--- apiVersion: v1 items: - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.132.0.40/23"],"mac_address":"0a:58:0a:84:00:28","gateway_ips":["10.132.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.132.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.132.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.132.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.132.0.1"}],"ip_address":"10.132.0.40/23","gateway_ip":"10.132.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.132.0.40" ], "mac": "0a:58:0a:84:00:28", "default": true, "dns": {} }] openshift.io/scc: restricted-v2 seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user creationTimestamp: "2026-07-06T20:12:05Z" generateName: 0acee64185f523d1d1272e9af2e4d9333e0dcde792ba30e1fa9605b75902b80- generation: 1 labels: batch.kubernetes.io/controller-uid: 1eb03934-a2a8-4fb8-81b0-7cf88475178b batch.kubernetes.io/job-name: 0acee64185f523d1d1272e9af2e4d9333e0dcde792ba30e1fa9605b75902b80 controller-uid: 1eb03934-a2a8-4fb8-81b0-7cf88475178b job-name: 0acee64185f523d1d1272e9af2e4d9333e0dcde792ba30e1fa9605b75902b80 olm.managed: "true" operatorframework.io/bundle-unpack-ref: 0acee64185f523d1d1272e9af2e4d9333e0dcde792ba30e1fa9605b75902b80 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.ovn.org/pod-networks: {} manager: ip-10-0-130-133 operation: Update subresource: status time: "2026-07-06T20:12:05Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:batch.kubernetes.io/controller-uid: {} f:batch.kubernetes.io/job-name: {} f:controller-uid: {} f:job-name: {} f:olm.managed: {} f:operatorframework.io/bundle-unpack-ref: {} f:ownerReferences: .: {} k:{"uid":"1eb03934-a2a8-4fb8-81b0-7cf88475178b"}: {} f:spec: f:containers: k:{"name":"extract"}: .: {} f:command: {} f:env: .: {} k:{"name":"CONTAINER_IMAGE"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:allowPrivilegeEscalation: {} f:capabilities: .: {} f:drop: {} f:readOnlyRootFilesystem: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/bundle"}: .: {} f:mountPath: {} f:name: {} f:dnsPolicy: {} f:enableServiceLinks: {} f:initContainers: .: {} k:{"name":"pull"}: .: {} f:command: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:allowPrivilegeEscalation: {} f:capabilities: .: {} f:drop: {} f:readOnlyRootFilesystem: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/bundle"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/util"}: .: {} f:mountPath: {} f:name: {} k:{"name":"util"}: .: {} f:command: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:allowPrivilegeEscalation: {} f:capabilities: .: {} f:drop: {} f:readOnlyRootFilesystem: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/util"}: .: {} f:mountPath: {} f:name: {} f:nodeSelector: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: .: {} f:seccompProfile: .: {} f:type: {} f:terminationGracePeriodSeconds: {} f:tolerations: {} f:volumes: .: {} k:{"name":"bundle"}: .: {} f:emptyDir: {} f:name: {} k:{"name":"util"}: .: {} f:emptyDir: {} f:name: {} manager: kube-controller-manager operation: Update time: "2026-07-06T20:12:05Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.v1.cni.cncf.io/network-status: {} manager: multus-daemon operation: Update subresource: status time: "2026-07-06T20:12:06Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"ContainersReady"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:reason: {} f:status: {} f:type: {} k:{"type":"Initialized"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:reason: {} f:status: {} f:type: {} k:{"type":"PodReadyToStartContainers"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodScheduled"}: f:observedGeneration: {} k:{"type":"Ready"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:reason: {} f:status: {} f:type: {} f:containerStatuses: {} f:hostIP: {} f:hostIPs: {} f:initContainerStatuses: {} f:observedGeneration: {} f:phase: {} f:podIP: {} f:podIPs: .: {} k:{"ip":"10.132.0.40"}: .: {} f:ip: {} f:startTime: {} manager: kubelet operation: Update subresource: status time: "2026-07-06T20:12:09Z" name: 0acee64185f523d1d1272e9af2e4d9333e0dcde792ba30e1fa9605b759ptszd namespace: kuadrant-system ownerReferences: - apiVersion: batch/v1 blockOwnerDeletion: true controller: true kind: Job name: 0acee64185f523d1d1272e9af2e4d9333e0dcde792ba30e1fa9605b75902b80 uid: 1eb03934-a2a8-4fb8-81b0-7cf88475178b resourceVersion: "15547" uid: 5884ee3f-4633-4425-a422-abcb819e01b5 spec: containers: - command: - opm - alpha - bundle - extract - -m - /bundle/ - -n - kuadrant-system - -c - 0acee64185f523d1d1272e9af2e4d9333e0dcde792ba30e1fa9605b75902b80 - -z env: - name: CONTAINER_IMAGE value: quay.io/kuadrant/limitador-operator-bundle:v0.17.1 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:97169107e88251ef86278e9e44644664b531b5472896c4647d9828f2a9e32e40 imagePullPolicy: IfNotPresent name: extract resources: requests: cpu: 10m memory: 50Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000680000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /bundle name: bundle - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-7vc8b readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: default-dockercfg-fgg7s initContainers: - command: - /bin/cp - -Rv - /bin/cpb - /util/cpb image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:69b412ea3e4dadb9329ebbadf5c564ee2b83346b0b30145c0800f8606f467610 imagePullPolicy: IfNotPresent name: util resources: requests: cpu: 10m memory: 50Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000680000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /util name: util - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-7vc8b readOnly: true - command: - /util/cpb - /bundle image: quay.io/kuadrant/limitador-operator-bundle:v0.17.1 imagePullPolicy: Always name: pull resources: requests: cpu: 10m memory: 50Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000680000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /bundle name: bundle - mountPath: /util name: util - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-7vc8b readOnly: true nodeName: ip-10-0-130-133.ec2.internal nodeSelector: kubernetes.io/os: linux preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Never schedulerName: default-scheduler securityContext: fsGroup: 1000680000 seLinuxOptions: level: s0:c26,c15 seccompProfile: type: RuntimeDefault serviceAccount: default serviceAccountName: default terminationGracePeriodSeconds: 30 tolerations: - key: kubernetes.io/arch operator: Equal value: amd64 - key: kubernetes.io/arch operator: Equal value: arm64 - key: kubernetes.io/arch operator: Equal value: ppc64le - key: kubernetes.io/arch operator: Equal value: s390x - effect: NoSchedule key: node-role.kubernetes.io/master operator: Exists - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 120 - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 120 - effect: NoSchedule key: node.kubernetes.io/memory-pressure operator: Exists volumes: - emptyDir: {} name: bundle - emptyDir: {} name: util - name: kube-api-access-7vc8b projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:09Z" observedGeneration: 1 status: "False" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:07Z" observedGeneration: 1 reason: PodCompleted status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:05Z" observedGeneration: 1 reason: PodCompleted status: "False" type: Ready - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:05Z" observedGeneration: 1 reason: PodCompleted status: "False" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:05Z" observedGeneration: 1 status: "True" type: PodScheduled containerStatuses: - allocatedResources: cpu: 10m memory: 50Mi containerID: cri-o://dee5a6a2ee80d48760b980835597e658c36a13e8811fd68faf2243b57006d424 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:97169107e88251ef86278e9e44644664b531b5472896c4647d9828f2a9e32e40 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5f6c83ec7adb05c566d9109dda721ebdbfb394606196ae36d45c467bd70420f0 lastState: {} name: extract ready: false resources: requests: cpu: 10m memory: 50Mi restartCount: 0 started: false state: terminated: containerID: cri-o://dee5a6a2ee80d48760b980835597e658c36a13e8811fd68faf2243b57006d424 exitCode: 0 finishedAt: "2026-07-06T20:12:07Z" reason: Completed startedAt: "2026-07-06T20:12:07Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000680000 uid: 1000680000 volumeMounts: - mountPath: /bundle name: bundle - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-7vc8b readOnly: true recursiveReadOnly: Disabled hostIP: 10.0.130.133 hostIPs: - ip: 10.0.130.133 initContainerStatuses: - allocatedResources: cpu: 10m memory: 50Mi containerID: cri-o://977d6b48b87543ab8d6488b4f01d1edd096967527784942f9d467e594a72536b image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:69b412ea3e4dadb9329ebbadf5c564ee2b83346b0b30145c0800f8606f467610 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:69b412ea3e4dadb9329ebbadf5c564ee2b83346b0b30145c0800f8606f467610 lastState: {} name: util ready: true resources: requests: cpu: 10m memory: 50Mi restartCount: 0 started: false state: terminated: containerID: cri-o://977d6b48b87543ab8d6488b4f01d1edd096967527784942f9d467e594a72536b exitCode: 0 finishedAt: "2026-07-06T20:12:06Z" reason: Completed startedAt: "2026-07-06T20:12:06Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000680000 uid: 1000680000 volumeMounts: - mountPath: /util name: util - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-7vc8b readOnly: true recursiveReadOnly: Disabled - allocatedResources: cpu: 10m memory: 50Mi containerID: cri-o://83e52c40da2748c82036df4d7c585709a57aa8043086fda1e3e1b855ae3bf11f image: quay.io/kuadrant/limitador-operator-bundle:v0.17.1 imageID: quay.io/kuadrant/limitador-operator-bundle@sha256:68594d726f3b85b1b32cbc3929f40b57bacccebc701c2b822a0e520c1a49f843 lastState: {} name: pull ready: true resources: requests: cpu: 10m memory: 50Mi restartCount: 0 started: false state: terminated: containerID: cri-o://83e52c40da2748c82036df4d7c585709a57aa8043086fda1e3e1b855ae3bf11f exitCode: 0 finishedAt: "2026-07-06T20:12:07Z" reason: Completed startedAt: "2026-07-06T20:12:07Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000680000 uid: 1000680000 volumeMounts: - mountPath: /bundle name: bundle - mountPath: /util name: util - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-7vc8b readOnly: true recursiveReadOnly: Disabled observedGeneration: 1 phase: Succeeded podIP: 10.132.0.40 podIPs: - ip: 10.132.0.40 qosClass: Burstable startTime: "2026-07-06T20:12:05Z" - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.132.0.38/23"],"mac_address":"0a:58:0a:84:00:26","gateway_ips":["10.132.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.132.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.132.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.132.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.132.0.1"}],"ip_address":"10.132.0.38/23","gateway_ip":"10.132.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.132.0.38" ], "mac": "0a:58:0a:84:00:26", "default": true, "dns": {} }] openshift.io/scc: restricted-v2 seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user creationTimestamp: "2026-07-06T20:12:04Z" generateName: 19cb86e64775c5699d5aacf881a09c2d51e7f55f9e1ff096f2a667c5e0cc31f- generation: 1 labels: batch.kubernetes.io/controller-uid: c816134e-71a4-4a0c-80c1-be0d04655302 batch.kubernetes.io/job-name: 19cb86e64775c5699d5aacf881a09c2d51e7f55f9e1ff096f2a667c5e0cc31f controller-uid: c816134e-71a4-4a0c-80c1-be0d04655302 job-name: 19cb86e64775c5699d5aacf881a09c2d51e7f55f9e1ff096f2a667c5e0cc31f olm.managed: "true" operatorframework.io/bundle-unpack-ref: 19cb86e64775c5699d5aacf881a09c2d51e7f55f9e1ff096f2a667c5e0cc31f managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.ovn.org/pod-networks: {} manager: ip-10-0-130-133 operation: Update subresource: status time: "2026-07-06T20:12:04Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:batch.kubernetes.io/controller-uid: {} f:batch.kubernetes.io/job-name: {} f:controller-uid: {} f:job-name: {} f:olm.managed: {} f:operatorframework.io/bundle-unpack-ref: {} f:ownerReferences: .: {} k:{"uid":"c816134e-71a4-4a0c-80c1-be0d04655302"}: {} f:spec: f:containers: k:{"name":"extract"}: .: {} f:command: {} f:env: .: {} k:{"name":"CONTAINER_IMAGE"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:allowPrivilegeEscalation: {} f:capabilities: .: {} f:drop: {} f:readOnlyRootFilesystem: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/bundle"}: .: {} f:mountPath: {} f:name: {} f:dnsPolicy: {} f:enableServiceLinks: {} f:initContainers: .: {} k:{"name":"pull"}: .: {} f:command: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:allowPrivilegeEscalation: {} f:capabilities: .: {} f:drop: {} f:readOnlyRootFilesystem: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/bundle"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/util"}: .: {} f:mountPath: {} f:name: {} k:{"name":"util"}: .: {} f:command: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:allowPrivilegeEscalation: {} f:capabilities: .: {} f:drop: {} f:readOnlyRootFilesystem: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/util"}: .: {} f:mountPath: {} f:name: {} f:nodeSelector: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: .: {} f:seccompProfile: .: {} f:type: {} f:terminationGracePeriodSeconds: {} f:tolerations: {} f:volumes: .: {} k:{"name":"bundle"}: .: {} f:emptyDir: {} f:name: {} k:{"name":"util"}: .: {} f:emptyDir: {} f:name: {} manager: kube-controller-manager operation: Update time: "2026-07-06T20:12:04Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.v1.cni.cncf.io/network-status: {} manager: multus-daemon operation: Update subresource: status time: "2026-07-06T20:12:04Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"ContainersReady"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:reason: {} f:status: {} f:type: {} k:{"type":"Initialized"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:reason: {} f:status: {} f:type: {} k:{"type":"PodReadyToStartContainers"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodScheduled"}: f:observedGeneration: {} k:{"type":"Ready"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:reason: {} f:status: {} f:type: {} f:containerStatuses: {} f:hostIP: {} f:hostIPs: {} f:initContainerStatuses: {} f:observedGeneration: {} f:phase: {} f:podIP: {} f:podIPs: .: {} k:{"ip":"10.132.0.38"}: .: {} f:ip: {} f:startTime: {} manager: kubelet operation: Update subresource: status time: "2026-07-06T20:12:08Z" name: 19cb86e64775c5699d5aacf881a09c2d51e7f55f9e1ff096f2a667c5e04lbm6 namespace: kuadrant-system ownerReferences: - apiVersion: batch/v1 blockOwnerDeletion: true controller: true kind: Job name: 19cb86e64775c5699d5aacf881a09c2d51e7f55f9e1ff096f2a667c5e0cc31f uid: c816134e-71a4-4a0c-80c1-be0d04655302 resourceVersion: "15537" uid: 6603e100-ee5e-4c3d-9063-0b638e10b392 spec: containers: - command: - opm - alpha - bundle - extract - -m - /bundle/ - -n - kuadrant-system - -c - 19cb86e64775c5699d5aacf881a09c2d51e7f55f9e1ff096f2a667c5e0cc31f - -z env: - name: CONTAINER_IMAGE value: quay.io/kuadrant/dns-operator-bundle:v0.16.0 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:97169107e88251ef86278e9e44644664b531b5472896c4647d9828f2a9e32e40 imagePullPolicy: IfNotPresent name: extract resources: requests: cpu: 10m memory: 50Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000680000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /bundle name: bundle - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-cbmsg readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: default-dockercfg-fgg7s initContainers: - command: - /bin/cp - -Rv - /bin/cpb - /util/cpb image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:69b412ea3e4dadb9329ebbadf5c564ee2b83346b0b30145c0800f8606f467610 imagePullPolicy: IfNotPresent name: util resources: requests: cpu: 10m memory: 50Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000680000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /util name: util - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-cbmsg readOnly: true - command: - /util/cpb - /bundle image: quay.io/kuadrant/dns-operator-bundle:v0.16.0 imagePullPolicy: Always name: pull resources: requests: cpu: 10m memory: 50Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000680000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /bundle name: bundle - mountPath: /util name: util - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-cbmsg readOnly: true nodeName: ip-10-0-130-133.ec2.internal nodeSelector: kubernetes.io/os: linux preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Never schedulerName: default-scheduler securityContext: fsGroup: 1000680000 seLinuxOptions: level: s0:c26,c15 seccompProfile: type: RuntimeDefault serviceAccount: default serviceAccountName: default terminationGracePeriodSeconds: 30 tolerations: - key: kubernetes.io/arch operator: Equal value: amd64 - key: kubernetes.io/arch operator: Equal value: arm64 - key: kubernetes.io/arch operator: Equal value: ppc64le - key: kubernetes.io/arch operator: Equal value: s390x - effect: NoSchedule key: node-role.kubernetes.io/master operator: Exists - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 120 - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 120 - effect: NoSchedule key: node.kubernetes.io/memory-pressure operator: Exists volumes: - emptyDir: {} name: bundle - emptyDir: {} name: util - name: kube-api-access-cbmsg projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:08Z" observedGeneration: 1 status: "False" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:06Z" observedGeneration: 1 reason: PodCompleted status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:04Z" observedGeneration: 1 reason: PodCompleted status: "False" type: Ready - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:04Z" observedGeneration: 1 reason: PodCompleted status: "False" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:04Z" observedGeneration: 1 status: "True" type: PodScheduled containerStatuses: - allocatedResources: cpu: 10m memory: 50Mi containerID: cri-o://5e29faba3285300664f627314f79ab4b550aa66997e83d2e5a8ee61cab562b73 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:97169107e88251ef86278e9e44644664b531b5472896c4647d9828f2a9e32e40 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5f6c83ec7adb05c566d9109dda721ebdbfb394606196ae36d45c467bd70420f0 lastState: {} name: extract ready: false resources: requests: cpu: 10m memory: 50Mi restartCount: 0 started: false state: terminated: containerID: cri-o://5e29faba3285300664f627314f79ab4b550aa66997e83d2e5a8ee61cab562b73 exitCode: 0 finishedAt: "2026-07-06T20:12:06Z" reason: Completed startedAt: "2026-07-06T20:12:06Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000680000 uid: 1000680000 volumeMounts: - mountPath: /bundle name: bundle - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-cbmsg readOnly: true recursiveReadOnly: Disabled hostIP: 10.0.130.133 hostIPs: - ip: 10.0.130.133 initContainerStatuses: - allocatedResources: cpu: 10m memory: 50Mi containerID: cri-o://e01fdbec548b5f601457ce1635a2b63e01f2549b4e9e09464c8acc7533f1705a image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:69b412ea3e4dadb9329ebbadf5c564ee2b83346b0b30145c0800f8606f467610 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:69b412ea3e4dadb9329ebbadf5c564ee2b83346b0b30145c0800f8606f467610 lastState: {} name: util ready: true resources: requests: cpu: 10m memory: 50Mi restartCount: 0 started: false state: terminated: containerID: cri-o://e01fdbec548b5f601457ce1635a2b63e01f2549b4e9e09464c8acc7533f1705a exitCode: 0 finishedAt: "2026-07-06T20:12:04Z" reason: Completed startedAt: "2026-07-06T20:12:04Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000680000 uid: 1000680000 volumeMounts: - mountPath: /util name: util - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-cbmsg readOnly: true recursiveReadOnly: Disabled - allocatedResources: cpu: 10m memory: 50Mi containerID: cri-o://5f4f5971429f67c05c9393c60a3bcaeee5b3fc22068129297f98c3c29074a662 image: quay.io/kuadrant/dns-operator-bundle:v0.16.0 imageID: quay.io/kuadrant/dns-operator-bundle@sha256:5514cbc8769f80e8b72f4c5eed22f2e094e6c018a9706a4a5f0dc6edd55efc90 lastState: {} name: pull ready: true resources: requests: cpu: 10m memory: 50Mi restartCount: 0 started: false state: terminated: containerID: cri-o://5f4f5971429f67c05c9393c60a3bcaeee5b3fc22068129297f98c3c29074a662 exitCode: 0 finishedAt: "2026-07-06T20:12:06Z" reason: Completed startedAt: "2026-07-06T20:12:06Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000680000 uid: 1000680000 volumeMounts: - mountPath: /bundle name: bundle - mountPath: /util name: util - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-cbmsg readOnly: true recursiveReadOnly: Disabled observedGeneration: 1 phase: Succeeded podIP: 10.132.0.38 podIPs: - ip: 10.132.0.38 qosClass: Burstable startTime: "2026-07-06T20:12:04Z" - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.132.0.41/23"],"mac_address":"0a:58:0a:84:00:29","gateway_ips":["10.132.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.132.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.132.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.132.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.132.0.1"}],"ip_address":"10.132.0.41/23","gateway_ip":"10.132.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.132.0.41" ], "mac": "0a:58:0a:84:00:29", "default": true, "dns": {} }] openshift.io/scc: restricted-v2 seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user creationTimestamp: "2026-07-06T20:12:06Z" generateName: 5fc36eb1065777914bfe0ff85f9a202e2a3bafefb563d9e2994474ed7344db2- generation: 1 labels: batch.kubernetes.io/controller-uid: 3b31cec0-a277-4f87-b855-a985e0e91ed2 batch.kubernetes.io/job-name: 5fc36eb1065777914bfe0ff85f9a202e2a3bafefb563d9e2994474ed7344db2 controller-uid: 3b31cec0-a277-4f87-b855-a985e0e91ed2 job-name: 5fc36eb1065777914bfe0ff85f9a202e2a3bafefb563d9e2994474ed7344db2 olm.managed: "true" operatorframework.io/bundle-unpack-ref: 5fc36eb1065777914bfe0ff85f9a202e2a3bafefb563d9e2994474ed7344db2 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.ovn.org/pod-networks: {} manager: ip-10-0-130-133 operation: Update subresource: status time: "2026-07-06T20:12:06Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:batch.kubernetes.io/controller-uid: {} f:batch.kubernetes.io/job-name: {} f:controller-uid: {} f:job-name: {} f:olm.managed: {} f:operatorframework.io/bundle-unpack-ref: {} f:ownerReferences: .: {} k:{"uid":"3b31cec0-a277-4f87-b855-a985e0e91ed2"}: {} f:spec: f:containers: k:{"name":"extract"}: .: {} f:command: {} f:env: .: {} k:{"name":"CONTAINER_IMAGE"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:allowPrivilegeEscalation: {} f:capabilities: .: {} f:drop: {} f:readOnlyRootFilesystem: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/bundle"}: .: {} f:mountPath: {} f:name: {} f:dnsPolicy: {} f:enableServiceLinks: {} f:initContainers: .: {} k:{"name":"pull"}: .: {} f:command: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:allowPrivilegeEscalation: {} f:capabilities: .: {} f:drop: {} f:readOnlyRootFilesystem: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/bundle"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/util"}: .: {} f:mountPath: {} f:name: {} k:{"name":"util"}: .: {} f:command: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:allowPrivilegeEscalation: {} f:capabilities: .: {} f:drop: {} f:readOnlyRootFilesystem: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/util"}: .: {} f:mountPath: {} f:name: {} f:nodeSelector: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: .: {} f:seccompProfile: .: {} f:type: {} f:terminationGracePeriodSeconds: {} f:tolerations: {} f:volumes: .: {} k:{"name":"bundle"}: .: {} f:emptyDir: {} f:name: {} k:{"name":"util"}: .: {} f:emptyDir: {} f:name: {} manager: kube-controller-manager operation: Update time: "2026-07-06T20:12:06Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.v1.cni.cncf.io/network-status: {} manager: multus-daemon operation: Update subresource: status time: "2026-07-06T20:12:06Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"ContainersReady"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:reason: {} f:status: {} f:type: {} k:{"type":"Initialized"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:reason: {} f:status: {} f:type: {} k:{"type":"PodReadyToStartContainers"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodScheduled"}: f:observedGeneration: {} k:{"type":"Ready"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:reason: {} f:status: {} f:type: {} f:containerStatuses: {} f:hostIP: {} f:hostIPs: {} f:initContainerStatuses: {} f:observedGeneration: {} f:phase: {} f:podIP: {} f:podIPs: .: {} k:{"ip":"10.132.0.41"}: .: {} f:ip: {} f:startTime: {} manager: kubelet operation: Update subresource: status time: "2026-07-06T20:12:10Z" name: 5fc36eb1065777914bfe0ff85f9a202e2a3bafefb563d9e2994474ed73l6l96 namespace: kuadrant-system ownerReferences: - apiVersion: batch/v1 blockOwnerDeletion: true controller: true kind: Job name: 5fc36eb1065777914bfe0ff85f9a202e2a3bafefb563d9e2994474ed7344db2 uid: 3b31cec0-a277-4f87-b855-a985e0e91ed2 resourceVersion: "15560" uid: 6485c000-68a5-4ee0-a899-9925bee9b133 spec: containers: - command: - opm - alpha - bundle - extract - -m - /bundle/ - -n - kuadrant-system - -c - 5fc36eb1065777914bfe0ff85f9a202e2a3bafefb563d9e2994474ed7344db2 - -z env: - name: CONTAINER_IMAGE value: quay.io/kuadrant/kuadrant-operator-bundle:v1.4.2 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:97169107e88251ef86278e9e44644664b531b5472896c4647d9828f2a9e32e40 imagePullPolicy: IfNotPresent name: extract resources: requests: cpu: 10m memory: 50Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000680000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /bundle name: bundle - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-6cqjh readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: default-dockercfg-fgg7s initContainers: - command: - /bin/cp - -Rv - /bin/cpb - /util/cpb image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:69b412ea3e4dadb9329ebbadf5c564ee2b83346b0b30145c0800f8606f467610 imagePullPolicy: IfNotPresent name: util resources: requests: cpu: 10m memory: 50Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000680000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /util name: util - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-6cqjh readOnly: true - command: - /util/cpb - /bundle image: quay.io/kuadrant/kuadrant-operator-bundle:v1.4.2 imagePullPolicy: Always name: pull resources: requests: cpu: 10m memory: 50Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000680000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /bundle name: bundle - mountPath: /util name: util - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-6cqjh readOnly: true nodeName: ip-10-0-130-133.ec2.internal nodeSelector: kubernetes.io/os: linux preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Never schedulerName: default-scheduler securityContext: fsGroup: 1000680000 seLinuxOptions: level: s0:c26,c15 seccompProfile: type: RuntimeDefault serviceAccount: default serviceAccountName: default terminationGracePeriodSeconds: 30 tolerations: - key: kubernetes.io/arch operator: Equal value: amd64 - key: kubernetes.io/arch operator: Equal value: arm64 - key: kubernetes.io/arch operator: Equal value: ppc64le - key: kubernetes.io/arch operator: Equal value: s390x - effect: NoSchedule key: node-role.kubernetes.io/master operator: Exists - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 120 - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 120 - effect: NoSchedule key: node.kubernetes.io/memory-pressure operator: Exists volumes: - emptyDir: {} name: bundle - emptyDir: {} name: util - name: kube-api-access-6cqjh projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:10Z" observedGeneration: 1 status: "False" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:08Z" observedGeneration: 1 reason: PodCompleted status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:06Z" observedGeneration: 1 reason: PodCompleted status: "False" type: Ready - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:06Z" observedGeneration: 1 reason: PodCompleted status: "False" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:06Z" observedGeneration: 1 status: "True" type: PodScheduled containerStatuses: - allocatedResources: cpu: 10m memory: 50Mi containerID: cri-o://af1568cf9f9436d617ee10bf246607de245ac8275b69cbb29e692040c72b6f14 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:97169107e88251ef86278e9e44644664b531b5472896c4647d9828f2a9e32e40 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5f6c83ec7adb05c566d9109dda721ebdbfb394606196ae36d45c467bd70420f0 lastState: {} name: extract ready: false resources: requests: cpu: 10m memory: 50Mi restartCount: 0 started: false state: terminated: containerID: cri-o://af1568cf9f9436d617ee10bf246607de245ac8275b69cbb29e692040c72b6f14 exitCode: 0 finishedAt: "2026-07-06T20:12:08Z" reason: Completed startedAt: "2026-07-06T20:12:08Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000680000 uid: 1000680000 volumeMounts: - mountPath: /bundle name: bundle - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-6cqjh readOnly: true recursiveReadOnly: Disabled hostIP: 10.0.130.133 hostIPs: - ip: 10.0.130.133 initContainerStatuses: - allocatedResources: cpu: 10m memory: 50Mi containerID: cri-o://bb7ed553a099807ce3ccbbd8c9f8426879ecf0ff0e479e5f76b6b5e3b399a0c0 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:69b412ea3e4dadb9329ebbadf5c564ee2b83346b0b30145c0800f8606f467610 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:69b412ea3e4dadb9329ebbadf5c564ee2b83346b0b30145c0800f8606f467610 lastState: {} name: util ready: true resources: requests: cpu: 10m memory: 50Mi restartCount: 0 started: false state: terminated: containerID: cri-o://bb7ed553a099807ce3ccbbd8c9f8426879ecf0ff0e479e5f76b6b5e3b399a0c0 exitCode: 0 finishedAt: "2026-07-06T20:12:06Z" reason: Completed startedAt: "2026-07-06T20:12:06Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000680000 uid: 1000680000 volumeMounts: - mountPath: /util name: util - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-6cqjh readOnly: true recursiveReadOnly: Disabled - allocatedResources: cpu: 10m memory: 50Mi containerID: cri-o://6e87432ff669fdef87c9903b7041b3d383b4c1209cfc9fc72d505441356c83ca image: quay.io/kuadrant/kuadrant-operator-bundle:v1.4.2 imageID: quay.io/kuadrant/kuadrant-operator-bundle@sha256:16c47aa70bf2bb5e895c6ade60d4337b4729693bcb270161f82cd1e3da399cdb lastState: {} name: pull ready: true resources: requests: cpu: 10m memory: 50Mi restartCount: 0 started: false state: terminated: containerID: cri-o://6e87432ff669fdef87c9903b7041b3d383b4c1209cfc9fc72d505441356c83ca exitCode: 0 finishedAt: "2026-07-06T20:12:08Z" reason: Completed startedAt: "2026-07-06T20:12:08Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000680000 uid: 1000680000 volumeMounts: - mountPath: /bundle name: bundle - mountPath: /util name: util - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-6cqjh readOnly: true recursiveReadOnly: Disabled observedGeneration: 1 phase: Succeeded podIP: 10.132.0.41 podIPs: - ip: 10.132.0.41 qosClass: Burstable startTime: "2026-07-06T20:12:06Z" - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.132.0.39/23"],"mac_address":"0a:58:0a:84:00:27","gateway_ips":["10.132.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.132.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.132.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.132.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.132.0.1"}],"ip_address":"10.132.0.39/23","gateway_ip":"10.132.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.132.0.39" ], "mac": "0a:58:0a:84:00:27", "default": true, "dns": {} }] openshift.io/scc: restricted-v2 seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user creationTimestamp: "2026-07-06T20:12:05Z" generateName: 9438e18bbad664a016701a3153a6b421e2d977be7eb0117f80bcf45ef118bd9- generation: 1 labels: batch.kubernetes.io/controller-uid: 6a02c95b-2928-49af-9c2f-b4e1dbc94301 batch.kubernetes.io/job-name: 9438e18bbad664a016701a3153a6b421e2d977be7eb0117f80bcf45ef118bd9 controller-uid: 6a02c95b-2928-49af-9c2f-b4e1dbc94301 job-name: 9438e18bbad664a016701a3153a6b421e2d977be7eb0117f80bcf45ef118bd9 olm.managed: "true" operatorframework.io/bundle-unpack-ref: 9438e18bbad664a016701a3153a6b421e2d977be7eb0117f80bcf45ef118bd9 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.ovn.org/pod-networks: {} manager: ip-10-0-130-133 operation: Update subresource: status time: "2026-07-06T20:12:05Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:batch.kubernetes.io/controller-uid: {} f:batch.kubernetes.io/job-name: {} f:controller-uid: {} f:job-name: {} f:olm.managed: {} f:operatorframework.io/bundle-unpack-ref: {} f:ownerReferences: .: {} k:{"uid":"6a02c95b-2928-49af-9c2f-b4e1dbc94301"}: {} f:spec: f:containers: k:{"name":"extract"}: .: {} f:command: {} f:env: .: {} k:{"name":"CONTAINER_IMAGE"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:allowPrivilegeEscalation: {} f:capabilities: .: {} f:drop: {} f:readOnlyRootFilesystem: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/bundle"}: .: {} f:mountPath: {} f:name: {} f:dnsPolicy: {} f:enableServiceLinks: {} f:initContainers: .: {} k:{"name":"pull"}: .: {} f:command: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:allowPrivilegeEscalation: {} f:capabilities: .: {} f:drop: {} f:readOnlyRootFilesystem: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/bundle"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/util"}: .: {} f:mountPath: {} f:name: {} k:{"name":"util"}: .: {} f:command: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:allowPrivilegeEscalation: {} f:capabilities: .: {} f:drop: {} f:readOnlyRootFilesystem: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/util"}: .: {} f:mountPath: {} f:name: {} f:nodeSelector: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: .: {} f:seccompProfile: .: {} f:type: {} f:terminationGracePeriodSeconds: {} f:tolerations: {} f:volumes: .: {} k:{"name":"bundle"}: .: {} f:emptyDir: {} f:name: {} k:{"name":"util"}: .: {} f:emptyDir: {} f:name: {} manager: kube-controller-manager operation: Update time: "2026-07-06T20:12:05Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.v1.cni.cncf.io/network-status: {} manager: multus-daemon operation: Update subresource: status time: "2026-07-06T20:12:05Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"ContainersReady"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:reason: {} f:status: {} f:type: {} k:{"type":"Initialized"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:reason: {} f:status: {} f:type: {} k:{"type":"PodReadyToStartContainers"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodScheduled"}: f:observedGeneration: {} k:{"type":"Ready"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:reason: {} f:status: {} f:type: {} f:containerStatuses: {} f:hostIP: {} f:hostIPs: {} f:initContainerStatuses: {} f:observedGeneration: {} f:phase: {} f:podIP: {} f:podIPs: .: {} k:{"ip":"10.132.0.39"}: .: {} f:ip: {} f:startTime: {} manager: kubelet operation: Update subresource: status time: "2026-07-06T20:12:10Z" name: 9438e18bbad664a016701a3153a6b421e2d977be7eb0117f80bcf45ef1lvbv5 namespace: kuadrant-system ownerReferences: - apiVersion: batch/v1 blockOwnerDeletion: true controller: true kind: Job name: 9438e18bbad664a016701a3153a6b421e2d977be7eb0117f80bcf45ef118bd9 uid: 6a02c95b-2928-49af-9c2f-b4e1dbc94301 resourceVersion: "15556" uid: 602cda8d-f8c4-4a6a-9a04-5759fc1af23c spec: containers: - command: - opm - alpha - bundle - extract - -m - /bundle/ - -n - kuadrant-system - -c - 9438e18bbad664a016701a3153a6b421e2d977be7eb0117f80bcf45ef118bd9 - -z env: - name: CONTAINER_IMAGE value: quay.io/kuadrant/authorino-operator-bundle:v0.23.1 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:97169107e88251ef86278e9e44644664b531b5472896c4647d9828f2a9e32e40 imagePullPolicy: IfNotPresent name: extract resources: requests: cpu: 10m memory: 50Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000680000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /bundle name: bundle - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-x8n7f readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: default-dockercfg-fgg7s initContainers: - command: - /bin/cp - -Rv - /bin/cpb - /util/cpb image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:69b412ea3e4dadb9329ebbadf5c564ee2b83346b0b30145c0800f8606f467610 imagePullPolicy: IfNotPresent name: util resources: requests: cpu: 10m memory: 50Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000680000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /util name: util - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-x8n7f readOnly: true - command: - /util/cpb - /bundle image: quay.io/kuadrant/authorino-operator-bundle:v0.23.1 imagePullPolicy: Always name: pull resources: requests: cpu: 10m memory: 50Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000680000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /bundle name: bundle - mountPath: /util name: util - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-x8n7f readOnly: true nodeName: ip-10-0-130-133.ec2.internal nodeSelector: kubernetes.io/os: linux preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Never schedulerName: default-scheduler securityContext: fsGroup: 1000680000 seLinuxOptions: level: s0:c26,c15 seccompProfile: type: RuntimeDefault serviceAccount: default serviceAccountName: default terminationGracePeriodSeconds: 30 tolerations: - key: kubernetes.io/arch operator: Equal value: amd64 - key: kubernetes.io/arch operator: Equal value: arm64 - key: kubernetes.io/arch operator: Equal value: ppc64le - key: kubernetes.io/arch operator: Equal value: s390x - effect: NoSchedule key: node-role.kubernetes.io/master operator: Exists - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 120 - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 120 - effect: NoSchedule key: node.kubernetes.io/memory-pressure operator: Exists volumes: - emptyDir: {} name: bundle - emptyDir: {} name: util - name: kube-api-access-x8n7f projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:10Z" observedGeneration: 1 status: "False" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:08Z" observedGeneration: 1 reason: PodCompleted status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:05Z" observedGeneration: 1 reason: PodCompleted status: "False" type: Ready - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:05Z" observedGeneration: 1 reason: PodCompleted status: "False" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:05Z" observedGeneration: 1 status: "True" type: PodScheduled containerStatuses: - allocatedResources: cpu: 10m memory: 50Mi containerID: cri-o://7eb8e46b1caa9f1f65652fc0a8140187277bc291977d7fa5ae7e69f57961cea1 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:97169107e88251ef86278e9e44644664b531b5472896c4647d9828f2a9e32e40 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5f6c83ec7adb05c566d9109dda721ebdbfb394606196ae36d45c467bd70420f0 lastState: {} name: extract ready: false resources: requests: cpu: 10m memory: 50Mi restartCount: 0 started: false state: terminated: containerID: cri-o://7eb8e46b1caa9f1f65652fc0a8140187277bc291977d7fa5ae7e69f57961cea1 exitCode: 0 finishedAt: "2026-07-06T20:12:08Z" reason: Completed startedAt: "2026-07-06T20:12:08Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000680000 uid: 1000680000 volumeMounts: - mountPath: /bundle name: bundle - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-x8n7f readOnly: true recursiveReadOnly: Disabled hostIP: 10.0.130.133 hostIPs: - ip: 10.0.130.133 initContainerStatuses: - allocatedResources: cpu: 10m memory: 50Mi containerID: cri-o://f2ad1bc9e3abe5c9db6f7c441dde6381d8bee1b25d308ac5e2fcca714e9a2ff9 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:69b412ea3e4dadb9329ebbadf5c564ee2b83346b0b30145c0800f8606f467610 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:69b412ea3e4dadb9329ebbadf5c564ee2b83346b0b30145c0800f8606f467610 lastState: {} name: util ready: true resources: requests: cpu: 10m memory: 50Mi restartCount: 0 started: false state: terminated: containerID: cri-o://f2ad1bc9e3abe5c9db6f7c441dde6381d8bee1b25d308ac5e2fcca714e9a2ff9 exitCode: 0 finishedAt: "2026-07-06T20:12:05Z" reason: Completed startedAt: "2026-07-06T20:12:05Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000680000 uid: 1000680000 volumeMounts: - mountPath: /util name: util - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-x8n7f readOnly: true recursiveReadOnly: Disabled - allocatedResources: cpu: 10m memory: 50Mi containerID: cri-o://c30ca8b2966b0a5f223ed44d196dd5adb954d76e7bff9433ee0b237dc7e5ac2d image: quay.io/kuadrant/authorino-operator-bundle:v0.23.1 imageID: quay.io/kuadrant/authorino-operator-bundle@sha256:93a0a869694aea66a9669d68fd553febdc460bf47d2f658c0272cee3502a6417 lastState: {} name: pull ready: true resources: requests: cpu: 10m memory: 50Mi restartCount: 0 started: false state: terminated: containerID: cri-o://c30ca8b2966b0a5f223ed44d196dd5adb954d76e7bff9433ee0b237dc7e5ac2d exitCode: 0 finishedAt: "2026-07-06T20:12:07Z" reason: Completed startedAt: "2026-07-06T20:12:07Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000680000 uid: 1000680000 volumeMounts: - mountPath: /bundle name: bundle - mountPath: /util name: util - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-x8n7f readOnly: true recursiveReadOnly: Disabled observedGeneration: 1 phase: Succeeded podIP: 10.132.0.39 podIPs: - ip: 10.132.0.39 qosClass: Burstable startTime: "2026-07-06T20:12:05Z" - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.132.0.55/23"],"mac_address":"0a:58:0a:84:00:37","gateway_ips":["10.132.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.132.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.132.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.132.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.132.0.1"}],"ip_address":"10.132.0.55/23","gateway_ip":"10.132.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.132.0.55" ], "mac": "0a:58:0a:84:00:37", "default": true, "dns": {} }] kubectl.kubernetes.io/restartedAt: "2026-07-06T20:13:54Z" openshift.io/scc: restricted-v2 seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user creationTimestamp: "2026-07-06T20:17:27Z" generateName: authorino-5d5958db9b- generation: 1 labels: authorino-resource: authorino control-plane: controller-manager kuadrant.io/managed: "true" pod-template-hash: 5d5958db9b sidecar.istio.io/inject: "false" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:kubectl.kubernetes.io/restartedAt: {} f:generateName: {} f:labels: .: {} f:authorino-resource: {} f:control-plane: {} f:kuadrant.io/managed: {} f:pod-template-hash: {} f:sidecar.istio.io/inject: {} f:ownerReferences: .: {} k:{"uid":"126aa490-3bd5-4a89-9d21-a2f43eb0bbc7"}: {} f:spec: f:containers: k:{"name":"authorino"}: .: {} f:args: {} f:env: .: {} k:{"name":"REQUESTS_CA_BUNDLE"}: .: {} f:name: {} f:value: {} k:{"name":"SSL_CERT_FILE"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/etc/ssl/certs/tls.crt"}: .: {} f:mountPath: {} f:name: {} f:readOnly: {} f:subPath: {} k:{"mountPath":"/etc/ssl/private/tls.key"}: .: {} f:mountPath: {} f:name: {} f:readOnly: {} f:subPath: {} f:dnsPolicy: {} f:enableServiceLinks: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: {} f:serviceAccount: {} f:serviceAccountName: {} f:terminationGracePeriodSeconds: {} f:volumes: .: {} k:{"name":"tls-cert"}: .: {} f:name: {} f:secret: .: {} f:defaultMode: {} f:secretName: {} manager: kube-controller-manager operation: Update time: "2026-07-06T20:17:26Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.ovn.org/pod-networks: {} manager: ip-10-0-130-133 operation: Update subresource: status time: "2026-07-06T20:17:27Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.v1.cni.cncf.io/network-status: {} manager: multus-daemon operation: Update subresource: status time: "2026-07-06T20:17:27Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"ContainersReady"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"Initialized"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodReadyToStartContainers"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodScheduled"}: f:observedGeneration: {} k:{"type":"Ready"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} f:containerStatuses: {} f:hostIP: {} f:hostIPs: {} f:observedGeneration: {} f:phase: {} f:podIP: {} f:podIPs: .: {} k:{"ip":"10.132.0.55"}: .: {} f:ip: {} f:startTime: {} manager: kubelet operation: Update subresource: status time: "2026-07-06T20:17:28Z" name: authorino-5d5958db9b-tfpxl namespace: kuadrant-system ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: authorino-5d5958db9b uid: 126aa490-3bd5-4a89-9d21-a2f43eb0bbc7 resourceVersion: "23044" uid: b271f5aa-0263-47ea-9f03-b2dcbc80a78e spec: containers: - args: - --allow-superseding-host-subsets - --log-level=debug - --tls-cert=/etc/ssl/certs/tls.crt - --tls-cert-key=/etc/ssl/private/tls.key env: - name: SSL_CERT_FILE value: /etc/ssl/certs/openshift-service-ca/service-ca-bundle.crt - name: REQUESTS_CA_BUNDLE value: /etc/ssl/certs/openshift-service-ca/service-ca-bundle.crt image: quay.io/kuadrant/authorino:v0.24.0 imagePullPolicy: Always name: authorino resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsNonRoot: true runAsUser: 1000680000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/ssl/certs/tls.crt name: tls-cert readOnly: true subPath: tls.crt - mountPath: /etc/ssl/private/tls.key name: tls-cert readOnly: true subPath: tls.key - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-wf766 readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: authorino-authorino-dockercfg-dcbv8 nodeName: ip-10-0-130-133.ec2.internal preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 1000680000 seLinuxOptions: level: s0:c26,c15 seccompProfile: type: RuntimeDefault serviceAccount: authorino-authorino serviceAccountName: authorino-authorino terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - name: tls-cert secret: defaultMode: 420 secretName: authorino-server-cert - name: kube-api-access-wf766 projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-07-06T20:17:28Z" observedGeneration: 1 status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-07-06T20:17:27Z" observedGeneration: 1 status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-07-06T20:17:28Z" observedGeneration: 1 status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-07-06T20:17:28Z" observedGeneration: 1 status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-07-06T20:17:27Z" observedGeneration: 1 status: "True" type: PodScheduled containerStatuses: - containerID: cri-o://625de90532c0b494013f68c5aeb7535caa89004f8fc8370d9982261a1f35de48 image: quay.io/kuadrant/authorino:v0.24.0 imageID: quay.io/kuadrant/authorino@sha256:96b1b9737cf5f546d132e45bd04513096c76a5655e151741306e886e598fc999 lastState: {} name: authorino ready: true resources: {} restartCount: 0 started: true state: running: startedAt: "2026-07-06T20:17:28Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000680000 uid: 1000680000 volumeMounts: - mountPath: /etc/ssl/certs/tls.crt name: tls-cert readOnly: true recursiveReadOnly: Disabled - mountPath: /etc/ssl/private/tls.key name: tls-cert readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-wf766 readOnly: true recursiveReadOnly: Disabled hostIP: 10.0.130.133 hostIPs: - ip: 10.0.130.133 observedGeneration: 1 phase: Running podIP: 10.132.0.55 podIPs: - ip: 10.132.0.55 qosClass: BestEffort startTime: "2026-07-06T20:17:27Z" - apiVersion: v1 kind: Pod metadata: annotations: alm-examples: |- [ { "apiVersion": "authorino.kuadrant.io/v1beta2", "kind": "AuthConfig", "metadata": { "name": "my-api-protection" }, "spec": { "authentication": { "api-key-users": { "apiKey": { "selector": { "matchLabels": { "group": "friends" } } }, "credentials": { "authorizationHeader": { "prefix": "APIKEY" } } } }, "hosts": [ "my-api.io" ] } }, { "apiVersion": "authorino.kuadrant.io/v1beta3", "kind": "AuthConfig", "metadata": { "name": "my-api-protection" }, "spec": { "authentication": { "api-key-users": { "apiKey": { "selector": { "matchLabels": { "group": "friends" } } }, "credentials": { "authorizationHeader": { "prefix": "APIKEY" } } } }, "hosts": [ "my-api.io" ] } }, { "apiVersion": "operator.authorino.kuadrant.io/v1beta1", "kind": "Authorino", "metadata": { "name": "authorino-sample" }, "spec": { "listener": { "tls": { "enabled": false } }, "oidcServer": { "tls": { "enabled": false } } } } ] capabilities: Basic Install categories: Integration & Delivery containerImage: quay.io/kuadrant/authorino-operator:v0.23.1 createdAt: "2026-02-18T13:50:42Z" k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.132.0.45/23"],"mac_address":"0a:58:0a:84:00:2d","gateway_ips":["10.132.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.132.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.132.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.132.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.132.0.1"}],"ip_address":"10.132.0.45/23","gateway_ip":"10.132.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.132.0.45" ], "mac": "0a:58:0a:84:00:2d", "default": true, "dns": {} }] olm.operatorGroup: kuadrant-operator-group olm.operatorNamespace: kuadrant-system olm.targetNamespaces: "" openshift.io/scc: restricted-v2 operatorframework.io/properties: '{"properties":[{"type":"olm.gvk","value":{"group":"authorino.kuadrant.io","kind":"AuthConfig","version":"v1beta2"}},{"type":"olm.gvk","value":{"group":"authorino.kuadrant.io","kind":"AuthConfig","version":"v1beta3"}},{"type":"olm.gvk","value":{"group":"operator.authorino.kuadrant.io","kind":"Authorino","version":"v1beta1"}},{"type":"olm.package","value":{"packageName":"authorino-operator","version":"0.23.1"}}]}' operators.operatorframework.io/builder: operator-sdk-v1.32.0 operators.operatorframework.io/project_layout: go.kubebuilder.io/v3 repository: https://github.com/Kuadrant/authorino-operator seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user support: kuadrant creationTimestamp: "2026-07-06T20:12:32Z" generateName: authorino-operator-75cc8d5cb7- generation: 1 labels: control-plane: authorino-operator pod-template-hash: 75cc8d5cb7 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.ovn.org/pod-networks: {} manager: ip-10-0-130-133 operation: Update subresource: status time: "2026-07-06T20:12:32Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:alm-examples: {} f:capabilities: {} f:categories: {} f:containerImage: {} f:createdAt: {} f:olm.operatorGroup: {} f:olm.operatorNamespace: {} f:olm.targetNamespaces: {} f:operatorframework.io/properties: {} f:operators.operatorframework.io/builder: {} f:operators.operatorframework.io/project_layout: {} f:repository: {} f:support: {} f:generateName: {} f:labels: .: {} f:control-plane: {} f:pod-template-hash: {} f:ownerReferences: .: {} k:{"uid":"80864437-fecb-4963-8e04-e36311e6b8aa"}: {} f:spec: f:containers: k:{"name":"manager"}: .: {} f:args: {} f:command: {} f:env: .: {} k:{"name":"OPERATOR_CONDITION_NAME"}: .: {} f:name: {} f:value: {} k:{"name":"RELATED_IMAGE_AUTHORINO"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:livenessProbe: .: {} f:failureThreshold: {} f:httpGet: .: {} f:path: {} f:port: {} f:scheme: {} f:initialDelaySeconds: {} f:periodSeconds: {} f:successThreshold: {} f:timeoutSeconds: {} f:name: {} f:ports: .: {} k:{"containerPort":8080,"protocol":"TCP"}: .: {} f:containerPort: {} f:name: {} f:protocol: {} f:readinessProbe: .: {} f:failureThreshold: {} f:httpGet: .: {} f:path: {} f:port: {} f:scheme: {} f:initialDelaySeconds: {} f:periodSeconds: {} f:successThreshold: {} f:timeoutSeconds: {} f:resources: .: {} f:limits: .: {} f:cpu: {} f:memory: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:allowPrivilegeEscalation: {} f:capabilities: .: {} f:drop: {} f:readOnlyRootFilesystem: {} f:seccompProfile: .: {} f:type: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:dnsPolicy: {} f:enableServiceLinks: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: .: {} f:runAsNonRoot: {} f:serviceAccount: {} f:serviceAccountName: {} f:terminationGracePeriodSeconds: {} manager: kube-controller-manager operation: Update time: "2026-07-06T20:12:32Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.v1.cni.cncf.io/network-status: {} manager: multus-daemon operation: Update subresource: status time: "2026-07-06T20:12:33Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"ContainersReady"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"Initialized"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodReadyToStartContainers"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodScheduled"}: f:observedGeneration: {} k:{"type":"Ready"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} f:containerStatuses: {} f:hostIP: {} f:hostIPs: {} f:observedGeneration: {} f:phase: {} f:podIP: {} f:podIPs: .: {} k:{"ip":"10.132.0.45"}: .: {} f:ip: {} f:startTime: {} manager: kubelet operation: Update subresource: status time: "2026-07-06T20:30:59Z" name: authorino-operator-75cc8d5cb7-tj6k6 namespace: kuadrant-system ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: authorino-operator-75cc8d5cb7 uid: 80864437-fecb-4963-8e04-e36311e6b8aa resourceVersion: "37107" uid: ba75fdd1-3a5a-46cb-a655-a46013cf495e spec: containers: - args: - --leader-elect command: - /manager env: - name: RELATED_IMAGE_AUTHORINO value: quay.io/kuadrant/authorino:v0.24.0 - name: OPERATOR_CONDITION_NAME value: authorino-operator.v0.23.1 image: quay.io/kuadrant/authorino-operator:v0.23.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 httpGet: path: /healthz port: 8081 scheme: HTTP initialDelaySeconds: 15 periodSeconds: 20 successThreshold: 1 timeoutSeconds: 1 name: manager ports: - containerPort: 8080 name: metrics protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /readyz port: 8081 scheme: HTTP initialDelaySeconds: 5 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: limits: cpu: 200m memory: 300Mi requests: cpu: 200m memory: 200Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsUser: 1000680000 seccompProfile: type: RuntimeDefault terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-jbspj readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: authorino-operator-dockercfg-v5nxb nodeName: ip-10-0-130-133.ec2.internal preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 1000680000 runAsNonRoot: true seLinuxOptions: level: s0:c26,c15 seccompProfile: type: RuntimeDefault serviceAccount: authorino-operator serviceAccountName: authorino-operator terminationGracePeriodSeconds: 10 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 - effect: NoSchedule key: node.kubernetes.io/memory-pressure operator: Exists volumes: - name: kube-api-access-jbspj projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:35Z" observedGeneration: 1 status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:32Z" observedGeneration: 1 status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-07-06T20:30:59Z" observedGeneration: 1 status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-07-06T20:30:59Z" observedGeneration: 1 status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:32Z" observedGeneration: 1 status: "True" type: PodScheduled containerStatuses: - allocatedResources: cpu: 200m memory: 200Mi containerID: cri-o://6dd081f63f096242d4a3be28f4d4d11867d44add8a7d2ef9f07a8e8e225eff3c image: quay.io/kuadrant/authorino-operator:v0.23.1 imageID: quay.io/kuadrant/authorino-operator@sha256:3b728eb98fcd40e2ed8fce6748bd2ffb56c4fa5cc8cbcc7a3736b9818e63a7d2 lastState: terminated: containerID: cri-o://c91c4ebe9375454a74bcba256ead184e4d2b92ca8572215e5e026fb01df87266 exitCode: 1 finishedAt: "2026-07-06T20:30:45Z" reason: Error startedAt: "2026-07-06T20:12:35Z" name: manager ready: true resources: limits: cpu: 200m memory: 300Mi requests: cpu: 200m memory: 200Mi restartCount: 1 started: true state: running: startedAt: "2026-07-06T20:30:46Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000680000 uid: 1000680000 volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-jbspj readOnly: true recursiveReadOnly: Disabled hostIP: 10.0.130.133 hostIPs: - ip: 10.0.130.133 observedGeneration: 1 phase: Running podIP: 10.132.0.45 podIPs: - ip: 10.132.0.45 qosClass: Burstable startTime: "2026-07-06T20:12:32Z" - apiVersion: v1 kind: Pod metadata: annotations: alm-examples: |- [ { "apiVersion": "kuadrant.io/v1alpha1", "kind": "DNSHealthCheckProbe", "metadata": { "name": "$NAME" }, "spec": { "additionalHeadersRef": { "name": "headers" }, "address": "192.168.0.16", "allowInsecureCertificate": true, "failureThreshold": 5, "hostname": "test.com", "interval": "60s", "path": "/healthz", "port": 443, "protocol": "HTTPS" } }, { "apiVersion": "kuadrant.io/v1alpha1", "kind": "DNSRecord", "metadata": { "labels": { "app.kubernetes.io/created-by": "dns-operator", "app.kubernetes.io/instance": "dnsrecord-sample", "app.kubernetes.io/managed-by": "kustomize", "app.kubernetes.io/name": "dnsrecord", "app.kubernetes.io/part-of": "dns-operator" }, "name": "dnsrecord-sample" }, "spec": { "endpoints": [ { "dnsName": "dnsrecord-simple.kuadrant.local", "recordTTL": 60, "recordType": "A", "targets": [ "52.215.108.61", "52.30.101.221" ] } ], "providerRef": { "name": "dns-provider-credentials-inmemory" }, "rootHost": "dnsrecord-simple.kuadrant.local" } } ] capabilities: Basic Install categories: Integration & Delivery containerImage: quay.io/kuadrant/dns-operator:v0.16.0 createdAt: "2026-02-05T12:07:43Z" description: A Kubernetes Operator to manage the lifecycle of DNS resources k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.132.0.44/23"],"mac_address":"0a:58:0a:84:00:2c","gateway_ips":["10.132.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.132.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.132.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.132.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.132.0.1"}],"ip_address":"10.132.0.44/23","gateway_ip":"10.132.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.132.0.44" ], "mac": "0a:58:0a:84:00:2c", "default": true, "dns": {} }] kubectl.kubernetes.io/default-container: manager olm.operatorGroup: kuadrant-operator-group olm.operatorNamespace: kuadrant-system olm.targetNamespaces: "" openshift.io/scc: restricted-v2 operatorframework.io/properties: '{"properties":[{"type":"olm.gvk","value":{"group":"kuadrant.io","kind":"DNSHealthCheckProbe","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"kuadrant.io","kind":"DNSRecord","version":"v1alpha1"}},{"type":"olm.package","value":{"packageName":"dns-operator","version":"0.16.0"}}]}' operators.operatorframework.io/builder: operator-sdk-v1.33.0 operators.operatorframework.io/project_layout: go.kubebuilder.io/v4 repository: https://github.com/kuadrant/dns-operator seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user support: kuadrant creationTimestamp: "2026-07-06T20:12:28Z" generateName: dns-operator-controller-manager-864dd78c4c- generation: 1 labels: control-plane: dns-operator-controller-manager pod-template-hash: 864dd78c4c managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.ovn.org/pod-networks: {} manager: ip-10-0-130-133 operation: Update subresource: status time: "2026-07-06T20:12:28Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:alm-examples: {} f:capabilities: {} f:categories: {} f:containerImage: {} f:createdAt: {} f:description: {} f:kubectl.kubernetes.io/default-container: {} f:olm.operatorGroup: {} f:olm.operatorNamespace: {} f:olm.targetNamespaces: {} f:operatorframework.io/properties: {} f:operators.operatorframework.io/builder: {} f:operators.operatorframework.io/project_layout: {} f:repository: {} f:support: {} f:generateName: {} f:labels: .: {} f:control-plane: {} f:pod-template-hash: {} f:ownerReferences: .: {} k:{"uid":"efb7b053-1a89-4ecc-b7e2-80b5339039a6"}: {} f:spec: f:containers: k:{"name":"manager"}: .: {} f:args: {} f:command: {} f:env: .: {} k:{"name":"CLUSTER_SECRET_NAMESPACE"}: .: {} f:name: {} f:valueFrom: .: {} f:fieldRef: {} k:{"name":"OPERATOR_CONDITION_NAME"}: .: {} f:name: {} f:value: {} k:{"name":"WATCH_NAMESPACES"}: .: {} f:name: {} f:envFrom: {} f:image: {} f:imagePullPolicy: {} f:livenessProbe: .: {} f:failureThreshold: {} f:httpGet: .: {} f:path: {} f:port: {} f:scheme: {} f:initialDelaySeconds: {} f:periodSeconds: {} f:successThreshold: {} f:timeoutSeconds: {} f:name: {} f:ports: .: {} k:{"containerPort":8080,"protocol":"TCP"}: .: {} f:containerPort: {} f:name: {} f:protocol: {} k:{"containerPort":8082,"protocol":"TCP"}: .: {} f:containerPort: {} f:name: {} f:protocol: {} f:readinessProbe: .: {} f:failureThreshold: {} f:httpGet: .: {} f:path: {} f:port: {} f:scheme: {} f:initialDelaySeconds: {} f:periodSeconds: {} f:successThreshold: {} f:timeoutSeconds: {} f:resources: .: {} f:limits: .: {} f:cpu: {} f:memory: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:allowPrivilegeEscalation: {} f:capabilities: .: {} f:drop: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:dnsPolicy: {} f:enableServiceLinks: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: .: {} f:runAsNonRoot: {} f:serviceAccount: {} f:serviceAccountName: {} f:terminationGracePeriodSeconds: {} manager: kube-controller-manager operation: Update time: "2026-07-06T20:12:28Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.v1.cni.cncf.io/network-status: {} manager: multus-daemon operation: Update subresource: status time: "2026-07-06T20:12:29Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"ContainersReady"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"Initialized"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodReadyToStartContainers"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodScheduled"}: f:observedGeneration: {} k:{"type":"Ready"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} f:containerStatuses: {} f:hostIP: {} f:hostIPs: {} f:observedGeneration: {} f:phase: {} f:podIP: {} f:podIPs: .: {} k:{"ip":"10.132.0.44"}: .: {} f:ip: {} f:startTime: {} manager: kubelet operation: Update subresource: status time: "2026-07-06T20:30:57Z" name: dns-operator-controller-manager-864dd78c4c-drtjk namespace: kuadrant-system ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: dns-operator-controller-manager-864dd78c4c uid: efb7b053-1a89-4ecc-b7e2-80b5339039a6 resourceVersion: "36935" uid: 0732e11e-ca32-46dc-b9fe-a7ad6ef72eae spec: containers: - args: - --metrics-bind-address=:8080 - --leader-elect command: - /manager env: - name: WATCH_NAMESPACES - name: CLUSTER_SECRET_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: OPERATOR_CONDITION_NAME value: dns-operator.v0.16.0 envFrom: - configMapRef: name: dns-operator-controller-env image: quay.io/kuadrant/dns-operator:v0.16.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 httpGet: path: /healthz port: 8081 scheme: HTTP initialDelaySeconds: 15 periodSeconds: 20 successThreshold: 1 timeoutSeconds: 1 name: manager ports: - containerPort: 8080 name: metrics protocol: TCP - containerPort: 8082 name: pprof protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /readyz port: 8081 scheme: HTTP initialDelaySeconds: 5 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: limits: cpu: 200m memory: 128Mi requests: cpu: 10m memory: 64Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsUser: 1000680000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-58k5t readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: dns-operator-controller-manager-dockercfg-b574b nodeName: ip-10-0-130-133.ec2.internal preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 1000680000 runAsNonRoot: true seLinuxOptions: level: s0:c26,c15 seccompProfile: type: RuntimeDefault serviceAccount: dns-operator-controller-manager serviceAccountName: dns-operator-controller-manager terminationGracePeriodSeconds: 10 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 - effect: NoSchedule key: node.kubernetes.io/memory-pressure operator: Exists volumes: - name: kube-api-access-58k5t projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:31Z" observedGeneration: 1 status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:28Z" observedGeneration: 1 status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-07-06T20:30:57Z" observedGeneration: 1 status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-07-06T20:30:57Z" observedGeneration: 1 status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:28Z" observedGeneration: 1 status: "True" type: PodScheduled containerStatuses: - allocatedResources: cpu: 10m memory: 64Mi containerID: cri-o://2258278968e73fe8db1703f17ff3d4151b0754a17c0fa2996d8e7b3374db9717 image: quay.io/kuadrant/dns-operator:v0.16.0 imageID: quay.io/kuadrant/dns-operator@sha256:2a19671ce10bcdd92d014a55c290553c9c47a97bb58aac736c9d52f9490286ba lastState: terminated: containerID: cri-o://029fe1b84440bf71443f633f66ff7d3a5c303ef91d64bebc378485007a1b264f exitCode: 1 finishedAt: "2026-07-06T20:30:44Z" reason: Error startedAt: "2026-07-06T20:12:31Z" name: manager ready: true resources: limits: cpu: 200m memory: 128Mi requests: cpu: 10m memory: 64Mi restartCount: 1 started: true state: running: startedAt: "2026-07-06T20:30:45Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000680000 uid: 1000680000 volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-58k5t readOnly: true recursiveReadOnly: Disabled hostIP: 10.0.130.133 hostIPs: - ip: 10.0.130.133 observedGeneration: 1 phase: Running podIP: 10.132.0.44 podIPs: - ip: 10.132.0.44 qosClass: Burstable startTime: "2026-07-06T20:12:28Z" - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.132.0.46/23"],"mac_address":"0a:58:0a:84:00:2e","gateway_ips":["10.132.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.132.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.132.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.132.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.132.0.1"}],"ip_address":"10.132.0.46/23","gateway_ip":"10.132.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.132.0.46" ], "mac": "0a:58:0a:84:00:2e", "default": true, "dns": {} }] openshift.io/scc: restricted-v2 seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user creationTimestamp: "2026-07-06T20:12:36Z" generateName: kuadrant-console-plugin-66b5774985- generation: 1 labels: app: kuadrant-console-plugin app.kubernetes.io/component: kuadrant-console-plugin app.kubernetes.io/instance: kuadrant-console-plugin app.kubernetes.io/managed-by: kuadrant-operator app.kubernetes.io/name: kuadrant-console-plugin app.kubernetes.io/part-of: kuadrant-console-plugin pod-template-hash: 66b5774985 managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.ovn.org/pod-networks: {} manager: ip-10-0-130-133 operation: Update subresource: status time: "2026-07-06T20:12:36Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:app: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/instance: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:pod-template-hash: {} f:ownerReferences: .: {} k:{"uid":"15843c44-0f66-436c-bdd5-5ed7989ca84c"}: {} f:spec: f:containers: k:{"name":"kuadrant-console-plugin"}: .: {} f:env: .: {} k:{"name":"TOPOLOGY_CONFIGMAP_NAME"}: .: {} f:name: {} f:value: {} k:{"name":"TOPOLOGY_CONFIGMAP_NAMESPACE"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:ports: .: {} k:{"containerPort":9443,"protocol":"TCP"}: .: {} f:containerPort: {} f:protocol: {} f:resources: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/etc/nginx/nginx.conf"}: .: {} f:mountPath: {} f:name: {} f:readOnly: {} f:subPath: {} k:{"mountPath":"/var/serving-cert"}: .: {} f:mountPath: {} f:name: {} f:readOnly: {} f:dnsPolicy: {} f:enableServiceLinks: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: {} f:terminationGracePeriodSeconds: {} f:volumes: .: {} k:{"name":"nginx-conf"}: .: {} f:configMap: .: {} f:defaultMode: {} f:name: {} f:name: {} k:{"name":"plugin-serving-cert"}: .: {} f:name: {} f:secret: .: {} f:defaultMode: {} f:secretName: {} manager: kube-controller-manager operation: Update time: "2026-07-06T20:12:36Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.v1.cni.cncf.io/network-status: {} manager: multus-daemon operation: Update subresource: status time: "2026-07-06T20:12:37Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"ContainersReady"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"Initialized"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodReadyToStartContainers"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodScheduled"}: f:observedGeneration: {} k:{"type":"Ready"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} f:containerStatuses: {} f:hostIP: {} f:hostIPs: {} f:observedGeneration: {} f:phase: {} f:podIP: {} f:podIPs: .: {} k:{"ip":"10.132.0.46"}: .: {} f:ip: {} f:startTime: {} manager: kubelet operation: Update subresource: status time: "2026-07-06T20:13:03Z" name: kuadrant-console-plugin-66b5774985-b5j27 namespace: kuadrant-system ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: kuadrant-console-plugin-66b5774985 uid: 15843c44-0f66-436c-bdd5-5ed7989ca84c resourceVersion: "19191" uid: 7e2f1dd2-f940-4c42-89f3-e8691ec33679 spec: containers: - env: - name: TOPOLOGY_CONFIGMAP_NAME value: topology - name: TOPOLOGY_CONFIGMAP_NAMESPACE value: kuadrant-system image: quay.io/kuadrant/console-plugin:v0.3.4 imagePullPolicy: Always name: kuadrant-console-plugin ports: - containerPort: 9443 protocol: TCP resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsNonRoot: true runAsUser: 1000680000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /var/serving-cert name: plugin-serving-cert readOnly: true - mountPath: /etc/nginx/nginx.conf name: nginx-conf readOnly: true subPath: nginx.conf - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-thvht readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: default-dockercfg-fgg7s nodeName: ip-10-0-130-133.ec2.internal preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 1000680000 seLinuxOptions: level: s0:c26,c15 seccompProfile: type: RuntimeDefault serviceAccount: default serviceAccountName: default terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - name: plugin-serving-cert secret: defaultMode: 420 secretName: plugin-serving-cert - configMap: defaultMode: 420 name: kuadrant-console-nginx-conf name: nginx-conf - name: kube-api-access-thvht projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-07-06T20:13:03Z" observedGeneration: 1 status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:36Z" observedGeneration: 1 status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-07-06T20:13:03Z" observedGeneration: 1 status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-07-06T20:13:03Z" observedGeneration: 1 status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:36Z" observedGeneration: 1 status: "True" type: PodScheduled containerStatuses: - containerID: cri-o://e0f05837e2bc3106210c437d0aaaacccdb295cc1bb82ca6ff21749c8f94a4bfe image: quay.io/kuadrant/console-plugin:v0.3.4 imageID: quay.io/kuadrant/console-plugin@sha256:2f435e0f46d28f387de7fb9a8f8c6a4bb87c913fae21b04ebc9f701f7f9be21d lastState: {} name: kuadrant-console-plugin ready: true resources: {} restartCount: 0 started: true state: running: startedAt: "2026-07-06T20:13:03Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000680000 uid: 1000680000 volumeMounts: - mountPath: /var/serving-cert name: plugin-serving-cert readOnly: true recursiveReadOnly: Disabled - mountPath: /etc/nginx/nginx.conf name: nginx-conf readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-thvht readOnly: true recursiveReadOnly: Disabled hostIP: 10.0.130.133 hostIPs: - ip: 10.0.130.133 observedGeneration: 1 phase: Running podIP: 10.132.0.46 podIPs: - ip: 10.132.0.46 qosClass: BestEffort startTime: "2026-07-06T20:12:36Z" - apiVersion: v1 kind: Pod metadata: annotations: cluster-autoscaler.kubernetes.io/safe-to-evict: "true" k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.132.0.37/23"],"mac_address":"0a:58:0a:84:00:25","gateway_ips":["10.132.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.132.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.132.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.132.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.132.0.1"}],"ip_address":"10.132.0.37/23","gateway_ip":"10.132.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.132.0.37" ], "mac": "0a:58:0a:84:00:25", "default": true, "dns": {} }] kubectl.kubernetes.io/last-applied-configuration: | {"apiVersion":"operators.coreos.com/v1alpha1","kind":"CatalogSource","metadata":{"annotations":{},"name":"kuadrant-operator-catalog","namespace":"kuadrant-system"},"spec":{"displayName":"Kuadrant Operator Catalog","image":"quay.io/kuadrant/kuadrant-operator-catalog:v1.4.2","publisher":"Kuadrant","sourceType":"grpc","updateStrategy":{"registryPoll":{"interval":"45m"}}}} openshift.io/scc: openshift-ai-llminferenceservice-scc seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user creationTimestamp: "2026-07-06T20:11:49Z" generateName: kuadrant-operator-catalog- generation: 1 labels: olm.catalogSource: kuadrant-operator-catalog olm.managed: "true" olm.pod-spec-hash: 34tNvwJDWrrs3MXumwugepcCNQtIWfE0S9CAXO managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:cluster-autoscaler.kubernetes.io/safe-to-evict: {} f:kubectl.kubernetes.io/last-applied-configuration: {} f:generateName: {} f:labels: .: {} f:olm.catalogSource: {} f:olm.managed: {} f:olm.pod-spec-hash: {} f:ownerReferences: .: {} k:{"uid":"3723ca6d-7bdd-4bdf-aea8-498eca2c7d84"}: {} f:spec: f:containers: k:{"name":"registry-server"}: .: {} f:image: {} f:imagePullPolicy: {} f:livenessProbe: .: {} f:exec: .: {} f:command: {} f:failureThreshold: {} f:initialDelaySeconds: {} f:periodSeconds: {} f:successThreshold: {} f:timeoutSeconds: {} f:name: {} f:ports: .: {} k:{"containerPort":50051,"protocol":"TCP"}: .: {} f:containerPort: {} f:name: {} f:protocol: {} f:readinessProbe: .: {} f:exec: .: {} f:command: {} f:failureThreshold: {} f:initialDelaySeconds: {} f:periodSeconds: {} f:successThreshold: {} f:timeoutSeconds: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:readOnlyRootFilesystem: {} f:startupProbe: .: {} f:exec: .: {} f:command: {} f:failureThreshold: {} f:periodSeconds: {} f:successThreshold: {} f:timeoutSeconds: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:dnsPolicy: {} f:enableServiceLinks: {} f:imagePullSecrets: .: {} k:{"name":"kuadrant-operator-catalog-dockercfg-v6bc5"}: {} f:nodeSelector: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: {} f:serviceAccount: {} f:serviceAccountName: {} f:terminationGracePeriodSeconds: {} manager: catalog operation: Update time: "2026-07-06T20:11:49Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.ovn.org/pod-networks: {} manager: ip-10-0-130-133 operation: Update subresource: status time: "2026-07-06T20:11:49Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.v1.cni.cncf.io/network-status: {} manager: multus-daemon operation: Update subresource: status time: "2026-07-06T20:11:49Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"ContainersReady"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"Initialized"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodReadyToStartContainers"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodScheduled"}: f:observedGeneration: {} k:{"type":"Ready"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} f:containerStatuses: {} f:hostIP: {} f:hostIPs: {} f:observedGeneration: {} f:phase: {} f:podIP: {} f:podIPs: .: {} k:{"ip":"10.132.0.37"}: .: {} f:ip: {} f:startTime: {} manager: kubelet operation: Update subresource: status time: "2026-07-06T20:12:00Z" name: kuadrant-operator-catalog-4khpv namespace: kuadrant-system ownerReferences: - apiVersion: operators.coreos.com/v1alpha1 blockOwnerDeletion: false controller: true kind: CatalogSource name: kuadrant-operator-catalog uid: 3723ca6d-7bdd-4bdf-aea8-498eca2c7d84 resourceVersion: "15362" uid: d4d809a6-2593-4470-b8a9-49c663b07b0e spec: containers: - image: quay.io/kuadrant/kuadrant-operator-catalog:v1.4.2 imagePullPolicy: Always livenessProbe: exec: command: - grpc_health_probe - -addr=:50051 failureThreshold: 3 initialDelaySeconds: 10 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 name: registry-server ports: - containerPort: 50051 name: grpc protocol: TCP readinessProbe: exec: command: - grpc_health_probe - -addr=:50051 failureThreshold: 3 initialDelaySeconds: 5 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 resources: requests: cpu: 10m memory: 50Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: false runAsNonRoot: true runAsUser: 1000680000 startupProbe: exec: command: - grpc_health_probe - -addr=:50051 failureThreshold: 10 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-rgch5 readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: kuadrant-operator-catalog-dockercfg-v6bc5 nodeName: ip-10-0-130-133.ec2.internal nodeSelector: kubernetes.io/os: linux preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: seLinuxOptions: level: s0:c26,c15 seccompProfile: type: RuntimeDefault serviceAccount: kuadrant-operator-catalog serviceAccountName: kuadrant-operator-catalog terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 - effect: NoSchedule key: node.kubernetes.io/memory-pressure operator: Exists volumes: - name: kube-api-access-rgch5 projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-07-06T20:11:52Z" observedGeneration: 1 status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-07-06T20:11:49Z" observedGeneration: 1 status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:00Z" observedGeneration: 1 status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:00Z" observedGeneration: 1 status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-07-06T20:11:49Z" observedGeneration: 1 status: "True" type: PodScheduled containerStatuses: - allocatedResources: cpu: 10m memory: 50Mi containerID: cri-o://c1dd3bd98304268a397516e4395a0e4dd6037ffe353688ed4bb77e1be7c734cd image: quay.io/kuadrant/kuadrant-operator-catalog:v1.4.2 imageID: quay.io/kuadrant/kuadrant-operator-catalog@sha256:673cc4016dc9f50f0ecc8e4aa9dfdb55ac6d397ba9f9120d2ade5f903d46bf1c lastState: {} name: registry-server ready: true resources: requests: cpu: 10m memory: 50Mi restartCount: 0 started: true state: running: startedAt: "2026-07-06T20:11:51Z" user: linux: gid: 0 supplementalGroups: - 0 uid: 1000680000 volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-rgch5 readOnly: true recursiveReadOnly: Disabled hostIP: 10.0.130.133 hostIPs: - ip: 10.0.130.133 observedGeneration: 1 phase: Running podIP: 10.132.0.37 podIPs: - ip: 10.132.0.37 qosClass: Burstable startTime: "2026-07-06T20:11:49Z" - apiVersion: v1 kind: Pod metadata: annotations: alm-examples: |- [ { "apiVersion": "extensions.kuadrant.io/v1alpha1", "kind": "OIDCPolicy", "metadata": { "name": "oidcpolicy-sample" }, "spec": { "provider": { "cliendID": "exampleID", "issuerURL": "https://idp.example.org/" }, "targetRef": { "group": "gateway.networking.k8s.io", "kind": "HTTPRoute", "name": "example-route" } } }, { "apiVersion": "extensions.kuadrant.io/v1alpha1", "kind": "PlanPolicy", "metadata": { "labels": { "app.kubernetes.io/created-by": "kuadrant-operator", "app.kubernetes.io/instance": "planpolicy-sample", "app.kubernetes.io/managed-by": "kustomize", "app.kubernetes.io/name": "planpolicy", "app.kubernetes.io/part-of": "kuadrant-operator" }, "name": "planpolicy-sample" }, "spec": { "plans": [ { "limits": { "daily": 5 }, "predicate": "has(auth.identity) \u0026\u0026 auth.identity.metadata.annotations[\"secret.kuadrant.io/plan-id\"] == \"gold\"\n", "tier": "gold" }, { "limits": { "daily": 2 }, "predicate": "has(auth.identity) \u0026\u0026 auth.identity.metadata.annotations[\"secret.kuadrant.io/plan-id\"] == \"silver\"\n", "tier": "silver" }, { "limits": { "daily": 1 }, "predicate": "has(auth.identity) \u0026\u0026 auth.identity.metadata.annotations[\"secret.kuadrant.io/plan-id\"] == \"bronze\"\n", "tier": "bronze" } ], "targetRef": { "group": "gateway.networking.k8s.io", "kind": "HTTPRoute", "name": "example-route" } } }, { "apiVersion": "kuadrant.io/v1", "kind": "AuthPolicy", "metadata": { "name": "authpolicy-sample" }, "spec": { "rules": { "authentication": { "apikey": { "apiKey": { "selector": {} }, "credentials": { "authorizationHeader": { "prefix": "APIKEY" } } } } }, "targetRef": { "group": "gateway.networking.k8s.io", "kind": "HTTPRoute", "name": "toystore" } } }, { "apiVersion": "kuadrant.io/v1", "kind": "DNSPolicy", "metadata": { "name": "dnspolicy-sample" }, "spec": { "healthCheck": { "protocol": "HTTP" }, "providerRefs": [ { "name": "provider-ref" } ], "targetRef": { "group": "gateway.networking.k8s.io", "kind": "Gateway", "name": "example-gateway" } } }, { "apiVersion": "kuadrant.io/v1", "kind": "RateLimitPolicy", "metadata": { "name": "ratelimitpolicy-sample" }, "spec": { "limits": { "toys": { "rates": [ { "limit": 50, "window": "1m" } ] } }, "targetRef": { "group": "gateway.networking.k8s.io", "kind": "HTTPRoute", "name": "toystore" } } }, { "apiVersion": "kuadrant.io/v1", "kind": "TLSPolicy", "metadata": { "name": "tlspolicy-sample" }, "spec": { "issuerRef": { "group": "cert-manager.io", "kind": "ClusterIssuer", "name": "self-signed-ca" }, "targetRef": { "group": "gateway.networking.k8s.io", "kind": "Gateway", "name": "example-gateway" } } }, { "apiVersion": "kuadrant.io/v1alpha1", "kind": "TokenRateLimitPolicy", "metadata": { "name": "token-limit-free", "namespace": "gateway-system" }, "spec": { "limits": { "free": { "counters": [ { "expression": "auth.identity.userid" } ], "rates": [ { "limit": 20000, "window": "1d" } ], "when": [ { "predicate": "request.auth.claims[\"kuadrant.io/groups\"].split(\",\").exists(g, g == \"free\")" } ] }, "gold": { "counters": [ { "expression": "auth.identity.userid" } ], "rates": [ { "limit": 200000, "window": "1d" } ], "when": [ { "predicate": "request.auth.claims[\"kuadrant.io/groups\"].split(\",\").exists(g, g == \"gold\")" } ] } }, "targetRef": { "group": "gateway.networking.k8s.io", "kind": "Gateway", "name": "my-llm-gateway" } } }, { "apiVersion": "kuadrant.io/v1beta1", "kind": "Kuadrant", "metadata": { "name": "kuadrant-sample" }, "spec": {} } ] capabilities: Basic Install categories: Integration & Delivery console.openshift.io/plugins: '["kuadrant-console-plugin"]' containerImage: quay.io/kuadrant/kuadrant-operator:v1.4.2 createdAt: "2026-03-11T10:58:28Z" description: A Kubernetes Operator to manage the lifecycle of the Kuadrant system k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.132.0.56/23"],"mac_address":"0a:58:0a:84:00:38","gateway_ips":["10.132.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.132.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.132.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.132.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.132.0.1"}],"ip_address":"10.132.0.56/23","gateway_ip":"10.132.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.132.0.56" ], "mac": "0a:58:0a:84:00:38", "default": true, "dns": {} }] olm.operatorGroup: kuadrant-operator-group olm.operatorNamespace: kuadrant-system olm.targetNamespaces: "" openshift.io/scc: restricted-v2 operatorframework.io/properties: '{"properties":[{"type":"olm.gvk","value":{"group":"devportal.kuadrant.io","kind":"APIKey","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"devportal.kuadrant.io","kind":"APIProduct","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"extensions.kuadrant.io","kind":"OIDCPolicy","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"extensions.kuadrant.io","kind":"PlanPolicy","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"extensions.kuadrant.io","kind":"TelemetryPolicy","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"kuadrant.io","kind":"AuthPolicy","version":"v1"}},{"type":"olm.gvk","value":{"group":"kuadrant.io","kind":"DNSPolicy","version":"v1"}},{"type":"olm.gvk","value":{"group":"kuadrant.io","kind":"Kuadrant","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"kuadrant.io","kind":"RateLimitPolicy","version":"v1"}},{"type":"olm.gvk","value":{"group":"kuadrant.io","kind":"TLSPolicy","version":"v1"}},{"type":"olm.gvk","value":{"group":"kuadrant.io","kind":"TokenRateLimitPolicy","version":"v1alpha1"}},{"type":"olm.package","value":{"packageName":"kuadrant-operator","version":"1.4.2"}},{"type":"olm.package.required","value":{"packageName":"authorino-operator","versionRange":"0.23.1"}},{"type":"olm.package.required","value":{"packageName":"dns-operator","versionRange":"0.16.0"}},{"type":"olm.package.required","value":{"packageName":"limitador-operator","versionRange":"0.17.1"}},{"type":"olm.package.required","value":{"packageName":"authorino-operator","versionRange":"0.23.1"}},{"type":"olm.package.required","value":{"packageName":"dns-operator","versionRange":"0.16.0"}},{"type":"olm.package.required","value":{"packageName":"limitador-operator","versionRange":"0.17.1"}}]}' operators.operatorframework.io/builder: operator-sdk-v1.33.0 operators.operatorframework.io/project_layout: go.kubebuilder.io/v4 repository: https://github.com/Kuadrant/kuadrant-operator seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user support: kuadrant creationTimestamp: "2026-07-06T20:24:35Z" generateName: kuadrant-operator-controller-manager-86878c769f- generation: 1 labels: app: kuadrant control-plane: controller-manager pod-template-hash: 86878c769f managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.ovn.org/pod-networks: {} manager: ip-10-0-130-133 operation: Update subresource: status time: "2026-07-06T20:24:35Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:alm-examples: {} f:capabilities: {} f:categories: {} f:console.openshift.io/plugins: {} f:containerImage: {} f:createdAt: {} f:description: {} f:olm.operatorGroup: {} f:olm.operatorNamespace: {} f:olm.targetNamespaces: {} f:operatorframework.io/properties: {} f:operators.operatorframework.io/builder: {} f:operators.operatorframework.io/project_layout: {} f:repository: {} f:support: {} f:generateName: {} f:labels: .: {} f:app: {} f:control-plane: {} f:pod-template-hash: {} f:ownerReferences: .: {} k:{"uid":"2723164b-3af7-4d87-9c16-779f3f8ea561"}: {} f:spec: f:containers: k:{"name":"manager"}: .: {} f:args: {} f:command: {} f:env: .: {} k:{"name":"EXTENSIONS_DIR"}: .: {} f:name: {} f:value: {} k:{"name":"ISTIO_GATEWAY_CONTROLLER_NAMES"}: .: {} f:name: {} f:value: {} k:{"name":"OPERATOR_CONDITION_NAME"}: .: {} f:name: {} f:value: {} k:{"name":"OPERATOR_NAMESPACE"}: .: {} f:name: {} f:valueFrom: .: {} f:fieldRef: {} k:{"name":"RATELIMIT_CHECK_SERVICE_FAILURE_MODE"}: .: {} f:name: {} f:value: {} k:{"name":"RATELIMIT_REPORT_SERVICE_FAILURE_MODE"}: .: {} f:name: {} f:value: {} k:{"name":"RELATED_IMAGE_CONSOLE_PLUGIN_LATEST"}: .: {} f:name: {} f:value: {} k:{"name":"RELATED_IMAGE_CONSOLE_PLUGIN_PF5"}: .: {} f:name: {} f:value: {} k:{"name":"RELATED_IMAGE_DEVELOPERPORTAL"}: .: {} f:name: {} f:value: {} k:{"name":"RELATED_IMAGE_WASMSHIM"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:livenessProbe: .: {} f:failureThreshold: {} f:httpGet: .: {} f:path: {} f:port: {} f:scheme: {} f:initialDelaySeconds: {} f:periodSeconds: {} f:successThreshold: {} f:timeoutSeconds: {} f:name: {} f:ports: .: {} k:{"containerPort":8080,"protocol":"TCP"}: .: {} f:containerPort: {} f:name: {} f:protocol: {} f:readinessProbe: .: {} f:failureThreshold: {} f:httpGet: .: {} f:path: {} f:port: {} f:scheme: {} f:initialDelaySeconds: {} f:periodSeconds: {} f:successThreshold: {} f:timeoutSeconds: {} f:resources: .: {} f:limits: .: {} f:cpu: {} f:memory: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:allowPrivilegeEscalation: {} f:capabilities: .: {} f:drop: {} f:readOnlyRootFilesystem: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/tmp/kuadrant"}: .: {} f:mountPath: {} f:name: {} f:dnsPolicy: {} f:enableServiceLinks: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: .: {} f:runAsNonRoot: {} f:serviceAccount: {} f:serviceAccountName: {} f:terminationGracePeriodSeconds: {} f:volumes: .: {} k:{"name":"extensions-socket-volume"}: .: {} f:emptyDir: {} f:name: {} manager: kube-controller-manager operation: Update time: "2026-07-06T20:24:35Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.v1.cni.cncf.io/network-status: {} manager: multus-daemon operation: Update subresource: status time: "2026-07-06T20:24:35Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"ContainersReady"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"Initialized"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodReadyToStartContainers"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodScheduled"}: f:observedGeneration: {} k:{"type":"Ready"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} f:containerStatuses: {} f:hostIP: {} f:hostIPs: {} f:observedGeneration: {} f:phase: {} f:podIP: {} f:podIPs: .: {} k:{"ip":"10.132.0.56"}: .: {} f:ip: {} f:startTime: {} manager: kubelet operation: Update subresource: status time: "2026-07-06T20:30:58Z" name: kuadrant-operator-controller-manager-86878c769f-pzfd9 namespace: kuadrant-system ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: kuadrant-operator-controller-manager-86878c769f uid: 2723164b-3af7-4d87-9c16-779f3f8ea561 resourceVersion: "37046" uid: a9399ca9-ef00-49bc-97f9-ce45134fed9d spec: containers: - args: - --leader-elect command: - /manager env: - name: EXTENSIONS_DIR value: /extensions - name: RELATED_IMAGE_WASMSHIM value: quay.io/kuadrant/wasm-shim:v0.12.1 - name: RELATED_IMAGE_DEVELOPERPORTAL value: quay.io/kuadrant/developer-portal-controller:v0.1.0 - name: RELATED_IMAGE_CONSOLE_PLUGIN_LATEST value: quay.io/kuadrant/console-plugin:v0.3.4 - name: RELATED_IMAGE_CONSOLE_PLUGIN_PF5 value: quay.io/kuadrant/console-plugin:v0.1.5 - name: OPERATOR_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: ISTIO_GATEWAY_CONTROLLER_NAMES value: istio.io/gateway-controller,openshift.io/gateway-controller/v1 - name: RATELIMIT_CHECK_SERVICE_FAILURE_MODE value: deny - name: RATELIMIT_REPORT_SERVICE_FAILURE_MODE value: deny - name: OPERATOR_CONDITION_NAME value: kuadrant-operator.v1.4.2 image: quay.io/kuadrant/kuadrant-operator:v1.4.2 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 httpGet: path: /healthz port: 8081 scheme: HTTP initialDelaySeconds: 15 periodSeconds: 20 successThreshold: 1 timeoutSeconds: 1 name: manager ports: - containerPort: 8080 name: metrics protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /readyz port: 8081 scheme: HTTP initialDelaySeconds: 5 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: limits: cpu: 200m memory: 300Mi requests: cpu: 200m memory: 200Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsUser: 1000680000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /tmp/kuadrant name: extensions-socket-volume - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-fbg22 readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: kuadrant-operator-controller-manager-dockercfg-pn8tl nodeName: ip-10-0-130-133.ec2.internal preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 1000680000 runAsNonRoot: true seLinuxOptions: level: s0:c26,c15 seccompProfile: type: RuntimeDefault serviceAccount: kuadrant-operator-controller-manager serviceAccountName: kuadrant-operator-controller-manager terminationGracePeriodSeconds: 10 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 - effect: NoSchedule key: node.kubernetes.io/memory-pressure operator: Exists volumes: - emptyDir: {} name: extensions-socket-volume - name: kube-api-access-fbg22 projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-07-06T20:24:35Z" observedGeneration: 1 status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-07-06T20:24:35Z" observedGeneration: 1 status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-07-06T20:30:58Z" observedGeneration: 1 status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-07-06T20:30:58Z" observedGeneration: 1 status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-07-06T20:24:35Z" observedGeneration: 1 status: "True" type: PodScheduled containerStatuses: - allocatedResources: cpu: 200m memory: 200Mi containerID: cri-o://a7644ada750d3254f0a09dab1fde643060fc75f5ca1327e4367cb083f328acd6 image: quay.io/kuadrant/kuadrant-operator:v1.4.2 imageID: quay.io/kuadrant/kuadrant-operator@sha256:0ad6673d1a66a99ce9881d4f50b51e1f98b477a019a8efe7187a73396d773e58 lastState: terminated: containerID: cri-o://6a3743110830313d7e5d69e046db8c234c81c8659ffbcda632ed020bd4e8c5f9 exitCode: 0 finishedAt: "2026-07-06T20:30:45Z" reason: Completed startedAt: "2026-07-06T20:24:35Z" name: manager ready: true resources: limits: cpu: 200m memory: 300Mi requests: cpu: 200m memory: 200Mi restartCount: 1 started: true state: running: startedAt: "2026-07-06T20:30:46Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000680000 uid: 1000680000 volumeMounts: - mountPath: /tmp/kuadrant name: extensions-socket-volume - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-fbg22 readOnly: true recursiveReadOnly: Disabled hostIP: 10.0.130.133 hostIPs: - ip: 10.0.130.133 observedGeneration: 1 phase: Running podIP: 10.132.0.56 podIPs: - ip: 10.132.0.56 qosClass: Burstable startTime: "2026-07-06T20:24:35Z" - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.132.0.53/23"],"mac_address":"0a:58:0a:84:00:35","gateway_ips":["10.132.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.132.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.132.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.132.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.132.0.1"}],"ip_address":"10.132.0.53/23","gateway_ip":"10.132.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.132.0.53" ], "mac": "0a:58:0a:84:00:35", "default": true, "dns": {} }] limits-cm-resource-version: "53267" openshift.io/scc: restricted-v2 seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user creationTimestamp: "2026-07-06T20:13:20Z" generateName: limitador-limitador-54d6d988d5- generation: 1 labels: app: limitador app.kubernetes.io/component: limitador app.kubernetes.io/instance: limitador app.kubernetes.io/managed-by: limitador-operator app.kubernetes.io/name: limitador app.kubernetes.io/part-of: kuadrant kuadrant.io/managed: "true" limitador-resource: limitador pod-template-hash: 54d6d988d5 sidecar.istio.io/inject: "false" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:limits-cm-resource-version: {} f:spec: f:containers: {} manager: limitador-operator operation: Apply time: "2026-07-06T20:46:47Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.ovn.org/pod-networks: {} manager: ip-10-0-130-133 operation: Update subresource: status time: "2026-07-06T20:13:20Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:app: {} f:app.kubernetes.io/component: {} f:app.kubernetes.io/instance: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:kuadrant.io/managed: {} f:limitador-resource: {} f:pod-template-hash: {} f:sidecar.istio.io/inject: {} f:ownerReferences: .: {} k:{"uid":"6cc6e2cf-6688-488f-bb06-bf4c864e9045"}: {} f:spec: f:containers: k:{"name":"limitador"}: .: {} f:args: {} f:command: {} f:image: {} f:imagePullPolicy: {} f:livenessProbe: .: {} f:failureThreshold: {} f:httpGet: .: {} f:path: {} f:port: {} f:scheme: {} f:initialDelaySeconds: {} f:periodSeconds: {} f:successThreshold: {} f:timeoutSeconds: {} f:name: {} f:ports: .: {} k:{"containerPort":8080,"protocol":"TCP"}: .: {} f:containerPort: {} f:name: {} f:protocol: {} k:{"containerPort":8081,"protocol":"TCP"}: .: {} f:containerPort: {} f:name: {} f:protocol: {} f:readinessProbe: .: {} f:failureThreshold: {} f:httpGet: .: {} f:path: {} f:port: {} f:scheme: {} f:initialDelaySeconds: {} f:periodSeconds: {} f:successThreshold: {} f:timeoutSeconds: {} f:resources: .: {} f:limits: .: {} f:cpu: {} f:memory: {} f:requests: .: {} f:cpu: {} f:memory: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/home/limitador/etc"}: .: {} f:mountPath: {} f:name: {} f:dnsPolicy: {} f:enableServiceLinks: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: {} f:terminationGracePeriodSeconds: {} f:volumes: .: {} k:{"name":"config-file"}: .: {} f:configMap: .: {} f:defaultMode: {} f:name: {} f:name: {} manager: kube-controller-manager operation: Update time: "2026-07-06T20:13:20Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.v1.cni.cncf.io/network-status: {} manager: multus-daemon operation: Update subresource: status time: "2026-07-06T20:13:21Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"ContainersReady"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"Initialized"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodReadyToStartContainers"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodScheduled"}: f:observedGeneration: {} k:{"type":"Ready"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} f:containerStatuses: {} f:hostIP: {} f:hostIPs: {} f:observedGeneration: {} f:phase: {} f:podIP: {} f:podIPs: .: {} k:{"ip":"10.132.0.53"}: .: {} f:ip: {} f:startTime: {} manager: kubelet operation: Update subresource: status time: "2026-07-06T20:13:36Z" name: limitador-limitador-54d6d988d5-cdjxm namespace: kuadrant-system ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: limitador-limitador-54d6d988d5 uid: 6cc6e2cf-6688-488f-bb06-bf4c864e9045 resourceVersion: "53268" uid: 6c277f91-c521-4062-bb13-d23bdeb073aa spec: containers: - args: - --http-port - "8080" - --rls-port - "8081" - --metric-labels-default - descriptors[1] - /home/limitador/etc/limitador-config.yaml - memory command: - limitador-server image: quay.io/kuadrant/limitador:v2.3.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 httpGet: path: /status port: 8080 scheme: HTTP initialDelaySeconds: 5 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 2 name: limitador ports: - containerPort: 8080 name: http protocol: TCP - containerPort: 8081 name: grpc protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /status port: 8080 scheme: HTTP initialDelaySeconds: 5 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 resources: limits: cpu: 500m memory: 64Mi requests: cpu: 250m memory: 32Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsNonRoot: true runAsUser: 1000680000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /home/limitador/etc name: config-file - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-24kwn readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: default-dockercfg-fgg7s nodeName: ip-10-0-130-133.ec2.internal preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 1000680000 seLinuxOptions: level: s0:c26,c15 seccompProfile: type: RuntimeDefault serviceAccount: default serviceAccountName: default terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 - effect: NoSchedule key: node.kubernetes.io/memory-pressure operator: Exists volumes: - configMap: defaultMode: 420 name: limitador-limits-config-limitador name: config-file - name: kube-api-access-24kwn projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-07-06T20:13:25Z" observedGeneration: 1 status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-07-06T20:13:20Z" observedGeneration: 1 status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-07-06T20:13:36Z" observedGeneration: 1 status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-07-06T20:13:36Z" observedGeneration: 1 status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-07-06T20:13:20Z" observedGeneration: 1 status: "True" type: PodScheduled containerStatuses: - allocatedResources: cpu: 250m memory: 32Mi containerID: cri-o://f8fa17b39ea2d60c4a3250783ff829ee1b606b0083232b1cc0060f8be9db1404 image: quay.io/kuadrant/limitador:v2.3.0 imageID: quay.io/kuadrant/limitador@sha256:6eabaef828749b0b32a0a3016e0df0e0bbc6515a19254d1bf5095572d00deabd lastState: {} name: limitador ready: true resources: limits: cpu: 500m memory: 64Mi requests: cpu: 250m memory: 32Mi restartCount: 0 started: true state: running: startedAt: "2026-07-06T20:13:24Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000680000 uid: 1000680000 volumeMounts: - mountPath: /home/limitador/etc name: config-file - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-24kwn readOnly: true recursiveReadOnly: Disabled hostIP: 10.0.130.133 hostIPs: - ip: 10.0.130.133 observedGeneration: 1 phase: Running podIP: 10.132.0.53 podIPs: - ip: 10.132.0.53 qosClass: Burstable startTime: "2026-07-06T20:13:20Z" - apiVersion: v1 kind: Pod metadata: annotations: alm-examples: |- [ { "apiVersion": "limitador.kuadrant.io/v1alpha1", "kind": "Limitador", "metadata": { "name": "limitador-sample" }, "spec": { "limits": [ { "conditions": [ "get_toy == 'yes'" ], "max_value": 2, "name": "toy_get_route", "namespace": "toystore-app", "seconds": 30, "variables": [] } ], "listener": { "grpc": { "port": 8081 }, "http": { "port": 8080 } } } } ] capabilities: Basic Install categories: Integration & Delivery containerImage: quay.io/kuadrant/limitador-operator:v0.17.1 createdAt: "2026-02-18T13:31:15Z" description: The Limitador operator installs and maintains limitador instances k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.132.0.51/23"],"mac_address":"0a:58:0a:84:00:33","gateway_ips":["10.132.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.132.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.132.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.132.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.132.0.1"}],"ip_address":"10.132.0.51/23","gateway_ip":"10.132.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.132.0.51" ], "mac": "0a:58:0a:84:00:33", "default": true, "dns": {} }] olm.operatorGroup: kuadrant-operator-group olm.operatorNamespace: kuadrant-system olm.targetNamespaces: "" openshift.io/scc: restricted-v2 operatorframework.io/properties: '{"properties":[{"type":"olm.gvk","value":{"group":"limitador.kuadrant.io","kind":"Limitador","version":"v1alpha1"}},{"type":"olm.package","value":{"packageName":"limitador-operator","version":"0.17.1"}}]}' operators.operatorframework.io/builder: operator-sdk-v1.32.0 operators.operatorframework.io/project_layout: go.kubebuilder.io/v3 repository: https://github.com/Kuadrant/limitador-operator seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user support: kuadrant creationTimestamp: "2026-07-06T20:12:46Z" generateName: limitador-operator-controller-manager-859d7b78bd- generation: 1 labels: app: limitador-operator control-plane: controller-manager pod-template-hash: 859d7b78bd managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.ovn.org/pod-networks: {} manager: ip-10-0-130-133 operation: Update subresource: status time: "2026-07-06T20:12:46Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:alm-examples: {} f:capabilities: {} f:categories: {} f:containerImage: {} f:createdAt: {} f:description: {} f:olm.operatorGroup: {} f:olm.operatorNamespace: {} f:olm.targetNamespaces: {} f:operatorframework.io/properties: {} f:operators.operatorframework.io/builder: {} f:operators.operatorframework.io/project_layout: {} f:repository: {} f:support: {} f:generateName: {} f:labels: .: {} f:app: {} f:control-plane: {} f:pod-template-hash: {} f:ownerReferences: .: {} k:{"uid":"2345d924-df73-493a-b111-42ab705353d2"}: {} f:spec: f:containers: k:{"name":"manager"}: .: {} f:args: {} f:command: {} f:env: .: {} k:{"name":"OPERATOR_CONDITION_NAME"}: .: {} f:name: {} f:value: {} k:{"name":"RELATED_IMAGE_LIMITADOR"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:livenessProbe: .: {} f:failureThreshold: {} f:httpGet: .: {} f:path: {} f:port: {} f:scheme: {} f:initialDelaySeconds: {} f:periodSeconds: {} f:successThreshold: {} f:timeoutSeconds: {} f:name: {} f:ports: .: {} k:{"containerPort":8080,"protocol":"TCP"}: .: {} f:containerPort: {} f:name: {} f:protocol: {} f:readinessProbe: .: {} f:failureThreshold: {} f:httpGet: .: {} f:path: {} f:port: {} f:scheme: {} f:initialDelaySeconds: {} f:periodSeconds: {} f:successThreshold: {} f:timeoutSeconds: {} f:resources: .: {} f:limits: .: {} f:cpu: {} f:memory: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:allowPrivilegeEscalation: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:dnsPolicy: {} f:enableServiceLinks: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: .: {} f:runAsNonRoot: {} f:serviceAccount: {} f:serviceAccountName: {} f:terminationGracePeriodSeconds: {} manager: kube-controller-manager operation: Update time: "2026-07-06T20:12:46Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.v1.cni.cncf.io/network-status: {} manager: multus-daemon operation: Update subresource: status time: "2026-07-06T20:12:47Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"ContainersReady"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"Initialized"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodReadyToStartContainers"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodScheduled"}: f:observedGeneration: {} k:{"type":"Ready"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} f:containerStatuses: {} f:hostIP: {} f:hostIPs: {} f:observedGeneration: {} f:phase: {} f:podIP: {} f:podIPs: .: {} k:{"ip":"10.132.0.51"}: .: {} f:ip: {} f:startTime: {} manager: kubelet operation: Update subresource: status time: "2026-07-06T20:30:57Z" name: limitador-operator-controller-manager-859d7b78bd-2k7bg namespace: kuadrant-system ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: limitador-operator-controller-manager-859d7b78bd uid: 2345d924-df73-493a-b111-42ab705353d2 resourceVersion: "36953" uid: fb33694d-e0bd-479a-89cc-1cdc2be67151 spec: containers: - args: - --leader-elect command: - /manager env: - name: RELATED_IMAGE_LIMITADOR value: quay.io/kuadrant/limitador:v2.3.0 - name: OPERATOR_CONDITION_NAME value: limitador-operator.v0.17.1 image: quay.io/kuadrant/limitador-operator:v0.17.1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 httpGet: path: /healthz port: 8081 scheme: HTTP initialDelaySeconds: 15 periodSeconds: 20 successThreshold: 1 timeoutSeconds: 1 name: manager ports: - containerPort: 8080 name: metrics protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /readyz port: 8081 scheme: HTTP initialDelaySeconds: 5 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: limits: cpu: 200m memory: 300Mi requests: cpu: 200m memory: 200Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsUser: 1000680000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-hkqwh readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: limitador-operator-controller-manager-dockercfg-j7rq6 nodeName: ip-10-0-130-133.ec2.internal preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 1000680000 runAsNonRoot: true seLinuxOptions: level: s0:c26,c15 seccompProfile: type: RuntimeDefault serviceAccount: limitador-operator-controller-manager serviceAccountName: limitador-operator-controller-manager terminationGracePeriodSeconds: 10 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 - effect: NoSchedule key: node.kubernetes.io/memory-pressure operator: Exists volumes: - name: kube-api-access-hkqwh projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:47Z" observedGeneration: 1 status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:46Z" observedGeneration: 1 status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-07-06T20:30:57Z" observedGeneration: 1 status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-07-06T20:30:57Z" observedGeneration: 1 status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-07-06T20:12:46Z" observedGeneration: 1 status: "True" type: PodScheduled containerStatuses: - allocatedResources: cpu: 200m memory: 200Mi containerID: cri-o://c06d3b63553b21f44009e933c3bf5d6129cee664fe3eed7ae04646cc1a321aae image: quay.io/kuadrant/limitador-operator:v0.17.1 imageID: quay.io/kuadrant/limitador-operator@sha256:3707fe24c6052d5adf240e12d34110706f0ac0877373830b67daab7c9a5c380d lastState: terminated: containerID: cri-o://029a6d438ef50972f58149d9b04806e12358ec70b17d8336e3fd840ba4926967 exitCode: 1 finishedAt: "2026-07-06T20:30:44Z" reason: Error startedAt: "2026-07-06T20:12:47Z" name: manager ready: true resources: limits: cpu: 200m memory: 300Mi requests: cpu: 200m memory: 200Mi restartCount: 1 started: true state: running: startedAt: "2026-07-06T20:30:45Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000680000 uid: 1000680000 volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-hkqwh readOnly: true recursiveReadOnly: Disabled hostIP: 10.0.130.133 hostIPs: - ip: 10.0.130.133 observedGeneration: 1 phase: Running podIP: 10.132.0.51 podIPs: - ip: 10.132.0.51 qosClass: Burstable startTime: "2026-07-06T20:12:46Z" kind: PodList metadata: resourceVersion: "53673"