{ "apiVersion": "v1", "items": [ { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "4", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "10a621efdab27aa90b01fcf89bd2df3726b2bba5cbe41704b97280f33fdcf9bf" }, "creationTimestamp": "2026-04-24T12:28:51Z", "generation": 4, "labels": { "app": "klusterlet-agent", "open-cluster-management.io/created-by-klusterlet": "klusterlet", "pod-template-hash": "7765cd58dd" }, "name": "klusterlet-agent-7765cd58dd", "namespace": "open-cluster-management-agent", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "klusterlet-agent", "uid": "6365aa2d-4d7f-4c4e-baec-11a7461ee639" } ], "resourceVersion": "41523", "uid": "ef6c00ef-c4da-400d-b690-c66e2af8e94c" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "klusterlet-agent", "pod-template-hash": "7765cd58dd" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "klusterlet-agent", "open-cluster-management.io/created-by-klusterlet": "klusterlet", "pod-template-hash": "7765cd58dd" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "klusterlet-agent" ] } ] }, "topologyKey": "failure-domain.beta.kubernetes.io/zone" }, "weight": 70 }, { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "klusterlet-agent" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 30 } ] } }, "containers": [ { "args": [ "/registration-operator", "agent", "--spoke-cluster-name=clusterpool418-dcxsj", "--bootstrap-kubeconfig=/spoke/bootstrap/kubeconfig", "--agent-id=f625c3d0-d226-4ea9-8836-5ecc17bf49fa", "--workload-source-driver=kube", "--workload-source-config=/spoke/hub-kubeconfig/kubeconfig", "--kube-api-qps=50", "--kube-api-burst=100", "--reserved-cluster-claim-suffixes=openshift.io,open-cluster-management.io" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:38f65ed06100af8f55530fd79ed5064f3839863caec0f610385abeea0e3c1efb", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "klusterlet-agent", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "2m", "memory": "16Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/spoke/bootstrap", "name": "bootstrap-secret", "readOnly": true }, { "mountPath": "/spoke/hub-kubeconfig", "name": "hub-kubeconfig" }, { "mountPath": "/tmp", "name": "tmpdir" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "klusterlet-work-sa", "serviceAccountName": "klusterlet-work-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/infra", "operator": "Exists" } ], "volumes": [ { "name": "bootstrap-secret", "secret": { "defaultMode": 420, "secretName": "bootstrap-hub-kubeconfig" } }, { "emptyDir": { "medium": "Memory" }, "name": "hub-kubeconfig" }, { "emptyDir": {}, "name": "tmpdir" } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "4", "deployment.kubernetes.io/revision": "2", "operator.openshift.io/spec-hash": "2248c675c60d3f281df8632c3da280aca8f77439a42f8abc292504dd32d3805c" }, "creationTimestamp": "2026-04-24T12:29:52Z", "generation": 3, "labels": { "app": "klusterlet-agent", "open-cluster-management.io/created-by-klusterlet": "klusterlet", "pod-template-hash": "7fd95b6457" }, "name": "klusterlet-agent-7fd95b6457", "namespace": "open-cluster-management-agent", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "klusterlet-agent", "uid": "6365aa2d-4d7f-4c4e-baec-11a7461ee639" } ], "resourceVersion": "41514", "uid": "56670ffc-c461-442a-a3e2-bbf9d607b26b" }, "spec": { "replicas": 3, "selector": { "matchLabels": { "app": "klusterlet-agent", "pod-template-hash": "7fd95b6457" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "klusterlet-agent", "open-cluster-management.io/created-by-klusterlet": "klusterlet", "pod-template-hash": "7fd95b6457" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "klusterlet-agent" ] } ] }, "topologyKey": "failure-domain.beta.kubernetes.io/zone" }, "weight": 70 }, { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "klusterlet-agent" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 30 } ] } }, "containers": [ { "args": [ "/registration-operator", "agent", "--spoke-cluster-name=clusterpool418-dcxsj", "--bootstrap-kubeconfig=/spoke/bootstrap/kubeconfig", "--agent-id=f625c3d0-d226-4ea9-8836-5ecc17bf49fa", "--workload-source-driver=kube", "--workload-source-config=/spoke/hub-kubeconfig/kubeconfig", "--kube-api-qps=50", "--kube-api-burst=100", "--reserved-cluster-claim-suffixes=openshift.io,open-cluster-management.io" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:38f65ed06100af8f55530fd79ed5064f3839863caec0f610385abeea0e3c1efb", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "klusterlet-agent", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "2m", "memory": "16Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/spoke/bootstrap", "name": "bootstrap-secret", "readOnly": true }, { "mountPath": "/spoke/hub-kubeconfig", "name": "hub-kubeconfig" }, { "mountPath": "/tmp", "name": "tmpdir" } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "klusterlet-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "klusterlet-work-sa", "serviceAccountName": "klusterlet-work-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/infra", "operator": "Exists" } ], "volumes": [ { "name": "bootstrap-secret", "secret": { "defaultMode": 420, "secretName": "bootstrap-hub-kubeconfig" } }, { "emptyDir": { "medium": "Memory" }, "name": "hub-kubeconfig" }, { "emptyDir": {}, "name": "tmpdir" } ] } } }, "status": { "availableReplicas": 3, "fullyLabeledReplicas": 3, "observedGeneration": 3, "readyReplicas": 3, "replicas": 3 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "6cc56648017f38eb0613ab36c2079636eaa0e4b91ddd37e9c3c1fb8ebe60f8ac" }, "creationTimestamp": "2026-04-24T12:25:31Z", "generation": 2, "labels": { "app": "klusterlet", "pod-template-hash": "bb8dcf8" }, "name": "klusterlet-bb8dcf8", "namespace": "open-cluster-management-agent", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "klusterlet", "uid": "3c857895-0444-440a-b289-291a5de0a4ce" } ], "resourceVersion": "39711", "uid": "400c9f83-51e1-4bd1-b101-46b4253429c9" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "klusterlet", "pod-template-hash": "bb8dcf8" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "klusterlet", "pod-template-hash": "bb8dcf8" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "klusterlet" ] } ] }, "topologyKey": "failure-domain.beta.kubernetes.io/zone" }, "weight": 70 }, { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "klusterlet" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 30 } ] } }, "containers": [ { "args": [ "/registration-operator", "klusterlet" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:38f65ed06100af8f55530fd79ed5064f3839863caec0f610385abeea0e3c1efb", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "klusterlet", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "memory": "2Gi" }, "requests": { "cpu": "50m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmpdir" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "klusterlet", "serviceAccountName": "klusterlet", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/infra", "operator": "Exists" } ], "volumes": [ { "emptyDir": {}, "name": "tmpdir" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2", "operator.openshift.io/spec-hash": "1c33c4582ce6cacfb66aff03ac8c075e3bc0a56a51e6c5ebc52a4a9d34d41a93" }, "creationTimestamp": "2026-04-24T12:28:56Z", "generation": 1, "labels": { "app": "klusterlet", "pod-template-hash": "cff685879" }, "name": "klusterlet-cff685879", "namespace": "open-cluster-management-agent", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "klusterlet", "uid": "3c857895-0444-440a-b289-291a5de0a4ce" } ], "resourceVersion": "39635", "uid": "55a85b2c-de9d-42e9-9bb4-a58af0a5ce41" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "klusterlet", "pod-template-hash": "cff685879" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "klusterlet", "pod-template-hash": "cff685879" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "klusterlet" ] } ] }, "topologyKey": "failure-domain.beta.kubernetes.io/zone" }, "weight": 70 }, { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "klusterlet" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 30 } ] } }, "containers": [ { "args": [ "/registration-operator", "klusterlet" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:38f65ed06100af8f55530fd79ed5064f3839863caec0f610385abeea0e3c1efb", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "klusterlet", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "memory": "2Gi" }, "requests": { "cpu": "50m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmpdir" } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "klusterlet-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "klusterlet", "serviceAccountName": "klusterlet", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/infra", "operator": "Exists" } ], "volumes": [ { "emptyDir": {}, "name": "tmpdir" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:14Z", "generation": 1, "labels": { "app": "openshift-apiserver-operator", "pod-template-hash": "76f99d6f98" }, "name": "openshift-apiserver-operator-76f99d6f98", "namespace": "openshift-apiserver-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-apiserver-operator", "uid": "3742179c-a0d2-48fb-bd62-d620f92b7d2c" } ], "resourceVersion": "38781", "uid": "156aefe7-cab0-4578-9357-e60a0f4c2761" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "openshift-apiserver-operator", "pod-template-hash": "76f99d6f98" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-apiserver-operator", "pod-template-hash": "76f99d6f98" }, "name": "openshift-apiserver-operator" }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml" ], "command": [ "cluster-openshift-apiserver-operator", "operator" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4f21a99228482f68869eda77fcbe6a27adc96d1f077b3345974b63738d27943f" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" }, { "name": "OPERAND_IMAGE_VERSION", "value": "4.18.31" }, { "name": "KUBE_APISERVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9af63298f179cea3b0c2105ff2ca49b17c98a9742563e75d4b76590742f1b8fc" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4f21a99228482f68869eda77fcbe6a27adc96d1f077b3345974b63738d27943f", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-apiserver-operator", "serviceAccountName": "openshift-apiserver-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "openshift-apiserver-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "openshift-apiserver-operator-config" }, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "3", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4f21a99228482f68869eda77fcbe6a27adc96d1f077b3345974b63738d27943f", "openshiftapiservers.operator.openshift.io/pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "operator.openshift.io/dep-desired.generation": "3", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "1zGkZA==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "IRxQKQ==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "xrm-LA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "04b6de541cca4559970c669b6962894d2222d1567fda634cb117fa438a942c38" }, "creationTimestamp": "2026-01-28T13:12:46Z", "generation": 7, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "54dbb5bd9", "revision": "1" }, "name": "apiserver-54dbb5bd9", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "72c66ecf-bf71-4f30-b3cc-fa7140c84d08" } ], "resourceVersion": "15931", "uid": "e5724087-1a64-4947-99b6-2eab0c60d263" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "pod-template-hash": "54dbb5bd9" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-desired.generation": "3", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "1zGkZA==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "IRxQKQ==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "xrm-LA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "54dbb5bd9", "revision": "1" }, "name": "openshift-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec openshift-apiserver start --config=/var/run/configmaps/config/config.yaml -v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "openshift-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/", "name": "node-pullsecrets", "readOnly": true }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/audit", "name": "audit" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/image-import-ca", "name": "image-import-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] }, { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)", "--v", "2" ], "command": [ "cluster-kube-apiserver-operator", "check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9af63298f179cea3b0c2105ff2ca49b17c98a9742563e75d4b76590742f1b8fc", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/openshift-apiserver \u0026\u0026 touch /var/log/openshift-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/openshift-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-apiserver-sa", "serviceAccountName": "openshift-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/", "type": "Directory" }, "name": "node-pullsecrets" }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit" }, { "name": "etcd-client", "secret": { "defaultMode": 384, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "configMap": { "defaultMode": 420, "name": "image-import-ca", "optional": true }, "name": "image-import-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 384, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 384, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/openshift-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4f21a99228482f68869eda77fcbe6a27adc96d1f077b3345974b63738d27943f", "openshiftapiservers.operator.openshift.io/pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "operator.openshift.io/dep-desired.generation": "2", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "cN30qw==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "xrm-LA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "f84c2a8a9c150294bf8603a4e7a3788b81777e38c6d6cc6af50a4d90eda1418f" }, "creationTimestamp": "2026-01-28T13:10:43Z", "generation": 4, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "5cfbf8df8", "revision": "0" }, "name": "apiserver-5cfbf8df8", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "72c66ecf-bf71-4f30-b3cc-fa7140c84d08" } ], "resourceVersion": "9831", "uid": "9a25b2b3-326f-4a9b-8a98-2ef4d9b62b39" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "pod-template-hash": "5cfbf8df8" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-desired.generation": "2", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "cN30qw==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "xrm-LA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "5cfbf8df8", "revision": "0" }, "name": "openshift-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec openshift-apiserver start --config=/var/run/configmaps/config/config.yaml -v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "openshift-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/", "name": "node-pullsecrets", "readOnly": true }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/audit", "name": "audit" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/image-import-ca", "name": "image-import-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] }, { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)", "--v", "2" ], "command": [ "cluster-kube-apiserver-operator", "check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9af63298f179cea3b0c2105ff2ca49b17c98a9742563e75d4b76590742f1b8fc", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/openshift-apiserver \u0026\u0026 touch /var/log/openshift-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/openshift-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-apiserver-sa", "serviceAccountName": "openshift-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/", "type": "Directory" }, "name": "node-pullsecrets" }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "audit-0" }, "name": "audit" }, { "name": "etcd-client", "secret": { "defaultMode": 384, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "configMap": { "defaultMode": 420, "name": "image-import-ca", "optional": true }, "name": "image-import-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 384, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 384, "optional": true, "secretName": "encryption-config-0" } }, { "hostPath": { "path": "/var/log/openshift-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "7", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4f21a99228482f68869eda77fcbe6a27adc96d1f077b3345974b63738d27943f", "openshiftapiservers.operator.openshift.io/pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "operator.openshift.io/dep-desired.generation": "6", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "lqK3SA==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "IRxQKQ==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "xrm-LA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "GORsNA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "c33536b8151dd972c07be3cf79a991c6c440b73505d1aa38365bd9e619e7ebd6" }, "creationTimestamp": "2026-01-28T13:19:31Z", "generation": 7, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "5f6fdc87cc", "revision": "1" }, "name": "apiserver-5f6fdc87cc", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "72c66ecf-bf71-4f30-b3cc-fa7140c84d08" } ], "resourceVersion": "27495", "uid": "e91582e2-59bc-4181-84e7-2de6e26cdce8" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "pod-template-hash": "5f6fdc87cc" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-desired.generation": "6", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "lqK3SA==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "IRxQKQ==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "xrm-LA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "GORsNA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "5f6fdc87cc", "revision": "1" }, "name": "openshift-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec openshift-apiserver start --config=/var/run/configmaps/config/config.yaml -v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "openshift-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/", "name": "node-pullsecrets", "readOnly": true }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/audit", "name": "audit" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/image-import-ca", "name": "image-import-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] }, { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)", "--v", "2" ], "command": [ "cluster-kube-apiserver-operator", "check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9af63298f179cea3b0c2105ff2ca49b17c98a9742563e75d4b76590742f1b8fc", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/openshift-apiserver \u0026\u0026 touch /var/log/openshift-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/openshift-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-apiserver-sa", "serviceAccountName": "openshift-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/", "type": "Directory" }, "name": "node-pullsecrets" }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit" }, { "name": "etcd-client", "secret": { "defaultMode": 384, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "configMap": { "defaultMode": 420, "name": "image-import-ca", "optional": true }, "name": "image-import-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 384, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 384, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/openshift-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "5", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4f21a99228482f68869eda77fcbe6a27adc96d1f077b3345974b63738d27943f", "openshiftapiservers.operator.openshift.io/pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "operator.openshift.io/dep-desired.generation": "5", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "sv_x6g==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "IRxQKQ==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "xrm-LA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "0e8df7964e2934f2845ca3443d673f56e964f4c253eae2e17cb1bd300d68feee" }, "creationTimestamp": "2026-01-28T13:16:46Z", "generation": 5, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "5f774487c6", "revision": "1" }, "name": "apiserver-5f774487c6", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "72c66ecf-bf71-4f30-b3cc-fa7140c84d08" } ], "resourceVersion": "24862", "uid": "db389503-3cf5-4ea3-b369-0e7c365e4ba2" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "pod-template-hash": "5f774487c6" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-desired.generation": "5", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "sv_x6g==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "IRxQKQ==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "xrm-LA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "5f774487c6", "revision": "1" }, "name": "openshift-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec openshift-apiserver start --config=/var/run/configmaps/config/config.yaml -v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "openshift-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/", "name": "node-pullsecrets", "readOnly": true }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/audit", "name": "audit" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/image-import-ca", "name": "image-import-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] }, { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)", "--v", "2" ], "command": [ "cluster-kube-apiserver-operator", "check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9af63298f179cea3b0c2105ff2ca49b17c98a9742563e75d4b76590742f1b8fc", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/openshift-apiserver \u0026\u0026 touch /var/log/openshift-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/openshift-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-apiserver-sa", "serviceAccountName": "openshift-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/", "type": "Directory" }, "name": "node-pullsecrets" }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit" }, { "name": "etcd-client", "secret": { "defaultMode": 384, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "configMap": { "defaultMode": 420, "name": "image-import-ca", "optional": true }, "name": "image-import-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 384, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 384, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/openshift-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 5, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "4", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4f21a99228482f68869eda77fcbe6a27adc96d1f077b3345974b63738d27943f", "openshiftapiservers.operator.openshift.io/pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "operator.openshift.io/dep-desired.generation": "4", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "249qvA==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "IRxQKQ==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "xrm-LA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "df768a21f85cbd167b48c5744dc02867d754145ea5eab42659a039107eb9b6a2" }, "creationTimestamp": "2026-01-28T13:14:48Z", "generation": 7, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "849c5db869", "revision": "1" }, "name": "apiserver-849c5db869", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "72c66ecf-bf71-4f30-b3cc-fa7140c84d08" } ], "resourceVersion": "23674", "uid": "011c4a18-f98e-4990-a60e-65b76c65d57b" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "pod-template-hash": "849c5db869" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-desired.generation": "4", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "249qvA==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "IRxQKQ==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "xrm-LA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "849c5db869", "revision": "1" }, "name": "openshift-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec openshift-apiserver start --config=/var/run/configmaps/config/config.yaml -v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "openshift-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/", "name": "node-pullsecrets", "readOnly": true }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/audit", "name": "audit" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/image-import-ca", "name": "image-import-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] }, { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)", "--v", "2" ], "command": [ "cluster-kube-apiserver-operator", "check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9af63298f179cea3b0c2105ff2ca49b17c98a9742563e75d4b76590742f1b8fc", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/openshift-apiserver \u0026\u0026 touch /var/log/openshift-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/openshift-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-apiserver-sa", "serviceAccountName": "openshift-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/", "type": "Directory" }, "name": "node-pullsecrets" }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit" }, { "name": "etcd-client", "secret": { "defaultMode": 384, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "configMap": { "defaultMode": 420, "name": "image-import-ca", "optional": true }, "name": "image-import-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 384, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 384, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/openshift-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "6", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4f21a99228482f68869eda77fcbe6a27adc96d1f077b3345974b63738d27943f", "openshiftapiservers.operator.openshift.io/pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "operator.openshift.io/dep-desired.generation": "5", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "sv_x6g==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "IRxQKQ==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "xrm-LA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "GORsNA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "c8c1837d0080c378054bab211e21a7fd0fe30cf2fae4d4c5eeec392beaefc94d" }, "creationTimestamp": "2026-01-28T13:19:27Z", "generation": 3, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "85b5f56b", "revision": "1" }, "name": "apiserver-85b5f56b", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "72c66ecf-bf71-4f30-b3cc-fa7140c84d08" } ], "resourceVersion": "21823", "uid": "a3a73f5c-0afa-4e1c-ab7b-dc1fdb6aa30b" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "pod-template-hash": "85b5f56b" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-desired.generation": "5", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "sv_x6g==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "IRxQKQ==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "xrm-LA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "GORsNA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "85b5f56b", "revision": "1" }, "name": "openshift-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec openshift-apiserver start --config=/var/run/configmaps/config/config.yaml -v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "openshift-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/", "name": "node-pullsecrets", "readOnly": true }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/audit", "name": "audit" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/image-import-ca", "name": "image-import-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] }, { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)", "--v", "2" ], "command": [ "cluster-kube-apiserver-operator", "check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9af63298f179cea3b0c2105ff2ca49b17c98a9742563e75d4b76590742f1b8fc", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/openshift-apiserver \u0026\u0026 touch /var/log/openshift-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/openshift-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-apiserver-sa", "serviceAccountName": "openshift-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/", "type": "Directory" }, "name": "node-pullsecrets" }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit" }, { "name": "etcd-client", "secret": { "defaultMode": 384, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "configMap": { "defaultMode": 420, "name": "image-import-ca", "optional": true }, "name": "image-import-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 384, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 384, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/openshift-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "8", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4f21a99228482f68869eda77fcbe6a27adc96d1f077b3345974b63738d27943f", "openshiftapiservers.operator.openshift.io/pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "operator.openshift.io/dep-desired.generation": "7", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "uR8sGQ==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "IRxQKQ==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "xrm-LA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "GORsNA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "e671e4f3f81a26b91eb73d53219698e8b9451f5f26dfd32b3457fda39eda86e0" }, "creationTimestamp": "2026-01-28T13:24:54Z", "generation": 4, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "85c97d5597", "revision": "1" }, "name": "apiserver-85c97d5597", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "72c66ecf-bf71-4f30-b3cc-fa7140c84d08" } ], "resourceVersion": "39640", "uid": "ab06ff07-9958-4b50-95f2-a4220dbcbd9f" }, "spec": { "replicas": 3, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "pod-template-hash": "85c97d5597" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-desired.generation": "7", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "uR8sGQ==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "IRxQKQ==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "xrm-LA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "GORsNA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "85c97d5597", "revision": "1" }, "name": "openshift-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec openshift-apiserver start --config=/var/run/configmaps/config/config.yaml -v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "openshift-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/", "name": "node-pullsecrets", "readOnly": true }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/audit", "name": "audit" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/image-import-ca", "name": "image-import-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] }, { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)", "--v", "2" ], "command": [ "cluster-kube-apiserver-operator", "check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9af63298f179cea3b0c2105ff2ca49b17c98a9742563e75d4b76590742f1b8fc", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/openshift-apiserver \u0026\u0026 touch /var/log/openshift-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/openshift-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-apiserver-sa", "serviceAccountName": "openshift-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/", "type": "Directory" }, "name": "node-pullsecrets" }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit" }, { "name": "etcd-client", "secret": { "defaultMode": 384, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "configMap": { "defaultMode": 420, "name": "image-import-ca", "optional": true }, "name": "image-import-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 384, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 384, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/openshift-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "availableReplicas": 3, "fullyLabeledReplicas": 3, "observedGeneration": 4, "readyReplicas": 3, "replicas": 3 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "2", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4f21a99228482f68869eda77fcbe6a27adc96d1f077b3345974b63738d27943f", "openshiftapiservers.operator.openshift.io/pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "operator.openshift.io/dep-desired.generation": "2", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "cN30qw==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "IRxQKQ==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "xrm-LA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "f6a25a30a0f475a530df0b486f6de1cf43d725d6762f4ec2ce8cb08c1e0663cd" }, "creationTimestamp": "2026-01-28T13:10:47Z", "generation": 7, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "c4d4d446", "revision": "1" }, "name": "apiserver-c4d4d446", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "72c66ecf-bf71-4f30-b3cc-fa7140c84d08" } ], "resourceVersion": "13528", "uid": "3a6bc065-393d-4dc9-a259-8044fd5557a7" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "pod-template-hash": "c4d4d446" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-desired.generation": "2", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "cN30qw==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "IRxQKQ==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "xrm-LA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "c4d4d446", "revision": "1" }, "name": "openshift-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec openshift-apiserver start --config=/var/run/configmaps/config/config.yaml -v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "openshift-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/", "name": "node-pullsecrets", "readOnly": true }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/audit", "name": "audit" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/image-import-ca", "name": "image-import-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] }, { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)", "--v", "2" ], "command": [ "cluster-kube-apiserver-operator", "check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9af63298f179cea3b0c2105ff2ca49b17c98a9742563e75d4b76590742f1b8fc", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/openshift-apiserver \u0026\u0026 touch /var/log/openshift-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/openshift-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-apiserver-sa", "serviceAccountName": "openshift-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/", "type": "Directory" }, "name": "node-pullsecrets" }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit" }, { "name": "etcd-client", "secret": { "defaultMode": 384, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "configMap": { "defaultMode": 420, "name": "image-import-ca", "optional": true }, "name": "image-import-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 384, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 384, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/openshift-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "config.openshift.io/inject-proxy": "authentication-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:16Z", "generation": 1, "labels": { "app": "authentication-operator", "pod-template-hash": "6664695455" }, "name": "authentication-operator-6664695455", "namespace": "openshift-authentication-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "authentication-operator", "uid": "7eae1699-eb38-496c-9c57-3dad7b008974" } ], "resourceVersion": "38248", "uid": "ffb25f21-6ccb-4890-9fe6-a711b1be5c6d" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "authentication-operator", "pod-template-hash": "6664695455" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "anyuid", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "authentication-operator", "pod-template-hash": "6664695455" }, "name": "authentication-operator" }, "spec": { "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/ca-bundle.crt ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/ca-bundle.crt /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec authentication-operator operator --config=/var/run/configmaps/config/operator-config.yaml --v=2 --terminate-on-files=/var/run/configmaps/trusted-ca-bundle/ca-bundle.crt --terminate-on-files=/tmp/terminate\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "IMAGE_OAUTH_SERVER", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a1d4f164f6fed79471e7ba24f8bdd3b1c7faead44281c2dc1fa59d6ee78198b4" }, { "name": "IMAGE_OAUTH_APISERVER", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e2c319fae42e9b32010fd26a9d6b6743bb165d22126a7c6064c4c87faef2d939" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" }, { "name": "OPERAND_OAUTH_SERVER_IMAGE_VERSION", "value": "4.18.31_openshift" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bf83c9a8597ce1abc7ba9201b47284b03989b10bcc00341d759e97cbe332d0d1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "authentication-operator", "resources": { "requests": { "cpu": "20m", "memory": "200Mi" } }, "securityContext": { "readOnlyRootFilesystem": false, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/run/configmaps/service-ca-bundle", "name": "service-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "authentication-operator", "serviceAccountName": "authentication-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 440, "name": "authentication-operator-config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "service-ca-bundle", "optional": true }, "name": "service-ca-bundle" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/rvs-hash": "UMfDylXdbqCQL5S7YgIxGixUCn-kBbZHmRcqLQqPwldiON78S8Sfq_F7ureDAAaXw1omaKKvvPvWa9kgCaWOdg", "operator.openshift.io/spec-hash": "51cafdc7e4fadd1f223610183a69c73f2e58ec3b4a9c532d49556c63162176c0" }, "creationTimestamp": "2026-01-28T13:17:46Z", "generation": 4, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "5c89464948" }, "name": "oauth-openshift-5c89464948", "namespace": "openshift-authentication", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "oauth-openshift", "uid": "737d7469-073a-4561-acef-b8dd61374327" } ], "resourceVersion": "20769", "uid": "71091257-0c2d-4806-9f9c-f41bf823f776" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "oauth-openshift", "pod-template-hash": "5c89464948" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/bootstrap-user-exists": "true", "operator.openshift.io/rvs-hash": "UMfDylXdbqCQL5S7YgIxGixUCn-kBbZHmRcqLQqPwldiON78S8Sfq_F7ureDAAaXw1omaKKvvPvWa9kgCaWOdg", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "5c89464948" }, "name": "oauth-openshift", "namespace": "openshift-authentication" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-server osinserver \\\n--config=/var/config/system/configmaps/v4-0-config-system-cliconfig/v4-0-config-system-cliconfig \\\n--v=2 \\\n--audit-log-format=json \\\n--audit-log-maxbackup=10 \\\n--audit-log-maxsize=100 \\\n--audit-log-path=/var/log/oauth-server/audit.log \\\n--audit-policy-file=/var/run/configmaps/audit/audit.yaml\n" ], "command": [ "/bin/bash", "-ec" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a1d4f164f6fed79471e7ba24f8bdd3b1c7faead44281c2dc1fa59d6ee78198b4", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "oauth-openshift", "ports": [ { "containerPort": 6443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/log/oauth-server", "name": "audit-dir" }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-session", "name": "v4-0-config-system-session", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-cliconfig", "name": "v4-0-config-system-cliconfig", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-serving-cert", "name": "v4-0-config-system-serving-cert", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-service-ca", "name": "v4-0-config-system-service-ca", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-router-certs", "name": "v4-0-config-system-router-certs", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-ocp-branding-template", "name": "v4-0-config-system-ocp-branding-template", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-login", "name": "v4-0-config-user-template-login", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-provider-selection", "name": "v4-0-config-user-template-provider-selection", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-error", "name": "v4-0-config-user-template-error", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle", "name": "v4-0-config-system-trusted-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-openshift", "serviceAccountName": "oauth-openshift", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit" }, "name": "audit-policies" }, { "hostPath": { "path": "/var/log/oauth-server", "type": "" }, "name": "audit-dir" }, { "name": "v4-0-config-system-session", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-session" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-cliconfig" }, "name": "v4-0-config-system-cliconfig" }, { "name": "v4-0-config-system-serving-cert", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-service-ca" }, "name": "v4-0-config-system-service-ca" }, { "name": "v4-0-config-system-router-certs", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-router-certs" } }, { "name": "v4-0-config-system-ocp-branding-template", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-ocp-branding-template" } }, { "name": "v4-0-config-user-template-login", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-login" } }, { "name": "v4-0-config-user-template-provider-selection", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-provider-selection" } }, { "name": "v4-0-config-user-template-error", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-error" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-trusted-ca-bundle", "optional": true }, "name": "v4-0-config-system-trusted-ca-bundle" } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "2", "operator.openshift.io/rvs-hash": "pyavrHo03-i6gWO7h8IcHdQy9qeWHgDCp3XlFguqt7EJsYQPHH15fvTXeRVuqdnynJyq08hk5D0eergmEuPqeg", "operator.openshift.io/spec-hash": "740bc4737d5e91ddf4213809d569d66ddc5fe306ea3bc02b869a138b9393014b" }, "creationTimestamp": "2026-01-28T13:17:51Z", "generation": 7, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "747b68b4bb" }, "name": "oauth-openshift-747b68b4bb", "namespace": "openshift-authentication", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "oauth-openshift", "uid": "737d7469-073a-4561-acef-b8dd61374327" } ], "resourceVersion": "23534", "uid": "a19ca57d-aefd-43b0-8f9c-194be6a6c7f9" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "oauth-openshift", "pod-template-hash": "747b68b4bb" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/bootstrap-user-exists": "true", "operator.openshift.io/rvs-hash": "pyavrHo03-i6gWO7h8IcHdQy9qeWHgDCp3XlFguqt7EJsYQPHH15fvTXeRVuqdnynJyq08hk5D0eergmEuPqeg", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "747b68b4bb" }, "name": "oauth-openshift", "namespace": "openshift-authentication" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-server osinserver \\\n--config=/var/config/system/configmaps/v4-0-config-system-cliconfig/v4-0-config-system-cliconfig \\\n--v=2 \\\n--audit-log-format=json \\\n--audit-log-maxbackup=10 \\\n--audit-log-maxsize=100 \\\n--audit-log-path=/var/log/oauth-server/audit.log \\\n--audit-policy-file=/var/run/configmaps/audit/audit.yaml\n" ], "command": [ "/bin/bash", "-ec" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a1d4f164f6fed79471e7ba24f8bdd3b1c7faead44281c2dc1fa59d6ee78198b4", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "oauth-openshift", "ports": [ { "containerPort": 6443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/log/oauth-server", "name": "audit-dir" }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-session", "name": "v4-0-config-system-session", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-cliconfig", "name": "v4-0-config-system-cliconfig", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-serving-cert", "name": "v4-0-config-system-serving-cert", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-service-ca", "name": "v4-0-config-system-service-ca", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-router-certs", "name": "v4-0-config-system-router-certs", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-ocp-branding-template", "name": "v4-0-config-system-ocp-branding-template", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-login", "name": "v4-0-config-user-template-login", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-provider-selection", "name": "v4-0-config-user-template-provider-selection", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-error", "name": "v4-0-config-user-template-error", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle", "name": "v4-0-config-system-trusted-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-openshift", "serviceAccountName": "oauth-openshift", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit" }, "name": "audit-policies" }, { "hostPath": { "path": "/var/log/oauth-server", "type": "" }, "name": "audit-dir" }, { "name": "v4-0-config-system-session", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-session" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-cliconfig" }, "name": "v4-0-config-system-cliconfig" }, { "name": "v4-0-config-system-serving-cert", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-service-ca" }, "name": "v4-0-config-system-service-ca" }, { "name": "v4-0-config-system-router-certs", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-router-certs" } }, { "name": "v4-0-config-system-ocp-branding-template", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-ocp-branding-template" } }, { "name": "v4-0-config-user-template-login", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-login" } }, { "name": "v4-0-config-user-template-provider-selection", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-provider-selection" } }, { "name": "v4-0-config-user-template-error", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-error" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-trusted-ca-bundle", "optional": true }, "name": "v4-0-config-system-trusted-ca-bundle" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "4", "operator.openshift.io/rvs-hash": "m4GQ0FUiDqwqnVP7p8ZjJCdS9XniNmGtJw7ceaAnIghG2ZdJTMipGG2LlqhmcGqaaUCxXW91WKpYrRrz2IvEYg", "operator.openshift.io/spec-hash": "659f40df2b384e73e4a8b1f8f3f8a41610f8ef6e7a85ee2b475e032b8e5429ee" }, "creationTimestamp": "2026-01-28T13:28:15Z", "generation": 4, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "dc9c497ff" }, "name": "oauth-openshift-dc9c497ff", "namespace": "openshift-authentication", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "oauth-openshift", "uid": "737d7469-073a-4561-acef-b8dd61374327" } ], "resourceVersion": "39118", "uid": "fe686afb-e6f2-455d-9983-37855f02b0ae" }, "spec": { "replicas": 3, "selector": { "matchLabels": { "app": "oauth-openshift", "pod-template-hash": "dc9c497ff" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/bootstrap-user-exists": "true", "operator.openshift.io/rvs-hash": "m4GQ0FUiDqwqnVP7p8ZjJCdS9XniNmGtJw7ceaAnIghG2ZdJTMipGG2LlqhmcGqaaUCxXW91WKpYrRrz2IvEYg", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "dc9c497ff" }, "name": "oauth-openshift", "namespace": "openshift-authentication" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-server osinserver \\\n--config=/var/config/system/configmaps/v4-0-config-system-cliconfig/v4-0-config-system-cliconfig \\\n--v=2 \\\n--audit-log-format=json \\\n--audit-log-maxbackup=10 \\\n--audit-log-maxsize=100 \\\n--audit-log-path=/var/log/oauth-server/audit.log \\\n--audit-policy-file=/var/run/configmaps/audit/audit.yaml\n" ], "command": [ "/bin/bash", "-ec" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a1d4f164f6fed79471e7ba24f8bdd3b1c7faead44281c2dc1fa59d6ee78198b4", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "oauth-openshift", "ports": [ { "containerPort": 6443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/log/oauth-server", "name": "audit-dir" }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-session", "name": "v4-0-config-system-session", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-cliconfig", "name": "v4-0-config-system-cliconfig", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-serving-cert", "name": "v4-0-config-system-serving-cert", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-service-ca", "name": "v4-0-config-system-service-ca", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-router-certs", "name": "v4-0-config-system-router-certs", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-ocp-branding-template", "name": "v4-0-config-system-ocp-branding-template", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-login", "name": "v4-0-config-user-template-login", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-provider-selection", "name": "v4-0-config-user-template-provider-selection", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-error", "name": "v4-0-config-user-template-error", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle", "name": "v4-0-config-system-trusted-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-openshift", "serviceAccountName": "oauth-openshift", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit" }, "name": "audit-policies" }, { "hostPath": { "path": "/var/log/oauth-server", "type": "" }, "name": "audit-dir" }, { "name": "v4-0-config-system-session", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-session" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-cliconfig" }, "name": "v4-0-config-system-cliconfig" }, { "name": "v4-0-config-system-serving-cert", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-service-ca" }, "name": "v4-0-config-system-service-ca" }, { "name": "v4-0-config-system-router-certs", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-router-certs" } }, { "name": "v4-0-config-system-ocp-branding-template", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-ocp-branding-template" } }, { "name": "v4-0-config-user-template-login", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-login" } }, { "name": "v4-0-config-user-template-provider-selection", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-provider-selection" } }, { "name": "v4-0-config-user-template-error", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-error" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-trusted-ca-bundle", "optional": true }, "name": "v4-0-config-system-trusted-ca-bundle" } ] } } }, "status": { "availableReplicas": 3, "fullyLabeledReplicas": 3, "observedGeneration": 4, "readyReplicas": 3, "replicas": 3 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "3", "operator.openshift.io/rvs-hash": "KUBmPDWfrg4BVQZwtWx1SnTOfjFfk-ya1WosEsnW3nEvOzoZHhnPcyjv4p7m4Bvb1AChjWMwFUAqUrSikZ7Ekg", "operator.openshift.io/spec-hash": "fe07e5dd5d98d41381f6b320eac5ce6d6cf0424d369179c756a5b4f548842b59" }, "creationTimestamp": "2026-01-28T13:19:27Z", "generation": 7, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "df5bbb575" }, "name": "oauth-openshift-df5bbb575", "namespace": "openshift-authentication", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "oauth-openshift", "uid": "737d7469-073a-4561-acef-b8dd61374327" } ], "resourceVersion": "28134", "uid": "7ab480a3-c0f0-45fe-b9de-f79e42a9222e" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "oauth-openshift", "pod-template-hash": "df5bbb575" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/bootstrap-user-exists": "true", "operator.openshift.io/rvs-hash": "KUBmPDWfrg4BVQZwtWx1SnTOfjFfk-ya1WosEsnW3nEvOzoZHhnPcyjv4p7m4Bvb1AChjWMwFUAqUrSikZ7Ekg", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "df5bbb575" }, "name": "oauth-openshift", "namespace": "openshift-authentication" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-server osinserver \\\n--config=/var/config/system/configmaps/v4-0-config-system-cliconfig/v4-0-config-system-cliconfig \\\n--v=2 \\\n--audit-log-format=json \\\n--audit-log-maxbackup=10 \\\n--audit-log-maxsize=100 \\\n--audit-log-path=/var/log/oauth-server/audit.log \\\n--audit-policy-file=/var/run/configmaps/audit/audit.yaml\n" ], "command": [ "/bin/bash", "-ec" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a1d4f164f6fed79471e7ba24f8bdd3b1c7faead44281c2dc1fa59d6ee78198b4", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "oauth-openshift", "ports": [ { "containerPort": 6443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/log/oauth-server", "name": "audit-dir" }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-session", "name": "v4-0-config-system-session", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-cliconfig", "name": "v4-0-config-system-cliconfig", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-serving-cert", "name": "v4-0-config-system-serving-cert", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-service-ca", "name": "v4-0-config-system-service-ca", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-router-certs", "name": "v4-0-config-system-router-certs", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-ocp-branding-template", "name": "v4-0-config-system-ocp-branding-template", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-login", "name": "v4-0-config-user-template-login", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-provider-selection", "name": "v4-0-config-user-template-provider-selection", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-error", "name": "v4-0-config-user-template-error", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle", "name": "v4-0-config-system-trusted-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-openshift", "serviceAccountName": "oauth-openshift", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit" }, "name": "audit-policies" }, { "hostPath": { "path": "/var/log/oauth-server", "type": "" }, "name": "audit-dir" }, { "name": "v4-0-config-system-session", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-session" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-cliconfig" }, "name": "v4-0-config-system-cliconfig" }, { "name": "v4-0-config-system-serving-cert", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-service-ca" }, "name": "v4-0-config-system-service-ca" }, { "name": "v4-0-config-system-router-certs", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-router-certs" } }, { "name": "v4-0-config-system-ocp-branding-template", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-ocp-branding-template" } }, { "name": "v4-0-config-user-template-login", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-login" } }, { "name": "v4-0-config-user-template-provider-selection", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-provider-selection" } }, { "name": "v4-0-config-user-template-error", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-error" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-trusted-ca-bundle", "optional": true }, "name": "v4-0-config-system-trusted-ca-bundle" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/default-logs-container": "manager", "operator.openshift.io/spec-hash": "dd92ea8f553b313ae21755645fa4b0d2fd605823015d9d4f5b232669d38fee20" }, "creationTimestamp": "2026-01-28T13:10:55Z", "generation": 1, "labels": { "control-plane": "catalogd-controller-manager", "pod-template-hash": "77cf86c58c" }, "name": "catalogd-controller-manager-77cf86c58c", "namespace": "openshift-catalogd", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "catalogd-controller-manager", "uid": "416e6fff-2cd9-4e6d-b748-b019e1ef5c13" } ], "resourceVersion": "37798", "uid": "79bd3ea5-64c8-405e-95ce-2610a616c1c3" }, "spec": { "minReadySeconds": 5, "replicas": 1, "selector": { "matchLabels": { "control-plane": "catalogd-controller-manager", "pod-template-hash": "77cf86c58c" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager", "openshift.io/required-scc": "privileged", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "control-plane": "catalogd-controller-manager", "pod-template-hash": "77cf86c58c" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/arch", "operator": "In", "values": [ "amd64", "arm64", "ppc64le", "s390x" ] }, { "key": "kubernetes.io/os", "operator": "In", "values": [ "linux" ] } ] } ] } } }, "containers": [ { "args": [ "--secure-listen-address=0.0.0.0:7443", "--http2-disable", "--upstream=http://127.0.0.1:8080/", "--logtostderr=true", "--v=2" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 7443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "5m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--leader-elect", "--metrics-bind-address=127.0.0.1:8080", "--external-address=catalogd-service.openshift-catalogd.svc", "--tls-cert=/var/certs/tls.crt", "--tls-key=/var/certs/tls.key", "--v=2", "--global-pull-secret=openshift-config/pull-secret" ], "command": [ "./manager" ], "env": [ { "name": "SSL_CERT_DIR", "value": "/var/ca-certs" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9bdb5a41b2201109f610b40ca5791cdb118b061f322dee9682d4343a57a6cded", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/cache/", "name": "cache" }, { "mountPath": "/var/certs", "name": "catalogserver-certs" }, { "mountPath": "/var/ca-certs", "name": "ca-certs", "readOnly": true }, { "mountPath": "/etc/containers", "name": "etc-containers", "readOnly": true }, { "mountPath": "/etc/docker", "name": "etc-docker", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seLinuxOptions": { "type": "spc_t" }, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "catalogd-controller-manager", "serviceAccountName": "catalogd-controller-manager", "terminationGracePeriodSeconds": 10, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "emptyDir": {}, "name": "cache" }, { "name": "catalogserver-certs", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "optional": false, "secretName": "catalogserver-cert" } }, { "name": "ca-certs", "projected": { "defaultMode": 420, "sources": [ { "configMap": { "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "catalogd-trusted-ca-bundle", "optional": false } }, { "configMap": { "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "openshift-service-ca.crt", "optional": false } } ] } }, { "hostPath": { "path": "/etc/containers", "type": "Directory" }, "name": "etc-containers" }, { "hostPath": { "path": "/etc/docker", "type": "Directory" }, "name": "etc-docker" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "CloudControllerManager", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "2", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:09:23Z", "generation": 1, "labels": { "k8s-app": "cloud-manager-operator", "pod-template-hash": "5f99b65568" }, "name": "cluster-cloud-controller-manager-operator-5f99b65568", "namespace": "openshift-cloud-controller-manager-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-cloud-controller-manager-operator", "uid": "efebead6-d105-442e-852e-a99157495d70" } ], "resourceVersion": "7261", "uid": "117d0f0a-77c7-4480-a44a-3d41e44a76c5" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "k8s-app": "cloud-manager-operator", "pod-template-hash": "5f99b65568" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "cluster-cloud-controller-manager", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "cloud-manager-operator", "pod-template-hash": "5f99b65568" } }, "spec": { "containers": [ { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -o allexport\nif [[ -f /etc/kubernetes/apiserver-url.env ]]; then\n source /etc/kubernetes/apiserver-url.env\nelse\n URL_ONLY_KUBECONFIG=/etc/kubernetes/kubeconfig\nfi\nexec /cluster-controller-manager-operator \\\n--leader-elect=true \\\n--leader-elect-lease-duration=137s \\\n--leader-elect-renew-deadline=107s \\\n--leader-elect-retry-period=26s \\\n--leader-elect-resource-namespace=openshift-cloud-controller-manager-operator \\\n\"--images-json=/etc/cloud-controller-manager-config/images.json\" \\\n--metrics-bind-address=127.0.0.1:9257 \\\n--health-addr=127.0.0.1:9259\n" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:76cbfb8bdd89e148fd7784868570466a611431baf4fd76e83e9c5cbdc4ed1487", "imagePullPolicy": "IfNotPresent", "name": "cluster-cloud-controller-manager", "ports": [ { "containerPort": 9257, "hostPort": 9257, "name": "metrics", "protocol": "TCP" }, { "containerPort": 9259, "hostPort": 9259, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/cloud-controller-manager-config/", "name": "images" }, { "mountPath": "/etc/kubernetes", "name": "host-etc-kube", "readOnly": true } ] }, { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -o allexport\nif [[ -f /etc/kubernetes/apiserver-url.env ]]; then\n source /etc/kubernetes/apiserver-url.env\nelse\n URL_ONLY_KUBECONFIG=/etc/kubernetes/kubeconfig\nfi\nexec /config-sync-controllers \\\n--leader-elect=true \\\n--leader-elect-lease-duration=137s \\\n--leader-elect-renew-deadline=107s \\\n--leader-elect-retry-period=26s \\\n--leader-elect-resource-namespace=openshift-cloud-controller-manager-operator \\\n--health-addr=127.0.0.1:9260\n" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:76cbfb8bdd89e148fd7784868570466a611431baf4fd76e83e9c5cbdc4ed1487", "imagePullPolicy": "IfNotPresent", "name": "config-sync-controllers", "ports": [ { "containerPort": 9260, "hostPort": 9260, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "25Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kubernetes", "name": "host-etc-kube", "readOnly": true } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9258", "--upstream=http://127.0.0.1:9257/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9258, "hostPort": 9258, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "auth-proxy-config" }, { "mountPath": "/etc/tls/private", "name": "cloud-controller-manager-operator-tls" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cluster-cloud-controller-manager", "serviceAccountName": "cluster-cloud-controller-manager", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node.cloudprovider.kubernetes.io/uninitialized", "value": "true" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoSchedule", "key": "node.cloudprovider.kubernetes.io/uninitialized", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/not-ready", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "cloud-controller-manager-images" }, "name": "images" }, { "hostPath": { "path": "/etc/kubernetes", "type": "Directory" }, "name": "host-etc-kube" }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "auth-proxy-config" }, { "name": "cloud-controller-manager-operator-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "cloud-controller-manager-operator-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "CloudControllerManager", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:58Z", "generation": 2, "labels": { "k8s-app": "cloud-manager-operator", "pod-template-hash": "649d966895" }, "name": "cluster-cloud-controller-manager-operator-649d966895", "namespace": "openshift-cloud-controller-manager-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-cloud-controller-manager-operator", "uid": "efebead6-d105-442e-852e-a99157495d70" } ], "resourceVersion": "3058", "uid": "34ac903b-6067-4005-a0e2-7c3a671804fa" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "k8s-app": "cloud-manager-operator", "pod-template-hash": "649d966895" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "cluster-cloud-controller-manager", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "cloud-manager-operator", "pod-template-hash": "649d966895" } }, "spec": { "containers": [ { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -o allexport\nif [[ -f /etc/kubernetes/apiserver-url.env ]]; then\n source /etc/kubernetes/apiserver-url.env\nelse\n URL_ONLY_KUBECONFIG=/etc/kubernetes/kubeconfig\nfi\nexec /cluster-controller-manager-operator \\\n--leader-elect=true \\\n--leader-elect-lease-duration=137s \\\n--leader-elect-renew-deadline=107s \\\n--leader-elect-retry-period=26s \\\n--leader-elect-resource-namespace=openshift-cloud-controller-manager-operator \\\n\"--images-json=/etc/cloud-controller-manager-config/images.json\" \\\n--metrics-bind-address=127.0.0.1:9257 \\\n--health-addr=127.0.0.1:9259\n" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:76cbfb8bdd89e148fd7784868570466a611431baf4fd76e83e9c5cbdc4ed1487", "imagePullPolicy": "IfNotPresent", "name": "cluster-cloud-controller-manager", "ports": [ { "containerPort": 9257, "name": "metrics", "protocol": "TCP" }, { "containerPort": 9259, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/cloud-controller-manager-config/", "name": "images" }, { "mountPath": "/etc/kubernetes", "name": "host-etc-kube", "readOnly": true } ] }, { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -o allexport\nif [[ -f /etc/kubernetes/apiserver-url.env ]]; then\n source /etc/kubernetes/apiserver-url.env\nelse\n URL_ONLY_KUBECONFIG=/etc/kubernetes/kubeconfig\nfi\nexec /config-sync-controllers \\\n--leader-elect=true \\\n--leader-elect-lease-duration=137s \\\n--leader-elect-renew-deadline=107s \\\n--leader-elect-retry-period=26s \\\n--leader-elect-resource-namespace=openshift-cloud-controller-manager-operator \\\n--health-addr=127.0.0.1:9260\n" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:76cbfb8bdd89e148fd7784868570466a611431baf4fd76e83e9c5cbdc4ed1487", "imagePullPolicy": "IfNotPresent", "name": "config-sync-controllers", "ports": [ { "containerPort": 9260, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "25Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kubernetes", "name": "host-etc-kube", "readOnly": true } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9258", "--upstream=http://127.0.0.1:9257/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9258, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "auth-proxy-config" }, { "mountPath": "/etc/tls/private", "name": "cloud-controller-manager-operator-tls" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cluster-cloud-controller-manager", "serviceAccountName": "cluster-cloud-controller-manager", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node.cloudprovider.kubernetes.io/uninitialized", "value": "true" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoSchedule", "key": "node.cloudprovider.kubernetes.io/uninitialized", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/not-ready", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "cloud-controller-manager-images" }, "name": "images" }, { "hostPath": { "path": "/etc/kubernetes", "type": "Directory" }, "name": "host-etc-kube" }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "auth-proxy-config" }, { "name": "cloud-controller-manager-operator-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "cloud-controller-manager-operator-tls" } } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/generation": "1", "operator.openshift.io/spec-hash": "59c1111ac0b0aac2c84e79a3389fb353c6a4715217817223e715c1be75b60e5e" }, "creationTimestamp": "2026-01-28T13:09:02Z", "generation": 1, "labels": { "infrastructure.openshift.io/cloud-controller-manager": "AWS", "k8s-app": "aws-cloud-controller-manager", "pod-template-hash": "767d45f7df" }, "name": "aws-cloud-controller-manager-767d45f7df", "namespace": "openshift-cloud-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "aws-cloud-controller-manager", "uid": "d22241d1-2d81-43d4-8755-31da7b8b42a8" } ], "resourceVersion": "36752", "uid": "fc9e9e62-485f-45a5-913a-43cfeb9754ab" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "infrastructure.openshift.io/cloud-controller-manager": "AWS", "k8s-app": "aws-cloud-controller-manager", "pod-template-hash": "767d45f7df" } }, "template": { "metadata": { "annotations": { "operator.openshift.io/config-hash": "ed60604515fd43bb97396f9ba6f6244dbfe66db355bff404c7323b94cbe56d76", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "infrastructure.openshift.io/cloud-controller-manager": "AWS", "k8s-app": "aws-cloud-controller-manager", "pod-template-hash": "767d45f7df" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "infrastructure.openshift.io/cloud-controller-manager": "AWS", "k8s-app": "aws-cloud-controller-manager" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -o allexport\nif [[ -f /etc/kubernetes/apiserver-url.env ]]; then\n source /etc/kubernetes/apiserver-url.env\nfi\nexec /bin/aws-cloud-controller-manager \\\n--cloud-provider=aws \\\n--use-service-account-credentials=true \\\n--configure-cloud-routes=false \\\n--leader-elect=true \\\n--leader-elect-lease-duration=137s \\\n--leader-elect-renew-deadline=107s \\\n--leader-elect-retry-period=26s \\\n--leader-elect-resource-namespace=openshift-cloud-controller-manager \\\n--secure-port=0 \\\n-v=2\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4a11ab47c0580b964612bb36e52d6feb852d2355f5e71ba41f357dd2b1664527", "imagePullPolicy": "IfNotPresent", "name": "cloud-controller-manager", "ports": [ { "containerPort": 10258, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "200m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kubernetes", "name": "host-etc-kube", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cloud-controller-manager", "serviceAccountName": "cloud-controller-manager", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoSchedule", "key": "node.cloudprovider.kubernetes.io/uninitialized", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/not-ready", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "ccm-trusted-ca" }, "name": "trusted-ca" }, { "hostPath": { "path": "/etc/kubernetes", "type": "Directory" }, "name": "host-etc-kube" } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "config.openshift.io/inject-proxy": "cloud-credential-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-01-28T13:08:55Z", "generation": 1, "labels": { "app": "cloud-credential-operator", "control-plane": "controller-manager", "controller-tools.k8s.io": "1.0", "pod-template-hash": "7b9d544bd7" }, "name": "cloud-credential-operator-7b9d544bd7", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cloud-credential-operator", "uid": "34825340-1bef-4585-abea-466394eb5f3a" } ], "resourceVersion": "38329", "uid": "8dc12337-a532-451b-b009-416dadb7a48b" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "controller-manager", "controller-tools.k8s.io": "1.0", "pod-template-hash": "7b9d544bd7" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "cloud-credential-operator", "control-plane": "controller-manager", "controller-tools.k8s.io": "1.0", "pod-template-hash": "7b9d544bd7" } }, "spec": { "containers": [ { "args": [ "--secure-listen-address=0.0.0.0:8443", "--upstream=http://127.0.0.1:2112/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "cloud-credential-operator-serving-cert" } ] }, { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec /usr/bin/cloud-credential-operator operator\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "AZURE_POD_IDENTITY_WEBHOOK_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b7a0bab79b738287a2f1ed51b12f250596b499b9e906855437ed6e2f43128de3" }, { "name": "AWS_POD_IDENTITY_WEBHOOK_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ea11e812ada7fac3f1ab0f035ae5d3d48621949359a9e1b432fd9048b1100db4" }, { "name": "GCP_POD_IDENTITY_WEBHOOK_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6ebfa08dddfc6a1e3d681760c1181ae8268bed6740661d2f8c942aa4adb6d4d6" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:331f2a6c07838109e6846ce1a50d1ad7423fe1ba0bef1ec9fd7811af88e1b75b", "imagePullPolicy": "IfNotPresent", "name": "cloud-credential-operator", "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "cco-trusted-ca" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cloud-credential-operator", "serviceAccountName": "cloud-credential-operator", "terminationGracePeriodSeconds": 10, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "cco-trusted-ca", "optional": true }, "name": "cco-trusted-ca" }, { "name": "cloud-credential-operator-serving-cert", "secret": { "defaultMode": 420, "secretName": "cloud-credential-operator-serving-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "c9d3ff6bf29e905d11f322d925a4c1e7403667660c69361bc94bd09711549b28" }, "creationTimestamp": "2026-01-28T13:17:17Z", "generation": 1, "labels": { "app": "pod-identity-webhook", "pod-template-hash": "f5f945775" }, "name": "pod-identity-webhook-f5f945775", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pod-identity-webhook", "uid": "2eb93475-3998-4936-a152-5a88d2a8d7a9" } ], "resourceVersion": "38663", "uid": "45df3be1-c570-4dbe-bf98-9eaabd250e90" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "pod-identity-webhook", "pod-template-hash": "f5f945775" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "pod-identity-webhook", "pod-template-hash": "f5f945775" } }, "spec": { "containers": [ { "command": [ "/usr/bin/aws-pod-identity-webhook", "--aws-default-region=us-east-1", "--in-cluster=false", "--tls-cert=/var/run/app/certs/tls.crt", "--tls-key=/var/run/app/certs/tls.key", "--namespace=openshift-cloud-credential-operator", "--port=9443", "--service-name=pod-identity-webhook", "--annotation-prefix=eks.amazonaws.com", "--token-audience=sts.amazonaws.com", "--logtostderr" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ea11e812ada7fac3f1ab0f035ae5d3d48621949359a9e1b432fd9048b1100db4", "imagePullPolicy": "IfNotPresent", "name": "pod-identity-webhook", "resources": { "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/app/certs", "name": "webhook-certs" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pod-identity-webhook", "serviceAccountName": "pod-identity-webhook", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "webhook-certs", "secret": { "defaultMode": 420, "secretName": "pod-identity-webhook" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "kubernetes.io/description": "This deployment launches the cloud network config controller which manages cloud-level network configurations\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-01-28T13:09:20Z", "generation": 1, "labels": { "app": "cloud-network-config-controller", "component": "network", "openshift.io/component": "network", "pod-template-hash": "f98469f9c", "type": "infra" }, "name": "cloud-network-config-controller-f98469f9c", "namespace": "openshift-cloud-network-config-controller", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cloud-network-config-controller", "uid": "fe8e9ccd-bbf6-406b-ae56-2bc778c75c16" } ], "resourceVersion": "38135", "uid": "84190220-f266-4627-b9b5-6e87b8a461f2" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "cloud-network-config-controller", "pod-template-hash": "f98469f9c" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "cloud-network-config-controller", "component": "network", "openshift.io/component": "network", "pod-template-hash": "f98469f9c", "type": "infra" }, "name": "cloud-network-config-controller" }, "spec": { "containers": [ { "args": [ "-platform-type", "AWS", "-platform-region=us-east-1", "-platform-api-url=", "-platform-aws-ca-override=", "-platform-azure-environment=", "-secret-name", "cloud-credentials" ], "command": [ "/usr/bin/cloud-network-config-controller" ], "env": [ { "name": "CONTROLLER_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "CONTROLLER_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "RELEASE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c6e80c4f355cd8176864cf3efa93b57846e94578073fe846385761eb0929385d", "imagePullPolicy": "IfNotPresent", "name": "controller", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/secret/cloudprovider", "name": "cloud-provider-secret", "readOnly": true }, { "mountPath": "/kube-cloud-config", "name": "kube-cloud-config", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cloud-network-config-controller", "serviceAccountName": "cloud-network-config-controller", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "cloud-provider-secret", "secret": { "defaultMode": 420, "secretName": "cloud-credentials" } }, { "configMap": { "defaultMode": 420, "name": "kube-cloud-config" }, "name": "kube-cloud-config" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca" }, "name": "trusted-ca" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "config.openshift.io/inject-proxy": "csi-driver", "config.openshift.io/inject-proxy-cabundle": "csi-driver", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "CtrS5Q==", "operator.openshift.io/spec-hash": "1cc33335136c50d18c23494cbfabbe7cc190f3d6a512efc3b533357f481ee8e7" }, "creationTimestamp": "2026-01-28T13:10:36Z", "generation": 3, "labels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "6597958bc4" }, "name": "aws-ebs-csi-driver-controller-6597958bc4", "namespace": "openshift-cluster-csi-drivers", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "aws-ebs-csi-driver-controller", "uid": "4dd940dc-ee3e-4fe2-92c4-5f49c12161f0" } ], "resourceVersion": "7303", "uid": "af58b3ac-f874-42e4-ab1a-a03b40bda563" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "6597958bc4" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict-local-volumes": "aws-auth,aws-keys,bound-sa-token,socket-dir", "openshift.io/required-scc": "restricted-v2", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "CtrS5Q==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "6597958bc4" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "controller", "--endpoint=$(CSI_ENDPOINT)", "--k8s-tag-cluster-id=clusterpool418-dcxsj-jj64q", "--logtostderr", "--http-endpoint=localhost:8201", "--v=2", "--batching=true" ], "env": [ { "name": "CSI_ENDPOINT", "value": "unix:///var/lib/csi/sockets/pluginproxy/csi.sock" }, { "name": "AWS_SDK_LOAD_CONFIG", "value": "1" }, { "name": "AWS_CONFIG_FILE", "value": "/var/run/aws/auth/credentials" }, { "name": "AWS_REGION", "value": "us-east-1" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:32c346d660004ce50755aa9cf9c1ba33a5be6e335f1978089358f84f1601794a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "csi-driver", "ports": [ { "containerPort": 10301, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true }, { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9201", "--upstream=http://127.0.0.1:8201/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-8201", "ports": [ { "containerPort": 9201, "name": "driver-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8202", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--default-fstype=ext4", "--feature-gates=Topology=true", "--extra-create-metadata=true", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:72894ec1bb4085468ec1a68b2d613f681a81d7cb2d87022298f633d5a95e3e3e", "imagePullPolicy": "IfNotPresent", "name": "csi-provisioner", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9202", "--upstream=http://127.0.0.1:8202/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "provisioner-kube-rbac-proxy", "ports": [ { "containerPort": 9202, "name": "provisioner-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8203", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:434dd79c85019297ac1a5c43ded5626f7243311562f4b30f85ddcaa680b143a9", "imagePullPolicy": "IfNotPresent", "name": "csi-attacher", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9203", "--upstream=http://127.0.0.1:8203/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "attacher-kube-rbac-proxy", "ports": [ { "containerPort": 9203, "name": "attacher-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8204", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--workers=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:068f5954fa0f1803569b7c393e6d920abdfa8e8ff5a74e7ee53d54d30cc10088", "imagePullPolicy": "IfNotPresent", "name": "csi-resizer", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9204", "--upstream=http://127.0.0.1:8204/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "resizer-kube-rbac-proxy", "ports": [ { "containerPort": 9204, "name": "resizer-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--metrics-address=localhost:8205", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--extra-create-metadata", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:466a2c4d28b265693e13dc5ef49790e4c377e4e9463f6258de1977bcb5ab39ed", "imagePullPolicy": "IfNotPresent", "name": "csi-snapshotter", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9205", "--upstream=http://127.0.0.1:8205/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "snapshotter-kube-rbac-proxy", "ports": [ { "containerPort": 9205, "name": "snapshotter-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/csi/csi.sock", "--health-port=10301", "--v=2", "--probe-timeout=3s" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7fa1cef8374dc9b9c4ba3a63a8ff65bdad518bf16fd9f8f0b551ec3dde3571da", "imagePullPolicy": "IfNotPresent", "name": "csi-liveness-probe", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/csi", "name": "socket-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "# Define file path variables\nCREDENTIALS_FILE=/var/run/aws/keys/credentials\nAUTH_CREDENTIALS_FILE=/var/run/aws/auth/credentials\nAWS_ACCESS_KEY_ID_FILE=/var/run/aws/keys/aws_access_key_id\nAWS_SECRET_ACCESS_KEY_FILE=/var/run/aws/keys/aws_secret_access_key\n\n# If credentials key exists in ebs-cloud-credentials secret, then use it as the auth file\nif [ -e \"$CREDENTIALS_FILE\" ]; then\n cp \"$CREDENTIALS_FILE\" \"$AUTH_CREDENTIALS_FILE\"\n echo \"Kubernetes Secret already contains credentials file, copied to the right place: $AUTH_CREDENTIALS_FILE\"\n exit 0\nfi\n\n# Otherwise, make sure the access keys are mounted in the pod...\nif [ ! -e \"$AWS_ACCESS_KEY_ID_FILE\" ] || [ ! -e \"$AWS_SECRET_ACCESS_KEY_FILE\" ]; then\n echo \"AWS keys not found\"\n exit 1\nfi\n\n# And create an auth file based on those keys\ncat \u003c\u003c-EOF \u003e \"$AUTH_CREDENTIALS_FILE\"\n[default]\naws_access_key_id=$(cat \"$AWS_ACCESS_KEY_ID_FILE\")\naws_secret_access_key=$(cat \"$AWS_SECRET_ACCESS_KEY_FILE\")\nEOF\necho \"Kubernetes Secret does not have credentials file, created a fresh one at $AUTH_CREDENTIALS_FILE\"\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7cd549121e9686d937298de79f1fa90eb6136489a692f5cd58135ed1c367514b", "imagePullPolicy": "IfNotPresent", "name": "init-aws-credentials-file", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "aws-ebs-csi-driver-controller-sa", "serviceAccountName": "aws-ebs-csi-driver-controller-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "emptyDir": {}, "name": "socket-dir" }, { "name": "metrics-serving-cert", "secret": { "defaultMode": 420, "secretName": "aws-ebs-csi-driver-controller-metrics-serving-cert" } }, { "name": "aws-keys", "secret": { "defaultMode": 420, "secretName": "ebs-cloud-credentials" } }, { "emptyDir": {}, "name": "aws-auth" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "config.openshift.io/inject-proxy": "csi-driver", "config.openshift.io/inject-proxy-cabundle": "csi-driver", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "4", "operator.openshift.io/dep-5d02b1dbbfd3b1124537c2229e410cd2adfa2": "b3aTLg==", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "CtrS5Q==", "operator.openshift.io/dep-b5233af8ffad2a3df77758ca90fc5d97e8259": "BvemMg==", "operator.openshift.io/spec-hash": "43c70583ad665b2c41a35bf0d74adbe98175c68b33dc8f58788f2cad5eed6978" }, "creationTimestamp": "2026-01-28T13:10:51Z", "generation": 3, "labels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "86b59db576" }, "name": "aws-ebs-csi-driver-controller-86b59db576", "namespace": "openshift-cluster-csi-drivers", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "aws-ebs-csi-driver-controller", "uid": "4dd940dc-ee3e-4fe2-92c4-5f49c12161f0" } ], "resourceVersion": "38869", "uid": "e5db6c1e-ab4d-47da-a4b5-b72c86dccf5b" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "86b59db576" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict-local-volumes": "aws-auth,aws-keys,bound-sa-token,socket-dir", "openshift.io/required-scc": "restricted-v2", "operator.openshift.io/dep-5d02b1dbbfd3b1124537c2229e410cd2adfa2": "b3aTLg==", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "CtrS5Q==", "operator.openshift.io/dep-b5233af8ffad2a3df77758ca90fc5d97e8259": "BvemMg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "86b59db576" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "controller", "--endpoint=$(CSI_ENDPOINT)", "--k8s-tag-cluster-id=clusterpool418-dcxsj-jj64q", "--logtostderr", "--http-endpoint=localhost:8201", "--v=2", "--batching=true" ], "env": [ { "name": "CSI_ENDPOINT", "value": "unix:///var/lib/csi/sockets/pluginproxy/csi.sock" }, { "name": "AWS_SDK_LOAD_CONFIG", "value": "1" }, { "name": "AWS_CONFIG_FILE", "value": "/var/run/aws/auth/credentials" }, { "name": "AWS_REGION", "value": "us-east-1" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:32c346d660004ce50755aa9cf9c1ba33a5be6e335f1978089358f84f1601794a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "csi-driver", "ports": [ { "containerPort": 10301, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true }, { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "non-standard-root-system-trust-ca-bundle", "readOnly": true } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9201", "--upstream=http://127.0.0.1:8201/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-8201", "ports": [ { "containerPort": 9201, "name": "driver-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8202", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--default-fstype=ext4", "--feature-gates=Topology=true", "--extra-create-metadata=true", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:72894ec1bb4085468ec1a68b2d613f681a81d7cb2d87022298f633d5a95e3e3e", "imagePullPolicy": "IfNotPresent", "name": "csi-provisioner", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9202", "--upstream=http://127.0.0.1:8202/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "provisioner-kube-rbac-proxy", "ports": [ { "containerPort": 9202, "name": "provisioner-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8203", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:434dd79c85019297ac1a5c43ded5626f7243311562f4b30f85ddcaa680b143a9", "imagePullPolicy": "IfNotPresent", "name": "csi-attacher", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9203", "--upstream=http://127.0.0.1:8203/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "attacher-kube-rbac-proxy", "ports": [ { "containerPort": 9203, "name": "attacher-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8204", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--workers=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:068f5954fa0f1803569b7c393e6d920abdfa8e8ff5a74e7ee53d54d30cc10088", "imagePullPolicy": "IfNotPresent", "name": "csi-resizer", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9204", "--upstream=http://127.0.0.1:8204/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "resizer-kube-rbac-proxy", "ports": [ { "containerPort": 9204, "name": "resizer-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--metrics-address=localhost:8205", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--extra-create-metadata", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:466a2c4d28b265693e13dc5ef49790e4c377e4e9463f6258de1977bcb5ab39ed", "imagePullPolicy": "IfNotPresent", "name": "csi-snapshotter", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9205", "--upstream=http://127.0.0.1:8205/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "snapshotter-kube-rbac-proxy", "ports": [ { "containerPort": 9205, "name": "snapshotter-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/csi/csi.sock", "--health-port=10301", "--v=2", "--probe-timeout=3s" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7fa1cef8374dc9b9c4ba3a63a8ff65bdad518bf16fd9f8f0b551ec3dde3571da", "imagePullPolicy": "IfNotPresent", "name": "csi-liveness-probe", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/csi", "name": "socket-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "# Define file path variables\nCREDENTIALS_FILE=/var/run/aws/keys/credentials\nAUTH_CREDENTIALS_FILE=/var/run/aws/auth/credentials\nAWS_ACCESS_KEY_ID_FILE=/var/run/aws/keys/aws_access_key_id\nAWS_SECRET_ACCESS_KEY_FILE=/var/run/aws/keys/aws_secret_access_key\n\n# If credentials key exists in ebs-cloud-credentials secret, then use it as the auth file\nif [ -e \"$CREDENTIALS_FILE\" ]; then\n cp \"$CREDENTIALS_FILE\" \"$AUTH_CREDENTIALS_FILE\"\n echo \"Kubernetes Secret already contains credentials file, copied to the right place: $AUTH_CREDENTIALS_FILE\"\n exit 0\nfi\n\n# Otherwise, make sure the access keys are mounted in the pod...\nif [ ! -e \"$AWS_ACCESS_KEY_ID_FILE\" ] || [ ! -e \"$AWS_SECRET_ACCESS_KEY_FILE\" ]; then\n echo \"AWS keys not found\"\n exit 1\nfi\n\n# And create an auth file based on those keys\ncat \u003c\u003c-EOF \u003e \"$AUTH_CREDENTIALS_FILE\"\n[default]\naws_access_key_id=$(cat \"$AWS_ACCESS_KEY_ID_FILE\")\naws_secret_access_key=$(cat \"$AWS_SECRET_ACCESS_KEY_FILE\")\nEOF\necho \"Kubernetes Secret does not have credentials file, created a fresh one at $AUTH_CREDENTIALS_FILE\"\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7cd549121e9686d937298de79f1fa90eb6136489a692f5cd58135ed1c367514b", "imagePullPolicy": "IfNotPresent", "name": "init-aws-credentials-file", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "aws-ebs-csi-driver-controller-sa", "serviceAccountName": "aws-ebs-csi-driver-controller-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "emptyDir": {}, "name": "socket-dir" }, { "name": "metrics-serving-cert", "secret": { "defaultMode": 420, "secretName": "aws-ebs-csi-driver-controller-metrics-serving-cert" } }, { "name": "aws-keys", "secret": { "defaultMode": 420, "secretName": "ebs-cloud-credentials" } }, { "emptyDir": {}, "name": "aws-auth" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "aws-ebs-csi-driver-trusted-ca-bundle" }, "name": "non-standard-root-system-trust-ca-bundle" } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 3, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "config.openshift.io/inject-proxy": "csi-driver", "config.openshift.io/inject-proxy-cabundle": "csi-driver", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "3", "operator.openshift.io/dep-5d02b1dbbfd3b1124537c2229e410cd2adfa2": "b3aTLg==", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "CtrS5Q==", "operator.openshift.io/spec-hash": "c2e1c8b153745acc64cfb8f6e2aeebdae8dc7ada2e60cc19eac8300359b2cfc6" }, "creationTimestamp": "2026-01-28T13:10:38Z", "generation": 3, "labels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "958988548" }, "name": "aws-ebs-csi-driver-controller-958988548", "namespace": "openshift-cluster-csi-drivers", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "aws-ebs-csi-driver-controller", "uid": "4dd940dc-ee3e-4fe2-92c4-5f49c12161f0" } ], "resourceVersion": "8340", "uid": "76b32976-1b75-496e-a624-e11b5bddc85e" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "958988548" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict-local-volumes": "aws-auth,aws-keys,bound-sa-token,socket-dir", "openshift.io/required-scc": "restricted-v2", "operator.openshift.io/dep-5d02b1dbbfd3b1124537c2229e410cd2adfa2": "b3aTLg==", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "CtrS5Q==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "958988548" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "controller", "--endpoint=$(CSI_ENDPOINT)", "--k8s-tag-cluster-id=clusterpool418-dcxsj-jj64q", "--logtostderr", "--http-endpoint=localhost:8201", "--v=2", "--batching=true" ], "env": [ { "name": "CSI_ENDPOINT", "value": "unix:///var/lib/csi/sockets/pluginproxy/csi.sock" }, { "name": "AWS_SDK_LOAD_CONFIG", "value": "1" }, { "name": "AWS_CONFIG_FILE", "value": "/var/run/aws/auth/credentials" }, { "name": "AWS_REGION", "value": "us-east-1" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:32c346d660004ce50755aa9cf9c1ba33a5be6e335f1978089358f84f1601794a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "csi-driver", "ports": [ { "containerPort": 10301, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true }, { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "non-standard-root-system-trust-ca-bundle", "readOnly": true } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9201", "--upstream=http://127.0.0.1:8201/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-8201", "ports": [ { "containerPort": 9201, "name": "driver-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8202", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--default-fstype=ext4", "--feature-gates=Topology=true", "--extra-create-metadata=true", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:72894ec1bb4085468ec1a68b2d613f681a81d7cb2d87022298f633d5a95e3e3e", "imagePullPolicy": "IfNotPresent", "name": "csi-provisioner", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9202", "--upstream=http://127.0.0.1:8202/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "provisioner-kube-rbac-proxy", "ports": [ { "containerPort": 9202, "name": "provisioner-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8203", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:434dd79c85019297ac1a5c43ded5626f7243311562f4b30f85ddcaa680b143a9", "imagePullPolicy": "IfNotPresent", "name": "csi-attacher", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9203", "--upstream=http://127.0.0.1:8203/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "attacher-kube-rbac-proxy", "ports": [ { "containerPort": 9203, "name": "attacher-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8204", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--workers=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:068f5954fa0f1803569b7c393e6d920abdfa8e8ff5a74e7ee53d54d30cc10088", "imagePullPolicy": "IfNotPresent", "name": "csi-resizer", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9204", "--upstream=http://127.0.0.1:8204/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "resizer-kube-rbac-proxy", "ports": [ { "containerPort": 9204, "name": "resizer-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--metrics-address=localhost:8205", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--extra-create-metadata", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:466a2c4d28b265693e13dc5ef49790e4c377e4e9463f6258de1977bcb5ab39ed", "imagePullPolicy": "IfNotPresent", "name": "csi-snapshotter", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9205", "--upstream=http://127.0.0.1:8205/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "snapshotter-kube-rbac-proxy", "ports": [ { "containerPort": 9205, "name": "snapshotter-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/csi/csi.sock", "--health-port=10301", "--v=2", "--probe-timeout=3s" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7fa1cef8374dc9b9c4ba3a63a8ff65bdad518bf16fd9f8f0b551ec3dde3571da", "imagePullPolicy": "IfNotPresent", "name": "csi-liveness-probe", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/csi", "name": "socket-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "# Define file path variables\nCREDENTIALS_FILE=/var/run/aws/keys/credentials\nAUTH_CREDENTIALS_FILE=/var/run/aws/auth/credentials\nAWS_ACCESS_KEY_ID_FILE=/var/run/aws/keys/aws_access_key_id\nAWS_SECRET_ACCESS_KEY_FILE=/var/run/aws/keys/aws_secret_access_key\n\n# If credentials key exists in ebs-cloud-credentials secret, then use it as the auth file\nif [ -e \"$CREDENTIALS_FILE\" ]; then\n cp \"$CREDENTIALS_FILE\" \"$AUTH_CREDENTIALS_FILE\"\n echo \"Kubernetes Secret already contains credentials file, copied to the right place: $AUTH_CREDENTIALS_FILE\"\n exit 0\nfi\n\n# Otherwise, make sure the access keys are mounted in the pod...\nif [ ! -e \"$AWS_ACCESS_KEY_ID_FILE\" ] || [ ! -e \"$AWS_SECRET_ACCESS_KEY_FILE\" ]; then\n echo \"AWS keys not found\"\n exit 1\nfi\n\n# And create an auth file based on those keys\ncat \u003c\u003c-EOF \u003e \"$AUTH_CREDENTIALS_FILE\"\n[default]\naws_access_key_id=$(cat \"$AWS_ACCESS_KEY_ID_FILE\")\naws_secret_access_key=$(cat \"$AWS_SECRET_ACCESS_KEY_FILE\")\nEOF\necho \"Kubernetes Secret does not have credentials file, created a fresh one at $AUTH_CREDENTIALS_FILE\"\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7cd549121e9686d937298de79f1fa90eb6136489a692f5cd58135ed1c367514b", "imagePullPolicy": "IfNotPresent", "name": "init-aws-credentials-file", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "aws-ebs-csi-driver-controller-sa", "serviceAccountName": "aws-ebs-csi-driver-controller-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "emptyDir": {}, "name": "socket-dir" }, { "name": "metrics-serving-cert", "secret": { "defaultMode": 420, "secretName": "aws-ebs-csi-driver-controller-metrics-serving-cert" } }, { "name": "aws-keys", "secret": { "defaultMode": 420, "secretName": "ebs-cloud-credentials" } }, { "emptyDir": {}, "name": "aws-auth" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "aws-ebs-csi-driver-trusted-ca-bundle" }, "name": "non-standard-root-system-trust-ca-bundle" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "config.openshift.io/inject-proxy": "csi-driver", "config.openshift.io/inject-proxy-cabundle": "csi-driver", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "CtrS5Q==", "operator.openshift.io/spec-hash": "50b85d18a28ff93275055b49d8eb53031e33d1a92b3b4b1137db029af0a2d7bd" }, "creationTimestamp": "2026-01-28T13:10:35Z", "generation": 3, "labels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "965879bc8" }, "name": "aws-ebs-csi-driver-controller-965879bc8", "namespace": "openshift-cluster-csi-drivers", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "aws-ebs-csi-driver-controller", "uid": "4dd940dc-ee3e-4fe2-92c4-5f49c12161f0" } ], "resourceVersion": "6144", "uid": "0042ad81-a3e1-4358-8103-5e8f7b744e7c" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "965879bc8" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict-local-volumes": "aws-auth,aws-keys,bound-sa-token,socket-dir", "openshift.io/required-scc": "restricted-v2", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "CtrS5Q==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "965879bc8" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "controller", "--endpoint=$(CSI_ENDPOINT)", "--k8s-tag-cluster-id=clusterpool418-dcxsj-jj64q", "--logtostderr", "--http-endpoint=localhost:8201", "--v=2", "--batching=true" ], "env": [ { "name": "CSI_ENDPOINT", "value": "unix:///var/lib/csi/sockets/pluginproxy/csi.sock" }, { "name": "AWS_SDK_LOAD_CONFIG", "value": "1" }, { "name": "AWS_CONFIG_FILE", "value": "/var/run/aws/auth/credentials" }, { "name": "AWS_REGION", "value": "us-east-1" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:32c346d660004ce50755aa9cf9c1ba33a5be6e335f1978089358f84f1601794a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "csi-driver", "ports": [ { "containerPort": 10301, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true }, { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9201", "--upstream=http://127.0.0.1:8201/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=${TLS_CIPHER_SUITES}", "--tls-min-version=${TLS_MIN_VERSION}", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-8201", "ports": [ { "containerPort": 9201, "name": "driver-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8202", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--default-fstype=ext4", "--feature-gates=Topology=true", "--extra-create-metadata=true", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:72894ec1bb4085468ec1a68b2d613f681a81d7cb2d87022298f633d5a95e3e3e", "imagePullPolicy": "IfNotPresent", "name": "csi-provisioner", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9202", "--upstream=http://127.0.0.1:8202/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=${TLS_CIPHER_SUITES}", "--tls-min-version=${TLS_MIN_VERSION}", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "provisioner-kube-rbac-proxy", "ports": [ { "containerPort": 9202, "name": "provisioner-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8203", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:434dd79c85019297ac1a5c43ded5626f7243311562f4b30f85ddcaa680b143a9", "imagePullPolicy": "IfNotPresent", "name": "csi-attacher", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9203", "--upstream=http://127.0.0.1:8203/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=${TLS_CIPHER_SUITES}", "--tls-min-version=${TLS_MIN_VERSION}", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "attacher-kube-rbac-proxy", "ports": [ { "containerPort": 9203, "name": "attacher-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8204", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--workers=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:068f5954fa0f1803569b7c393e6d920abdfa8e8ff5a74e7ee53d54d30cc10088", "imagePullPolicy": "IfNotPresent", "name": "csi-resizer", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9204", "--upstream=http://127.0.0.1:8204/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=${TLS_CIPHER_SUITES}", "--tls-min-version=${TLS_MIN_VERSION}", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "resizer-kube-rbac-proxy", "ports": [ { "containerPort": 9204, "name": "resizer-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--metrics-address=localhost:8205", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--extra-create-metadata", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:466a2c4d28b265693e13dc5ef49790e4c377e4e9463f6258de1977bcb5ab39ed", "imagePullPolicy": "IfNotPresent", "name": "csi-snapshotter", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9205", "--upstream=http://127.0.0.1:8205/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=${TLS_CIPHER_SUITES}", "--tls-min-version=${TLS_MIN_VERSION}", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "snapshotter-kube-rbac-proxy", "ports": [ { "containerPort": 9205, "name": "snapshotter-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/csi/csi.sock", "--health-port=10301", "--v=2", "--probe-timeout=3s" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7fa1cef8374dc9b9c4ba3a63a8ff65bdad518bf16fd9f8f0b551ec3dde3571da", "imagePullPolicy": "IfNotPresent", "name": "csi-liveness-probe", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/csi", "name": "socket-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "# Define file path variables\nCREDENTIALS_FILE=/var/run/aws/keys/credentials\nAUTH_CREDENTIALS_FILE=/var/run/aws/auth/credentials\nAWS_ACCESS_KEY_ID_FILE=/var/run/aws/keys/aws_access_key_id\nAWS_SECRET_ACCESS_KEY_FILE=/var/run/aws/keys/aws_secret_access_key\n\n# If credentials key exists in ebs-cloud-credentials secret, then use it as the auth file\nif [ -e \"$CREDENTIALS_FILE\" ]; then\n cp \"$CREDENTIALS_FILE\" \"$AUTH_CREDENTIALS_FILE\"\n echo \"Kubernetes Secret already contains credentials file, copied to the right place: $AUTH_CREDENTIALS_FILE\"\n exit 0\nfi\n\n# Otherwise, make sure the access keys are mounted in the pod...\nif [ ! -e \"$AWS_ACCESS_KEY_ID_FILE\" ] || [ ! -e \"$AWS_SECRET_ACCESS_KEY_FILE\" ]; then\n echo \"AWS keys not found\"\n exit 1\nfi\n\n# And create an auth file based on those keys\ncat \u003c\u003c-EOF \u003e \"$AUTH_CREDENTIALS_FILE\"\n[default]\naws_access_key_id=$(cat \"$AWS_ACCESS_KEY_ID_FILE\")\naws_secret_access_key=$(cat \"$AWS_SECRET_ACCESS_KEY_FILE\")\nEOF\necho \"Kubernetes Secret does not have credentials file, created a fresh one at $AUTH_CREDENTIALS_FILE\"\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7cd549121e9686d937298de79f1fa90eb6136489a692f5cd58135ed1c367514b", "imagePullPolicy": "IfNotPresent", "name": "init-aws-credentials-file", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "aws-ebs-csi-driver-controller-sa", "serviceAccountName": "aws-ebs-csi-driver-controller-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "emptyDir": {}, "name": "socket-dir" }, { "name": "metrics-serving-cert", "secret": { "defaultMode": 420, "secretName": "aws-ebs-csi-driver-controller-metrics-serving-cert" } }, { "name": "aws-keys", "secret": { "defaultMode": 420, "secretName": "ebs-cloud-credentials" } }, { "emptyDir": {}, "name": "aws-auth" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "config.openshift.io/inject-proxy": "aws-ebs-csi-driver-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "d2d737b86b069fb7efbdb61434cadf856a9640da6b88c59de6cd2010ce161a0c", "storage.openshift.io/remove-from": "guest" }, "creationTimestamp": "2026-01-28T13:10:31Z", "generation": 1, "labels": { "name": "aws-ebs-csi-driver-operator", "pod-template-hash": "866988d46" }, "name": "aws-ebs-csi-driver-operator-866988d46", "namespace": "openshift-cluster-csi-drivers", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "aws-ebs-csi-driver-operator", "uid": "2ce83161-f290-489e-81bb-36f953e6ba57" } ], "resourceVersion": "37440", "uid": "2abbeaa5-be9c-4c81-a2f7-9da68d7900be" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "aws-ebs-csi-driver-operator", "pod-template-hash": "866988d46" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "aws-ebs-csi-driver-operator", "pod-template-hash": "866988d46" } }, "spec": { "containers": [ { "args": [ "start", "-v=2" ], "env": [ { "name": "DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:32c346d660004ce50755aa9cf9c1ba33a5be6e335f1978089358f84f1601794a" }, { "name": "PROVISIONER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:72894ec1bb4085468ec1a68b2d613f681a81d7cb2d87022298f633d5a95e3e3e" }, { "name": "ATTACHER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:434dd79c85019297ac1a5c43ded5626f7243311562f4b30f85ddcaa680b143a9" }, { "name": "RESIZER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:068f5954fa0f1803569b7c393e6d920abdfa8e8ff5a74e7ee53d54d30cc10088" }, { "name": "SNAPSHOTTER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:466a2c4d28b265693e13dc5ef49790e4c377e4e9463f6258de1977bcb5ab39ed" }, { "name": "NODE_DRIVER_REGISTRAR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca3c49ae637d569b755a3984240d263329f66317aff2cf98e4c2d857f39f0275" }, { "name": "LIVENESS_PROBE_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7fa1cef8374dc9b9c4ba3a63a8ff65bdad518bf16fd9f8f0b551ec3dde3571da" }, { "name": "KUBE_RBAC_PROXY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d" }, { "name": "TOOLS_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7cd549121e9686d937298de79f1fa90eb6136489a692f5cd58135ed1c367514b" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "${OPERATOR_IMAGE_VERSION}" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:398e14b90032556d54b237e0fdfd9f8f9bd974801d37c683d89bdbf26c55ee8d", "imagePullPolicy": "IfNotPresent", "name": "aws-ebs-csi-driver-operator", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "aws-ebs-csi-driver-operator", "serviceAccountName": "aws-ebs-csi-driver-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true", "kubectl.kubernetes.io/default-container": "machine-approver-controller" }, "creationTimestamp": "2026-01-28T13:08:53Z", "generation": 2, "labels": { "app": "machine-approver", "pod-template-hash": "54b548fdb" }, "name": "machine-approver-54b548fdb", "namespace": "openshift-cluster-machine-approver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "machine-approver", "uid": "01637894-ced6-461c-87ce-44233e414424" } ], "resourceVersion": "2945", "uid": "717a0f3d-f86a-4845-8dcb-858d77164832" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "machine-approver", "pod-template-hash": "54b548fdb" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "machine-approver", "pod-template-hash": "54b548fdb" }, "name": "machine-approver" }, "spec": { "containers": [ { "args": [ "--secure-listen-address=0.0.0.0:9192", "--upstream=http://127.0.0.1:9191/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9192, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "auth-proxy-config" }, { "mountPath": "/etc/tls/private", "name": "machine-approver-tls" } ] }, { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2", "--logtostderr", "--leader-elect=true", "--leader-elect-lease-duration=137s", "--leader-elect-renew-deadline=107s", "--leader-elect-retry-period=26s", "--leader-elect-resource-namespace=openshift-cluster-machine-approver", "--api-group-version=machine.openshift.io/v1beta1", "--max-concurrent-reconciles=10" ], "command": [ "/usr/bin/machine-approver" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e0306b36b6133cfe79efc199717f39f8ba8df6af5561a871f516e7d32d234b7b", "imagePullPolicy": "IfNotPresent", "name": "machine-approver-controller", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "machine-approver-sa", "serviceAccountName": "machine-approver-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "auth-proxy-config" }, { "name": "machine-approver-tls", "secret": { "defaultMode": 420, "secretName": "machine-approver-tls" } }, { "configMap": { "defaultMode": 440, "name": "machine-approver-config", "optional": true }, "name": "config" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "2", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true", "kubectl.kubernetes.io/default-container": "machine-approver-controller" }, "creationTimestamp": "2026-01-28T13:09:16Z", "generation": 1, "labels": { "app": "machine-approver", "pod-template-hash": "84bd8b64c5" }, "name": "machine-approver-84bd8b64c5", "namespace": "openshift-cluster-machine-approver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "machine-approver", "uid": "01637894-ced6-461c-87ce-44233e414424" } ], "resourceVersion": "37285", "uid": "f78df93d-a732-4213-820e-eb152e14baf7" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "machine-approver", "pod-template-hash": "84bd8b64c5" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "machine-approver", "pod-template-hash": "84bd8b64c5" }, "name": "machine-approver" }, "spec": { "containers": [ { "args": [ "--secure-listen-address=0.0.0.0:9192", "--upstream=http://127.0.0.1:9191/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9192, "hostPort": 9192, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "auth-proxy-config" }, { "mountPath": "/etc/tls/private", "name": "machine-approver-tls" } ] }, { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2", "--logtostderr", "--leader-elect=true", "--leader-elect-lease-duration=137s", "--leader-elect-renew-deadline=107s", "--leader-elect-retry-period=26s", "--leader-elect-resource-namespace=openshift-cluster-machine-approver", "--api-group-version=machine.openshift.io/v1beta1", "--max-concurrent-reconciles=10" ], "command": [ "/usr/bin/machine-approver" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e0306b36b6133cfe79efc199717f39f8ba8df6af5561a871f516e7d32d234b7b", "imagePullPolicy": "IfNotPresent", "name": "machine-approver-controller", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "machine-approver-sa", "serviceAccountName": "machine-approver-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "auth-proxy-config" }, { "name": "machine-approver-tls", "secret": { "defaultMode": 420, "secretName": "machine-approver-tls" } }, { "configMap": { "defaultMode": 440, "name": "machine-approver-config", "optional": true }, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "NodeTuning", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:25Z", "generation": 1, "labels": { "name": "cluster-node-tuning-operator", "pod-template-hash": "5c6dbd988f" }, "name": "cluster-node-tuning-operator-5c6dbd988f", "namespace": "openshift-cluster-node-tuning-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-node-tuning-operator", "uid": "f762913f-e681-487a-a633-458945bbb2db" } ], "resourceVersion": "37834", "uid": "ed762189-679b-43f0-a56e-a2ab6d8c0ebe" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "cluster-node-tuning-operator", "pod-template-hash": "5c6dbd988f" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "anyuid", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "cluster-node-tuning-operator", "pod-template-hash": "5c6dbd988f" } }, "spec": { "containers": [ { "args": [ "-v=0" ], "command": [ "cluster-node-tuning-operator" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "RESYNC_PERIOD", "value": "600" }, { "name": "CLUSTER_NODE_TUNED_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3580708e3415c9fb3a1fd0c11b45ba0e4cfc2825af9428242a8aac56f3fac9a3" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3580708e3415c9fb3a1fd0c11b45ba0e4cfc2825af9428242a8aac56f3fac9a3", "imagePullPolicy": "IfNotPresent", "name": "cluster-node-tuning-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/secrets", "name": "node-tuning-operator-tls" }, { "mountPath": "/var/run/configmaps/trusted-ca/", "name": "trusted-ca" }, { "mountPath": "/apiserver.local.config/certificates", "name": "apiservice-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 499 }, "serviceAccount": "cluster-node-tuning-operator", "serviceAccountName": "cluster-node-tuning-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "node-tuning-operator-tls", "secret": { "defaultMode": 420, "secretName": "node-tuning-operator-tls" } }, { "name": "apiservice-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "apiserver.crt" }, { "key": "tls.key", "path": "apiserver.key" } ], "secretName": "performance-addon-operator-webhook-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "OperatorLifecycleManagerV1", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-01-28T13:08:11Z", "generation": 1, "labels": { "name": "cluster-olm-operator", "pod-template-hash": "866bbc66c5" }, "name": "cluster-olm-operator-866bbc66c5", "namespace": "openshift-cluster-olm-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-olm-operator", "uid": "3acff327-54bc-4c58-b657-c23e5b2f7978" } ], "resourceVersion": "38370", "uid": "b2cb2c78-d298-4e72-949b-0a9272fb2bce" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "cluster-olm-operator", "pod-template-hash": "866bbc66c5" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "cluster-olm-operator", "pod-template-hash": "866bbc66c5" } }, "spec": { "containers": [ { "args": [ "start" ], "command": [ "/cluster-olm-operator" ], "env": [ { "name": "OPERATOR_NAME", "value": "cluster-olm-operator" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" }, { "name": "KUBE_RBAC_PROXY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d" }, { "name": "CATALOGD_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9bdb5a41b2201109f610b40ca5791cdb118b061f322dee9682d4343a57a6cded" }, { "name": "OPERATOR_CONTROLLER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a289be85e2b0fb3e884c637c5d4e45df246a5260be06fd9dcbee1e18dc6c7341" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2136c0d61a3f1272ef362f0f10766831508abf97ea67b78dfebc6b5e2eaf5b17", "imagePullPolicy": "IfNotPresent", "name": "cluster-olm-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/serving-cert", "name": "cluster-olm-operator-serving-cert" }, { "mountPath": "/operand-assets", "name": "operand-assets" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "-c", "cp -a /openshift/manifests /operand-assets/catalogd" ], "command": [ "/bin/sh" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9bdb5a41b2201109f610b40ca5791cdb118b061f322dee9682d4343a57a6cded", "imagePullPolicy": "IfNotPresent", "name": "copy-catalogd-manifests", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/operand-assets", "name": "operand-assets" } ] }, { "args": [ "-c", "cp -a /openshift/manifests /operand-assets/operator-controller" ], "command": [ "/bin/sh" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a289be85e2b0fb3e884c637c5d4e45df246a5260be06fd9dcbee1e18dc6c7341", "imagePullPolicy": "IfNotPresent", "name": "copy-operator-controller-manifests", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/operand-assets", "name": "operand-assets" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cluster-olm-operator", "serviceAccountName": "cluster-olm-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "cluster-olm-operator-serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "cluster-olm-operator-serving-cert" } }, { "emptyDir": {}, "name": "operand-assets" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-01-28T13:11:11Z", "generation": 1, "labels": { "name": "cluster-samples-operator", "pod-template-hash": "ddc7ff9f8" }, "name": "cluster-samples-operator-ddc7ff9f8", "namespace": "openshift-cluster-samples-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-samples-operator", "uid": "a98fd163-fc2b-45b3-bd9e-7771b7c1fde9" } ], "resourceVersion": "38341", "uid": "0145762f-faee-4218-af60-958cbff53eaa" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "cluster-samples-operator", "pod-template-hash": "ddc7ff9f8" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "cluster-samples-operator", "pod-template-hash": "ddc7ff9f8" } }, "spec": { "containers": [ { "command": [ "cluster-samples-operator" ], "env": [ { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "OPERATOR_NAME", "value": "cluster-samples-operator" }, { "name": "RELEASE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6a1f428c21dcae4bd399269cbf957719fbfcb78c044f260e76c548feb55bc8ac", "imagePullPolicy": "IfNotPresent", "name": "cluster-samples-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/secrets", "name": "samples-operator-tls" } ] }, { "args": [ "--namespace=openshift-cluster-samples-operator", "--process-name=cluster-samples-operator", "--termination-grace-period=30s", "--files=/etc/secrets/tls.crt,/etc/secrets/tls.key" ], "command": [ "cluster-samples-operator-watch", "file-watcher-watchdog" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6a1f428c21dcae4bd399269cbf957719fbfcb78c044f260e76c548feb55bc8ac", "imagePullPolicy": "IfNotPresent", "name": "cluster-samples-operator-watch", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cluster-samples-operator", "serviceAccountName": "cluster-samples-operator", "shareProcessNamespace": true, "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "samples-operator-tls", "secret": { "defaultMode": 420, "secretName": "samples-operator-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "Storage", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:31Z", "generation": 1, "labels": { "name": "cluster-storage-operator", "pod-template-hash": "84b97c469d" }, "name": "cluster-storage-operator-84b97c469d", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-storage-operator", "uid": "7759bf38-8249-44b8-a712-b4733fb1b498" } ], "resourceVersion": "38696", "uid": "2be53931-2f16-4878-8914-032895aff371" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "cluster-storage-operator", "pod-template-hash": "84b97c469d" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "cluster-storage-operator", "pod-template-hash": "84b97c469d" } }, "spec": { "containers": [ { "args": [ "start", "-v=2", "--terminate-on-files=/var/run/secrets/serving-cert/tls.crt", "--terminate-on-files=/var/run/secrets/serving-cert/tls.key" ], "command": [ "cluster-storage-operator", "start" ], "env": [ { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" }, { "name": "OPERAND_IMAGE_VERSION", "value": "4.18.31" }, { "name": "AWS_EBS_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:398e14b90032556d54b237e0fdfd9f8f9bd974801d37c683d89bdbf26c55ee8d" }, { "name": "AWS_EBS_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:32c346d660004ce50755aa9cf9c1ba33a5be6e335f1978089358f84f1601794a" }, { "name": "GCP_PD_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ec2d11c5a70108ae6ce40b5b0c90e7b82efed35ce28e9e834208999bd0e98d0a" }, { "name": "GCP_PD_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:59e8d612e3595c49bd7aa41befb69288454cb49328d83ea5fc41470d0af0a2ba" }, { "name": "OPENSTACK_CINDER_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e6398c068b8e690d5ded0f838fbbbe15554ecf325b57446ab6cbba83b86dcf8c" }, { "name": "OPENSTACK_CINDER_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:47d8c55ab07778fc64888f1422c43c5b10affff763bcf65aacd6a88852068b3f" }, { "name": "OVIRT_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:af62aafbc0cd47ae14f4e8086231c9c05bbd16e16b664c89748b2e9ce3b4375a" }, { "name": "OVIRT_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:baddbff1d77b02f702f26683e79b303670bd927a5d1fae01269b39c90a63cad7" }, { "name": "MANILA_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e649908c6055449076e6467ed9ef43fc11749a7e76597ccaf3f3c06b3e0d3953" }, { "name": "MANILA_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:aa3e7a73d1f8cd151de13789f2c299aca19a7dac3d11fc661630cdf1c79fabeb" }, { "name": "MANILA_NFS_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6bc92a45aa4a451eb048055339829f7cb7affdf23e163ac0469b1a80bb03896d" }, { "name": "PROVISIONER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:72894ec1bb4085468ec1a68b2d613f681a81d7cb2d87022298f633d5a95e3e3e" }, { "name": "ATTACHER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:434dd79c85019297ac1a5c43ded5626f7243311562f4b30f85ddcaa680b143a9" }, { "name": "RESIZER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:068f5954fa0f1803569b7c393e6d920abdfa8e8ff5a74e7ee53d54d30cc10088" }, { "name": "SNAPSHOTTER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:466a2c4d28b265693e13dc5ef49790e4c377e4e9463f6258de1977bcb5ab39ed" }, { "name": "NODE_DRIVER_REGISTRAR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca3c49ae637d569b755a3984240d263329f66317aff2cf98e4c2d857f39f0275" }, { "name": "LIVENESS_PROBE_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7fa1cef8374dc9b9c4ba3a63a8ff65bdad518bf16fd9f8f0b551ec3dde3571da" }, { "name": "VSPHERE_PROBLEM_DETECTOR_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c559e2bdd66ce30cb7ce361b75be2d4ebba941513f4c7ca7832dc92ab9e14929" }, { "name": "AZURE_DISK_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6283f03994d1c16c14dd8cd87a29874da0cfa9befc52c0c37b8981f75d758cca" }, { "name": "AZURE_DISK_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:549d7305fdf9552ba72edfe4008f46a3d4de5887c13f189c7bd5598dd1db398e" }, { "name": "AZURE_FILE_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b3a6aa7b7240ed51db81b5015fc117d02b179705da8f1344d5d6d4d2cd81a66d" }, { "name": "AZURE_FILE_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8329ca72481880b1b13ca92531741d2baf4cacb4cadb5dd9f2a1881e47a1eb99" }, { "name": "KUBE_RBAC_PROXY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d" }, { "name": "VMWARE_VSPHERE_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:fbd01b4db890e9f0762feff0c00d9cdfdea3d89c2c01d258fff2bec1f538442a" }, { "name": "VMWARE_VSPHERE_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f790fe31697766a6e057e1db0e263f1008e0754244d69b38863e79b0e13f3a17" }, { "name": "VMWARE_VSPHERE_SYNCER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9d65af2943a545075e22a2331d7f0f3e1fbcc087f9d9bc4f1723a1b405b9fd45" }, { "name": "CLUSTER_CLOUD_CONTROLLER_MANAGER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:76cbfb8bdd89e148fd7784868570466a611431baf4fd76e83e9c5cbdc4ed1487" }, { "name": "IBM_VPC_BLOCK_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a805720706520951fe21d751e07fadb80286783829876de0c71ec4e3ef36e7e5" }, { "name": "IBM_VPC_BLOCK_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0be4773b215ce3c3d1ebc31c972af86f146f24dfe811f12644af71cd0dd2a03f" }, { "name": "POWERVS_BLOCK_CSI_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d3419d33a6735a6a46349c6837936232fa3bf04d19a7c5c8024a9efde9636932" }, { "name": "POWERVS_BLOCK_CSI_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6125367645921ad61bb71372bbe554772c007f73a9096b18a0408d7cb00cfa57" }, { "name": "TOOLS_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7cd549121e9686d937298de79f1fa90eb6136489a692f5cd58135ed1c367514b" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c501b1ffddec1df80d534eb915eeb497f7796f63d1b13f63cba3642729a760c5", "imagePullPolicy": "IfNotPresent", "name": "cluster-storage-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/serving-cert", "name": "cluster-storage-operator-serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 11411, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cluster-storage-operator", "serviceAccountName": "cluster-storage-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "cluster-storage-operator-serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "cluster-storage-operator-serving-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "9ea4153ac6f93c58389a23c89fd4bec2dd2f4a71597adca068864e328fe7cb12" }, "creationTimestamp": "2026-01-28T13:10:31Z", "generation": 1, "labels": { "app": "csi-snapshot-controller", "pod-template-hash": "66c9ff4668" }, "name": "csi-snapshot-controller-66c9ff4668", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "csi-snapshot-controller", "uid": "6cf7f65a-c0ac-4c37-b134-b77ee09e40df" } ], "resourceVersion": "38263", "uid": "d4692523-ad62-44ae-99fa-22f4f37d864b" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "csi-snapshot-controller", "pod-template-hash": "66c9ff4668" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "csi-snapshot-controller", "pod-template-hash": "66c9ff4668" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app": "csi-snapshot-controller" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "--v=2", "--leader-election=true", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-storage-operator" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:45aac33488178f6e2afa38a55eb2ba44048dd0bb1f833cf515b220495c0088f9", "imagePullPolicy": "IfNotPresent", "name": "snapshot-controller", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "csi-snapshot-controller", "serviceAccountName": "csi-snapshot-controller", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "CSISnapshot", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:26Z", "generation": 1, "labels": { "app": "csi-snapshot-controller-operator", "pod-template-hash": "67bff64cc8" }, "name": "csi-snapshot-controller-operator-67bff64cc8", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "csi-snapshot-controller-operator", "uid": "dce9b873-5af5-4298-9dd8-652fc1e307cc" } ], "resourceVersion": "37913", "uid": "ea971076-6e9c-4719-aa8a-a55d5d7f9463" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "csi-snapshot-controller-operator", "pod-template-hash": "67bff64cc8" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "csi-snapshot-controller-operator", "pod-template-hash": "67bff64cc8" } }, "spec": { "containers": [ { "args": [ "start", "-v=2" ], "env": [ { "name": "OPERAND_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:45aac33488178f6e2afa38a55eb2ba44048dd0bb1f833cf515b220495c0088f9" }, { "name": "WEBHOOK_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0d1d1fb554c1bce4e35293e24aba2a24e30218f82379a61c54c582552ba62a07" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" }, { "name": "OPERAND_IMAGE_VERSION", "value": "4.18.31" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a754c86472fa37a7f8ef71055a41a2f31d368d4a079a45e0f7bb8b152af5f058", "imagePullPolicy": "IfNotPresent", "name": "csi-snapshot-controller-operator", "resources": { "requests": { "cpu": "10m", "memory": "65Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "csi-snapshot-controller-operator", "serviceAccountName": "csi-snapshot-controller-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "2", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "kubernetes.io/description": "The cluster-version operator manages OpenShift updates and reconciles core resources and cluster operators." }, "creationTimestamp": "2026-01-28T13:08:49Z", "generation": 1, "labels": { "k8s-app": "cluster-version-operator", "pod-template-hash": "7cfb94b6cc" }, "name": "cluster-version-operator-7cfb94b6cc", "namespace": "openshift-cluster-version", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-version-operator", "uid": "4ecd7285-7b56-4b19-ab06-2aa6cfe126ef" } ], "resourceVersion": "36386", "uid": "aa5b23ca-c283-47d8-8b90-a58aef3701ce" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "k8s-app": "cluster-version-operator", "pod-template-hash": "7cfb94b6cc" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "hostaccess", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "cluster-version-operator", "pod-template-hash": "7cfb94b6cc" }, "name": "cluster-version-operator" }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "start", "--release-image=quay.io/openshift-release-dev/ocp-release@sha256:da67fb871dd95ed19a383dce300fb36835092c1a459587d5a1276aa5a50ec43f", "--enable-auto-update=false", "--listen=0.0.0.0:9099", "--serving-cert-file=/etc/tls/serving-cert/tls.crt", "--serving-key-file=/etc/tls/serving-cert/tls.key", "--v=2", "--always-enable-capabilities=Ingress" ], "env": [ { "name": "OPERATOR_IMAGE_VERSION", "value": "0.0.1-snapshot" }, { "name": "KUBERNETES_SERVICE_PORT", "value": "6443" }, { "name": "KUBERNETES_SERVICE_HOST", "value": "api-int.clusterpool418-dcxsj.rhtap.devcluster.openshift.com" }, { "name": "NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "CLUSTER_PROFILE", "value": "self-managed-high-availability" } ], "image": "quay.io/openshift-release-dev/ocp-release@sha256:da67fb871dd95ed19a383dce300fb36835092c1a459587d5a1276aa5a50ec43f", "imagePullPolicy": "IfNotPresent", "name": "cluster-version-operator", "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/ssl/certs", "name": "etc-ssl-certs", "readOnly": true }, { "mountPath": "/etc/cvo/updatepayloads", "name": "etc-cvo-updatepayloads", "readOnly": true }, { "mountPath": "/etc/tls/serving-cert", "name": "serving-cert", "readOnly": true }, { "mountPath": "/etc/tls/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount", "name": "kube-api-access", "readOnly": true } ] } ], "dnsPolicy": "Default", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 130, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/network-unavailable", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/not-ready", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/etc/ssl/certs", "type": "" }, "name": "etc-ssl-certs" }, { "hostPath": { "path": "/etc/cvo/updatepayloads", "type": "" }, "name": "etc-cvo-updatepayloads" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "cluster-version-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "openshift-service-ca.crt" }, "name": "service-ca" }, { "name": "kube-api-access", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "expirationSeconds": 3600, "path": "token" } }, { "configMap": { "items": [ { "key": "ca.crt", "path": "ca.crt" } ], "name": "kube-root-ca.crt" } }, { "downwardAPI": { "items": [ { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" }, "path": "namespace" } ] } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "kubernetes.io/description": "The cluster-version operator manages OpenShift updates and reconciles core resources and cluster operators." }, "creationTimestamp": "2026-01-28T13:07:46Z", "generation": 2, "labels": { "k8s-app": "cluster-version-operator", "pod-template-hash": "fd987677f" }, "name": "cluster-version-operator-fd987677f", "namespace": "openshift-cluster-version", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-version-operator", "uid": "4ecd7285-7b56-4b19-ab06-2aa6cfe126ef" } ], "resourceVersion": "2567", "uid": "3d3df963-5cb4-4408-bde5-f5f3db3034f5" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "k8s-app": "cluster-version-operator", "pod-template-hash": "fd987677f" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "hostaccess", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "cluster-version-operator", "pod-template-hash": "fd987677f" }, "name": "cluster-version-operator" }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "start", "--release-image=quay.io/openshift-release-dev/ocp-release@sha256:da67fb871dd95ed19a383dce300fb36835092c1a459587d5a1276aa5a50ec43f", "--enable-auto-update=false", "--listen=0.0.0.0:9099", "--serving-cert-file=/etc/tls/serving-cert/tls.crt", "--serving-key-file=/etc/tls/serving-cert/tls.key", "--v=2", "--always-enable-capabilities=Ingress" ], "env": [ { "name": "OPERATOR_IMAGE_VERSION", "value": "0.0.1-snapshot" }, { "name": "KUBERNETES_SERVICE_PORT", "value": "6443" }, { "name": "KUBERNETES_SERVICE_HOST", "value": "127.0.0.1" }, { "name": "NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "CLUSTER_PROFILE", "value": "self-managed-high-availability" } ], "image": "quay.io/openshift-release-dev/ocp-release@sha256:da67fb871dd95ed19a383dce300fb36835092c1a459587d5a1276aa5a50ec43f", "imagePullPolicy": "IfNotPresent", "name": "cluster-version-operator", "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/ssl/certs", "name": "etc-ssl-certs", "readOnly": true }, { "mountPath": "/etc/cvo/updatepayloads", "name": "etc-cvo-updatepayloads", "readOnly": true }, { "mountPath": "/etc/tls/serving-cert", "name": "serving-cert", "readOnly": true }, { "mountPath": "/etc/tls/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount", "name": "kube-api-access", "readOnly": true } ] } ], "dnsPolicy": "Default", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 130, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/network-unavailable", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/not-ready", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/etc/ssl/certs", "type": "" }, "name": "etc-ssl-certs" }, { "hostPath": { "path": "/etc/cvo/updatepayloads", "type": "" }, "name": "etc-cvo-updatepayloads" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "cluster-version-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "openshift-service-ca.crt" }, "name": "service-ca" }, { "name": "kube-api-access", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "expirationSeconds": 3600, "path": "token" } }, { "configMap": { "items": [ { "key": "ca.crt", "path": "ca.crt" } ], "name": "kube-root-ca.crt" } }, { "downwardAPI": { "items": [ { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" }, "path": "namespace" } ] } } ] } } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:30Z", "generation": 1, "labels": { "app": "openshift-config-operator", "pod-template-hash": "8b9f84fd7" }, "name": "openshift-config-operator-8b9f84fd7", "namespace": "openshift-config-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-config-operator", "uid": "e7a0c304-1dd9-40ae-865b-582fa07bdd6c" } ], "resourceVersion": "39099", "uid": "dfcc1072-4109-4be8-b732-3cde05dfb391" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "openshift-config-operator", "pod-template-hash": "8b9f84fd7" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-config-operator", "pod-template-hash": "8b9f84fd7" }, "name": "openshift-config-operator" }, "spec": { "containers": [ { "command": [ "cluster-config-operator", "operator", "--operator-version=$(OPERATOR_IMAGE_VERSION)", "--authoritative-feature-gate-dir=/available-featuregates" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0706c20828bdf978d0be9e4f25ddd23b13810f8b3417531f231eb5abf59a0ba9" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" }, { "name": "OPERAND_IMAGE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0706c20828bdf978d0be9e4f25ddd23b13810f8b3417531f231eb5abf59a0ba9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 3, "periodSeconds": 3, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "openshift-config-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 3, "periodSeconds": 3, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/available-featuregates", "name": "available-featuregates" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "write-available-featuresets", "--asset-output-dir=/available-featuregates", "--payload-version=$(OPERATOR_IMAGE_VERSION)" ], "env": [ { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:db4a5c46febe8e9c51cb60c20b7760b9d396fae23bfbc91dacdcd9402cc94075", "imagePullPolicy": "IfNotPresent", "name": "openshift-api", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/available-featuregates", "name": "available-featuregates" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-config-operator", "serviceAccountName": "openshift-config-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "config-operator-serving-cert" } }, { "emptyDir": { "sizeLimit": "100Mi" }, "name": "available-featuregates" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "config.openshift.io/inject-proxy": "console-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:17:58Z", "generation": 1, "labels": { "name": "console-operator", "pod-template-hash": "68984c957b" }, "name": "console-operator-68984c957b", "namespace": "openshift-console-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console-operator", "uid": "2b36fd04-f6bc-4dba-b4b1-34162b8921d8" } ], "resourceVersion": "38877", "uid": "31382294-ec28-4388-a621-24e6e17af571" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "console-operator", "pod-template-hash": "68984c957b" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "console-operator", "pod-template-hash": "68984c957b" } }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/controller-config.yaml" ], "command": [ "console", "operator" ], "env": [ { "name": "CONSOLE_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e" }, { "name": "DOWNLOADS_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6adba842183a269ae8f503d3df3efd8a07a074d10ec27eb3766970826e58e596" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" }, { "name": "OPERATOR_NAME", "value": "console-operator" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a83be0f61e6b12fe6275e5753cc7ab4cafd6e66ee6179a703e5d8aac95e42ca2", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "console-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console-operator", "serviceAccountName": "console-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "console-operator-config" }, "name": "config" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca" }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19068", "console.openshift.io/console-config-version": "19164", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19072", "console.openshift.io/proxy-config-version": "535", "console.openshift.io/service-ca-config-version": "19167", "console.openshift.io/trusted-ca-config-version": "19186", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "0de46974a8e94bb121e5616150e4e2a365846e8182c6062bb1eba5223bf348d3" }, "creationTimestamp": "2026-01-28T13:18:25Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "56d7cbc77f" }, "name": "console-56d7cbc77f", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "7bcf0c98-3e94-4051-afcb-eb1cde602b24" } ], "resourceVersion": "22378", "uid": "3500a582-cd21-4474-996d-4385fb3a199e" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "56d7cbc77f" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19068", "console.openshift.io/console-config-version": "19164", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19072", "console.openshift.io/proxy-config-version": "535", "console.openshift.io/service-ca-config-version": "19167", "console.openshift.io/trusted-ca-config-version": "19186", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "56d7cbc77f" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19068", "console.openshift.io/console-config-version": "22342", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19072", "console.openshift.io/proxy-config-version": "535", "console.openshift.io/service-ca-config-version": "20532", "console.openshift.io/trusted-ca-config-version": "19186", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "3", "operator.openshift.io/spec-hash": "74ddfaf20fd082805e793a37b1b577d706daced138c21a3baf5a4453c36c1bb2" }, "creationTimestamp": "2026-01-28T13:19:59Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "5c668d6f89" }, "name": "console-5c668d6f89", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "7bcf0c98-3e94-4051-afcb-eb1cde602b24" } ], "resourceVersion": "24288", "uid": "d8c4fbc3-8514-430a-a37a-576fec9e0f03" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "5c668d6f89" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19068", "console.openshift.io/console-config-version": "22342", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19072", "console.openshift.io/proxy-config-version": "535", "console.openshift.io/service-ca-config-version": "20532", "console.openshift.io/trusted-ca-config-version": "19186", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "5c668d6f89" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19068", "console.openshift.io/console-config-version": "24253", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19072", "console.openshift.io/proxy-config-version": "535", "console.openshift.io/service-ca-config-version": "20532", "console.openshift.io/trusted-ca-config-version": "19186", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "5", "operator.openshift.io/spec-hash": "083d68e4bef9b07f808281bf66c024d2cca283681dc568b6fdb10beb5754aa80" }, "creationTimestamp": "2026-01-28T13:21:29Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "5cc7f99cb6" }, "name": "console-5cc7f99cb6", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "7bcf0c98-3e94-4051-afcb-eb1cde602b24" } ], "resourceVersion": "25664", "uid": "c4db4e39-065c-4744-a79e-c1cadfd56e3d" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "5cc7f99cb6" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19068", "console.openshift.io/console-config-version": "24253", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19072", "console.openshift.io/proxy-config-version": "535", "console.openshift.io/service-ca-config-version": "20532", "console.openshift.io/trusted-ca-config-version": "19186", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "5cc7f99cb6" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19068", "console.openshift.io/console-config-version": "25188", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19072", "console.openshift.io/proxy-config-version": "535", "console.openshift.io/service-ca-config-version": "20532", "console.openshift.io/trusted-ca-config-version": "19186", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "6", "operator.openshift.io/spec-hash": "6503f61cca2ba8af4ce717085b966cff4d3e45075d17a731dff54b2ffd4a298d" }, "creationTimestamp": "2026-01-28T13:23:40Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "5cc95b4b5d" }, "name": "console-5cc95b4b5d", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "7bcf0c98-3e94-4051-afcb-eb1cde602b24" } ], "resourceVersion": "44067", "uid": "c84bec3e-429f-43fd-97ac-e7d5add2719f" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "5cc95b4b5d" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19068", "console.openshift.io/console-config-version": "25188", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19072", "console.openshift.io/proxy-config-version": "535", "console.openshift.io/service-ca-config-version": "20532", "console.openshift.io/trusted-ca-config-version": "19186", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "5cc95b4b5d" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19068", "console.openshift.io/console-config-version": "19164", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19072", "console.openshift.io/proxy-config-version": "535", "console.openshift.io/service-ca-config-version": "20532", "console.openshift.io/trusted-ca-config-version": "19186", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "2", "operator.openshift.io/spec-hash": "7007320b14e0199dd428b11f4507a716e30a74dbd20f78a12435cd466a42c99c" }, "creationTimestamp": "2026-01-28T13:19:16Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "6cdb4db649" }, "name": "console-6cdb4db649", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "7bcf0c98-3e94-4051-afcb-eb1cde602b24" } ], "resourceVersion": "23323", "uid": "95f13bf0-6572-4cde-b71f-3bb773e1f551" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "6cdb4db649" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19068", "console.openshift.io/console-config-version": "19164", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19072", "console.openshift.io/proxy-config-version": "535", "console.openshift.io/service-ca-config-version": "20532", "console.openshift.io/trusted-ca-config-version": "19186", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "6cdb4db649" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19068", "console.openshift.io/console-config-version": "23281", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19072", "console.openshift.io/proxy-config-version": "535", "console.openshift.io/service-ca-config-version": "20532", "console.openshift.io/trusted-ca-config-version": "19186", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "4", "operator.openshift.io/spec-hash": "77aaff0ed069cff2078245fddd053b778e27dd130243890699f017f4a557f4b8" }, "creationTimestamp": "2026-01-28T13:20:24Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "778d77cc4" }, "name": "console-778d77cc4", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "7bcf0c98-3e94-4051-afcb-eb1cde602b24" } ], "resourceVersion": "25305", "uid": "c6dc9231-64ad-4b0e-ac60-b86c8ed5111f" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "778d77cc4" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19068", "console.openshift.io/console-config-version": "23281", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19072", "console.openshift.io/proxy-config-version": "535", "console.openshift.io/service-ca-config-version": "20532", "console.openshift.io/trusted-ca-config-version": "19186", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "778d77cc4" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19068", "console.openshift.io/console-config-version": "44035", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19072", "console.openshift.io/proxy-config-version": "535", "console.openshift.io/service-ca-config-version": "20532", "console.openshift.io/trusted-ca-config-version": "19186", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "8", "operator.openshift.io/spec-hash": "3e879b1e7bfa4fa2d0a06578b88739b11c82f79bcdb78c8924f718b26c2cac09" }, "creationTimestamp": "2026-04-24T12:31:38Z", "generation": 1, "labels": { "app": "console", "component": "ui", "pod-template-hash": "8486794c8b" }, "name": "console-8486794c8b", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "7bcf0c98-3e94-4051-afcb-eb1cde602b24" } ], "resourceVersion": "44738", "uid": "6efb175c-5a6a-4e42-af51-b4338ffdc541" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "8486794c8b" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19068", "console.openshift.io/console-config-version": "44035", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19072", "console.openshift.io/proxy-config-version": "535", "console.openshift.io/service-ca-config-version": "20532", "console.openshift.io/trusted-ca-config-version": "19186", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "8486794c8b" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19068", "console.openshift.io/console-config-version": "43518", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19072", "console.openshift.io/proxy-config-version": "535", "console.openshift.io/service-ca-config-version": "20532", "console.openshift.io/trusted-ca-config-version": "19186", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "7", "operator.openshift.io/spec-hash": "e43efcd2107ea4f34c3d533bbb04277ca9068675f016ac12bf3bb700a7c80deb" }, "creationTimestamp": "2026-04-24T12:31:23Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "f65cb8447" }, "name": "console-f65cb8447", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "7bcf0c98-3e94-4051-afcb-eb1cde602b24" } ], "resourceVersion": "44594", "uid": "7e8d4a3a-988a-405b-9c5a-fa4520edfa87" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "f65cb8447" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19068", "console.openshift.io/console-config-version": "43518", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19072", "console.openshift.io/proxy-config-version": "535", "console.openshift.io/service-ca-config-version": "20532", "console.openshift.io/trusted-ca-config-version": "19186", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "f65cb8447" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "a3544673f6615aa49d5b832358efc50ed8ebbd02deff8ccdeb214d962221f01f" }, "creationTimestamp": "2026-01-28T13:18:01Z", "generation": 1, "labels": { "app": "console", "component": "downloads", "pod-template-hash": "87b75f899" }, "name": "downloads-87b75f899", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "downloads", "uid": "5bd3c738-4f6c-462a-8857-0e6fd88aef1b" } ], "resourceVersion": "38903", "uid": "8c122d7d-48a8-43f3-afc8-063c1dbff793" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "console", "component": "downloads", "pod-template-hash": "87b75f899" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "downloads", "pod-template-hash": "87b75f899" }, "name": "downloads" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "downloads" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "-c", "cat \u003c\u003cEOF \u003e\u003e/tmp/serve.py\nimport errno, http.server, os, re, signal, socket, sys, tarfile, tempfile, threading, time, zipfile\n\nsignal.signal(signal.SIGTERM, lambda signum, frame: sys.exit(0))\n\ndef write_index(path, message):\n with open(path, 'wb') as f:\n f.write('\\n'.join([\n '\u003c!doctype html\u003e',\n '\u003chtml lang=\"en\"\u003e',\n '\u003chead\u003e',\n ' \u003cmeta charset=\"utf-8\"\u003e',\n '\u003c/head\u003e',\n '\u003cbody\u003e',\n ' {}'.format(message),\n '\u003c/body\u003e',\n '\u003c/html\u003e',\n '',\n ]).encode('utf-8'))\n\n# Launch multiple listeners as threads\nclass Thread(threading.Thread):\n def __init__(self, i, socket):\n threading.Thread.__init__(self)\n self.i = i\n self.socket = socket\n self.daemon = True\n self.start()\n\n def run(self):\n server = http.server.SimpleHTTPRequestHandler\n server.server_version = \"OpenShift Downloads Server\"\n server.sys_version = \"\"\n httpd = http.server.HTTPServer(addr, server, False)\n\n # Prevent the HTTP server from re-binding every handler.\n # https://stackoverflow.com/questions/46210672/\n httpd.socket = self.socket\n httpd.server_bind = self.server_close = lambda self: None\n\n httpd.serve_forever()\n\ntemp_dir = tempfile.mkdtemp()\nprint('serving from {}'.format(temp_dir))\nos.chdir(temp_dir)\nfor arch in ['amd64', 'arm64', 'ppc64le', 's390x']:\n os.mkdir(arch)\ncontent = ['\u003ca href=\"oc-license\"\u003elicense\u003c/a\u003e']\nos.symlink('/usr/share/openshift/LICENSE', 'oc-license')\n\nfor arch, operating_system, path in [\n ('amd64', 'linux', '/usr/share/openshift/linux_amd64/oc'),\n ('amd64', 'mac', '/usr/share/openshift/mac/oc'),\n ('amd64', 'windows', '/usr/share/openshift/windows/oc.exe'),\n ('arm64', 'linux', '/usr/share/openshift/linux_arm64/oc'),\n ('arm64', 'mac', '/usr/share/openshift/mac_arm64/oc'),\n ('ppc64le', 'linux', '/usr/share/openshift/linux_ppc64le/oc'),\n ('s390x', 'linux', '/usr/share/openshift/linux_s390x/oc'),\n ]:\n basename = os.path.basename(path)\n target_path = os.path.join(arch, operating_system, basename)\n os.mkdir(os.path.join(arch, operating_system))\n os.symlink(path, target_path)\n base_root, _ = os.path.splitext(basename)\n archive_path_root = os.path.join(arch, operating_system, base_root)\n with tarfile.open('{}.tar'.format(archive_path_root), 'w') as tar:\n tar.add(path, basename)\n with zipfile.ZipFile('{}.zip'.format(archive_path_root), 'w') as zip:\n zip.write(path, basename)\n content.append(\n '\u003ca href=\"{0}\"\u003eoc ({1} {2})\u003c/a\u003e (\u003ca href=\"{3}.tar\"\u003etar\u003c/a\u003e \u003ca href=\"{3}.zip\"\u003ezip\u003c/a\u003e)'.format(\n target_path, arch, operating_system, archive_path_root\n )\n )\n\nfor root, directories, filenames in os.walk(temp_dir):\n root_link = os.path.relpath(temp_dir, os.path.join(root, 'child')).replace(os.path.sep, '/')\n for directory in directories:\n write_index(\n path=os.path.join(root, directory, 'index.html'),\n message='\u003cp\u003eDirectory listings are disabled. See \u003ca href=\"{}\"\u003ehere\u003c/a\u003e for available content.\u003c/p\u003e'.format(root_link),\n )\n\nwrite_index(\n path=os.path.join(temp_dir, 'index.html'),\n message='\\n'.join(\n ['\u003cul\u003e'] +\n [' \u003cli\u003e{}\u003c/li\u003e'.format(entry) for entry in content] +\n ['\u003c/ul\u003e']\n ),\n)\n\n# Create socket\n# IPv6 should handle IPv4 passively so long as it is not bound to a\n# specific address or set to IPv6_ONLY\n# https://stackoverflow.com/questions/25817848/python-3-does-http-server-support-ipv6\ntry:\n addr = ('::', 8080)\n sock = socket.socket(socket.AF_INET6, socket.SOCK_STREAM)\nexcept socket.error as err:\n # errno.EAFNOSUPPORT is \"socket.error: [Errno 97] Address family not supported by protocol\"\n # When IPv6 is disabled, socket will bind using IPv4.\n if err.errno == errno.EAFNOSUPPORT:\n addr = ('', 8080)\n sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)\n else:\n raise \nsock.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)\nsock.bind(addr)\nsock.listen(5)\n\n[Thread(i, socket=sock) for i in range(100)]\ntime.sleep(9e9)\nEOF\nexec python3 /tmp/serve.py\n" ], "command": [ "/bin/sh" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6adba842183a269ae8f503d3df3efd8a07a074d10ec27eb3766970826e58e596", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "download-server", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 0, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:14Z", "generation": 1, "labels": { "app": "openshift-controller-manager-operator", "pod-template-hash": "c49f4d964" }, "name": "openshift-controller-manager-operator-c49f4d964", "namespace": "openshift-controller-manager-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-controller-manager-operator", "uid": "48fbe520-a0c6-4c65-a9a2-d970945439e5" } ], "resourceVersion": "38232", "uid": "0573e404-64a4-419f-a390-9212b3355c3d" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "openshift-controller-manager-operator", "pod-template-hash": "c49f4d964" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-operator", "pod-template-hash": "c49f4d964" }, "name": "openshift-controller-manager-operator" }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml" ], "command": [ "cluster-openshift-controller-manager-operator", "operator" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4dc3e4379ca58fead4dfd76c80bdbfeeeec1e3ca57e2fea2817a2b5a00c07547" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" }, { "name": "ROUTE_CONTROLLER_MANAGER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:10b8ec9bc4fab402acfa66b5c3a9843dc5fd98cc940460602e13704c70f34f78" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:06a4419324ea44746c10efdeb79a6f9ad1efd2f47d2f88a3730b16c8667c91dc", "imagePullPolicy": "IfNotPresent", "name": "openshift-controller-manager-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-operator", "serviceAccountName": "openshift-controller-manager-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "openshift-controller-manager-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "openshift-controller-manager-operator-config" }, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "6", "operator.openshift.io/spec-hash": "040c0bb0ae3a4e45347a9adbba25a0ecb818f5d37fbc705705487c093888d082", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-01-28T13:17:18Z", "generation": 7, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "5b9994c9b6" }, "name": "controller-manager-5b9994c9b6", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "fb43a26a-ed68-457d-a6b3-c20f59c48a45" } ], "resourceVersion": "21266", "uid": "8fb830dd-9d0b-46f9-aa67-6ccc960f7977" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "5b9994c9b6" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "16463", "configmaps/config": "16526", "configmaps/openshift-global-ca": "5321", "configmaps/openshift-service-ca": "6020", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "5b9994c9b6" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4dc3e4379ca58fead4dfd76c80bdbfeeeec1e3ca57e2fea2817a2b5a00c07547", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "5", "operator.openshift.io/spec-hash": "1ab7622732c103738e39436a3798e53153ac8c366b2589a60dc85e922738b162", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-01-28T13:17:17Z", "generation": 3, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "6c8fb44994" }, "name": "controller-manager-6c8fb44994", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "fb43a26a-ed68-457d-a6b3-c20f59c48a45" } ], "resourceVersion": "18215", "uid": "e089c51b-6d03-4d8f-9b9b-c756735f006c" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "6c8fb44994" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "16463", "configmaps/config": "7339", "configmaps/openshift-global-ca": "5321", "configmaps/openshift-service-ca": "6020", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "6c8fb44994" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4dc3e4379ca58fead4dfd76c80bdbfeeeec1e3ca57e2fea2817a2b5a00c07547", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "0c8a9cfeac8f669a9f63346fe89564580a3337a40766021357d3e6944bada3e1", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-01-28T13:10:32Z", "generation": 4, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "6f56756b78" }, "name": "controller-manager-6f56756b78", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "fb43a26a-ed68-457d-a6b3-c20f59c48a45" } ], "resourceVersion": "7365", "uid": "6155dd99-ac74-4e2d-a344-428d4cb0978a" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "6f56756b78" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "0", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "1", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "6f56756b78" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4dc3e4379ca58fead4dfd76c80bdbfeeeec1e3ca57e2fea2817a2b5a00c07547", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "7", "operator.openshift.io/spec-hash": "20bc02083821b70a4cfa4590ed5053f0455ae0f67e559ac996cc5db4fc99c1eb", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-01-28T13:19:18Z", "generation": 7, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "7686c4d978" }, "name": "controller-manager-7686c4d978", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "fb43a26a-ed68-457d-a6b3-c20f59c48a45" } ], "resourceVersion": "43217", "uid": "cd13c268-d1e9-421b-96f3-82d6b0ce96b2" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "7686c4d978" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "16463", "configmaps/config": "20762", "configmaps/openshift-global-ca": "5321", "configmaps/openshift-service-ca": "6020", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "3", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "7686c4d978" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4dc3e4379ca58fead4dfd76c80bdbfeeeec1e3ca57e2fea2817a2b5a00c07547", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "10", "operator.openshift.io/spec-hash": "a4fc8bf458e5c02f52aea800afbcc5095ae0c4da23fa8588d8b02c8e489423f1", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-24T12:31:28Z", "generation": 7, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "77d969dcc6" }, "name": "controller-manager-77d969dcc6", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "fb43a26a-ed68-457d-a6b3-c20f59c48a45" } ], "resourceVersion": "44465", "uid": "4d5330ad-dc02-49f5-acd0-fcaac6528ccf" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "77d969dcc6" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "43631", "configmaps/config": "42853", "configmaps/openshift-global-ca": "5321", "configmaps/openshift-service-ca": "6020", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "3", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "77d969dcc6" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4dc3e4379ca58fead4dfd76c80bdbfeeeec1e3ca57e2fea2817a2b5a00c07547", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "3", "operator.openshift.io/spec-hash": "d5e97dc4307419116806bc7375bd53dc74e238682751ca5a8eadd3a9d1a11a55", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-01-28T13:10:35Z", "generation": 3, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "789bbd474d" }, "name": "controller-manager-789bbd474d", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "fb43a26a-ed68-457d-a6b3-c20f59c48a45" } ], "resourceVersion": "16571", "uid": "f9587f6b-a943-4f6d-bdeb-6df33e4f5ecd" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "789bbd474d" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "0", "configmaps/config": "5583", "configmaps/openshift-global-ca": "5321", "configmaps/openshift-service-ca": "5316", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "789bbd474d" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4dc3e4379ca58fead4dfd76c80bdbfeeeec1e3ca57e2fea2817a2b5a00c07547", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "11", "operator.openshift.io/spec-hash": "1ded8ae207b351c3835b36586964cd9f1e6103ca252fa73fa32899fa9141689b", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-24T12:31:48Z", "generation": 4, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "7c55c7847d" }, "name": "controller-manager-7c55c7847d", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "fb43a26a-ed68-457d-a6b3-c20f59c48a45" } ], "resourceVersion": "44527", "uid": "2660df59-1551-456e-a060-412d1a16a10f" }, "spec": { "replicas": 3, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "7c55c7847d" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "43631", "configmaps/config": "44156", "configmaps/openshift-global-ca": "5321", "configmaps/openshift-service-ca": "6020", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "3", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "7c55c7847d" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4dc3e4379ca58fead4dfd76c80bdbfeeeec1e3ca57e2fea2817a2b5a00c07547", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" } ] } } }, "status": { "availableReplicas": 3, "fullyLabeledReplicas": 3, "observedGeneration": 4, "readyReplicas": 3, "replicas": 3 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "4", "operator.openshift.io/spec-hash": "6fe2e246a3fdfb0dd2edce61e5d37a0b6612cfd422d60b23aeebd1aa3d9af212", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-01-28T13:10:52Z", "generation": 3, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "7f499f664d" }, "name": "controller-manager-7f499f664d", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "fb43a26a-ed68-457d-a6b3-c20f59c48a45" } ], "resourceVersion": "18039", "uid": "1465a2cc-c0e8-4cb5-9ecf-ee53e1762890" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "7f499f664d" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "0", "configmaps/config": "7339", "configmaps/openshift-global-ca": "5321", "configmaps/openshift-service-ca": "6020", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "7f499f664d" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4dc3e4379ca58fead4dfd76c80bdbfeeeec1e3ca57e2fea2817a2b5a00c07547", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "2", "operator.openshift.io/spec-hash": "a9009061317fd007743b99a6ef82f5c8e45b4e85ab51b425f128c2aef20bb28a", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-01-28T13:10:33Z", "generation": 3, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "858cc7d4bc" }, "name": "controller-manager-858cc7d4bc", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "fb43a26a-ed68-457d-a6b3-c20f59c48a45" } ], "resourceVersion": "16510", "uid": "9ac29d99-8a8e-4e93-bc2d-6009af04400d" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "858cc7d4bc" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "0", "configmaps/config": "5315", "configmaps/openshift-global-ca": "5318", "configmaps/openshift-service-ca": "5316", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "858cc7d4bc" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4dc3e4379ca58fead4dfd76c80bdbfeeeec1e3ca57e2fea2817a2b5a00c07547", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "8", "operator.openshift.io/spec-hash": "d6aaae14a2108c66ee9755920ec601b3dd1a7f88258b1c1feccb3c2316f9e0e7", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-24T12:31:08Z", "generation": 3, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "c6d6884c6" }, "name": "controller-manager-c6d6884c6", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "fb43a26a-ed68-457d-a6b3-c20f59c48a45" } ], "resourceVersion": "42897", "uid": "79e71fee-7e9c-47d1-83fc-4db96de31f7a" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "c6d6884c6" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "42774", "configmaps/config": "20762", "configmaps/openshift-global-ca": "5321", "configmaps/openshift-service-ca": "6020", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "3", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "c6d6884c6" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4dc3e4379ca58fead4dfd76c80bdbfeeeec1e3ca57e2fea2817a2b5a00c07547", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "9", "operator.openshift.io/spec-hash": "2013b0d0f064724537c302deac9cabe63ad0ea95dad4f07cbd56ef3aa2fb6b2b", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-24T12:31:09Z", "generation": 7, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "f85768c67" }, "name": "controller-manager-f85768c67", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "fb43a26a-ed68-457d-a6b3-c20f59c48a45" } ], "resourceVersion": "43962", "uid": "6b04e8c4-a91b-4296-9e06-c1db16175c48" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "f85768c67" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "42774", "configmaps/config": "42853", "configmaps/openshift-global-ca": "5321", "configmaps/openshift-service-ca": "6020", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "3", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "f85768c67" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4dc3e4379ca58fead4dfd76c80bdbfeeeec1e3ca57e2fea2817a2b5a00c07547", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:13Z", "generation": 1, "labels": { "name": "dns-operator", "pod-template-hash": "6fd4f8db74" }, "name": "dns-operator-6fd4f8db74", "namespace": "openshift-dns-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "dns-operator", "uid": "f191441e-519f-47d3-9760-1e612dfe9fc0" } ], "resourceVersion": "38052", "uid": "90899e67-92e8-4b0c-9eeb-31e370f60ffe" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "dns-operator", "pod-template-hash": "6fd4f8db74" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "dns-operator", "pod-template-hash": "6fd4f8db74" } }, "spec": { "containers": [ { "command": [ "dns-operator" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:de1c2aadb2cc989d2dd5da21bcd70ab36d2805638cac81028a10fc772972d1fe" }, { "name": "OPENSHIFT_CLI_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bd12da40794cf7faff3eef68b853d343660acefb8c23ba1786d120430f09760c" }, { "name": "KUBE_RBAC_PROXY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5202545083b765c2bd05ff92bfb90bb41db7b5c578c977db550c6e14bd8cead1", "imagePullPolicy": "IfNotPresent", "name": "dns-operator", "resources": { "requests": { "cpu": "10m", "memory": "29Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--logtostderr", "--secure-listen-address=:9393", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", "--upstream=http://127.0.0.1:60000/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9393, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "40Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-tls", "readOnly": true } ] } ], "dnsPolicy": "Default", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "dns-operator", "serviceAccountName": "dns-operator", "terminationGracePeriodSeconds": 2, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "metrics-tls", "secret": { "defaultMode": 420, "secretName": "metrics-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:16Z", "generation": 1, "labels": { "app": "etcd-operator", "pod-template-hash": "68949cbb7d" }, "name": "etcd-operator-68949cbb7d", "namespace": "openshift-etcd-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "etcd-operator", "uid": "1adacf93-b751-4ba1-897d-2491f0bb0970" } ], "resourceVersion": "39074", "uid": "3635072d-d029-476d-9020-9d3485ed0572" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "etcd-operator", "pod-template-hash": "68949cbb7d" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "etcd-operator", "pod-template-hash": "68949cbb7d" }, "name": "etcd-operator" }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "--terminate-on-files=/var/run/secrets/serving-cert/tls.crt", "--terminate-on-files=/var/run/secrets/serving-cert/tls.key", "--terminate-on-files=/var/run/secrets/etcd-client/tls.crt", "--terminate-on-files=/var/run/secrets/etcd-client/tls.key", "--terminate-on-files=/var/run/configmaps/etcd-ca/ca-bundle.crt", "--terminate-on-files=/var/run/configmaps/etcd-service-ca/service-ca.crt" ], "command": [ "cluster-etcd-operator", "operator" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e7edc6591660cf1b3d08b138a4343aea37512307c679127d3c7366a463a01211" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:305a83df6a0f2ed5da1fde3be67a3751d913a6526b25a40d9a320e25d4423d0c" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" }, { "name": "OPERAND_IMAGE_VERSION", "value": "4.18.31" }, { "name": "OPENSHIFT_PROFILE", "value": "web" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:305a83df6a0f2ed5da1fde3be67a3751d913a6526b25a40d9a320e25d4423d0c", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 60, "successThreshold": 1, "timeoutSeconds": 30 }, "name": "etcd-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/configmaps/etcd-ca", "name": "etcd-ca" }, { "mountPath": "/var/run/configmaps/etcd-service-ca", "name": "etcd-service-ca" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "etcd-operator", "serviceAccountName": "etcd-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "etcd-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "etcd-operator-config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "etcd-ca-bundle" }, "name": "etcd-ca" }, { "configMap": { "defaultMode": 420, "name": "etcd-service-ca-bundle" }, "name": "etcd-service-ca" }, { "name": "etcd-client", "secret": { "defaultMode": 420, "secretName": "etcd-client" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry", "config.openshift.io/inject-proxy": "cluster-image-registry-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:29Z", "generation": 1, "labels": { "name": "cluster-image-registry-operator", "pod-template-hash": "7bd8758498" }, "name": "cluster-image-registry-operator-7bd8758498", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-image-registry-operator", "uid": "a3001d34-4c24-41d2-98cd-b1b81319de04" } ], "resourceVersion": "37854", "uid": "a73fb278-a6bb-4625-ab81-4fa021418666" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "cluster-image-registry-operator", "pod-template-hash": "7bd8758498" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "cluster-image-registry-operator", "pod-template-hash": "7bd8758498" } }, "spec": { "containers": [ { "args": [ "--files=/var/run/configmaps/trusted-ca/tls-ca-bundle.pem", "--files=/etc/secrets/tls.crt", "--files=/etc/secrets/tls.key" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "cluster-image-registry-operator" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:34e152aa345e2e2dc8b756b44014bf0de60801cddf45bd4c89d794165fff47a7" }, { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c58b3f3f33b4117627975dc67df83f087e8b8e0160027b4f3df5b9416a23b24c" }, { "name": "IMAGE_PRUNER", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bd12da40794cf7faff3eef68b853d343660acefb8c23ba1786d120430f09760c" }, { "name": "AZURE_ENVIRONMENT_FILEPATH", "value": "/tmp/azurestackcloud.json" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:34e152aa345e2e2dc8b756b44014bf0de60801cddf45bd4c89d794165fff47a7", "imagePullPolicy": "IfNotPresent", "name": "cluster-image-registry-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/trusted-ca/", "name": "trusted-ca" }, { "mountPath": "/etc/secrets", "name": "image-registry-operator-tls" }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cluster-image-registry-operator", "serviceAccountName": "cluster-image-registry-operator", "shareProcessNamespace": false, "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "image-registry-operator-tls", "secret": { "defaultMode": 420, "secretName": "image-registry-operator-tls" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "imageregistry.operator.openshift.io/checksum": "sha256:3a6cdad9232b9496bd96120aa98651b09ecb57024b070063a190c5af226e6c02", "operator.openshift.io/spec-hash": "e0382c7947e89747687f5455a5746910879b9550504b4ce0c1188243949429c3", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-01-28T13:18:41Z", "generation": 3, "labels": { "docker-registry": "default", "pod-template-hash": "5b4fdb8f68" }, "name": "image-registry-5b4fdb8f68", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "image-registry", "uid": "fed8f5f2-f771-4657-8ca4-93e669ad0353" } ], "resourceVersion": "22201", "uid": "6a0c81bf-2fcc-42eb-ab6f-447a9d6d067c" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "docker-registry": "default", "pod-template-hash": "5b4fdb8f68" } }, "template": { "metadata": { "annotations": { "imageregistry.operator.openshift.io/dependencies-checksum": "sha256:bef89271bd9953ebdc3ca7f44ac455bde1f026a1f76ad0633b457d546b657864", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "docker-registry": "default", "pod-template-hash": "5b4fdb8f68" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "namespaces": [ "openshift-image-registry" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/sh", "-c", "mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem \u0026\u0026 update-ca-trust extract --output /etc/pki/ca-trust/extracted/ \u0026\u0026 exec /usr/bin/dockerregistry" ], "env": [ { "name": "REGISTRY_STORAGE", "value": "s3" }, { "name": "REGISTRY_STORAGE_S3_BUCKET", "value": "clusterpool418-dcxsj-jj64q-image-registry-us-east-1-wtbqpepfjs" }, { "name": "REGISTRY_STORAGE_S3_REGION", "value": "us-east-1" }, { "name": "REGISTRY_STORAGE_S3_ENCRYPT", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_FORCEPATHSTYLE", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH", "value": "/var/run/secrets/cloud/credentials" }, { "name": "REGISTRY_STORAGE_S3_USEDUALSTACK", "value": "true" }, { "name": "REGISTRY_HTTP_ADDR", "value": ":5000" }, { "name": "REGISTRY_HTTP_NET", "value": "tcp" }, { "name": "REGISTRY_HTTP_SECRET", "value": "edb6ec41c9af5aabc9880f3ce3d2858e459461aa653eea541b2f995a9d6d1c6f57bd9fbcea594b0797e645cac85495d9bbbf6398a8db31520cdee1754ca81725" }, { "name": "REGISTRY_LOG_LEVEL", "value": "info" }, { "name": "REGISTRY_OPENSHIFT_QUOTA_ENABLED", "value": "true" }, { "name": "REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR", "value": "inmemory" }, { "name": "REGISTRY_STORAGE_DELETE_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL", "value": "10s" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD", "value": "1" }, { "name": "REGISTRY_OPENSHIFT_METRICS_ENABLED", "value": "true" }, { "name": "REGISTRY_OPENSHIFT_SERVER_ADDR", "value": "image-registry.openshift-image-registry.svc:5000" }, { "name": "REGISTRY_HTTP_TLS_CERTIFICATE", "value": "/etc/secrets/tls.crt" }, { "name": "REGISTRY_HTTP_TLS_KEY", "value": "/etc/secrets/tls.key" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c58b3f3f33b4117627975dc67df83f087e8b8e0160027b4f3df5b9416a23b24c", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "registry", "ports": [ { "containerPort": 5000, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/cloud", "name": "image-registry-private-configuration", "readOnly": true }, { "mountPath": "/etc/secrets", "name": "registry-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted", "name": "ca-trust-extracted" }, { "mountPath": "/etc/pki/ca-trust/source/anchors", "name": "registry-certificates" }, { "mountPath": "/usr/share/pki/ca-trust-source", "name": "trusted-ca" }, { "mountPath": "/var/lib/kubelet/", "name": "installation-pull-secrets" }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 1000350000, "fsGroupChangePolicy": "OnRootMismatch" }, "serviceAccount": "registry", "serviceAccountName": "registry", "terminationGracePeriodSeconds": 55, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "kubernetes.io/hostname", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "node-role.kubernetes.io/worker", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "DoNotSchedule" } ], "volumes": [ { "name": "image-registry-private-configuration", "secret": { "defaultMode": 420, "optional": false, "secretName": "image-registry-private-configuration" } }, { "name": "registry-tls", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "image-registry-tls" } } ] } }, { "emptyDir": {}, "name": "ca-trust-extracted" }, { "configMap": { "defaultMode": 420, "name": "image-registry-certificates" }, "name": "registry-certificates" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "anchors/ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "name": "installation-pull-secrets", "secret": { "defaultMode": 420, "items": [ { "key": ".dockerconfigjson", "path": "config.json" } ], "optional": true, "secretName": "installation-pull-secrets" } }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "2", "imageregistry.operator.openshift.io/checksum": "sha256:6bbcdc11a284cc2aee8bc2840fa0a1ae16f8eb8c89cfcb91ed0c5ee62f8d0235", "operator.openshift.io/spec-hash": "3d1a14a7592f943a798b47824356670fc3e99406ebd960fd6c7734e73e7a96bd", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-01-28T13:19:17Z", "generation": 2, "labels": { "docker-registry": "default", "pod-template-hash": "6c49df7fb4" }, "name": "image-registry-6c49df7fb4", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "image-registry", "uid": "fed8f5f2-f771-4657-8ca4-93e669ad0353" } ], "resourceVersion": "39007", "uid": "c1ce2659-d6ab-4008-93e1-a039461391bb" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "docker-registry": "default", "pod-template-hash": "6c49df7fb4" } }, "template": { "metadata": { "annotations": { "imageregistry.operator.openshift.io/dependencies-checksum": "sha256:c101912e64bc768bb66fcd3a4b587c37ce5878db7933879789b7ba42ec16f820", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "docker-registry": "default", "pod-template-hash": "6c49df7fb4" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "namespaces": [ "openshift-image-registry" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/sh", "-c", "mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem \u0026\u0026 update-ca-trust extract --output /etc/pki/ca-trust/extracted/ \u0026\u0026 exec /usr/bin/dockerregistry" ], "env": [ { "name": "REGISTRY_STORAGE", "value": "s3" }, { "name": "REGISTRY_STORAGE_S3_BUCKET", "value": "clusterpool418-dcxsj-jj64q-image-registry-us-east-1-wtbqpepfjs" }, { "name": "REGISTRY_STORAGE_S3_REGION", "value": "us-east-1" }, { "name": "REGISTRY_STORAGE_S3_ENCRYPT", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_FORCEPATHSTYLE", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH", "value": "/var/run/secrets/cloud/credentials" }, { "name": "REGISTRY_STORAGE_S3_USEDUALSTACK", "value": "true" }, { "name": "REGISTRY_HTTP_ADDR", "value": ":5000" }, { "name": "REGISTRY_HTTP_NET", "value": "tcp" }, { "name": "REGISTRY_HTTP_SECRET", "value": "edb6ec41c9af5aabc9880f3ce3d2858e459461aa653eea541b2f995a9d6d1c6f57bd9fbcea594b0797e645cac85495d9bbbf6398a8db31520cdee1754ca81725" }, { "name": "REGISTRY_LOG_LEVEL", "value": "info" }, { "name": "REGISTRY_OPENSHIFT_QUOTA_ENABLED", "value": "true" }, { "name": "REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR", "value": "inmemory" }, { "name": "REGISTRY_STORAGE_DELETE_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL", "value": "10s" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD", "value": "1" }, { "name": "REGISTRY_OPENSHIFT_METRICS_ENABLED", "value": "true" }, { "name": "REGISTRY_OPENSHIFT_SERVER_ADDR", "value": "image-registry.openshift-image-registry.svc:5000" }, { "name": "REGISTRY_HTTP_TLS_CERTIFICATE", "value": "/etc/secrets/tls.crt" }, { "name": "REGISTRY_HTTP_TLS_KEY", "value": "/etc/secrets/tls.key" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c58b3f3f33b4117627975dc67df83f087e8b8e0160027b4f3df5b9416a23b24c", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "registry", "ports": [ { "containerPort": 5000, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/cloud", "name": "image-registry-private-configuration", "readOnly": true }, { "mountPath": "/etc/secrets", "name": "registry-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted", "name": "ca-trust-extracted" }, { "mountPath": "/etc/pki/ca-trust/source/anchors", "name": "registry-certificates" }, { "mountPath": "/usr/share/pki/ca-trust-source", "name": "trusted-ca" }, { "mountPath": "/var/lib/kubelet/", "name": "installation-pull-secrets" }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 1000350000, "fsGroupChangePolicy": "OnRootMismatch" }, "serviceAccount": "registry", "serviceAccountName": "registry", "terminationGracePeriodSeconds": 55, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "kubernetes.io/hostname", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "node-role.kubernetes.io/worker", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "DoNotSchedule" } ], "volumes": [ { "name": "image-registry-private-configuration", "secret": { "defaultMode": 420, "optional": false, "secretName": "image-registry-private-configuration" } }, { "name": "registry-tls", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "image-registry-tls" } } ] } }, { "emptyDir": {}, "name": "ca-trust-extracted" }, { "configMap": { "defaultMode": 420, "name": "image-registry-certificates" }, "name": "registry-certificates" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "anchors/ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "name": "installation-pull-secrets", "secret": { "defaultMode": 420, "items": [ { "key": ".dockerconfigjson", "path": "config.json" } ], "optional": true, "secretName": "installation-pull-secrets" } }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 2, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "Ingress", "config.openshift.io/inject-proxy": "ingress-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:27Z", "generation": 1, "labels": { "name": "ingress-operator", "pod-template-hash": "559b957cc9" }, "name": "ingress-operator-559b957cc9", "namespace": "openshift-ingress-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "ingress-operator", "uid": "57e7c8ff-c86c-4d8e-9137-76dbc2892d77" } ], "resourceVersion": "42141", "uid": "ca3e13ef-c0a8-41e1-ba09-241a87f5310d" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "ingress-operator", "pod-template-hash": "559b957cc9" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "ingress-operator", "pod-template-hash": "559b957cc9" } }, "spec": { "containers": [ { "command": [ "ingress-operator", "start", "--namespace", "$(WATCH_NAMESPACE)", "--image", "$(IMAGE)", "--canary-image", "$(CANARY_IMAGE)", "--release-version", "$(RELEASE_VERSION)" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:56cfd08a2da5ddedbd9384b1bd6c2ead80a32d8761565973ae388ab8622356db" }, { "name": "CANARY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ff05f68cb78cb35212f4878d63631f37bcd4f7b8f4acb0ab4b2bc99f3c3b08af" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ff05f68cb78cb35212f4878d63631f37bcd4f7b8f4acb0ab4b2bc99f3c3b08af", "imagePullPolicy": "IfNotPresent", "name": "ingress-operator", "resources": { "requests": { "cpu": "10m", "memory": "56Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] }, { "args": [ "--logtostderr", "--secure-listen-address=:9393", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", "--upstream=http://127.0.0.1:60000/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9393, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "40Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "ingress-operator", "serviceAccountName": "ingress-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "metrics-tls", "secret": { "defaultMode": 420, "secretName": "metrics-tls" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca" }, "name": "trusted-ca" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-01-28T13:11:14Z", "generation": 1, "labels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "ingresscontroller.operator.openshift.io/hash": "566c5bf84f", "pod-template-hash": "7b7848d549" }, "name": "router-default-7b7848d549", "namespace": "openshift-ingress", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "router-default", "uid": "2198e7ee-3b6b-4295-8dcb-77dabaec4018" } ], "resourceVersion": "44750", "uid": "ad14816f-8ce0-4cfc-b90b-1d78b6fb33b4" }, "spec": { "minReadySeconds": 30, "replicas": 2, "selector": { "matchLabels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "pod-template-hash": "7b7848d549" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "ingresscontroller.operator.openshift.io/hash": "566c5bf84f", "pod-template-hash": "7b7848d549" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "node.openshift.io/remote-worker", "operator": "NotIn", "values": [ "" ] } ] } ] } }, "podAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/deployment-ingresscontroller", "operator": "In", "values": [ "default" ] }, { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "NotIn", "values": [ "566c5bf84f" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] }, "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/deployment-ingresscontroller", "operator": "In", "values": [ "default" ] }, { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "In", "values": [ "566c5bf84f" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "env": [ { "name": "DEFAULT_CERTIFICATE_DIR", "value": "/etc/pki/tls/private" }, { "name": "DEFAULT_DESTINATION_CA_PATH", "value": "/var/run/configmaps/service-ca/service-ca.crt" }, { "name": "RELOAD_INTERVAL", "value": "5s" }, { "name": "ROUTER_ALLOW_WILDCARD_ROUTES", "value": "false" }, { "name": "ROUTER_CANONICAL_HOSTNAME", "value": "router-default.apps.clusterpool418-dcxsj.rhtap.devcluster.openshift.com" }, { "name": "ROUTER_CIPHERS", "value": "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384" }, { "name": "ROUTER_CIPHERSUITES", "value": "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256" }, { "name": "ROUTER_DISABLE_HTTP2", "value": "true" }, { "name": "ROUTER_DISABLE_NAMESPACE_OWNERSHIP_CHECK", "value": "false" }, { "name": "ROUTER_DOMAIN", "value": "apps.clusterpool418-dcxsj.rhtap.devcluster.openshift.com" }, { "name": "ROUTER_IDLE_CLOSE_ON_RESPONSE", "value": "true" }, { "name": "ROUTER_LOAD_BALANCE_ALGORITHM", "value": "random" }, { "name": "ROUTER_METRICS_TLS_CERT_FILE", "value": "/etc/pki/tls/metrics-certs/tls.crt" }, { "name": "ROUTER_METRICS_TLS_KEY_FILE", "value": "/etc/pki/tls/metrics-certs/tls.key" }, { "name": "ROUTER_METRICS_TYPE", "value": "haproxy" }, { "name": "ROUTER_SERVICE_NAME", "value": "default" }, { "name": "ROUTER_SERVICE_NAMESPACE", "value": "openshift-ingress" }, { "name": "ROUTER_SET_FORWARDED_HEADERS", "value": "append" }, { "name": "ROUTER_TCP_BALANCE_SCHEME", "value": "source" }, { "name": "ROUTER_THREADS", "value": "4" }, { "name": "ROUTER_USE_PROXY_PROTOCOL", "value": "true" }, { "name": "SSL_MIN_VERSION", "value": "TLSv1.2" }, { "name": "STATS_PASSWORD_FILE", "value": "/var/lib/haproxy/conf/metrics-auth/statsPassword" }, { "name": "STATS_PORT", "value": "1936" }, { "name": "STATS_USERNAME_FILE", "value": "/var/lib/haproxy/conf/metrics-auth/statsUsername" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:56cfd08a2da5ddedbd9384b1bd6c2ead80a32d8761565973ae388ab8622356db", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "terminationGracePeriodSeconds": 10, "timeoutSeconds": 1 }, "name": "router", "ports": [ { "containerPort": 80, "name": "http", "protocol": "TCP" }, { "containerPort": 443, "name": "https", "protocol": "TCP" }, { "containerPort": 1936, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/ready", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": true, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 120, "httpGet": { "path": "/healthz/ready", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 1, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/tls/private", "name": "default-certificate", "readOnly": true }, { "mountPath": "/var/run/configmaps/service-ca", "name": "service-ca-bundle", "readOnly": true }, { "mountPath": "/var/lib/haproxy/conf/metrics-auth", "name": "stats-auth", "readOnly": true }, { "mountPath": "/etc/pki/tls/metrics-certs", "name": "metrics-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/worker": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "router", "serviceAccountName": "router", "terminationGracePeriodSeconds": 3600, "tolerations": [ { "effect": "NoExecute", "key": "kubernetes.io/e2e-evict-taint-key", "operator": "Equal", "value": "evictTaintVal" } ], "topologySpreadConstraints": [ { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "In", "values": [ "566c5bf84f" ] } ] }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "ScheduleAnyway" } ], "volumes": [ { "name": "default-certificate", "secret": { "defaultMode": 420, "secretName": "router-certs-default" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "service-ca-bundle", "optional": false }, "name": "service-ca-bundle" }, { "name": "stats-auth", "secret": { "defaultMode": 420, "secretName": "router-stats-default" } }, { "name": "metrics-certs", "secret": { "defaultMode": 420, "secretName": "router-metrics-certs-default" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "config.openshift.io/inject-proxy": "insights-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:32Z", "generation": 1, "labels": { "app": "insights-operator", "pod-template-hash": "579fb8b7cf" }, "name": "insights-operator-579fb8b7cf", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "insights-operator", "uid": "ed6ae965-543e-4774-88bf-634393eefe18" } ], "resourceVersion": "38873", "uid": "830d8d6f-5a0e-42ab-9569-79d8230c74e2" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "insights-operator", "pod-template-hash": "579fb8b7cf" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "insights-operator", "pod-template-hash": "579fb8b7cf" } }, "spec": { "containers": [ { "args": [ "start", "--config=/etc/insights-operator/server.yaml" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "RELEASE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0731d6529a41a37327ec2900995db7054bc978fc2193cd26986807f3b8339565", "imagePullPolicy": "IfNotPresent", "name": "insights-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "54Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/insights-operator", "name": "snapshots" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/run/configmaps/service-ca-bundle", "name": "service-ca-bundle", "readOnly": true }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "operator", "serviceAccountName": "operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 900 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 900 } ], "volumes": [ { "emptyDir": {}, "name": "snapshots" }, { "configMap": { "defaultMode": 420, "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "service-ca-bundle", "optional": true }, "name": "service-ca-bundle" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "openshift-insights-serving-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:28Z", "generation": 1, "labels": { "app": "kube-apiserver-operator", "pod-template-hash": "9f8857598" }, "name": "kube-apiserver-operator-9f8857598", "namespace": "openshift-kube-apiserver-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kube-apiserver-operator", "uid": "da5e02da-3191-4c5a-a12f-92b9efa58e4b" } ], "resourceVersion": "38926", "uid": "32a91b81-a952-4045-aec6-5580ed46fc04" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "kube-apiserver-operator", "pod-template-hash": "9f8857598" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "kube-apiserver-operator", "pod-template-hash": "9f8857598" }, "name": "kube-apiserver-operator" }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml" ], "command": [ "cluster-kube-apiserver-operator", "operator" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a7ce3813367a4a491bafbcb7d7a146ba2f0e60f985aa21d6fc859ea89868f81a" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9af63298f179cea3b0c2105ff2ca49b17c98a9742563e75d4b76590742f1b8fc" }, { "name": "OPERAND_IMAGE_VERSION", "value": "1.31.14" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9af63298f179cea3b0c2105ff2ca49b17c98a9742563e75d4b76590742f1b8fc", "imagePullPolicy": "IfNotPresent", "name": "kube-apiserver-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount", "name": "kube-api-access", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "kube-apiserver-operator", "serviceAccountName": "kube-apiserver-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "kube-apiserver-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "kube-apiserver-operator-config" }, "name": "config" }, { "name": "kube-api-access", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "expirationSeconds": 3600, "path": "token" } }, { "configMap": { "items": [ { "key": "ca.crt", "path": "ca.crt" } ], "name": "kube-root-ca.crt" } }, { "downwardAPI": { "items": [ { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" }, "path": "namespace" } ] } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:12Z", "generation": 1, "labels": { "app": "kube-controller-manager-operator", "pod-template-hash": "5c765556df" }, "name": "kube-controller-manager-operator-5c765556df", "namespace": "openshift-kube-controller-manager-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kube-controller-manager-operator", "uid": "8d54f62d-f579-4dba-aea9-12acb206404a" } ], "resourceVersion": "38993", "uid": "7499f34d-65ba-4c56-9a47-ee2095e09173" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "kube-controller-manager-operator", "pod-template-hash": "5c765556df" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "kube-controller-manager-operator", "pod-template-hash": "5c765556df" }, "name": "kube-controller-manager-operator" }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml" ], "command": [ "cluster-kube-controller-manager-operator", "operator" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a7ce3813367a4a491bafbcb7d7a146ba2f0e60f985aa21d6fc859ea89868f81a" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cc731e6886cbb572231a4386515f6d473f00e8f7fceeb957bc97f1327154e3f7" }, { "name": "CLUSTER_POLICY_CONTROLLER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:645aa8de5e2c867cf5508687943212cc84ac9ca3e5b289fdd57cf6267a6e1925" }, { "name": "TOOLS_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7cd549121e9686d937298de79f1fa90eb6136489a692f5cd58135ed1c367514b" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" }, { "name": "OPERAND_IMAGE_VERSION", "value": "1.31.14" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cc731e6886cbb572231a4386515f6d473f00e8f7fceeb957bc97f1327154e3f7", "imagePullPolicy": "IfNotPresent", "name": "kube-controller-manager-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount", "name": "kube-api-access", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "kube-controller-manager-operator", "serviceAccountName": "kube-controller-manager-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "kube-controller-manager-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "kube-controller-manager-operator-config" }, "name": "config" }, { "name": "kube-api-access", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "expirationSeconds": 3600, "path": "token" } }, { "configMap": { "items": [ { "key": "ca.crt", "path": "ca.crt" } ], "name": "kube-root-ca.crt" } }, { "downwardAPI": { "items": [ { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" }, "path": "namespace" } ] } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:12Z", "generation": 1, "labels": { "app": "openshift-kube-scheduler-operator", "pod-template-hash": "64b68bc5b4" }, "name": "openshift-kube-scheduler-operator-64b68bc5b4", "namespace": "openshift-kube-scheduler-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-kube-scheduler-operator", "uid": "969fb2ba-b431-42e1-be32-ee4a2da38ec8" } ], "resourceVersion": "38829", "uid": "f9d24c54-0ea7-4680-a2e4-3b16deb613d5" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "openshift-kube-scheduler-operator", "pod-template-hash": "64b68bc5b4" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-kube-scheduler-operator", "pod-template-hash": "64b68bc5b4" }, "name": "openshift-kube-scheduler-operator" }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml" ], "command": [ "cluster-kube-scheduler-operator", "operator" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a7ce3813367a4a491bafbcb7d7a146ba2f0e60f985aa21d6fc859ea89868f81a" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5c10666cee9bc0acca9f97eada3e0fe8212d2f0d902ecf138b5dfa1dfa978ad6" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" }, { "name": "OPERAND_IMAGE_VERSION", "value": "1.31.14" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5c10666cee9bc0acca9f97eada3e0fe8212d2f0d902ecf138b5dfa1dfa978ad6", "imagePullPolicy": "IfNotPresent", "name": "kube-scheduler-operator-container", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount", "name": "kube-api-access", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-kube-scheduler-operator", "serviceAccountName": "openshift-kube-scheduler-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "kube-scheduler-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "openshift-kube-scheduler-operator-config" }, "name": "config" }, { "name": "kube-api-access", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "expirationSeconds": 3600, "path": "token" } }, { "configMap": { "items": [ { "key": "ca.crt", "path": "ca.crt" } ], "name": "kube-root-ca.crt" } }, { "downwardAPI": { "items": [ { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" }, "path": "namespace" } ] } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-01-28T13:08:13Z", "generation": 1, "labels": { "app": "kube-storage-version-migrator-operator", "pod-template-hash": "68bb6fb478" }, "name": "kube-storage-version-migrator-operator-68bb6fb478", "namespace": "openshift-kube-storage-version-migrator-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kube-storage-version-migrator-operator", "uid": "b0e45b54-1bcd-48ac-9a53-a03bfbcb94a9" } ], "resourceVersion": "38467", "uid": "fbc56f3e-0238-4e5d-8115-143456498c41" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "kube-storage-version-migrator-operator", "pod-template-hash": "68bb6fb478" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "kube-storage-version-migrator-operator", "pod-template-hash": "68bb6fb478" }, "name": "kube-storage-version-migrator-operator" }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml" ], "command": [ "cluster-kube-storage-version-migrator-operator", "start" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:abc38d819fb95023240a5e61011c9eba104cdd77c4166c7a9331125a394e0cf0" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c9d156994ffa416f71bc194d2113c83c6d8a43aaefed8ed75fb6b5c3b968a930" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" }, { "name": "OPERAND_IMAGE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c9d156994ffa416f71bc194d2113c83c6d8a43aaefed8ed75fb6b5c3b968a930", "imagePullPolicy": "IfNotPresent", "name": "kube-storage-version-migrator-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "kube-storage-version-migrator-operator", "serviceAccountName": "kube-storage-version-migrator-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "d5981cd9ec343f73c66918f3ab30af553219721ba945cc13ca1405cddb5846dc" }, "creationTimestamp": "2026-01-28T13:10:32Z", "generation": 1, "labels": { "app": "migrator", "pod-template-hash": "55fcbbb95c" }, "name": "migrator-55fcbbb95c", "namespace": "openshift-kube-storage-version-migrator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "migrator", "uid": "6b58484f-8a53-43e3-b3e6-1de0cb512778" } ], "resourceVersion": "38655", "uid": "649db4f5-1b72-498c-a4c3-a022eac614f5" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "migrator", "pod-template-hash": "55fcbbb95c" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "migrator", "pod-template-hash": "55fcbbb95c" } }, "spec": { "containers": [ { "args": [ "trap 'echo \"Termination signal received, but ignored. Continuing...\"; sleep infinity' TERM\nmigrator \"$@\" \u0026 wait $!", "bash", "--alsologtostderr", "--v=2" ], "command": [ "/bin/bash", "-c" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:abc38d819fb95023240a5e61011c9eba104cdd77c4166c7a9331125a394e0cf0", "imagePullPolicy": "IfNotPresent", "name": "migrator", "resources": { "requests": { "cpu": "10m", "memory": "200Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "trap 'echo \"Gracefully sleeping for 25s to let another pod start...\"; sleep 25; exit' EXIT\nwhile true; do echo \"Waiting for termination...\"; sleep 3600 \u0026 wait $!; done" ], "command": [ "/bin/bash", "-c" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:abc38d819fb95023240a5e61011c9eba104cdd77c4166c7a9331125a394e0cf0", "imagePullPolicy": "IfNotPresent", "name": "graceful-termination", "resources": { "requests": { "cpu": "1m", "memory": "1Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "kube-storage-version-migrator-sa", "serviceAccountName": "kube-storage-version-migrator-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "MachineAPI", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:57Z", "generation": 1, "labels": { "k8s-app": "cluster-autoscaler-operator", "pod-template-hash": "67b49594d4" }, "name": "cluster-autoscaler-operator-67b49594d4", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-autoscaler-operator", "uid": "581462ec-0c30-4e54-950a-cfea5dd83d39" } ], "resourceVersion": "39172", "uid": "3a79cd82-c577-4cae-8379-e15d87eef2e1" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "k8s-app": "cluster-autoscaler-operator", "pod-template-hash": "67b49594d4" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "cluster-autoscaler-operator", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "cluster-autoscaler-operator", "pod-template-hash": "67b49594d4" } }, "spec": { "containers": [ { "args": [ "--secure-listen-address=0.0.0.0:9192", "--upstream=http://127.0.0.1:9191/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9192, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "auth-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/private", "name": "cert", "readOnly": true } ] }, { "args": [ "-alsologtostderr" ], "command": [ "cluster-autoscaler-operator" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "CLUSTER_AUTOSCALER_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "LEADER_ELECTION_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "CLUSTER_AUTOSCALER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9bcbf2b332b5db1552bb534e7050e4335f368744f0e3ab5331d710a17015eb67" }, { "name": "WEBHOOKS_CERT_DIR", "value": "/etc/cluster-autoscaler-operator/tls" }, { "name": "WEBHOOKS_PORT", "value": "8443" }, { "name": "METRICS_PORT", "value": "9191" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0581df96c4328edc621a5a994b9279d92fe4cacfc1194f498e7e976dd0ebd1a0", "imagePullPolicy": "IfNotPresent", "name": "cluster-autoscaler-operator", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/cluster-autoscaler-operator/tls", "name": "cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cluster-autoscaler-operator", "serviceAccountName": "cluster-autoscaler-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "cluster-autoscaler-operator-cert" } }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy-cluster-autoscaler-operator" }, "name": "auth-proxy-config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "baremetal", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:30Z", "generation": 1, "labels": { "k8s-app": "cluster-baremetal-operator", "pod-template-hash": "84bb864fd9" }, "name": "cluster-baremetal-operator-84bb864fd9", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-baremetal-operator", "uid": "09915787-b3cb-409e-9ab3-1507b73e578e" } ], "resourceVersion": "38511", "uid": "8b7a1acd-271e-452d-939c-dd4c89833b04" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "k8s-app": "cluster-baremetal-operator", "pod-template-hash": "84bb864fd9" } }, "template": { "metadata": { "annotations": { "capability.openshift.io/name": "baremetal", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true", "openshift.io/required-scc": "anyuid", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "cluster-baremetal-operator", "pod-template-hash": "84bb864fd9" } }, "spec": { "containers": [ { "args": [ "--enable-leader-election" ], "command": [ "/usr/bin/cluster-baremetal-operator" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "COMPONENT_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "METRICS_PORT", "value": "8080" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:401f3670f0612fcc011a1844eca8aa0f741f631e2ab91ba6e7d8d336739667cc", "imagePullPolicy": "IfNotPresent", "name": "cluster-baremetal-operator", "ports": [ { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/cluster-baremetal-operator/tls", "name": "cert", "readOnly": true }, { "mountPath": "/etc/cluster-baremetal-operator/images", "name": "images", "readOnly": true } ] }, { "args": [ "--secure-listen-address=0.0.0.0:8443", "--upstream=http://localhost:8080/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--config-file=/etc/baremetal-kube-rbac-proxy/config-file.yaml", "--logtostderr=true", "--v=10" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "baremetal-kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/baremetal-kube-rbac-proxy", "name": "config" }, { "mountPath": "/etc/tls/private", "name": "cluster-baremetal-operator-tls" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "cluster-baremetal-operator", "serviceAccountName": "cluster-baremetal-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "cert", "secret": { "defaultMode": 420, "secretName": "cluster-baremetal-webhook-server-cert" } }, { "configMap": { "defaultMode": 420, "name": "baremetal-kube-rbac-proxy" }, "name": "config" }, { "name": "cluster-baremetal-operator-tls", "secret": { "defaultMode": 420, "secretName": "cluster-baremetal-operator-tls" } }, { "configMap": { "defaultMode": 420, "name": "cluster-baremetal-operator-images" }, "name": "images" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "MachineAPI", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-01-28T13:08:51Z", "generation": 1, "labels": { "k8s-app": "control-plane-machine-set-operator", "pod-template-hash": "5d8fdd6568" }, "name": "control-plane-machine-set-operator-5d8fdd6568", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "control-plane-machine-set-operator", "uid": "a7500118-640c-4724-ac07-3baaa48d3c28" } ], "resourceVersion": "38942", "uid": "c3f3cfb5-8357-42ed-8651-351670e280f2" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "k8s-app": "control-plane-machine-set-operator", "pod-template-hash": "5d8fdd6568" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "control-plane-machine-set-operator", "pod-template-hash": "5d8fdd6568" } }, "spec": { "containers": [ { "args": [ "-v=2", "--leader-elect=true", "--leader-elect-lease-duration=137s", "--leader-elect-renew-deadline=107s", "--leader-elect-retry-period=26s", "--leader-elect-resource-namespace=openshift-machine-api" ], "command": [ "/manager" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "COMPONENT_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c185297f6a64af524e81d799f23f4973300e1477016b97bc568b341aa366fbff", "imagePullPolicy": "IfNotPresent", "name": "control-plane-machine-set-operator", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "control-plane-machine-set-operator-tls" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "control-plane-machine-set-operator", "serviceAccountName": "control-plane-machine-set-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "control-plane-machine-set-operator-tls", "secret": { "defaultMode": 420, "secretName": "control-plane-machine-set-operator-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "machine.openshift.io/owned": "", "operator.openshift.io/dep-openshift-machine-api.mao-trusted-ca.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "3abb3a6e1e244c4b6e2e8b1446654f6d552715235283af85d73cf7fb48e29be0" }, "creationTimestamp": "2026-01-28T13:11:12Z", "generation": 1, "labels": { "api": "clusterapi", "k8s-app": "controller", "pod-template-hash": "55f579965" }, "name": "machine-api-controllers-55f579965", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "machine-api-controllers", "uid": "a895eb7b-6131-4a61-991e-cbceea687d67" } ], "resourceVersion": "38670", "uid": "43f2531d-d1b3-4e78-871d-c77c71f72238" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "api": "clusterapi", "k8s-app": "controller", "pod-template-hash": "55f579965" } }, "template": { "metadata": { "annotations": { "operator.openshift.io/dep-openshift-machine-api.mao-trusted-ca.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "api": "clusterapi", "k8s-app": "controller", "pod-template-hash": "55f579965" } }, "spec": { "containers": [ { "args": [ "--logtostderr=true", "--v=3", "--leader-elect=true", "--leader-elect-lease-duration=120s", "--namespace=openshift-machine-api", "--feature-gates=AzureWorkloadIdentity=true,GCPLabelsTags=true,MachineAPIMigration=false,VSphereStaticIPs=true" ], "command": [ "/machineset-controller" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c028f89cc0eb4a4ef2c6cafb31fca86a32ab0796c1b071938033c2167a0f1160", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "machineset-controller", "ports": [ { "containerPort": 8443, "name": "webhook-server", "protocol": "TCP" }, { "containerPort": 9441, "name": "healthz", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/readyz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/machine-api-operator/tls", "name": "machineset-webhook-cert", "readOnly": true } ] }, { "args": [ "--logtostderr=true", "--v=3", "--leader-elect=true", "--leader-elect-lease-duration=120s", "--namespace=openshift-machine-api", "--feature-gates=AzureWorkloadIdentity=true,GCPLabelsTags=true,MachineAPIMigration=false,VSphereStaticIPs=true" ], "command": [ "/machine-controller-manager" ], "env": [ { "name": "NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "RELEASE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0579bee1e5bb7e6e05cb578b0662539a485cb68cf362c18fcba7c034b1f2403f", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "machine-controller", "ports": [ { "containerPort": 8440, "name": "machine-webhook", "protocol": "TCP" }, { "containerPort": 9440, "name": "healthz", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true }, { "mountPath": "/etc/machine-api-operator/tls", "name": "machine-webhook-cert", "readOnly": true } ] }, { "args": [ "--logtostderr=true", "--v=3", "--leader-elect=true", "--leader-elect-lease-duration=120s", "--namespace=openshift-machine-api" ], "command": [ "/nodelink-controller" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c028f89cc0eb4a4ef2c6cafb31fca86a32ab0796c1b071938033c2167a0f1160", "imagePullPolicy": "IfNotPresent", "name": "nodelink-controller", "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--logtostderr=true", "--v=3", "--leader-elect=true", "--leader-elect-lease-duration=120s", "--namespace=openshift-machine-api" ], "command": [ "/machine-healthcheck" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c028f89cc0eb4a4ef2c6cafb31fca86a32ab0796c1b071938033c2167a0f1160", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "machine-healthcheck-controller", "ports": [ { "containerPort": 9442, "name": "healthz", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--secure-listen-address=0.0.0.0:8442", "--upstream=http://localhost:8082", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-machineset-mtrc", "ports": [ { "containerPort": 8442, "name": "machineset-mtrc", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "config" }, { "mountPath": "/etc/tls/private", "name": "machine-api-controllers-tls" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:8441", "--upstream=http://localhost:8081", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-machine-mtrc", "ports": [ { "containerPort": 8441, "name": "machine-mtrc", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "config" }, { "mountPath": "/etc/tls/private", "name": "machine-api-controllers-tls" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:8444", "--upstream=http://localhost:8083", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-mhc-mtrc", "ports": [ { "containerPort": 8444, "name": "mhc-mtrc", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "config" }, { "mountPath": "/etc/tls/private", "name": "machine-api-controllers-tls" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "machine-api-controllers", "serviceAccountName": "machine-api-controllers", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master" }, { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "machineset-webhook-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "machine-api-operator-webhook-cert" } }, { "name": "machine-webhook-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "machine-api-operator-machine-webhook-cert" } }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "config" }, { "name": "machine-api-controllers-tls", "secret": { "defaultMode": 420, "secretName": "machine-api-controllers-tls" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "mao-trusted-ca", "optional": true }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "MachineAPI", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:32Z", "generation": 1, "labels": { "k8s-app": "machine-api-operator", "pod-template-hash": "6b858f847c" }, "name": "machine-api-operator-6b858f847c", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "machine-api-operator", "uid": "a5302e39-8752-429a-b732-0ff060b01c8f" } ], "resourceVersion": "38633", "uid": "412783e9-ce9f-4b96-9716-7999529e44ab" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "k8s-app": "machine-api-operator", "pod-template-hash": "6b858f847c" } }, "template": { "metadata": { "annotations": { "capability.openshift.io/name": "MachineAPI", "kubectl.kubernetes.io/default-container": "machine-api-operator", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "machine-api-operator", "pod-template-hash": "6b858f847c" } }, "spec": { "containers": [ { "args": [ "--secure-listen-address=0.0.0.0:8443", "--upstream=http://localhost:8080/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "config" }, { "mountPath": "/etc/tls/private", "name": "machine-api-operator-tls" } ] }, { "args": [ "start", "--images-json=/etc/machine-api-operator-config/images/images.json", "--alsologtostderr", "--v=3" ], "command": [ "/machine-api-operator" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "COMPONENT_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "METRICS_PORT", "value": "8080" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c028f89cc0eb4a4ef2c6cafb31fca86a32ab0796c1b071938033c2167a0f1160", "imagePullPolicy": "IfNotPresent", "name": "machine-api-operator", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/machine-api-operator-config/images", "name": "images" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "machine-api-operator", "serviceAccountName": "machine-api-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "machine-api-operator-images" }, "name": "images" }, { "name": "machine-api-operator-tls", "secret": { "defaultMode": 420, "secretName": "machine-api-operator-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-01-28T13:11:16Z", "generation": 1, "labels": { "k8s-app": "machine-config-controller", "pod-template-hash": "8655977549" }, "name": "machine-config-controller-8655977549", "namespace": "openshift-machine-config-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "machine-config-controller", "uid": "203e6611-2eb9-41db-b82a-32af675f1952" } ], "resourceVersion": "38015", "uid": "680ed533-c260-4cf4-9926-aa8809debfcc" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "k8s-app": "machine-config-controller", "pod-template-hash": "8655977549" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "machine-config-controller", "pod-template-hash": "8655977549" } }, "spec": { "containers": [ { "args": [ "start", "--resourcelock-namespace=openshift-machine-config-operator", "--v=2", "--payload-version=4.18.31" ], "command": [ "/usr/bin/machine-config-controller" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2655c75a468e61f5206cf2126af6a30159c581757656352490a8378113262df7", "imagePullPolicy": "IfNotPresent", "name": "machine-config-controller", "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--secure-listen-address=0.0.0.0:9001", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--upstream=http://127.0.0.1:8797", "--logtostderr=true", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9001, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "proxy-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "mcc-auth-proxy-config" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "machine-config-controller", "serviceAccountName": "machine-config-controller", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "proxy-tls", "secret": { "defaultMode": 420, "secretName": "mcc-proxy-tls" } }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "mcc-auth-proxy-config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:30Z", "generation": 1, "labels": { "k8s-app": "machine-config-operator", "pod-template-hash": "64cdc6c9df" }, "name": "machine-config-operator-64cdc6c9df", "namespace": "openshift-machine-config-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "machine-config-operator", "uid": "10fae74f-e157-4a78-88f2-0625534f86fb" } ], "resourceVersion": "38853", "uid": "bf2edda7-1d9e-4e52-ae7e-8f9d767a89d8" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "k8s-app": "machine-config-operator", "pod-template-hash": "64cdc6c9df" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "anyuid", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "machine-config-operator", "pod-template-hash": "64cdc6c9df" } }, "spec": { "containers": [ { "args": [ "start", "--images-json=/etc/mco/images/images.json", "--payload-version=4.18.31", "--operator-image=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2655c75a468e61f5206cf2126af6a30159c581757656352490a8378113262df7" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2655c75a468e61f5206cf2126af6a30159c581757656352490a8378113262df7", "imagePullPolicy": "IfNotPresent", "name": "machine-config-operator", "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/mco/images", "name": "images" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9001", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--upstream=http://127.0.0.1:8797", "--logtostderr=true", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9001, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "proxy-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "auth-proxy-config" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "machine-config-operator", "serviceAccountName": "machine-config-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "machine-config-operator-images" }, "name": "images" }, { "name": "proxy-tls", "secret": { "defaultMode": 420, "secretName": "mco-proxy-tls" } }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "auth-proxy-config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "marketplace", "config.openshift.io/inject-proxy": "marketplace-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:14Z", "generation": 1, "labels": { "name": "marketplace-operator", "pod-template-hash": "7ff5cfb869" }, "name": "marketplace-operator-7ff5cfb869", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "marketplace-operator", "uid": "34d23824-f1e0-4a65-8051-4b76088569df" } ], "resourceVersion": "38282", "uid": "fbcda618-2e4a-40b2-b5e3-96d903e35abb" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "marketplace-operator", "pod-template-hash": "7ff5cfb869" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "marketplace-operator", "pod-template-hash": "7ff5cfb869" } }, "spec": { "containers": [ { "args": [ "-defaultsDir=/defaults", "-clusterOperatorName=marketplace", "-tls-cert", "/var/run/secrets/serving-cert/tls.crt", "-tls-key", "/var/run/secrets/serving-cert/tls.key" ], "command": [ "marketplace-operator" ], "env": [ { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "marketplace-operator" }, { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "GOMEMLIMIT", "value": "5MiB" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:69599b7871ef7ff9bb31fc260ce0705ef788186679b93220a2becf3d668d2e50", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "marketplace-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8080, "name": "healthz", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1m", "memory": "5Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/ca-trust/extracted/pem/", "name": "marketplace-trusted-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "marketplace-operator-metrics" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "marketplace-operator", "serviceAccountName": "marketplace-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "marketplace-trusted-ca", "optional": true }, "name": "marketplace-trusted-ca" }, { "name": "marketplace-operator-metrics", "secret": { "defaultMode": 420, "secretName": "marketplace-operator-metrics" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:26Z", "generation": 1, "labels": { "app": "cluster-monitoring-operator", "app.kubernetes.io/name": "cluster-monitoring-operator", "pod-template-hash": "6f86566768" }, "name": "cluster-monitoring-operator-6f86566768", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-monitoring-operator", "uid": "9f55136f-cc26-487a-9bfc-45fc561857cc" } ], "resourceVersion": "37830", "uid": "dc5a9f80-e772-4b9b-acba-aee9c99d2387" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "cluster-monitoring-operator", "pod-template-hash": "6f86566768" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "cluster-monitoring-operator", "app.kubernetes.io/name": "cluster-monitoring-operator", "pod-template-hash": "6f86566768" } }, "spec": { "containers": [ { "args": [ "-namespace=openshift-monitoring", "-namespace-user-workload=openshift-user-workload-monitoring", "-configmap=cluster-monitoring-config", "-release-version=$(RELEASE_VERSION)", "-v=2", "-cert-file=/etc/tls/private/tls.crt", "-key-file=/etc/tls/private/tls.key", "-images=prometheus-operator=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0318fb80da3c22fd80da5709561afde6a1ca658eb10f2e0ca6a63c66273c296f", "-images=prometheus-config-reloader=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3c861e6801e61cfacc24e9699133ceab5897304e65d5c22c4cf2f5f0eca4fd2f", "-images=prometheus-operator-admission-webhook=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ee2f59a16f881ad171ca03c4db0014b928eeec08258eb004386f96506d00ca2c", "-images=configmap-reloader=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0192a498c468d06dbed41695503b97555d040126b8c37b4aa4c85608fd2cc22d", "-images=prometheus=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f5131b86a8331debff38f428525511d6264ede08d28d75b94fd85c3f2692711d", "-images=alertmanager=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0bfb2bc68ec2e945ce1657fb60b53c0f9e8efa4a2ccb6dfa455fd1a41e144bc1", "-images=node-exporter=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6b4f2baf26c245fe536b98e5948ace14668e17bf55cea67de9895aa87d39b8b7", "-images=kube-state-metrics=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:04e90d4eeab663964a92b253bfe85064ddf9568e07f0d57ea7aa35ec415e6f8d", "-images=openshift-state-metrics=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e60aeeba7713e21b90d245a55d617296ffe0603cd9b23ed0d5e2d4dd990c3a31", "-images=kube-rbac-proxy=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "-images=telemeter-client=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:861aaa1165d4664df2a3b548e569362a41127573205b26b9cf608a9fc2119ee5", "-images=prom-label-proxy=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b102a969e184da2bf098d33442c6a4f8a6ee130d4a0ea7f26452427447105e2a", "-images=thanos=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d3cb7fece0a7bf309c52ca2e47e6ec7bb1c0ee556a37834f3df6fe1ae08610e0", "-images=monitoring-plugin=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a00a16c6ae8f45e06432da8a7100a9c08bc48eeaa048e454d10bdff1df7f0c2a", "-images=kube-metrics-server=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b79d26eab1465065bd1cc952236154ebc6c203aaa45a23c92aa903e69daf31c6" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8eca7d2a38b3671aa2a4ab1642d2ab1c3c865b827d084fbfb12594d753f1ca52", "imagePullPolicy": "IfNotPresent", "name": "cluster-monitoring-operator", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "75Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "cluster-monitoring-operator-tls", "readOnly": true }, { "mountPath": "/etc/cluster-monitoring-operator/telemetry", "name": "telemetry-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cluster-monitoring-operator", "serviceAccountName": "cluster-monitoring-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node.kubernetes.io/memory-pressure", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "telemetry-config" }, "name": "telemetry-config" }, { "name": "cluster-monitoring-operator-tls", "secret": { "defaultMode": 420, "secretName": "cluster-monitoring-operator-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-01-28T13:15:08Z", "generation": 1, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "kube-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.13.0", "pod-template-hash": "5c46d6fcdc" }, "name": "kube-state-metrics-5c46d6fcdc", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kube-state-metrics", "uid": "6df0acf7-5d2c-4122-9494-dc90ddf68767" } ], "resourceVersion": "37842", "uid": "a95372c9-0999-40ae-ab61-df7604653881" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/name": "kube-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "5c46d6fcdc" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "kube-state-metrics", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "kube-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.13.0", "pod-template-hash": "5c46d6fcdc" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--host=127.0.0.1", "--port=8081", "--telemetry-host=127.0.0.1", "--telemetry-port=8082", "--metric-denylist=\n^kube_secret_labels$,\n^kube_.+_annotations$,\n^kube_customresource_.+_annotations_info$,\n^kube_customresource_.+_labels_info$\n", "--metric-labels-allowlist=pods=[*],nodes=[*],namespaces=[*],persistentvolumes=[*],persistentvolumeclaims=[*],poddisruptionbudgets=[*]", "--metric-denylist=\n^kube_.+_created$,\n^kube_.+_metadata_resource_version$,\n^kube_replicaset_metadata_generation$,\n^kube_replicaset_status_observed_generation$,\n^kube_pod_restart_policy$,\n^kube_pod_init_container_status_terminated$,\n^kube_pod_init_container_status_running$,\n^kube_pod_container_status_terminated$,\n^kube_pod_container_status_running$,\n^kube_pod_completion_time$,\n^kube_pod_status_scheduled$\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:04e90d4eeab663964a92b253bfe85064ddf9568e07f0d57ea7aa35ec415e6f8d", "imagePullPolicy": "IfNotPresent", "name": "kube-state-metrics", "resources": { "requests": { "cpu": "2m", "memory": "80Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp", "name": "volume-directive-shadow" }, { "mountPath": "/etc/kube-state-metrics", "name": "kube-state-metrics-custom-resource-state-configmap", "readOnly": true } ] }, { "args": [ "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8081/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-main", "ports": [ { "containerPort": 8443, "name": "https-main", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "kube-state-metrics-tls" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca" }, { "mountPath": "/etc/kube-rbac-policy", "name": "kube-state-metrics-kube-rbac-proxy-config", "readOnly": true } ] }, { "args": [ "--secure-listen-address=:9443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8082/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-self", "ports": [ { "containerPort": 9443, "name": "https-self", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "kube-state-metrics-tls" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca" }, { "mountPath": "/etc/kube-rbac-policy", "name": "kube-state-metrics-kube-rbac-proxy-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kube-state-metrics", "serviceAccountName": "kube-state-metrics", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "volume-directive-shadow" }, { "name": "kube-state-metrics-tls", "secret": { "defaultMode": 420, "secretName": "kube-state-metrics-tls" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "name": "kube-state-metrics-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "kube-state-metrics-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "kube-state-metrics-custom-resource-state-configmap" }, "name": "kube-state-metrics-custom-resource-state-configmap" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-04-24T12:31:22Z", "generation": 3, "labels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "59cdf4b9cc" }, "name": "metrics-server-59cdf4b9cc", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "metrics-server", "uid": "6f97375a-b471-4d59-b92a-5b7b80d74683" } ], "resourceVersion": "46060", "uid": "9fa44631-baca-49ee-bd69-b20e113f5a45" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "59cdf4b9cc" } }, "template": { "metadata": { "annotations": { "monitoring.openshift.io/kubelet-serving-ca-bundle-hash": "4mkckbcd05ob9", "monitoring.openshift.io/metrics-client-cert-hash": "61p1t9d9m3fns", "monitoring.openshift.io/serving-ca-secret-hash": "7meeqvsbnua0p", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "59cdf4b9cc" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--secure-port=10250", "--kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname", "--kubelet-use-node-status-port", "--metric-resolution=15s", "--kubelet-certificate-authority=/etc/tls/kubelet-serving-ca-bundle/ca-bundle.crt", "--kubelet-client-certificate=/etc/tls/metrics-client-certs/tls.crt", "--kubelet-client-key=/etc/tls/metrics-client-certs/tls.key", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--shutdown-send-retry-after=true", "--shutdown-delay-duration=150s", "--disable-http2-serving=true", "--tls-min-version=VersionTLS12", "--client-ca-file=/etc/client-ca-bundle/client-ca-file", "--requestheader-client-ca-file=/etc/client-ca-bundle/requestheader-client-ca-file", "--requestheader-allowed-names=kube-apiserver-proxy,system:kube-apiserver-proxy,system:openshift-aggregator", "--requestheader-extra-headers-prefix=X-Remote-Extra-", "--requestheader-group-headers=X-Remote-Group", "--requestheader-username-headers=X-Remote-User", "--audit-policy-file=/etc/audit/metadata-profile.yaml", "--audit-log-path=/var/log/metrics-server/audit.log", "--audit-log-maxsize=100", "--audit-log-maxbackup=5", "--audit-log-compress=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b79d26eab1465065bd1cc952236154ebc6c203aaa45a23c92aa903e69daf31c6", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/livez", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "metrics-server", "ports": [ { "containerPort": 10250, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 6, "httpGet": { "path": "/readyz", "port": "https", "scheme": "HTTPS" }, "initialDelaySeconds": 20, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1m", "memory": "40Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-metrics-server-tls" }, { "mountPath": "/etc/tls/metrics-client-certs", "name": "secret-metrics-client-certs" }, { "mountPath": "/etc/tls/kubelet-serving-ca-bundle", "name": "configmap-kubelet-serving-ca-bundle" }, { "mountPath": "/etc/audit", "name": "metrics-server-audit-profiles", "readOnly": true }, { "mountPath": "/var/log/metrics-server", "name": "audit-log" }, { "mountPath": "/etc/client-ca-bundle", "name": "client-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "metrics-server", "serviceAccountName": "metrics-server", "terminationGracePeriodSeconds": 170, "volumes": [ { "name": "secret-metrics-client-certs", "secret": { "defaultMode": 420, "secretName": "metrics-client-certs" } }, { "name": "secret-metrics-server-tls", "secret": { "defaultMode": 420, "secretName": "metrics-server-tls" } }, { "configMap": { "defaultMode": 420, "name": "kubelet-serving-ca-bundle" }, "name": "configmap-kubelet-serving-ca-bundle" }, { "emptyDir": {}, "name": "audit-log" }, { "configMap": { "defaultMode": 420, "name": "metrics-server-audit-profiles" }, "name": "metrics-server-audit-profiles" }, { "name": "client-ca-bundle", "secret": { "defaultMode": 420, "secretName": "metrics-server-c0ujjasb3makf" } } ] } } }, "status": { "fullyLabeledReplicas": 1, "observedGeneration": 3, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "3" }, "creationTimestamp": "2026-04-24T12:36:30Z", "generation": 2, "labels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "75666fd487" }, "name": "metrics-server-75666fd487", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "metrics-server", "uid": "6f97375a-b471-4d59-b92a-5b7b80d74683" } ], "resourceVersion": "46079", "uid": "90b2f48f-b4b0-46ad-ba1a-5038f1a7fda2" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "75666fd487" } }, "template": { "metadata": { "annotations": { "monitoring.openshift.io/kubelet-serving-ca-bundle-hash": "84is33vgnecgb", "monitoring.openshift.io/metrics-client-cert-hash": "61p1t9d9m3fns", "monitoring.openshift.io/serving-ca-secret-hash": "7meeqvsbnua0p", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "75666fd487" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--secure-port=10250", "--kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname", "--kubelet-use-node-status-port", "--metric-resolution=15s", "--kubelet-certificate-authority=/etc/tls/kubelet-serving-ca-bundle/ca-bundle.crt", "--kubelet-client-certificate=/etc/tls/metrics-client-certs/tls.crt", "--kubelet-client-key=/etc/tls/metrics-client-certs/tls.key", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--shutdown-send-retry-after=true", "--shutdown-delay-duration=150s", "--disable-http2-serving=true", "--tls-min-version=VersionTLS12", "--client-ca-file=/etc/client-ca-bundle/client-ca-file", "--requestheader-client-ca-file=/etc/client-ca-bundle/requestheader-client-ca-file", "--requestheader-allowed-names=kube-apiserver-proxy,system:kube-apiserver-proxy,system:openshift-aggregator", "--requestheader-extra-headers-prefix=X-Remote-Extra-", "--requestheader-group-headers=X-Remote-Group", "--requestheader-username-headers=X-Remote-User", "--audit-policy-file=/etc/audit/metadata-profile.yaml", "--audit-log-path=/var/log/metrics-server/audit.log", "--audit-log-maxsize=100", "--audit-log-maxbackup=5", "--audit-log-compress=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b79d26eab1465065bd1cc952236154ebc6c203aaa45a23c92aa903e69daf31c6", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/livez", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "metrics-server", "ports": [ { "containerPort": 10250, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 6, "httpGet": { "path": "/readyz", "port": "https", "scheme": "HTTPS" }, "initialDelaySeconds": 20, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1m", "memory": "40Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-metrics-server-tls" }, { "mountPath": "/etc/tls/metrics-client-certs", "name": "secret-metrics-client-certs" }, { "mountPath": "/etc/tls/kubelet-serving-ca-bundle", "name": "configmap-kubelet-serving-ca-bundle" }, { "mountPath": "/etc/audit", "name": "metrics-server-audit-profiles", "readOnly": true }, { "mountPath": "/var/log/metrics-server", "name": "audit-log" }, { "mountPath": "/etc/client-ca-bundle", "name": "client-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "metrics-server", "serviceAccountName": "metrics-server", "terminationGracePeriodSeconds": 170, "volumes": [ { "name": "secret-metrics-client-certs", "secret": { "defaultMode": 420, "secretName": "metrics-client-certs" } }, { "name": "secret-metrics-server-tls", "secret": { "defaultMode": 420, "secretName": "metrics-server-tls" } }, { "configMap": { "defaultMode": 420, "name": "kubelet-serving-ca-bundle" }, "name": "configmap-kubelet-serving-ca-bundle" }, { "emptyDir": {}, "name": "audit-log" }, { "configMap": { "defaultMode": 420, "name": "metrics-server-audit-profiles" }, "name": "metrics-server-audit-profiles" }, { "name": "client-ca-bundle", "secret": { "defaultMode": 420, "secretName": "metrics-server-f6entm67c63v7" } } ] } } }, "status": { "fullyLabeledReplicas": 2, "observedGeneration": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-01-28T13:15:14Z", "generation": 3, "labels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "97b9c4474" }, "name": "metrics-server-97b9c4474", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "metrics-server", "uid": "6f97375a-b471-4d59-b92a-5b7b80d74683" } ], "resourceVersion": "46061", "uid": "ab0ac0dd-825c-4b3f-9326-740bc19d84ec" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "97b9c4474" } }, "template": { "metadata": { "annotations": { "monitoring.openshift.io/kubelet-serving-ca-bundle-hash": "4mkckbcd05ob9", "monitoring.openshift.io/metrics-client-cert-hash": "a3qbjtmm6mta0", "monitoring.openshift.io/serving-ca-secret-hash": "7meeqvsbnua0p", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "97b9c4474" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--secure-port=10250", "--kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname", "--kubelet-use-node-status-port", "--metric-resolution=15s", "--kubelet-certificate-authority=/etc/tls/kubelet-serving-ca-bundle/ca-bundle.crt", "--kubelet-client-certificate=/etc/tls/metrics-client-certs/tls.crt", "--kubelet-client-key=/etc/tls/metrics-client-certs/tls.key", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--shutdown-send-retry-after=true", "--shutdown-delay-duration=150s", "--disable-http2-serving=true", "--tls-min-version=VersionTLS12", "--client-ca-file=/etc/client-ca-bundle/client-ca-file", "--requestheader-client-ca-file=/etc/client-ca-bundle/requestheader-client-ca-file", "--requestheader-allowed-names=kube-apiserver-proxy,system:kube-apiserver-proxy,system:openshift-aggregator", "--requestheader-extra-headers-prefix=X-Remote-Extra-", "--requestheader-group-headers=X-Remote-Group", "--requestheader-username-headers=X-Remote-User", "--audit-policy-file=/etc/audit/metadata-profile.yaml", "--audit-log-path=/var/log/metrics-server/audit.log", "--audit-log-maxsize=100", "--audit-log-maxbackup=5", "--audit-log-compress=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b79d26eab1465065bd1cc952236154ebc6c203aaa45a23c92aa903e69daf31c6", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/livez", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "metrics-server", "ports": [ { "containerPort": 10250, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 6, "httpGet": { "path": "/readyz", "port": "https", "scheme": "HTTPS" }, "initialDelaySeconds": 20, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1m", "memory": "40Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-metrics-server-tls" }, { "mountPath": "/etc/tls/metrics-client-certs", "name": "secret-metrics-client-certs" }, { "mountPath": "/etc/tls/kubelet-serving-ca-bundle", "name": "configmap-kubelet-serving-ca-bundle" }, { "mountPath": "/etc/audit", "name": "metrics-server-audit-profiles", "readOnly": true }, { "mountPath": "/var/log/metrics-server", "name": "audit-log" }, { "mountPath": "/etc/client-ca-bundle", "name": "client-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "metrics-server", "serviceAccountName": "metrics-server", "terminationGracePeriodSeconds": 170, "volumes": [ { "name": "secret-metrics-client-certs", "secret": { "defaultMode": 420, "secretName": "metrics-client-certs" } }, { "name": "secret-metrics-server-tls", "secret": { "defaultMode": 420, "secretName": "metrics-server-tls" } }, { "configMap": { "defaultMode": 420, "name": "kubelet-serving-ca-bundle" }, "name": "configmap-kubelet-serving-ca-bundle" }, { "emptyDir": {}, "name": "audit-log" }, { "configMap": { "defaultMode": 420, "name": "metrics-server-audit-profiles" }, "name": "metrics-server-audit-profiles" }, { "name": "client-ca-bundle", "secret": { "defaultMode": 420, "secretName": "metrics-server-2bqnrf15i9efs" } } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-01-28T13:18:01Z", "generation": 1, "labels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "688f696cdc" }, "name": "monitoring-plugin-688f696cdc", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "monitoring-plugin", "uid": "35986bde-b5eb-4abf-8773-77491c7ea05e" } ], "resourceVersion": "38782", "uid": "48004784-e2cb-4243-b82c-19d3c3540e9b" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "688f696cdc" } }, "template": { "metadata": { "annotations": { "monitoring.openshift.io/cert-hash": "7s251hq0kreng", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "688f696cdc" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "automountServiceAccountToken": false, "containers": [ { "args": [ "-config-path=/opt/app-root/web/dist", "-static-path=/opt/app-root/web/dist", "-cert=/var/cert/tls.crt", "-key=/var/cert/tls.key" ], "command": [ "/opt/app-root/plugin-backend" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a00a16c6ae8f45e06432da8a7100a9c08bc48eeaa048e454d10bdff1df7f0c2a", "imagePullPolicy": "IfNotPresent", "name": "monitoring-plugin", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/cert", "name": "monitoring-plugin-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "monitoring-plugin-cert", "secret": { "defaultMode": 420, "secretName": "monitoring-plugin-cert" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-01-28T13:15:08Z", "generation": 1, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "openshift-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "7b55b444b7" }, "name": "openshift-state-metrics-7b55b444b7", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-state-metrics", "uid": "f16e486c-4159-402c-9ca1-fe194c7708af" } ], "resourceVersion": "37818", "uid": "1db0e995-b71d-4afa-92e6-f3017e93647a" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/name": "openshift-state-metrics", "pod-template-hash": "7b55b444b7" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "openshift-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "7b55b444b7" } }, "spec": { "containers": [ { "args": [ "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8081/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-policy/config.yaml", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-main", "ports": [ { "containerPort": 8443, "name": "https-main", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "openshift-state-metrics-tls" }, { "mountPath": "/etc/kube-rbac-policy", "name": "openshift-state-metrics-kube-rbac-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] }, { "args": [ "--secure-listen-address=:9443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8082/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-policy/config.yaml", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-self", "ports": [ { "containerPort": 9443, "name": "https-self", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "openshift-state-metrics-tls" }, { "mountPath": "/etc/kube-rbac-policy", "name": "openshift-state-metrics-kube-rbac-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] }, { "args": [ "--host=127.0.0.1", "--port=8081", "--telemetry-host=127.0.0.1", "--telemetry-port=8082" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e60aeeba7713e21b90d245a55d617296ffe0603cd9b23ed0d5e2d4dd990c3a31", "imagePullPolicy": "IfNotPresent", "name": "openshift-state-metrics", "resources": { "requests": { "cpu": "1m", "memory": "32Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-state-metrics", "serviceAccountName": "openshift-state-metrics", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "openshift-state-metrics-tls", "secret": { "defaultMode": 420, "secretName": "openshift-state-metrics-tls" } }, { "name": "openshift-state-metrics-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "openshift-state-metrics-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-01-28T13:14:59Z", "generation": 1, "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.78.1", "pod-template-hash": "646dd47bc7" }, "name": "prometheus-operator-646dd47bc7", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "prometheus-operator", "uid": "819dc153-767d-4aaf-a6e5-c26acccc7e45" } ], "resourceVersion": "38619", "uid": "ddb50d77-2ee7-4f51-a5c1-7aba9a99cd61" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/name": "prometheus-operator", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "646dd47bc7" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "prometheus-operator", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.78.1", "pod-template-hash": "646dd47bc7" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--kubelet-service=kube-system/kubelet", "--prometheus-config-reloader=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3c861e6801e61cfacc24e9699133ceab5897304e65d5c22c4cf2f5f0eca4fd2f", "--kubelet-endpoints=true", "--kubelet-endpointslice=false", "--watch-referenced-objects-in-all-namespaces=true", "--prometheus-instance-namespaces=openshift-monitoring", "--thanos-ruler-instance-namespaces=openshift-monitoring", "--alertmanager-instance-namespaces=openshift-monitoring", "--config-reloader-cpu-limit=0", "--config-reloader-memory-limit=0", "--config-reloader-cpu-request=1m", "--config-reloader-memory-request=10Mi", "--web.listen-address=127.0.0.1:8080", "--controller-id=openshift-monitoring/prometheus-operator" ], "env": [ { "name": "GOGC", "value": "30" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0318fb80da3c22fd80da5709561afde6a1ca658eb10f2e0ca6a63c66273c296f", "imagePullPolicy": "IfNotPresent", "name": "prometheus-operator", "resources": { "requests": { "cpu": "5m", "memory": "150Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://localhost:8080/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "prometheus-operator-tls", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true }, { "mountPath": "/etc/kube-rbac-policy", "name": "prometheus-operator-kube-rbac-proxy-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "prometheus-operator", "serviceAccountName": "prometheus-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "prometheus-operator-tls", "secret": { "defaultMode": 420, "secretName": "prometheus-operator-tls" } }, { "name": "prometheus-operator-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "prometheus-operator-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-01-28T13:11:13Z", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.78.1", "pod-template-hash": "6977f9d758" }, "name": "prometheus-operator-admission-webhook-6977f9d758", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "prometheus-operator-admission-webhook", "uid": "a2d6010a-e054-429e-83a1-d505b35ac6a6" } ], "resourceVersion": "38752", "uid": "233ca1ac-86ee-4ce1-90a1-d8952f9fa513" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "6977f9d758" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "prometheus-operator-admission-webhook", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.78.1", "pod-template-hash": "6977f9d758" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "automountServiceAccountToken": false, "containers": [ { "args": [ "--web.enable-tls=true", "--web.cert-file=/etc/tls/private/tls.crt", "--web.key-file=/etc/tls/private/tls.key", "--web.tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--web.tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ee2f59a16f881ad171ca03c4db0014b928eeec08258eb004386f96506d00ca2c", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "prometheus-operator-admission-webhook", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "5m", "memory": "30Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "tls-certificates", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "prometheus-operator-admission-webhook", "serviceAccountName": "prometheus-operator-admission-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls-certificates", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "prometheus-operator-admission-webhook-tls" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-01-28T13:15:14Z", "generation": 1, "labels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "telemeter-client", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "7647b7478d" }, "name": "telemeter-client-7647b7478d", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "telemeter-client", "uid": "02a7aa1f-7353-455f-8d07-0a06aaed17a9" } ], "resourceVersion": "38592", "uid": "82fd3182-ccda-4054-b7f3-38b30d49f381" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/name": "telemeter-client", "pod-template-hash": "7647b7478d" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}", "telemeter-token-hash": "15goceamu8hbo" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "telemeter-client", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "7647b7478d" } }, "spec": { "containers": [ { "command": [ "/usr/bin/telemeter-client", "--id=$(ID)", "--from=$(FROM)", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--from-ca-file=/etc/serving-certs-ca-bundle/service-ca.crt", "--from-token-file=/var/run/secrets/kubernetes.io/serviceaccount/token", "--to=$(TO)", "--to-token-file=/etc/telemeter/token", "--listen=localhost:8080", "--anonymize-salt-file=/etc/telemeter/salt", "--anonymize-labels=$(ANONYMIZE_LABELS)", "--match={__name__=~\"cluster:usage:.*\"}", "--match={__name__=\"count:up0\"}", "--match={__name__=\"count:up1\"}", "--match={__name__=\"cluster_version\"}", "--match={__name__=\"cluster_version_available_updates\"}", "--match={__name__=\"cluster_version_capability\"}", "--match={__name__=\"cluster_operator_up\"}", "--match={__name__=\"cluster_operator_conditions\"}", "--match={__name__=\"cluster_version_payload\"}", "--match={__name__=\"cluster_installer\"}", "--match={__name__=\"cluster_infrastructure_provider\"}", "--match={__name__=\"cluster_feature_set\"}", "--match={__name__=\"instance:etcd_object_counts:sum\"}", "--match={__name__=\"ALERTS\",alertstate=\"firing\",severity=~\"critical|warning|info|none\"}", "--match={__name__=\"code:apiserver_request_total:rate:sum\"}", "--match={__name__=\"cluster:capacity_cpu_cores:sum\"}", "--match={__name__=\"cluster:capacity_memory_bytes:sum\"}", "--match={__name__=\"cluster:cpu_usage_cores:sum\"}", "--match={__name__=\"cluster:memory_usage_bytes:sum\"}", "--match={__name__=\"openshift:cpu_usage_cores:sum\"}", "--match={__name__=\"openshift:memory_usage_bytes:sum\"}", "--match={__name__=\"workload:cpu_usage_cores:sum\"}", "--match={__name__=\"workload:memory_usage_bytes:sum\"}", "--match={__name__=\"cluster:virt_platform_nodes:sum\"}", "--match={__name__=\"cluster:node_instance_type_count:sum\"}", "--match={__name__=\"cnv:vmi_status_running:count\"}", "--match={__name__=\"cnv_abnormal\", reason=~\"memory_working_set_delta_from_request|memory_rss_delta_from_request\"}", "--match={__name__=\"cluster:vmi_request_cpu_cores:sum\"}", "--match={__name__=\"node_role_os_version_machine:cpu_capacity_cores:sum\"}", "--match={__name__=\"node_role_os_version_machine:cpu_capacity_sockets:sum\"}", "--match={__name__=\"subscription_sync_total\"}", "--match={__name__=\"olm_resolution_duration_seconds\"}", "--match={__name__=\"csv_succeeded\"}", "--match={__name__=\"csv_abnormal\"}", "--match={__name__=\"cluster:kube_persistentvolumeclaim_resource_requests_storage_bytes:provisioner:sum\"}", "--match={__name__=\"cluster:kubelet_volume_stats_used_bytes:provisioner:sum\"}", "--match={__name__=\"ceph_cluster_total_bytes\"}", "--match={__name__=\"ceph_cluster_total_used_raw_bytes\"}", "--match={__name__=\"ceph_health_status\"}", "--match={__name__=\"odf_system_raw_capacity_total_bytes\"}", "--match={__name__=\"odf_system_raw_capacity_used_bytes\"}", "--match={__name__=\"odf_system_health_status\"}", "--match={__name__=\"job:ceph_osd_metadata:count\"}", "--match={__name__=\"job:kube_pv:count\"}", "--match={__name__=\"job:odf_system_pvs:count\"}", "--match={__name__=\"job:ceph_pools_iops:total\"}", "--match={__name__=\"job:ceph_pools_iops_bytes:total\"}", "--match={__name__=\"job:ceph_versions_running:count\"}", "--match={__name__=\"job:noobaa_total_unhealthy_buckets:sum\"}", "--match={__name__=\"job:noobaa_bucket_count:sum\"}", "--match={__name__=\"job:noobaa_total_object_count:sum\"}", "--match={__name__=\"odf_system_bucket_count\", system_type=\"OCS\", system_vendor=\"Red Hat\"}", "--match={__name__=\"odf_system_objects_total\", system_type=\"OCS\", system_vendor=\"Red Hat\"}", "--match={__name__=\"noobaa_accounts_num\"}", "--match={__name__=\"noobaa_total_usage\"}", "--match={__name__=\"console_url\"}", "--match={__name__=\"cluster:console_auth_login_requests_total:sum\"}", "--match={__name__=\"cluster:console_auth_login_successes_total:sum\"}", "--match={__name__=\"cluster:console_auth_login_failures_total:sum\"}", "--match={__name__=\"cluster:console_auth_logout_requests_total:sum\"}", "--match={__name__=\"cluster:console_usage_users:max\"}", "--match={__name__=\"cluster:console_plugins_info:max\"}", "--match={__name__=\"cluster:console_customization_perspectives_info:max\"}", "--match={__name__=\"cluster:ovnkube_controller_egress_routing_via_host:max\"}", "--match={__name__=\"cluster:ovnkube_controller_admin_network_policies_db_objects:max\",table_name=~\"ACL|Address_Set\"}", "--match={__name__=\"cluster:ovnkube_controller_baseline_admin_network_policies_db_objects:max\",table_name=~\"ACL|Address_Set\"}", "--match={__name__=\"cluster:ovnkube_controller_admin_network_policies_rules:max\",direction=~\"Ingress|Egress\",action=~\"Pass|Allow|Deny\"}", "--match={__name__=\"cluster:ovnkube_controller_baseline_admin_network_policies_rules:max\",direction=~\"Ingress|Egress\",action=~\"Allow|Deny\"}", "--match={__name__=\"cluster:network_attachment_definition_instances:max\"}", "--match={__name__=\"cluster:network_attachment_definition_enabled_instance_up:max\"}", "--match={__name__=\"cluster:ingress_controller_aws_nlb_active:sum\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:min\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:max\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:avg\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:median\"}", "--match={__name__=\"cluster:openshift_route_info:tls_termination:sum\"}", "--match={__name__=\"insightsclient_request_send_total\"}", "--match={__name__=\"cam_app_workload_migrations\"}", "--match={__name__=\"cluster:apiserver_current_inflight_requests:sum:max_over_time:2m\"}", "--match={__name__=\"cluster:alertmanager_integrations:max\"}", "--match={__name__=\"cluster:telemetry_selected_series:count\"}", "--match={__name__=\"openshift:prometheus_tsdb_head_series:sum\"}", "--match={__name__=\"openshift:prometheus_tsdb_head_samples_appended_total:sum\"}", "--match={__name__=\"monitoring:container_memory_working_set_bytes:sum\"}", "--match={__name__=\"namespace_job:scrape_series_added:topk3_sum1h\"}", "--match={__name__=\"namespace_job:scrape_samples_post_metric_relabeling:topk3\"}", "--match={__name__=\"monitoring:haproxy_server_http_responses_total:sum\"}", "--match={__name__=\"profile:cluster_monitoring_operator_collection_profile:max\"}", "--match={__name__=\"vendor_model:node_accelerator_cards:sum\",vendor=~\"NVIDIA|AMD|GAUDI|INTEL|QUALCOMM\"}", "--match={__name__=\"rhmi_status\"}", "--match={__name__=\"status:upgrading:version:rhoam_state:max\"}", "--match={__name__=\"state:rhoam_critical_alerts:max\"}", "--match={__name__=\"state:rhoam_warning_alerts:max\"}", "--match={__name__=\"rhoam_7d_slo_percentile:max\"}", "--match={__name__=\"rhoam_7d_slo_remaining_error_budget:max\"}", "--match={__name__=\"cluster_legacy_scheduler_policy\"}", "--match={__name__=\"cluster_master_schedulable\"}", "--match={__name__=\"che_workspace_status\"}", "--match={__name__=\"che_workspace_started_total\"}", "--match={__name__=\"che_workspace_failure_total\"}", "--match={__name__=\"che_workspace_start_time_seconds_sum\"}", "--match={__name__=\"che_workspace_start_time_seconds_count\"}", "--match={__name__=\"cco_credentials_mode\"}", "--match={__name__=\"cluster:kube_persistentvolume_plugin_type_counts:sum\"}", "--match={__name__=\"acm_managed_cluster_info\"}", "--match={__name__=\"acm_managed_cluster_worker_cores:max\"}", "--match={__name__=\"acm_console_page_count:sum\", page=~\"overview-classic|overview-fleet|search|search-details|clusters|application|governance\"}", "--match={__name__=\"cluster:vsphere_vcenter_info:sum\"}", "--match={__name__=\"cluster:vsphere_esxi_version_total:sum\"}", "--match={__name__=\"cluster:vsphere_node_hw_version_total:sum\"}", "--match={__name__=\"openshift:build_by_strategy:sum\"}", "--match={__name__=\"rhods_aggregate_availability\"}", "--match={__name__=\"rhods_total_users\"}", "--match={__name__=\"instance:etcd_disk_wal_fsync_duration_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"instance:etcd_mvcc_db_total_size_in_bytes:sum\"}", "--match={__name__=\"instance:etcd_network_peer_round_trip_time_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"instance:etcd_mvcc_db_total_size_in_use_in_bytes:sum\"}", "--match={__name__=\"instance:etcd_disk_backend_commit_duration_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"jaeger_operator_instances_storage_types\"}", "--match={__name__=\"jaeger_operator_instances_strategies\"}", "--match={__name__=\"jaeger_operator_instances_agent_strategies\"}", "--match={__name__=\"type:tempo_operator_tempostack_storage_backend:sum\",type=~\"azure|gcs|s3\"}", "--match={__name__=\"state:tempo_operator_tempostack_managed:sum\",state=~\"Managed|Unmanaged\"}", "--match={__name__=\"type:tempo_operator_tempostack_multi_tenancy:sum\",type=~\"enabled|disabled\"}", "--match={__name__=\"enabled:tempo_operator_tempostack_jaeger_ui:sum\",enabled=~\"true|false\"}", "--match={__name__=\"type:opentelemetry_collector_receivers:sum\",type=~\"jaegerreceiver|hostmetricsreceiver|opencensusreceiver|prometheusreceiver|zipkinreceiver|kafkareceiver|filelogreceiver|journaldreceiver|k8seventsreceiver|kubeletstatsreceiver|k8sclusterreceiver|k8sobjectsreceiver\"}", "--match={__name__=\"type:opentelemetry_collector_exporters:sum\",type=~\"debugexporter|loggingexporter|otlpexporter|otlphttpexporter|prometheusexporter|lokiexporter|kafkaexporter|awscloudwatchlogsexporter|loadbalancingexporter\"}", "--match={__name__=\"type:opentelemetry_collector_processors:sum\",type=~\"batchprocessor|memorylimiterprocessor|attributesprocessor|resourceprocessor|spanprocessor|k8sattributesprocessor|resourcedetectionprocessor|filterprocessor|routingprocessor|cumulativetodeltaprocessor|groupbyattrsprocessor\"}", "--match={__name__=\"type:opentelemetry_collector_extensions:sum\",type=~\"zpagesextension|ballastextension|memorylimiterextension|jaegerremotesampling|healthcheckextension|pprofextension|oauth2clientauthextension|oidcauthextension|bearertokenauthextension|filestorage\"}", "--match={__name__=\"type:opentelemetry_collector_connectors:sum\",type=~\"spanmetricsconnector|forwardconnector\"}", "--match={__name__=\"type:opentelemetry_collector_info:sum\",type=~\"deployment|daemonset|sidecar|statefulset\"}", "--match={__name__=\"appsvcs:cores_by_product:sum\"}", "--match={__name__=\"nto_custom_profiles:count\"}", "--match={__name__=\"openshift_csi_share_configmap\"}", "--match={__name__=\"openshift_csi_share_secret\"}", "--match={__name__=\"openshift_csi_share_mount_failures_total\"}", "--match={__name__=\"openshift_csi_share_mount_requests_total\"}", "--match={__name__=\"eo_es_storage_info\"}", "--match={__name__=\"eo_es_redundancy_policy_info\"}", "--match={__name__=\"eo_es_defined_delete_namespaces_total\"}", "--match={__name__=\"eo_es_misconfigured_memory_resources_info\"}", "--match={__name__=\"cluster:eo_es_data_nodes_total:max\"}", "--match={__name__=\"cluster:eo_es_documents_created_total:sum\"}", "--match={__name__=\"cluster:eo_es_documents_deleted_total:sum\"}", "--match={__name__=\"pod:eo_es_shards_total:max\"}", "--match={__name__=\"eo_es_cluster_management_state_info\"}", "--match={__name__=\"imageregistry:imagestreamtags_count:sum\"}", "--match={__name__=\"imageregistry:operations_count:sum\"}", "--match={__name__=\"log_logging_info\"}", "--match={__name__=\"log_collector_error_count_total\"}", "--match={__name__=\"log_forwarder_pipeline_info\"}", "--match={__name__=\"log_forwarder_input_info\"}", "--match={__name__=\"log_forwarder_output_info\"}", "--match={__name__=\"cluster:log_collected_bytes_total:sum\"}", "--match={__name__=\"cluster:log_logged_bytes_total:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_pipelines:sum\"}", "--match={__name__=\"openshift_logging:log_forwarders:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_input_type:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_output_type:sum\"}", "--match={__name__=\"openshift_logging:vector_component_received_bytes_total:rate5m\"}", "--match={__name__=\"cluster:kata_monitor_running_shim_count:sum\"}", "--match={__name__=\"platform:hypershift_hostedclusters:max\"}", "--match={__name__=\"platform:hypershift_nodepools:max\"}", "--match={__name__=\"cluster_name:hypershift_nodepools_size:sum\"}", "--match={__name__=\"cluster_name:hypershift_nodepools_available_replicas:sum\"}", "--match={__name__=\"namespace:noobaa_unhealthy_bucket_claims:max\"}", "--match={__name__=\"namespace:noobaa_buckets_claims:max\"}", "--match={__name__=\"namespace:noobaa_unhealthy_namespace_resources:max\"}", "--match={__name__=\"namespace:noobaa_namespace_resources:max\"}", "--match={__name__=\"namespace:noobaa_unhealthy_namespace_buckets:max\"}", "--match={__name__=\"namespace:noobaa_namespace_buckets:max\"}", "--match={__name__=\"namespace:noobaa_accounts:max\"}", "--match={__name__=\"namespace:noobaa_usage:max\"}", "--match={__name__=\"namespace:noobaa_system_health_status:max\"}", "--match={__name__=\"ocs_advanced_feature_usage\"}", "--match={__name__=\"os_image_url_override:sum\"}", "--match={__name__=\"cluster:mcd_nodes_with_unsupported_packages:count\"}", "--match={__name__=\"cluster:mcd_total_unsupported_packages:sum\"}", "--match={__name__=\"cluster:vsphere_topology_tags:max\"}", "--match={__name__=\"cluster:vsphere_infrastructure_failure_domains:max\"}", "--match={__name__=\"apiserver_list_watch_request_success_total:rate:sum\", verb=~\"LIST|WATCH\"}", "--match={__name__=\"rhacs:telemetry:rox_central_info\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_clusters\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_nodes\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_vcpus\"}", "--match={__name__=\"rhacs:telemetry:rox_sensor_info\"}", "--match={__name__=\"cluster:volume_manager_selinux_pod_context_mismatch_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volume_context_mismatch_warnings_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volume_context_mismatch_errors_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volumes_admitted_total\"}", "--match={__name__=\"ols:provider_model_configuration\"}", "--match={__name__=\"ols:rest_api_query_calls_total:2xx\"}", "--match={__name__=\"ols:rest_api_query_calls_total:4xx\"}", "--match={__name__=\"ols:rest_api_query_calls_total:5xx\"}", "--match={__name__=\"openshift:openshift_network_operator_ipsec_state:info\"}", "--match={__name__=\"cluster:health:group_severity:count\", severity=~\"critical|warning|info|none\"}", "--match={__name__=\"cluster:mtv_migrations_status_total:sum\", provider=~\"ova|vsphere|openstack|openshift|ovirt|awsec2\", target=~\"Local|Remote\", mode=~\"Cold|Warm|RCM\", status=~\"Succeeded|Failed|Canceled\"}", "--limit-bytes=5242880" ], "env": [ { "name": "ANONYMIZE_LABELS" }, { "name": "FROM", "value": "https://prometheus-k8s.openshift-monitoring.svc:9091" }, { "name": "ID", "value": "278dd6ad-8889-46bf-982d-1acb7c38276b" }, { "name": "TO", "value": "https://infogw.api.openshift.com/" }, { "name": "HTTP_PROXY" }, { "name": "HTTPS_PROXY" }, { "name": "NO_PROXY" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:861aaa1165d4664df2a3b548e569362a41127573205b26b9cf608a9fc2119ee5", "imagePullPolicy": "IfNotPresent", "name": "telemeter-client", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "40Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/serving-certs-ca-bundle", "name": "serving-certs-ca-bundle" }, { "mountPath": "/etc/telemeter", "name": "secret-telemeter-client" }, { "mountPath": "/etc/tls/private", "name": "federate-client-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem/", "name": "telemeter-trusted-ca-bundle", "readOnly": true } ] }, { "args": [ "--reload-url=http://localhost:8080/-/reload", "--watched-dir=/etc/serving-certs-ca-bundle" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3c861e6801e61cfacc24e9699133ceab5897304e65d5c22c4cf2f5f0eca4fd2f", "imagePullPolicy": "IfNotPresent", "name": "reload", "resources": { "requests": { "cpu": "1m", "memory": "10Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/serving-certs-ca-bundle", "name": "serving-certs-ca-bundle" } ] }, { "args": [ "--secure-listen-address=:8443", "--upstream=http://127.0.0.1:8080/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--config-file=/etc/kube-rbac-policy/config.yaml", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "telemeter-client-tls" }, { "mountPath": "/etc/kube-rbac-policy", "name": "secret-telemeter-client-kube-rbac-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "telemeter-client", "serviceAccountName": "telemeter-client", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "telemeter-client-serving-certs-ca-bundle" }, "name": "serving-certs-ca-bundle" }, { "name": "secret-telemeter-client", "secret": { "defaultMode": 420, "secretName": "telemeter-client" } }, { "name": "telemeter-client-tls", "secret": { "defaultMode": 420, "secretName": "telemeter-client-tls" } }, { "name": "federate-client-tls", "secret": { "defaultMode": 420, "secretName": "federate-client-certs" } }, { "name": "secret-telemeter-client-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "telemeter-client-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "telemeter-trusted-ca-bundle-8i12ta5c71j38", "optional": true }, "name": "telemeter-trusted-ca-bundle" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-01-28T13:20:14Z", "generation": 1, "labels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.36.1", "pod-template-hash": "6485d9dc7c" }, "name": "thanos-querier-6485d9dc7c", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "thanos-querier", "uid": "bc47d492-31aa-4d44-a38d-49e2b29d1d1f" } ], "resourceVersion": "38977", "uid": "f46c530e-9a36-4464-bd55-27106298632f" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "6485d9dc7c" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.36.1", "pod-template-hash": "6485d9dc7c" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "query", "--grpc-address=127.0.0.1:10901", "--http-address=127.0.0.1:9090", "--log.format=logfmt", "--query.replica-label=prometheus_replica", "--query.replica-label=thanos_ruler_replica", "--endpoint=dnssrv+_grpc._tcp.prometheus-operated.openshift-monitoring.svc.cluster.local", "--query.auto-downsampling", "--store.sd-dns-resolver=miekgdns", "--grpc-client-tls-secure", "--grpc-client-tls-cert=/etc/tls/grpc/client.crt", "--grpc-client-tls-key=/etc/tls/grpc/client.key", "--grpc-client-tls-ca=/etc/tls/grpc/ca.crt", "--grpc-client-server-name=prometheus-grpc", "--rule=dnssrv+_grpc._tcp.prometheus-operated.openshift-monitoring.svc.cluster.local", "--target=dnssrv+_grpc._tcp.prometheus-operated.openshift-monitoring.svc.cluster.local", "--web.disable-cors" ], "env": [ { "name": "HOST_IP_ADDRESS", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "status.hostIP" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d3cb7fece0a7bf309c52ca2e47e6ec7bb1c0ee556a37834f3df6fe1ae08610e0", "imagePullPolicy": "IfNotPresent", "name": "thanos-query", "ports": [ { "containerPort": 9090, "name": "http", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "12Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/grpc", "name": "secret-grpc-tls" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9091", "--upstream=http://127.0.0.1:9090", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--ignore-paths=/-/healthy,/-/ready", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 4, "httpGet": { "path": "/-/healthy", "port": 9091, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "kube-rbac-proxy-web", "ports": [ { "containerPort": 9091, "name": "web", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 20, "httpGet": { "path": "/-/ready", "port": 9091, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy-web" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9092", "--upstream=http://127.0.0.1:9095", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--allow-paths=/api/v1/query,/api/v1/query_range,/api/v1/labels,/api/v1/label/*/values,/api/v1/series", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9092, "name": "tenancy", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy" } ] }, { "args": [ "--insecure-listen-address=127.0.0.1:9095", "--upstream=http://127.0.0.1:9090", "--label=namespace", "--enable-label-apis", "--error-on-replace", "--rules-with-active-alerts" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b102a969e184da2bf098d33442c6a4f8a6ee130d4a0ea7f26452427447105e2a", "imagePullPolicy": "IfNotPresent", "name": "prom-label-proxy", "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--secure-listen-address=0.0.0.0:9093", "--upstream=http://127.0.0.1:9095", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--allow-paths=/api/v1/rules,/api/v1/alerts", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-rules", "ports": [ { "containerPort": 9093, "name": "tenancy-rules", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy-rules" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9094", "--upstream=http://127.0.0.1:9090", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--client-ca-file=/etc/tls/client/client-ca.crt", "--allow-paths=/metrics", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-metrics", "ports": [ { "containerPort": 9094, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy-metrics" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "thanos-querier", "serviceAccountName": "thanos-querier", "terminationGracePeriodSeconds": 120, "volumes": [ { "name": "secret-thanos-querier-tls", "secret": { "defaultMode": 420, "secretName": "thanos-querier-tls" } }, { "name": "secret-thanos-querier-kube-rbac-proxy", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy" } }, { "name": "secret-thanos-querier-kube-rbac-proxy-web", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy-web" } }, { "name": "secret-thanos-querier-kube-rbac-proxy-rules", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy-rules" } }, { "name": "secret-thanos-querier-kube-rbac-proxy-metrics", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy-metrics" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "name": "secret-grpc-tls", "secret": { "defaultMode": 420, "secretName": "thanos-querier-grpc-tls-2vs8v5b2q4n3c" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "2", "kubernetes.io/description": "This deployment launches the Multus admisson controller component.\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-01-28T13:11:49Z", "generation": 4, "labels": { "app": "multus-admission-controller", "component": "network", "namespace": "openshift-multus", "openshift.io/component": "network", "pod-template-hash": "797c77ddc9", "type": "infra" }, "name": "multus-admission-controller-797c77ddc9", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "multus-admission-controller", "uid": "006b1a91-33ad-4e99-9764-f2ffe1b29132" } ], "resourceVersion": "40949", "uid": "cd33b33f-ce6b-4750-85d6-afdc8de1196f" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "multus-admission-controller", "namespace": "openshift-multus", "pod-template-hash": "797c77ddc9" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict-local-volumes": "hosted-cluster-api-access", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "multus-admission-controller", "component": "network", "namespace": "openshift-multus", "openshift.io/component": "network", "pod-template-hash": "797c77ddc9", "type": "infra" } }, "spec": { "containers": [ { "command": [ "/bin/bash", "-c", "set -euo pipefail\nexec /usr/bin/webhook \\\n -bind-address=0.0.0.0 \\\n -port=6443 \\\n -tls-private-key-file=/etc/webhook/tls.key \\\n -tls-cert-file=/etc/webhook/tls.crt \\\n -metrics-listen-address=127.0.0.1:9091 \\\n -alsologtostderr=true \\\n -ignore-namespaces=openshift-etcd,openshift-console,openshift-ingress-canary,openshift-apiserver,openshift-apiserver-operator,openshift-authentication,openshift-authentication-operator,openshift-cloud-controller-manager,openshift-cloud-controller-manager-operator,openshift-cloud-credential-operator,openshift-cloud-network-config-controller,openshift-cluster-csi-drivers,openshift-cluster-machine-approver,openshift-cluster-node-tuning-operator,openshift-cluster-samples-operator,openshift-cluster-storage-operator,openshift-cluster-version,openshift-config-operator,openshift-controller-manager,openshift-controller-manager-operator,openshift-dns,openshift-dns-operator,openshift-etcd-operator,openshift-image-registry,openshift-ingress,openshift-ingress-operator,openshift-insights,openshift-kube-apiserver,openshift-kube-apiserver-operator,openshift-kube-controller-manager,openshift-kube-controller-manager-operator,openshift-kube-scheduler,openshift-kube-scheduler-operator,openshift-kube-storage-version-migrator,openshift-kube-storage-version-migrator-operator,openshift-machine-api,openshift-machine-config-operator,openshift-marketplace,openshift-monitoring,openshift-multus,openshift-network-diagnostics,openshift-network-node-identity,openshift-network-operator,openshift-oauth-apiserver,openshift-operator-lifecycle-manager,openshift-ovn-kubernetes,openshift-route-controller-manager,openshift-service-ca-operator,openshift-user-workload-monitoring" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:83d5675592c5ef388b5bb650998e8757fdac215e13856af4bad294393b755936", "imagePullPolicy": "IfNotPresent", "name": "multus-admission-controller", "ports": [ { "containerPort": 9091, "name": "metrics-port", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/webhook", "name": "webhook-certs", "readOnly": true } ] }, { "args": [ "--logtostderr", "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--upstream=http://127.0.0.1:9091/", "--tls-private-key-file=/etc/webhook/tls.key", "--tls-cert-file=/etc/webhook/tls.crt" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/webhook", "name": "webhook-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "multus-ac", "serviceAccountName": "multus-ac", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "webhook-certs", "secret": { "defaultMode": 420, "secretName": "multus-admission-controller-secret" } } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "kubernetes.io/description": "This deployment launches the Multus admisson controller component.\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-01-28T13:09:28Z", "generation": 3, "labels": { "app": "multus-admission-controller", "component": "network", "namespace": "openshift-multus", "openshift.io/component": "network", "pod-template-hash": "97775fcf4", "type": "infra" }, "name": "multus-admission-controller-97775fcf4", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "multus-admission-controller", "uid": "006b1a91-33ad-4e99-9764-f2ffe1b29132" } ], "resourceVersion": "10877", "uid": "92ec88ec-55e0-40d0-a99d-772aeb5130cf" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "multus-admission-controller", "namespace": "openshift-multus", "pod-template-hash": "97775fcf4" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict-local-volumes": "hosted-cluster-api-access", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "multus-admission-controller", "component": "network", "namespace": "openshift-multus", "openshift.io/component": "network", "pod-template-hash": "97775fcf4", "type": "infra" } }, "spec": { "containers": [ { "command": [ "/bin/bash", "-c", "set -euo pipefail\nexec /usr/bin/webhook \\\n -bind-address=0.0.0.0 \\\n -port=6443 \\\n -tls-private-key-file=/etc/webhook/tls.key \\\n -tls-cert-file=/etc/webhook/tls.crt \\\n -metrics-listen-address=127.0.0.1:9091 \\\n -alsologtostderr=true \\\n -ignore-namespaces=openshift-etcd,openshift-console,openshift-ingress-canary,openshift-apiserver-operator,openshift-authentication-operator,openshift-cloud-controller-manager,openshift-cloud-controller-manager-operator,openshift-cloud-credential-operator,openshift-cloud-network-config-controller,openshift-cluster-csi-drivers,openshift-cluster-machine-approver,openshift-cluster-node-tuning-operator,openshift-cluster-samples-operator,openshift-cluster-storage-operator,openshift-cluster-version,openshift-config-operator,openshift-controller-manager-operator,openshift-dns-operator,openshift-etcd-operator,openshift-image-registry,openshift-ingress-operator,openshift-insights,openshift-kube-apiserver,openshift-kube-apiserver-operator,openshift-kube-controller-manager,openshift-kube-controller-manager-operator,openshift-kube-scheduler-operator,openshift-kube-storage-version-migrator-operator,openshift-machine-api,openshift-machine-config-operator,openshift-marketplace,openshift-monitoring,openshift-network-operator,openshift-operator-lifecycle-manager,openshift-service-ca-operator,openshift-user-workload-monitoring" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:83d5675592c5ef388b5bb650998e8757fdac215e13856af4bad294393b755936", "imagePullPolicy": "IfNotPresent", "name": "multus-admission-controller", "ports": [ { "containerPort": 9091, "name": "metrics-port", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/webhook", "name": "webhook-certs", "readOnly": true } ] }, { "args": [ "--logtostderr", "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--upstream=http://127.0.0.1:9091/", "--tls-private-key-file=/etc/webhook/tls.key", "--tls-cert-file=/etc/webhook/tls.crt" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/webhook", "name": "webhook-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "multus-ac", "serviceAccountName": "multus-ac", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "webhook-certs", "secret": { "defaultMode": 420, "secretName": "multus-admission-controller-secret" } } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "3", "kubernetes.io/description": "This deployment launches the Multus admisson controller component.\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-24T12:29:35Z", "generation": 2, "labels": { "app": "multus-admission-controller", "component": "network", "namespace": "openshift-multus", "openshift.io/component": "network", "pod-template-hash": "d9759b979", "type": "infra" }, "name": "multus-admission-controller-d9759b979", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "multus-admission-controller", "uid": "006b1a91-33ad-4e99-9764-f2ffe1b29132" } ], "resourceVersion": "40937", "uid": "9320321c-c30e-45f6-b85f-ec94bfb9ed2f" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "multus-admission-controller", "namespace": "openshift-multus", "pod-template-hash": "d9759b979" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict-local-volumes": "hosted-cluster-api-access", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "multus-admission-controller", "component": "network", "namespace": "openshift-multus", "openshift.io/component": "network", "pod-template-hash": "d9759b979", "type": "infra" } }, "spec": { "containers": [ { "command": [ "/bin/bash", "-c", "set -euo pipefail\nexec /usr/bin/webhook \\\n -bind-address=0.0.0.0 \\\n -port=6443 \\\n -tls-private-key-file=/etc/webhook/tls.key \\\n -tls-cert-file=/etc/webhook/tls.crt \\\n -metrics-listen-address=127.0.0.1:9091 \\\n -alsologtostderr=true \\\n -ignore-namespaces=openshift-etcd,openshift-console,openshift-ingress-canary,openshift-apiserver,openshift-apiserver-operator,openshift-authentication,openshift-authentication-operator,openshift-cloud-controller-manager,openshift-cloud-controller-manager-operator,openshift-cloud-credential-operator,openshift-cloud-network-config-controller,openshift-cluster-csi-drivers,openshift-cluster-machine-approver,openshift-cluster-node-tuning-operator,openshift-cluster-samples-operator,openshift-cluster-storage-operator,openshift-cluster-version,openshift-config-operator,openshift-console,openshift-console-operator,openshift-controller-manager,openshift-controller-manager-operator,openshift-dns,openshift-dns-operator,openshift-etcd-operator,openshift-image-registry,openshift-ingress,openshift-ingress-operator,openshift-insights,openshift-kube-apiserver,openshift-kube-apiserver-operator,openshift-kube-controller-manager,openshift-kube-controller-manager-operator,openshift-kube-scheduler,openshift-kube-scheduler-operator,openshift-kube-storage-version-migrator,openshift-kube-storage-version-migrator-operator,openshift-machine-api,openshift-machine-config-operator,openshift-marketplace,openshift-monitoring,openshift-multus,openshift-network-console,openshift-network-diagnostics,openshift-network-node-identity,openshift-network-operator,openshift-oauth-apiserver,openshift-operator-lifecycle-manager,openshift-ovn-kubernetes,openshift-route-controller-manager,openshift-service-ca-operator,openshift-user-workload-monitoring" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:83d5675592c5ef388b5bb650998e8757fdac215e13856af4bad294393b755936", "imagePullPolicy": "IfNotPresent", "name": "multus-admission-controller", "ports": [ { "containerPort": 9091, "name": "metrics-port", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/webhook", "name": "webhook-certs", "readOnly": true } ] }, { "args": [ "--logtostderr", "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--upstream=http://127.0.0.1:9091/", "--tls-private-key-file=/etc/webhook/tls.key", "--tls-cert-file=/etc/webhook/tls.crt" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/webhook", "name": "webhook-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "multus-ac", "serviceAccountName": "multus-ac", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "webhook-certs", "secret": { "defaultMode": 420, "secretName": "multus-admission-controller-secret" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 2, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "kubernetes.io/description": "This deployment deploys the Networking console plugin pod which serves\nthe contents of the Networking section in OpenShift Console\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-01-28T13:20:24Z", "generation": 1, "labels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator", "pod-template-hash": "5866fb7f5d" }, "name": "networking-console-plugin-5866fb7f5d", "namespace": "openshift-network-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "networking-console-plugin", "uid": "14d50679-93ef-4afa-87fa-f20608658f5e" } ], "resourceVersion": "38628", "uid": "1728531c-215c-4678-861d-0065adbce5a7" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator", "pod-template-hash": "5866fb7f5d" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator", "pod-template-hash": "5866fb7f5d" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator" } }, "namespaces": [ "openshift-network-console" ], "topologyKey": "kubernetes.io/hostname" }, "weight": 90 } ] } }, "automountServiceAccountToken": false, "containers": [ { "command": [ "/bin/sh", "-c", "if echo \"$POD_IP\" | grep -qE '^([0-9]{1,3}\\.){3}[0-9]{1,3}$'; then\n LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME=\"9443\"\nelse\n LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME=\"[::]:9443\"\nfi\nsed \"s/LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME/$LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME/g\" /etc/nginx/nginx.conf \u003e /tmp/nginx.conf\nexec nginx -c /tmp/nginx.conf -g 'daemon off;'\n" ], "env": [ { "name": "POD_IP", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "status.podIP" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:aa18492376f36004282709d9f458be7864a8d5b11503bc7872dbaf00d906c3ef", "imagePullPolicy": "IfNotPresent", "name": "networking-console-plugin", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/cert", "name": "networking-console-plugin-cert", "readOnly": true }, { "mountPath": "/etc/nginx/nginx.conf", "name": "nginx-conf", "readOnly": true, "subPath": "nginx.conf" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "networking-console-plugin" }, "name": "nginx-conf" }, { "name": "networking-console-plugin-cert", "secret": { "defaultMode": 420, "secretName": "networking-console-plugin-cert" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "kubernetes.io/description": "This deployment deploys the network-check-source pod that performs\npod network connectivity checks\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-01-28T13:09:40Z", "generation": 1, "labels": { "app": "network-check-source", "kubernetes.io/os": "linux", "pod-template-hash": "f95f7f976" }, "name": "network-check-source-f95f7f976", "namespace": "openshift-network-diagnostics", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "network-check-source", "uid": "5bff685a-2023-4d47-8da5-db22e674f487" } ], "resourceVersion": "38241", "uid": "1e4c11ee-cc46-41b1-b706-0d87908e5450" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "network-check-source", "pod-template-hash": "f95f7f976" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "network-check-source", "kubernetes.io/os": "linux", "pod-template-hash": "f95f7f976" } }, "spec": { "containers": [ { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)" ], "command": [ "cluster-network-check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7b688dd4320873361832644a947deb502c275df63d3776d64b423bba27709b08", "imagePullPolicy": "IfNotPresent", "name": "check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "40Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "network-diagnostics", "serviceAccountName": "network-diagnostics", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:12Z", "generation": 1, "labels": { "name": "network-operator", "pod-template-hash": "7b7d77474c" }, "name": "network-operator-7b7d77474c", "namespace": "openshift-network-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "network-operator", "uid": "8ec9dbdc-8d3f-4f37-aac6-0d25e147c4e7" } ], "resourceVersion": "36463", "uid": "ffa569d3-0a67-4a67-91f9-dcab93b21c1d" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "network-operator", "pod-template-hash": "7b7d77474c" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "network-operator", "pod-template-hash": "7b7d77474c" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "name": "network-operator" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -o allexport\nif [[ -f /etc/kubernetes/apiserver-url.env ]]; then\n source /etc/kubernetes/apiserver-url.env\nelse\n echo \"Error: /etc/kubernetes/apiserver-url.env is missing\"\n exit 1\nfi\nexec /usr/bin/cluster-network-operator start --listen=0.0.0.0:9104\n" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "KUBE_PROXY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9129d403c73448983437d048b2f7ce957b0f8eac04ce2aa428df773227113cb7" }, { "name": "KUBE_RBAC_PROXY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d" }, { "name": "MULTUS_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:313f4502ade36e5ecf2d18edc5a57708cdc8289a687e7c041bfce1af0ecc8e7e" }, { "name": "MULTUS_ADMISSION_CONTROLLER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:83d5675592c5ef388b5bb650998e8757fdac215e13856af4bad294393b755936" }, { "name": "CNI_PLUGINS_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b9ebd544b1d3a332ce1ca998db818ab6d3bf9ccd3f90a8ed5281db78ca81dd2c" }, { "name": "BOND_CNI_PLUGIN_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:42eec9ffc32d14f871c7f8001b5d344fcdcd26bc766f280399286e47f1221f01" }, { "name": "WHEREABOUTS_CNI_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7cd4ad59cb28e251c06f41e147a40395a8fc52c670fea74e5701b2994593c628" }, { "name": "ROUTE_OVERRRIDE_CNI_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:55e57a17432070cd70feaba000ce30acc351db7619f920e1369cfd850b31fb3a" }, { "name": "MULTUS_NETWORKPOLICY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ed6677971e3e3ebde4d6d02534dfe281a316c9342f23e82281412b1ea7641d3e" }, { "name": "OVN_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3da709f5fb3ceb7e3e06711fd50adad02bb66b858b76ef56f705eba1dc14bc16" }, { "name": "OVN_NB_RAFT_ELECTION_TIMER", "value": "10" }, { "name": "OVN_SB_RAFT_ELECTION_TIMER", "value": "16" }, { "name": "OVN_NORTHD_PROBE_INTERVAL", "value": "10000" }, { "name": "OVN_CONTROLLER_INACTIVITY_PROBE", "value": "180000" }, { "name": "OVN_NB_INACTIVITY_PROBE", "value": "60000" }, { "name": "EGRESS_ROUTER_CNI_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:56dcd2f8f740505e7b07052874a64da0989642311a63167a8e5ba312c027231f" }, { "name": "NETWORK_METRICS_DAEMON_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:41f20de4ba92a7355dfbca6a69478b8608faf24f9b98ca111490d66063dda447" }, { "name": "NETWORK_CHECK_SOURCE_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7b688dd4320873361832644a947deb502c275df63d3776d64b423bba27709b08" }, { "name": "NETWORK_CHECK_TARGET_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7b688dd4320873361832644a947deb502c275df63d3776d64b423bba27709b08" }, { "name": "NETWORK_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7b688dd4320873361832644a947deb502c275df63d3776d64b423bba27709b08" }, { "name": "CLOUD_NETWORK_CONFIG_CONTROLLER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c6e80c4f355cd8176864cf3efa93b57846e94578073fe846385761eb0929385d" }, { "name": "CLI_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bd12da40794cf7faff3eef68b853d343660acefb8c23ba1786d120430f09760c" }, { "name": "FRR_K8S_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b4dd345e67e0d4f80968f2f04aac4d5da1ce02a3b880502867e03d4fa46d3862" }, { "name": "NETWORKING_CONSOLE_PLUGIN_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:aa18492376f36004282709d9f458be7864a8d5b11503bc7872dbaf00d906c3ef" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7b688dd4320873361832644a947deb502c275df63d3776d64b423bba27709b08", "imagePullPolicy": "IfNotPresent", "name": "network-operator", "ports": [ { "containerPort": 9104, "hostPort": 9104, "name": "cno", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kubernetes", "name": "host-etc-kube", "readOnly": true }, { "mountPath": "/var/run/secrets/serving-cert", "name": "metrics-tls" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "cluster-network-operator", "serviceAccountName": "cluster-network-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/not-ready", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/network-unavailable", "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/kubernetes", "type": "Directory" }, "name": "host-etc-kube" }, { "name": "metrics-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "metrics-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "2", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "IRxQKQ==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "xrm-LA==", "operator.openshift.io/spec-hash": "89d0461c67c36b49bfe8fdd08ee40bde375e9c1a61c70a3ce466118abbd65d9f" }, "creationTimestamp": "2026-01-28T13:12:21Z", "generation": 5, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "57b5d9cdd7", "revision": "1" }, "name": "apiserver-57b5d9cdd7", "namespace": "openshift-oauth-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "eae4afeb-b057-4e65-bee7-b6bac6928b8b" } ], "resourceVersion": "14913", "uid": "248d6d32-0e83-440b-9d46-89a69ca386d1" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "pod-template-hash": "57b5d9cdd7" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "IRxQKQ==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "xrm-LA==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "57b5d9cdd7", "revision": "1" }, "name": "openshift-oauth-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-apiserver start \\\n --secure-port=8443 \\\n --audit-log-path=/var/log/oauth-apiserver/audit.log \\\n --audit-log-format=json \\\n --audit-log-maxsize=100 \\\n --audit-log-maxbackup=10 \\\n --audit-policy-file=/var/run/configmaps/audit/policy.yaml \\\n --etcd-cafile=/var/run/configmaps/etcd-serving-ca/ca-bundle.crt \\\n --etcd-keyfile=/var/run/secrets/etcd-client/tls.key \\\n --etcd-certfile=/var/run/secrets/etcd-client/tls.crt \\\n --etcd-healthcheck-timeout=9s \\\n --etcd-readycheck-timeout=9s \\\n --shutdown-delay-duration=50s \\\n --shutdown-send-retry-after=true \\\n --tls-private-key-file=/var/run/secrets/serving-cert/tls.key \\\n --tls-cert-file=/var/run/secrets/serving-cert/tls.crt \\\n --enable-priority-and-fairness=false \\\n --api-audiences=https://kubernetes.default.svc \\\n --cors-allowed-origins='//127\\.0\\.0\\.1(:|$)' \\\n --cors-allowed-origins='//localhost(:|$)' \\\n --etcd-servers=https://10.0.193.234:2379 \\\n --etcd-servers=https://10.0.4.0:2379 \\\n --tls-cipher-suites=TLS_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-min-version=VersionTLS12 \\\n --v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e2c319fae42e9b32010fd26a9d6b6743bb165d22126a7c6064c4c87faef2d939", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "oauth-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "150m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/oauth-apiserver \u0026\u0026 touch /var/log/oauth-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/oauth-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e2c319fae42e9b32010fd26a9d6b6743bb165d22126a7c6064c4c87faef2d939", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-apiserver-sa", "serviceAccountName": "oauth-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit-policies" }, { "name": "etcd-client", "secret": { "defaultMode": 420, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 420, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/oauth-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 5, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "4", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "IRxQKQ==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "xrm-LA==", "operator.openshift.io/spec-hash": "181eadabb1c0ea090bfb71812333fe0685cb259c5260d4bd5254c292e4bd2252" }, "creationTimestamp": "2026-01-28T13:16:06Z", "generation": 7, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "6487f54789", "revision": "1" }, "name": "apiserver-6487f54789", "namespace": "openshift-oauth-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "eae4afeb-b057-4e65-bee7-b6bac6928b8b" } ], "resourceVersion": "27123", "uid": "0868886d-0ac3-4b90-a220-57f0044e6523" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "pod-template-hash": "6487f54789" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "IRxQKQ==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "xrm-LA==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "6487f54789", "revision": "1" }, "name": "openshift-oauth-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-apiserver start \\\n --secure-port=8443 \\\n --audit-log-path=/var/log/oauth-apiserver/audit.log \\\n --audit-log-format=json \\\n --audit-log-maxsize=100 \\\n --audit-log-maxbackup=10 \\\n --audit-policy-file=/var/run/configmaps/audit/policy.yaml \\\n --etcd-cafile=/var/run/configmaps/etcd-serving-ca/ca-bundle.crt \\\n --etcd-keyfile=/var/run/secrets/etcd-client/tls.key \\\n --etcd-certfile=/var/run/secrets/etcd-client/tls.crt \\\n --etcd-healthcheck-timeout=9s \\\n --etcd-readycheck-timeout=9s \\\n --shutdown-delay-duration=50s \\\n --shutdown-send-retry-after=true \\\n --tls-private-key-file=/var/run/secrets/serving-cert/tls.key \\\n --tls-cert-file=/var/run/secrets/serving-cert/tls.crt \\\n --enable-priority-and-fairness=false \\\n --api-audiences=https://kubernetes.default.svc \\\n --cors-allowed-origins='//127\\.0\\.0\\.1(:|$)' \\\n --cors-allowed-origins='//localhost(:|$)' \\\n --etcd-servers=https://10.0.193.234:2379 \\\n --etcd-servers=https://10.0.4.0:2379 \\\n --etcd-servers=https://10.0.53.180:2379 \\\n --etcd-servers=https://10.0.87.130:2379 \\\n --tls-cipher-suites=TLS_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-min-version=VersionTLS12 \\\n --v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e2c319fae42e9b32010fd26a9d6b6743bb165d22126a7c6064c4c87faef2d939", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "oauth-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "150m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/oauth-apiserver \u0026\u0026 touch /var/log/oauth-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/oauth-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e2c319fae42e9b32010fd26a9d6b6743bb165d22126a7c6064c4c87faef2d939", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-apiserver-sa", "serviceAccountName": "oauth-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit-policies" }, { "name": "etcd-client", "secret": { "defaultMode": 420, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 420, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/oauth-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "IRxQKQ==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "xrm-LA==", "operator.openshift.io/spec-hash": "dfcebe330eb4568c459f9e80e08131c43b6fb3db00efa0e96641ab2ab0afecdd" }, "creationTimestamp": "2026-01-28T13:10:56Z", "generation": 4, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "6f4dfcc686", "revision": "1" }, "name": "apiserver-6f4dfcc686", "namespace": "openshift-oauth-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "eae4afeb-b057-4e65-bee7-b6bac6928b8b" } ], "resourceVersion": "12830", "uid": "4e90571e-9802-40f2-b273-ae157e8ae9db" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "pod-template-hash": "6f4dfcc686" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "IRxQKQ==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "xrm-LA==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "6f4dfcc686", "revision": "1" }, "name": "openshift-oauth-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-apiserver start \\\n --secure-port=8443 \\\n --audit-log-path=/var/log/oauth-apiserver/audit.log \\\n --audit-log-format=json \\\n --audit-log-maxsize=100 \\\n --audit-log-maxbackup=10 \\\n --audit-policy-file=/var/run/configmaps/audit/policy.yaml \\\n --etcd-cafile=/var/run/configmaps/etcd-serving-ca/ca-bundle.crt \\\n --etcd-keyfile=/var/run/secrets/etcd-client/tls.key \\\n --etcd-certfile=/var/run/secrets/etcd-client/tls.crt \\\n --etcd-healthcheck-timeout=9s \\\n --etcd-readycheck-timeout=9s \\\n --shutdown-delay-duration=50s \\\n --shutdown-send-retry-after=true \\\n --tls-private-key-file=/var/run/secrets/serving-cert/tls.key \\\n --tls-cert-file=/var/run/secrets/serving-cert/tls.crt \\\n --enable-priority-and-fairness=false \\\n --api-audiences=https://kubernetes.default.svc \\\n --cors-allowed-origins='//127\\.0\\.0\\.1(:|$)' \\\n --cors-allowed-origins='//localhost(:|$)' \\\n --etcd-servers=https://10.0.193.234:2379 \\\n --tls-cipher-suites=TLS_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-min-version=VersionTLS12 \\\n --v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e2c319fae42e9b32010fd26a9d6b6743bb165d22126a7c6064c4c87faef2d939", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "oauth-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "150m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/oauth-apiserver \u0026\u0026 touch /var/log/oauth-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/oauth-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e2c319fae42e9b32010fd26a9d6b6743bb165d22126a7c6064c4c87faef2d939", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-apiserver-sa", "serviceAccountName": "oauth-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit-policies" }, { "name": "etcd-client", "secret": { "defaultMode": 420, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 420, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/oauth-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "3", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "IRxQKQ==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "xrm-LA==", "operator.openshift.io/spec-hash": "529ac7d756ac03626952a7a20e6a700382332a734e0097c6674d7bcc9fcebeaf" }, "creationTimestamp": "2026-01-28T13:14:03Z", "generation": 7, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "75997ccd7c", "revision": "1" }, "name": "apiserver-75997ccd7c", "namespace": "openshift-oauth-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "eae4afeb-b057-4e65-bee7-b6bac6928b8b" } ], "resourceVersion": "17370", "uid": "8f093e83-e8db-4097-a979-f7148c38773e" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "pod-template-hash": "75997ccd7c" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "IRxQKQ==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "xrm-LA==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "75997ccd7c", "revision": "1" }, "name": "openshift-oauth-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-apiserver start \\\n --secure-port=8443 \\\n --audit-log-path=/var/log/oauth-apiserver/audit.log \\\n --audit-log-format=json \\\n --audit-log-maxsize=100 \\\n --audit-log-maxbackup=10 \\\n --audit-policy-file=/var/run/configmaps/audit/policy.yaml \\\n --etcd-cafile=/var/run/configmaps/etcd-serving-ca/ca-bundle.crt \\\n --etcd-keyfile=/var/run/secrets/etcd-client/tls.key \\\n --etcd-certfile=/var/run/secrets/etcd-client/tls.crt \\\n --etcd-healthcheck-timeout=9s \\\n --etcd-readycheck-timeout=9s \\\n --shutdown-delay-duration=50s \\\n --shutdown-send-retry-after=true \\\n --tls-private-key-file=/var/run/secrets/serving-cert/tls.key \\\n --tls-cert-file=/var/run/secrets/serving-cert/tls.crt \\\n --enable-priority-and-fairness=false \\\n --api-audiences=https://kubernetes.default.svc \\\n --cors-allowed-origins='//127\\.0\\.0\\.1(:|$)' \\\n --cors-allowed-origins='//localhost(:|$)' \\\n --etcd-servers=https://10.0.193.234:2379 \\\n --etcd-servers=https://10.0.4.0:2379 \\\n --etcd-servers=https://10.0.53.180:2379 \\\n --tls-cipher-suites=TLS_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-min-version=VersionTLS12 \\\n --v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e2c319fae42e9b32010fd26a9d6b6743bb165d22126a7c6064c4c87faef2d939", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "oauth-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "150m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/oauth-apiserver \u0026\u0026 touch /var/log/oauth-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/oauth-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e2c319fae42e9b32010fd26a9d6b6743bb165d22126a7c6064c4c87faef2d939", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-apiserver-sa", "serviceAccountName": "oauth-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit-policies" }, { "name": "etcd-client", "secret": { "defaultMode": 420, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 420, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/oauth-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "5", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "IRxQKQ==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "xrm-LA==", "operator.openshift.io/spec-hash": "7b1eb790ff82dd0b8ce2e9dab2333fc13b85d1d3c1bc129034b22ac5d488a4e3" }, "creationTimestamp": "2026-01-28T13:24:54Z", "generation": 4, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "b8c6cdb46", "revision": "1" }, "name": "apiserver-b8c6cdb46", "namespace": "openshift-oauth-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "eae4afeb-b057-4e65-bee7-b6bac6928b8b" } ], "resourceVersion": "38395", "uid": "85c50219-3100-436f-a26f-490cfcd59039" }, "spec": { "replicas": 3, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "pod-template-hash": "b8c6cdb46" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "IRxQKQ==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "xrm-LA==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "b8c6cdb46", "revision": "1" }, "name": "openshift-oauth-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-apiserver start \\\n --secure-port=8443 \\\n --audit-log-path=/var/log/oauth-apiserver/audit.log \\\n --audit-log-format=json \\\n --audit-log-maxsize=100 \\\n --audit-log-maxbackup=10 \\\n --audit-policy-file=/var/run/configmaps/audit/policy.yaml \\\n --etcd-cafile=/var/run/configmaps/etcd-serving-ca/ca-bundle.crt \\\n --etcd-keyfile=/var/run/secrets/etcd-client/tls.key \\\n --etcd-certfile=/var/run/secrets/etcd-client/tls.crt \\\n --etcd-healthcheck-timeout=9s \\\n --etcd-readycheck-timeout=9s \\\n --shutdown-delay-duration=50s \\\n --shutdown-send-retry-after=true \\\n --tls-private-key-file=/var/run/secrets/serving-cert/tls.key \\\n --tls-cert-file=/var/run/secrets/serving-cert/tls.crt \\\n --enable-priority-and-fairness=false \\\n --api-audiences=https://kubernetes.default.svc \\\n --cors-allowed-origins='//127\\.0\\.0\\.1(:|$)' \\\n --cors-allowed-origins='//localhost(:|$)' \\\n --etcd-servers=https://10.0.4.0:2379 \\\n --etcd-servers=https://10.0.53.180:2379 \\\n --etcd-servers=https://10.0.87.130:2379 \\\n --tls-cipher-suites=TLS_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-min-version=VersionTLS12 \\\n --v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e2c319fae42e9b32010fd26a9d6b6743bb165d22126a7c6064c4c87faef2d939", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "oauth-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "150m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/oauth-apiserver \u0026\u0026 touch /var/log/oauth-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/oauth-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e2c319fae42e9b32010fd26a9d6b6743bb165d22126a7c6064c4c87faef2d939", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-apiserver-sa", "serviceAccountName": "oauth-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit-policies" }, { "name": "etcd-client", "secret": { "defaultMode": 420, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 420, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/oauth-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "availableReplicas": 3, "fullyLabeledReplicas": 3, "observedGeneration": 4, "readyReplicas": 3, "replicas": 3 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/default-logs-container": "manager", "operator.openshift.io/spec-hash": "90fbcfaf16f87100765f1ec0368e618ff0ed2fb6817e379d33a5cc71eaffed23" }, "creationTimestamp": "2026-01-28T13:10:54Z", "generation": 1, "labels": { "control-plane": "operator-controller-controller-manager", "pod-template-hash": "7864455d45" }, "name": "operator-controller-controller-manager-7864455d45", "namespace": "openshift-operator-controller", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "operator-controller-controller-manager", "uid": "4f9e1808-8e2c-4f56-b179-e0e8c5097c3d" } ], "resourceVersion": "37690", "uid": "afd63d97-c400-4dc3-ad65-7782fe665148" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "operator-controller-controller-manager", "pod-template-hash": "7864455d45" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager", "openshift.io/required-scc": "privileged", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "control-plane": "operator-controller-controller-manager", "pod-template-hash": "7864455d45" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/arch", "operator": "In", "values": [ "amd64", "arm64", "ppc64le", "s390x" ] }, { "key": "kubernetes.io/os", "operator": "In", "values": [ "linux" ] } ] } ] } } }, "containers": [ { "args": [ "--health-probe-bind-address=:8081", "--metrics-bind-address=127.0.0.1:8080", "--leader-elect", "--catalogd-cas-dir=/var/ca-certs", "--v=2", "--global-pull-secret=openshift-config/pull-secret" ], "command": [ "/manager" ], "env": [ { "name": "SSL_CERT_DIR", "value": "/var/ca-certs" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a289be85e2b0fb3e884c637c5d4e45df246a5260be06fd9dcbee1e18dc6c7341", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/cache", "name": "cache" }, { "mountPath": "/var/ca-certs", "name": "ca-certs", "readOnly": true }, { "mountPath": "/etc/containers", "name": "etc-containers", "readOnly": true }, { "mountPath": "/etc/docker", "name": "etc-docker", "readOnly": true } ] }, { "args": [ "--secure-listen-address=0.0.0.0:8443", "--http2-disable", "--upstream=http://127.0.0.1:8080/", "--logtostderr=true", "--v=2" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "5m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seLinuxOptions": { "type": "spc_t" }, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "operator-controller-controller-manager", "serviceAccountName": "operator-controller-controller-manager", "terminationGracePeriodSeconds": 10, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "emptyDir": {}, "name": "cache" }, { "name": "ca-certs", "projected": { "defaultMode": 420, "sources": [ { "configMap": { "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "operator-controller-trusted-ca-bundle", "optional": false } }, { "configMap": { "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "openshift-service-ca.crt", "optional": false } } ] } }, { "hostPath": { "path": "/etc/containers", "type": "Directory" }, "name": "etc-containers" }, { "hostPath": { "path": "/etc/docker", "type": "Directory" }, "name": "etc-docker" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "OperatorLifecycleManager", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-01-28T13:08:30Z", "generation": 1, "labels": { "app": "catalog-operator", "pod-template-hash": "65f558b987" }, "name": "catalog-operator-65f558b987", "namespace": "openshift-operator-lifecycle-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "catalog-operator", "uid": "caf02d9b-9eb5-4792-b86a-2a07240847d5" } ], "resourceVersion": "39227", "uid": "4dd39d77-1ef9-49c8-ac07-97db2ebfbcdf" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "catalog-operator", "pod-template-hash": "65f558b987" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "catalog-operator", "pod-template-hash": "65f558b987" } }, "spec": { "containers": [ { "args": [ "--namespace", "openshift-marketplace", "--configmapServerImage=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3088b05454e6672b84f3727e824cd5a4a03cf54bfe2b4fc5b7ff6f621122d80e", "--opmImage=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3088b05454e6672b84f3727e824cd5a4a03cf54bfe2b4fc5b7ff6f621122d80e", "--util-image", "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4589eca46d356cf4f39a2ab764e9eb8ac4cde39090a4a057de65d406d1fb7651", "--writeStatusName", "operator-lifecycle-manager-catalog", "--tls-cert", "/srv-cert/tls.crt", "--tls-key", "/srv-cert/tls.key", "--client-ca", "/profile-collector-cert/tls.crt", "--set-workload-user-id=false" ], "command": [ "/bin/catalog" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4589eca46d356cf4f39a2ab764e9eb8ac4cde39090a4a057de65d406d1fb7651", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "catalog-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "80Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/srv-cert", "name": "srv-cert", "readOnly": true }, { "mountPath": "/profile-collector-cert", "name": "profile-collector-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "olm-operator-serviceaccount", "serviceAccountName": "olm-operator-serviceaccount", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "srv-cert", "secret": { "defaultMode": 420, "secretName": "catalog-operator-serving-cert" } }, { "name": "profile-collector-cert", "secret": { "defaultMode": 420, "secretName": "pprof-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "OperatorLifecycleManager", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-01-28T13:08:29Z", "generation": 1, "labels": { "app": "olm-operator", "pod-template-hash": "b87dd97c4" }, "name": "olm-operator-b87dd97c4", "namespace": "openshift-operator-lifecycle-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "olm-operator", "uid": "4f986907-d77a-4311-83c4-baa2b046d4ba" } ], "resourceVersion": "39193", "uid": "3b4af355-8685-475a-ac42-e37f757501a2" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "olm-operator", "pod-template-hash": "b87dd97c4" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "olm-operator", "pod-template-hash": "b87dd97c4" } }, "spec": { "containers": [ { "args": [ "--namespace", "$(OPERATOR_NAMESPACE)", "--writeStatusName", "operator-lifecycle-manager", "--writePackageServerStatusName", "operator-lifecycle-manager-packageserver", "--tls-cert", "/srv-cert/tls.crt", "--tls-key", "/srv-cert/tls.key", "--client-ca", "/profile-collector-cert/tls.crt", "--protectedCopiedCSVNamespaces", "openshift" ], "command": [ "/bin/olm" ], "env": [ { "name": "OPERATOR_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "OPERATOR_NAME", "value": "olm-operator" }, { "name": "RELEASE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4589eca46d356cf4f39a2ab764e9eb8ac4cde39090a4a057de65d406d1fb7651", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "olm-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "160Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/srv-cert", "name": "srv-cert", "readOnly": true }, { "mountPath": "/profile-collector-cert", "name": "profile-collector-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "olm-operator-serviceaccount", "serviceAccountName": "olm-operator-serviceaccount", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "srv-cert", "secret": { "defaultMode": 420, "secretName": "olm-operator-serving-cert" } }, { "name": "profile-collector-cert", "secret": { "defaultMode": 420, "secretName": "pprof-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "OperatorLifecycleManager", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-01-28T13:08:28Z", "generation": 1, "labels": { "app": "package-server-manager", "pod-template-hash": "67955b9b5" }, "name": "package-server-manager-67955b9b5", "namespace": "openshift-operator-lifecycle-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "package-server-manager", "uid": "8d894aba-773f-4775-a587-19fd3bc89270" } ], "resourceVersion": "39145", "uid": "c9449abb-6cdc-4df7-be5c-c4b266657b62" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "package-server-manager", "pod-template-hash": "67955b9b5" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "package-server-manager", "pod-template-hash": "67955b9b5" } }, "spec": { "containers": [ { "args": [ "--secure-listen-address=0.0.0.0:8443", "--upstream=http://127.0.0.1:9090/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "package-server-manager-serving-cert" } ] }, { "args": [ "--name", "$(PACKAGESERVER_NAME)", "--namespace", "$(PACKAGESERVER_NAMESPACE)", "--metrics=:9090" ], "command": [ "/bin/psm", "start" ], "env": [ { "name": "PACKAGESERVER_NAME", "value": "packageserver" }, { "name": "PACKAGESERVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4589eca46d356cf4f39a2ab764e9eb8ac4cde39090a4a057de65d406d1fb7651" }, { "name": "PACKAGESERVER_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "GOMEMLIMIT", "value": "5MiB" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4589eca46d356cf4f39a2ab764e9eb8ac4cde39090a4a057de65d406d1fb7651", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "package-server-manager", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "olm-operator-serviceaccount", "serviceAccountName": "olm-operator-serviceaccount", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "package-server-manager-serving-cert", "secret": { "defaultMode": 420, "secretName": "package-server-manager-serving-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-01-28T13:11:35Z", "generation": 1, "labels": { "app": "packageserver", "pod-template-hash": "6fb9d77b6b" }, "name": "packageserver-6fb9d77b6b", "namespace": "openshift-operator-lifecycle-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "packageserver", "uid": "bf763ddc-b83c-4067-bbde-66f78aa1eb69" } ], "resourceVersion": "39218", "uid": "6556ac2b-b226-422b-849d-ba638f9fa81c" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "packageserver", "pod-template-hash": "6fb9d77b6b" } }, "template": { "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "olm.operatorGroup": "olm-operators", "olm.operatorNamespace": "openshift-operator-lifecycle-manager", "olm.targetNamespaces": "openshift-operator-lifecycle-manager", "olmcahash": "d88c253121c1c0ff6183195908f40dfa0557afc512c99fac83e43ff10614007e", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "packageserver", "pod-template-hash": "6fb9d77b6b" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "packageserver" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/package-server", "-v=4", "--secure-port", "5443", "--global-namespace", "openshift-marketplace" ], "env": [ { "name": "OPERATOR_CONDITION_NAME", "value": "packageserver" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4589eca46d356cf4f39a2ab764e9eb8ac4cde39090a4a057de65d406d1fb7651", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "packageserver", "ports": [ { "containerPort": 5443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmpfs" }, { "mountPath": "/apiserver.local.config/certificates", "name": "apiservice-cert" }, { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "webhook-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "olm-operator-serviceaccount", "serviceAccountName": "olm-operator-serviceaccount", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "emptyDir": {}, "name": "tmpfs" }, { "name": "apiservice-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "apiserver.crt" }, { "key": "tls.key", "path": "apiserver.key" } ], "secretName": "packageserver-service-cert" } }, { "name": "webhook-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "packageserver-service-cert" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "kubernetes.io/description": "This deployment launches the ovn-kubernetes controller (control-plane) networking components.\n", "networkoperator.openshift.io/cluster-network-cidr": "10.128.0.0/14", "networkoperator.openshift.io/hybrid-overlay-status": "disabled", "networkoperator.openshift.io/ip-family-mode": "single-stack", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-01-28T13:09:38Z", "generation": 1, "labels": { "app": "ovnkube-control-plane", "component": "network", "kubernetes.io/os": "linux", "openshift.io/component": "network", "pod-template-hash": "b5d9b686b", "type": "infra" }, "name": "ovnkube-control-plane-b5d9b686b", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "ovnkube-control-plane", "uid": "ed750e32-585d-460d-9c81-457d3ccf2f79" } ], "resourceVersion": "35854", "uid": "b61f9d2c-c3b8-4131-bde7-2979e23b3635" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "ovnkube-control-plane", "pod-template-hash": "b5d9b686b" } }, "template": { "metadata": { "annotations": { "networkoperator.openshift.io/cluster-network-cidr": "10.128.0.0/14", "networkoperator.openshift.io/hybrid-overlay-status": "disabled", "networkoperator.openshift.io/ip-family-mode": "single-stack", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "ovnkube-control-plane", "component": "network", "kubernetes.io/os": "linux", "openshift.io/component": "network", "pod-template-hash": "b5d9b686b", "type": "infra" } }, "spec": { "containers": [ { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -euo pipefail\nTLS_PK=/etc/pki/tls/metrics-cert/tls.key\nTLS_CERT=/etc/pki/tls/metrics-cert/tls.crt\n# As the secret mount is optional we must wait for the files to be present.\n# The service is created in monitor.yaml and this is created in sdn.yaml.\nTS=$(date +%s)\nWARN_TS=$(( ${TS} + $(( 20 * 60)) ))\nHAS_LOGGED_INFO=0\n\nlog_missing_certs(){\n CUR_TS=$(date +%s)\n if [[ \"${CUR_TS}\" -gt \"WARN_TS\" ]]; then\n echo $(date -Iseconds) WARN: ovn-control-plane-metrics-cert not mounted after 20 minutes.\n elif [[ \"${HAS_LOGGED_INFO}\" -eq 0 ]] ; then\n echo $(date -Iseconds) INFO: ovn-control-plane-metrics-cert not mounted. Waiting 20 minutes.\n HAS_LOGGED_INFO=1\n fi\n}\nwhile [[ ! -f \"${TLS_PK}\" || ! -f \"${TLS_CERT}\" ]] ; do\n log_missing_certs\n sleep 5\ndone\n\necho $(date -Iseconds) INFO: ovn-control-plane-metrics-certs mounted, starting kube-rbac-proxy\nexec /usr/bin/kube-rbac-proxy \\\n --logtostderr \\\n --secure-listen-address=:9108 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 \\\n --upstream=http://127.0.0.1:29108/ \\\n --tls-private-key-file=${TLS_PK} \\\n --tls-cert-file=${TLS_CERT}\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9108, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/tls/metrics-cert", "name": "ovn-control-plane-metrics-cert", "readOnly": true } ] }, { "command": [ "/bin/bash", "-c", "set -xe\nif [[ -f \"/env/_master\" ]]; then\n set -o allexport\n source \"/env/_master\"\n set +o allexport\nfi\n\novn_v4_join_subnet_opt=\nif [[ \"\" != \"\" ]]; then\n ovn_v4_join_subnet_opt=\"--gateway-v4-join-subnet \"\nfi\novn_v6_join_subnet_opt=\nif [[ \"\" != \"\" ]]; then\n ovn_v6_join_subnet_opt=\"--gateway-v6-join-subnet \"\nfi\n\novn_v4_transit_switch_subnet_opt=\nif [[ \"\" != \"\" ]]; then\n ovn_v4_transit_switch_subnet_opt=\"--cluster-manager-v4-transit-switch-subnet \"\nfi\novn_v6_transit_switch_subnet_opt=\nif [[ \"\" != \"\" ]]; then\n ovn_v6_transit_switch_subnet_opt=\"--cluster-manager-v6-transit-switch-subnet \"\nfi\n\ndns_name_resolver_enabled_flag=\nif [[ \"false\" == \"true\" ]]; then\n dns_name_resolver_enabled_flag=\"--enable-dns-name-resolver\"\nfi\n\npersistent_ips_enabled_flag=\nif [[ \"true\" == \"true\" ]]; then\n persistent_ips_enabled_flag=\"--enable-persistent-ips\"\nfi\n\n# This is needed so that converting clusters from GA to TP\n# will rollout control plane pods as well\nnetwork_segmentation_enabled_flag=\nmulti_network_enabled_flag=\nif [[ \"true\" == \"true\" ]]; then\n multi_network_enabled_flag=\"--enable-multi-network\"\n network_segmentation_enabled_flag=\"--enable-network-segmentation\"\nfi\n\nroute_advertisements_enable_flag=\nif [[ \"false\" == \"true\" ]]; then\n route_advertisements_enable_flag=\"--enable-route-advertisements\"\nfi\n\necho \"I$(date \"+%m%d %H:%M:%S.%N\") - ovnkube-control-plane - start ovnkube --init-cluster-manager ${K8S_NODE}\"\nexec /usr/bin/ovnkube \\\n --enable-interconnect \\\n --init-cluster-manager \"${K8S_NODE}\" \\\n --config-file=/run/ovnkube-config/ovnkube.conf \\\n --loglevel \"${OVN_KUBE_LOG_LEVEL}\" \\\n --metrics-bind-address \"127.0.0.1:29108\" \\\n --metrics-enable-pprof \\\n --metrics-enable-config-duration \\\n ${ovn_v4_join_subnet_opt} \\\n ${ovn_v6_join_subnet_opt} \\\n ${ovn_v4_transit_switch_subnet_opt} \\\n ${ovn_v6_transit_switch_subnet_opt} \\\n ${dns_name_resolver_enabled_flag} \\\n ${persistent_ips_enabled_flag} \\\n ${multi_network_enabled_flag} \\\n ${network_segmentation_enabled_flag} \\\n ${route_advertisements_enable_flag}\n" ], "env": [ { "name": "OVN_KUBE_LOG_LEVEL", "value": "4" }, { "name": "K8S_NODE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3da709f5fb3ceb7e3e06711fd50adad02bb66b858b76ef56f705eba1dc14bc16", "imagePullPolicy": "IfNotPresent", "name": "ovnkube-cluster-manager", "ports": [ { "containerPort": 29108, "name": "metrics-port", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "300Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/run/ovnkube-config/", "name": "ovnkube-config" }, { "mountPath": "/env", "name": "env-overrides" } ] } ], "dnsPolicy": "Default", "hostNetwork": true, "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "ovn-kubernetes-control-plane", "serviceAccountName": "ovn-kubernetes-control-plane", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "key": "node.kubernetes.io/not-ready", "operator": "Exists" }, { "key": "node.kubernetes.io/unreachable", "operator": "Exists" }, { "key": "node.kubernetes.io/network-unavailable", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "ovnkube-config" }, "name": "ovnkube-config" }, { "configMap": { "defaultMode": 420, "name": "env-overrides", "optional": true }, "name": "env-overrides" }, { "name": "ovn-control-plane-metrics-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "ovn-control-plane-metrics-cert" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "6", "operator.openshift.io/spec-hash": "f30696eea4b539ecf92e7e98eeb71698afdb61e089e75c7825894d5bf7cc7f47", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-24T12:31:08Z", "generation": 3, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "5474bb5896", "route-controller-manager": "true" }, "name": "route-controller-manager-5474bb5896", "namespace": "openshift-route-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "route-controller-manager", "uid": "f8e5ff57-d6d1-401f-8931-ac056b84c129" } ], "resourceVersion": "42908", "uid": "86b4aa88-937c-44dd-8f53-b59b6a80feb9" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "route-controller-manager", "pod-template-hash": "5474bb5896", "route-controller-manager": "true" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "42777", "configmaps/config": "20775", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "3", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "5474bb5896", "route-controller-manager": "true" }, "name": "route-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "route-controller-manager": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "route-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:10b8ec9bc4fab402acfa66b5c3a9843dc5fd98cc940460602e13704c70f34f78", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "route-controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "route-controller-manager-sa", "serviceAccountName": "route-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "4", "operator.openshift.io/spec-hash": "fe8281c287893ffcecd8e70adee2d3dbf48dcf78c41e0a89b111a6f8fdedd3f3", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-01-28T13:17:19Z", "generation": 7, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "59dddff57b", "route-controller-manager": "true" }, "name": "route-controller-manager-59dddff57b", "namespace": "openshift-route-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "route-controller-manager", "uid": "f8e5ff57-d6d1-401f-8931-ac056b84c129" } ], "resourceVersion": "21529", "uid": "9b0e31fe-7159-4344-b935-b229ba7bae7e" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "route-controller-manager", "pod-template-hash": "59dddff57b", "route-controller-manager": "true" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "16469", "configmaps/config": "16530", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "59dddff57b", "route-controller-manager": "true" }, "name": "route-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "route-controller-manager": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "route-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:10b8ec9bc4fab402acfa66b5c3a9843dc5fd98cc940460602e13704c70f34f78", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "route-controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "route-controller-manager-sa", "serviceAccountName": "route-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "9", "operator.openshift.io/spec-hash": "938c4887776f907380e2267a634eaded1ab8aa4e7f2688ebe6c7d09e7db5c387", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-24T12:31:48Z", "generation": 4, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "668577cf6b", "route-controller-manager": "true" }, "name": "route-controller-manager-668577cf6b", "namespace": "openshift-route-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "route-controller-manager", "uid": "f8e5ff57-d6d1-401f-8931-ac056b84c129" } ], "resourceVersion": "44500", "uid": "3dc35eeb-4bcd-41b4-a2a5-10ca5bc0b13d" }, "spec": { "replicas": 3, "selector": { "matchLabels": { "app": "route-controller-manager", "pod-template-hash": "668577cf6b", "route-controller-manager": "true" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "43641", "configmaps/config": "44158", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "3", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "668577cf6b", "route-controller-manager": "true" }, "name": "route-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "route-controller-manager": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "route-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:10b8ec9bc4fab402acfa66b5c3a9843dc5fd98cc940460602e13704c70f34f78", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "route-controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "route-controller-manager-sa", "serviceAccountName": "route-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } } ] } } }, "status": { "availableReplicas": 3, "fullyLabeledReplicas": 3, "observedGeneration": 4, "readyReplicas": 3, "replicas": 3 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "5", "operator.openshift.io/spec-hash": "ea12afa482af15b365328b67a7b1f2c9b0c34fdf93170e8adebb31aa28092642", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-01-28T13:19:18Z", "generation": 7, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "6b5fc77bdf", "route-controller-manager": "true" }, "name": "route-controller-manager-6b5fc77bdf", "namespace": "openshift-route-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "route-controller-manager", "uid": "f8e5ff57-d6d1-401f-8931-ac056b84c129" } ], "resourceVersion": "43258", "uid": "a78cc6f7-b75e-4367-b923-3b0833474b63" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "route-controller-manager", "pod-template-hash": "6b5fc77bdf", "route-controller-manager": "true" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "16469", "configmaps/config": "20775", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "3", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "6b5fc77bdf", "route-controller-manager": "true" }, "name": "route-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "route-controller-manager": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "route-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:10b8ec9bc4fab402acfa66b5c3a9843dc5fd98cc940460602e13704c70f34f78", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "route-controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "route-controller-manager-sa", "serviceAccountName": "route-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "4beb73015a01584d2820d25c54e5a33ef195f7329e07f8f4ac856d4e87389be2", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-01-28T13:10:33Z", "generation": 4, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "6fdfdf48ff", "route-controller-manager": "true" }, "name": "route-controller-manager-6fdfdf48ff", "namespace": "openshift-route-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "route-controller-manager", "uid": "f8e5ff57-d6d1-401f-8931-ac056b84c129" } ], "resourceVersion": "16627", "uid": "e6caa7c7-5142-4602-962d-4ca398ad9b4b" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "route-controller-manager", "pod-template-hash": "6fdfdf48ff", "route-controller-manager": "true" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "0", "configmaps/config": "5319", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "6fdfdf48ff", "route-controller-manager": "true" }, "name": "route-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "route-controller-manager": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "route-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:10b8ec9bc4fab402acfa66b5c3a9843dc5fd98cc940460602e13704c70f34f78", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "route-controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "route-controller-manager-sa", "serviceAccountName": "route-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "8", "operator.openshift.io/spec-hash": "84a16d85dd42abe2bcce97e26fa4d149172f177f19f21c1e3b9ff09b97587e07", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-24T12:31:28Z", "generation": 7, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "799bf9d999", "route-controller-manager": "true" }, "name": "route-controller-manager-799bf9d999", "namespace": "openshift-route-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "route-controller-manager", "uid": "f8e5ff57-d6d1-401f-8931-ac056b84c129" } ], "resourceVersion": "44412", "uid": "81e49d7c-965e-4a01-bb01-710862004169" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "route-controller-manager", "pod-template-hash": "799bf9d999", "route-controller-manager": "true" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "43641", "configmaps/config": "42858", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "3", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "799bf9d999", "route-controller-manager": "true" }, "name": "route-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "route-controller-manager": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "route-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:10b8ec9bc4fab402acfa66b5c3a9843dc5fd98cc940460602e13704c70f34f78", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "route-controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "route-controller-manager-sa", "serviceAccountName": "route-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "2", "operator.openshift.io/spec-hash": "b2978cca4315a532f3e8f19ec03e46b0f3284f12e3a09bac02c318ced2ac8500", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-01-28T13:10:52Z", "generation": 3, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "8c875f44f", "route-controller-manager": "true" }, "name": "route-controller-manager-8c875f44f", "namespace": "openshift-route-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "route-controller-manager", "uid": "f8e5ff57-d6d1-401f-8931-ac056b84c129" } ], "resourceVersion": "17330", "uid": "744927bc-f18d-47c1-8f35-3b4042ec0470" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "route-controller-manager", "pod-template-hash": "8c875f44f", "route-controller-manager": "true" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "0", "configmaps/config": "7342", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "8c875f44f", "route-controller-manager": "true" }, "name": "route-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "route-controller-manager": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "route-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:10b8ec9bc4fab402acfa66b5c3a9843dc5fd98cc940460602e13704c70f34f78", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "route-controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "route-controller-manager-sa", "serviceAccountName": "route-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "3", "operator.openshift.io/spec-hash": "780b981482673f66de3c6ca748bd04e2cbe7025fea0facb6467c3b59ef318058", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-01-28T13:17:17Z", "generation": 3, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "9569d4d57", "route-controller-manager": "true" }, "name": "route-controller-manager-9569d4d57", "namespace": "openshift-route-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "route-controller-manager", "uid": "f8e5ff57-d6d1-401f-8931-ac056b84c129" } ], "resourceVersion": "18299", "uid": "9dfb2b51-4b89-4d10-874a-6650cf58d86b" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "route-controller-manager", "pod-template-hash": "9569d4d57", "route-controller-manager": "true" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "16469", "configmaps/config": "7342", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "9569d4d57", "route-controller-manager": "true" }, "name": "route-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "route-controller-manager": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "route-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:10b8ec9bc4fab402acfa66b5c3a9843dc5fd98cc940460602e13704c70f34f78", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "route-controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "route-controller-manager-sa", "serviceAccountName": "route-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "7", "operator.openshift.io/spec-hash": "a6b3575fcecf2dc6bd42831af49298463610814472cd21e6bfb83d3f1d1f355e", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-24T12:31:09Z", "generation": 7, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "b69754dc6", "route-controller-manager": "true" }, "name": "route-controller-manager-b69754dc6", "namespace": "openshift-route-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "route-controller-manager", "uid": "f8e5ff57-d6d1-401f-8931-ac056b84c129" } ], "resourceVersion": "43922", "uid": "7634bdf0-c9bf-46d6-aa04-0913381db640" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "route-controller-manager", "pod-template-hash": "b69754dc6", "route-controller-manager": "true" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "42777", "configmaps/config": "42858", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "3", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "b69754dc6", "route-controller-manager": "true" }, "name": "route-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "route-controller-manager": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "route-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:10b8ec9bc4fab402acfa66b5c3a9843dc5fd98cc940460602e13704c70f34f78", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "route-controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "route-controller-manager-sa", "serviceAccountName": "route-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-01-28T13:08:14Z", "generation": 1, "labels": { "app": "service-ca-operator", "pod-template-hash": "5cf4b4cd55" }, "name": "service-ca-operator-5cf4b4cd55", "namespace": "openshift-service-ca-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "service-ca-operator", "uid": "a6f33224-5f62-41c6-afba-4ba8940c657f" } ], "resourceVersion": "38555", "uid": "4f1a77fc-ceb8-4825-8603-4b74974453d0" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "service-ca-operator", "pod-template-hash": "5cf4b4cd55" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "service-ca-operator", "pod-template-hash": "5cf4b4cd55" }, "name": "service-ca-operator" }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/operator-config.yaml", "-v=2" ], "command": [ "service-ca-operator", "operator" ], "env": [ { "name": "CONTROLLER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9ebfca0971d391cb2a23a5f145580bf70025653dd963e5aa93dd0a5dc9571272" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9ebfca0971d391cb2a23a5f145580bf70025653dd963e5aa93dd0a5dc9571272", "imagePullPolicy": "IfNotPresent", "name": "service-ca-operator", "resources": { "requests": { "cpu": "10m", "memory": "80Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsGroup": 1001, "runAsNonRoot": true, "runAsUser": 1001, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "service-ca-operator", "serviceAccountName": "service-ca-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "service-ca-operator-config" }, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "a1e0a664528b42f60c72c9b485c16c5b189df0d29f139eb4e824dde79e1d7fa7" }, "creationTimestamp": "2026-01-28T13:10:32Z", "generation": 1, "labels": { "app": "service-ca", "pod-template-hash": "7dc4878458", "service-ca": "true" }, "name": "service-ca-7dc4878458", "namespace": "openshift-service-ca", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "service-ca", "uid": "c66779c8-ac3d-44d5-8cfe-aeb420ca4ea1" } ], "resourceVersion": "37610", "uid": "281ad309-36d2-4789-b471-52544a29ee1e" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "service-ca", "pod-template-hash": "7dc4878458", "service-ca": "true" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "service-ca", "pod-template-hash": "7dc4878458", "service-ca": "true" }, "name": "service-ca" }, "spec": { "containers": [ { "args": [ "-v=2" ], "command": [ "service-ca-operator", "controller" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9ebfca0971d391cb2a23a5f145580bf70025653dd963e5aa93dd0a5dc9571272", "imagePullPolicy": "IfNotPresent", "name": "service-ca-controller", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "120Mi" } }, "securityContext": { "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/signing-key", "name": "signing-key" }, { "mountPath": "/var/run/configmaps/signing-cabundle", "name": "signing-cabundle" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "service-ca", "serviceAccountName": "service-ca", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "signing-key", "secret": { "defaultMode": 420, "secretName": "signing-key" } }, { "configMap": { "defaultMode": 420, "name": "signing-cabundle" }, "name": "signing-cabundle" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } } ], "kind": "List", "metadata": { "resourceVersion": "" } }