---
apiVersion: v1
items:
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      app.opendatahub.io/KserveConfigHash: P35ozkSL0msVEalVZIGO0zuFehzAwvjUWSycn-gndok
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.132.0.27/23"],"mac_address":"0a:58:0a:84:00:1b","gateway_ips":["10.132.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.132.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.132.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.132.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.132.0.1"}],"ip_address":"10.132.0.27/23","gateway_ip":"10.132.0.1","role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.132.0.27"
            ],
            "mac": "0a:58:0a:84:00:1b",
            "default": true,
            "dns": {}
        }]
      kubectl.kubernetes.io/default-container: manager
      openshift.io/scc: restricted-v2
      seccomp.security.alpha.kubernetes.io/pod: runtime/default
      security.openshift.io/validated-scc-subject-type: user
    creationTimestamp: "2026-07-06T19:35:15Z"
    generateName: kserve-controller-manager-d6f4b65b8-
    generation: 1
    labels:
      app.kubernetes.io/name: kserve-controller-manager
      app.kubernetes.io/part-of: kserve
      app.opendatahub.io/kserve: "true"
      control-plane: kserve-controller-manager
      controller-tools.k8s.io: "1.0"
      pod-template-hash: d6f4b65b8
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.ovn.org/pod-networks: {}
      manager: ip-10-0-131-35
      operation: Update
      subresource: status
      time: "2026-07-06T19:35:15Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:app.opendatahub.io/KserveConfigHash: {}
            f:kubectl.kubernetes.io/default-container: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:app.kubernetes.io/name: {}
            f:app.kubernetes.io/part-of: {}
            f:app.opendatahub.io/kserve: {}
            f:control-plane: {}
            f:controller-tools.k8s.io: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"66d9187e-3af2-4894-9a17-f96be6a056be"}: {}
        f:spec:
          f:containers:
            k:{"name":"manager"}:
              .: {}
              f:args: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"LLM_INFERENCE_SERVICE_CONFIG_PREFIX"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"POD_NAMESPACE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"SECRET_NAME"}:
                  .: {}
                  f:name: {}
                  f:value: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":9443,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:readinessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:resources:
                .: {}
                f:limits:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:allowPrivilegeEscalation: {}
                f:capabilities:
                  .: {}
                  f:drop: {}
                f:privileged: {}
                f:readOnlyRootFilesystem: {}
                f:runAsNonRoot: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/tmp/k8s-webhook-server/serving-certs"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext:
            .: {}
            f:runAsNonRoot: {}
            f:seccompProfile:
              .: {}
              f:type: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:volumes:
            .: {}
            k:{"name":"cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-06T19:35:15Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2026-07-06T19:35:15Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              f:observedGeneration: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:observedGeneration: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.132.0.27"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-07-06T20:01:45Z"
    name: kserve-controller-manager-d6f4b65b8-lwftm
    namespace: opendatahub
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: kserve-controller-manager-d6f4b65b8
      uid: 66d9187e-3af2-4894-9a17-f96be6a056be
    resourceVersion: "42735"
    uid: fad8e3b0-82a9-4d95-8807-aa3819bcb9e7
  spec:
    containers:
    - args:
      - --metrics-addr=127.0.0.1:8080
      - --leader-elect
      command:
      - /manager
      env:
      - name: POD_NAMESPACE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
      - name: SECRET_NAME
        value: kserve-webhook-server-cert
      - name: LLM_INFERENCE_SERVICE_CONFIG_PREFIX
        value: v3-5-0-ea-2-kserve-
      image: quay.io/opendatahub/kserve-controller:odh-v3.5-EA2
      imagePullPolicy: Always
      livenessProbe:
        failureThreshold: 5
        httpGet:
          path: /healthz
          port: 8081
          scheme: HTTP
        initialDelaySeconds: 30
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 5
      name: manager
      ports:
      - containerPort: 9443
        name: webhook-server
        protocol: TCP
      readinessProbe:
        failureThreshold: 5
        httpGet:
          path: /readyz
          port: 8081
          scheme: HTTP
        initialDelaySeconds: 30
        periodSeconds: 5
        successThreshold: 1
        timeoutSeconds: 5
      resources:
        limits:
          cpu: 500m
          memory: 500Mi
        requests:
          cpu: 100m
          memory: 200Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        privileged: false
        readOnlyRootFilesystem: true
        runAsNonRoot: true
        runAsUser: 1000670000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /tmp/k8s-webhook-server/serving-certs
        name: cert
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-mjc9j
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    imagePullSecrets:
    - name: kserve-controller-manager-dockercfg-xz2w9
    nodeName: ip-10-0-131-35.ec2.internal
    preemptionPolicy: PreemptLowerPriority
    priority: 0
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1000670000
      runAsNonRoot: true
      seLinuxOptions:
        level: s0:c26,c10
      seccompProfile:
        type: RuntimeDefault
    serviceAccount: kserve-controller-manager
    serviceAccountName: kserve-controller-manager
    terminationGracePeriodSeconds: 10
    tolerations:
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
      tolerationSeconds: 300
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 300
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - name: cert
      secret:
        defaultMode: 420
        secretName: kserve-webhook-server-cert
    - name: kube-api-access-mjc9j
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:35:19Z"
      observedGeneration: 1
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:35:15Z"
      observedGeneration: 1
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T20:01:45Z"
      observedGeneration: 1
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T20:01:45Z"
      observedGeneration: 1
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:35:15Z"
      observedGeneration: 1
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 100m
        memory: 200Mi
      containerID: cri-o://f399d5bc8ad4584cd8d2fe51d98eca223064916bec05f54abd8967b873142090
      image: quay.io/opendatahub/kserve-controller:odh-v3.5-EA2
      imageID: quay.io/opendatahub/kserve-controller@sha256:0367496c5c5155e53df50ad25a64a7016e5f7496ae22a4c9dedce7d296b8e9e1
      lastState:
        terminated:
          containerID: cri-o://36390896e13fd7bda86fad6dbaf04b34f3b55b5f193221cb0da329ebf1fd17a4
          exitCode: 1
          finishedAt: "2026-07-06T20:01:13Z"
          reason: Error
          startedAt: "2026-07-06T19:35:19Z"
      name: manager
      ready: true
      resources:
        limits:
          cpu: 500m
          memory: 500Mi
        requests:
          cpu: 100m
          memory: 200Mi
      restartCount: 1
      started: true
      state:
        running:
          startedAt: "2026-07-06T20:01:14Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          - 1000670000
          uid: 1000670000
      volumeMounts:
      - mountPath: /tmp/k8s-webhook-server/serving-certs
        name: cert
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-mjc9j
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.0.131.35
    hostIPs:
    - ip: 10.0.131.35
    observedGeneration: 1
    phase: Running
    podIP: 10.132.0.27
    podIPs:
    - ip: 10.132.0.27
    qosClass: Burstable
    startTime: "2026-07-06T19:35:15Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.132.0.28/23"],"mac_address":"0a:58:0a:84:00:1c","gateway_ips":["10.132.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.132.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.132.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.132.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.132.0.1"}],"ip_address":"10.132.0.28/23","gateway_ip":"10.132.0.1","role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.132.0.28"
            ],
            "mac": "0a:58:0a:84:00:1c",
            "default": true,
            "dns": {}
        }]
      kubectl.kubernetes.io/default-container: manager
      openshift.io/scc: restricted-v2
      seccomp.security.alpha.kubernetes.io/pod: runtime/default
      security.openshift.io/validated-scc-subject-type: user
    creationTimestamp: "2026-07-06T19:35:15Z"
    generateName: llmisvc-controller-manager-777c6bd7d5-
    generation: 1
    labels:
      app.kubernetes.io/component: controller
      app.kubernetes.io/name: llmisvc-controller-manager
      app.kubernetes.io/part-of: kserve
      app.opendatahub.io/kserve: "true"
      control-plane: llmisvc-controller-manager
      controller-tools.k8s.io: "1.0"
      pod-template-hash: 777c6bd7d5
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.ovn.org/pod-networks: {}
      manager: ip-10-0-131-35
      operation: Update
      subresource: status
      time: "2026-07-06T19:35:15Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:kubectl.kubernetes.io/default-container: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/name: {}
            f:app.kubernetes.io/part-of: {}
            f:app.opendatahub.io/kserve: {}
            f:control-plane: {}
            f:controller-tools.k8s.io: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"e1c909df-b616-41ae-a02c-17d52425c7bb"}: {}
        f:spec:
          f:containers:
            k:{"name":"manager"}:
              .: {}
              f:args: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"LLM_INFERENCE_SERVICE_CONFIG_PREFIX"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"POD_NAMESPACE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":8443,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
                k:{"containerPort":9443,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:readinessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:resources:
                .: {}
                f:limits:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:allowPrivilegeEscalation: {}
                f:capabilities:
                  .: {}
                  f:drop: {}
                f:privileged: {}
                f:readOnlyRootFilesystem: {}
                f:runAsNonRoot: {}
                f:seccompProfile:
                  .: {}
                  f:type: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/tmp/k8s-webhook-server/serving-certs"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext:
            .: {}
            f:runAsNonRoot: {}
            f:seccompProfile:
              .: {}
              f:type: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:volumes:
            .: {}
            k:{"name":"cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-06T19:35:15Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2026-07-06T19:35:15Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              f:observedGeneration: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:observedGeneration: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.132.0.28"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-07-06T20:01:45Z"
    name: llmisvc-controller-manager-777c6bd7d5-x2577
    namespace: opendatahub
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: llmisvc-controller-manager-777c6bd7d5
      uid: e1c909df-b616-41ae-a02c-17d52425c7bb
    resourceVersion: "42729"
    uid: 8f8ff396-377b-4cd6-a4f2-9b26caeab604
  spec:
    containers:
    - args:
      - --metrics-addr=127.0.0.1:8443
      - --leader-elect
      command:
      - /manager
      env:
      - name: POD_NAMESPACE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
      - name: LLM_INFERENCE_SERVICE_CONFIG_PREFIX
        value: v3-5-0-ea-2-kserve-
      image: quay.io/opendatahub/odh-kserve-llmisvc-controller:odh-v3.5-EA2
      imagePullPolicy: Always
      livenessProbe:
        failureThreshold: 5
        httpGet:
          path: /healthz
          port: 8081
          scheme: HTTP
        initialDelaySeconds: 30
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 5
      name: manager
      ports:
      - containerPort: 9443
        name: webhook-server
        protocol: TCP
      - containerPort: 8443
        name: metrics
        protocol: TCP
      readinessProbe:
        failureThreshold: 5
        httpGet:
          path: /readyz
          port: 8081
          scheme: HTTP
        initialDelaySeconds: 30
        periodSeconds: 5
        successThreshold: 1
        timeoutSeconds: 5
      resources:
        limits:
          cpu: 100m
          memory: 300Mi
        requests:
          cpu: 100m
          memory: 300Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        privileged: false
        readOnlyRootFilesystem: true
        runAsNonRoot: true
        runAsUser: 1000670000
        seccompProfile:
          type: RuntimeDefault
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /tmp/k8s-webhook-server/serving-certs
        name: cert
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-sksdm
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    imagePullSecrets:
    - name: llmisvc-controller-manager-dockercfg-q6t9p
    nodeName: ip-10-0-131-35.ec2.internal
    preemptionPolicy: PreemptLowerPriority
    priority: 0
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1000670000
      runAsNonRoot: true
      seLinuxOptions:
        level: s0:c26,c10
      seccompProfile:
        type: RuntimeDefault
    serviceAccount: llmisvc-controller-manager
    serviceAccountName: llmisvc-controller-manager
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
      tolerationSeconds: 300
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 300
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - name: cert
      secret:
        defaultMode: 420
        secretName: llmisvc-webhook-server-cert
    - name: kube-api-access-sksdm
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:35:19Z"
      observedGeneration: 1
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:35:15Z"
      observedGeneration: 1
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T20:01:45Z"
      observedGeneration: 1
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T20:01:45Z"
      observedGeneration: 1
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:35:15Z"
      observedGeneration: 1
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 100m
        memory: 300Mi
      containerID: cri-o://63ec0ecd1841867ad7c35b72019fdb9870d863e1a662df0a10131c919c08e9a7
      image: quay.io/opendatahub/odh-kserve-llmisvc-controller:odh-v3.5-EA2
      imageID: quay.io/opendatahub/odh-kserve-llmisvc-controller@sha256:69f28de9d143763eab2e1375f62f916b462a137aeb1c0f72be43ab1345e87f6c
      lastState:
        terminated:
          containerID: cri-o://250d54c59310e84a65fe3b58a9417f8384117606c47f71374131a5192f71fa44
          exitCode: 1
          finishedAt: "2026-07-06T20:01:12Z"
          reason: Error
          startedAt: "2026-07-06T19:35:19Z"
      name: manager
      ready: true
      resources:
        limits:
          cpu: 100m
          memory: 300Mi
        requests:
          cpu: 100m
          memory: 300Mi
      restartCount: 1
      started: true
      state:
        running:
          startedAt: "2026-07-06T20:01:14Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          - 1000670000
          uid: 1000670000
      volumeMounts:
      - mountPath: /tmp/k8s-webhook-server/serving-certs
        name: cert
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-sksdm
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.0.131.35
    hostIPs:
    - ip: 10.0.131.35
    observedGeneration: 1
    phase: Running
    podIP: 10.132.0.28
    podIPs:
    - ip: 10.132.0.28
    qosClass: Guaranteed
    startTime: "2026-07-06T19:35:15Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.132.0.39/23"],"mac_address":"0a:58:0a:84:00:27","gateway_ips":["10.132.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.132.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.132.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.132.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.132.0.1"}],"ip_address":"10.132.0.39/23","gateway_ip":"10.132.0.1","role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.132.0.39"
            ],
            "mac": "0a:58:0a:84:00:27",
            "default": true,
            "dns": {}
        }]
      openshift.io/scc: restricted-v2
      seccomp.security.alpha.kubernetes.io/pod: runtime/default
      security.openshift.io/validated-scc-subject-type: user
    creationTimestamp: "2026-07-06T19:38:58Z"
    generateName: maas-api-b6cbd65b-
    generation: 1
    labels:
      app.kubernetes.io/component: api
      app.kubernetes.io/name: maas-api
      app.kubernetes.io/part-of: models-as-a-service
      maas.opendatahub.io/tenant-instance: maas-api
      pod-template-hash: b6cbd65b
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.ovn.org/pod-networks: {}
      manager: ip-10-0-131-35
      operation: Update
      subresource: status
      time: "2026-07-06T19:38:58Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:generateName: {}
          f:labels:
            .: {}
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/name: {}
            f:app.kubernetes.io/part-of: {}
            f:maas.opendatahub.io/tenant-instance: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"47ef5c5a-492f-4f7a-a40b-fe95872fd8b5"}: {}
        f:spec:
          f:containers:
            k:{"name":"maas-api"}:
              .: {}
              f:env:
                .: {}
                k:{"name":"API_KEY_MAX_EXPIRATION_DAYS"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"GATEWAY_NAME"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"GATEWAY_NAMESPACE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"MAAS_SUBSCRIPTION_NAMESPACE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"METRICS_PORT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"NAMESPACE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"SECURE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"SSL_CERT_DIR"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"TENANT_NAME"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"TLS_CERT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"TLS_KEY"}:
                  .: {}
                  f:name: {}
                  f:value: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":8443,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:readinessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:resources:
                .: {}
                f:limits:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:allowPrivilegeEscalation: {}
                f:capabilities:
                  .: {}
                  f:drop: {}
                f:readOnlyRootFilesystem: {}
                f:runAsNonRoot: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/maas-api/tls"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/etc/ssl/certs/openshift-service-ca"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext:
            .: {}
            f:runAsNonRoot: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:volumes:
            .: {}
            k:{"name":"maas-api-tls"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"openshift-service-ca"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
              f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-06T19:38:58Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2026-07-06T19:38:58Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              f:observedGeneration: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:observedGeneration: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.132.0.39"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-07-06T19:39:07Z"
    name: maas-api-b6cbd65b-lhch9
    namespace: opendatahub
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: maas-api-b6cbd65b
      uid: 47ef5c5a-492f-4f7a-a40b-fe95872fd8b5
    resourceVersion: "21191"
    uid: 1d397eeb-06d2-4a41-9518-a974b9c64d03
  spec:
    containers:
    - env:
      - name: SECURE
        value: "true"
      - name: TLS_CERT
        value: /etc/maas-api/tls/tls.crt
      - name: TLS_KEY
        value: /etc/maas-api/tls/tls.key
      - name: SSL_CERT_DIR
        value: /etc/ssl/certs:/etc/ssl/certs/openshift-service-ca
      - name: NAMESPACE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
      - name: MAAS_SUBSCRIPTION_NAMESPACE
        value: models-as-a-service
      - name: METRICS_PORT
        value: "9090"
      - name: GATEWAY_NAMESPACE
        value: openshift-ingress
      - name: GATEWAY_NAME
        value: maas-default-gateway
      - name: API_KEY_MAX_EXPIRATION_DAYS
        value: "90"
      - name: TENANT_NAME
        value: models-as-a-service
      image: quay.io/opendatahub/maas-api@sha256:e38c460fdcac3aa3384a126d979ee4b3a56814d649836f34fd56d6a383fd4238
      imagePullPolicy: Always
      livenessProbe:
        failureThreshold: 3
        httpGet:
          path: /health
          port: https
          scheme: HTTPS
        initialDelaySeconds: 30
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 5
      name: maas-api
      ports:
      - containerPort: 8443
        name: https
        protocol: TCP
      readinessProbe:
        failureThreshold: 3
        httpGet:
          path: /health
          port: https
          scheme: HTTPS
        initialDelaySeconds: 5
        periodSeconds: 5
        successThreshold: 1
        timeoutSeconds: 3
      resources:
        limits:
          cpu: 200m
          memory: 128Mi
        requests:
          cpu: 50m
          memory: 64Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        readOnlyRootFilesystem: true
        runAsNonRoot: true
        runAsUser: 1000670000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /etc/maas-api/tls
        name: maas-api-tls
        readOnly: true
      - mountPath: /etc/ssl/certs/openshift-service-ca
        name: openshift-service-ca
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-xh7zr
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    imagePullSecrets:
    - name: maas-api-dockercfg-bt2cj
    nodeName: ip-10-0-131-35.ec2.internal
    preemptionPolicy: PreemptLowerPriority
    priority: 0
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1000670000
      runAsNonRoot: true
      seLinuxOptions:
        level: s0:c26,c10
      seccompProfile:
        type: RuntimeDefault
    serviceAccount: maas-api
    serviceAccountName: maas-api
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
      tolerationSeconds: 300
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 300
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - name: maas-api-tls
      secret:
        defaultMode: 420
        secretName: maas-api-serving-cert
    - configMap:
        defaultMode: 420
        name: openshift-service-ca.crt
      name: openshift-service-ca
    - name: kube-api-access-xh7zr
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:39:01Z"
      observedGeneration: 1
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:38:58Z"
      observedGeneration: 1
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:39:07Z"
      observedGeneration: 1
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:39:07Z"
      observedGeneration: 1
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:38:58Z"
      observedGeneration: 1
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 50m
        memory: 64Mi
      containerID: cri-o://5bd3adfabc7f065d989a830807cfaddeaa52effc4a931764ec39a5dca1190029
      image: quay.io/opendatahub/maas-api@sha256:e38c460fdcac3aa3384a126d979ee4b3a56814d649836f34fd56d6a383fd4238
      imageID: quay.io/opendatahub/maas-api@sha256:45021d7a69181d965bcd8188dea620ef4adfce9ea965785fc496cd26edabbbb0
      lastState: {}
      name: maas-api
      ready: true
      resources:
        limits:
          cpu: 200m
          memory: 128Mi
        requests:
          cpu: 50m
          memory: 64Mi
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-07-06T19:39:01Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          - 1000670000
          uid: 1000670000
      volumeMounts:
      - mountPath: /etc/maas-api/tls
        name: maas-api-tls
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /etc/ssl/certs/openshift-service-ca
        name: openshift-service-ca
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-xh7zr
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.0.131.35
    hostIPs:
    - ip: 10.0.131.35
    observedGeneration: 1
    phase: Running
    podIP: 10.132.0.39
    podIPs:
    - ip: 10.132.0.39
    qosClass: Burstable
    startTime: "2026-07-06T19:38:58Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.134.0.29/23"],"mac_address":"0a:58:0a:86:00:1d","gateway_ips":["10.134.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.134.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.134.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.134.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.134.0.1"}],"ip_address":"10.134.0.29/23","gateway_ip":"10.134.0.1","role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.134.0.29"
            ],
            "mac": "0a:58:0a:86:00:1d",
            "default": true,
            "dns": {}
        }]
      openshift.io/scc: restricted-v2
      seccomp.security.alpha.kubernetes.io/pod: runtime/default
      security.openshift.io/validated-scc-subject-type: user
    creationTimestamp: "2026-07-06T19:45:00Z"
    generateName: maas-api-key-cleanup-29722785-
    generation: 1
    labels:
      app: maas-api-cleanup
      app.kubernetes.io/component: api
      app.kubernetes.io/name: maas-api
      app.kubernetes.io/part-of: models-as-a-service
      batch.kubernetes.io/controller-uid: 27416514-c00f-4703-9191-59170098ec11
      batch.kubernetes.io/job-name: maas-api-key-cleanup-29722785
      controller-uid: 27416514-c00f-4703-9191-59170098ec11
      job-name: maas-api-key-cleanup-29722785
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.ovn.org/pod-networks: {}
      manager: ip-10-0-128-19
      operation: Update
      subresource: status
      time: "2026-07-06T19:45:00Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:generateName: {}
          f:labels:
            .: {}
            f:app: {}
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/name: {}
            f:app.kubernetes.io/part-of: {}
            f:batch.kubernetes.io/controller-uid: {}
            f:batch.kubernetes.io/job-name: {}
            f:controller-uid: {}
            f:job-name: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"27416514-c00f-4703-9191-59170098ec11"}: {}
        f:spec:
          f:containers:
            k:{"name":"cleanup"}:
              .: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:limits:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:allowPrivilegeEscalation: {}
                f:capabilities:
                  .: {}
                  f:drop: {}
                f:readOnlyRootFilesystem: {}
                f:runAsNonRoot: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext:
            .: {}
            f:runAsNonRoot: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-06T19:45:00Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2026-07-06T19:45:01Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:reason: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:reason: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              f:observedGeneration: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:reason: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:observedGeneration: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.134.0.29"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-07-06T19:45:06Z"
    name: maas-api-key-cleanup-29722785-l4w4m
    namespace: opendatahub
    ownerReferences:
    - apiVersion: batch/v1
      blockOwnerDeletion: true
      controller: true
      kind: Job
      name: maas-api-key-cleanup-29722785
      uid: 27416514-c00f-4703-9191-59170098ec11
    resourceVersion: "26424"
    uid: 8d66c115-54a1-44a4-9f86-c3821376fdd0
  spec:
    containers:
    - command:
      - /bin/sh
      - -c
      - |
        curl -sf -k -X POST https://maas-api:8443/internal/v1/api-keys/cleanup
      image: registry.redhat.io/ubi9/ubi-minimal:9.7
      imagePullPolicy: IfNotPresent
      name: cleanup
      resources:
        limits:
          cpu: 50m
          memory: 32Mi
        requests:
          cpu: 10m
          memory: 16Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        readOnlyRootFilesystem: true
        runAsNonRoot: true
        runAsUser: 1000670000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-6k7xc
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    imagePullSecrets:
    - name: maas-api-dockercfg-bt2cj
    nodeName: ip-10-0-128-19.ec2.internal
    preemptionPolicy: PreemptLowerPriority
    priority: 0
    restartPolicy: OnFailure
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1000670000
      runAsNonRoot: true
      seLinuxOptions:
        level: s0:c26,c10
      seccompProfile:
        type: RuntimeDefault
    serviceAccount: maas-api
    serviceAccountName: maas-api
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
      tolerationSeconds: 300
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 300
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - name: kube-api-access-6k7xc
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:45:06Z"
      observedGeneration: 1
      status: "False"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:45:00Z"
      observedGeneration: 1
      reason: PodCompleted
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:45:04Z"
      observedGeneration: 1
      reason: PodCompleted
      status: "False"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:45:04Z"
      observedGeneration: 1
      reason: PodCompleted
      status: "False"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:45:00Z"
      observedGeneration: 1
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 10m
        memory: 16Mi
      containerID: cri-o://aead1007ff6ed3d402a8268c2792efc7323bfbb5eb24f0ebe752b49c6bb4ceef
      image: registry.redhat.io/ubi9/ubi-minimal:9.7
      imageID: registry.redhat.io/ubi9/ubi-minimal@sha256:907b68736aa798b2d38255b7aa070b2a70acb90803864a40f05d0ec47556ddd0
      lastState: {}
      name: cleanup
      ready: false
      resources:
        limits:
          cpu: 50m
          memory: 32Mi
        requests:
          cpu: 10m
          memory: 16Mi
      restartCount: 0
      started: false
      state:
        terminated:
          containerID: cri-o://aead1007ff6ed3d402a8268c2792efc7323bfbb5eb24f0ebe752b49c6bb4ceef
          exitCode: 0
          finishedAt: "2026-07-06T19:45:04Z"
          reason: Completed
          startedAt: "2026-07-06T19:45:03Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          - 1000670000
          uid: 1000670000
      volumeMounts:
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-6k7xc
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.0.128.19
    hostIPs:
    - ip: 10.0.128.19
    observedGeneration: 1
    phase: Succeeded
    podIP: 10.134.0.29
    podIPs:
    - ip: 10.134.0.29
    qosClass: Burstable
    startTime: "2026-07-06T19:45:00Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.134.0.35/23"],"mac_address":"0a:58:0a:86:00:23","gateway_ips":["10.134.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.134.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.134.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.134.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.134.0.1"}],"ip_address":"10.134.0.35/23","gateway_ip":"10.134.0.1","role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.134.0.35"
            ],
            "mac": "0a:58:0a:86:00:23",
            "default": true,
            "dns": {}
        }]
      openshift.io/scc: restricted-v2
      seccomp.security.alpha.kubernetes.io/pod: runtime/default
      security.openshift.io/validated-scc-subject-type: user
    creationTimestamp: "2026-07-06T20:00:00Z"
    generateName: maas-api-key-cleanup-29722800-
    generation: 1
    labels:
      app: maas-api-cleanup
      app.kubernetes.io/component: api
      app.kubernetes.io/name: maas-api
      app.kubernetes.io/part-of: models-as-a-service
      batch.kubernetes.io/controller-uid: 78450560-677d-4a32-8e44-45ca3aae04fe
      batch.kubernetes.io/job-name: maas-api-key-cleanup-29722800
      controller-uid: 78450560-677d-4a32-8e44-45ca3aae04fe
      job-name: maas-api-key-cleanup-29722800
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.ovn.org/pod-networks: {}
      manager: ip-10-0-128-19
      operation: Update
      subresource: status
      time: "2026-07-06T20:00:00Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:generateName: {}
          f:labels:
            .: {}
            f:app: {}
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/name: {}
            f:app.kubernetes.io/part-of: {}
            f:batch.kubernetes.io/controller-uid: {}
            f:batch.kubernetes.io/job-name: {}
            f:controller-uid: {}
            f:job-name: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"78450560-677d-4a32-8e44-45ca3aae04fe"}: {}
        f:spec:
          f:containers:
            k:{"name":"cleanup"}:
              .: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:limits:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:allowPrivilegeEscalation: {}
                f:capabilities:
                  .: {}
                  f:drop: {}
                f:readOnlyRootFilesystem: {}
                f:runAsNonRoot: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext:
            .: {}
            f:runAsNonRoot: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-06T20:00:00Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2026-07-06T20:00:00Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:reason: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:reason: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              f:observedGeneration: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:reason: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:observedGeneration: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.134.0.35"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-07-06T20:00:03Z"
    name: maas-api-key-cleanup-29722800-g7tvl
    namespace: opendatahub
    ownerReferences:
    - apiVersion: batch/v1
      blockOwnerDeletion: true
      controller: true
      kind: Job
      name: maas-api-key-cleanup-29722800
      uid: 78450560-677d-4a32-8e44-45ca3aae04fe
    resourceVersion: "41354"
    uid: 2ba9ff62-72cf-442c-8445-197a5ae73314
  spec:
    containers:
    - command:
      - /bin/sh
      - -c
      - |
        curl -sf -k -X POST https://maas-api:8443/internal/v1/api-keys/cleanup
      image: registry.redhat.io/ubi9/ubi-minimal:9.7
      imagePullPolicy: IfNotPresent
      name: cleanup
      resources:
        limits:
          cpu: 50m
          memory: 32Mi
        requests:
          cpu: 10m
          memory: 16Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        readOnlyRootFilesystem: true
        runAsNonRoot: true
        runAsUser: 1000670000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-fppzt
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    imagePullSecrets:
    - name: maas-api-dockercfg-bt2cj
    nodeName: ip-10-0-128-19.ec2.internal
    preemptionPolicy: PreemptLowerPriority
    priority: 0
    restartPolicy: OnFailure
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1000670000
      runAsNonRoot: true
      seLinuxOptions:
        level: s0:c26,c10
      seccompProfile:
        type: RuntimeDefault
    serviceAccount: maas-api
    serviceAccountName: maas-api
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
      tolerationSeconds: 300
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 300
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - name: kube-api-access-fppzt
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T20:00:03Z"
      observedGeneration: 1
      status: "False"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T20:00:00Z"
      observedGeneration: 1
      reason: PodCompleted
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T20:00:01Z"
      observedGeneration: 1
      reason: PodCompleted
      status: "False"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T20:00:01Z"
      observedGeneration: 1
      reason: PodCompleted
      status: "False"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T20:00:00Z"
      observedGeneration: 1
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 10m
        memory: 16Mi
      containerID: cri-o://4365f9934cc5f523747f07a5ea60a0498840649ec958fa45d464ca0f7d01a74f
      image: registry.redhat.io/ubi9/ubi-minimal:9.7
      imageID: registry.redhat.io/ubi9/ubi-minimal@sha256:907b68736aa798b2d38255b7aa070b2a70acb90803864a40f05d0ec47556ddd0
      lastState: {}
      name: cleanup
      ready: false
      resources:
        limits:
          cpu: 50m
          memory: 32Mi
        requests:
          cpu: 10m
          memory: 16Mi
      restartCount: 0
      started: false
      state:
        terminated:
          containerID: cri-o://4365f9934cc5f523747f07a5ea60a0498840649ec958fa45d464ca0f7d01a74f
          exitCode: 0
          finishedAt: "2026-07-06T20:00:01Z"
          reason: Completed
          startedAt: "2026-07-06T20:00:00Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          - 1000670000
          uid: 1000670000
      volumeMounts:
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-fppzt
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.0.128.19
    hostIPs:
    - ip: 10.0.128.19
    observedGeneration: 1
    phase: Succeeded
    podIP: 10.134.0.35
    podIPs:
    - ip: 10.134.0.35
    qosClass: Burstable
    startTime: "2026-07-06T20:00:00Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.133.0.47/23"],"mac_address":"0a:58:0a:85:00:2f","gateway_ips":["10.133.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.133.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.133.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.133.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.133.0.1"}],"ip_address":"10.133.0.47/23","gateway_ip":"10.133.0.1","role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.133.0.47"
            ],
            "mac": "0a:58:0a:85:00:2f",
            "default": true,
            "dns": {}
        }]
      kubectl.kubernetes.io/restartedAt: "2026-07-06T19:38:22Z"
      openshift.io/scc: restricted-v2
      seccomp.security.alpha.kubernetes.io/pod: runtime/default
      security.openshift.io/validated-scc-subject-type: user
    creationTimestamp: "2026-07-06T19:42:51Z"
    generateName: maas-controller-689c7557c-
    generation: 1
    labels:
      app: maas-controller
      control-plane: maas-controller
      pod-template-hash: 689c7557c
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.ovn.org/pod-networks: {}
      manager: ip-10-0-140-210
      operation: Update
      subresource: status
      time: "2026-07-06T19:42:51Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:kubectl.kubernetes.io/restartedAt: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:app: {}
            f:control-plane: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"8f930b42-a2a5-40c4-bce8-425b49b37a86"}: {}
        f:spec:
          f:containers:
            k:{"name":"manager"}:
              .: {}
              f:args: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"AITENANT_NAMESPACE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"CONTROLLER_NAMESPACE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"GATEWAY_NAME"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"GATEWAY_NAMESPACE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"MAAS_API_NAMESPACE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"MAAS_SUBSCRIPTION_NAMESPACE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"MONITORING_NAMESPACE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:configMapKeyRef: {}
                k:{"name":"RELATED_IMAGE_ODH_AI_GATEWAY_PAYLOAD_PROCESSING_IMAGE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:configMapKeyRef: {}
                k:{"name":"RELATED_IMAGE_ODH_MAAS_API_IMAGE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:configMapKeyRef: {}
                k:{"name":"RELATED_IMAGE_UBI_MINIMAL_IMAGE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:configMapKeyRef: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":8080,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:readinessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:resources:
                .: {}
                f:limits:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:allowPrivilegeEscalation: {}
                f:capabilities:
                  .: {}
                  f:drop: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/tmp/k8s-webhook-server/serving-certs"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext:
            .: {}
            f:runAsNonRoot: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:volumes:
            .: {}
            k:{"name":"webhook-cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-06T19:42:51Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2026-07-06T19:42:52Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              f:observedGeneration: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:observedGeneration: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.133.0.47"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-07-06T20:01:25Z"
    name: maas-controller-689c7557c-wh8mz
    namespace: opendatahub
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: maas-controller-689c7557c
      uid: 8f930b42-a2a5-40c4-bce8-425b49b37a86
    resourceVersion: "42394"
    uid: b5f4e274-48e4-4452-aac7-430a8bc76355
  spec:
    containers:
    - args:
      - --leader-elect
      - --health-probe-bind-address=:8081
      - --controller-namespace=$(CONTROLLER_NAMESPACE)
      - --gateway-name=$(GATEWAY_NAME)
      - --gateway-namespace=$(GATEWAY_NAMESPACE)
      - --maas-api-namespace=$(MAAS_API_NAMESPACE)
      - --maas-subscription-namespace=$(MAAS_SUBSCRIPTION_NAMESPACE)
      - --aitenant-namespace=$(AITENANT_NAMESPACE)
      - --monitoring-namespace=$(MONITORING_NAMESPACE)
      - --enable-tenant-namespace-discovery
      - --metadata-cache-ttl=60
      - --authz-cache-ttl=60
      command:
      - /manager
      env:
      - name: CONTROLLER_NAMESPACE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
      - name: GATEWAY_NAME
        value: maas-default-gateway
      - name: GATEWAY_NAMESPACE
        value: openshift-ingress
      - name: MAAS_API_NAMESPACE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
      - name: MAAS_SUBSCRIPTION_NAMESPACE
        value: models-as-a-service
      - name: AITENANT_NAMESPACE
        value: ai-tenants
      - name: RELATED_IMAGE_ODH_MAAS_API_IMAGE
        valueFrom:
          configMapKeyRef:
            key: maas-api-image
            name: maas-parameters
            optional: true
      - name: RELATED_IMAGE_ODH_AI_GATEWAY_PAYLOAD_PROCESSING_IMAGE
        valueFrom:
          configMapKeyRef:
            key: payload-processing-image
            name: maas-parameters
            optional: true
      - name: RELATED_IMAGE_UBI_MINIMAL_IMAGE
        valueFrom:
          configMapKeyRef:
            key: maas-api-key-cleanup-image
            name: maas-parameters
            optional: true
      - name: MONITORING_NAMESPACE
        valueFrom:
          configMapKeyRef:
            key: monitoring-namespace
            name: maas-parameters
            optional: true
      image: quay.io/opendatahub/maas-controller@sha256:205be2293bd45e033f29d10d722f244cd49d0c721414ec66add84d8669c41648
      imagePullPolicy: Always
      livenessProbe:
        failureThreshold: 3
        httpGet:
          path: /healthz
          port: 8081
          scheme: HTTP
        initialDelaySeconds: 15
        periodSeconds: 20
        successThreshold: 1
        timeoutSeconds: 1
      name: manager
      ports:
      - containerPort: 8080
        name: metrics
        protocol: TCP
      readinessProbe:
        failureThreshold: 3
        httpGet:
          path: /readyz
          port: 8081
          scheme: HTTP
        initialDelaySeconds: 5
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 1
      resources:
        limits:
          cpu: 500m
          memory: 512Mi
        requests:
          cpu: 10m
          memory: 64Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        runAsUser: 1000670000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /tmp/k8s-webhook-server/serving-certs
        name: webhook-cert
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-6khrl
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    imagePullSecrets:
    - name: maas-controller-dockercfg-8fhhp
    nodeName: ip-10-0-140-210.ec2.internal
    preemptionPolicy: PreemptLowerPriority
    priority: 0
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1000670000
      runAsNonRoot: true
      seLinuxOptions:
        level: s0:c26,c10
      seccompProfile:
        type: RuntimeDefault
    serviceAccount: maas-controller
    serviceAccountName: maas-controller
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
      tolerationSeconds: 300
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 300
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - name: webhook-cert
      secret:
        defaultMode: 420
        secretName: maas-controller-webhook-cert
    - name: kube-api-access-6khrl
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:42:52Z"
      observedGeneration: 1
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:42:51Z"
      observedGeneration: 1
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T20:01:25Z"
      observedGeneration: 1
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T20:01:25Z"
      observedGeneration: 1
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:42:51Z"
      observedGeneration: 1
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 10m
        memory: 64Mi
      containerID: cri-o://b0d2f8d56e04c4172cc88ba3f1d4477e3156ba455fbbc1c8a17edcb037bfc441
      image: quay.io/opendatahub/maas-controller@sha256:205be2293bd45e033f29d10d722f244cd49d0c721414ec66add84d8669c41648
      imageID: quay.io/opendatahub/maas-controller@sha256:205be2293bd45e033f29d10d722f244cd49d0c721414ec66add84d8669c41648
      lastState:
        terminated:
          containerID: cri-o://cab43adcdf4a4f44a4465c7237ca093a611a6774f5d54bff87d7c03c767a6d7b
          exitCode: 1
          finishedAt: "2026-07-06T20:01:13Z"
          reason: Error
          startedAt: "2026-07-06T19:42:52Z"
      name: manager
      ready: true
      resources:
        limits:
          cpu: 500m
          memory: 512Mi
        requests:
          cpu: 10m
          memory: 64Mi
      restartCount: 1
      started: true
      state:
        running:
          startedAt: "2026-07-06T20:01:14Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          - 1000670000
          uid: 1000670000
      volumeMounts:
      - mountPath: /tmp/k8s-webhook-server/serving-certs
        name: webhook-cert
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-6khrl
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.0.140.210
    hostIPs:
    - ip: 10.0.140.210
    observedGeneration: 1
    phase: Running
    podIP: 10.133.0.47
    podIPs:
    - ip: 10.133.0.47
    qosClass: Burstable
    startTime: "2026-07-06T19:42:51Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.134.0.23/23"],"mac_address":"0a:58:0a:86:00:17","gateway_ips":["10.134.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.134.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.134.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.134.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.134.0.1"}],"ip_address":"10.134.0.23/23","gateway_ip":"10.134.0.1","role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.134.0.23"
            ],
            "mac": "0a:58:0a:86:00:17",
            "default": true,
            "dns": {}
        }]
      openshift.io/scc: restricted-v2
      seccomp.security.alpha.kubernetes.io/pod: runtime/default
      security.openshift.io/validated-scc-subject-type: user
    creationTimestamp: "2026-07-06T19:35:05Z"
    generateName: model-serving-api-54d89bd5fc-
    generation: 1
    labels:
      app: model-serving-api
      app.kubernetes.io/component: server
      app.kubernetes.io/name: model-serving-api
      app.kubernetes.io/part-of: odh-model-controller
      app.opendatahub.io/odh-model-controller: "true"
      pod-template-hash: 54d89bd5fc
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.ovn.org/pod-networks: {}
      manager: ip-10-0-128-19
      operation: Update
      subresource: status
      time: "2026-07-06T19:35:05Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:generateName: {}
          f:labels:
            .: {}
            f:app: {}
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/name: {}
            f:app.kubernetes.io/part-of: {}
            f:app.opendatahub.io/odh-model-controller: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"33e0be7a-3f66-4833-81a8-6a131edee31c"}: {}
        f:spec:
          f:containers:
            k:{"name":"server"}:
              .: {}
              f:env:
                .: {}
                k:{"name":"GATEWAY_LABEL_SELECTOR"}:
                  .: {}
                  f:name: {}
                k:{"name":"TLS_CERT_DIR"}:
                  .: {}
                  f:name: {}
                  f:value: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":8080,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
                k:{"containerPort":8443,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:readinessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:resources:
                .: {}
                f:limits:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:allowPrivilegeEscalation: {}
                f:capabilities:
                  .: {}
                  f:drop: {}
                f:readOnlyRootFilesystem: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/tls"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext:
            .: {}
            f:runAsNonRoot: {}
            f:seccompProfile:
              .: {}
              f:type: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:topologySpreadConstraints:
            .: {}
            k:{"topologyKey":"kubernetes.io/hostname","whenUnsatisfiable":"ScheduleAnyway"}:
              .: {}
              f:labelSelector: {}
              f:maxSkew: {}
              f:topologyKey: {}
              f:whenUnsatisfiable: {}
            k:{"topologyKey":"topology.kubernetes.io/zone","whenUnsatisfiable":"ScheduleAnyway"}:
              .: {}
              f:labelSelector: {}
              f:maxSkew: {}
              f:topologyKey: {}
              f:whenUnsatisfiable: {}
          f:volumes:
            .: {}
            k:{"name":"tls-certs"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-06T19:35:05Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2026-07-06T19:35:07Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              f:observedGeneration: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:observedGeneration: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.134.0.23"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-07-06T19:35:20Z"
    name: model-serving-api-54d89bd5fc-hfcvc
    namespace: opendatahub
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: model-serving-api-54d89bd5fc
      uid: 33e0be7a-3f66-4833-81a8-6a131edee31c
    resourceVersion: "14934"
    uid: 33121619-7ae6-4faa-bcec-db6ac3d2349e
  spec:
    containers:
    - env:
      - name: TLS_CERT_DIR
        value: /tls
      - name: GATEWAY_LABEL_SELECTOR
      image: quay.io/opendatahub/odh-model-serving-api:odh-v3.5-EA2
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 3
        httpGet:
          path: /healthz
          port: 8443
          scheme: HTTPS
        initialDelaySeconds: 5
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 1
      name: server
      ports:
      - containerPort: 8443
        name: https
        protocol: TCP
      - containerPort: 8080
        name: metrics
        protocol: TCP
      readinessProbe:
        failureThreshold: 3
        httpGet:
          path: /readyz
          port: 8443
          scheme: HTTPS
        initialDelaySeconds: 5
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 1
      resources:
        limits:
          cpu: 500m
          memory: 1Gi
        requests:
          cpu: 50m
          memory: 64Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        readOnlyRootFilesystem: true
        runAsUser: 1000670000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /tls
        name: tls-certs
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-kvchk
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    imagePullSecrets:
    - name: model-serving-api-dockercfg-7csq4
    nodeName: ip-10-0-128-19.ec2.internal
    preemptionPolicy: PreemptLowerPriority
    priority: 0
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1000670000
      runAsNonRoot: true
      seLinuxOptions:
        level: s0:c26,c10
      seccompProfile:
        type: RuntimeDefault
    serviceAccount: model-serving-api
    serviceAccountName: model-serving-api
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
      tolerationSeconds: 300
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 300
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    topologySpreadConstraints:
    - labelSelector:
        matchLabels:
          app: model-serving-api
          app.kubernetes.io/component: server
          app.kubernetes.io/name: model-serving-api
          app.kubernetes.io/part-of: odh-model-controller
      maxSkew: 1
      topologyKey: topology.kubernetes.io/zone
      whenUnsatisfiable: ScheduleAnyway
    - labelSelector:
        matchLabels:
          app: model-serving-api
          app.kubernetes.io/component: server
          app.kubernetes.io/name: model-serving-api
          app.kubernetes.io/part-of: odh-model-controller
      maxSkew: 1
      topologyKey: kubernetes.io/hostname
      whenUnsatisfiable: ScheduleAnyway
    volumes:
    - name: tls-certs
      secret:
        defaultMode: 420
        secretName: model-serving-api-tls
    - name: kube-api-access-kvchk
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:35:09Z"
      observedGeneration: 1
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:35:05Z"
      observedGeneration: 1
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:35:20Z"
      observedGeneration: 1
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:35:20Z"
      observedGeneration: 1
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:35:05Z"
      observedGeneration: 1
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 50m
        memory: 64Mi
      containerID: cri-o://864d7759f98aebabaeae63e600a559c152f77d157c8dbdae40a2cbafc5b7212b
      image: quay.io/opendatahub/odh-model-serving-api:odh-v3.5-EA2
      imageID: quay.io/opendatahub/odh-model-serving-api@sha256:1929e79badf1d62e5b70ce54c9e7d8ade0b0d411b05d72a032ce2f1bb84dce69
      lastState: {}
      name: server
      ready: true
      resources:
        limits:
          cpu: 500m
          memory: 1Gi
        requests:
          cpu: 50m
          memory: 64Mi
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-07-06T19:35:09Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          - 1000670000
          uid: 1000670000
      volumeMounts:
      - mountPath: /tls
        name: tls-certs
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-kvchk
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.0.128.19
    hostIPs:
    - ip: 10.0.128.19
    observedGeneration: 1
    phase: Running
    podIP: 10.134.0.23
    podIPs:
    - ip: 10.134.0.23
    qosClass: Burstable
    startTime: "2026-07-06T19:35:05Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.133.0.24/23"],"mac_address":"0a:58:0a:85:00:18","gateway_ips":["10.133.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.133.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.133.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.133.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.133.0.1"}],"ip_address":"10.133.0.24/23","gateway_ip":"10.133.0.1","role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.133.0.24"
            ],
            "mac": "0a:58:0a:85:00:18",
            "default": true,
            "dns": {}
        }]
      kubectl.kubernetes.io/default-container: manager
      openshift.io/scc: restricted-v2
      seccomp.security.alpha.kubernetes.io/pod: runtime/default
      security.openshift.io/validated-scc-subject-type: user
    creationTimestamp: "2026-07-06T19:35:04Z"
    generateName: odh-model-controller-7998c67dc4-
    generation: 1
    labels:
      app: odh-model-controller
      app.kubernetes.io/part-of: odh-model-controller
      app.opendatahub.io/odh-model-controller: "true"
      control-plane: odh-model-controller
      pod-template-hash: 7998c67dc4
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.ovn.org/pod-networks: {}
      manager: ip-10-0-140-210
      operation: Update
      subresource: status
      time: "2026-07-06T19:35:04Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:kubectl.kubernetes.io/default-container: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:app: {}
            f:app.kubernetes.io/part-of: {}
            f:app.opendatahub.io/odh-model-controller: {}
            f:control-plane: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"87810188-3371-4c98-a831-458bab341279"}: {}
        f:spec:
          f:containers:
            k:{"name":"manager"}:
              .: {}
              f:args: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"KSERVE_STATE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"MODELREGISTRY_STATE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"NIM_STATE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"POD_NAMESPACE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":9443,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:readinessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:resources:
                .: {}
                f:limits:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:allowPrivilegeEscalation: {}
                f:capabilities:
                  .: {}
                  f:drop: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/tmp/k8s-webhook-server/serving-certs"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext:
            .: {}
            f:runAsNonRoot: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:volumes:
            .: {}
            k:{"name":"cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-06T19:35:04Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2026-07-06T19:35:05Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              f:observedGeneration: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:observedGeneration: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.133.0.24"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-07-06T20:01:25Z"
    name: odh-model-controller-7998c67dc4-dwcht
    namespace: opendatahub
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: odh-model-controller-7998c67dc4
      uid: 87810188-3371-4c98-a831-458bab341279
    resourceVersion: "42393"
    uid: ad4f0481-d168-4170-a987-3b55ec7c2a6c
  spec:
    containers:
    - args:
      - --metrics-bind-address=:8080
      - --leader-elect
      - --health-probe-bind-address=:8081
      command:
      - /manager
      env:
      - name: POD_NAMESPACE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
      - name: NIM_STATE
        value: managed
      - name: KSERVE_STATE
        value: managed
      - name: MODELREGISTRY_STATE
        value: removed
      image: quay.io/opendatahub/odh-model-controller:odh-v3.5-EA2
      imagePullPolicy: Always
      livenessProbe:
        failureThreshold: 3
        httpGet:
          path: /healthz
          port: 8081
          scheme: HTTP
        initialDelaySeconds: 15
        periodSeconds: 20
        successThreshold: 1
        timeoutSeconds: 1
      name: manager
      ports:
      - containerPort: 9443
        name: webhook-server
        protocol: TCP
      readinessProbe:
        failureThreshold: 3
        httpGet:
          path: /readyz
          port: 8081
          scheme: HTTP
        initialDelaySeconds: 5
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 1
      resources:
        limits:
          cpu: 500m
          memory: 2Gi
        requests:
          cpu: 10m
          memory: 64Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        runAsUser: 1000670000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /tmp/k8s-webhook-server/serving-certs
        name: cert
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-5v8tz
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    imagePullSecrets:
    - name: odh-model-controller-dockercfg-zhgl2
    nodeName: ip-10-0-140-210.ec2.internal
    preemptionPolicy: PreemptLowerPriority
    priority: 0
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1000670000
      runAsNonRoot: true
      seLinuxOptions:
        level: s0:c26,c10
      seccompProfile:
        type: RuntimeDefault
    serviceAccount: odh-model-controller
    serviceAccountName: odh-model-controller
    terminationGracePeriodSeconds: 10
    tolerations:
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
      tolerationSeconds: 300
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 300
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - name: cert
      secret:
        defaultMode: 420
        secretName: odh-model-controller-webhook-cert
    - name: kube-api-access-5v8tz
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:35:10Z"
      observedGeneration: 1
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:35:04Z"
      observedGeneration: 1
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T20:01:25Z"
      observedGeneration: 1
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T20:01:25Z"
      observedGeneration: 1
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:35:04Z"
      observedGeneration: 1
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 10m
        memory: 64Mi
      containerID: cri-o://bb4ab76aca04036dd4d864e002edb7248f847fd78285c194935d6e6b8d100b0e
      image: quay.io/opendatahub/odh-model-controller:odh-v3.5-EA2
      imageID: quay.io/opendatahub/odh-model-controller@sha256:1e2397cbb77c598f2eaff55caa3f0ef39f9f499bc7388d4d92be8d2a5d5ff121
      lastState:
        terminated:
          containerID: cri-o://69eda11469d228df6166cb6836503232847ec2ac7fa1eb8f158223072c0f32c9
          exitCode: 1
          finishedAt: "2026-07-06T20:01:13Z"
          reason: Error
          startedAt: "2026-07-06T19:35:10Z"
      name: manager
      ready: true
      resources:
        limits:
          cpu: 500m
          memory: 2Gi
        requests:
          cpu: 10m
          memory: 64Mi
      restartCount: 1
      started: true
      state:
        running:
          startedAt: "2026-07-06T20:01:14Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          - 1000670000
          uid: 1000670000
      volumeMounts:
      - mountPath: /tmp/k8s-webhook-server/serving-certs
        name: cert
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-5v8tz
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.0.140.210
    hostIPs:
    - ip: 10.0.140.210
    observedGeneration: 1
    phase: Running
    podIP: 10.133.0.24
    podIPs:
    - ip: 10.133.0.24
    qosClass: Burstable
    startTime: "2026-07-06T19:35:04Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      alm-examples: |-
        [
          {
            "apiVersion": "datasciencecluster.opendatahub.io/v2",
            "kind": "DataScienceCluster",
            "metadata": {
              "labels": {
                "app.kubernetes.io/name": "datasciencecluster"
              },
              "name": "default-dsc"
            },
            "spec": {
              "components": {
                "aipipelines": {
                  "managementState": "Managed"
                },
                "dashboard": {
                  "managementState": "Managed"
                },
                "feastoperator": {
                  "managementState": "Managed"
                },
                "kserve": {
                  "managementState": "Managed",
                  "nim": {
                    "managementState": "Managed"
                  },
                  "rawDeploymentServiceConfig": "Headed",
                  "wva": {
                    "managementState": "Removed"
                  }
                },
                "kueue": {
                  "managementState": "Removed"
                },
                "llamastackoperator": {
                  "managementState": "Removed"
                },
                "mlflowoperator": {
                  "managementState": "Removed"
                },
                "modelregistry": {
                  "managementState": "Managed",
                  "registriesNamespace": "odh-model-registries"
                },
                "ogx": {
                  "managementState": "Removed"
                },
                "ray": {
                  "managementState": "Managed"
                },
                "sparkoperator": {
                  "managementState": "Removed"
                },
                "trainer": {
                  "managementState": "Managed"
                },
                "trainingoperator": {
                  "managementState": "Removed"
                },
                "trustyai": {
                  "managementState": "Managed"
                },
                "workbenches": {
                  "managementState": "Managed"
                }
              }
            }
          },
          {
            "apiVersion": "dscinitialization.opendatahub.io/v2",
            "kind": "DSCInitialization",
            "metadata": {
              "labels": {
                "app.kubernetes.io/name": "dscinitialization"
              },
              "name": "default-dsci"
            },
            "spec": {
              "applicationsNamespace": "opendatahub",
              "monitoring": {
                "managementState": "Managed",
                "metrics": {},
                "namespace": "opendatahub"
              },
              "trustedCABundle": {
                "customCABundle": "",
                "managementState": "Managed"
              }
            }
          }
        ]
      capabilities: Full Lifecycle
      categories: AI/Machine Learning, Big Data
      certified: "False"
      containerImage: quay.io/opendatahub/opendatahub-operator:v3.5.0-ea.2
      createdAt: "2026-06-25T09:46:28Z"
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.133.0.22/23"],"mac_address":"0a:58:0a:85:00:16","gateway_ips":["10.133.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.133.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.133.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.133.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.133.0.1"}],"ip_address":"10.133.0.22/23","gateway_ip":"10.133.0.1","role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.133.0.22"
            ],
            "mac": "0a:58:0a:85:00:16",
            "default": true,
            "dns": {}
        }]
      kubectl.kubernetes.io/default-container: manager
      olm.operatorGroup: opendatahub-operatorgroup
      olm.operatorNamespace: opendatahub
      olm.targetNamespaces: ""
      olmcahash: 8958510e23fdcd0079a2de12e8cad98fd5750d1c7355fbc839ee9448a00bfda3
      openshift.io/scc: restricted-v2
      operatorframework.io/properties: '{"properties":[{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"Dashboard","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"DataSciencePipelines","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"FeastOperator","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"Kserve","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"Kueue","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"MLflowOperator","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"ModelController","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"ModelRegistry","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"ModelsAsService","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"OGX","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"Ray","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"SparkOperator","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"Trainer","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"TrainingOperator","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"TrustyAI","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"Workbenches","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"config.opendatahub.io","kind":"Platform","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"datasciencecluster.opendatahub.io","kind":"DataScienceCluster","version":"v1"}},{"type":"olm.gvk","value":{"group":"datasciencecluster.opendatahub.io","kind":"DataScienceCluster","version":"v2"}},{"type":"olm.gvk","value":{"group":"dscinitialization.opendatahub.io","kind":"DSCInitialization","version":"v1"}},{"type":"olm.gvk","value":{"group":"dscinitialization.opendatahub.io","kind":"DSCInitialization","version":"v2"}},{"type":"olm.gvk","value":{"group":"features.opendatahub.io","kind":"FeatureTracker","version":"v1"}},{"type":"olm.gvk","value":{"group":"infrastructure.opendatahub.io","kind":"HardwareProfile","version":"v1"}},{"type":"olm.gvk","value":{"group":"infrastructure.opendatahub.io","kind":"HardwareProfile","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"services.platform.opendatahub.io","kind":"Auth","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"services.platform.opendatahub.io","kind":"GatewayConfig","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"services.platform.opendatahub.io","kind":"Monitoring","version":"v1alpha1"}},{"type":"olm.package","value":{"packageName":"opendatahub-operator","version":"3.5.0-ea.2"}}]}'
      operators.operatorframework.io/builder: operator-sdk-v1.39.2
      operators.operatorframework.io/internal-objects: '["featuretrackers.features.opendatahub.io",
        "dashboards.components.platform.opendatahub.io", "datasciencepipelines.components.platform.opendatahub.io",
        "kserves.components.platform.opendatahub.io", "kueues.components.platform.opendatahub.io",
        "modelregistries.components.platform.opendatahub.io", "rays.components.platform.opendatahub.io",
        "trainingoperators.components.platform.opendatahub.io", "trustyais.components.platform.opendatahub.io",
        "workbenches.components.platform.opendatahub.io", "monitorings.services.platform.opendatahub.io",
        "modelcontrollers.components.platform.opendatahub.io", "feastoperators.components.platform.opendatahub.io",
        "ogxs.components.platform.opendatahub.io", "trainers.components.platform.opendatahub.io",
        "mlflowoperators.components.platform.opendatahub.io", "modelsasservices.components.platform.opendatahub.io",
        "sparkoperators.components.platform.opendatahub.io"]'
      operators.operatorframework.io/project_layout: go.kubebuilder.io/v4
      repository: https://github.com/opendatahub-io/opendatahub-operator
      seccomp.security.alpha.kubernetes.io/pod: runtime/default
      security.openshift.io/validated-scc-subject-type: serviceaccount
    creationTimestamp: "2026-07-06T19:34:44Z"
    generateName: opendatahub-operator-controller-manager-849ccdb5-
    generation: 1
    labels:
      control-plane: controller-manager
      name: opendatahub-operator
      pod-template-hash: 849ccdb5
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.ovn.org/pod-networks: {}
      manager: ip-10-0-140-210
      operation: Update
      subresource: status
      time: "2026-07-06T19:34:44Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:alm-examples: {}
            f:capabilities: {}
            f:categories: {}
            f:certified: {}
            f:containerImage: {}
            f:createdAt: {}
            f:kubectl.kubernetes.io/default-container: {}
            f:olm.operatorGroup: {}
            f:olm.operatorNamespace: {}
            f:olm.targetNamespaces: {}
            f:olmcahash: {}
            f:operatorframework.io/properties: {}
            f:operators.operatorframework.io/builder: {}
            f:operators.operatorframework.io/internal-objects: {}
            f:operators.operatorframework.io/project_layout: {}
            f:repository: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:control-plane: {}
            f:name: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"c5e14802-d6d4-4ab2-be06-260460115479"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
            f:podAntiAffinity:
              .: {}
              f:preferredDuringSchedulingIgnoredDuringExecution: {}
          f:containers:
            k:{"name":"manager"}:
              .: {}
              f:args: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"DEFAULT_CHARTS_PATH"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"DEFAULT_MANIFESTS_PATH"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"DISABLE_DSC_CONFIG"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"ODH_PLATFORM_TYPE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"OPERATOR_CONDITION_NAME"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"OPERATOR_NAMESPACE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"RELATED_IMAGE_ODH_KUBE_AUTH_PROXY_IMAGE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"RELATED_IMAGE_ODH_KUBE_RBAC_PROXY_IMAGE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":8080,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
                k:{"containerPort":9443,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:readinessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:resources:
                .: {}
                f:limits:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:allowPrivilegeEscalation: {}
                f:capabilities:
                  .: {}
                  f:drop: {}
                f:readOnlyRootFilesystem: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/apiserver.local.config/certificates"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/opt/manifests"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/tmp"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/tmp/k8s-webhook-server/serving-certs"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:initContainers:
            .: {}
            k:{"name":"copy-manifests"}:
              .: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:limits:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:allowPrivilegeEscalation: {}
                f:capabilities:
                  .: {}
                  f:drop: {}
                f:readOnlyRootFilesystem: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/opt/manifests"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext:
            .: {}
            f:runAsNonRoot: {}
            f:seccompProfile:
              .: {}
              f:type: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:volumes:
            .: {}
            k:{"name":"apiservice-cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:items: {}
                f:secretName: {}
            k:{"name":"cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"manifests"}:
              .: {}
              f:emptyDir:
                .: {}
                f:sizeLimit: {}
              f:name: {}
            k:{"name":"tmp"}:
              .: {}
              f:emptyDir:
                .: {}
                f:medium: {}
                f:sizeLimit: {}
              f:name: {}
            k:{"name":"webhook-cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:items: {}
                f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-06T19:34:44Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2026-07-06T19:34:45Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              f:observedGeneration: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:initContainerStatuses: {}
          f:observedGeneration: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.133.0.22"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-07-06T19:35:02Z"
    name: opendatahub-operator-controller-manager-849ccdb5-647c8
    namespace: opendatahub
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: opendatahub-operator-controller-manager-849ccdb5
      uid: c5e14802-d6d4-4ab2-be06-260460115479
    resourceVersion: "13634"
    uid: 07221883-95a2-47e6-b374-f979d64c2804
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchExpressions:
            - key: kubernetes.io/os
              operator: In
              values:
              - linux
      podAntiAffinity:
        preferredDuringSchedulingIgnoredDuringExecution:
        - podAffinityTerm:
            labelSelector:
              matchExpressions:
              - key: name
                operator: In
                values:
                - opendatahub-operator
            topologyKey: kubernetes.io/hostname
          weight: 100
    containers:
    - args:
      - --health-probe-bind-address=:8081
      - --metrics-bind-address=0.0.0.0:8080
      - --leader-elect
      command:
      - /manager
      env:
      - name: DISABLE_DSC_CONFIG
        value: "true"
      - name: OPERATOR_NAMESPACE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
      - name: DEFAULT_MANIFESTS_PATH
        value: /opt/manifests
      - name: DEFAULT_CHARTS_PATH
        value: /opt/charts
      - name: ODH_PLATFORM_TYPE
        value: OpenDataHub
      - name: RELATED_IMAGE_ODH_KUBE_AUTH_PROXY_IMAGE
        value: quay.io/opendatahub/odh-kube-auth-proxy:v3.5.0-ea.2
      - name: RELATED_IMAGE_ODH_KUBE_RBAC_PROXY_IMAGE
        value: quay.io/opendatahub/odh-kube-rbac-proxy:3.5.0-ea.2
      - name: OPERATOR_CONDITION_NAME
        value: opendatahub-operator.v3.5.0-ea.2
      image: quay.io/opendatahub/opendatahub-operator:v3.5.0-ea.2
      imagePullPolicy: Always
      livenessProbe:
        failureThreshold: 3
        httpGet:
          path: /healthz
          port: 8081
          scheme: HTTP
        initialDelaySeconds: 15
        periodSeconds: 20
        successThreshold: 1
        timeoutSeconds: 1
      name: manager
      ports:
      - containerPort: 9443
        name: webhook-server
        protocol: TCP
      - containerPort: 8080
        name: http
        protocol: TCP
      readinessProbe:
        failureThreshold: 3
        httpGet:
          path: /readyz
          port: 8081
          scheme: HTTP
        initialDelaySeconds: 5
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 1
      resources:
        limits:
          cpu: "1"
          memory: 4Gi
        requests:
          cpu: 100m
          memory: 780Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        readOnlyRootFilesystem: true
        runAsUser: 1000670000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /tmp/k8s-webhook-server/serving-certs
        name: webhook-cert
      - mountPath: /opt/manifests
        name: manifests
      - mountPath: /tmp
        name: tmp
      - mountPath: /apiserver.local.config/certificates
        name: apiservice-cert
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-s9lls
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    imagePullSecrets:
    - name: opendatahub-operator-controller-manager-dockercfg-pk84c
    initContainers:
    - command:
      - cp
      - -r
      - /opt/manifests-template/.
      - /opt/manifests/
      image: quay.io/opendatahub/opendatahub-operator:v3.5.0-ea.2
      imagePullPolicy: Always
      name: copy-manifests
      resources:
        limits:
          cpu: 100m
          memory: 256Mi
        requests:
          cpu: 10m
          memory: 64Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        readOnlyRootFilesystem: true
        runAsUser: 1000670000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /opt/manifests
        name: manifests
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-s9lls
        readOnly: true
    nodeName: ip-10-0-140-210.ec2.internal
    preemptionPolicy: PreemptLowerPriority
    priority: 0
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1000670000
      runAsNonRoot: true
      seLinuxOptions:
        level: s0:c26,c10
      seccompProfile:
        type: RuntimeDefault
    serviceAccount: opendatahub-operator-controller-manager
    serviceAccountName: opendatahub-operator-controller-manager
    terminationGracePeriodSeconds: 10
    tolerations:
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
      tolerationSeconds: 300
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 300
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - name: cert
      secret:
        defaultMode: 420
        secretName: opendatahub-operator-controller-webhook-cert
    - emptyDir:
        sizeLimit: 256Mi
      name: manifests
    - emptyDir:
        medium: Memory
        sizeLimit: 10Mi
      name: tmp
    - name: apiservice-cert
      secret:
        defaultMode: 420
        items:
        - key: tls.crt
          path: apiserver.crt
        - key: tls.key
          path: apiserver.key
        secretName: opendatahub-operator-controller-manager-service-cert
    - name: webhook-cert
      secret:
        defaultMode: 420
        items:
        - key: tls.crt
          path: tls.crt
        - key: tls.key
          path: tls.key
        secretName: opendatahub-operator-controller-manager-service-cert
    - name: kube-api-access-s9lls
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:34:48Z"
      observedGeneration: 1
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:34:50Z"
      observedGeneration: 1
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:35:02Z"
      observedGeneration: 1
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:35:02Z"
      observedGeneration: 1
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:34:44Z"
      observedGeneration: 1
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 100m
        memory: 780Mi
      containerID: cri-o://184648d461a4d76a374dc6bba2e3fe85ef1cd7dc71ee5ecea6d981278d849aab
      image: quay.io/opendatahub/opendatahub-operator:v3.5.0-ea.2
      imageID: quay.io/opendatahub/opendatahub-operator@sha256:62da7505a0bd1ed943c21ede46ffb0281020eba3b56657307e73ccf96a4ee006
      lastState: {}
      name: manager
      ready: true
      resources:
        limits:
          cpu: "1"
          memory: 4Gi
        requests:
          cpu: 100m
          memory: 780Mi
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-07-06T19:34:50Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          - 1000670000
          uid: 1000670000
      volumeMounts:
      - mountPath: /tmp/k8s-webhook-server/serving-certs
        name: webhook-cert
      - mountPath: /opt/manifests
        name: manifests
      - mountPath: /tmp
        name: tmp
      - mountPath: /apiserver.local.config/certificates
        name: apiservice-cert
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-s9lls
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.0.140.210
    hostIPs:
    - ip: 10.0.140.210
    initContainerStatuses:
    - allocatedResources:
        cpu: 10m
        memory: 64Mi
      containerID: cri-o://93d89df96a467743208661a1f1a17958d191c57d0fc867546bb4fd9ded39a4e9
      image: quay.io/opendatahub/opendatahub-operator:v3.5.0-ea.2
      imageID: quay.io/opendatahub/opendatahub-operator@sha256:62da7505a0bd1ed943c21ede46ffb0281020eba3b56657307e73ccf96a4ee006
      lastState: {}
      name: copy-manifests
      ready: true
      resources:
        limits:
          cpu: 100m
          memory: 256Mi
        requests:
          cpu: 10m
          memory: 64Mi
      restartCount: 0
      started: false
      state:
        terminated:
          containerID: cri-o://93d89df96a467743208661a1f1a17958d191c57d0fc867546bb4fd9ded39a4e9
          exitCode: 0
          finishedAt: "2026-07-06T19:34:49Z"
          reason: Completed
          startedAt: "2026-07-06T19:34:48Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          - 1000670000
          uid: 1000670000
      volumeMounts:
      - mountPath: /opt/manifests
        name: manifests
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-s9lls
        readOnly: true
        recursiveReadOnly: Disabled
    observedGeneration: 1
    phase: Running
    podIP: 10.133.0.22
    podIPs:
    - ip: 10.133.0.22
    qosClass: Burstable
    startTime: "2026-07-06T19:34:44Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      alm-examples: |-
        [
          {
            "apiVersion": "datasciencecluster.opendatahub.io/v2",
            "kind": "DataScienceCluster",
            "metadata": {
              "labels": {
                "app.kubernetes.io/name": "datasciencecluster"
              },
              "name": "default-dsc"
            },
            "spec": {
              "components": {
                "aipipelines": {
                  "managementState": "Managed"
                },
                "dashboard": {
                  "managementState": "Managed"
                },
                "feastoperator": {
                  "managementState": "Managed"
                },
                "kserve": {
                  "managementState": "Managed",
                  "nim": {
                    "managementState": "Managed"
                  },
                  "rawDeploymentServiceConfig": "Headed",
                  "wva": {
                    "managementState": "Removed"
                  }
                },
                "kueue": {
                  "managementState": "Removed"
                },
                "llamastackoperator": {
                  "managementState": "Removed"
                },
                "mlflowoperator": {
                  "managementState": "Removed"
                },
                "modelregistry": {
                  "managementState": "Managed",
                  "registriesNamespace": "odh-model-registries"
                },
                "ogx": {
                  "managementState": "Removed"
                },
                "ray": {
                  "managementState": "Managed"
                },
                "sparkoperator": {
                  "managementState": "Removed"
                },
                "trainer": {
                  "managementState": "Managed"
                },
                "trainingoperator": {
                  "managementState": "Removed"
                },
                "trustyai": {
                  "managementState": "Managed"
                },
                "workbenches": {
                  "managementState": "Managed"
                }
              }
            }
          },
          {
            "apiVersion": "dscinitialization.opendatahub.io/v2",
            "kind": "DSCInitialization",
            "metadata": {
              "labels": {
                "app.kubernetes.io/name": "dscinitialization"
              },
              "name": "default-dsci"
            },
            "spec": {
              "applicationsNamespace": "opendatahub",
              "monitoring": {
                "managementState": "Managed",
                "metrics": {},
                "namespace": "opendatahub"
              },
              "trustedCABundle": {
                "customCABundle": "",
                "managementState": "Managed"
              }
            }
          }
        ]
      capabilities: Full Lifecycle
      categories: AI/Machine Learning, Big Data
      certified: "False"
      containerImage: quay.io/opendatahub/opendatahub-operator:v3.5.0-ea.2
      createdAt: "2026-06-25T09:46:28Z"
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.134.0.21/23"],"mac_address":"0a:58:0a:86:00:15","gateway_ips":["10.134.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.134.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.134.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.134.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.134.0.1"}],"ip_address":"10.134.0.21/23","gateway_ip":"10.134.0.1","role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.134.0.21"
            ],
            "mac": "0a:58:0a:86:00:15",
            "default": true,
            "dns": {}
        }]
      kubectl.kubernetes.io/default-container: manager
      olm.operatorGroup: opendatahub-operatorgroup
      olm.operatorNamespace: opendatahub
      olm.targetNamespaces: ""
      olmcahash: 8958510e23fdcd0079a2de12e8cad98fd5750d1c7355fbc839ee9448a00bfda3
      openshift.io/scc: restricted-v2
      operatorframework.io/properties: '{"properties":[{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"Dashboard","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"DataSciencePipelines","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"FeastOperator","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"Kserve","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"Kueue","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"MLflowOperator","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"ModelController","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"ModelRegistry","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"ModelsAsService","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"OGX","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"Ray","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"SparkOperator","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"Trainer","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"TrainingOperator","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"TrustyAI","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"Workbenches","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"config.opendatahub.io","kind":"Platform","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"datasciencecluster.opendatahub.io","kind":"DataScienceCluster","version":"v1"}},{"type":"olm.gvk","value":{"group":"datasciencecluster.opendatahub.io","kind":"DataScienceCluster","version":"v2"}},{"type":"olm.gvk","value":{"group":"dscinitialization.opendatahub.io","kind":"DSCInitialization","version":"v1"}},{"type":"olm.gvk","value":{"group":"dscinitialization.opendatahub.io","kind":"DSCInitialization","version":"v2"}},{"type":"olm.gvk","value":{"group":"features.opendatahub.io","kind":"FeatureTracker","version":"v1"}},{"type":"olm.gvk","value":{"group":"infrastructure.opendatahub.io","kind":"HardwareProfile","version":"v1"}},{"type":"olm.gvk","value":{"group":"infrastructure.opendatahub.io","kind":"HardwareProfile","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"services.platform.opendatahub.io","kind":"Auth","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"services.platform.opendatahub.io","kind":"GatewayConfig","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"services.platform.opendatahub.io","kind":"Monitoring","version":"v1alpha1"}},{"type":"olm.package","value":{"packageName":"opendatahub-operator","version":"3.5.0-ea.2"}}]}'
      operators.operatorframework.io/builder: operator-sdk-v1.39.2
      operators.operatorframework.io/internal-objects: '["featuretrackers.features.opendatahub.io",
        "dashboards.components.platform.opendatahub.io", "datasciencepipelines.components.platform.opendatahub.io",
        "kserves.components.platform.opendatahub.io", "kueues.components.platform.opendatahub.io",
        "modelregistries.components.platform.opendatahub.io", "rays.components.platform.opendatahub.io",
        "trainingoperators.components.platform.opendatahub.io", "trustyais.components.platform.opendatahub.io",
        "workbenches.components.platform.opendatahub.io", "monitorings.services.platform.opendatahub.io",
        "modelcontrollers.components.platform.opendatahub.io", "feastoperators.components.platform.opendatahub.io",
        "ogxs.components.platform.opendatahub.io", "trainers.components.platform.opendatahub.io",
        "mlflowoperators.components.platform.opendatahub.io", "modelsasservices.components.platform.opendatahub.io",
        "sparkoperators.components.platform.opendatahub.io"]'
      operators.operatorframework.io/project_layout: go.kubebuilder.io/v4
      repository: https://github.com/opendatahub-io/opendatahub-operator
      seccomp.security.alpha.kubernetes.io/pod: runtime/default
      security.openshift.io/validated-scc-subject-type: serviceaccount
    creationTimestamp: "2026-07-06T19:34:44Z"
    generateName: opendatahub-operator-controller-manager-849ccdb5-
    generation: 1
    labels:
      control-plane: controller-manager
      name: opendatahub-operator
      pod-template-hash: 849ccdb5
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.ovn.org/pod-networks: {}
      manager: ip-10-0-128-19
      operation: Update
      subresource: status
      time: "2026-07-06T19:34:44Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:alm-examples: {}
            f:capabilities: {}
            f:categories: {}
            f:certified: {}
            f:containerImage: {}
            f:createdAt: {}
            f:kubectl.kubernetes.io/default-container: {}
            f:olm.operatorGroup: {}
            f:olm.operatorNamespace: {}
            f:olm.targetNamespaces: {}
            f:olmcahash: {}
            f:operatorframework.io/properties: {}
            f:operators.operatorframework.io/builder: {}
            f:operators.operatorframework.io/internal-objects: {}
            f:operators.operatorframework.io/project_layout: {}
            f:repository: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:control-plane: {}
            f:name: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"c5e14802-d6d4-4ab2-be06-260460115479"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
            f:podAntiAffinity:
              .: {}
              f:preferredDuringSchedulingIgnoredDuringExecution: {}
          f:containers:
            k:{"name":"manager"}:
              .: {}
              f:args: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"DEFAULT_CHARTS_PATH"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"DEFAULT_MANIFESTS_PATH"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"DISABLE_DSC_CONFIG"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"ODH_PLATFORM_TYPE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"OPERATOR_CONDITION_NAME"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"OPERATOR_NAMESPACE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"RELATED_IMAGE_ODH_KUBE_AUTH_PROXY_IMAGE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"RELATED_IMAGE_ODH_KUBE_RBAC_PROXY_IMAGE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":8080,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
                k:{"containerPort":9443,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:readinessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:resources:
                .: {}
                f:limits:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:allowPrivilegeEscalation: {}
                f:capabilities:
                  .: {}
                  f:drop: {}
                f:readOnlyRootFilesystem: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/apiserver.local.config/certificates"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/opt/manifests"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/tmp"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/tmp/k8s-webhook-server/serving-certs"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:initContainers:
            .: {}
            k:{"name":"copy-manifests"}:
              .: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:limits:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:allowPrivilegeEscalation: {}
                f:capabilities:
                  .: {}
                  f:drop: {}
                f:readOnlyRootFilesystem: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/opt/manifests"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext:
            .: {}
            f:runAsNonRoot: {}
            f:seccompProfile:
              .: {}
              f:type: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:volumes:
            .: {}
            k:{"name":"apiservice-cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:items: {}
                f:secretName: {}
            k:{"name":"cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"manifests"}:
              .: {}
              f:emptyDir:
                .: {}
                f:sizeLimit: {}
              f:name: {}
            k:{"name":"tmp"}:
              .: {}
              f:emptyDir:
                .: {}
                f:medium: {}
                f:sizeLimit: {}
              f:name: {}
            k:{"name":"webhook-cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:items: {}
                f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-06T19:34:44Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2026-07-06T19:34:45Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              f:observedGeneration: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:initContainerStatuses: {}
          f:observedGeneration: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.134.0.21"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-07-06T19:35:02Z"
    name: opendatahub-operator-controller-manager-849ccdb5-t5wvf
    namespace: opendatahub
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: opendatahub-operator-controller-manager-849ccdb5
      uid: c5e14802-d6d4-4ab2-be06-260460115479
    resourceVersion: "13625"
    uid: 193a5cc4-3b9e-411a-9b84-84d9f2971e5a
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchExpressions:
            - key: kubernetes.io/os
              operator: In
              values:
              - linux
      podAntiAffinity:
        preferredDuringSchedulingIgnoredDuringExecution:
        - podAffinityTerm:
            labelSelector:
              matchExpressions:
              - key: name
                operator: In
                values:
                - opendatahub-operator
            topologyKey: kubernetes.io/hostname
          weight: 100
    containers:
    - args:
      - --health-probe-bind-address=:8081
      - --metrics-bind-address=0.0.0.0:8080
      - --leader-elect
      command:
      - /manager
      env:
      - name: DISABLE_DSC_CONFIG
        value: "true"
      - name: OPERATOR_NAMESPACE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
      - name: DEFAULT_MANIFESTS_PATH
        value: /opt/manifests
      - name: DEFAULT_CHARTS_PATH
        value: /opt/charts
      - name: ODH_PLATFORM_TYPE
        value: OpenDataHub
      - name: RELATED_IMAGE_ODH_KUBE_AUTH_PROXY_IMAGE
        value: quay.io/opendatahub/odh-kube-auth-proxy:v3.5.0-ea.2
      - name: RELATED_IMAGE_ODH_KUBE_RBAC_PROXY_IMAGE
        value: quay.io/opendatahub/odh-kube-rbac-proxy:3.5.0-ea.2
      - name: OPERATOR_CONDITION_NAME
        value: opendatahub-operator.v3.5.0-ea.2
      image: quay.io/opendatahub/opendatahub-operator:v3.5.0-ea.2
      imagePullPolicy: Always
      livenessProbe:
        failureThreshold: 3
        httpGet:
          path: /healthz
          port: 8081
          scheme: HTTP
        initialDelaySeconds: 15
        periodSeconds: 20
        successThreshold: 1
        timeoutSeconds: 1
      name: manager
      ports:
      - containerPort: 9443
        name: webhook-server
        protocol: TCP
      - containerPort: 8080
        name: http
        protocol: TCP
      readinessProbe:
        failureThreshold: 3
        httpGet:
          path: /readyz
          port: 8081
          scheme: HTTP
        initialDelaySeconds: 5
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 1
      resources:
        limits:
          cpu: "1"
          memory: 4Gi
        requests:
          cpu: 100m
          memory: 780Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        readOnlyRootFilesystem: true
        runAsUser: 1000670000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /tmp/k8s-webhook-server/serving-certs
        name: webhook-cert
      - mountPath: /opt/manifests
        name: manifests
      - mountPath: /tmp
        name: tmp
      - mountPath: /apiserver.local.config/certificates
        name: apiservice-cert
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-jq476
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    imagePullSecrets:
    - name: opendatahub-operator-controller-manager-dockercfg-pk84c
    initContainers:
    - command:
      - cp
      - -r
      - /opt/manifests-template/.
      - /opt/manifests/
      image: quay.io/opendatahub/opendatahub-operator:v3.5.0-ea.2
      imagePullPolicy: Always
      name: copy-manifests
      resources:
        limits:
          cpu: 100m
          memory: 256Mi
        requests:
          cpu: 10m
          memory: 64Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        readOnlyRootFilesystem: true
        runAsUser: 1000670000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /opt/manifests
        name: manifests
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-jq476
        readOnly: true
    nodeName: ip-10-0-128-19.ec2.internal
    preemptionPolicy: PreemptLowerPriority
    priority: 0
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1000670000
      runAsNonRoot: true
      seLinuxOptions:
        level: s0:c26,c10
      seccompProfile:
        type: RuntimeDefault
    serviceAccount: opendatahub-operator-controller-manager
    serviceAccountName: opendatahub-operator-controller-manager
    terminationGracePeriodSeconds: 10
    tolerations:
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
      tolerationSeconds: 300
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 300
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - name: cert
      secret:
        defaultMode: 420
        secretName: opendatahub-operator-controller-webhook-cert
    - emptyDir:
        sizeLimit: 256Mi
      name: manifests
    - emptyDir:
        medium: Memory
        sizeLimit: 10Mi
      name: tmp
    - name: apiservice-cert
      secret:
        defaultMode: 420
        items:
        - key: tls.crt
          path: apiserver.crt
        - key: tls.key
          path: apiserver.key
        secretName: opendatahub-operator-controller-manager-service-cert
    - name: webhook-cert
      secret:
        defaultMode: 420
        items:
        - key: tls.crt
          path: tls.crt
        - key: tls.key
          path: tls.key
        secretName: opendatahub-operator-controller-manager-service-cert
    - name: kube-api-access-jq476
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:34:49Z"
      observedGeneration: 1
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:34:50Z"
      observedGeneration: 1
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:35:02Z"
      observedGeneration: 1
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:35:02Z"
      observedGeneration: 1
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:34:44Z"
      observedGeneration: 1
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 100m
        memory: 780Mi
      containerID: cri-o://ba60ed52d6167fe9eb9d71c3409e3627f4f66615fa14b5b70253678e8231ed75
      image: quay.io/opendatahub/opendatahub-operator:v3.5.0-ea.2
      imageID: quay.io/opendatahub/opendatahub-operator@sha256:62da7505a0bd1ed943c21ede46ffb0281020eba3b56657307e73ccf96a4ee006
      lastState: {}
      name: manager
      ready: true
      resources:
        limits:
          cpu: "1"
          memory: 4Gi
        requests:
          cpu: 100m
          memory: 780Mi
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-07-06T19:34:50Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          - 1000670000
          uid: 1000670000
      volumeMounts:
      - mountPath: /tmp/k8s-webhook-server/serving-certs
        name: webhook-cert
      - mountPath: /opt/manifests
        name: manifests
      - mountPath: /tmp
        name: tmp
      - mountPath: /apiserver.local.config/certificates
        name: apiservice-cert
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-jq476
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.0.128.19
    hostIPs:
    - ip: 10.0.128.19
    initContainerStatuses:
    - allocatedResources:
        cpu: 10m
        memory: 64Mi
      containerID: cri-o://c5d3fe9ac2234003e4d43c966b5ecd33891f737ba9d2a2d6ee9d17203d74e60a
      image: quay.io/opendatahub/opendatahub-operator:v3.5.0-ea.2
      imageID: quay.io/opendatahub/opendatahub-operator@sha256:62da7505a0bd1ed943c21ede46ffb0281020eba3b56657307e73ccf96a4ee006
      lastState: {}
      name: copy-manifests
      ready: true
      resources:
        limits:
          cpu: 100m
          memory: 256Mi
        requests:
          cpu: 10m
          memory: 64Mi
      restartCount: 0
      started: false
      state:
        terminated:
          containerID: cri-o://c5d3fe9ac2234003e4d43c966b5ecd33891f737ba9d2a2d6ee9d17203d74e60a
          exitCode: 0
          finishedAt: "2026-07-06T19:34:49Z"
          reason: Completed
          startedAt: "2026-07-06T19:34:48Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          - 1000670000
          uid: 1000670000
      volumeMounts:
      - mountPath: /opt/manifests
        name: manifests
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-jq476
        readOnly: true
        recursiveReadOnly: Disabled
    observedGeneration: 1
    phase: Running
    podIP: 10.134.0.21
    podIPs:
    - ip: 10.134.0.21
    qosClass: Burstable
    startTime: "2026-07-06T19:34:44Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      alm-examples: |-
        [
          {
            "apiVersion": "datasciencecluster.opendatahub.io/v2",
            "kind": "DataScienceCluster",
            "metadata": {
              "labels": {
                "app.kubernetes.io/name": "datasciencecluster"
              },
              "name": "default-dsc"
            },
            "spec": {
              "components": {
                "aipipelines": {
                  "managementState": "Managed"
                },
                "dashboard": {
                  "managementState": "Managed"
                },
                "feastoperator": {
                  "managementState": "Managed"
                },
                "kserve": {
                  "managementState": "Managed",
                  "nim": {
                    "managementState": "Managed"
                  },
                  "rawDeploymentServiceConfig": "Headed",
                  "wva": {
                    "managementState": "Removed"
                  }
                },
                "kueue": {
                  "managementState": "Removed"
                },
                "llamastackoperator": {
                  "managementState": "Removed"
                },
                "mlflowoperator": {
                  "managementState": "Removed"
                },
                "modelregistry": {
                  "managementState": "Managed",
                  "registriesNamespace": "odh-model-registries"
                },
                "ogx": {
                  "managementState": "Removed"
                },
                "ray": {
                  "managementState": "Managed"
                },
                "sparkoperator": {
                  "managementState": "Removed"
                },
                "trainer": {
                  "managementState": "Managed"
                },
                "trainingoperator": {
                  "managementState": "Removed"
                },
                "trustyai": {
                  "managementState": "Managed"
                },
                "workbenches": {
                  "managementState": "Managed"
                }
              }
            }
          },
          {
            "apiVersion": "dscinitialization.opendatahub.io/v2",
            "kind": "DSCInitialization",
            "metadata": {
              "labels": {
                "app.kubernetes.io/name": "dscinitialization"
              },
              "name": "default-dsci"
            },
            "spec": {
              "applicationsNamespace": "opendatahub",
              "monitoring": {
                "managementState": "Managed",
                "metrics": {},
                "namespace": "opendatahub"
              },
              "trustedCABundle": {
                "customCABundle": "",
                "managementState": "Managed"
              }
            }
          }
        ]
      capabilities: Full Lifecycle
      categories: AI/Machine Learning, Big Data
      certified: "False"
      containerImage: quay.io/opendatahub/opendatahub-operator:v3.5.0-ea.2
      createdAt: "2026-06-25T09:46:28Z"
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.132.0.25/23"],"mac_address":"0a:58:0a:84:00:19","gateway_ips":["10.132.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.132.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.132.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.132.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.132.0.1"}],"ip_address":"10.132.0.25/23","gateway_ip":"10.132.0.1","role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.132.0.25"
            ],
            "mac": "0a:58:0a:84:00:19",
            "default": true,
            "dns": {}
        }]
      kubectl.kubernetes.io/default-container: manager
      olm.operatorGroup: opendatahub-operatorgroup
      olm.operatorNamespace: opendatahub
      olm.targetNamespaces: ""
      olmcahash: 8958510e23fdcd0079a2de12e8cad98fd5750d1c7355fbc839ee9448a00bfda3
      openshift.io/scc: restricted-v2
      operatorframework.io/properties: '{"properties":[{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"Dashboard","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"DataSciencePipelines","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"FeastOperator","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"Kserve","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"Kueue","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"MLflowOperator","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"ModelController","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"ModelRegistry","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"ModelsAsService","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"OGX","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"Ray","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"SparkOperator","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"Trainer","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"TrainingOperator","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"TrustyAI","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"components.platform.opendatahub.io","kind":"Workbenches","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"config.opendatahub.io","kind":"Platform","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"datasciencecluster.opendatahub.io","kind":"DataScienceCluster","version":"v1"}},{"type":"olm.gvk","value":{"group":"datasciencecluster.opendatahub.io","kind":"DataScienceCluster","version":"v2"}},{"type":"olm.gvk","value":{"group":"dscinitialization.opendatahub.io","kind":"DSCInitialization","version":"v1"}},{"type":"olm.gvk","value":{"group":"dscinitialization.opendatahub.io","kind":"DSCInitialization","version":"v2"}},{"type":"olm.gvk","value":{"group":"features.opendatahub.io","kind":"FeatureTracker","version":"v1"}},{"type":"olm.gvk","value":{"group":"infrastructure.opendatahub.io","kind":"HardwareProfile","version":"v1"}},{"type":"olm.gvk","value":{"group":"infrastructure.opendatahub.io","kind":"HardwareProfile","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"services.platform.opendatahub.io","kind":"Auth","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"services.platform.opendatahub.io","kind":"GatewayConfig","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"services.platform.opendatahub.io","kind":"Monitoring","version":"v1alpha1"}},{"type":"olm.package","value":{"packageName":"opendatahub-operator","version":"3.5.0-ea.2"}}]}'
      operators.operatorframework.io/builder: operator-sdk-v1.39.2
      operators.operatorframework.io/internal-objects: '["featuretrackers.features.opendatahub.io",
        "dashboards.components.platform.opendatahub.io", "datasciencepipelines.components.platform.opendatahub.io",
        "kserves.components.platform.opendatahub.io", "kueues.components.platform.opendatahub.io",
        "modelregistries.components.platform.opendatahub.io", "rays.components.platform.opendatahub.io",
        "trainingoperators.components.platform.opendatahub.io", "trustyais.components.platform.opendatahub.io",
        "workbenches.components.platform.opendatahub.io", "monitorings.services.platform.opendatahub.io",
        "modelcontrollers.components.platform.opendatahub.io", "feastoperators.components.platform.opendatahub.io",
        "ogxs.components.platform.opendatahub.io", "trainers.components.platform.opendatahub.io",
        "mlflowoperators.components.platform.opendatahub.io", "modelsasservices.components.platform.opendatahub.io",
        "sparkoperators.components.platform.opendatahub.io"]'
      operators.operatorframework.io/project_layout: go.kubebuilder.io/v4
      repository: https://github.com/opendatahub-io/opendatahub-operator
      seccomp.security.alpha.kubernetes.io/pod: runtime/default
      security.openshift.io/validated-scc-subject-type: serviceaccount
    creationTimestamp: "2026-07-06T19:34:44Z"
    generateName: opendatahub-operator-controller-manager-849ccdb5-
    generation: 1
    labels:
      control-plane: controller-manager
      name: opendatahub-operator
      pod-template-hash: 849ccdb5
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.ovn.org/pod-networks: {}
      manager: ip-10-0-131-35
      operation: Update
      subresource: status
      time: "2026-07-06T19:34:44Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:alm-examples: {}
            f:capabilities: {}
            f:categories: {}
            f:certified: {}
            f:containerImage: {}
            f:createdAt: {}
            f:kubectl.kubernetes.io/default-container: {}
            f:olm.operatorGroup: {}
            f:olm.operatorNamespace: {}
            f:olm.targetNamespaces: {}
            f:olmcahash: {}
            f:operatorframework.io/properties: {}
            f:operators.operatorframework.io/builder: {}
            f:operators.operatorframework.io/internal-objects: {}
            f:operators.operatorframework.io/project_layout: {}
            f:repository: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:control-plane: {}
            f:name: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"c5e14802-d6d4-4ab2-be06-260460115479"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
            f:podAntiAffinity:
              .: {}
              f:preferredDuringSchedulingIgnoredDuringExecution: {}
          f:containers:
            k:{"name":"manager"}:
              .: {}
              f:args: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"DEFAULT_CHARTS_PATH"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"DEFAULT_MANIFESTS_PATH"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"DISABLE_DSC_CONFIG"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"ODH_PLATFORM_TYPE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"OPERATOR_CONDITION_NAME"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"OPERATOR_NAMESPACE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"RELATED_IMAGE_ODH_KUBE_AUTH_PROXY_IMAGE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"RELATED_IMAGE_ODH_KUBE_RBAC_PROXY_IMAGE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":8080,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
                k:{"containerPort":9443,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:readinessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:resources:
                .: {}
                f:limits:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:allowPrivilegeEscalation: {}
                f:capabilities:
                  .: {}
                  f:drop: {}
                f:readOnlyRootFilesystem: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/apiserver.local.config/certificates"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/opt/manifests"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/tmp"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/tmp/k8s-webhook-server/serving-certs"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:initContainers:
            .: {}
            k:{"name":"copy-manifests"}:
              .: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:limits:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:allowPrivilegeEscalation: {}
                f:capabilities:
                  .: {}
                  f:drop: {}
                f:readOnlyRootFilesystem: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/opt/manifests"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext:
            .: {}
            f:runAsNonRoot: {}
            f:seccompProfile:
              .: {}
              f:type: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:volumes:
            .: {}
            k:{"name":"apiservice-cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:items: {}
                f:secretName: {}
            k:{"name":"cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"manifests"}:
              .: {}
              f:emptyDir:
                .: {}
                f:sizeLimit: {}
              f:name: {}
            k:{"name":"tmp"}:
              .: {}
              f:emptyDir:
                .: {}
                f:medium: {}
                f:sizeLimit: {}
              f:name: {}
            k:{"name":"webhook-cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:items: {}
                f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-06T19:34:44Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2026-07-06T19:34:45Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              f:observedGeneration: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:initContainerStatuses: {}
          f:observedGeneration: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.132.0.25"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-07-06T20:01:25Z"
    name: opendatahub-operator-controller-manager-849ccdb5-xh49b
    namespace: opendatahub
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: opendatahub-operator-controller-manager-849ccdb5
      uid: c5e14802-d6d4-4ab2-be06-260460115479
    resourceVersion: "42392"
    uid: 8bf46798-5ef5-4e66-b54a-5928af921668
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchExpressions:
            - key: kubernetes.io/os
              operator: In
              values:
              - linux
      podAntiAffinity:
        preferredDuringSchedulingIgnoredDuringExecution:
        - podAffinityTerm:
            labelSelector:
              matchExpressions:
              - key: name
                operator: In
                values:
                - opendatahub-operator
            topologyKey: kubernetes.io/hostname
          weight: 100
    containers:
    - args:
      - --health-probe-bind-address=:8081
      - --metrics-bind-address=0.0.0.0:8080
      - --leader-elect
      command:
      - /manager
      env:
      - name: DISABLE_DSC_CONFIG
        value: "true"
      - name: OPERATOR_NAMESPACE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
      - name: DEFAULT_MANIFESTS_PATH
        value: /opt/manifests
      - name: DEFAULT_CHARTS_PATH
        value: /opt/charts
      - name: ODH_PLATFORM_TYPE
        value: OpenDataHub
      - name: RELATED_IMAGE_ODH_KUBE_AUTH_PROXY_IMAGE
        value: quay.io/opendatahub/odh-kube-auth-proxy:v3.5.0-ea.2
      - name: RELATED_IMAGE_ODH_KUBE_RBAC_PROXY_IMAGE
        value: quay.io/opendatahub/odh-kube-rbac-proxy:3.5.0-ea.2
      - name: OPERATOR_CONDITION_NAME
        value: opendatahub-operator.v3.5.0-ea.2
      image: quay.io/opendatahub/opendatahub-operator:v3.5.0-ea.2
      imagePullPolicy: Always
      livenessProbe:
        failureThreshold: 3
        httpGet:
          path: /healthz
          port: 8081
          scheme: HTTP
        initialDelaySeconds: 15
        periodSeconds: 20
        successThreshold: 1
        timeoutSeconds: 1
      name: manager
      ports:
      - containerPort: 9443
        name: webhook-server
        protocol: TCP
      - containerPort: 8080
        name: http
        protocol: TCP
      readinessProbe:
        failureThreshold: 3
        httpGet:
          path: /readyz
          port: 8081
          scheme: HTTP
        initialDelaySeconds: 5
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 1
      resources:
        limits:
          cpu: "1"
          memory: 4Gi
        requests:
          cpu: 100m
          memory: 780Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        readOnlyRootFilesystem: true
        runAsUser: 1000670000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /tmp/k8s-webhook-server/serving-certs
        name: webhook-cert
      - mountPath: /opt/manifests
        name: manifests
      - mountPath: /tmp
        name: tmp
      - mountPath: /apiserver.local.config/certificates
        name: apiservice-cert
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-6mz9k
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    imagePullSecrets:
    - name: opendatahub-operator-controller-manager-dockercfg-pk84c
    initContainers:
    - command:
      - cp
      - -r
      - /opt/manifests-template/.
      - /opt/manifests/
      image: quay.io/opendatahub/opendatahub-operator:v3.5.0-ea.2
      imagePullPolicy: Always
      name: copy-manifests
      resources:
        limits:
          cpu: 100m
          memory: 256Mi
        requests:
          cpu: 10m
          memory: 64Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        readOnlyRootFilesystem: true
        runAsUser: 1000670000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /opt/manifests
        name: manifests
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-6mz9k
        readOnly: true
    nodeName: ip-10-0-131-35.ec2.internal
    preemptionPolicy: PreemptLowerPriority
    priority: 0
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1000670000
      runAsNonRoot: true
      seLinuxOptions:
        level: s0:c26,c10
      seccompProfile:
        type: RuntimeDefault
    serviceAccount: opendatahub-operator-controller-manager
    serviceAccountName: opendatahub-operator-controller-manager
    terminationGracePeriodSeconds: 10
    tolerations:
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
      tolerationSeconds: 300
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 300
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - name: cert
      secret:
        defaultMode: 420
        secretName: opendatahub-operator-controller-webhook-cert
    - emptyDir:
        sizeLimit: 256Mi
      name: manifests
    - emptyDir:
        medium: Memory
        sizeLimit: 10Mi
      name: tmp
    - name: apiservice-cert
      secret:
        defaultMode: 420
        items:
        - key: tls.crt
          path: apiserver.crt
        - key: tls.key
          path: apiserver.key
        secretName: opendatahub-operator-controller-manager-service-cert
    - name: webhook-cert
      secret:
        defaultMode: 420
        items:
        - key: tls.crt
          path: tls.crt
        - key: tls.key
          path: tls.key
        secretName: opendatahub-operator-controller-manager-service-cert
    - name: kube-api-access-6mz9k
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:34:48Z"
      observedGeneration: 1
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:34:49Z"
      observedGeneration: 1
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T20:01:25Z"
      observedGeneration: 1
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T20:01:25Z"
      observedGeneration: 1
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:34:44Z"
      observedGeneration: 1
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 100m
        memory: 780Mi
      containerID: cri-o://e0a495f9908925eb090f12290c006319542da5cc06e79496fc7f611438104fa5
      image: quay.io/opendatahub/opendatahub-operator:v3.5.0-ea.2
      imageID: quay.io/opendatahub/opendatahub-operator@sha256:62da7505a0bd1ed943c21ede46ffb0281020eba3b56657307e73ccf96a4ee006
      lastState:
        terminated:
          containerID: cri-o://4fd91659dccbc1345f987f9346058b6888007f157b3b886590c0b9f2530c6446
          exitCode: 1
          finishedAt: "2026-07-06T20:01:13Z"
          reason: Error
          startedAt: "2026-07-06T19:34:50Z"
      name: manager
      ready: true
      resources:
        limits:
          cpu: "1"
          memory: 4Gi
        requests:
          cpu: 100m
          memory: 780Mi
      restartCount: 1
      started: true
      state:
        running:
          startedAt: "2026-07-06T20:01:14Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          - 1000670000
          uid: 1000670000
      volumeMounts:
      - mountPath: /tmp/k8s-webhook-server/serving-certs
        name: webhook-cert
      - mountPath: /opt/manifests
        name: manifests
      - mountPath: /tmp
        name: tmp
      - mountPath: /apiserver.local.config/certificates
        name: apiservice-cert
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-6mz9k
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.0.131.35
    hostIPs:
    - ip: 10.0.131.35
    initContainerStatuses:
    - allocatedResources:
        cpu: 10m
        memory: 64Mi
      containerID: cri-o://19daa032c71c87cc2c0dba75f1621d13d347161857081ba468e32594ac5ec6bc
      image: quay.io/opendatahub/opendatahub-operator:v3.5.0-ea.2
      imageID: quay.io/opendatahub/opendatahub-operator@sha256:62da7505a0bd1ed943c21ede46ffb0281020eba3b56657307e73ccf96a4ee006
      lastState: {}
      name: copy-manifests
      ready: true
      resources:
        limits:
          cpu: 100m
          memory: 256Mi
        requests:
          cpu: 10m
          memory: 64Mi
      restartCount: 0
      started: false
      state:
        terminated:
          containerID: cri-o://19daa032c71c87cc2c0dba75f1621d13d347161857081ba468e32594ac5ec6bc
          exitCode: 0
          finishedAt: "2026-07-06T19:34:49Z"
          reason: Completed
          startedAt: "2026-07-06T19:34:48Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          - 1000670000
          uid: 1000670000
      volumeMounts:
      - mountPath: /opt/manifests
        name: manifests
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-6mz9k
        readOnly: true
        recursiveReadOnly: Disabled
    observedGeneration: 1
    phase: Running
    podIP: 10.132.0.25
    podIPs:
    - ip: 10.132.0.25
    qosClass: Burstable
    startTime: "2026-07-06T19:34:44Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.133.0.38/23"],"mac_address":"0a:58:0a:85:00:26","gateway_ips":["10.133.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.133.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.133.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.133.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.133.0.1"}],"ip_address":"10.133.0.38/23","gateway_ip":"10.133.0.1","role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.133.0.38"
            ],
            "mac": "0a:58:0a:85:00:26",
            "default": true,
            "dns": {}
        }]
      openshift.io/scc: restricted-v2
      seccomp.security.alpha.kubernetes.io/pod: runtime/default
      security.openshift.io/validated-scc-subject-type: user
    creationTimestamp: "2026-07-06T19:38:04Z"
    generateName: postgres-69fb4594cf-
    generation: 1
    labels:
      app: postgres
      pod-template-hash: 69fb4594cf
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.ovn.org/pod-networks: {}
      manager: ip-10-0-140-210
      operation: Update
      subresource: status
      time: "2026-07-06T19:38:04Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:generateName: {}
          f:labels:
            .: {}
            f:app: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"3d840da3-ccf8-4fba-ac77-742fc86c3ec7"}: {}
        f:spec:
          f:containers:
            k:{"name":"postgres"}:
              .: {}
              f:env:
                .: {}
                k:{"name":"POSTGRESQL_DATABASE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:secretKeyRef: {}
                k:{"name":"POSTGRESQL_PASSWORD"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:secretKeyRef: {}
                k:{"name":"POSTGRESQL_USER"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:secretKeyRef: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":5432,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:protocol: {}
              f:readinessProbe:
                .: {}
                f:exec:
                  .: {}
                  f:command: {}
                f:failureThreshold: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:resources:
                .: {}
                f:limits:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/var/lib/pgsql/data"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:terminationGracePeriodSeconds: {}
          f:volumes:
            .: {}
            k:{"name":"data"}:
              .: {}
              f:emptyDir: {}
              f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-07-06T19:38:04Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2026-07-06T19:38:05Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              f:observedGeneration: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:observedGeneration: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:observedGeneration: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.133.0.38"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-07-06T19:38:16Z"
    name: postgres-69fb4594cf-x4bc6
    namespace: opendatahub
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: postgres-69fb4594cf
      uid: 3d840da3-ccf8-4fba-ac77-742fc86c3ec7
    resourceVersion: "20247"
    uid: 4dc186e7-740b-460f-bc7b-c0dc8393a23e
  spec:
    containers:
    - env:
      - name: POSTGRESQL_USER
        valueFrom:
          secretKeyRef:
            key: POSTGRES_USER
            name: postgres-creds
      - name: POSTGRESQL_PASSWORD
        valueFrom:
          secretKeyRef:
            key: POSTGRES_PASSWORD
            name: postgres-creds
      - name: POSTGRESQL_DATABASE
        valueFrom:
          secretKeyRef:
            key: POSTGRES_DB
            name: postgres-creds
      image: registry.redhat.io/rhel9/postgresql-16:latest
      imagePullPolicy: Always
      name: postgres
      ports:
      - containerPort: 5432
        protocol: TCP
      readinessProbe:
        exec:
          command:
          - /usr/libexec/check-container
        failureThreshold: 3
        initialDelaySeconds: 5
        periodSeconds: 5
        successThreshold: 1
        timeoutSeconds: 1
      resources:
        limits:
          cpu: 500m
          memory: 512Mi
        requests:
          cpu: 100m
          memory: 256Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        runAsNonRoot: true
        runAsUser: 1000670000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /var/lib/pgsql/data
        name: data
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-zwwzz
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    imagePullSecrets:
    - name: default-dockercfg-kjdhc
    nodeName: ip-10-0-140-210.ec2.internal
    preemptionPolicy: PreemptLowerPriority
    priority: 0
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1000670000
      seLinuxOptions:
        level: s0:c26,c10
      seccompProfile:
        type: RuntimeDefault
    serviceAccount: default
    serviceAccountName: default
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
      tolerationSeconds: 300
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 300
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - emptyDir: {}
      name: data
    - name: kube-api-access-zwwzz
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:38:10Z"
      observedGeneration: 1
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:38:04Z"
      observedGeneration: 1
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:38:16Z"
      observedGeneration: 1
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:38:16Z"
      observedGeneration: 1
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-07-06T19:38:04Z"
      observedGeneration: 1
      status: "True"
      type: PodScheduled
    containerStatuses:
    - allocatedResources:
        cpu: 100m
        memory: 256Mi
      containerID: cri-o://5d645610aea3e6ec90f74fa6e573e1b11c09f79163639cf3ade971f6aa97bf7a
      image: registry.redhat.io/rhel9/postgresql-16:latest
      imageID: registry.redhat.io/rhel9/postgresql-16@sha256:1149c78dbc442a419d6d9073dd5b60dd40d5639070b8cd8cd8dfab30ef88a913
      lastState: {}
      name: postgres
      ready: true
      resources:
        limits:
          cpu: 500m
          memory: 512Mi
        requests:
          cpu: 100m
          memory: 256Mi
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-07-06T19:38:09Z"
      user:
        linux:
          gid: 0
          supplementalGroups:
          - 0
          - 1000670000
          uid: 1000670000
      volumeMounts:
      - mountPath: /var/lib/pgsql/data
        name: data
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-zwwzz
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.0.140.210
    hostIPs:
    - ip: 10.0.140.210
    observedGeneration: 1
    phase: Running
    podIP: 10.133.0.38
    podIPs:
    - ip: 10.133.0.38
    qosClass: Burstable
    startTime: "2026-07-06T19:38:04Z"
kind: PodList
metadata:
  resourceVersion: "52462"