--- apiVersion: apps/v1 items: - apiVersion: apps/v1 kind: ReplicaSet metadata: annotations: deployment.kubernetes.io/desired-replicas: "3" deployment.kubernetes.io/max-replicas: "4" deployment.kubernetes.io/revision: "1" creationTimestamp: "2026-10-30T19:24:26Z" generation: 1 labels: app: kas-connection-checker pod-template-hash: 685895c7c9 managedFields: - apiVersion: apps/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:deployment.kubernetes.io/desired-replicas: {} f:deployment.kubernetes.io/max-replicas: {} f:deployment.kubernetes.io/revision: {} f:labels: .: {} f:app: {} f:pod-template-hash: {} f:ownerReferences: .: {} k:{"uid":"1a13ee76-51c7-4e2c-8d4c-ff6f1c8ed79f"}: {} f:spec: f:replicas: {} f:selector: {} f:template: f:metadata: f:annotations: .: {} f:cluster-autoscaler.kubernetes.io/safe-to-evict: {} f:labels: .: {} f:app: {} f:pod-template-hash: {} f:spec: f:automountServiceAccountToken: {} f:containers: k:{"name":"connection-checker"}: .: {} f:command: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:allowPrivilegeEscalation: {} f:capabilities: .: {} f:drop: {} f:readOnlyRootFilesystem: {} f:runAsNonRoot: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:dnsPolicy: {} f:priorityClassName: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: .: {} f:runAsUser: {} f:serviceAccount: {} f:serviceAccountName: {} f:terminationGracePeriodSeconds: {} f:topologySpreadConstraints: .: {} k:{"topologyKey":"kubernetes.io/hostname","whenUnsatisfiable":"ScheduleAnyway"}: .: {} f:labelSelector: {} f:maxSkew: {} f:topologyKey: {} f:whenUnsatisfiable: {} manager: kube-controller-manager operation: Update time: "2026-10-30T19:24:26Z" - apiVersion: apps/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:availableReplicas: {} f:fullyLabeledReplicas: {} f:observedGeneration: {} f:readyReplicas: {} f:replicas: {} f:terminatingReplicas: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-30T19:31:10Z" name: kas-connection-checker-685895c7c9 namespace: kube-system ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: Deployment name: kas-connection-checker uid: 1a13ee76-51c7-4e2c-8d4c-ff6f1c8ed79f resourceVersion: "5902" uid: 949b36bf-e5fb-4a86-89d3-47c51719a381 spec: replicas: 3 selector: matchLabels: app: kas-connection-checker pod-template-hash: 685895c7c9 template: metadata: annotations: cluster-autoscaler.kubernetes.io/safe-to-evict: "true" labels: app: kas-connection-checker pod-template-hash: 685895c7c9 spec: automountServiceAccountToken: true containers: - command: - /bin/sh - -c - |- #!/bin/sh ENDPOINT=/version CONFIGMAP_NAME=control-plane-connectivity-check NAMESPACE=kube-system while true; do TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token) CACERT=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt HTTP_CODE=$(curl --cacert ${CACERT} -s -o /dev/null -w "%{http_code}" \ --connect-timeout 5 --max-time 10 \ "https://kubernetes.default.svc${ENDPOINT}" 2>/dev/null) if [ "$HTTP_CODE" = "200" ]; then NOW=$(date -u +%Y-%m-%dT%H:%M:%SZ) curl --cacert ${CACERT} -s -o /dev/null \ -X PATCH \ -H "Authorization: Bearer ${TOKEN}" \ -H "Content-Type: application/strategic-merge-patch+json" \ --data "{\"data\":{\"lastSucceeded\":\"${NOW}\"}}" \ "https://kubernetes.default.svc/api/v1/namespaces/${NAMESPACE}/configmaps/${CONFIGMAP_NAME}" 2>/dev/null fi sleep 60 done image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2a8b58f028a9a4a0345ad1f809e47fb9913d7f77c731bfd785819e1c71be9472 imagePullPolicy: IfNotPresent name: connection-checker resources: requests: cpu: 5m memory: 10Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError dnsPolicy: ClusterFirst priorityClassName: system-node-critical restartPolicy: Always schedulerName: default-scheduler securityContext: runAsUser: 1000 serviceAccount: kas-connection-checker serviceAccountName: kas-connection-checker terminationGracePeriodSeconds: 30 topologySpreadConstraints: - labelSelector: matchLabels: app: kas-connection-checker maxSkew: 1 topologyKey: kubernetes.io/hostname whenUnsatisfiable: ScheduleAnyway status: availableReplicas: 3 fullyLabeledReplicas: 3 observedGeneration: 1 readyReplicas: 3 replicas: 3 terminatingReplicas: 0 kind: ReplicaSetList metadata: resourceVersion: "161660"