---
apiVersion: v1
items:
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      cluster-autoscaler.kubernetes.io/enable-ds-eviction: "false"
    creationTimestamp: "2026-06-03T14:45:17Z"
    generateName: iptables-alerter-
    generation: 1
    labels:
      app: iptables-alerter
      component: network
      controller-revision-hash: 5d476dcd68
      openshift.io/component: network
      pod-template-generation: "1"
      type: infra
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:cluster-autoscaler.kubernetes.io/enable-ds-eviction: {}
            f:target.workload.openshift.io/management: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:app: {}
            f:component: {}
            f:controller-revision-hash: {}
            f:openshift.io/component: {}
            f:pod-template-generation: {}
            f:type: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"25e3c5ab-3d5b-46b2-8669-e25fdda40e1e"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
          f:containers:
            k:{"name":"iptables-alerter"}:
              .: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"ALERTER_POD_NAME"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"CONTAINER_RUNTIME_ENDPOINT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:limits:
                  .: {}
                  f:cpu: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:privileged: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/host"}:
                  .: {}
                  f:mountPath: {}
                  f:mountPropagation: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/iptables-alerter"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:hostPID: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"host-slash"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"iptables-alerter-script"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
              f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-06-03T14:45:17Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.0.134.32"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-06-03T14:45:40Z"
    name: iptables-alerter-828cc
    namespace: openshift-network-operator
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: DaemonSet
      name: iptables-alerter
      uid: 25e3c5ab-3d5b-46b2-8669-e25fdda40e1e
    resourceVersion: "6147"
    uid: 97457295-a8d6-470b-ad98-dc1009a5ba3b
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchFields:
            - key: metadata.name
              operator: In
              values:
              - ip-10-0-134-32.ec2.internal
    containers:
    - command:
      - /iptables-alerter/iptables-alerter.sh
      env:
      - name: CONTAINER_RUNTIME_ENDPOINT
        value: unix:///run/crio/crio.sock
      - name: ALERTER_POD_NAME
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.name
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7434fde9f36d6e638a77977ff1bc2c77d61508227744319497c007649f12fd00
      imagePullPolicy: IfNotPresent
      name: iptables-alerter
      resources:
        limits:
          cpu: 10m
        requests:
          cpu: 10m
          memory: 65Mi
      securityContext:
        privileged: true
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /iptables-alerter
        name: iptables-alerter-script
      - mountPath: /host
        mountPropagation: HostToContainer
        name: host-slash
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-wflkl
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    hostNetwork: true
    hostPID: true
    imagePullSecrets:
    - name: iptables-alerter-dockercfg-zvsmg
    nodeName: ip-10-0-134-32.ec2.internal
    nodeSelector:
      kubernetes.io/os: linux
    preemptionPolicy: PreemptLowerPriority
    priority: 1000000000
    priorityClassName: openshift-user-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext: {}
    serviceAccount: iptables-alerter
    serviceAccountName: iptables-alerter
    terminationGracePeriodSeconds: 10
    tolerations:
    - operator: Exists
    volumes:
    - configMap:
        defaultMode: 484
        name: iptables-alerter-script
      name: iptables-alerter-script
    - hostPath:
        path: /
        type: ""
      name: host-slash
    - name: kube-api-access-wflkl
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-06-03T14:45:40Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-06-03T14:45:18Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-06-03T14:45:40Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-06-03T14:45:40Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-06-03T14:45:17Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 10m
        memory: 65Mi
      containerID: cri-o://978557b737d3de48e76c87e38c5f247572ab4f530cca3aafae9c60b5c2561583
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7434fde9f36d6e638a77977ff1bc2c77d61508227744319497c007649f12fd00
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0bfeb47948c5b9a43f9d1cf7a8318c466ff69f48acd53b062479a9448bddde97
      lastState: {}
      name: iptables-alerter
      ready: true
      resources:
        limits:
          cpu: 10m
        requests:
          cpu: 10m
          memory: 65Mi
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-06-03T14:45:39Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          uid: 0
      volumeMounts:
      - mountPath: /iptables-alerter
        name: iptables-alerter-script
      - mountPath: /host
        name: host-slash
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-wflkl
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.0.134.32
    hostIPs:
    - ip: 10.0.134.32
    phase: Running
    podIP: 10.0.134.32
    podIPs:
    - ip: 10.0.134.32
    qosClass: Burstable
    startTime: "2026-06-03T14:45:18Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      cluster-autoscaler.kubernetes.io/enable-ds-eviction: "false"
    creationTimestamp: "2026-06-03T14:45:25Z"
    generateName: iptables-alerter-
    generation: 1
    labels:
      app: iptables-alerter
      component: network
      controller-revision-hash: 5d476dcd68
      openshift.io/component: network
      pod-template-generation: "1"
      type: infra
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:cluster-autoscaler.kubernetes.io/enable-ds-eviction: {}
            f:target.workload.openshift.io/management: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:app: {}
            f:component: {}
            f:controller-revision-hash: {}
            f:openshift.io/component: {}
            f:pod-template-generation: {}
            f:type: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"25e3c5ab-3d5b-46b2-8669-e25fdda40e1e"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
          f:containers:
            k:{"name":"iptables-alerter"}:
              .: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"ALERTER_POD_NAME"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"CONTAINER_RUNTIME_ENDPOINT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:limits:
                  .: {}
                  f:cpu: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:privileged: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/host"}:
                  .: {}
                  f:mountPath: {}
                  f:mountPropagation: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/iptables-alerter"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:hostPID: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"host-slash"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"iptables-alerter-script"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
              f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-06-03T14:45:25Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.0.140.251"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-06-03T14:45:47Z"
    name: iptables-alerter-n4k87
    namespace: openshift-network-operator
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: DaemonSet
      name: iptables-alerter
      uid: 25e3c5ab-3d5b-46b2-8669-e25fdda40e1e
    resourceVersion: "6341"
    uid: 8c4f17c2-dd14-4da6-bea0-66889dc222bc
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchFields:
            - key: metadata.name
              operator: In
              values:
              - ip-10-0-140-251.ec2.internal
    containers:
    - command:
      - /iptables-alerter/iptables-alerter.sh
      env:
      - name: CONTAINER_RUNTIME_ENDPOINT
        value: unix:///run/crio/crio.sock
      - name: ALERTER_POD_NAME
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.name
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7434fde9f36d6e638a77977ff1bc2c77d61508227744319497c007649f12fd00
      imagePullPolicy: IfNotPresent
      name: iptables-alerter
      resources:
        limits:
          cpu: 10m
        requests:
          cpu: 10m
          memory: 65Mi
      securityContext:
        privileged: true
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /iptables-alerter
        name: iptables-alerter-script
      - mountPath: /host
        mountPropagation: HostToContainer
        name: host-slash
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-t4p42
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    hostNetwork: true
    hostPID: true
    imagePullSecrets:
    - name: iptables-alerter-dockercfg-zvsmg
    nodeName: ip-10-0-140-251.ec2.internal
    nodeSelector:
      kubernetes.io/os: linux
    preemptionPolicy: PreemptLowerPriority
    priority: 1000000000
    priorityClassName: openshift-user-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext: {}
    serviceAccount: iptables-alerter
    serviceAccountName: iptables-alerter
    terminationGracePeriodSeconds: 10
    tolerations:
    - operator: Exists
    volumes:
    - configMap:
        defaultMode: 484
        name: iptables-alerter-script
      name: iptables-alerter-script
    - hostPath:
        path: /
        type: ""
      name: host-slash
    - name: kube-api-access-t4p42
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-06-03T14:45:47Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-06-03T14:45:26Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-06-03T14:45:47Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-06-03T14:45:47Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-06-03T14:45:25Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 10m
        memory: 65Mi
      containerID: cri-o://a11530e7e87c7521a21aae51162bcac49ff2ff6056e012e5521e4c9998a9ef6f
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7434fde9f36d6e638a77977ff1bc2c77d61508227744319497c007649f12fd00
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0bfeb47948c5b9a43f9d1cf7a8318c466ff69f48acd53b062479a9448bddde97
      lastState: {}
      name: iptables-alerter
      ready: true
      resources:
        limits:
          cpu: 10m
        requests:
          cpu: 10m
          memory: 65Mi
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-06-03T14:45:47Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          uid: 0
      volumeMounts:
      - mountPath: /iptables-alerter
        name: iptables-alerter-script
      - mountPath: /host
        name: host-slash
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-t4p42
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.0.140.251
    hostIPs:
    - ip: 10.0.140.251
    phase: Running
    podIP: 10.0.140.251
    podIPs:
    - ip: 10.0.140.251
    qosClass: Burstable
    startTime: "2026-06-03T14:45:26Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      cluster-autoscaler.kubernetes.io/enable-ds-eviction: "false"
    creationTimestamp: "2026-06-03T14:45:12Z"
    generateName: iptables-alerter-
    generation: 1
    labels:
      app: iptables-alerter
      component: network
      controller-revision-hash: 5d476dcd68
      openshift.io/component: network
      pod-template-generation: "1"
      type: infra
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:cluster-autoscaler.kubernetes.io/enable-ds-eviction: {}
            f:target.workload.openshift.io/management: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:app: {}
            f:component: {}
            f:controller-revision-hash: {}
            f:openshift.io/component: {}
            f:pod-template-generation: {}
            f:type: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"25e3c5ab-3d5b-46b2-8669-e25fdda40e1e"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
          f:containers:
            k:{"name":"iptables-alerter"}:
              .: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"ALERTER_POD_NAME"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"CONTAINER_RUNTIME_ENDPOINT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:limits:
                  .: {}
                  f:cpu: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:privileged: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/host"}:
                  .: {}
                  f:mountPath: {}
                  f:mountPropagation: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/iptables-alerter"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:hostPID: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"host-slash"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"iptables-alerter-script"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
              f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-06-03T14:45:12Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.0.133.20"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-06-03T14:45:25Z"
    name: iptables-alerter-x5btp
    namespace: openshift-network-operator
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: DaemonSet
      name: iptables-alerter
      uid: 25e3c5ab-3d5b-46b2-8669-e25fdda40e1e
    resourceVersion: "5768"
    uid: cedf7e54-7ebe-43c7-972a-e2727b24878b
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchFields:
            - key: metadata.name
              operator: In
              values:
              - ip-10-0-133-20.ec2.internal
    containers:
    - command:
      - /iptables-alerter/iptables-alerter.sh
      env:
      - name: CONTAINER_RUNTIME_ENDPOINT
        value: unix:///run/crio/crio.sock
      - name: ALERTER_POD_NAME
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.name
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7434fde9f36d6e638a77977ff1bc2c77d61508227744319497c007649f12fd00
      imagePullPolicy: IfNotPresent
      name: iptables-alerter
      resources:
        limits:
          cpu: 10m
        requests:
          cpu: 10m
          memory: 65Mi
      securityContext:
        privileged: true
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /iptables-alerter
        name: iptables-alerter-script
      - mountPath: /host
        mountPropagation: HostToContainer
        name: host-slash
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-xg7l2
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    hostNetwork: true
    hostPID: true
    imagePullSecrets:
    - name: iptables-alerter-dockercfg-zvsmg
    nodeName: ip-10-0-133-20.ec2.internal
    nodeSelector:
      kubernetes.io/os: linux
    preemptionPolicy: PreemptLowerPriority
    priority: 1000000000
    priorityClassName: openshift-user-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext: {}
    serviceAccount: iptables-alerter
    serviceAccountName: iptables-alerter
    terminationGracePeriodSeconds: 10
    tolerations:
    - operator: Exists
    volumes:
    - configMap:
        defaultMode: 484
        name: iptables-alerter-script
      name: iptables-alerter-script
    - hostPath:
        path: /
        type: ""
      name: host-slash
    - name: kube-api-access-xg7l2
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-06-03T14:45:25Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-06-03T14:45:13Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-06-03T14:45:25Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-06-03T14:45:25Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-06-03T14:45:12Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 10m
        memory: 65Mi
      containerID: cri-o://3db87ad28b0bf7a0f01d5f5f0f42c1aaf6bca6234997c3276f4ed41b4cf46ef2
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7434fde9f36d6e638a77977ff1bc2c77d61508227744319497c007649f12fd00
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0bfeb47948c5b9a43f9d1cf7a8318c466ff69f48acd53b062479a9448bddde97
      lastState: {}
      name: iptables-alerter
      ready: true
      resources:
        limits:
          cpu: 10m
        requests:
          cpu: 10m
          memory: 65Mi
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-06-03T14:45:25Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          uid: 0
      volumeMounts:
      - mountPath: /iptables-alerter
        name: iptables-alerter-script
      - mountPath: /host
        name: host-slash
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-xg7l2
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.0.133.20
    hostIPs:
    - ip: 10.0.133.20
    phase: Running
    podIP: 10.0.133.20
    podIPs:
    - ip: 10.0.133.20
    qosClass: Burstable
    startTime: "2026-06-03T14:45:13Z"
kind: PodList
metadata:
  resourceVersion: "32947"