      name: konnectivity-ca
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:18:13Z"
      observedGeneration: 1
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:17:51Z"
      observedGeneration: 1
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:18:14Z"
      observedGeneration: 1
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:18:14Z"
      observedGeneration: 1
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:17:49Z"
      observedGeneration: 1
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 40m
        memory: 50Mi
      containerID: cri-o://44267cecc23bb1cdfce0767235c4bc53737f7b5a265fdcdfa24a745c4cf0d0f4
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9e6cee53a67cbe2094b527990bd1d0d668c31dc268b25bb101309f07fab93715
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2dc7ab9728d03b914584a42cfcd7ed3ea82a71179583ab10111e5431adb87b3b
      lastState: {}
      name: konnectivity-agent
      ready: true
      resources:
        requests:
          cpu: 40m
          memory: 50Mi
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-07-23T13:18:12Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          uid: 1000
      volumeMounts:
      - mountPath: /etc/konnectivity/agent
        name: agent-certs
      - mountPath: /etc/konnectivity/ca
        name: konnectivity-ca
    hostIP: 10.0.136.232
    hostIPs:
    - ip: 10.0.136.232
    observedGeneration: 1
    phase: Running
    podIP: 10.0.136.232
    podIPs:
    - ip: 10.0.136.232
    qosClass: Burstable
    startTime: "2026-07-23T13:17:51Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      hypershift.openshift.io/release-image: quay.io/openshift-release-dev/ocp-release:4.21.25-multi
    creationTimestamp: "2026-07-23T13:18:47Z"
    generateName: konnectivity-agent-
    generation: 1
    labels:
      app: konnectivity-agent
      controller-revision-hash: 77b56d7f54
      pod-template-generation: "1"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hypershift.openshift.io/release-image: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:app: {}
            f:controller-revision-hash: {}
            f:pod-template-generation: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"86e09151-3d07-4093-85d3-4d2d66be891b"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
          f:automountServiceAccountToken: {}
          f:containers:
            k:{"name":"konnectivity-agent"}:
              .: {}
              f:args: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"HTTP_PROXY"}:
                  .: {}
                  f:name: {}
                k:{"name":"HTTPS_PROXY"}:
                  .: {}
                  f:name: {}
                k:{"name":"NO_PROXY"}:
                  .: {}
                  f:name: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:readinessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:allowPrivilegeEscalation: {}
                f:capabilities:
                  .: {}
                  f:drop: {}
                f:readOnlyRootFilesystem: {}
                f:runAsNonRoot: {}
              f:startupProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/konnectivity/agent"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/konnectivity/ca"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext:
            .: {}
            f:runAsUser: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"agent-certs"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"konnectivity-ca"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
              f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-23T13:18:47Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              f:observedGeneration: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:observedGeneration: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.0.130.74"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-07-23T13:19:10Z"
    name: konnectivity-agent-jr6g6
    namespace: kube-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: DaemonSet
      name: konnectivity-agent
      uid: 86e09151-3d07-4093-85d3-4d2d66be891b
    resourceVersion: "8958"
    uid: 61b87aa7-4a72-4088-ab6f-55acbe3b2a4d
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchFields:
            - key: metadata.name
              operator: In
              values:
              - ip-10-0-130-74.ec2.internal
    automountServiceAccountToken: false
    containers:
    - args:
      - --logtostderr=true
      - --ca-cert
      - /etc/konnectivity/ca/ca.crt
      - --agent-cert
      - /etc/konnectivity/agent/tls.crt
      - --agent-key
      - /etc/konnectivity/agent/tls.key
      - --proxy-server-host
      - konnectivity-server-clusters-c6e57923-046d-41b0-8cd9--ecc0ce8f.apps.kflux-prd-es01.1ion.p1.openshiftapps.com
      - --proxy-server-port
      - "443"
      - --health-server-host
      - 127.0.0.1
      - --health-server-port
      - "2041"
      - --agent-identifiers=default-route=true
      - --keepalive-time
      - 30s
      - --probe-interval
      - 5s
      - --sync-interval
      - 5s
      - --sync-interval-cap
      - 30s
      - --v
      - "3"
      command:
      - /usr/bin/proxy-agent
      env:
      - name: HTTP_PROXY
      - name: HTTPS_PROXY
      - name: NO_PROXY
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9e6cee53a67cbe2094b527990bd1d0d668c31dc268b25bb101309f07fab93715
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 6
        httpGet:
          host: 127.0.0.1
          path: healthz
          port: 2041
          scheme: HTTP
        periodSeconds: 30
        successThreshold: 1
        timeoutSeconds: 5
      name: konnectivity-agent
      readinessProbe:
        failureThreshold: 1
        httpGet:
          host: 127.0.0.1
          path: readyz
          port: 2041
          scheme: HTTP
        periodSeconds: 30
        successThreshold: 1
        timeoutSeconds: 5
      resources:
        requests:
          cpu: 40m
          memory: 50Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        readOnlyRootFilesystem: true
        runAsNonRoot: true
      startupProbe:
        failureThreshold: 60
        httpGet:
          host: 127.0.0.1
          path: healthz
          port: 2041
          scheme: HTTP
        periodSeconds: 5
        successThreshold: 1
        timeoutSeconds: 5
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/konnectivity/agent
        name: agent-certs
      - mountPath: /etc/konnectivity/ca
        name: konnectivity-ca
    dnsPolicy: Default
    enableServiceLinks: true
    hostNetwork: true
    imagePullSecrets:
    - name: default-dockercfg-8zqc6
    nodeName: ip-10-0-130-74.ec2.internal
    preemptionPolicy: PreemptLowerPriority
    priority: 2000001000
    priorityClassName: system-node-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      runAsUser: 1000
    serviceAccount: default
    serviceAccountName: default
    terminationGracePeriodSeconds: 30
    tolerations:
    - operator: Exists
    volumes:
    - name: agent-certs
      secret:
        defaultMode: 416
        secretName: konnectivity-agent
    - configMap:
        defaultMode: 416
        name: konnectivity-ca-bundle
      name: konnectivity-ca
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:19:09Z"
      observedGeneration: 1
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:18:50Z"
      observedGeneration: 1
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:19:10Z"
      observedGeneration: 1
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:19:10Z"
      observedGeneration: 1
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:18:47Z"
      observedGeneration: 1
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 40m
        memory: 50Mi
      containerID: cri-o://39dcee730dd54d813125ca2ea0b535dcd75d46fb191bf010f547f1203e71444f
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9e6cee53a67cbe2094b527990bd1d0d668c31dc268b25bb101309f07fab93715
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2dc7ab9728d03b914584a42cfcd7ed3ea82a71179583ab10111e5431adb87b3b
      lastState: {}
      name: konnectivity-agent
      ready: true
      resources:
        requests:
          cpu: 40m
          memory: 50Mi
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-07-23T13:19:09Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          uid: 1000
      volumeMounts:
      - mountPath: /etc/konnectivity/agent
        name: agent-certs
      - mountPath: /etc/konnectivity/ca
        name: konnectivity-ca
    hostIP: 10.0.130.74
    hostIPs:
    - ip: 10.0.130.74
    observedGeneration: 1
    phase: Running
    podIP: 10.0.130.74
    podIPs:
    - ip: 10.0.130.74
    qosClass: Burstable
    startTime: "2026-07-23T13:18:50Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      hypershift.openshift.io/release-image: quay.io/openshift-release-dev/ocp-release:4.21.25-multi
    creationTimestamp: "2026-07-23T13:17:37Z"
    generateName: konnectivity-agent-
    generation: 1
    labels:
      app: konnectivity-agent
      controller-revision-hash: 77b56d7f54
      pod-template-generation: "1"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hypershift.openshift.io/release-image: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:app: {}
            f:controller-revision-hash: {}
            f:pod-template-generation: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"86e09151-3d07-4093-85d3-4d2d66be891b"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
          f:automountServiceAccountToken: {}
          f:containers:
            k:{"name":"konnectivity-agent"}:
              .: {}
              f:args: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"HTTP_PROXY"}:
                  .: {}
                  f:name: {}
                k:{"name":"HTTPS_PROXY"}:
                  .: {}
                  f:name: {}
                k:{"name":"NO_PROXY"}:
                  .: {}
                  f:name: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:readinessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:allowPrivilegeEscalation: {}
                f:capabilities:
                  .: {}
                  f:drop: {}
                f:readOnlyRootFilesystem: {}
                f:runAsNonRoot: {}
              f:startupProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/konnectivity/agent"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/konnectivity/ca"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext:
            .: {}
            f:runAsUser: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"agent-certs"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"konnectivity-ca"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
              f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-23T13:17:37Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              f:observedGeneration: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:observedGeneration: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.0.141.235"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-07-23T13:18:07Z"
    name: konnectivity-agent-vxb2v
    namespace: kube-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: DaemonSet
      name: konnectivity-agent
      uid: 86e09151-3d07-4093-85d3-4d2d66be891b
    resourceVersion: "6478"
    uid: c0a03f86-7ad0-4bdf-843e-e450f1580dac
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchFields:
            - key: metadata.name
              operator: In
              values:
              - ip-10-0-141-235.ec2.internal
    automountServiceAccountToken: false
    containers:
    - args:
      - --logtostderr=true
      - --ca-cert
      - /etc/konnectivity/ca/ca.crt
      - --agent-cert
      - /etc/konnectivity/agent/tls.crt
      - --agent-key
      - /etc/konnectivity/agent/tls.key
      - --proxy-server-host
      - konnectivity-server-clusters-c6e57923-046d-41b0-8cd9--ecc0ce8f.apps.kflux-prd-es01.1ion.p1.openshiftapps.com
      - --proxy-server-port
      - "443"
      - --health-server-host
      - 127.0.0.1
      - --health-server-port
      - "2041"
      - --agent-identifiers=default-route=true
      - --keepalive-time
      - 30s
      - --probe-interval
      - 5s
      - --sync-interval
      - 5s
      - --sync-interval-cap
      - 30s
      - --v
      - "3"
      command:
      - /usr/bin/proxy-agent
      env:
      - name: HTTP_PROXY
      - name: HTTPS_PROXY
      - name: NO_PROXY
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9e6cee53a67cbe2094b527990bd1d0d668c31dc268b25bb101309f07fab93715
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 6
        httpGet:
          host: 127.0.0.1
          path: healthz
          port: 2041
          scheme: HTTP
        periodSeconds: 30
        successThreshold: 1
        timeoutSeconds: 5
      name: konnectivity-agent
      readinessProbe:
        failureThreshold: 1
        httpGet:
          host: 127.0.0.1
          path: readyz
          port: 2041
          scheme: HTTP
        periodSeconds: 30
        successThreshold: 1
        timeoutSeconds: 5
      resources:
        requests:
          cpu: 40m
          memory: 50Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        readOnlyRootFilesystem: true
        runAsNonRoot: true
      startupProbe:
        failureThreshold: 60
        httpGet:
          host: 127.0.0.1
          path: healthz
          port: 2041
          scheme: HTTP
        periodSeconds: 5
        successThreshold: 1
        timeoutSeconds: 5
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/konnectivity/agent
        name: agent-certs
      - mountPath: /etc/konnectivity/ca
        name: konnectivity-ca
    dnsPolicy: Default
    enableServiceLinks: true
    hostNetwork: true
    imagePullSecrets:
    - name: default-dockercfg-8zqc6
    nodeName: ip-10-0-141-235.ec2.internal
    preemptionPolicy: PreemptLowerPriority
    priority: 2000001000
    priorityClassName: system-node-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      runAsUser: 1000
    serviceAccount: default
    serviceAccountName: default
    terminationGracePeriodSeconds: 30
    tolerations:
    - operator: Exists
    volumes:
    - name: agent-certs
      secret:
        defaultMode: 416
        secretName: konnectivity-agent
    - configMap:
        defaultMode: 416
        name: konnectivity-ca-bundle
      name: konnectivity-ca
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:17:59Z"
      observedGeneration: 1
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:17:38Z"
      observedGeneration: 1
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:18:07Z"
      observedGeneration: 1
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:18:07Z"
      observedGeneration: 1
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:17:37Z"
      observedGeneration: 1
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 40m
        memory: 50Mi
      containerID: cri-o://0e329eba402ae7f3ca649aa86c48b088b1b3c8fcd007ec22f013325571efd502
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9e6cee53a67cbe2094b527990bd1d0d668c31dc268b25bb101309f07fab93715
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2dc7ab9728d03b914584a42cfcd7ed3ea82a71179583ab10111e5431adb87b3b
      lastState: {}
      name: konnectivity-agent
      ready: true
      resources:
        requests:
          cpu: 40m
          memory: 50Mi
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-07-23T13:17:59Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          uid: 1000
      volumeMounts:
      - mountPath: /etc/konnectivity/agent
        name: agent-certs
      - mountPath: /etc/konnectivity/ca
        name: konnectivity-ca
    hostIP: 10.0.141.235
    hostIPs:
    - ip: 10.0.141.235
    observedGeneration: 1
    phase: Running
    podIP: 10.0.141.235
    podIPs:
    - ip: 10.0.141.235
    qosClass: Burstable
    startTime: "2026-07-23T13:17:38Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      kubernetes.io/config.hash: 6adfc8ddd9adb223571e647bd74b489e
      kubernetes.io/config.mirror: 6adfc8ddd9adb223571e647bd74b489e
      kubernetes.io/config.seen: "2026-07-23T13:18:27.503006598Z"
      kubernetes.io/config.source: file
    creationTimestamp: "2026-07-23T13:18:50Z"
    generation: 1
    labels:
      k8s-app: kube-apiserver-proxy
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/config.hash: {}
            f:kubernetes.io/config.mirror: {}
            f:kubernetes.io/config.seen: {}
            f:kubernetes.io/config.source: {}
          f:labels:
            .: {}
            f:k8s-app: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"506e48a9-964a-48ef-b5aa-79e840dce049"}: {}
        f:spec:
          f:containers:
            k:{"name":"haproxy"}:
              .: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":6443,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:runAsUser: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/usr/local/etc/haproxy"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:nodeName: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"config"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
      manager: kubelet
      operation: Update
      time: "2026-07-23T13:18:50Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            .: {}
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.0.130.74"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-07-23T13:18:50Z"
    name: kube-apiserver-proxy-ip-10-0-130-74.ec2.internal
    namespace: kube-system
    ownerReferences:
    - apiVersion: v1
      controller: true
      kind: Node
      name: ip-10-0-130-74.ec2.internal
      uid: 506e48a9-964a-48ef-b5aa-79e840dce049
    resourceVersion: "7848"
    uid: aaac227a-fc3c-4e72-8b3d-a66b09344e1d
  spec:
    containers:
    - command:
      - haproxy
      - -f
      - /usr/local/etc/haproxy
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:46713c6ea38edae61b620b46e06c09cd34ab99a709cbe49d71f62b5fce883b8b
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 3
        httpGet:
          host: 172.20.0.1
          path: /version
          port: 6443
          scheme: HTTPS
        initialDelaySeconds: 120
        periodSeconds: 120
        successThreshold: 1
        timeoutSeconds: 1
      name: haproxy
      ports:
      - containerPort: 6443
        hostPort: 6443
        name: apiserver
        protocol: TCP
      resources:
        requests:
          cpu: 13m
          memory: 16Mi
      securityContext:
        runAsUser: 1001
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /usr/local/etc/haproxy
        name: config
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    hostNetwork: true
    nodeName: ip-10-0-130-74.ec2.internal
    preemptionPolicy: PreemptLowerPriority
    priority: 2000001000
    priorityClassName: system-node-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext: {}
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoExecute
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - hostPath:
        path: /etc/kubernetes/apiserver-proxy-config
        type: ""
      name: config
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:18:31Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:18:27Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:18:31Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:18:31Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:18:27Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 13m
        memory: 16Mi
      containerID: cri-o://3953b33a9ded7e720d43518d652d517cc36a5619d78425eefd6d17e4a5ba70ad
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:46713c6ea38edae61b620b46e06c09cd34ab99a709cbe49d71f62b5fce883b8b
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:46713c6ea38edae61b620b46e06c09cd34ab99a709cbe49d71f62b5fce883b8b
      lastState: {}
      name: haproxy
      ready: true
      resources:
        requests:
          cpu: 13m
          memory: 16Mi
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-07-23T13:18:30Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          uid: 1001
      volumeMounts:
      - mountPath: /usr/local/etc/haproxy
        name: config
    hostIP: 10.0.130.74
    hostIPs:
    - ip: 10.0.130.74
    phase: Running
    podIP: 10.0.130.74
    podIPs:
    - ip: 10.0.130.74
    qosClass: Burstable
    startTime: "2026-07-23T13:18:27Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      kubernetes.io/config.hash: 4508d65acded9128b3e84b09c90ba208
      kubernetes.io/config.mirror: 4508d65acded9128b3e84b09c90ba208
      kubernetes.io/config.seen: "2026-07-23T13:17:49.962246858Z"
      kubernetes.io/config.source: file
    creationTimestamp: "2026-07-23T13:17:50Z"
    generation: 1
    labels:
      k8s-app: kube-apiserver-proxy
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/config.hash: {}
            f:kubernetes.io/config.mirror: {}
            f:kubernetes.io/config.seen: {}
            f:kubernetes.io/config.source: {}
          f:labels:
            .: {}
            f:k8s-app: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"d084623f-6fb3-459e-b13f-dad9cfd09a94"}: {}
        f:spec:
          f:containers:
            k:{"name":"haproxy"}:
              .: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":6443,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:runAsUser: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/usr/local/etc/haproxy"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:nodeName: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"config"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
      manager: kubelet
      operation: Update
      time: "2026-07-23T13:17:50Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            .: {}
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.0.136.232"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-07-23T13:17:52Z"
    name: kube-apiserver-proxy-ip-10-0-136-232.ec2.internal
    namespace: kube-system
    ownerReferences:
    - apiVersion: v1
      controller: true
      kind: Node
      name: ip-10-0-136-232.ec2.internal
      uid: d084623f-6fb3-459e-b13f-dad9cfd09a94
    resourceVersion: "6202"
    uid: 93dd06fe-c7c0-441c-8344-4aab890899f1
  spec:
    containers:
    - command:
      - haproxy
      - -f
      - /usr/local/etc/haproxy
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:46713c6ea38edae61b620b46e06c09cd34ab99a709cbe49d71f62b5fce883b8b
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 3
        httpGet:
          host: 172.20.0.1
          path: /version
          port: 6443
          scheme: HTTPS
        initialDelaySeconds: 120
        periodSeconds: 120
        successThreshold: 1
        timeoutSeconds: 1
      name: haproxy
      ports:
      - containerPort: 6443
        hostPort: 6443
        name: apiserver
        protocol: TCP
      resources:
        requests:
          cpu: 13m
          memory: 16Mi
      securityContext:
        runAsUser: 1001
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /usr/local/etc/haproxy
        name: config
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    hostNetwork: true
    nodeName: ip-10-0-136-232.ec2.internal
    preemptionPolicy: PreemptLowerPriority
    priority: 2000001000
    priorityClassName: system-node-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext: {}
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoExecute
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - hostPath:
        path: /etc/kubernetes/apiserver-proxy-config
        type: ""
      name: config
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:17:53Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:17:50Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:17:53Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:17:53Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:17:50Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 13m
        memory: 16Mi
      containerID: cri-o://46ced03b0e8229d49f3a3fa041174d6874f99209e587e9e9dcd2ea9c13704d01
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:46713c6ea38edae61b620b46e06c09cd34ab99a709cbe49d71f62b5fce883b8b
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:46713c6ea38edae61b620b46e06c09cd34ab99a709cbe49d71f62b5fce883b8b
      lastState: {}
      name: haproxy
      ready: true
      resources:
        requests:
          cpu: 13m
          memory: 16Mi
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-07-23T13:17:52Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          uid: 1001
      volumeMounts:
      - mountPath: /usr/local/etc/haproxy
        name: config
    hostIP: 10.0.136.232
    hostIPs:
    - ip: 10.0.136.232
    phase: Running
    podIP: 10.0.136.232
    podIPs:
    - ip: 10.0.136.232
    qosClass: Burstable
    startTime: "2026-07-23T13:17:50Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      kubernetes.io/config.hash: 77cabb2dc4c03ac54c6bc0b67bc8bb5e
      kubernetes.io/config.mirror: 77cabb2dc4c03ac54c6bc0b67bc8bb5e
      kubernetes.io/config.seen: "2026-07-23T13:17:35.320763849Z"
      kubernetes.io/config.source: file
    creationTimestamp: "2026-07-23T13:17:38Z"
    generation: 1
    labels:
      k8s-app: kube-apiserver-proxy
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/config.hash: {}
            f:kubernetes.io/config.mirror: {}
            f:kubernetes.io/config.seen: {}
            f:kubernetes.io/config.source: {}
          f:labels:
            .: {}
            f:k8s-app: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"c4004598-5d53-4a3d-a697-8cbd861191dd"}: {}
        f:spec:
          f:containers:
            k:{"name":"haproxy"}:
              .: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":6443,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:runAsUser: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/usr/local/etc/haproxy"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:nodeName: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"config"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
      manager: kubelet
      operation: Update
      time: "2026-07-23T13:17:38Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            .: {}
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.0.141.235"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-07-23T13:18:00Z"
    name: kube-apiserver-proxy-ip-10-0-141-235.ec2.internal
    namespace: kube-system
    ownerReferences:
    - apiVersion: v1
      controller: true
      kind: Node
      name: ip-10-0-141-235.ec2.internal
      uid: c4004598-5d53-4a3d-a697-8cbd861191dd
    resourceVersion: "6357"
    uid: ea9f944e-c8ce-46ea-99ff-d4c0572e2f74
  spec:
    containers:
    - command:
      - haproxy
      - -f
      - /usr/local/etc/haproxy
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:46713c6ea38edae61b620b46e06c09cd34ab99a709cbe49d71f62b5fce883b8b
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 3
        httpGet:
          host: 172.20.0.1
          path: /version
          port: 6443
          scheme: HTTPS
        initialDelaySeconds: 120
        periodSeconds: 120
        successThreshold: 1
        timeoutSeconds: 1
      name: haproxy
      ports:
      - containerPort: 6443
        hostPort: 6443
        name: apiserver
        protocol: TCP
      resources:
        requests:
          cpu: 13m
          memory: 16Mi
      securityContext:
        runAsUser: 1001
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /usr/local/etc/haproxy
        name: config
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    hostNetwork: true
    nodeName: ip-10-0-141-235.ec2.internal
    preemptionPolicy: PreemptLowerPriority
    priority: 2000001000
    priorityClassName: system-node-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext: {}
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoExecute
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - hostPath:
        path: /etc/kubernetes/apiserver-proxy-config
        type: ""
      name: config
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:17:59Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:17:35Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:17:59Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:17:59Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-07-23T13:17:35Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 13m
        memory: 16Mi
      containerID: cri-o://19efb404d10e5bcd9472489de1666fca9905a4494183ee8c65757da3bca1af47
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:46713c6ea38edae61b620b46e06c09cd34ab99a709cbe49d71f62b5fce883b8b
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:46713c6ea38edae61b620b46e06c09cd34ab99a709cbe49d71f62b5fce883b8b
      lastState: {}
      name: haproxy
      ready: true
      resources:
        requests:
          cpu: 13m
          memory: 16Mi
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-07-23T13:17:59Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          uid: 1001
      volumeMounts:
      - mountPath: /usr/local/etc/haproxy
        name: config
    hostIP: 10.0.141.235
    hostIPs:
    - ip: 10.0.141.235
    phase: Running
    podIP: 10.0.141.235
    podIPs:
    - ip: 10.0.141.235
    qosClass: Burstable
    startTime: "2026-07-23T13:17:35Z"
kind: PodList
metadata:
  resourceVersion: "65109"