--- apiVersion: v1 kind: Pod metadata: annotations: cluster-autoscaler.kubernetes.io/enable-ds-eviction: "false" openshift.io/required-scc: privileged openshift.io/scc: privileged security.openshift.io/validated-scc-subject-type: serviceaccount creationTimestamp: "2026-06-11T21:42:33Z" generateName: aws-ebs-csi-driver-node- generation: 1 labels: app: aws-ebs-csi-driver-node controller-revision-hash: dd47486f4 pod-template-generation: "1" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:cluster-autoscaler.kubernetes.io/enable-ds-eviction: {} f:openshift.io/required-scc: {} f:target.workload.openshift.io/management: {} f:generateName: {} f:labels: .: {} f:app: {} f:controller-revision-hash: {} f:pod-template-generation: {} f:ownerReferences: .: {} k:{"uid":"f26505b3-ecb3-49b6-865f-76d86a6c6aad"}: {} f:spec: f:affinity: .: {} f:nodeAffinity: .: {} f:requiredDuringSchedulingIgnoredDuringExecution: {} f:containers: k:{"name":"csi-driver"}: .: {} f:args: {} f:env: .: {} k:{"name":"CSI_ENDPOINT"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:livenessProbe: .: {} f:failureThreshold: {} f:httpGet: .: {} f:host: {} f:path: {} f:port: {} f:scheme: {} f:initialDelaySeconds: {} f:periodSeconds: {} f:successThreshold: {} f:timeoutSeconds: {} f:name: {} f:ports: .: {} k:{"containerPort":10300,"protocol":"TCP"}: .: {} f:containerPort: {} f:hostPort: {} f:name: {} f:protocol: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:privileged: {} f:readOnlyRootFilesystem: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/csi"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/dev"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/etc/selinux"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/sys/fs"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/var/lib/kubelet"}: .: {} f:mountPath: {} f:mountPropagation: {} f:name: {} k:{"name":"csi-liveness-probe"}: .: {} f:args: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:readOnlyRootFilesystem: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/csi"}: .: {} f:mountPath: {} f:name: {} k:{"name":"csi-node-driver-registrar"}: .: {} f:args: {} f:image: {} f:imagePullPolicy: {} f:lifecycle: .: {} f:preStop: .: {} f:exec: .: {} f:command: {} f:livenessProbe: .: {} f:failureThreshold: {} f:httpGet: .: {} f:host: {} f:path: {} f:port: {} f:scheme: {} f:initialDelaySeconds: {} f:periodSeconds: {} f:successThreshold: {} f:timeoutSeconds: {} f:name: {} f:ports: .: {} k:{"containerPort":10309,"protocol":"TCP"}: .: {} f:containerPort: {} f:hostPort: {} f:name: {} f:protocol: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:privileged: {} f:readOnlyRootFilesystem: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/csi"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/registration"}: .: {} f:mountPath: {} f:name: {} f:dnsPolicy: {} f:enableServiceLinks: {} f:hostNetwork: {} f:nodeSelector: {} f:priorityClassName: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: {} f:serviceAccount: {} f:serviceAccountName: {} f:terminationGracePeriodSeconds: {} f:tolerations: {} f:volumes: .: {} k:{"name":"device-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"etc-selinux"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"kubelet-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"metrics-serving-cert"}: .: {} f:name: {} f:secret: .: {} f:defaultMode: {} f:secretName: {} k:{"name":"registration-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"socket-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"sys-fs"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} manager: kube-controller-manager operation: Update time: "2026-06-11T21:42:33Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"ContainersReady"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"Initialized"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodReadyToStartContainers"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodScheduled"}: f:observedGeneration: {} k:{"type":"Ready"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} f:containerStatuses: {} f:hostIP: {} f:hostIPs: {} f:observedGeneration: {} f:phase: {} f:podIP: {} f:podIPs: .: {} k:{"ip":"10.0.138.118"}: .: {} f:ip: {} f:startTime: {} manager: kubelet operation: Update subresource: status time: "2026-06-11T21:42:58Z" name: aws-ebs-csi-driver-node-h7bzz namespace: openshift-cluster-csi-drivers ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: DaemonSet name: aws-ebs-csi-driver-node uid: f26505b3-ecb3-49b6-865f-76d86a6c6aad resourceVersion: "6444" uid: 18b9b6f6-3aaa-4873-9f28-61a600fb1c00 spec: affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchFields: - key: metadata.name operator: In values: - ip-10-0-138-118.ec2.internal containers: - args: - node - --endpoint=$(CSI_ENDPOINT) - --logtostderr - --v=2 - --reserved-volume-attachments=1 env: - name: CSI_ENDPOINT value: unix:/csi/csi.sock image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9d7b66e10c907a8ceb940af24dfb8763d8c0d4ed97ee3125c1b7f5420b09dff1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 httpGet: host: 127.0.0.1 path: /healthz port: healthz scheme: HTTP initialDelaySeconds: 10 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 3 name: csi-driver ports: - containerPort: 10300 hostPort: 10300 name: healthz protocol: TCP resources: requests: cpu: 10m memory: 50Mi securityContext: privileged: true readOnlyRootFilesystem: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /var/lib/kubelet mountPropagation: Bidirectional name: kubelet-dir - mountPath: /csi name: socket-dir - mountPath: /dev name: device-dir - mountPath: /etc/selinux name: etc-selinux - mountPath: /sys/fs name: sys-fs - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-tn9sm readOnly: true - args: - --csi-address=/csi/csi.sock - --kubelet-registration-path=/var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock - --http-endpoint=127.0.0.1:10309 - --v=2 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3bcece71d1464a21eda05d57b252fbc67106f47e3c406c4217d248cdd84f7e75 imagePullPolicy: IfNotPresent lifecycle: preStop: exec: command: - /bin/sh - -c - rm -rf /registration/ebs.csi.aws.com-reg.sock /csi/csi.sock livenessProbe: failureThreshold: 5 httpGet: host: 127.0.0.1 path: /healthz port: rhealthz scheme: HTTP initialDelaySeconds: 10 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 3 name: csi-node-driver-registrar ports: - containerPort: 10309 hostPort: 10309 name: rhealthz protocol: TCP resources: requests: cpu: 10m memory: 50Mi securityContext: privileged: true readOnlyRootFilesystem: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /csi name: socket-dir - mountPath: /registration name: registration-dir - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-tn9sm readOnly: true - args: - --csi-address=/csi/csi.sock - --http-endpoint=127.0.0.1:10300 - --v=2 - --probe-timeout=3s image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ab88f2c42768ee3d62fe458c851cde4723159f2cb54fc423e0ef9d9dbffae22e imagePullPolicy: IfNotPresent name: csi-liveness-probe resources: requests: cpu: 10m memory: 50Mi securityContext: readOnlyRootFilesystem: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /csi name: socket-dir - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-tn9sm readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true hostNetwork: true imagePullSecrets: - name: aws-ebs-csi-driver-node-sa-dockercfg-rmbhf nodeName: ip-10-0-138-118.ec2.internal nodeSelector: kubernetes.io/os: linux preemptionPolicy: PreemptLowerPriority priority: 2000001000 priorityClassName: system-node-critical restartPolicy: Always schedulerName: default-scheduler securityContext: {} serviceAccount: aws-ebs-csi-driver-node-sa serviceAccountName: aws-ebs-csi-driver-node-sa terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: - hostPath: path: /var/lib/kubelet type: Directory name: kubelet-dir - hostPath: path: /var/lib/kubelet/plugins/ebs.csi.aws.com/ type: DirectoryOrCreate name: socket-dir - hostPath: path: /var/lib/kubelet/plugins_registry/ type: Directory name: registration-dir - hostPath: path: /dev type: Directory name: device-dir - hostPath: path: /etc/selinux type: DirectoryOrCreate name: etc-selinux - hostPath: path: /sys/fs type: Directory name: sys-fs - name: metrics-serving-cert secret: defaultMode: 420 secretName: aws-ebs-csi-driver-node-metrics-serving-cert - name: kube-api-access-tn9sm projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-11T21:42:58Z" observedGeneration: 1 status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-11T21:42:34Z" observedGeneration: 1 status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-11T21:42:58Z" observedGeneration: 1 status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-11T21:42:58Z" observedGeneration: 1 status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-11T21:42:33Z" observedGeneration: 1 status: "True" type: PodScheduled containerStatuses: - allocatedResources: cpu: 10m memory: 50Mi containerID: cri-o://740937253ff0372e9edd33e242fe9477c3d1df9bc2cf97b19f498e2936fb2546 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9d7b66e10c907a8ceb940af24dfb8763d8c0d4ed97ee3125c1b7f5420b09dff1 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9d7b66e10c907a8ceb940af24dfb8763d8c0d4ed97ee3125c1b7f5420b09dff1 lastState: {} name: csi-driver ready: true resources: requests: cpu: 10m memory: 50Mi restartCount: 0 started: true state: running: startedAt: "2026-06-11T21:42:45Z" user: linux: gid: 0 supplementalGroups: - 0 uid: 0 volumeMounts: - mountPath: /var/lib/kubelet name: kubelet-dir - mountPath: /csi name: socket-dir - mountPath: /dev name: device-dir - mountPath: /etc/selinux name: etc-selinux - mountPath: /sys/fs name: sys-fs - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-tn9sm readOnly: true recursiveReadOnly: Disabled - allocatedResources: cpu: 10m memory: 50Mi containerID: cri-o://814e842f4708cc027c32000d8190d0f9765b609fcfa6d24b5eff0b63f437529b image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ab88f2c42768ee3d62fe458c851cde4723159f2cb54fc423e0ef9d9dbffae22e imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0ec84c1ff3cc519a88983126502b5259b81eeb23a81b7e8f14ad67905c8f2ece lastState: {} name: csi-liveness-probe ready: true resources: requests: cpu: 10m memory: 50Mi restartCount: 0 started: true state: running: startedAt: "2026-06-11T21:42:58Z" user: linux: gid: 0 supplementalGroups: - 0 uid: 0 volumeMounts: - mountPath: /csi name: socket-dir - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-tn9sm readOnly: true recursiveReadOnly: Disabled - allocatedResources: cpu: 10m memory: 50Mi containerID: cri-o://d36a8c66cb266ebb5aa7be00797a7f559ab8981034f6f785bac24afd98a80c3d image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3bcece71d1464a21eda05d57b252fbc67106f47e3c406c4217d248cdd84f7e75 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3bcece71d1464a21eda05d57b252fbc67106f47e3c406c4217d248cdd84f7e75 lastState: {} name: csi-node-driver-registrar ready: true resources: requests: cpu: 10m memory: 50Mi restartCount: 0 started: true state: running: startedAt: "2026-06-11T21:42:46Z" user: linux: gid: 0 supplementalGroups: - 0 uid: 0 volumeMounts: - mountPath: /csi name: socket-dir - mountPath: /registration name: registration-dir - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-tn9sm readOnly: true recursiveReadOnly: Disabled hostIP: 10.0.138.118 hostIPs: - ip: 10.0.138.118 observedGeneration: 1 phase: Running podIP: 10.0.138.118 podIPs: - ip: 10.0.138.118 qosClass: Burstable startTime: "2026-06-11T21:42:34Z"