{ "apiVersion": "v1", "items": [ { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "config.openshift.io/inject-proxy": "csi-driver", "config.openshift.io/inject-proxy-cabundle": "csi-driver", "deprecated.daemonset.template.generation": "3", "operator.openshift.io/dep-5d02b1dbbfd3b1124537c2229e410cd2adfa2": "NRe5ig==", "operator.openshift.io/spec-hash": "2b4dd5b7466912d259301debd03f2a3937d12045d0ccf1291d5aa9c31e5d2748" }, "creationTimestamp": "2026-04-28T11:49:04Z", "generation": 3, "name": "aws-ebs-csi-driver-node", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "40870", "uid": "7d6c752d-c01b-47e7-8e86-40538cad47f0" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "aws-ebs-csi-driver-node" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-5d02b1dbbfd3b1124537c2229e410cd2adfa2": "NRe5ig==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "aws-ebs-csi-driver-node" } }, "spec": { "containers": [ { "args": [ "node", "--endpoint=$(CSI_ENDPOINT)", "--logtostderr", "--v=2", "--reserved-volume-attachments=1" ], "env": [ { "name": "CSI_ENDPOINT", "value": "unix:/csi/csi.sock" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:32c346d660004ce50755aa9cf9c1ba33a5be6e335f1978089358f84f1601794a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "host": "127.0.0.1", "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "csi-driver", "ports": [ { "containerPort": 10300, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet", "mountPropagation": "Bidirectional", "name": "kubelet-dir" }, { "mountPath": "/csi", "name": "socket-dir" }, { "mountPath": "/dev", "name": "device-dir" }, { "mountPath": "/etc/selinux", "name": "etc-selinux" }, { "mountPath": "/sys/fs", "name": "sys-fs" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "non-standard-root-system-trust-ca-bundle", "readOnly": true } ] }, { "args": [ "--csi-address=/csi/csi.sock", "--kubelet-registration-path=/var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock", "--http-endpoint=127.0.0.1:10309", "--v=2" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca3c49ae637d569b755a3984240d263329f66317aff2cf98e4c2d857f39f0275", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "/bin/sh", "-c", "rm -rf /registration/ebs.csi.aws.com-reg.sock /csi/csi.sock" ] } } }, "livenessProbe": { "failureThreshold": 5, "httpGet": { "host": "127.0.0.1", "path": "/healthz", "port": "rhealthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "csi-node-driver-registrar", "ports": [ { "containerPort": 10309, "name": "rhealthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/csi", "name": "socket-dir" }, { "mountPath": "/registration", "name": "registration-dir" } ] }, { "args": [ "--csi-address=/csi/csi.sock", "--http-endpoint=127.0.0.1:10300", "--v=2", "--probe-timeout=3s" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7fa1cef8374dc9b9c4ba3a63a8ff65bdad518bf16fd9f8f0b551ec3dde3571da", "imagePullPolicy": "IfNotPresent", "name": "csi-liveness-probe", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/csi", "name": "socket-dir" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "aws-ebs-csi-driver-node-sa", "serviceAccountName": "aws-ebs-csi-driver-node-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet", "type": "Directory" }, "name": "kubelet-dir" }, { "hostPath": { "path": "/var/lib/kubelet/plugins/ebs.csi.aws.com/", "type": "DirectoryOrCreate" }, "name": "socket-dir" }, { "hostPath": { "path": "/var/lib/kubelet/plugins_registry/", "type": "Directory" }, "name": "registration-dir" }, { "hostPath": { "path": "/dev", "type": "Directory" }, "name": "device-dir" }, { "hostPath": { "path": "/etc/selinux", "type": "DirectoryOrCreate" }, "name": "etc-selinux" }, { "hostPath": { "path": "/sys/fs", "type": "Directory" }, "name": "sys-fs" }, { "name": "metrics-serving-cert", "secret": { "defaultMode": 420, "secretName": "aws-ebs-csi-driver-node-metrics-serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "aws-ebs-csi-driver-trusted-ca-bundle" }, "name": "non-standard-root-system-trust-ca-bundle" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 6, "desiredNumberScheduled": 6, "numberAvailable": 6, "numberMisscheduled": 0, "numberReady": 6, "observedGeneration": 3, "updatedNumberScheduled": 6 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-04-28T11:49:32Z", "generation": 1, "labels": { "openshift-app": "tuned" }, "name": "tuned", "namespace": "openshift-cluster-node-tuning-operator", "ownerReferences": [ { "apiVersion": "tuned.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Tuned", "name": "default", "uid": "11ab5360-73e0-40b5-a40e-e0c4f0a5533e" } ], "resourceVersion": "20468", "uid": "b58fd1ae-d63c-433c-8271-141c0ec7d445" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "openshift-app": "tuned" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "openshift-app": "tuned" } }, "spec": { "containers": [ { "command": [ "/usr/bin/cluster-node-tuning-operator", "ocp-tuned", "--in-cluster", "-v=0" ], "env": [ { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "OCP_NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "RESYNC_PERIOD", "value": "600" }, { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "CLUSTER_NODE_TUNED_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3580708e3415c9fb3a1fd0c11b45ba0e4cfc2825af9428242a8aac56f3fac9a3" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3580708e3415c9fb3a1fd0c11b45ba0e4cfc2825af9428242a8aac56f3fac9a3", "imagePullPolicy": "IfNotPresent", "name": "tuned", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/modprobe.d", "mountPropagation": "HostToContainer", "name": "etc-modprobe-d" }, { "mountPath": "/etc/sysconfig", "mountPropagation": "HostToContainer", "name": "etc-sysconfig" }, { "mountPath": "/etc/kubernetes", "mountPropagation": "HostToContainer", "name": "etc-kubernetes", "readOnly": true }, { "mountPath": "/etc/sysctl.d", "mountPropagation": "HostToContainer", "name": "etc-sysctl-d", "readOnly": true }, { "mountPath": "/etc/sysctl.conf", "mountPropagation": "HostToContainer", "name": "etc-sysctl-conf", "readOnly": true }, { "mountPath": "/etc/systemd", "mountPropagation": "HostToContainer", "name": "etc-systemd" }, { "mountPath": "/etc/tuned", "name": "etc-tuned" }, { "mountPath": "/run", "mountPropagation": "HostToContainer", "name": "run" }, { "mountPath": "/sys", "mountPropagation": "HostToContainer", "name": "sys" }, { "mountPath": "/tmp", "name": "tmp" }, { "mountPath": "/lib/modules", "mountPropagation": "HostToContainer", "name": "lib-modules", "readOnly": true }, { "mountPath": "/var/lib/kubelet", "mountPropagation": "HostToContainer", "name": "var-lib-kubelet", "readOnly": true }, { "mountPath": "/host", "mountPropagation": "HostToContainer", "name": "host" } ] } ], "dnsPolicy": "ClusterFirst", "hostIPC": true, "hostNetwork": true, "hostPID": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "tuned", "serviceAccountName": "tuned", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/modprobe.d", "type": "Directory" }, "name": "etc-modprobe-d" }, { "hostPath": { "path": "/etc/sysconfig", "type": "Directory" }, "name": "etc-sysconfig" }, { "hostPath": { "path": "/etc/kubernetes", "type": "Directory" }, "name": "etc-kubernetes" }, { "hostPath": { "path": "/etc/sysctl.d", "type": "Directory" }, "name": "etc-sysctl-d" }, { "hostPath": { "path": "/etc/sysctl.conf", "type": "File" }, "name": "etc-sysctl-conf" }, { "hostPath": { "path": "/etc/systemd", "type": "Directory" }, "name": "etc-systemd" }, { "hostPath": { "path": "/run", "type": "Directory" }, "name": "run" }, { "hostPath": { "path": "/sys", "type": "Directory" }, "name": "sys" }, { "hostPath": { "path": "/lib/modules", "type": "Directory" }, "name": "lib-modules" }, { "hostPath": { "path": "/var/lib/kubelet", "type": "Directory" }, "name": "var-lib-kubelet" }, { "hostPath": { "path": "/", "type": "Directory" }, "name": "host" }, { "emptyDir": { "medium": "Memory" }, "name": "etc-tuned" }, { "emptyDir": { "medium": "Memory" }, "name": "tmp" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 6, "desiredNumberScheduled": 6, "numberAvailable": 6, "numberMisscheduled": 0, "numberReady": 6, "observedGeneration": 1, "updatedNumberScheduled": 6 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-04-28T11:49:34Z", "generation": 1, "labels": { "dns.operator.openshift.io/owning-dns": "default" }, "name": "dns-default", "namespace": "openshift-dns", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "controller": true, "kind": "DNS", "name": "default", "uid": "f47480a9-926f-463f-817d-7b024fce98cd" } ], "resourceVersion": "48734", "uid": "9563136b-c1bf-4dc5-a74b-0a4fee3c17ed" }, "spec": { "minReadySeconds": 9, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "dns.operator.openshift.io/daemonset-dns": "default" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "true", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "dns.operator.openshift.io/daemonset-dns": "default" } }, "spec": { "containers": [ { "args": [ "-conf", "/etc/coredns/Corefile" ], "command": [ "coredns" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:de1c2aadb2cc989d2dd5da21bcd70ab36d2805638cac81028a10fc772972d1fe", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/health", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "dns", "ports": [ { "containerPort": 5353, "name": "dns", "protocol": "UDP" }, { "containerPort": 5353, "name": "dns-tcp", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": 8181, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 3, "successThreshold": 1, "timeoutSeconds": 3 }, "resources": { "requests": { "cpu": "50m", "memory": "70Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/coredns", "name": "config-volume", "readOnly": true } ] }, { "args": [ "--logtostderr", "--secure-listen-address=:9154", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", "--upstream=http://127.0.0.1:9153/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9154, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "40Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-tls", "readOnly": true } ] } ], "dnsPolicy": "Default", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "dns", "serviceAccountName": "dns", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "Corefile", "path": "Corefile" } ], "name": "dns-default" }, "name": "config-volume" }, { "name": "metrics-tls", "secret": { "defaultMode": 420, "secretName": "dns-default-metrics-tls" } } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": "10%", "maxUnavailable": 0 }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 6, "desiredNumberScheduled": 6, "numberAvailable": 6, "numberMisscheduled": 0, "numberReady": 6, "observedGeneration": 1, "updatedNumberScheduled": 6 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-04-28T11:49:34Z", "generation": 1, "name": "node-resolver", "namespace": "openshift-dns", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "controller": true, "kind": "DNS", "name": "default", "uid": "f47480a9-926f-463f-817d-7b024fce98cd" } ], "resourceVersion": "20459", "uid": "824b8bde-2ee9-4890-8bc6-6f321e81aa92" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "dns.operator.openshift.io/daemonset-node-resolver": "" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "dns.operator.openshift.io/daemonset-node-resolver": "" } }, "spec": { "containers": [ { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -uo pipefail\n\ntrap 'jobs -p | xargs kill || true; wait; exit 0' TERM\n\nOPENSHIFT_MARKER=\"openshift-generated-node-resolver\"\nHOSTS_FILE=\"/etc/hosts\"\nTEMP_FILE=\"/etc/hosts.tmp\"\n\nIFS=', ' read -r -a services \u003c\u003c\u003c \"${SERVICES}\"\n\n# Make a temporary file with the old hosts file's attributes.\nif ! cp -f --attributes-only \"${HOSTS_FILE}\" \"${TEMP_FILE}\"; then\n echo \"Failed to preserve hosts file. Exiting.\"\n exit 1\nfi\n\nwhile true; do\n declare -A svc_ips\n for svc in \"${services[@]}\"; do\n # Fetch service IP from cluster dns if present. We make several tries\n # to do it: IPv4, IPv6, IPv4 over TCP and IPv6 over TCP. The two last ones\n # are for deployments with Kuryr on older OpenStack (OSP13) - those do not\n # support UDP loadbalancers and require reaching DNS through TCP.\n cmds=('dig -t A @\"${NAMESERVER}\" +short \"${svc}.${CLUSTER_DOMAIN}\"|grep -v \"^;\"'\n 'dig -t AAAA @\"${NAMESERVER}\" +short \"${svc}.${CLUSTER_DOMAIN}\"|grep -v \"^;\"'\n 'dig -t A +tcp +retry=0 @\"${NAMESERVER}\" +short \"${svc}.${CLUSTER_DOMAIN}\"|grep -v \"^;\"'\n 'dig -t AAAA +tcp +retry=0 @\"${NAMESERVER}\" +short \"${svc}.${CLUSTER_DOMAIN}\"|grep -v \"^;\"')\n for i in ${!cmds[*]}\n do\n ips=($(eval \"${cmds[i]}\"))\n if [[ \"$?\" -eq 0 \u0026\u0026 \"${#ips[@]}\" -ne 0 ]]; then\n svc_ips[\"${svc}\"]=\"${ips[@]}\"\n break\n fi\n done\n done\n\n # Update /etc/hosts only if we get valid service IPs\n # We will not update /etc/hosts when there is coredns service outage or api unavailability\n # Stale entries could exist in /etc/hosts if the service is deleted\n if [[ -n \"${svc_ips[*]-}\" ]]; then\n # Build a new hosts file from /etc/hosts with our custom entries filtered out\n if ! sed --silent \"/# ${OPENSHIFT_MARKER}/d; w ${TEMP_FILE}\" \"${HOSTS_FILE}\"; then\n # Only continue rebuilding the hosts entries if its original content is preserved\n sleep 60 \u0026 wait\n continue\n fi\n\n # Append resolver entries for services\n rc=0\n for svc in \"${!svc_ips[@]}\"; do\n for ip in ${svc_ips[${svc}]}; do\n echo \"${ip} ${svc} ${svc}.${CLUSTER_DOMAIN} # ${OPENSHIFT_MARKER}\" \u003e\u003e \"${TEMP_FILE}\" || rc=$?\n done\n done\n if [[ $rc -ne 0 ]]; then\n sleep 60 \u0026 wait\n continue\n fi\n\n\n # TODO: Update /etc/hosts atomically to avoid any inconsistent behavior\n # Replace /etc/hosts with our modified version if needed\n cmp \"${TEMP_FILE}\" \"${HOSTS_FILE}\" || cp -f \"${TEMP_FILE}\" \"${HOSTS_FILE}\"\n # TEMP_FILE is not removed to avoid file create/delete and attributes copy churn\n fi\n sleep 60 \u0026 wait\n unset svc_ips\ndone\n" ], "env": [ { "name": "SERVICES", "value": "image-registry.openshift-image-registry.svc" }, { "name": "NAMESERVER", "value": "172.30.0.10" }, { "name": "CLUSTER_DOMAIN", "value": "cluster.local" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bd12da40794cf7faff3eef68b853d343660acefb8c23ba1786d120430f09760c", "imagePullPolicy": "IfNotPresent", "name": "dns-node-resolver", "resources": { "requests": { "cpu": "5m", "memory": "21Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/hosts", "name": "hosts-file" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "node-resolver", "serviceAccountName": "node-resolver", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/hosts", "type": "File" }, "name": "hosts-file" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "33%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 6, "desiredNumberScheduled": 6, "numberAvailable": 6, "numberMisscheduled": 0, "numberReady": 6, "observedGeneration": 1, "updatedNumberScheduled": 6 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "operator.openshift.io/spec-hash": "f177c86b1beaa8726c61baa996d0eaa74097fce71fb5cbdd5b3f323053385b38" }, "creationTimestamp": "2026-04-28T11:57:56Z", "generation": 1, "name": "node-ca", "namespace": "openshift-image-registry", "resourceVersion": "20454", "uid": "6cb48ae0-a324-49e0-8b7c-459f7f4c77d5" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "name": "node-ca" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "node-ca" } }, "spec": { "containers": [ { "command": [ "/bin/sh", "-c", "trap 'jobs -p | xargs -r kill; echo shutting down node-ca; exit 0' TERM\nwhile [ true ];\ndo\n for f in $(ls /tmp/serviceca); do\n echo $f\n ca_file_path=\"/tmp/serviceca/${f}\"\n f=$(echo $f | sed -r 's/(.*)\\.\\./\\1:/')\n reg_dir_path=\"/etc/docker/certs.d/${f}\"\n if [ -e \"${reg_dir_path}\" ]; then\n cp -u $ca_file_path $reg_dir_path/ca.crt\n else\n mkdir $reg_dir_path\n cp $ca_file_path $reg_dir_path/ca.crt\n fi\n done\n for d in $(ls /etc/docker/certs.d); do\n echo $d\n dp=$(echo $d | sed -r 's/(.*):/\\1\\.\\./')\n reg_conf_path=\"/tmp/serviceca/${dp}\"\n if [ ! -e \"${reg_conf_path}\" ]; then\n rm -rf /etc/docker/certs.d/$d\n fi\n done\n sleep 60 \u0026 wait ${!}\ndone\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c58b3f3f33b4117627975dc67df83f087e8b8e0160027b4f3df5b9416a23b24c", "imagePullPolicy": "IfNotPresent", "name": "node-ca", "resources": { "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "privileged": true, "runAsGroup": 0, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp/serviceca", "name": "serviceca" }, { "mountPath": "/etc/docker/certs.d", "name": "host" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "node-ca", "serviceAccountName": "node-ca", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/docker/certs.d", "type": "" }, "name": "host" }, { "configMap": { "defaultMode": 420, "name": "image-registry-certificates" }, "name": "serviceca" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 6, "desiredNumberScheduled": 6, "numberAvailable": 6, "numberMisscheduled": 0, "numberReady": 6, "observedGeneration": 1, "updatedNumberScheduled": 6 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-04-28T11:51:34Z", "generation": 1, "labels": { "ingress.openshift.io/canary": "canary_controller" }, "name": "ingress-canary", "namespace": "openshift-ingress-canary", "resourceVersion": "36416", "uid": "9b30a5f5-9835-4e05-baef-2cd874e3ea43" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "ingresscanary.operator.openshift.io/daemonset-ingresscanary": "canary_controller" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "ingresscanary.operator.openshift.io/daemonset-ingresscanary": "canary_controller" } }, "spec": { "containers": [ { "command": [ "ingress-operator", "serve-healthcheck" ], "env": [ { "name": "TLS_CERT", "value": "/etc/tls-cert/tls.crt" }, { "name": "TLS_KEY", "value": "/etc/tls-cert/tls.key" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ff05f68cb78cb35212f4878d63631f37bcd4f7b8f4acb0ab4b2bc99f3c3b08af", "imagePullPolicy": "IfNotPresent", "name": "serve-healthcheck-canary", "ports": [ { "containerPort": 8443, "protocol": "TCP" }, { "containerPort": 8888, "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls-cert", "name": "cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "node-role.kubernetes.io/infra", "operator": "Exists" } ], "volumes": [ { "name": "cert", "secret": { "defaultMode": 272, "secretName": "canary-serving-cert" } } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "2", "machine.openshift.io/owned": "", "operator.openshift.io/spec-hash": "12c386083907b2586ffcad426cb431221822539aa00836a95cb3d67e83cbd6a3" }, "creationTimestamp": "2026-04-28T11:50:06Z", "generation": 2, "labels": { "api": "clusterapi", "k8s-app": "termination-handler" }, "name": "machine-api-termination-handler", "namespace": "openshift-machine-api", "resourceVersion": "42011", "uid": "ff359f2d-ee79-48ef-9e1c-6b6d7033e42e" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "api": "clusterapi", "k8s-app": "termination-handler" } }, "template": { "metadata": { "annotations": { "operator.openshift.io/dep-openshift-machine-api.mao-trusted-ca.configmap": "NRe5ig==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "api": "clusterapi", "k8s-app": "termination-handler" } }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "--logtostderr=true", "--v=3", "--node-name=$(NODE_NAME)", "--namespace=openshift-machine-api", "--poll-interval-seconds=5" ], "command": [ "/termination-handler" ], "env": [ { "name": "KUBECONFIG", "value": "/var/lib/kubelet/kubeconfig" }, { "name": "NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0579bee1e5bb7e6e05cb578b0662539a485cb68cf362c18fcba7c034b1f2403f", "imagePullPolicy": "IfNotPresent", "name": "termination-handler", "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/kubeconfig", "name": "kubeconfig", "readOnly": true }, { "mountPath": "/var/lib/kubelet/pki", "name": "pki", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "kubernetes.io/os": "linux", "machine.openshift.io/interruptible-instance": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "machine-api-termination-handler", "serviceAccountName": "machine-api-termination-handler", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/kubeconfig", "type": "" }, "name": "kubeconfig" }, { "hostPath": { "path": "/var/lib/kubelet/pki", "type": "" }, "name": "pki" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 0, "desiredNumberScheduled": 0, "numberMisscheduled": 0, "numberReady": 0, "observedGeneration": 2 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-04-28T11:49:53Z", "generation": 1, "name": "machine-config-daemon", "namespace": "openshift-machine-config-operator", "resourceVersion": "19942", "uid": "a23080a8-062b-433c-b06d-f60e0fc5377c" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "k8s-app": "machine-config-daemon" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "machine-config-daemon" }, "name": "machine-config-daemon" }, "spec": { "containers": [ { "args": [ "start", "--payload-version=4.18.31" ], "command": [ "/usr/bin/machine-config-daemon" ], "env": [ { "name": "NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2655c75a468e61f5206cf2126af6a30159c581757656352490a8378113262df7", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "host": "127.0.0.1", "path": "/health", "port": 8798, "scheme": "HTTP" }, "initialDelaySeconds": 120, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "machine-config-daemon", "ports": [ { "containerPort": 8798, "name": "health", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/rootfs", "mountPropagation": "HostToContainer", "name": "rootfs" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9001", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--upstream=http://127.0.0.1:8797", "--logtostderr=true", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9001, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "proxy-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "mcd-auth-proxy-config" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "hostPID": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "machine-config-daemon", "serviceAccountName": "machine-config-daemon", "terminationGracePeriodSeconds": 600, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/", "type": "" }, "name": "rootfs" }, { "name": "proxy-tls", "secret": { "defaultMode": 420, "secretName": "proxy-tls" } }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "mcd-auth-proxy-config" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 6, "desiredNumberScheduled": 6, "numberAvailable": 6, "numberMisscheduled": 0, "numberReady": 6, "observedGeneration": 1, "updatedNumberScheduled": 6 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-04-28T11:50:13Z", "generation": 1, "name": "machine-config-server", "namespace": "openshift-machine-config-operator", "resourceVersion": "10503", "uid": "21100b9e-b5be-4f15-9051-082348d05e4d" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "k8s-app": "machine-config-server" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "hostnetwork", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "machine-config-server" }, "name": "machine-config-server" }, "spec": { "containers": [ { "args": [ "start", "--apiserver-url=https://api-int.clusterpool418-bb45f.rhtap.devcluster.openshift.com:6443", "--payload-version=4.18.31", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12" ], "command": [ "/usr/bin/machine-config-server" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2655c75a468e61f5206cf2126af6a30159c581757656352490a8378113262df7", "imagePullPolicy": "IfNotPresent", "name": "machine-config-server", "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/ssl/mcs", "name": "certs" }, { "mountPath": "/etc/mcs/bootstrap-token", "name": "node-bootstrap-token" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "machine-config-server", "serviceAccountName": "machine-config-server", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/etcd", "operator": "Exists" } ], "volumes": [ { "name": "node-bootstrap-token", "secret": { "defaultMode": 420, "secretName": "node-bootstrapper-token" } }, { "name": "certs", "secret": { "defaultMode": 420, "secretName": "machine-config-server-tls" } } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": 1 }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-04-28T11:59:13Z", "generation": 1, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "node-exporter", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "1.8.2" }, "name": "node-exporter", "namespace": "openshift-monitoring", "resourceVersion": "23317", "uid": "3e90934f-e4fb-4887-b1cf-26aaa9b559ff" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/name": "node-exporter", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "kubectl.kubernetes.io/default-container": "node-exporter", "openshift.io/required-scc": "node-exporter", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "node-exporter", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "1.8.2" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--web.listen-address=127.0.0.1:9100", "--path.sysfs=/host/sys", "--path.rootfs=/host/root", "--path.udev.data=/host/root/run/udev/data", "--no-collector.wifi", "--collector.filesystem.mount-points-exclude=^/(dev|proc|sys|run/k3s/containerd/.+|var/lib/docker/.+|var/lib/kubelet/pods/.+)($|/)", "--collector.netclass.ignored-devices=^(veth.*|[a-f0-9]{15}|enP.*|ovn-k8s-mp[0-9]*|br-ex|br-int|br-ext|br[0-9]*|tun[0-9]*|cali[a-f0-9]*)$", "--collector.netdev.device-exclude=^(veth.*|[a-f0-9]{15}|enP.*|ovn-k8s-mp[0-9]*|br-ex|br-int|br-ext|br[0-9]*|tun[0-9]*|cali[a-f0-9]*)$", "--collector.cpu.info", "--collector.textfile.directory=/var/node_exporter/textfile", "--no-collector.btrfs", "--runtime.gomaxprocs=0", "--no-collector.cpufreq", "--no-collector.tcpstat", "--collector.netdev", "--collector.netclass", "--collector.netclass.netlink", "--no-collector.buddyinfo", "--no-collector.mountstats", "--no-collector.ksmd", "--no-collector.processes", "--no-collector.systemd" ], "command": [ "/bin/sh", "-c", "export GOMAXPROCS=4\n# We don't take CPU affinity into account as the container doesn't have integer CPU requests.\n# In case of error, fallback to the default value.\nNUM_CPUS=$(grep -c '^processor' \"/proc/cpuinfo\" 2\u003e/dev/null || echo \"0\")\nif [ \"$NUM_CPUS\" -lt \"$GOMAXPROCS\" ]; then\n export GOMAXPROCS=\"$NUM_CPUS\"\nfi\necho \"ts=$(date --iso-8601=seconds) num_cpus=$NUM_CPUS gomaxprocs=$GOMAXPROCS\"\nexec /bin/node_exporter \"$0\" \"$@\"\n" ], "env": [ { "name": "DBUS_SYSTEM_BUS_ADDRESS", "value": "unix:path=/host/root/var/run/dbus/system_bus_socket" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6b4f2baf26c245fe536b98e5948ace14668e17bf55cea67de9895aa87d39b8b7", "imagePullPolicy": "IfNotPresent", "name": "node-exporter", "resources": { "requests": { "cpu": "8m", "memory": "32Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/host/sys", "mountPropagation": "HostToContainer", "name": "sys", "readOnly": true }, { "mountPath": "/host/root", "mountPropagation": "HostToContainer", "name": "root", "readOnly": true }, { "mountPath": "/var/node_exporter/textfile", "name": "node-exporter-textfile", "readOnly": true } ], "workingDir": "/var/node_exporter/textfile" }, { "args": [ "--secure-listen-address=[$(IP)]:9100", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:9100/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "env": [ { "name": "IP", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "status.podIP" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9100, "hostPort": 9100, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "node-exporter-tls" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca" }, { "mountPath": "/etc/kube-rbac-policy", "name": "node-exporter-kube-rbac-proxy-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "hostPID": true, "initContainers": [ { "command": [ "/bin/sh", "-c", "[[ ! -d /node_exporter/collectors/init ]] || find /node_exporter/collectors/init -perm /111 -type f -exec {} \\;" ], "env": [ { "name": "TMPDIR", "value": "/tmp" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6b4f2baf26c245fe536b98e5948ace14668e17bf55cea67de9895aa87d39b8b7", "imagePullPolicy": "IfNotPresent", "name": "init-textfile", "resources": { "requests": { "cpu": "1m", "memory": "1Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/node_exporter/textfile", "name": "node-exporter-textfile" }, { "mountPath": "/var/log/wtmp", "name": "node-exporter-wtmp", "readOnly": true } ], "workingDir": "/var/node_exporter/textfile" } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "node-exporter", "serviceAccountName": "node-exporter", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/sys", "type": "" }, "name": "sys" }, { "hostPath": { "path": "/", "type": "" }, "name": "root" }, { "emptyDir": {}, "name": "node-exporter-textfile" }, { "name": "node-exporter-tls", "secret": { "defaultMode": 420, "secretName": "node-exporter-tls" } }, { "hostPath": { "path": "/var/log/wtmp", "type": "File" }, "name": "node-exporter-wtmp" }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "name": "node-exporter-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "node-exporter-kube-rbac-proxy-config" } } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 6, "desiredNumberScheduled": 6, "numberAvailable": 6, "numberMisscheduled": 0, "numberReady": 6, "observedGeneration": 1, "updatedNumberScheduled": 6 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "kubernetes.io/description": "This daemon set launches the Multus networking component on each node.\n", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T11:47:48Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "stand-alone" }, "name": "multus", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "d8474628-aa7b-47f7-acf9-88073c914376" } ], "resourceVersion": "20463", "uid": "e61f4191-fe38-40c7-8c3c-839f361fa0fc" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "multus" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "multus", "component": "network", "openshift.io/component": "network", "type": "infra" } }, "spec": { "containers": [ { "args": [ "MULTUS_DAEMON_OPT=\"\"\n/entrypoint/cnibincopy.sh; exec /usr/src/multus-cni/bin/multus-daemon $MULTUS_DAEMON_OPT\n" ], "command": [ "/bin/bash", "-ec", "--" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/usr/src/multus-cni/rhel8/bin/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/usr/src/multus-cni/rhel9/bin/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/usr/src/multus-cni/bin/" }, { "name": "KUBERNETES_SERVICE_PORT", "value": "6443" }, { "name": "KUBERNETES_SERVICE_HOST", "value": "api-int.clusterpool418-bb45f.rhtap.devcluster.openshift.com" }, { "name": "MULTUS_NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "K8S_NODE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:313f4502ade36e5ecf2d18edc5a57708cdc8289a687e7c041bfce1af0ecc8e7e", "imagePullPolicy": "IfNotPresent", "name": "kube-multus", "resources": { "requests": { "cpu": "10m", "memory": "65Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/etc/os-release", "name": "os-release" }, { "mountPath": "/host/etc/cni/net.d", "name": "system-cni-dir" }, { "mountPath": "/host/run/multus/cni/net.d", "name": "multus-cni-dir" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/run/multus", "mountPropagation": "HostToContainer", "name": "multus-socket-dir-parent" }, { "mountPath": "/run/k8s.cni.cncf.io", "name": "host-run-k8s-cni-cncf-io" }, { "mountPath": "/run/netns", "mountPropagation": "HostToContainer", "name": "host-run-netns" }, { "mountPath": "/var/lib/cni/bin", "name": "host-var-lib-cni-bin" }, { "mountPath": "/var/lib/cni/multus", "name": "host-var-lib-cni-multus" }, { "mountPath": "/var/lib/kubelet", "mountPropagation": "HostToContainer", "name": "host-var-lib-kubelet" }, { "mountPath": "/hostroot", "mountPropagation": "HostToContainer", "name": "hostroot" }, { "mountPath": "/etc/cni/multus/net.d", "name": "multus-conf-dir" }, { "mountPath": "/etc/cni/net.d/multus.d", "name": "multus-daemon-config", "readOnly": true }, { "mountPath": "/etc/cni/multus/certs", "name": "host-run-multus-certs" }, { "mountPath": "/etc/kubernetes", "name": "etc-kubernetes" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "hostPID": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/kubernetes/cni/net.d", "type": "Directory" }, "name": "system-cni-dir" }, { "hostPath": { "path": "/var/run/multus/cni/net.d", "type": "Directory" }, "name": "multus-cni-dir" }, { "hostPath": { "path": "/var/lib/cni/bin", "type": "Directory" }, "name": "cnibin" }, { "hostPath": { "path": "/etc/os-release", "type": "File" }, "name": "os-release" }, { "configMap": { "defaultMode": 484, "name": "cni-copy-resources" }, "name": "cni-binary-copy" }, { "hostPath": { "path": "/run/multus", "type": "DirectoryOrCreate" }, "name": "multus-socket-dir-parent" }, { "hostPath": { "path": "/run/k8s.cni.cncf.io", "type": "" }, "name": "host-run-k8s-cni-cncf-io" }, { "hostPath": { "path": "/run/netns/", "type": "" }, "name": "host-run-netns" }, { "hostPath": { "path": "/var/lib/cni/bin", "type": "" }, "name": "host-var-lib-cni-bin" }, { "hostPath": { "path": "/var/lib/cni/multus", "type": "" }, "name": "host-var-lib-cni-multus" }, { "hostPath": { "path": "/var/lib/kubelet", "type": "" }, "name": "host-var-lib-kubelet" }, { "hostPath": { "path": "/", "type": "" }, "name": "hostroot" }, { "hostPath": { "path": "/etc/cni/multus/net.d", "type": "" }, "name": "multus-conf-dir" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "daemon-config.json", "path": "daemon-config.json" } ], "name": "multus-daemon-config" }, "name": "multus-daemon-config" }, { "hostPath": { "path": "/etc/cni/multus/certs", "type": "" }, "name": "host-run-multus-certs" }, { "hostPath": { "path": "/etc/kubernetes", "type": "" }, "name": "etc-kubernetes" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 6, "desiredNumberScheduled": 6, "numberAvailable": 6, "numberMisscheduled": 0, "numberReady": 6, "observedGeneration": 1, "updatedNumberScheduled": 6 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "kubernetes.io/description": "This daemon installs and configures auxiliary CNI plugins on each node.\n", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T11:47:48Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "stand-alone" }, "name": "multus-additional-cni-plugins", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "d8474628-aa7b-47f7-acf9-88073c914376" } ], "resourceVersion": "22129", "uid": "4345cc32-9aa7-4bd8-a4b1-9cd3602b76a0" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "multus-additional-cni-plugins" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "multus-additional-cni-plugins", "component": "network", "openshift.io/component": "network", "type": "infra" } }, "spec": { "containers": [ { "args": [ "trap : TERM INT; sleep infinity \u0026 wait\n" ], "command": [ "/bin/bash", "-ec", "--" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:313f4502ade36e5ecf2d18edc5a57708cdc8289a687e7c041bfce1af0ecc8e7e", "imagePullPolicy": "IfNotPresent", "name": "kube-multus-additional-cni-plugins", "resources": { "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "initContainers": [ { "command": [ "/entrypoint/cnibincopy.sh" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/usr/src/egress-router-cni/rhel8/bin/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/usr/src/egress-router-cni/rhel9/bin/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/usr/src/egress-router-cni/bin/" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:56dcd2f8f740505e7b07052874a64da0989642311a63167a8e5ba312c027231f", "imagePullPolicy": "IfNotPresent", "name": "egress-router-binary-copy", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/os-release", "name": "os-release", "readOnly": true } ] }, { "command": [ "/bin/bash", "-c", "/entrypoint/cnibincopy.sh \u0026\u0026 cp -n /sysctls/allowlist.conf /host/etc/cni/tuning/" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/usr/src/plugins/rhel8/bin/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/usr/src/plugins/rhel9/bin/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/usr/src/plugins/bin/" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b9ebd544b1d3a332ce1ca998db818ab6d3bf9ccd3f90a8ed5281db78ca81dd2c", "imagePullPolicy": "IfNotPresent", "name": "cni-plugins", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/os-release", "name": "os-release", "readOnly": true }, { "mountPath": "/host/etc/cni/tuning/", "name": "tuning-conf-dir" }, { "mountPath": "/sysctls", "name": "cni-sysctl-allowlist" } ] }, { "command": [ "/entrypoint/cnibincopy.sh" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/bondcni/rhel8/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/bondcni/rhel9/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/bondcni/rhel9/" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:42eec9ffc32d14f871c7f8001b5d344fcdcd26bc766f280399286e47f1221f01", "imagePullPolicy": "IfNotPresent", "name": "bond-cni-plugin", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/os-release", "name": "os-release", "readOnly": true } ] }, { "command": [ "/entrypoint/cnibincopy.sh" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/usr/src/route-override/rhel8/bin/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/usr/src/route-override/rhel9/bin/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/usr/src/route-override/bin/" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:55e57a17432070cd70feaba000ce30acc351db7619f920e1369cfd850b31fb3a", "imagePullPolicy": "IfNotPresent", "name": "routeoverride-cni", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/os-release", "name": "os-release", "readOnly": true } ] }, { "command": [ "/entrypoint/cnibincopy.sh" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/usr/src/whereabouts/rhel8/bin/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/usr/src/whereabouts/rhel9/bin/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/usr/src/whereabouts/bin/" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7cd4ad59cb28e251c06f41e147a40395a8fc52c670fea74e5701b2994593c628", "imagePullPolicy": "IfNotPresent", "name": "whereabouts-cni-bincopy", "resources": { "requests": { "cpu": "10m", "memory": "10Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/os-release", "name": "os-release", "readOnly": true } ] }, { "command": [ "/bin/sh", "-c", "#!/bin/sh\n\nset -u -e\n\nCNI_BIN_DIR=${CNI_BIN_DIR:-\"/host/opt/cni/bin/\"}\nWHEREABOUTS_KUBECONFIG_FILE_HOST=${WHEREABOUTS_KUBECONFIG_FILE_HOST:-\"/etc/cni/net.d/whereabouts.d/whereabouts.kubeconfig\"}\nCNI_CONF_DIR=${CNI_CONF_DIR:-\"/host/etc/kubernetes/cni/net.d\"}\nWHEREABOUTS_RECONCILER_CRON=${WHEREABOUTS_RECONCILER_CRON:-30 4 * * *}\n\n# Make a whereabouts.d directory (for our kubeconfig)\n\nmkdir -p $CNI_CONF_DIR/whereabouts.d\nWHEREABOUTS_KUBECONFIG=$CNI_CONF_DIR/whereabouts.d/whereabouts.kubeconfig\nWHEREABOUTS_CONF_FILE=$CNI_CONF_DIR/whereabouts.d/whereabouts.conf\nWHEREABOUTS_KUBECONFIG_LITERAL=$(echo \"$WHEREABOUTS_KUBECONFIG\" | sed -e s'|/host||')\n\n# Write the nodename to the whereabouts.d directory for standardized hostname reference across cloud providers\necho $NODENAME \u003e $CNI_CONF_DIR/whereabouts.d/nodename\n\nSERVICE_ACCOUNT_PATH=/var/run/secrets/kubernetes.io/serviceaccount\nKUBE_CA_FILE=${KUBE_CA_FILE:-$SERVICE_ACCOUNT_PATH/ca.crt}\nSERVICE_ACCOUNT_TOKEN=$(cat $SERVICE_ACCOUNT_PATH/token)\nSERVICE_ACCOUNT_TOKEN_PATH=$SERVICE_ACCOUNT_PATH/token\nSKIP_TLS_VERIFY=${SKIP_TLS_VERIFY:-false}\n\n\nfunction log()\n{\n echo \"$(date -Iseconds) ${1}\"\n}\n\nfunction error()\n{\n log \"ERR: {$1}\"\n}\n\nfunction warn()\n{\n log \"WARN: {$1}\"\n}\n\n\nfunction generateKubeConfig {\n# Check if we're running as a k8s pod.\nif [ -f \"$SERVICE_ACCOUNT_PATH/token\" ]; then\n # We're running as a k8d pod - expect some variables.\n if [ -z ${KUBERNETES_SERVICE_HOST} ]; then\n error \"KUBERNETES_SERVICE_HOST not set\"; exit 1;\n fi\n if [ -z ${KUBERNETES_SERVICE_PORT} ]; then\n error \"KUBERNETES_SERVICE_PORT not set\"; exit 1;\n fi\n\n if [ \"$SKIP_TLS_VERIFY\" == \"true\" ]; then\n TLS_CFG=\"insecure-skip-tls-verify: true\"\n elif [ -f \"$KUBE_CA_FILE\" ]; then\n TLS_CFG=\"certificate-authority-data: $(cat $KUBE_CA_FILE | base64 | tr -d '\\n')\"\n fi\n\n # Kubernetes service address must be wrapped if it is IPv6 address\n KUBERNETES_SERVICE_HOST_WRAP=$KUBERNETES_SERVICE_HOST\n if [ \"$KUBERNETES_SERVICE_HOST_WRAP\" != \"${KUBERNETES_SERVICE_HOST_WRAP#*:[0-9a-fA-F]}\" ]; then\n KUBERNETES_SERVICE_HOST_WRAP=\\[$KUBERNETES_SERVICE_HOST_WRAP\\]\n fi\n\n # Write a kubeconfig file for the CNI plugin. Do this\n # to skip TLS verification for now. We should eventually support\n # writing more complete kubeconfig files. This is only used\n # if the provided CNI network config references it.\n touch $WHEREABOUTS_KUBECONFIG\n chmod ${KUBECONFIG_MODE:-600} $WHEREABOUTS_KUBECONFIG\n cat \u003e $WHEREABOUTS_KUBECONFIG \u003c\u003cEOF\n# Kubeconfig file for the Whereabouts CNI plugin.\napiVersion: v1\nkind: Config\nclusters:\n- name: local\n cluster:\n server: ${KUBERNETES_SERVICE_PROTOCOL:-https}://${KUBERNETES_SERVICE_HOST_WRAP}:${KUBERNETES_SERVICE_PORT}\n $TLS_CFG\nusers:\n- name: whereabouts\n user:\n token: \"${SERVICE_ACCOUNT_TOKEN}\"\ncontexts:\n- name: whereabouts-context\n context:\n cluster: local\n user: whereabouts\n namespace: ${WHEREABOUTS_NAMESPACE}\ncurrent-context: whereabouts-context\nEOF\n\n# Copy the config from ConfigMap to the desired directory\ncp /etc/whereabouts/config/whereabouts.conf $WHEREABOUTS_CONF_FILE\nchmod 600 $WHEREABOUTS_CONF_FILE\n\nelse\n warn \"Doesn't look like we're running in a kubernetes environment (no serviceaccount token)\"\nfi\n\n}\n\nfunction generateWhereaboutsConf {\n\n touch $WHEREABOUTS_CONF_FILE\n chmod ${KUBECONFIG_MODE:-600} $WHEREABOUTS_CONF_FILE\n cat \u003e $WHEREABOUTS_CONF_FILE \u003c\u003cEOF\n{\n \"datastore\": \"kubernetes\",\n \"kubernetes\": {\n \"kubeconfig\": \"${WHEREABOUTS_KUBECONFIG_LITERAL}\"\n },\n \"reconciler_cron_expression\": \"${WHEREABOUTS_RECONCILER_CRON}\"\n}\nEOF\n\n}\n\ngenerateKubeConfig\n# ------------------ end Generate a \"kube-config\"\n\n# ----------------- Generate a whereabouts conf\n# removed because we have the configmap\n#generateWhereaboutsConf\n# ---------------- End generate a whereabouts conf\n\n\n# copy whereabouts to the cni bin dir\n# SKIPPED DUE TO FIPS COPY.\n# cp -f /whereabouts $CNI_BIN_DIR\n\n# ---------------------- end generate a \"kube-config\".\n\n# Unless told otherwise, sleep forever.\n# This prevents Kubernetes from restarting the pod repeatedly.\nshould_sleep=${SLEEP:-\"true\"}\necho \"Done configuring CNI. Sleep=$should_sleep\"\nwhile [ \"$should_sleep\" == \"true\" ]; do\n sleep 1000000000000\ndone\n" ], "env": [ { "name": "NODENAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "KUBERNETES_SERVICE_PORT", "value": "6443" }, { "name": "KUBERNETES_SERVICE_HOST", "value": "api-int.clusterpool418-bb45f.rhtap.devcluster.openshift.com" }, { "name": "CNI_BIN_DIR", "value": "/host/opt/cni/bin/" }, { "name": "CNI_CONF_DIR", "value": "/host/etc/cni/net.d" }, { "name": "SLEEP", "value": "false" }, { "name": "WHEREABOUTS_NAMESPACE", "value": "openshift-multus" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7cd4ad59cb28e251c06f41e147a40395a8fc52c670fea74e5701b2994593c628", "imagePullPolicy": "IfNotPresent", "name": "whereabouts-cni", "resources": { "requests": { "cpu": "10m", "memory": "10Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/cni/net.d", "name": "system-cni-dir" }, { "mountPath": "/etc/whereabouts/config", "name": "whereabouts-configmap" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "multus-ancillary-tools", "serviceAccountName": "multus-ancillary-tools", "terminationGracePeriodSeconds": 10, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/kubernetes/cni/net.d", "type": "" }, "name": "system-cni-dir" }, { "hostPath": { "path": "/var/run/multus/cni/net.d", "type": "" }, "name": "multus-cni-dir" }, { "hostPath": { "path": "/var/lib/cni/bin", "type": "" }, "name": "cnibin" }, { "hostPath": { "path": "/etc/os-release", "type": "File" }, "name": "os-release" }, { "configMap": { "defaultMode": 484, "name": "cni-copy-resources" }, "name": "cni-binary-copy" }, { "hostPath": { "path": "/etc/cni/tuning/", "type": "DirectoryOrCreate" }, "name": "tuning-conf-dir" }, { "configMap": { "defaultMode": 484, "name": "default-cni-sysctl-allowlist" }, "name": "cni-sysctl-allowlist" }, { "configMap": { "defaultMode": 420, "name": "whereabouts-config" }, "name": "whereabouts-configmap" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 6, "desiredNumberScheduled": 6, "numberAvailable": 6, "numberMisscheduled": 0, "numberReady": 6, "observedGeneration": 1, "updatedNumberScheduled": 6 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "kubernetes.io/description": "This daemonset launches the network metrics daemon on each node\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T11:47:49Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "stand-alone" }, "name": "network-metrics-daemon", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "d8474628-aa7b-47f7-acf9-88073c914376" } ], "resourceVersion": "37181", "uid": "997a4e5c-43d2-465a-b042-3d9650e26d91" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "network-metrics-daemon" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "network-metrics-daemon", "component": "network", "openshift.io/component": "network", "type": "infra" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "network.operator.openshift.io/dpu-host", "operator": "DoesNotExist" }, { "key": "network.operator.openshift.io/dpu", "operator": "DoesNotExist" } ] } ] } } }, "containers": [ { "args": [ "--node-name", "$(NODE_NAME)" ], "command": [ "/usr/bin/network-metrics" ], "env": [ { "name": "NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:41f20de4ba92a7355dfbca6a69478b8608faf24f9b98ca111490d66063dda447", "imagePullPolicy": "IfNotPresent", "name": "network-metrics-daemon", "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--logtostderr", "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "--upstream=http://127.0.0.1:9091/", "--tls-private-key-file=/etc/metrics/tls.key", "--tls-cert-file=/etc/metrics/tls.crt" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/metrics", "name": "metrics-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "metrics-daemon-sa", "serviceAccountName": "metrics-daemon-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "name": "metrics-certs", "secret": { "defaultMode": 420, "secretName": "metrics-daemon-secret" } } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "33%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 6, "desiredNumberScheduled": 6, "numberAvailable": 6, "numberMisscheduled": 0, "numberReady": 6, "observedGeneration": 1, "updatedNumberScheduled": 6 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "kubernetes.io/description": "This daemonset deploys the network-check-target pods that run\na dummy app to be checked by network-check-source pod\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T11:48:04Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "" }, "name": "network-check-target", "namespace": "openshift-network-diagnostics", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "d8474628-aa7b-47f7-acf9-88073c914376" } ], "resourceVersion": "45507", "uid": "9c60936d-8ccc-4992-8eb9-9af7f298c6ec" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "network-check-target" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "network-check-target", "kubernetes.io/os": "linux" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "network.operator.openshift.io/dpu-host", "operator": "DoesNotExist" }, { "key": "network.operator.openshift.io/dpu", "operator": "DoesNotExist" } ] } ] } } }, "containers": [ { "command": [ "cluster-network-check-target" ], "env": [ { "name": "K8S_NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7b688dd4320873361832644a947deb502c275df63d3776d64b423bba27709b08", "imagePullPolicy": "IfNotPresent", "name": "network-check-target-container", "ports": [ { "containerPort": 8080, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "10m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "default", "serviceAccountName": "default", "terminationGracePeriodSeconds": 10, "tolerations": [ { "operator": "Exists" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 6, "desiredNumberScheduled": 6, "numberAvailable": 6, "numberMisscheduled": 0, "numberReady": 6, "observedGeneration": 1, "updatedNumberScheduled": 6 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "kubernetes.io/description": "This daemonset launches the network-node-identity networking components.\n", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T11:48:06Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "stand-alone" }, "name": "network-node-identity", "namespace": "openshift-network-node-identity", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "d8474628-aa7b-47f7-acf9-88073c914376" } ], "resourceVersion": "4173", "uid": "86b0654b-b2ea-46e0-84cb-9f59618ebb15" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "network-node-identity" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "hostnetwork-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "network-node-identity", "component": "network", "kubernetes.io/os": "linux", "openshift.io/component": "network", "type": "infra" } }, "spec": { "containers": [ { "command": [ "/bin/bash", "-c", "set -xe\nif [[ -f \"/env/_master\" ]]; then\n set -o allexport\n source \"/env/_master\"\n set +o allexport\nfi\n# OVN-K will try to remove hybrid overlay node annotations even when the hybrid overlay is not enabled.\n# https://github.com/ovn-org/ovn-kubernetes/blob/ac6820df0b338a246f10f412cd5ec903bd234694/go-controller/pkg/ovn/master.go#L791\nho_enable=\"--enable-hybrid-overlay\"\necho \"I$(date \"+%m%d %H:%M:%S.%N\") - network-node-identity - start webhook\"\n# extra-allowed-user: service account `ovn-kubernetes-control-plane`\n# sets pod annotations in multi-homing layer3 network controller (cluster-manager)\nexec /usr/bin/ovnkube-identity --k8s-apiserver=https://api-int.clusterpool418-bb45f.rhtap.devcluster.openshift.com:6443 \\\n --webhook-cert-dir=\"/etc/webhook-cert\" \\\n --webhook-host=127.0.0.1 \\\n --webhook-port=9743 \\\n ${ho_enable} \\\n --enable-interconnect \\\n --disable-approver \\\n --extra-allowed-user=\"system:serviceaccount:openshift-ovn-kubernetes:ovn-kubernetes-control-plane\" \\\n --wait-for-kubernetes-api=200s \\\n --pod-admission-conditions=\"/var/run/ovnkube-identity-config/additional-pod-admission-cond.json\" \\\n --loglevel=\"${LOGLEVEL}\"\n" ], "env": [ { "name": "LOGLEVEL", "value": "2" }, { "name": "KUBERNETES_NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3da709f5fb3ceb7e3e06711fd50adad02bb66b858b76ef56f705eba1dc14bc16", "imagePullPolicy": "IfNotPresent", "name": "webhook", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/webhook-cert/", "name": "webhook-cert" }, { "mountPath": "/env", "name": "env-overrides" }, { "mountPath": "/var/run/ovnkube-identity-config", "name": "ovnkube-identity-cm" } ] }, { "command": [ "/bin/bash", "-c", "set -xe\nif [[ -f \"/env/_master\" ]]; then\n set -o allexport\n source \"/env/_master\"\n set +o allexport\nfi\n\necho \"I$(date \"+%m%d %H:%M:%S.%N\") - network-node-identity - start approver\"\nexec /usr/bin/ovnkube-identity --k8s-apiserver=https://api-int.clusterpool418-bb45f.rhtap.devcluster.openshift.com:6443 \\\n --disable-webhook \\\n --csr-acceptance-conditions=\"/var/run/ovnkube-identity-config/additional-cert-acceptance-cond.json\" \\\n --loglevel=\"${LOGLEVEL}\"\n" ], "env": [ { "name": "LOGLEVEL", "value": "4" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3da709f5fb3ceb7e3e06711fd50adad02bb66b858b76ef56f705eba1dc14bc16", "imagePullPolicy": "IfNotPresent", "name": "approver", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/env", "name": "env-overrides" }, { "mountPath": "/var/run/ovnkube-identity-config", "name": "ovnkube-identity-cm" } ] } ], "dnsPolicy": "Default", "hostNetwork": true, "nodeSelector": { "beta.kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "network-node-identity", "serviceAccountName": "network-node-identity", "terminationGracePeriodSeconds": 200, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "name": "webhook-cert", "secret": { "defaultMode": 420, "secretName": "network-node-identity-cert" } }, { "configMap": { "defaultMode": 420, "name": "env-overrides", "optional": true }, "name": "env-overrides" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "additional-cert-acceptance-cond.json", "path": "additional-cert-acceptance-cond.json" }, { "key": "additional-pod-admission-cond.json", "path": "additional-pod-admission-cond.json" } ], "name": "ovnkube-identity-cm" }, "name": "ovnkube-identity-cm" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": "100%", "maxUnavailable": 0 }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "kubernetes.io/description": "This daemon set runs the iptables-alerter on each node\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T11:48:07Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "stand-alone" }, "name": "iptables-alerter", "namespace": "openshift-network-operator", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "d8474628-aa7b-47f7-acf9-88073c914376" } ], "resourceVersion": "21812", "uid": "08ec2986-3846-4db1-87a1-3d4ddf0be028" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "iptables-alerter" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "iptables-alerter", "component": "network", "openshift.io/component": "network", "type": "infra" } }, "spec": { "containers": [ { "command": [ "/iptables-alerter/iptables-alerter.sh" ], "env": [ { "name": "CONTAINER_RUNTIME_ENDPOINT", "value": "unix:///run/crio/crio.sock" }, { "name": "ALERTER_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bd12da40794cf7faff3eef68b853d343660acefb8c23ba1786d120430f09760c", "imagePullPolicy": "IfNotPresent", "name": "iptables-alerter", "resources": { "limits": { "cpu": "10m" }, "requests": { "cpu": "10m", "memory": "65Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/iptables-alerter", "name": "iptables-alerter-script" }, { "mountPath": "/host", "mountPropagation": "HostToContainer", "name": "host-slash", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "hostPID": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "iptables-alerter", "serviceAccountName": "iptables-alerter", "terminationGracePeriodSeconds": 10, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 484, "name": "iptables-alerter-script" }, "name": "iptables-alerter-script" }, { "hostPath": { "path": "/", "type": "" }, "name": "host-slash" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 6, "desiredNumberScheduled": 6, "numberAvailable": 6, "numberMisscheduled": 0, "numberReady": 6, "observedGeneration": 1, "updatedNumberScheduled": 6 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "2", "kubernetes.io/description": "This daemonset launches the ovn-kubernetes per node networking components.\n", "networkoperator.openshift.io/cluster-network-cidr": "10.128.0.0/14", "networkoperator.openshift.io/default-masquerade-network-cidrs": "169.254.0.0/17,fd69::/112", "networkoperator.openshift.io/hybrid-overlay-status": "disabled", "networkoperator.openshift.io/ip-family-mode": "single-stack", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T11:48:01Z", "generation": 2, "labels": { "networkoperator.openshift.io/generates-operator-status": "stand-alone" }, "name": "ovnkube-node", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "d8474628-aa7b-47f7-acf9-88073c914376" } ], "resourceVersion": "48746", "uid": "30f2037b-f582-4bcc-89eb-23d60acc215e" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "ovnkube-node" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "network.operator.openshift.io/ovnkube-script-lib-hash": "4971f480636493f1764780e992f708026077450e", "networkoperator.openshift.io/cluster-network-cidr": "10.128.0.0/14", "networkoperator.openshift.io/hybrid-overlay-status": "disabled", "networkoperator.openshift.io/ip-family-mode": "single-stack", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "ovnkube-node", "component": "network", "kubernetes.io/os": "linux", "openshift.io/component": "network", "ovn-db-pod": "true", "type": "infra" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "network.operator.openshift.io/dpu-host", "operator": "DoesNotExist" }, { "key": "network.operator.openshift.io/smart-nic", "operator": "DoesNotExist" }, { "key": "network.operator.openshift.io/dpu", "operator": "DoesNotExist" } ] } ] } } }, "containers": [ { "command": [ "/bin/bash", "-c", "set -e\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nstart-ovn-controller ${OVN_LOG_LEVEL}\n" ], "env": [ { "name": "OVN_LOG_LEVEL", "value": "info" }, { "name": "K8S_NODE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3da709f5fb3ceb7e3e06711fd50adad02bb66b858b76ef56f705eba1dc14bc16", "imagePullPolicy": "IfNotPresent", "name": "ovn-controller", "resources": { "requests": { "cpu": "10m", "memory": "300Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/run/openvswitch", "name": "run-openvswitch" }, { "mountPath": "/run/ovn/", "name": "run-ovn" }, { "mountPath": "/etc/openvswitch", "name": "etc-openvswitch" }, { "mountPath": "/etc/ovn/", "name": "etc-openvswitch" }, { "mountPath": "/var/lib/openvswitch", "name": "var-lib-openvswitch" }, { "mountPath": "/env", "name": "env-overrides" }, { "mountPath": "/var/log/ovn/", "name": "node-log" }, { "mountPath": "/dev/log", "name": "log-socket" } ] }, { "command": [ "/bin/bash", "-c", "set -euo pipefail\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nstart-audit-log-rotation\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3da709f5fb3ceb7e3e06711fd50adad02bb66b858b76ef56f705eba1dc14bc16", "imagePullPolicy": "IfNotPresent", "name": "ovn-acl-logging", "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/var/log/ovn/", "name": "node-log" }, { "mountPath": "/run/ovn/", "name": "run-ovn" } ] }, { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -euo pipefail\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nstart-rbac-proxy-node ovn-node-metrics 9103 29103 /etc/pki/tls/metrics-cert/tls.key /etc/pki/tls/metrics-cert/tls.crt\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-node", "ports": [ { "containerPort": 9103, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/etc/pki/tls/metrics-cert", "name": "ovn-node-metrics-cert", "readOnly": true } ] }, { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -euo pipefail\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nstart-rbac-proxy-node ovn-metrics 9105 29105 /etc/pki/tls/metrics-cert/tls.key /etc/pki/tls/metrics-cert/tls.crt\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-ovn-metrics", "ports": [ { "containerPort": 9105, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/etc/pki/tls/metrics-cert", "name": "ovn-node-metrics-cert", "readOnly": true } ] }, { "command": [ "/bin/bash", "-c", "set -xem\nif [[ -f /env/_master ]]; then\n set -o allexport\n source /env/_master\n set +o allexport\nfi\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\n\ntrap quit-ovn-northd TERM INT\nstart-ovn-northd \"${OVN_LOG_LEVEL}\"\n" ], "env": [ { "name": "OVN_LOG_LEVEL", "value": "info" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3da709f5fb3ceb7e3e06711fd50adad02bb66b858b76ef56f705eba1dc14bc16", "imagePullPolicy": "IfNotPresent", "name": "northd", "resources": { "requests": { "cpu": "10m", "memory": "70Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/etc/ovn", "name": "etc-openvswitch" }, { "mountPath": "/var/log/ovn", "name": "node-log" }, { "mountPath": "/run/ovn/", "name": "run-ovn" }, { "mountPath": "/env", "name": "env-overrides" } ] }, { "command": [ "/bin/bash", "-c", "set -xem\nif [[ -f /env/_master ]]; then\n set -o allexport\n source /env/_master\n set +o allexport\nfi\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\n\ntrap quit-nbdb TERM INT\nstart-nbdb ${OVN_LOG_LEVEL}\n" ], "env": [ { "name": "OVN_LOG_LEVEL", "value": "info" }, { "name": "K8S_NODE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3da709f5fb3ceb7e3e06711fd50adad02bb66b858b76ef56f705eba1dc14bc16", "imagePullPolicy": "IfNotPresent", "lifecycle": { "postStart": { "exec": { "command": [ "/bin/bash", "-c", "set -x\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nnbdb-post-start 10000\n" ] } } }, "name": "nbdb", "readinessProbe": { "exec": { "command": [ "/bin/bash", "-c", "set -xeo pipefail\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\novndb-readiness-probe \"nb\"\n" ] }, "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "10m", "memory": "300Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/etc/ovn/", "name": "etc-openvswitch" }, { "mountPath": "/var/log/ovn", "name": "node-log" }, { "mountPath": "/run/ovn/", "name": "run-ovn" }, { "mountPath": "/env", "name": "env-overrides" } ] }, { "command": [ "/bin/bash", "-c", "set -xem\nif [[ -f /env/_master ]]; then\n set -o allexport\n source /env/_master\n set +o allexport\nfi\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\n\ntrap quit-sbdb TERM INT\nstart-sbdb ${OVN_LOG_LEVEL}\n" ], "env": [ { "name": "OVN_LOG_LEVEL", "value": "info" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3da709f5fb3ceb7e3e06711fd50adad02bb66b858b76ef56f705eba1dc14bc16", "imagePullPolicy": "IfNotPresent", "lifecycle": { "postStart": { "exec": { "command": [ "/bin/bash", "-c", "set -x\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nsbdb-post-start\n" ] } } }, "name": "sbdb", "readinessProbe": { "exec": { "command": [ "/bin/bash", "-c", "set -xeo pipefail\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\novndb-readiness-probe \"sb\"\n" ] }, "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "10m", "memory": "300Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/etc/ovn/", "name": "etc-openvswitch" }, { "mountPath": "/run/ovn/", "name": "run-ovn" }, { "mountPath": "/var/log/ovn", "name": "node-log" }, { "mountPath": "/env", "name": "env-overrides" } ] }, { "command": [ "/bin/bash", "-c", "set -xe\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nstart-ovnkube-node ${OVN_KUBE_LOG_LEVEL} 29103 29105\n" ], "env": [ { "name": "KUBERNETES_SERVICE_PORT", "value": "6443" }, { "name": "KUBERNETES_SERVICE_HOST", "value": "api-int.clusterpool418-bb45f.rhtap.devcluster.openshift.com" }, { "name": "OVN_CONTROLLER_INACTIVITY_PROBE", "value": "180000" }, { "name": "OVN_KUBE_LOG_LEVEL", "value": "4" }, { "name": "K8S_NODE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3da709f5fb3ceb7e3e06711fd50adad02bb66b858b76ef56f705eba1dc14bc16", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "rm", "-f", "/etc/cni/net.d/10-ovn-kubernetes.conf" ] } } }, "name": "ovnkube-controller", "ports": [ { "containerPort": 29105, "name": "ovnmetrics-port", "protocol": "TCP" } ], "readinessProbe": { "exec": { "command": [ "/bin/bash", "-c", "#!/bin/bash\ntest -f /etc/cni/net.d/10-ovn-kubernetes.conf\n" ] }, "failureThreshold": 3, "initialDelaySeconds": 5, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "600Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/var/lib/kubelet", "mountPropagation": "HostToContainer", "name": "host-kubelet", "readOnly": true }, { "mountPath": "/etc/systemd/system", "name": "systemd-units", "readOnly": true }, { "mountPath": "/host", "mountPropagation": "HostToContainer", "name": "host-slash", "readOnly": true }, { "mountPath": "/run/ovn-kubernetes/", "name": "host-run-ovn-kubernetes" }, { "mountPath": "/run/netns", "mountPropagation": "HostToContainer", "name": "host-run-netns", "readOnly": true }, { "mountPath": "/run/systemd/private", "mountPropagation": "HostToContainer", "name": "run-systemd", "readOnly": true, "subPath": "private" }, { "mountPath": "/cni-bin-dir", "name": "host-cni-bin" }, { "mountPath": "/etc/cni/net.d", "name": "host-cni-netd" }, { "mountPath": "/var/lib/cni/networks/ovn-k8s-cni-overlay", "name": "host-var-lib-cni-networks-ovn-kubernetes" }, { "mountPath": "/run/openvswitch", "name": "run-openvswitch" }, { "mountPath": "/var/log/ovnkube/", "name": "etc-openvswitch" }, { "mountPath": "/run/ovn/", "name": "run-ovn" }, { "mountPath": "/etc/openvswitch", "name": "etc-openvswitch" }, { "mountPath": "/etc/ovn/", "name": "etc-openvswitch" }, { "mountPath": "/var/lib/openvswitch", "name": "var-lib-openvswitch" }, { "mountPath": "/run/ovnkube-config/", "name": "ovnkube-config" }, { "mountPath": "/env", "name": "env-overrides" } ] } ], "dnsPolicy": "Default", "hostNetwork": true, "hostPID": true, "initContainers": [ { "command": [ "/bin/bash", "-c", "cat \u003c\u003c EOF \u003e /etc/ovn/kubeconfig\napiVersion: v1\nclusters:\n - cluster:\n certificate-authority: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt\n server: https://api-int.clusterpool418-bb45f.rhtap.devcluster.openshift.com:6443\n name: default-cluster\ncontexts:\n - context:\n cluster: default-cluster\n namespace: default\n user: default-auth\n name: default-context\ncurrent-context: default-context\nkind: Config\npreferences: {}\nusers:\n - name: default-auth\n user:\n client-certificate: /etc/ovn/ovnkube-node-certs/ovnkube-client-current.pem\n client-key: /etc/ovn/ovnkube-node-certs/ovnkube-client-current.pem\nEOF\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3da709f5fb3ceb7e3e06711fd50adad02bb66b858b76ef56f705eba1dc14bc16", "imagePullPolicy": "IfNotPresent", "name": "kubecfg-setup", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/ovn/", "name": "etc-openvswitch" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "ovn-kubernetes-node", "serviceAccountName": "ovn-kubernetes-node", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet", "type": "" }, "name": "host-kubelet" }, { "hostPath": { "path": "/etc/systemd/system", "type": "" }, "name": "systemd-units" }, { "hostPath": { "path": "/", "type": "" }, "name": "host-slash" }, { "hostPath": { "path": "/run/netns", "type": "" }, "name": "host-run-netns" }, { "hostPath": { "path": "/run/systemd", "type": "" }, "name": "run-systemd" }, { "hostPath": { "path": "/var/lib/openvswitch/data", "type": "" }, "name": "var-lib-openvswitch" }, { "hostPath": { "path": "/var/lib/ovn-ic/etc", "type": "" }, "name": "etc-openvswitch" }, { "hostPath": { "path": "/var/run/openvswitch", "type": "" }, "name": "run-openvswitch" }, { "hostPath": { "path": "/var/run/ovn-ic", "type": "" }, "name": "run-ovn" }, { "hostPath": { "path": "/var/log/ovn", "type": "" }, "name": "node-log" }, { "hostPath": { "path": "/dev/log", "type": "" }, "name": "log-socket" }, { "hostPath": { "path": "/run/ovn-kubernetes", "type": "" }, "name": "host-run-ovn-kubernetes" }, { "hostPath": { "path": "/var/lib/cni/bin", "type": "" }, "name": "host-cni-bin" }, { "hostPath": { "path": "/var/run/multus/cni/net.d", "type": "" }, "name": "host-cni-netd" }, { "hostPath": { "path": "/var/lib/cni/networks/ovn-k8s-cni-overlay", "type": "" }, "name": "host-var-lib-cni-networks-ovn-kubernetes" }, { "configMap": { "defaultMode": 420, "name": "ovnkube-config" }, "name": "ovnkube-config" }, { "configMap": { "defaultMode": 420, "name": "env-overrides", "optional": true }, "name": "env-overrides" }, { "name": "ovn-node-metrics-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "ovn-node-metrics-cert" } }, { "configMap": { "defaultMode": 484, "name": "ovnkube-script-lib" }, "name": "ovnkube-script-lib" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 6, "desiredNumberScheduled": 6, "numberAvailable": 6, "numberMisscheduled": 0, "numberReady": 6, "observedGeneration": 2, "updatedNumberScheduled": 6 } } ], "kind": "List", "metadata": { "resourceVersion": "" } }