---
apiVersion: apps/v1
items:
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "3"
      deployment.kubernetes.io/max-replicas: "4"
      deployment.kubernetes.io/revision: "1"
    creationTimestamp: "2026-10-22T16:49:23Z"
    generation: 1
    labels:
      app: kas-connection-checker
      pod-template-hash: 58bf4fb6bf
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
          f:labels:
            .: {}
            f:app: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"69d59128-9a68-4f3c-9855-e3a0e5568aaa"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:labels:
                .: {}
                f:app: {}
                f:pod-template-hash: {}
            f:spec:
              f:automountServiceAccountToken: {}
              f:containers:
                k:{"name":"connection-checker"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources:
                    .: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:readOnlyRootFilesystem: {}
                    f:runAsNonRoot: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
              f:dnsPolicy: {}
              f:priorityClassName: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:runAsUser: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:tolerations: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-10-22T16:49:23Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:fullyLabeledReplicas: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:terminatingReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-10-22T16:56:40Z"
    name: kas-connection-checker-58bf4fb6bf
    namespace: kube-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: kas-connection-checker
      uid: 69d59128-9a68-4f3c-9855-e3a0e5568aaa
    resourceVersion: "6939"
    uid: e33f8106-00e0-493b-a50b-596c04e2e989
  spec:
    replicas: 3
    selector:
      matchLabels:
        app: kas-connection-checker
        pod-template-hash: 58bf4fb6bf
    template:
      metadata:
        labels:
          app: kas-connection-checker
          pod-template-hash: 58bf4fb6bf
      spec:
        automountServiceAccountToken: true
        containers:
        - command:
          - /bin/sh
          - -c
          - |-
            #!/bin/sh
            ENDPOINT=/version
            CONFIGMAP_NAME=control-plane-connectivity-check
            NAMESPACE=kube-system
            while true; do
              TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)
              CACERT=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
              HTTP_CODE=$(curl --cacert ${CACERT} -s -o /dev/null -w "%{http_code}" \
                --connect-timeout 5 --max-time 10 \
                "https://kubernetes.default.svc${ENDPOINT}" 2>/dev/null)
              if [ "$HTTP_CODE" = "200" ]; then
                NOW=$(date -u +%Y-%m-%dT%H:%M:%SZ)
                curl --cacert ${CACERT} -s -o /dev/null \
                  -X PATCH \
                  -H "Authorization: Bearer ${TOKEN}" \
                  -H "Content-Type: application/strategic-merge-patch+json" \
                  --data "{\"data\":{\"lastSucceeded\":\"${NOW}\"}}" \
                  "https://kubernetes.default.svc/api/v1/namespaces/${NAMESPACE}/configmaps/${CONFIGMAP_NAME}" 2>/dev/null
              fi
              sleep 60
            done
          image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b53c02402f56fe6460a764c1d212022131d551f58d63936f1cc1cff6df5ac63c
          imagePullPolicy: IfNotPresent
          name: connection-checker
          resources:
            requests:
              cpu: 5m
              memory: 10Mi
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            readOnlyRootFilesystem: true
            runAsNonRoot: true
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: FallbackToLogsOnError
        dnsPolicy: ClusterFirst
        priorityClassName: system-node-critical
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          runAsUser: 1000
        serviceAccount: kas-connection-checker
        serviceAccountName: kas-connection-checker
        terminationGracePeriodSeconds: 30
        tolerations:
        - effect: NoSchedule
          operator: Exists
        - effect: NoExecute
          key: node.kubernetes.io/unreachable
          operator: Exists
          tolerationSeconds: 120
        - effect: NoExecute
          key: node.kubernetes.io/not-ready
          operator: Exists
          tolerationSeconds: 120
  status:
    availableReplicas: 3
    fullyLabeledReplicas: 3
    observedGeneration: 1
    readyReplicas: 3
    replicas: 3
    terminatingReplicas: 0
kind: ReplicaSetList
metadata:
  resourceVersion: "21552"