---
apiVersion: apps/v1
items:
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "3"
      imageregistry.operator.openshift.io/checksum: sha256:4cb0f219fedfa7b92d35549189591a154d84d17dbc045bb5b8629d4d7f312381
      operator.openshift.io/spec-hash: fcbcb4c8e25dd18d001bd7dce4eab86fe5bbedf30af587a7594dbc89b7fb0dea
      release.openshift.io/version: 4.21.22
    creationTimestamp: "2026-07-01T22:12:57Z"
    generation: 2
    labels:
      docker-registry: default
      pod-template-hash: 6f468f5468
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
            f:imageregistry.operator.openshift.io/checksum: {}
            f:operator.openshift.io/spec-hash: {}
            f:release.openshift.io/version: {}
          f:labels:
            .: {}
            f:docker-registry: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"da3d7685-a310-44dd-9b7a-35fa3a92a437"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:imageregistry.operator.openshift.io/dependencies-checksum: {}
                f:openshift.io/required-scc: {}
                f:target.workload.openshift.io/management: {}
              f:labels:
                .: {}
                f:docker-registry: {}
                f:pod-template-hash: {}
            f:spec:
              f:containers:
                k:{"name":"registry"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"REGISTRY_HEALTH_STORAGEDRIVER_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_ADDR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_NET"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_SECRET"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_TLS_CERTIFICATE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_TLS_KEY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_LOG_LEVEL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_OPENSHIFT_METRICS_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_OPENSHIFT_QUOTA_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_OPENSHIFT_SERVER_ADDR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_DELETE_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_BUCKET"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_ENCRYPT"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_FORCEPATHSTYLE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_REGION"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_USEDUALSTACK"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:lifecycle:
                    .: {}
                    f:preStop:
                      .: {}
                      f:exec:
                        .: {}
                        f:command: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":5000,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources:
                    .: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:securityContext:
                    .: {}
                    f:readOnlyRootFilesystem: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/pki/ca-trust/source/anchors"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/secrets"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/share/pki/ca-trust-source"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kubelet/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/run/secrets/cloud"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/run/secrets/openshift/serviceaccount"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:nodeSelector: {}
              f:priorityClassName: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:fsGroup: {}
                f:fsGroupChangePolicy: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:topologySpreadConstraints:
                .: {}
                k:{"topologyKey":"kubernetes.io/hostname","whenUnsatisfiable":"DoNotSchedule"}:
                  .: {}
                  f:labelSelector: {}
                  f:maxSkew: {}
                  f:topologyKey: {}
                  f:whenUnsatisfiable: {}
                k:{"topologyKey":"node-role.kubernetes.io/worker","whenUnsatisfiable":"DoNotSchedule"}:
                  .: {}
                  f:labelSelector: {}
                  f:maxSkew: {}
                  f:topologyKey: {}
                  f:whenUnsatisfiable: {}
                k:{"topologyKey":"topology.kubernetes.io/zone","whenUnsatisfiable":"DoNotSchedule"}:
                  .: {}
                  f:labelSelector: {}
                  f:maxSkew: {}
                  f:topologyKey: {}
                  f:whenUnsatisfiable: {}
              f:volumes:
                .: {}
                k:{"name":"bound-sa-token"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"ca-trust-extracted"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"image-registry-private-configuration"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:optional: {}
                    f:secretName: {}
                k:{"name":"installation-pull-secrets"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:optional: {}
                    f:secretName: {}
                k:{"name":"registry-certificates"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"registry-tls"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"trusted-ca"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                    f:optional: {}
                  f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-01T22:12:57Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:fullyLabeledReplicas: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-07-01T22:13:20Z"
    name: image-registry-6f468f5468
    namespace: openshift-image-registry
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: image-registry
      uid: da3d7685-a310-44dd-9b7a-35fa3a92a437
    resourceVersion: "9420"
    uid: be1b8c5f-c21e-472a-8ee7-6f0fad793035
  spec:
    replicas: 1
    selector:
      matchLabels:
        docker-registry: default
        pod-template-hash: 6f468f5468
    template:
      metadata:
        annotations:
          imageregistry.operator.openshift.io/dependencies-checksum: sha256:16f5e3a5f22b0e83a30a478b39f7c9d483a08f49519e7a34a9de31d79b4c3c2e
          openshift.io/required-scc: restricted-v2
          target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
        labels:
          docker-registry: default
          pod-template-hash: 6f468f5468
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java
            /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem &&
            update-ca-trust extract --output /etc/pki/ca-trust/extracted/ && exec
            /usr/bin/dockerregistry
          env:
          - name: REGISTRY_STORAGE
            value: s3
          - name: REGISTRY_STORAGE_S3_BUCKET
            value: df73859040b4-image-registry-us-east-1-eawvumtqldigpyawdeodkuvy
          - name: REGISTRY_STORAGE_S3_REGION
            value: us-east-1
          - name: REGISTRY_STORAGE_S3_ENCRYPT
            value: "true"
          - name: REGISTRY_STORAGE_S3_FORCEPATHSTYLE
            value: "true"
          - name: REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH
            value: /var/run/secrets/cloud/credentials
          - name: REGISTRY_STORAGE_S3_USEDUALSTACK
            value: "true"
          - name: REGISTRY_HTTP_ADDR
            value: :5000
          - name: REGISTRY_HTTP_NET
            value: tcp
          - name: REGISTRY_HTTP_SECRET
            value: 279b7d8b51f67295f6cebbdc00a97d2dec2c08ed986c078e69b75b7f734575019cba71a44988195cd80051111ca899d3dc31c8761fb786782ab6231e8510081d
          - name: REGISTRY_LOG_LEVEL
            value: info
          - name: REGISTRY_OPENSHIFT_QUOTA_ENABLED
            value: "true"
          - name: REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR
            value: inmemory
          - name: REGISTRY_STORAGE_DELETE_ENABLED
            value: "true"
          - name: REGISTRY_HEALTH_STORAGEDRIVER_ENABLED
            value: "true"
          - name: REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL
            value: 10s
          - name: REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD
            value: "1"
          - name: REGISTRY_OPENSHIFT_METRICS_ENABLED
            value: "true"
          - name: REGISTRY_OPENSHIFT_SERVER_ADDR
            value: image-registry.openshift-image-registry.svc:5000
          - name: REGISTRY_HTTP_TLS_CERTIFICATE
            value: /etc/secrets/tls.crt
          - name: REGISTRY_HTTP_TLS_KEY
            value: /etc/secrets/tls.key
          image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4c31f1f5cf0b2f04acb86acba1c5b6b839a148ba2a82a0ffd2a747464e10d379
          imagePullPolicy: IfNotPresent
          lifecycle:
            preStop:
              exec:
                command:
                - sleep
                - "25"
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthz
              port: 5000
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          name: registry
          ports:
          - containerPort: 5000
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthz
              port: 5000
              scheme: HTTPS
            initialDelaySeconds: 15
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          resources:
            requests:
              cpu: 100m
              memory: 256Mi
          securityContext:
            readOnlyRootFilesystem: true
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /var/run/secrets/cloud
            name: image-registry-private-configuration
            readOnly: true
          - mountPath: /etc/secrets
            name: registry-tls
          - mountPath: /etc/pki/ca-trust/extracted
            name: ca-trust-extracted
          - mountPath: /etc/pki/ca-trust/source/anchors
            name: registry-certificates
          - mountPath: /usr/share/pki/ca-trust-source
            name: trusted-ca
          - mountPath: /var/lib/kubelet/
            name: installation-pull-secrets
          - mountPath: /var/run/secrets/openshift/serviceaccount
            name: bound-sa-token
            readOnly: true
        dnsPolicy: ClusterFirst
        nodeSelector:
          kubernetes.io/os: linux
        priorityClassName: system-cluster-critical
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          fsGroup: 1000290000
          fsGroupChangePolicy: OnRootMismatch
        serviceAccount: registry
        serviceAccountName: registry
        terminationGracePeriodSeconds: 55
        topologySpreadConstraints:
        - labelSelector:
            matchLabels:
              docker-registry: default
          maxSkew: 1
          topologyKey: kubernetes.io/hostname
          whenUnsatisfiable: DoNotSchedule
        - labelSelector:
            matchLabels:
              docker-registry: default
          maxSkew: 1
          topologyKey: node-role.kubernetes.io/worker
          whenUnsatisfiable: DoNotSchedule
        - labelSelector:
            matchLabels:
              docker-registry: default
          maxSkew: 1
          topologyKey: topology.kubernetes.io/zone
          whenUnsatisfiable: DoNotSchedule
        volumes:
        - name: image-registry-private-configuration
          secret:
            defaultMode: 420
            optional: false
            secretName: image-registry-private-configuration
        - name: registry-tls
          projected:
            defaultMode: 420
            sources:
            - secret:
                name: image-registry-tls
        - emptyDir: {}
          name: ca-trust-extracted
        - configMap:
            defaultMode: 420
            name: image-registry-certificates
          name: registry-certificates
        - configMap:
            defaultMode: 420
            items:
            - key: ca-bundle.crt
              path: anchors/ca-bundle.crt
            name: trusted-ca
            optional: true
          name: trusted-ca
        - name: installation-pull-secrets
          secret:
            defaultMode: 420
            items:
            - key: .dockerconfigjson
              path: config.json
            optional: true
            secretName: installation-pull-secrets
        - name: bound-sa-token
          projected:
            defaultMode: 420
            sources:
            - serviceAccountToken:
                audience: openshift
                expirationSeconds: 3600
                path: token
  status:
    availableReplicas: 1
    fullyLabeledReplicas: 1
    observedGeneration: 2
    readyReplicas: 1
    replicas: 1
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "2"
      imageregistry.operator.openshift.io/checksum: sha256:aad26f62e6576da040f1aebfa6c2d4463accde185d971b9925f3832996107f60
      operator.openshift.io/spec-hash: a890444c5996dde666bfea813ab10a17bbc15fd6584718a92a3ae12d610f1e09
      release.openshift.io/version: 4.21.22
    creationTimestamp: "2026-07-01T22:11:39Z"
    generation: 2
    labels:
      docker-registry: default
      pod-template-hash: 6f94cfcdd4
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
            f:imageregistry.operator.openshift.io/checksum: {}
            f:operator.openshift.io/spec-hash: {}
            f:release.openshift.io/version: {}
          f:labels:
            .: {}
            f:docker-registry: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"da3d7685-a310-44dd-9b7a-35fa3a92a437"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:imageregistry.operator.openshift.io/dependencies-checksum: {}
                f:openshift.io/required-scc: {}
                f:target.workload.openshift.io/management: {}
              f:labels:
                .: {}
                f:docker-registry: {}
                f:pod-template-hash: {}
            f:spec:
              f:containers:
                k:{"name":"registry"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"REGISTRY_HEALTH_STORAGEDRIVER_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_ADDR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_NET"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_SECRET"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_TLS_CERTIFICATE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_TLS_KEY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_LOG_LEVEL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_OPENSHIFT_METRICS_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_OPENSHIFT_QUOTA_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_OPENSHIFT_SERVER_ADDR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_DELETE_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_BUCKET"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_ENCRYPT"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_FORCEPATHSTYLE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_REGION"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_USEDUALSTACK"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:lifecycle:
                    .: {}
                    f:preStop:
                      .: {}
                      f:exec:
                        .: {}
                        f:command: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":5000,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources:
                    .: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:securityContext:
                    .: {}
                    f:readOnlyRootFilesystem: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/pki/ca-trust/source/anchors"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/secrets"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/share/pki/ca-trust-source"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kubelet/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/run/secrets/cloud"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/run/secrets/openshift/serviceaccount"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:nodeSelector: {}
              f:priorityClassName: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:fsGroup: {}
                f:fsGroupChangePolicy: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:topologySpreadConstraints:
                .: {}
                k:{"topologyKey":"kubernetes.io/hostname","whenUnsatisfiable":"DoNotSchedule"}:
                  .: {}
                  f:labelSelector: {}
                  f:maxSkew: {}
                  f:topologyKey: {}
                  f:whenUnsatisfiable: {}
                k:{"topologyKey":"node-role.kubernetes.io/worker","whenUnsatisfiable":"DoNotSchedule"}:
                  .: {}
                  f:labelSelector: {}
                  f:maxSkew: {}
                  f:topologyKey: {}
                  f:whenUnsatisfiable: {}
                k:{"topologyKey":"topology.kubernetes.io/zone","whenUnsatisfiable":"DoNotSchedule"}:
                  .: {}
                  f:labelSelector: {}
                  f:maxSkew: {}
                  f:topologyKey: {}
                  f:whenUnsatisfiable: {}
              f:volumes:
                .: {}
                k:{"name":"bound-sa-token"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"ca-trust-extracted"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"image-registry-private-configuration"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:optional: {}
                    f:secretName: {}
                k:{"name":"installation-pull-secrets"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:optional: {}
                    f:secretName: {}
                k:{"name":"registry-certificates"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"registry-tls"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"trusted-ca"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                    f:optional: {}
                  f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-01T22:13:20Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:observedGeneration: {}
          f:replicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-07-01T22:13:20Z"
    name: image-registry-6f94cfcdd4
    namespace: openshift-image-registry
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: image-registry
      uid: da3d7685-a310-44dd-9b7a-35fa3a92a437
    resourceVersion: "9437"
    uid: 3f61d54e-ca8a-4fd7-a7d6-b0d350f2aaf6
  spec:
    replicas: 0
    selector:
      matchLabels:
        docker-registry: default
        pod-template-hash: 6f94cfcdd4
    template:
      metadata:
        annotations:
          imageregistry.operator.openshift.io/dependencies-checksum: sha256:0e542c38736e61278d72f1c5140493ca1eb001d711408c86a524d5c151896dcd
          openshift.io/required-scc: restricted-v2
          target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
        labels:
          docker-registry: default
          pod-template-hash: 6f94cfcdd4
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java
            /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem &&
            update-ca-trust extract --output /etc/pki/ca-trust/extracted/ && exec
            /usr/bin/dockerregistry
          env:
          - name: REGISTRY_STORAGE
            value: s3
          - name: REGISTRY_STORAGE_S3_BUCKET
            value: df73859040b4-image-registry-us-east-1-eawvumtqldigpyawdeodkuvy
          - name: REGISTRY_STORAGE_S3_REGION
            value: us-east-1
          - name: REGISTRY_STORAGE_S3_ENCRYPT
            value: "true"
          - name: REGISTRY_STORAGE_S3_FORCEPATHSTYLE
            value: "true"
          - name: REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH
            value: /var/run/secrets/cloud/credentials
          - name: REGISTRY_STORAGE_S3_USEDUALSTACK
            value: "true"
          - name: REGISTRY_HTTP_ADDR
            value: :5000
          - name: REGISTRY_HTTP_NET
            value: tcp
          - name: REGISTRY_HTTP_SECRET
            value: 279b7d8b51f67295f6cebbdc00a97d2dec2c08ed986c078e69b75b7f734575019cba71a44988195cd80051111ca899d3dc31c8761fb786782ab6231e8510081d
          - name: REGISTRY_LOG_LEVEL
            value: info
          - name: REGISTRY_OPENSHIFT_QUOTA_ENABLED
            value: "true"
          - name: REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR
            value: inmemory
          - name: REGISTRY_STORAGE_DELETE_ENABLED
            value: "true"
          - name: REGISTRY_HEALTH_STORAGEDRIVER_ENABLED
            value: "true"
          - name: REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL
            value: 10s
          - name: REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD
            value: "1"
          - name: REGISTRY_OPENSHIFT_METRICS_ENABLED
            value: "true"
          - name: REGISTRY_OPENSHIFT_SERVER_ADDR
            value: image-registry.openshift-image-registry.svc:5000
          - name: REGISTRY_HTTP_TLS_CERTIFICATE
            value: /etc/secrets/tls.crt
          - name: REGISTRY_HTTP_TLS_KEY
            value: /etc/secrets/tls.key
          image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4c31f1f5cf0b2f04acb86acba1c5b6b839a148ba2a82a0ffd2a747464e10d379
          imagePullPolicy: IfNotPresent
          lifecycle:
            preStop:
              exec:
                command:
                - sleep
                - "25"
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthz
              port: 5000
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          name: registry
          ports:
          - containerPort: 5000
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthz
              port: 5000
              scheme: HTTPS
            initialDelaySeconds: 15
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          resources:
            requests:
              cpu: 100m
              memory: 256Mi
          securityContext:
            readOnlyRootFilesystem: true
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /var/run/secrets/cloud
            name: image-registry-private-configuration
            readOnly: true
          - mountPath: /etc/secrets
            name: registry-tls
          - mountPath: /etc/pki/ca-trust/extracted
            name: ca-trust-extracted
          - mountPath: /etc/pki/ca-trust/source/anchors
            name: registry-certificates
          - mountPath: /usr/share/pki/ca-trust-source
            name: trusted-ca
          - mountPath: /var/lib/kubelet/
            name: installation-pull-secrets
          - mountPath: /var/run/secrets/openshift/serviceaccount
            name: bound-sa-token
            readOnly: true
        dnsPolicy: ClusterFirst
        nodeSelector:
          kubernetes.io/os: linux
        priorityClassName: system-cluster-critical
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          fsGroup: 1000290000
          fsGroupChangePolicy: OnRootMismatch
        serviceAccount: registry
        serviceAccountName: registry
        terminationGracePeriodSeconds: 55
        topologySpreadConstraints:
        - labelSelector:
            matchLabels:
              docker-registry: default
          maxSkew: 1
          topologyKey: kubernetes.io/hostname
          whenUnsatisfiable: DoNotSchedule
        - labelSelector:
            matchLabels:
              docker-registry: default
          maxSkew: 1
          topologyKey: node-role.kubernetes.io/worker
          whenUnsatisfiable: DoNotSchedule
        - labelSelector:
            matchLabels:
              docker-registry: default
          maxSkew: 1
          topologyKey: topology.kubernetes.io/zone
          whenUnsatisfiable: DoNotSchedule
        volumes:
        - name: image-registry-private-configuration
          secret:
            defaultMode: 420
            optional: false
            secretName: image-registry-private-configuration
        - name: registry-tls
          projected:
            defaultMode: 420
            sources:
            - secret:
                name: image-registry-tls
        - emptyDir: {}
          name: ca-trust-extracted
        - configMap:
            defaultMode: 420
            name: image-registry-certificates
          name: registry-certificates
        - configMap:
            defaultMode: 420
            items:
            - key: ca-bundle.crt
              path: anchors/ca-bundle.crt
            name: trusted-ca
            optional: true
          name: trusted-ca
        - name: installation-pull-secrets
          secret:
            defaultMode: 420
            items:
            - key: .dockerconfigjson
              path: config.json
            optional: true
            secretName: installation-pull-secrets
        - name: bound-sa-token
          projected:
            defaultMode: 420
            sources:
            - serviceAccountToken:
                audience: openshift
                expirationSeconds: 3600
                path: token
  status:
    observedGeneration: 2
    replicas: 0
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "1"
      imageregistry.operator.openshift.io/checksum: sha256:8e6dd55fa843e76829747491383a2718c265ec7d34005a2b0761f79c811da68e
      operator.openshift.io/spec-hash: 7656e0a541995802efb23713a1a634a887b8dee343bc870c13e95c357d6633f7
      release.openshift.io/version: 4.21.22
    creationTimestamp: "2026-07-01T22:06:58Z"
    generation: 2
    labels:
      docker-registry: default
      pod-template-hash: 77cf4c9f4c
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
            f:imageregistry.operator.openshift.io/checksum: {}
            f:operator.openshift.io/spec-hash: {}
            f:release.openshift.io/version: {}
          f:labels:
            .: {}
            f:docker-registry: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"da3d7685-a310-44dd-9b7a-35fa3a92a437"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:imageregistry.operator.openshift.io/dependencies-checksum: {}
                f:openshift.io/required-scc: {}
                f:target.workload.openshift.io/management: {}
              f:labels:
                .: {}
                f:docker-registry: {}
                f:pod-template-hash: {}
            f:spec:
              f:containers:
                k:{"name":"registry"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"REGISTRY_HEALTH_STORAGEDRIVER_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_ADDR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_NET"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_SECRET"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_TLS_CERTIFICATE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_HTTP_TLS_KEY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_LOG_LEVEL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_OPENSHIFT_METRICS_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_OPENSHIFT_QUOTA_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_OPENSHIFT_SERVER_ADDR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_DELETE_ENABLED"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_BUCKET"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_ENCRYPT"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_FORCEPATHSTYLE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_REGION"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"REGISTRY_STORAGE_S3_USEDUALSTACK"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:lifecycle:
                    .: {}
                    f:preStop:
                      .: {}
                      f:exec:
                        .: {}
                        f:command: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":5000,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources:
                    .: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:securityContext:
                    .: {}
                    f:readOnlyRootFilesystem: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/pki/ca-trust/source/anchors"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/secrets"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/share/pki/ca-trust-source"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kubelet/"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/run/secrets/cloud"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/run/secrets/openshift/serviceaccount"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:nodeSelector: {}
              f:priorityClassName: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:fsGroup: {}
                f:fsGroupChangePolicy: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:topologySpreadConstraints:
                .: {}
                k:{"topologyKey":"kubernetes.io/hostname","whenUnsatisfiable":"DoNotSchedule"}:
                  .: {}
                  f:labelSelector: {}
                  f:maxSkew: {}
                  f:topologyKey: {}
                  f:whenUnsatisfiable: {}
                k:{"topologyKey":"node-role.kubernetes.io/worker","whenUnsatisfiable":"DoNotSchedule"}:
                  .: {}
                  f:labelSelector: {}
                  f:maxSkew: {}
                  f:topologyKey: {}
                  f:whenUnsatisfiable: {}
              f:volumes:
                .: {}
                k:{"name":"bound-sa-token"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"ca-trust-extracted"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"image-registry-private-configuration"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:optional: {}
                    f:secretName: {}
                k:{"name":"installation-pull-secrets"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:optional: {}
                    f:secretName: {}
                k:{"name":"registry-certificates"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"registry-tls"}:
                  .: {}
                  f:name: {}
                  f:projected:
                    .: {}
                    f:defaultMode: {}
                    f:sources: {}
                k:{"name":"trusted-ca"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                    f:optional: {}
                  f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-01T22:12:57Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:observedGeneration: {}
          f:replicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-07-01T22:12:57Z"
    name: image-registry-77cf4c9f4c
    namespace: openshift-image-registry
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: image-registry
      uid: da3d7685-a310-44dd-9b7a-35fa3a92a437
    resourceVersion: "7839"
    uid: 5a4ccaa7-281b-41ba-84b0-0a131464590e
  spec:
    replicas: 0
    selector:
      matchLabels:
        docker-registry: default
        pod-template-hash: 77cf4c9f4c
    template:
      metadata:
        annotations:
          imageregistry.operator.openshift.io/dependencies-checksum: sha256:0e542c38736e61278d72f1c5140493ca1eb001d711408c86a524d5c151896dcd
          openshift.io/required-scc: restricted-v2
          target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
        labels:
          docker-registry: default
          pod-template-hash: 77cf4c9f4c
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java
            /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem &&
            update-ca-trust extract --output /etc/pki/ca-trust/extracted/ && exec
            /usr/bin/dockerregistry
          env:
          - name: REGISTRY_STORAGE
            value: s3
          - name: REGISTRY_STORAGE_S3_BUCKET
            value: df73859040b4-image-registry-us-east-1-eawvumtqldigpyawdeodkuvy
          - name: REGISTRY_STORAGE_S3_REGION
            value: us-east-1
          - name: REGISTRY_STORAGE_S3_ENCRYPT
            value: "true"
          - name: REGISTRY_STORAGE_S3_FORCEPATHSTYLE
            value: "true"
          - name: REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH
            value: /var/run/secrets/cloud/credentials
          - name: REGISTRY_STORAGE_S3_USEDUALSTACK
            value: "true"
          - name: REGISTRY_HTTP_ADDR
            value: :5000
          - name: REGISTRY_HTTP_NET
            value: tcp
          - name: REGISTRY_HTTP_SECRET
            value: 279b7d8b51f67295f6cebbdc00a97d2dec2c08ed986c078e69b75b7f734575019cba71a44988195cd80051111ca899d3dc31c8761fb786782ab6231e8510081d
          - name: REGISTRY_LOG_LEVEL
            value: info
          - name: REGISTRY_OPENSHIFT_QUOTA_ENABLED
            value: "true"
          - name: REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR
            value: inmemory
          - name: REGISTRY_STORAGE_DELETE_ENABLED
            value: "true"
          - name: REGISTRY_HEALTH_STORAGEDRIVER_ENABLED
            value: "true"
          - name: REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL
            value: 10s
          - name: REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD
            value: "1"
          - name: REGISTRY_OPENSHIFT_METRICS_ENABLED
            value: "true"
          - name: REGISTRY_OPENSHIFT_SERVER_ADDR
            value: image-registry.openshift-image-registry.svc:5000
          - name: REGISTRY_HTTP_TLS_CERTIFICATE
            value: /etc/secrets/tls.crt
          - name: REGISTRY_HTTP_TLS_KEY
            value: /etc/secrets/tls.key
          image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4c31f1f5cf0b2f04acb86acba1c5b6b839a148ba2a82a0ffd2a747464e10d379
          imagePullPolicy: IfNotPresent
          lifecycle:
            preStop:
              exec:
                command:
                - sleep
                - "25"
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthz
              port: 5000
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          name: registry
          ports:
          - containerPort: 5000
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthz
              port: 5000
              scheme: HTTPS
            initialDelaySeconds: 15
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          resources:
            requests:
              cpu: 100m
              memory: 256Mi
          securityContext:
            readOnlyRootFilesystem: true
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
          volumeMounts:
          - mountPath: /var/run/secrets/cloud
            name: image-registry-private-configuration
            readOnly: true
          - mountPath: /etc/secrets
            name: registry-tls
          - mountPath: /etc/pki/ca-trust/extracted
            name: ca-trust-extracted
          - mountPath: /etc/pki/ca-trust/source/anchors
            name: registry-certificates
          - mountPath: /usr/share/pki/ca-trust-source
            name: trusted-ca
          - mountPath: /var/lib/kubelet/
            name: installation-pull-secrets
          - mountPath: /var/run/secrets/openshift/serviceaccount
            name: bound-sa-token
            readOnly: true
        dnsPolicy: ClusterFirst
        nodeSelector:
          kubernetes.io/os: linux
        priorityClassName: system-cluster-critical
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          fsGroup: 1000290000
          fsGroupChangePolicy: OnRootMismatch
        serviceAccount: registry
        serviceAccountName: registry
        terminationGracePeriodSeconds: 55
        topologySpreadConstraints:
        - labelSelector:
            matchLabels:
              docker-registry: default
          maxSkew: 1
          topologyKey: kubernetes.io/hostname
          whenUnsatisfiable: DoNotSchedule
        - labelSelector:
            matchLabels:
              docker-registry: default
          maxSkew: 1
          topologyKey: node-role.kubernetes.io/worker
          whenUnsatisfiable: DoNotSchedule
        volumes:
        - name: image-registry-private-configuration
          secret:
            defaultMode: 420
            optional: false
            secretName: image-registry-private-configuration
        - name: registry-tls
          projected:
            defaultMode: 420
            sources:
            - secret:
                name: image-registry-tls
        - emptyDir: {}
          name: ca-trust-extracted
        - configMap:
            defaultMode: 420
            name: image-registry-certificates
          name: registry-certificates
        - configMap:
            defaultMode: 420
            items:
            - key: ca-bundle.crt
              path: anchors/ca-bundle.crt
            name: trusted-ca
            optional: true
          name: trusted-ca
        - name: installation-pull-secrets
          secret:
            defaultMode: 420
            items:
            - key: .dockerconfigjson
              path: config.json
            optional: true
            secretName: installation-pull-secrets
        - name: bound-sa-token
          projected:
            defaultMode: 420
            sources:
            - serviceAccountToken:
                audience: openshift
                expirationSeconds: 3600
                path: token
  status:
    observedGeneration: 2
    replicas: 0
kind: ReplicaSetList
metadata:
  resourceVersion: "26017"