---
apiVersion: v1
items:
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.133.0.5/23"],"mac_address":"0a:58:0a:85:00:05","gateway_ips":["10.133.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.133.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.133.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.133.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.133.0.1"}],"ip_address":"10.133.0.5/23","gateway_ip":"10.133.0.1","role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.133.0.5"
            ],
            "mac": "0a:58:0a:85:00:05",
            "default": true,
            "dns": {}
        }]
    creationTimestamp: "2026-09-15T22:27:30Z"
    generateName: global-pull-secret-syncer-
    generation: 1
    labels:
      controller-revision-hash: c64df959
      hypershift.openshift.io/globalps-config-hash: 448b387c
      name: global-pull-secret-syncer
      pod-template-generation: "1"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:generateName: {}
          f:labels:
            .: {}
            f:controller-revision-hash: {}
            f:hypershift.openshift.io/globalps-config-hash: {}
            f:name: {}
            f:pod-template-generation: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"c117d3aa-3c72-4a0c-bedf-65204d972d8b"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
          f:automountServiceAccountToken: {}
          f:containers:
            k:{"name":"global-pull-secret-syncer"}:
              .: {}
              f:args: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:privileged: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/original-pull-secret"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/var/lib/kubelet"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/var/run/dbus"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"dbus"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"kubelet-config"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"original-pull-secret"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-15T22:27:30Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:k8s.ovn.org/pod-networks: {}
      manager: ip-10-0-128-208
      operation: Update
      subresource: status
      time: "2026-09-15T22:27:59Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2026-09-15T22:28:36Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              f:observedGeneration: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:observedGeneration: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.133.0.5"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-09-15T22:28:42Z"
    name: global-pull-secret-syncer-4d5lp
    namespace: kube-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: DaemonSet
      name: global-pull-secret-syncer
      uid: c117d3aa-3c72-4a0c-bedf-65204d972d8b
    resourceVersion: "9141"
    uid: b22214d5-9c42-4710-bfff-08651d7942a3
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchFields:
            - key: metadata.name
              operator: In
              values:
              - ip-10-0-128-208.ec2.internal
    automountServiceAccountToken: false
    containers:
    - args:
      - sync-global-pullsecret
      command:
      - /usr/bin/control-plane-operator
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6857883de148204fc326664ab6284e9032ee22c3d08df0d1b32eaeff7c517986
      imagePullPolicy: IfNotPresent
      name: global-pull-secret-syncer
      resources:
        requests:
          cpu: 5m
          memory: 35Mi
      securityContext:
        privileged: true
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /var/lib/kubelet
        name: kubelet-config
      - mountPath: /var/run/dbus
        name: dbus
      - mountPath: /etc/original-pull-secret
        name: original-pull-secret
        readOnly: true
    dnsPolicy: Default
    enableServiceLinks: true
    imagePullSecrets:
    - name: default-dockercfg-7bpdd
    nodeName: ip-10-0-128-208.ec2.internal
    nodeSelector:
      hypershift.openshift.io/nodepool-globalps-enabled: "true"
    preemptionPolicy: PreemptLowerPriority
    priority: 1000000000
    priorityClassName: openshift-user-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext: {}
    serviceAccount: default
    serviceAccountName: default
    terminationGracePeriodSeconds: 30
    tolerations:
    - operator: Exists
    volumes:
    - hostPath:
        path: /var/lib/kubelet
        type: Directory
      name: kubelet-config
    - hostPath:
        path: /var/run/dbus
        type: Directory
      name: dbus
    - name: original-pull-secret
      secret:
        defaultMode: 420
        secretName: original-pull-secret
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:28:42Z"
      observedGeneration: 1
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:32Z"
      observedGeneration: 1
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:28:42Z"
      observedGeneration: 1
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:28:42Z"
      observedGeneration: 1
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:30Z"
      observedGeneration: 1
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 5m
        memory: 35Mi
      containerID: cri-o://69e6c935f59debbbc8e3c7fd67f99c34afed7aff056a9b803e599b06a81fc112
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6857883de148204fc326664ab6284e9032ee22c3d08df0d1b32eaeff7c517986
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4a1927de5969cac077decb99fdcd74b52e15d76fc6b1a23ae11a3c6fa21ae5c4
      lastState: {}
      name: global-pull-secret-syncer
      ready: true
      resources:
        requests:
          cpu: 5m
          memory: 35Mi
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-09-15T22:28:42Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          uid: 0
      volumeMounts:
      - mountPath: /var/lib/kubelet
        name: kubelet-config
      - mountPath: /var/run/dbus
        name: dbus
      - mountPath: /etc/original-pull-secret
        name: original-pull-secret
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.0.128.208
    hostIPs:
    - ip: 10.0.128.208
    observedGeneration: 1
    phase: Running
    podIP: 10.133.0.5
    podIPs:
    - ip: 10.133.0.5
    qosClass: Burstable
    startTime: "2026-09-15T22:27:32Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.134.0.3/23"],"mac_address":"0a:58:0a:86:00:03","gateway_ips":["10.134.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.134.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.134.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.134.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.134.0.1"}],"ip_address":"10.134.0.3/23","gateway_ip":"10.134.0.1","role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.134.0.3"
            ],
            "mac": "0a:58:0a:86:00:03",
            "default": true,
            "dns": {}
        }]
    creationTimestamp: "2026-09-15T22:27:42Z"
    generateName: global-pull-secret-syncer-
    generation: 1
    labels:
      controller-revision-hash: c64df959
      hypershift.openshift.io/globalps-config-hash: 448b387c
      name: global-pull-secret-syncer
      pod-template-generation: "1"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:generateName: {}
          f:labels:
            .: {}
            f:controller-revision-hash: {}
            f:hypershift.openshift.io/globalps-config-hash: {}
            f:name: {}
            f:pod-template-generation: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"c117d3aa-3c72-4a0c-bedf-65204d972d8b"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
          f:automountServiceAccountToken: {}
          f:containers:
            k:{"name":"global-pull-secret-syncer"}:
              .: {}
              f:args: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:privileged: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/original-pull-secret"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/var/lib/kubelet"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/var/run/dbus"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"dbus"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"kubelet-config"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"original-pull-secret"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-15T22:27:42Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:k8s.ovn.org/pod-networks: {}
      manager: ip-10-0-128-247
      operation: Update
      subresource: status
      time: "2026-09-15T22:28:23Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2026-09-15T22:28:46Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              f:observedGeneration: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:observedGeneration: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.134.0.3"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-09-15T22:28:54Z"
    name: global-pull-secret-syncer-dssx6
    namespace: kube-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: DaemonSet
      name: global-pull-secret-syncer
      uid: c117d3aa-3c72-4a0c-bedf-65204d972d8b
    resourceVersion: "9878"
    uid: 0b32c671-b247-4256-878e-a286c276b9ca
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchFields:
            - key: metadata.name
              operator: In
              values:
              - ip-10-0-128-247.ec2.internal
    automountServiceAccountToken: false
    containers:
    - args:
      - sync-global-pullsecret
      command:
      - /usr/bin/control-plane-operator
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6857883de148204fc326664ab6284e9032ee22c3d08df0d1b32eaeff7c517986
      imagePullPolicy: IfNotPresent
      name: global-pull-secret-syncer
      resources:
        requests:
          cpu: 5m
          memory: 35Mi
      securityContext:
        privileged: true
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /var/lib/kubelet
        name: kubelet-config
      - mountPath: /var/run/dbus
        name: dbus
      - mountPath: /etc/original-pull-secret
        name: original-pull-secret
        readOnly: true
    dnsPolicy: Default
    enableServiceLinks: true
    imagePullSecrets:
    - name: default-dockercfg-7bpdd
    nodeName: ip-10-0-128-247.ec2.internal
    nodeSelector:
      hypershift.openshift.io/nodepool-globalps-enabled: "true"
    preemptionPolicy: PreemptLowerPriority
    priority: 1000000000
    priorityClassName: openshift-user-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext: {}
    serviceAccount: default
    serviceAccountName: default
    terminationGracePeriodSeconds: 30
    tolerations:
    - operator: Exists
    volumes:
    - hostPath:
        path: /var/lib/kubelet
        type: Directory
      name: kubelet-config
    - hostPath:
        path: /var/run/dbus
        type: Directory
      name: dbus
    - name: original-pull-secret
      secret:
        defaultMode: 420
        secretName: original-pull-secret
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:28:54Z"
      observedGeneration: 1
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:42Z"
      observedGeneration: 1
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:28:54Z"
      observedGeneration: 1
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:28:54Z"
      observedGeneration: 1
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:42Z"
      observedGeneration: 1
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 5m
        memory: 35Mi
      containerID: cri-o://2415e07c6e880b75b178abfec9525f0c2bd8e50c46ff9365929b7141d1c99d46
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6857883de148204fc326664ab6284e9032ee22c3d08df0d1b32eaeff7c517986
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4a1927de5969cac077decb99fdcd74b52e15d76fc6b1a23ae11a3c6fa21ae5c4
      lastState: {}
      name: global-pull-secret-syncer
      ready: true
      resources:
        requests:
          cpu: 5m
          memory: 35Mi
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-09-15T22:28:53Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          uid: 0
      volumeMounts:
      - mountPath: /var/lib/kubelet
        name: kubelet-config
      - mountPath: /var/run/dbus
        name: dbus
      - mountPath: /etc/original-pull-secret
        name: original-pull-secret
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.0.128.247
    hostIPs:
    - ip: 10.0.128.247
    observedGeneration: 1
    phase: Running
    podIP: 10.134.0.3
    podIPs:
    - ip: 10.134.0.3
    qosClass: Burstable
    startTime: "2026-09-15T22:27:42Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.132.0.3/23"],"mac_address":"0a:58:0a:84:00:03","gateway_ips":["10.132.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.132.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.132.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.132.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.132.0.1"}],"ip_address":"10.132.0.3/23","gateway_ip":"10.132.0.1","role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.132.0.3"
            ],
            "mac": "0a:58:0a:84:00:03",
            "default": true,
            "dns": {}
        }]
    creationTimestamp: "2026-09-15T22:27:08Z"
    generateName: global-pull-secret-syncer-
    generation: 1
    labels:
      controller-revision-hash: c64df959
      hypershift.openshift.io/globalps-config-hash: 448b387c
      name: global-pull-secret-syncer
      pod-template-generation: "1"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:generateName: {}
          f:labels:
            .: {}
            f:controller-revision-hash: {}
            f:hypershift.openshift.io/globalps-config-hash: {}
            f:name: {}
            f:pod-template-generation: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"c117d3aa-3c72-4a0c-bedf-65204d972d8b"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
          f:automountServiceAccountToken: {}
          f:containers:
            k:{"name":"global-pull-secret-syncer"}:
              .: {}
              f:args: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:privileged: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/original-pull-secret"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/var/lib/kubelet"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/var/run/dbus"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"dbus"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"kubelet-config"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"original-pull-secret"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-15T22:27:08Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:k8s.ovn.org/pod-networks: {}
      manager: ip-10-0-138-116
      operation: Update
      subresource: status
      time: "2026-09-15T22:27:35Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2026-09-15T22:28:14Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              f:observedGeneration: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:observedGeneration: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.132.0.3"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-09-15T22:28:20Z"
    name: global-pull-secret-syncer-mn2ls
    namespace: kube-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: DaemonSet
      name: global-pull-secret-syncer
      uid: c117d3aa-3c72-4a0c-bedf-65204d972d8b
    resourceVersion: "7912"
    uid: 7f0b1be9-4151-4e3e-9ca2-e9aeffdf050c
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchFields:
            - key: metadata.name
              operator: In
              values:
              - ip-10-0-138-116.ec2.internal
    automountServiceAccountToken: false
    containers:
    - args:
      - sync-global-pullsecret
      command:
      - /usr/bin/control-plane-operator
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6857883de148204fc326664ab6284e9032ee22c3d08df0d1b32eaeff7c517986
      imagePullPolicy: IfNotPresent
      name: global-pull-secret-syncer
      resources:
        requests:
          cpu: 5m
          memory: 35Mi
      securityContext:
        privileged: true
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /var/lib/kubelet
        name: kubelet-config
      - mountPath: /var/run/dbus
        name: dbus
      - mountPath: /etc/original-pull-secret
        name: original-pull-secret
        readOnly: true
    dnsPolicy: Default
    enableServiceLinks: true
    imagePullSecrets:
    - name: default-dockercfg-7bpdd
    nodeName: ip-10-0-138-116.ec2.internal
    nodeSelector:
      hypershift.openshift.io/nodepool-globalps-enabled: "true"
    preemptionPolicy: PreemptLowerPriority
    priority: 1000000000
    priorityClassName: openshift-user-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext: {}
    serviceAccount: default
    serviceAccountName: default
    terminationGracePeriodSeconds: 30
    tolerations:
    - operator: Exists
    volumes:
    - hostPath:
        path: /var/lib/kubelet
        type: Directory
      name: kubelet-config
    - hostPath:
        path: /var/run/dbus
        type: Directory
      name: dbus
    - name: original-pull-secret
      secret:
        defaultMode: 420
        secretName: original-pull-secret
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:28:20Z"
      observedGeneration: 1
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:09Z"
      observedGeneration: 1
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:28:20Z"
      observedGeneration: 1
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:28:20Z"
      observedGeneration: 1
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:08Z"
      observedGeneration: 1
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 5m
        memory: 35Mi
      containerID: cri-o://413427466f1f242916189032fc88d90858b6452f93ce8230cb804be1fb6b4875
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6857883de148204fc326664ab6284e9032ee22c3d08df0d1b32eaeff7c517986
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4a1927de5969cac077decb99fdcd74b52e15d76fc6b1a23ae11a3c6fa21ae5c4
      lastState: {}
      name: global-pull-secret-syncer
      ready: true
      resources:
        requests:
          cpu: 5m
          memory: 35Mi
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-09-15T22:28:20Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          uid: 0
      volumeMounts:
      - mountPath: /var/lib/kubelet
        name: kubelet-config
      - mountPath: /var/run/dbus
        name: dbus
      - mountPath: /etc/original-pull-secret
        name: original-pull-secret
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.0.138.116
    hostIPs:
    - ip: 10.0.138.116
    observedGeneration: 1
    phase: Running
    podIP: 10.132.0.3
    podIPs:
    - ip: 10.132.0.3
    qosClass: Burstable
    startTime: "2026-09-15T22:27:09Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      hypershift.openshift.io/release-image: quay.io/openshift-release-dev/ocp-release:4.21.33-multi
    creationTimestamp: "2026-09-15T22:27:07Z"
    generateName: konnectivity-agent-
    generation: 1
    labels:
      app: konnectivity-agent
      controller-revision-hash: 7b57fdd87c
      pod-template-generation: "1"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hypershift.openshift.io/release-image: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:app: {}
            f:controller-revision-hash: {}
            f:pod-template-generation: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"e2b9c141-1d56-4d00-8c2b-59a0b2035573"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
          f:automountServiceAccountToken: {}
          f:containers:
            k:{"name":"konnectivity-agent"}:
              .: {}
              f:args: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"HTTP_PROXY"}:
                  .: {}
                  f:name: {}
                k:{"name":"HTTPS_PROXY"}:
                  .: {}
                  f:name: {}
                k:{"name":"NO_PROXY"}:
                  .: {}
                  f:name: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:readinessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:allowPrivilegeEscalation: {}
                f:capabilities:
                  .: {}
                  f:drop: {}
                f:readOnlyRootFilesystem: {}
                f:runAsNonRoot: {}
              f:startupProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/konnectivity/agent"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/konnectivity/ca"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext:
            .: {}
            f:runAsUser: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"agent-certs"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"konnectivity-ca"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
              f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-15T22:27:07Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              f:observedGeneration: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:observedGeneration: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.0.138.116"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-09-15T22:27:39Z"
    name: konnectivity-agent-5nc6l
    namespace: kube-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: DaemonSet
      name: konnectivity-agent
      uid: e2b9c141-1d56-4d00-8c2b-59a0b2035573
    resourceVersion: "6489"
    uid: 38aa201f-97b9-443e-b246-dd19d606eb43
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchFields:
            - key: metadata.name
              operator: In
              values:
              - ip-10-0-138-116.ec2.internal
    automountServiceAccountToken: false
    containers:
    - args:
      - --logtostderr=true
      - --ca-cert
      - /etc/konnectivity/ca/ca.crt
      - --agent-cert
      - /etc/konnectivity/agent/tls.crt
      - --agent-key
      - /etc/konnectivity/agent/tls.key
      - --proxy-server-host
      - konnectivity-server-clusters-11069cfc-f284-4d31-8fe5--2fc77f69.apps.kflux-prd-es01.1ion.p1.openshiftapps.com
      - --proxy-server-port
      - "443"
      - --health-server-host
      - 127.0.0.1
      - --health-server-port
      - "2041"
      - --agent-identifiers=default-route=true
      - --keepalive-time
      - 30s
      - --probe-interval
      - 5s
      - --sync-interval
      - 5s
      - --sync-interval-cap
      - 30s
      - --v
      - "3"
      command:
      - /usr/bin/proxy-agent
      env:
      - name: HTTP_PROXY
      - name: HTTPS_PROXY
      - name: NO_PROXY
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cb18802deb495c8d9b0ab2c3d8c3043b73eafbad562b04b71a3717870ccdff74
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 6
        httpGet:
          host: 127.0.0.1
          path: healthz
          port: 2041
          scheme: HTTP
        periodSeconds: 30
        successThreshold: 1
        timeoutSeconds: 5
      name: konnectivity-agent
      readinessProbe:
        failureThreshold: 1
        httpGet:
          host: 127.0.0.1
          path: readyz
          port: 2041
          scheme: HTTP
        periodSeconds: 30
        successThreshold: 1
        timeoutSeconds: 5
      resources:
        requests:
          cpu: 40m
          memory: 50Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        readOnlyRootFilesystem: true
        runAsNonRoot: true
      startupProbe:
        failureThreshold: 60
        httpGet:
          host: 127.0.0.1
          path: healthz
          port: 2041
          scheme: HTTP
        periodSeconds: 5
        successThreshold: 1
        timeoutSeconds: 5
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/konnectivity/agent
        name: agent-certs
      - mountPath: /etc/konnectivity/ca
        name: konnectivity-ca
    dnsPolicy: Default
    enableServiceLinks: true
    hostNetwork: true
    imagePullSecrets:
    - name: default-dockercfg-7bpdd
    nodeName: ip-10-0-138-116.ec2.internal
    preemptionPolicy: PreemptLowerPriority
    priority: 2000001000
    priorityClassName: system-node-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      runAsUser: 1000
    serviceAccount: default
    serviceAccountName: default
    terminationGracePeriodSeconds: 30
    tolerations:
    - operator: Exists
    volumes:
    - name: agent-certs
      secret:
        defaultMode: 416
        secretName: konnectivity-agent
    - configMap:
        defaultMode: 416
        name: konnectivity-ca-bundle
      name: konnectivity-ca
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:29Z"
      observedGeneration: 1
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:09Z"
      observedGeneration: 1
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:39Z"
      observedGeneration: 1
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:39Z"
      observedGeneration: 1
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:07Z"
      observedGeneration: 1
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 40m
        memory: 50Mi
      containerID: cri-o://cbe904288a778d355bbcd95cf4199f7f5db19db48cfc1c48969ce9c97e51d93f
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cb18802deb495c8d9b0ab2c3d8c3043b73eafbad562b04b71a3717870ccdff74
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86d48b9b5f6d60cbc78dda53e240ddc06b448a996ea0fd7681c64438cd1f704a
      lastState: {}
      name: konnectivity-agent
      ready: true
      resources:
        requests:
          cpu: 40m
          memory: 50Mi
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-09-15T22:27:29Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          uid: 1000
      volumeMounts:
      - mountPath: /etc/konnectivity/agent
        name: agent-certs
      - mountPath: /etc/konnectivity/ca
        name: konnectivity-ca
    hostIP: 10.0.138.116
    hostIPs:
    - ip: 10.0.138.116
    observedGeneration: 1
    phase: Running
    podIP: 10.0.138.116
    podIPs:
    - ip: 10.0.138.116
    qosClass: Burstable
    startTime: "2026-09-15T22:27:09Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      hypershift.openshift.io/release-image: quay.io/openshift-release-dev/ocp-release:4.21.33-multi
    creationTimestamp: "2026-09-15T22:27:30Z"
    generateName: konnectivity-agent-
    generation: 1
    labels:
      app: konnectivity-agent
      controller-revision-hash: 7b57fdd87c
      pod-template-generation: "1"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hypershift.openshift.io/release-image: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:app: {}
            f:controller-revision-hash: {}
            f:pod-template-generation: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"e2b9c141-1d56-4d00-8c2b-59a0b2035573"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
          f:automountServiceAccountToken: {}
          f:containers:
            k:{"name":"konnectivity-agent"}:
              .: {}
              f:args: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"HTTP_PROXY"}:
                  .: {}
                  f:name: {}
                k:{"name":"HTTPS_PROXY"}:
                  .: {}
                  f:name: {}
                k:{"name":"NO_PROXY"}:
                  .: {}
                  f:name: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:readinessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:allowPrivilegeEscalation: {}
                f:capabilities:
                  .: {}
                  f:drop: {}
                f:readOnlyRootFilesystem: {}
                f:runAsNonRoot: {}
              f:startupProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/konnectivity/agent"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/konnectivity/ca"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext:
            .: {}
            f:runAsUser: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"agent-certs"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"konnectivity-ca"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
              f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-15T22:27:30Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              f:observedGeneration: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:observedGeneration: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.0.128.208"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-09-15T22:28:01Z"
    name: konnectivity-agent-l9m9m
    namespace: kube-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: DaemonSet
      name: konnectivity-agent
      uid: e2b9c141-1d56-4d00-8c2b-59a0b2035573
    resourceVersion: "7388"
    uid: 93274f69-efc2-48a0-8223-f3a37aca3947
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchFields:
            - key: metadata.name
              operator: In
              values:
              - ip-10-0-128-208.ec2.internal
    automountServiceAccountToken: false
    containers:
    - args:
      - --logtostderr=true
      - --ca-cert
      - /etc/konnectivity/ca/ca.crt
      - --agent-cert
      - /etc/konnectivity/agent/tls.crt
      - --agent-key
      - /etc/konnectivity/agent/tls.key
      - --proxy-server-host
      - konnectivity-server-clusters-11069cfc-f284-4d31-8fe5--2fc77f69.apps.kflux-prd-es01.1ion.p1.openshiftapps.com
      - --proxy-server-port
      - "443"
      - --health-server-host
      - 127.0.0.1
      - --health-server-port
      - "2041"
      - --agent-identifiers=default-route=true
      - --keepalive-time
      - 30s
      - --probe-interval
      - 5s
      - --sync-interval
      - 5s
      - --sync-interval-cap
      - 30s
      - --v
      - "3"
      command:
      - /usr/bin/proxy-agent
      env:
      - name: HTTP_PROXY
      - name: HTTPS_PROXY
      - name: NO_PROXY
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cb18802deb495c8d9b0ab2c3d8c3043b73eafbad562b04b71a3717870ccdff74
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 6
        httpGet:
          host: 127.0.0.1
          path: healthz
          port: 2041
          scheme: HTTP
        periodSeconds: 30
        successThreshold: 1
        timeoutSeconds: 5
      name: konnectivity-agent
      readinessProbe:
        failureThreshold: 1
        httpGet:
          host: 127.0.0.1
          path: readyz
          port: 2041
          scheme: HTTP
        periodSeconds: 30
        successThreshold: 1
        timeoutSeconds: 5
      resources:
        requests:
          cpu: 40m
          memory: 50Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        readOnlyRootFilesystem: true
        runAsNonRoot: true
      startupProbe:
        failureThreshold: 60
        httpGet:
          host: 127.0.0.1
          path: healthz
          port: 2041
          scheme: HTTP
        periodSeconds: 5
        successThreshold: 1
        timeoutSeconds: 5
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/konnectivity/agent
        name: agent-certs
      - mountPath: /etc/konnectivity/ca
        name: konnectivity-ca
    dnsPolicy: Default
    enableServiceLinks: true
    hostNetwork: true
    imagePullSecrets:
    - name: default-dockercfg-7bpdd
    nodeName: ip-10-0-128-208.ec2.internal
    preemptionPolicy: PreemptLowerPriority
    priority: 2000001000
    priorityClassName: system-node-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      runAsUser: 1000
    serviceAccount: default
    serviceAccountName: default
    terminationGracePeriodSeconds: 30
    tolerations:
    - operator: Exists
    volumes:
    - name: agent-certs
      secret:
        defaultMode: 416
        secretName: konnectivity-agent
    - configMap:
        defaultMode: 416
        name: konnectivity-ca-bundle
      name: konnectivity-ca
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:51Z"
      observedGeneration: 1
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:32Z"
      observedGeneration: 1
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:28:01Z"
      observedGeneration: 1
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:28:01Z"
      observedGeneration: 1
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:30Z"
      observedGeneration: 1
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 40m
        memory: 50Mi
      containerID: cri-o://15efea0cf202d0f30e1789f2305f9a15f1eb0765081c49a62c46ce7f86075d90
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cb18802deb495c8d9b0ab2c3d8c3043b73eafbad562b04b71a3717870ccdff74
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86d48b9b5f6d60cbc78dda53e240ddc06b448a996ea0fd7681c64438cd1f704a
      lastState: {}
      name: konnectivity-agent
      ready: true
      resources:
        requests:
          cpu: 40m
          memory: 50Mi
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-09-15T22:27:51Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          uid: 1000
      volumeMounts:
      - mountPath: /etc/konnectivity/agent
        name: agent-certs
      - mountPath: /etc/konnectivity/ca
        name: konnectivity-ca
    hostIP: 10.0.128.208
    hostIPs:
    - ip: 10.0.128.208
    observedGeneration: 1
    phase: Running
    podIP: 10.0.128.208
    podIPs:
    - ip: 10.0.128.208
    qosClass: Burstable
    startTime: "2026-09-15T22:27:32Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      hypershift.openshift.io/release-image: quay.io/openshift-release-dev/ocp-release:4.21.33-multi
    creationTimestamp: "2026-09-15T22:27:41Z"
    generateName: konnectivity-agent-
    generation: 1
    labels:
      app: konnectivity-agent
      controller-revision-hash: 7b57fdd87c
      pod-template-generation: "1"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hypershift.openshift.io/release-image: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:app: {}
            f:controller-revision-hash: {}
            f:pod-template-generation: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"e2b9c141-1d56-4d00-8c2b-59a0b2035573"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
          f:automountServiceAccountToken: {}
          f:containers:
            k:{"name":"konnectivity-agent"}:
              .: {}
              f:args: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"HTTP_PROXY"}:
                  .: {}
                  f:name: {}
                k:{"name":"HTTPS_PROXY"}:
                  .: {}
                  f:name: {}
                k:{"name":"NO_PROXY"}:
                  .: {}
                  f:name: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:readinessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:allowPrivilegeEscalation: {}
                f:capabilities:
                  .: {}
                  f:drop: {}
                f:readOnlyRootFilesystem: {}
                f:runAsNonRoot: {}
              f:startupProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/konnectivity/agent"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/konnectivity/ca"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext:
            .: {}
            f:runAsUser: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"agent-certs"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"konnectivity-ca"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
              f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-15T22:27:41Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              f:observedGeneration: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:observedGeneration: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.0.128.247"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-09-15T22:28:03Z"
    name: konnectivity-agent-m4l8b
    namespace: kube-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: DaemonSet
      name: konnectivity-agent
      uid: e2b9c141-1d56-4d00-8c2b-59a0b2035573
    resourceVersion: "7493"
    uid: 0d8ec9c1-59c0-459e-b19b-b86f00b0b55f
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchFields:
            - key: metadata.name
              operator: In
              values:
              - ip-10-0-128-247.ec2.internal
    automountServiceAccountToken: false
    containers:
    - args:
      - --logtostderr=true
      - --ca-cert
      - /etc/konnectivity/ca/ca.crt
      - --agent-cert
      - /etc/konnectivity/agent/tls.crt
      - --agent-key
      - /etc/konnectivity/agent/tls.key
      - --proxy-server-host
      - konnectivity-server-clusters-11069cfc-f284-4d31-8fe5--2fc77f69.apps.kflux-prd-es01.1ion.p1.openshiftapps.com
      - --proxy-server-port
      - "443"
      - --health-server-host
      - 127.0.0.1
      - --health-server-port
      - "2041"
      - --agent-identifiers=default-route=true
      - --keepalive-time
      - 30s
      - --probe-interval
      - 5s
      - --sync-interval
      - 5s
      - --sync-interval-cap
      - 30s
      - --v
      - "3"
      command:
      - /usr/bin/proxy-agent
      env:
      - name: HTTP_PROXY
      - name: HTTPS_PROXY
      - name: NO_PROXY
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cb18802deb495c8d9b0ab2c3d8c3043b73eafbad562b04b71a3717870ccdff74
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 6
        httpGet:
          host: 127.0.0.1
          path: healthz
          port: 2041
          scheme: HTTP
        periodSeconds: 30
        successThreshold: 1
        timeoutSeconds: 5
      name: konnectivity-agent
      readinessProbe:
        failureThreshold: 1
        httpGet:
          host: 127.0.0.1
          path: readyz
          port: 2041
          scheme: HTTP
        periodSeconds: 30
        successThreshold: 1
        timeoutSeconds: 5
      resources:
        requests:
          cpu: 40m
          memory: 50Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        readOnlyRootFilesystem: true
        runAsNonRoot: true
      startupProbe:
        failureThreshold: 60
        httpGet:
          host: 127.0.0.1
          path: healthz
          port: 2041
          scheme: HTTP
        periodSeconds: 5
        successThreshold: 1
        timeoutSeconds: 5
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/konnectivity/agent
        name: agent-certs
      - mountPath: /etc/konnectivity/ca
        name: konnectivity-ca
    dnsPolicy: Default
    enableServiceLinks: true
    hostNetwork: true
    imagePullSecrets:
    - name: default-dockercfg-7bpdd
    nodeName: ip-10-0-128-247.ec2.internal
    preemptionPolicy: PreemptLowerPriority
    priority: 2000001000
    priorityClassName: system-node-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      runAsUser: 1000
    serviceAccount: default
    serviceAccountName: default
    terminationGracePeriodSeconds: 30
    tolerations:
    - operator: Exists
    volumes:
    - name: agent-certs
      secret:
        defaultMode: 416
        secretName: konnectivity-agent
    - configMap:
        defaultMode: 416
        name: konnectivity-ca-bundle
      name: konnectivity-ca
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:28:02Z"
      observedGeneration: 1
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:42Z"
      observedGeneration: 1
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:28:03Z"
      observedGeneration: 1
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:28:03Z"
      observedGeneration: 1
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:42Z"
      observedGeneration: 1
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 40m
        memory: 50Mi
      containerID: cri-o://157f35d22212ef4b1e06e5d93044972db101a3247870d3d164087e57ed074bd2
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cb18802deb495c8d9b0ab2c3d8c3043b73eafbad562b04b71a3717870ccdff74
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86d48b9b5f6d60cbc78dda53e240ddc06b448a996ea0fd7681c64438cd1f704a
      lastState: {}
      name: konnectivity-agent
      ready: true
      resources:
        requests:
          cpu: 40m
          memory: 50Mi
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-09-15T22:28:02Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          uid: 1000
      volumeMounts:
      - mountPath: /etc/konnectivity/agent
        name: agent-certs
      - mountPath: /etc/konnectivity/ca
        name: konnectivity-ca
    hostIP: 10.0.128.247
    hostIPs:
    - ip: 10.0.128.247
    observedGeneration: 1
    phase: Running
    podIP: 10.0.128.247
    podIPs:
    - ip: 10.0.128.247
    qosClass: Burstable
    startTime: "2026-09-15T22:27:42Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      kubernetes.io/config.hash: d23b474b380f11cca08f39b02958fed1
      kubernetes.io/config.mirror: d23b474b380f11cca08f39b02958fed1
      kubernetes.io/config.seen: "2026-09-15T22:27:29.142544076Z"
      kubernetes.io/config.source: file
    creationTimestamp: "2026-09-15T22:27:31Z"
    generation: 1
    labels:
      k8s-app: kube-apiserver-proxy
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/config.hash: {}
            f:kubernetes.io/config.mirror: {}
            f:kubernetes.io/config.seen: {}
            f:kubernetes.io/config.source: {}
          f:labels:
            .: {}
            f:k8s-app: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"655810a0-3e35-4c8a-8fe0-e31355d27650"}: {}
        f:spec:
          f:containers:
            k:{"name":"haproxy"}:
              .: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":6443,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:runAsUser: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/usr/local/etc/haproxy"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:nodeName: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"config"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
      manager: kubelet
      operation: Update
      time: "2026-09-15T22:27:31Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            .: {}
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.0.128.208"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-09-15T22:27:34Z"
    name: kube-apiserver-proxy-ip-10-0-128-208.ec2.internal
    namespace: kube-system
    ownerReferences:
    - apiVersion: v1
      controller: true
      kind: Node
      name: ip-10-0-128-208.ec2.internal
      uid: 655810a0-3e35-4c8a-8fe0-e31355d27650
    resourceVersion: "6423"
    uid: 350278ce-0041-4f7c-95e4-bd5597dffa46
  spec:
    containers:
    - command:
      - haproxy
      - -f
      - /usr/local/etc/haproxy
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:48526e08a2a06d05806dbcf3ddb069e5182371667d9e9f7d2cf09f60cd247d20
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 3
        httpGet:
          host: 172.20.0.1
          path: /version
          port: 6443
          scheme: HTTPS
        initialDelaySeconds: 120
        periodSeconds: 120
        successThreshold: 1
        timeoutSeconds: 1
      name: haproxy
      ports:
      - containerPort: 6443
        hostPort: 6443
        name: apiserver
        protocol: TCP
      resources:
        requests:
          cpu: 13m
          memory: 16Mi
      securityContext:
        runAsUser: 1001
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /usr/local/etc/haproxy
        name: config
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    hostNetwork: true
    nodeName: ip-10-0-128-208.ec2.internal
    preemptionPolicy: PreemptLowerPriority
    priority: 2000001000
    priorityClassName: system-node-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext: {}
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoExecute
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - hostPath:
        path: /etc/kubernetes/apiserver-proxy-config
        type: ""
      name: config
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:34Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:29Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:34Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:34Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:29Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 13m
        memory: 16Mi
      containerID: cri-o://448b35f470d53c0f2377f5afe9dae72cf1139e8c9facaf29fbb359473dc083aa
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:48526e08a2a06d05806dbcf3ddb069e5182371667d9e9f7d2cf09f60cd247d20
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:48526e08a2a06d05806dbcf3ddb069e5182371667d9e9f7d2cf09f60cd247d20
      lastState: {}
      name: haproxy
      ready: true
      resources:
        requests:
          cpu: 13m
          memory: 16Mi
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-09-15T22:27:33Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          uid: 1001
      volumeMounts:
      - mountPath: /usr/local/etc/haproxy
        name: config
    hostIP: 10.0.128.208
    hostIPs:
    - ip: 10.0.128.208
    phase: Running
    podIP: 10.0.128.208
    podIPs:
    - ip: 10.0.128.208
    qosClass: Burstable
    startTime: "2026-09-15T22:27:29Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      kubernetes.io/config.hash: 146a57ab6e613bbac55bc1f7a3764a51
      kubernetes.io/config.mirror: 146a57ab6e613bbac55bc1f7a3764a51
      kubernetes.io/config.seen: "2026-09-15T22:27:40.611546325Z"
      kubernetes.io/config.source: file
    creationTimestamp: "2026-09-15T22:27:42Z"
    generation: 1
    labels:
      k8s-app: kube-apiserver-proxy
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/config.hash: {}
            f:kubernetes.io/config.mirror: {}
            f:kubernetes.io/config.seen: {}
            f:kubernetes.io/config.source: {}
          f:labels:
            .: {}
            f:k8s-app: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"cae548e8-e8ca-47dc-918b-b5e21279eec7"}: {}
        f:spec:
          f:containers:
            k:{"name":"haproxy"}:
              .: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":6443,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:runAsUser: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/usr/local/etc/haproxy"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:nodeName: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"config"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
      manager: kubelet
      operation: Update
      time: "2026-09-15T22:27:42Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            .: {}
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.0.128.247"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-09-15T22:27:45Z"
    name: kube-apiserver-proxy-ip-10-0-128-247.ec2.internal
    namespace: kube-system
    ownerReferences:
    - apiVersion: v1
      controller: true
      kind: Node
      name: ip-10-0-128-247.ec2.internal
      uid: cae548e8-e8ca-47dc-918b-b5e21279eec7
    resourceVersion: "6813"
    uid: 56eaa179-bdea-4e46-8eff-2640cd1904e9
  spec:
    containers:
    - command:
      - haproxy
      - -f
      - /usr/local/etc/haproxy
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:48526e08a2a06d05806dbcf3ddb069e5182371667d9e9f7d2cf09f60cd247d20
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 3
        httpGet:
          host: 172.20.0.1
          path: /version
          port: 6443
          scheme: HTTPS
        initialDelaySeconds: 120
        periodSeconds: 120
        successThreshold: 1
        timeoutSeconds: 1
      name: haproxy
      ports:
      - containerPort: 6443
        hostPort: 6443
        name: apiserver
        protocol: TCP
      resources:
        requests:
          cpu: 13m
          memory: 16Mi
      securityContext:
        runAsUser: 1001
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /usr/local/etc/haproxy
        name: config
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    hostNetwork: true
    nodeName: ip-10-0-128-247.ec2.internal
    preemptionPolicy: PreemptLowerPriority
    priority: 2000001000
    priorityClassName: system-node-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext: {}
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoExecute
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - hostPath:
        path: /etc/kubernetes/apiserver-proxy-config
        type: ""
      name: config
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:44Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:40Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:44Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:44Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:40Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 13m
        memory: 16Mi
      containerID: cri-o://92314c40e6d50142a756fb63e0937cd3e40d5c3d4782cc5c5b44ac92a13544aa
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:48526e08a2a06d05806dbcf3ddb069e5182371667d9e9f7d2cf09f60cd247d20
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:48526e08a2a06d05806dbcf3ddb069e5182371667d9e9f7d2cf09f60cd247d20
      lastState: {}
      name: haproxy
      ready: true
      resources:
        requests:
          cpu: 13m
          memory: 16Mi
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-09-15T22:27:43Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          uid: 1001
      volumeMounts:
      - mountPath: /usr/local/etc/haproxy
        name: config
    hostIP: 10.0.128.247
    hostIPs:
    - ip: 10.0.128.247
    phase: Running
    podIP: 10.0.128.247
    podIPs:
    - ip: 10.0.128.247
    qosClass: Burstable
    startTime: "2026-09-15T22:27:40Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      kubernetes.io/config.hash: 69eda65fcd513f716093f5dd7f2f0e50
      kubernetes.io/config.mirror: 69eda65fcd513f716093f5dd7f2f0e50
      kubernetes.io/config.seen: "2026-09-15T22:27:06.676849712Z"
      kubernetes.io/config.source: file
    creationTimestamp: "2026-09-15T22:27:08Z"
    generation: 1
    labels:
      k8s-app: kube-apiserver-proxy
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/config.hash: {}
            f:kubernetes.io/config.mirror: {}
            f:kubernetes.io/config.seen: {}
            f:kubernetes.io/config.source: {}
          f:labels:
            .: {}
            f:k8s-app: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"5e2bc65a-3d29-411c-8122-8c164776478a"}: {}
        f:spec:
          f:containers:
            k:{"name":"haproxy"}:
              .: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":6443,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:runAsUser: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/usr/local/etc/haproxy"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:nodeName: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"config"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
      manager: kubelet
      operation: Update
      time: "2026-09-15T22:27:08Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            .: {}
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.0.138.116"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-09-15T22:27:11Z"
    name: kube-apiserver-proxy-ip-10-0-138-116.ec2.internal
    namespace: kube-system
    ownerReferences:
    - apiVersion: v1
      controller: true
      kind: Node
      name: ip-10-0-138-116.ec2.internal
      uid: 5e2bc65a-3d29-411c-8122-8c164776478a
    resourceVersion: "5961"
    uid: 7ca1ee78-b932-4f37-8eb1-f31286cdd221
  spec:
    containers:
    - command:
      - haproxy
      - -f
      - /usr/local/etc/haproxy
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:48526e08a2a06d05806dbcf3ddb069e5182371667d9e9f7d2cf09f60cd247d20
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 3
        httpGet:
          host: 172.20.0.1
          path: /version
          port: 6443
          scheme: HTTPS
        initialDelaySeconds: 120
        periodSeconds: 120
        successThreshold: 1
        timeoutSeconds: 1
      name: haproxy
      ports:
      - containerPort: 6443
        hostPort: 6443
        name: apiserver
        protocol: TCP
      resources:
        requests:
          cpu: 13m
          memory: 16Mi
      securityContext:
        runAsUser: 1001
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /usr/local/etc/haproxy
        name: config
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    hostNetwork: true
    nodeName: ip-10-0-138-116.ec2.internal
    preemptionPolicy: PreemptLowerPriority
    priority: 2000001000
    priorityClassName: system-node-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext: {}
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoExecute
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - hostPath:
        path: /etc/kubernetes/apiserver-proxy-config
        type: ""
      name: config
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:11Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:06Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:11Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:11Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-09-15T22:27:06Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 13m
        memory: 16Mi
      containerID: cri-o://c022fe6ef5c2f2b24c3119b35d45792ba5678c811ef938294149458780038433
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:48526e08a2a06d05806dbcf3ddb069e5182371667d9e9f7d2cf09f60cd247d20
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:48526e08a2a06d05806dbcf3ddb069e5182371667d9e9f7d2cf09f60cd247d20
      lastState: {}
      name: haproxy
      ready: true
      resources:
        requests:
          cpu: 13m
          memory: 16Mi
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-09-15T22:27:11Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          uid: 1001
      volumeMounts:
      - mountPath: /usr/local/etc/haproxy
        name: config
    hostIP: 10.0.138.116
    hostIPs:
    - ip: 10.0.138.116
    phase: Running
    podIP: 10.0.138.116
    podIPs:
    - ip: 10.0.138.116
    qosClass: Burstable
    startTime: "2026-09-15T22:27:06Z"
kind: PodList
metadata:
  resourceVersion: "71043"