{ "apiVersion": "v1", "items": [ { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "2", "operator.openshift.io/spec-hash": "1c33c4582ce6cacfb66aff03ac8c075e3bc0a56a51e6c5ebc52a4a9d34d41a93" }, "creationTimestamp": "2026-04-30T12:41:34Z", "generation": 2, "labels": { "app": "klusterlet" }, "name": "klusterlet", "namespace": "open-cluster-management-agent", "resourceVersion": "39352", "uid": "63ad68e4-eee7-4bfc-8774-8188de67a8f3" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "klusterlet" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "klusterlet" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "klusterlet" ] } ] }, "topologyKey": "failure-domain.beta.kubernetes.io/zone" }, "weight": 70 }, { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "klusterlet" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 30 } ] } }, "containers": [ { "args": [ "/registration-operator", "klusterlet" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:38f65ed06100af8f55530fd79ed5064f3839863caec0f610385abeea0e3c1efb", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "klusterlet", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "memory": "2Gi" }, "requests": { "cpu": "50m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmpdir" } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "klusterlet-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "klusterlet", "serviceAccountName": "klusterlet", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/infra", "operator": "Exists" } ], "volumes": [ { "emptyDir": {}, "name": "tmpdir" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-30T12:45:19Z", "lastUpdateTime": "2026-04-30T12:45:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-04-30T12:41:54Z", "lastUpdateTime": "2026-04-30T12:45:39Z", "message": "ReplicaSet \"klusterlet-54bf95fc67\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 2, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "2", "operator.openshift.io/spec-hash": "e9e7ef34afac9d1f5016826bc87046b81b0f406e131298450f96efd0cf7308c7" }, "creationTimestamp": "2026-04-30T12:45:13Z", "generation": 2, "labels": { "app": "klusterlet-agent", "open-cluster-management.io/created-by-klusterlet": "klusterlet" }, "name": "klusterlet-agent", "namespace": "open-cluster-management-agent", "resourceVersion": "39700", "uid": "37739c18-d31c-40c2-a282-f0a8a9abc968" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 3, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "klusterlet-agent" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "klusterlet-agent", "open-cluster-management.io/created-by-klusterlet": "klusterlet" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "klusterlet-agent" ] } ] }, "topologyKey": "failure-domain.beta.kubernetes.io/zone" }, "weight": 70 }, { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "klusterlet-agent" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 30 } ] } }, "containers": [ { "args": [ "/registration-operator", "agent", "--spoke-cluster-name=clusterpool419-klx7c", "--bootstrap-kubeconfig=/spoke/bootstrap/kubeconfig", "--agent-id=776ae0ba-9097-47fe-aef9-183dc58717f0", "--workload-source-driver=kube", "--workload-source-config=/spoke/hub-kubeconfig/kubeconfig", "--kube-api-qps=50", "--kube-api-burst=100", "--reserved-cluster-claim-suffixes=openshift.io,open-cluster-management.io" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:38f65ed06100af8f55530fd79ed5064f3839863caec0f610385abeea0e3c1efb", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "klusterlet-agent", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "2m", "memory": "16Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/spoke/bootstrap", "name": "bootstrap-secret", "readOnly": true }, { "mountPath": "/spoke/hub-kubeconfig", "name": "hub-kubeconfig" }, { "mountPath": "/tmp", "name": "tmpdir" } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "klusterlet-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "klusterlet-work-sa", "serviceAccountName": "klusterlet-work-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/infra", "operator": "Exists" } ], "volumes": [ { "name": "bootstrap-secret", "secret": { "defaultMode": 420, "secretName": "bootstrap-hub-kubeconfig" } }, { "emptyDir": { "medium": "Memory" }, "name": "hub-kubeconfig" }, { "emptyDir": {}, "name": "tmpdir" } ] } } }, "status": { "availableReplicas": 3, "conditions": [ { "lastTransitionTime": "2026-04-30T12:45:35Z", "lastUpdateTime": "2026-04-30T12:45:35Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-04-30T12:45:19Z", "lastUpdateTime": "2026-04-30T12:46:07Z", "message": "ReplicaSet \"klusterlet-agent-566b857766\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 2, "readyReplicas": 3, "replicas": 3, "updatedReplicas": 3 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T13:06:29Z", "generation": 1, "labels": { "app": "openshift-apiserver-operator" }, "name": "openshift-apiserver-operator", "namespace": "openshift-apiserver-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "38051", "uid": "ef3be10c-aec9-4e4b-9290-7d16886d5f27" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "openshift-apiserver-operator" } }, "strategy": { "type": "Recreate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-apiserver-operator" }, "name": "openshift-apiserver-operator" }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml" ], "command": [ "cluster-openshift-apiserver-operator", "operator" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:51a7456475ed86a46e7884338dc99bdf8c5eb6b9f834e9004cbf5d1bf2afc1c6" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:06df05fe9fd9f95c4cf4a529ce0eaed545661e117829d2e9eaf08c2198f7cdf5" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.19.21" }, { "name": "OPERAND_IMAGE_VERSION", "value": "4.19.21" }, { "name": "KUBE_APISERVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:15b529c316614d5d837222e7e8fd5cc44b43ab4d8b8cf1cab9cc238757db3a9d" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:06df05fe9fd9f95c4cf4a529ce0eaed545661e117829d2e9eaf08c2198f7cdf5", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-apiserver-operator", "serviceAccountName": "openshift-apiserver-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "openshift-apiserver-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "openshift-apiserver-operator-config" }, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:06:29Z", "lastUpdateTime": "2026-04-28T13:09:44Z", "message": "ReplicaSet \"openshift-apiserver-operator-69b97fbb59\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:22Z", "lastUpdateTime": "2026-04-30T12:45:22Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "8", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:06df05fe9fd9f95c4cf4a529ce0eaed545661e117829d2e9eaf08c2198f7cdf5", "openshiftapiservers.operator.openshift.io/pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:51a7456475ed86a46e7884338dc99bdf8c5eb6b9f834e9004cbf5d1bf2afc1c6", "operator.openshift.io/dep-desired.generation": "7", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "odXAoA==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "S1SBAw==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "9Ot5hw==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "9LV_Rg==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "a6fd36f7b311d655fbf8a91a94aa39229aebd77827c5407c489df0259f2181b9" }, "creationTimestamp": "2026-04-28T13:09:59Z", "generation": 8, "labels": { "apiserver": "true", "app": "openshift-apiserver", "revision": "1" }, "name": "apiserver", "namespace": "openshift-apiserver", "resourceVersion": "39324", "uid": "71a04ca5-7c6e-4ffa-b254-981e27e5082a" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 3, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a" } }, "strategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-desired.generation": "7", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "odXAoA==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "S1SBAw==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "9Ot5hw==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "9LV_Rg==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "revision": "1" }, "name": "openshift-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec openshift-apiserver start --config=/var/run/configmaps/config/config.yaml -v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:51a7456475ed86a46e7884338dc99bdf8c5eb6b9f834e9004cbf5d1bf2afc1c6", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "openshift-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/", "name": "node-pullsecrets", "readOnly": true }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/audit", "name": "audit" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/image-import-ca", "name": "image-import-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] }, { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)", "--v", "2" ], "command": [ "cluster-kube-apiserver-operator", "check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:15b529c316614d5d837222e7e8fd5cc44b43ab4d8b8cf1cab9cc238757db3a9d", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/openshift-apiserver \u0026\u0026 touch /var/log/openshift-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/openshift-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:51a7456475ed86a46e7884338dc99bdf8c5eb6b9f834e9004cbf5d1bf2afc1c6", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-apiserver-sa", "serviceAccountName": "openshift-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/", "type": "Directory" }, "name": "node-pullsecrets" }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit" }, { "name": "etcd-client", "secret": { "defaultMode": 384, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "configMap": { "defaultMode": 420, "name": "image-import-ca", "optional": true }, "name": "image-import-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 384, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 384, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/openshift-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "availableReplicas": 3, "conditions": [ { "lastTransitionTime": "2026-04-28T13:09:59Z", "lastUpdateTime": "2026-04-28T13:27:59Z", "message": "ReplicaSet \"apiserver-7b6f6669cb\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:28Z", "lastUpdateTime": "2026-04-30T12:45:28Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 8, "readyReplicas": 3, "replicas": 3, "updatedReplicas": 3 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "config.openshift.io/inject-proxy": "authentication-operator", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T13:06:30Z", "generation": 1, "labels": { "app": "authentication-operator" }, "name": "authentication-operator", "namespace": "openshift-authentication-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "37628", "uid": "93ad0788-28e4-42cd-80f1-2ca6148439ad" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "authentication-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "anyuid", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "authentication-operator" }, "name": "authentication-operator" }, "spec": { "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/ca-bundle.crt ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/ca-bundle.crt /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec authentication-operator operator --config=/var/run/configmaps/config/operator-config.yaml --v=2 --terminate-on-files=/var/run/configmaps/trusted-ca-bundle/ca-bundle.crt --terminate-on-files=/tmp/terminate\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "IMAGE_OAUTH_SERVER", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:523edd890b2948d9921987f90f4076db686d70261c9f12164ec9e5733f064ec5" }, { "name": "IMAGE_OAUTH_APISERVER", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86865210405bf013b8faf3dc5c4f791a0c2f81c49166dc1df669a734646e2291" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.19.21" }, { "name": "OPERAND_OAUTH_SERVER_IMAGE_VERSION", "value": "4.19.21_openshift" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cde6da1d25989db5a7f94b999474e52646dcda7d4fafee6d397eee4f1a5863f4", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "authentication-operator", "resources": { "requests": { "cpu": "20m", "memory": "200Mi" } }, "securityContext": { "readOnlyRootFilesystem": false, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/run/configmaps/service-ca-bundle", "name": "service-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "authentication-operator", "serviceAccountName": "authentication-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 440, "name": "authentication-operator-config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "service-ca-bundle", "optional": true }, "name": "service-ca-bundle" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:06:30Z", "lastUpdateTime": "2026-04-28T13:09:44Z", "message": "ReplicaSet \"authentication-operator-9f44cc54b\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:19Z", "lastUpdateTime": "2026-04-30T12:45:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "5", "operator.openshift.io/rvs-hash": "bs3ms3U40tILFOxLr05r8QnbWsSr2SOMrIU8extsaV-HKz0JNfrszQFwyleWPadRKPhv3lpUpTW10_TkKWfKoQ", "operator.openshift.io/spec-hash": "5e0304303658e0d6851d79baf2819d8f4cfc16dc161f57b54f239f7f4d6d25b7" }, "creationTimestamp": "2026-04-28T13:20:27Z", "generation": 5, "labels": { "app": "oauth-openshift" }, "name": "oauth-openshift", "namespace": "openshift-authentication", "resourceVersion": "37734", "uid": "f7a5f9d3-7e30-4d9a-b6f4-120c4c6d5474" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 3, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "oauth-openshift" } }, "strategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/bootstrap-user-exists": "true", "operator.openshift.io/rvs-hash": "bs3ms3U40tILFOxLr05r8QnbWsSr2SOMrIU8extsaV-HKz0JNfrszQFwyleWPadRKPhv3lpUpTW10_TkKWfKoQ", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true" }, "name": "oauth-openshift", "namespace": "openshift-authentication" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-server osinserver \\\n--config=/var/config/system/configmaps/v4-0-config-system-cliconfig/v4-0-config-system-cliconfig \\\n--v=2 \\\n--audit-log-format=json \\\n--audit-log-maxbackup=10 \\\n--audit-log-maxsize=100 \\\n--audit-log-path=/var/log/oauth-server/audit.log \\\n--audit-policy-file=/var/run/configmaps/audit/audit.yaml\n" ], "command": [ "/bin/bash", "-ec" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:523edd890b2948d9921987f90f4076db686d70261c9f12164ec9e5733f064ec5", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "oauth-openshift", "ports": [ { "containerPort": 6443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/log/oauth-server", "name": "audit-dir" }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-session", "name": "v4-0-config-system-session", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-cliconfig", "name": "v4-0-config-system-cliconfig", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-serving-cert", "name": "v4-0-config-system-serving-cert", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-service-ca", "name": "v4-0-config-system-service-ca", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-router-certs", "name": "v4-0-config-system-router-certs", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-ocp-branding-template", "name": "v4-0-config-system-ocp-branding-template", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-login", "name": "v4-0-config-user-template-login", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-provider-selection", "name": "v4-0-config-user-template-provider-selection", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-error", "name": "v4-0-config-user-template-error", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle", "name": "v4-0-config-system-trusted-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-openshift", "serviceAccountName": "oauth-openshift", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit" }, "name": "audit-policies" }, { "hostPath": { "path": "/var/log/oauth-server", "type": "" }, "name": "audit-dir" }, { "name": "v4-0-config-system-session", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-session" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-cliconfig" }, "name": "v4-0-config-system-cliconfig" }, { "name": "v4-0-config-system-serving-cert", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-service-ca" }, "name": "v4-0-config-system-service-ca" }, { "name": "v4-0-config-system-router-certs", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-router-certs" } }, { "name": "v4-0-config-system-ocp-branding-template", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-ocp-branding-template" } }, { "name": "v4-0-config-user-template-login", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-login" } }, { "name": "v4-0-config-user-template-provider-selection", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-provider-selection" } }, { "name": "v4-0-config-user-template-error", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-error" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-trusted-ca-bundle", "optional": true }, "name": "v4-0-config-system-trusted-ca-bundle" } ] } } }, "status": { "availableReplicas": 3, "conditions": [ { "lastTransitionTime": "2026-04-28T13:20:28Z", "lastUpdateTime": "2026-04-28T13:22:30Z", "message": "ReplicaSet \"oauth-openshift-5c8444bf97\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:20Z", "lastUpdateTime": "2026-04-30T12:45:20Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 5, "readyReplicas": 3, "replicas": 3, "updatedReplicas": 3 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/default-logs-container": "manager", "operator.openshift.io/spec-hash": "9baa52653bf3cf7a1fe33cca92fefe36b0d38066ebe50c7e91eebeed0566c5cb" }, "creationTimestamp": "2026-04-28T13:10:17Z", "generation": 1, "labels": { "control-plane": "catalogd-controller-manager" }, "name": "catalogd-controller-manager", "namespace": "openshift-catalogd", "resourceVersion": "37690", "uid": "e71f6247-839f-4b62-9d9f-587f84d948fa" }, "spec": { "minReadySeconds": 5, "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "control-plane": "catalogd-controller-manager" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager", "openshift.io/required-scc": "privileged", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "control-plane": "catalogd-controller-manager" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/arch", "operator": "In", "values": [ "amd64", "arm64", "ppc64le", "s390x" ] }, { "key": "kubernetes.io/os", "operator": "In", "values": [ "linux" ] } ] } ] } } }, "containers": [ { "args": [ "--leader-elect", "--metrics-bind-address=:7443", "--external-address=catalogd-service.openshift-catalogd.svc", "--tls-cert=/var/certs/tls.crt", "--tls-key=/var/certs/tls.key", "--v=4", "--global-pull-secret=openshift-config/pull-secret" ], "command": [ "./catalogd" ], "env": [ { "name": "SSL_CERT_DIR", "value": "/var/ca-certs" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4b8b8518ae8bd9a710b9b8d3dd2fdd1c14f1adff82c5d3ea156c1d7c60b2bc7b", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/cache/", "name": "cache" }, { "mountPath": "/var/certs", "name": "catalogserver-certs" }, { "mountPath": "/var/ca-certs", "name": "ca-certs", "readOnly": true }, { "mountPath": "/etc/containers", "name": "etc-containers", "readOnly": true }, { "mountPath": "/etc/docker", "name": "etc-docker", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seLinuxOptions": { "type": "spc_t" }, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "catalogd-controller-manager", "serviceAccountName": "catalogd-controller-manager", "terminationGracePeriodSeconds": 10, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "emptyDir": {}, "name": "cache" }, { "name": "catalogserver-certs", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "optional": false, "secretName": "catalogserver-cert" } }, { "name": "ca-certs", "projected": { "defaultMode": 420, "sources": [ { "configMap": { "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "catalogd-trusted-ca-bundle", "optional": false } }, { "configMap": { "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "openshift-service-ca.crt", "optional": false } } ] } }, { "hostPath": { "path": "/etc/containers", "type": "Directory" }, "name": "etc-containers" }, { "hostPath": { "path": "/etc/docker", "type": "Directory" }, "name": "etc-docker" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:10:17Z", "lastUpdateTime": "2026-04-28T13:10:37Z", "message": "ReplicaSet \"catalogd-controller-manager-667578656c\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:19Z", "lastUpdateTime": "2026-04-30T12:45:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "capability.openshift.io/name": "CloudControllerManager", "deployment.kubernetes.io/revision": "2", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T13:07:34Z", "generation": 2, "labels": { "k8s-app": "cloud-manager-operator" }, "name": "cluster-cloud-controller-manager-operator", "namespace": "openshift-cloud-controller-manager-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "34142", "uid": "e5364298-6c02-407c-90eb-94c82bb050b3" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "k8s-app": "cloud-manager-operator" } }, "strategy": { "type": "Recreate" }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "cluster-cloud-controller-manager", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "cloud-manager-operator" } }, "spec": { "containers": [ { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -o allexport\nif [[ -f /etc/kubernetes/apiserver-url.env ]]; then\n source /etc/kubernetes/apiserver-url.env\nelse\n URL_ONLY_KUBECONFIG=/etc/kubernetes/kubeconfig\nfi\nexec /cluster-controller-manager-operator \\\n--leader-elect=true \\\n--leader-elect-lease-duration=137s \\\n--leader-elect-renew-deadline=107s \\\n--leader-elect-retry-period=26s \\\n--leader-elect-resource-namespace=openshift-cloud-controller-manager-operator \\\n\"--images-json=/etc/cloud-controller-manager-config/images.json\" \\\n--metrics-bind-address=127.0.0.1:9257 \\\n--health-addr=127.0.0.1:9259\n" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.19.21" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8714fb5e02b263466c0672e07d6875b39db6b45514cc048442c518086cc890c4", "imagePullPolicy": "IfNotPresent", "name": "cluster-cloud-controller-manager", "ports": [ { "containerPort": 9257, "hostPort": 9257, "name": "metrics", "protocol": "TCP" }, { "containerPort": 9259, "hostPort": 9259, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/cloud-controller-manager-config/", "name": "images" }, { "mountPath": "/etc/kubernetes", "name": "host-etc-kube", "readOnly": true } ] }, { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -o allexport\nif [[ -f /etc/kubernetes/apiserver-url.env ]]; then\n source /etc/kubernetes/apiserver-url.env\nelse\n URL_ONLY_KUBECONFIG=/etc/kubernetes/kubeconfig\nfi\nexec /config-sync-controllers \\\n--leader-elect=true \\\n--leader-elect-lease-duration=137s \\\n--leader-elect-renew-deadline=107s \\\n--leader-elect-retry-period=26s \\\n--leader-elect-resource-namespace=openshift-cloud-controller-manager-operator \\\n--health-addr=127.0.0.1:9260\n" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.19.21" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8714fb5e02b263466c0672e07d6875b39db6b45514cc048442c518086cc890c4", "imagePullPolicy": "IfNotPresent", "name": "config-sync-controllers", "ports": [ { "containerPort": 9260, "hostPort": 9260, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "25Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kubernetes", "name": "host-etc-kube", "readOnly": true } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9258", "--upstream=http://127.0.0.1:9257/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9258, "hostPort": 9258, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "auth-proxy-config" }, { "mountPath": "/etc/tls/private", "name": "cloud-controller-manager-operator-tls" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cluster-cloud-controller-manager", "serviceAccountName": "cluster-cloud-controller-manager", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node.cloudprovider.kubernetes.io/uninitialized", "value": "true" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoSchedule", "key": "node.cloudprovider.kubernetes.io/uninitialized", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/not-ready", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "cloud-controller-manager-images" }, "name": "images" }, { "hostPath": { "path": "/etc/kubernetes", "type": "Directory" }, "name": "host-etc-kube" }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "auth-proxy-config" }, { "name": "cloud-controller-manager-operator-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "cloud-controller-manager-operator-tls" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:07:34Z", "lastUpdateTime": "2026-04-28T13:08:50Z", "message": "ReplicaSet \"cluster-cloud-controller-manager-operator-7447c86754\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:44:13Z", "lastUpdateTime": "2026-04-30T12:44:13Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 2, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "operator.openshift.io/generation": "1", "operator.openshift.io/spec-hash": "44fa494034e11e3e59b85bda241cd5111f6e46f9902f917d9d9597bb0c8a68ed" }, "creationTimestamp": "2026-04-28T13:08:01Z", "generation": 1, "labels": { "infrastructure.openshift.io/cloud-controller-manager": "AWS", "k8s-app": "aws-cloud-controller-manager" }, "name": "aws-cloud-controller-manager", "namespace": "openshift-cloud-controller-manager", "resourceVersion": "3504", "uid": "483effcd-004a-473f-93a2-3921146d86f4" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "infrastructure.openshift.io/cloud-controller-manager": "AWS", "k8s-app": "aws-cloud-controller-manager" } }, "strategy": { "type": "Recreate" }, "template": { "metadata": { "annotations": { "operator.openshift.io/config-hash": "c125d8fd44d93e466523cf235ca862bb9b2a57db4c66f3e4eb50f8379feca59b", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "infrastructure.openshift.io/cloud-controller-manager": "AWS", "k8s-app": "aws-cloud-controller-manager" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "infrastructure.openshift.io/cloud-controller-manager": "AWS", "k8s-app": "aws-cloud-controller-manager" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -o allexport\nif [[ -f /etc/kubernetes/apiserver-url.env ]]; then\n source /etc/kubernetes/apiserver-url.env\nfi\nexec /bin/aws-cloud-controller-manager \\\n--cloud-config=$(CLOUD_CONFIG) \\\n--cloud-provider=aws \\\n--use-service-account-credentials=true \\\n--configure-cloud-routes=false \\\n--leader-elect=true \\\n--leader-elect-lease-duration=137s \\\n--leader-elect-renew-deadline=107s \\\n--leader-elect-retry-period=26s \\\n--leader-elect-resource-namespace=openshift-cloud-controller-manager \\\n--secure-port=0 \\\n-v=2\n" ], "env": [ { "name": "CLOUD_CONFIG", "value": "/etc/kubernetes-cloud-config/cloud.conf" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:79748ab06b158957292eec94cf71aefc97384dce4a202604b3e63d36f3561c51", "imagePullPolicy": "IfNotPresent", "name": "cloud-controller-manager", "ports": [ { "containerPort": 10258, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "200m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kubernetes", "name": "host-etc-kube", "readOnly": true }, { "mountPath": "/etc/kubernetes-cloud-config", "name": "config-accm", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cloud-controller-manager", "serviceAccountName": "cloud-controller-manager", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoSchedule", "key": "node.cloudprovider.kubernetes.io/uninitialized", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/not-ready", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "cloud.conf", "path": "cloud.conf" } ], "name": "cloud-conf" }, "name": "config-accm" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "ccm-trusted-ca" }, "name": "trusted-ca" }, { "hostPath": { "path": "/etc/kubernetes", "type": "Directory" }, "name": "host-etc-kube" } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-04-28T13:08:20Z", "lastUpdateTime": "2026-04-28T13:08:20Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-04-28T13:08:01Z", "lastUpdateTime": "2026-04-28T13:08:20Z", "message": "ReplicaSet \"aws-cloud-controller-manager-7c7765f445\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "config.openshift.io/inject-proxy": "cloud-credential-operator", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T13:07:31Z", "generation": 1, "name": "cloud-credential-operator", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "37883", "uid": "c929b042-8351-49c4-a2b9-67ec3e3d1261" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 4, "selector": { "matchLabels": { "control-plane": "controller-manager", "controller-tools.k8s.io": "1.0" } }, "strategy": { "type": "Recreate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "cloud-credential-operator", "control-plane": "controller-manager", "controller-tools.k8s.io": "1.0" } }, "spec": { "containers": [ { "args": [ "--secure-listen-address=0.0.0.0:8443", "--upstream=http://127.0.0.1:2112/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "cloud-credential-operator-serving-cert" } ] }, { "command": [ "/usr/bin/cloud-credential-operator", "operator" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.19.21" }, { "name": "AZURE_POD_IDENTITY_WEBHOOK_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:105bf25c43f19208143561b7369b26eda77aeeb94bda5eb004406b6ba2ce8bd9" }, { "name": "AWS_POD_IDENTITY_WEBHOOK_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7f93442ed2311816260995007214c38346a1939c50592f82dc9462fd03912d30" }, { "name": "GCP_POD_IDENTITY_WEBHOOK_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a5d900ec3c1636c18c9e4753af9dd827505920195d9534d08e71a048f1108906" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a0d25f6100f6e1f53577124103e5ce44c318360ee506f11d00b275cb7fe767e0", "imagePullPolicy": "IfNotPresent", "name": "cloud-credential-operator", "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "cco-trusted-ca" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cloud-credential-operator", "serviceAccountName": "cloud-credential-operator", "terminationGracePeriodSeconds": 10, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "cco-trusted-ca", "optional": true }, "name": "cco-trusted-ca" }, { "name": "cloud-credential-operator-serving-cert", "secret": { "defaultMode": 420, "secretName": "cloud-credential-operator-serving-cert" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:07:31Z", "lastUpdateTime": "2026-04-28T13:10:24Z", "message": "ReplicaSet \"cloud-credential-operator-7f7f4c68d6\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:21Z", "lastUpdateTime": "2026-04-30T12:45:21Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "83168a2e86803a8ddf14298ca8274a209c159ea0c583fb1d224eaa03c25d11c3" }, "creationTimestamp": "2026-04-28T13:19:57Z", "generation": 1, "name": "pod-identity-webhook", "namespace": "openshift-cloud-credential-operator", "resourceVersion": "37622", "uid": "c63a7fd8-1043-4dc1-b258-4784a7649725" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "pod-identity-webhook" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "pod-identity-webhook" } }, "spec": { "containers": [ { "command": [ "/usr/bin/aws-pod-identity-webhook", "--aws-default-region=us-east-1", "--in-cluster=false", "--tls-cert=/var/run/app/certs/tls.crt", "--tls-key=/var/run/app/certs/tls.key", "--namespace=openshift-cloud-credential-operator", "--port=9443", "--service-name=pod-identity-webhook", "--annotation-prefix=eks.amazonaws.com", "--token-audience=sts.amazonaws.com", "--logtostderr" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7f93442ed2311816260995007214c38346a1939c50592f82dc9462fd03912d30", "imagePullPolicy": "IfNotPresent", "name": "pod-identity-webhook", "resources": { "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/app/certs", "name": "webhook-certs" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pod-identity-webhook", "serviceAccountName": "pod-identity-webhook", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "webhook-certs", "secret": { "defaultMode": 420, "secretName": "pod-identity-webhook" } } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-04-28T13:19:57Z", "lastUpdateTime": "2026-04-28T13:20:01Z", "message": "ReplicaSet \"pod-identity-webhook-585965bc87\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:19Z", "lastUpdateTime": "2026-04-30T12:45:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "kubernetes.io/description": "This deployment launches the cloud network config controller which manages cloud-level network configurations\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.19.21" }, "creationTimestamp": "2026-04-28T13:08:28Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "stand-alone" }, "name": "cloud-network-config-controller", "namespace": "openshift-cloud-network-config-controller", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "a4417b55-69e6-439e-881a-2de94059b2e9" } ], "resourceVersion": "37727", "uid": "60c54f4d-b3a0-47b4-8755-a268ff42c7e7" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "cloud-network-config-controller" } }, "strategy": { "type": "Recreate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "cloud-network-config-controller", "component": "network", "openshift.io/component": "network", "type": "infra" }, "name": "cloud-network-config-controller" }, "spec": { "containers": [ { "args": [ "-platform-type", "AWS", "-platform-region=us-east-1", "-platform-api-url=", "-platform-aws-ca-override=", "-platform-azure-environment=", "-secret-name", "cloud-credentials" ], "command": [ "/usr/bin/cloud-network-config-controller" ], "env": [ { "name": "CONTROLLER_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "CONTROLLER_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "RELEASE_VERSION", "value": "4.19.21" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a79651492129358ffd9aa58108dc6eb477a3835b70d6d46b8cbd729e5b5141eb", "imagePullPolicy": "IfNotPresent", "name": "controller", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/secret/cloudprovider", "name": "cloud-provider-secret", "readOnly": true }, { "mountPath": "/kube-cloud-config", "name": "kube-cloud-config", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cloud-network-config-controller", "serviceAccountName": "cloud-network-config-controller", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "cloud-provider-secret", "secret": { "defaultMode": 420, "secretName": "cloud-credentials" } }, { "configMap": { "defaultMode": 420, "name": "kube-cloud-config" }, "name": "kube-cloud-config" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca" }, "name": "trusted-ca" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:08:28Z", "lastUpdateTime": "2026-04-28T13:09:44Z", "message": "ReplicaSet \"cloud-network-config-controller-796fd85d97\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:20Z", "lastUpdateTime": "2026-04-30T12:45:20Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "config.openshift.io/inject-proxy": "csi-driver", "config.openshift.io/inject-proxy-cabundle": "csi-driver", "deployment.kubernetes.io/revision": "4", "operator.openshift.io/dep-5d02b1dbbfd3b1124537c2229e410cd2adfa2": "b3aTLg==", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "VtU2YQ==", "operator.openshift.io/dep-b5233af8ffad2a3df77758ca90fc5d97e8259": "T_dYmQ==", "operator.openshift.io/spec-hash": "7aae58284dee4c5b1e05e73021ae22da223652c64d7bba355b5c26cb30c6cc83" }, "creationTimestamp": "2026-04-28T13:10:31Z", "generation": 4, "name": "aws-ebs-csi-driver-controller", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "37731", "uid": "cd8d8218-7048-4a5c-abb7-6e958d14ce2b" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller" } }, "strategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict-local-volumes": "aws-auth,aws-keys,bound-sa-token,socket-dir", "openshift.io/required-scc": "restricted-v2", "operator.openshift.io/dep-5d02b1dbbfd3b1124537c2229e410cd2adfa2": "b3aTLg==", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "VtU2YQ==", "operator.openshift.io/dep-b5233af8ffad2a3df77758ca90fc5d97e8259": "T_dYmQ==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "aws-ebs-csi-driver-controller" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "controller", "--endpoint=$(CSI_ENDPOINT)", "--k8s-tag-cluster-id=clusterpool419-klx7c-pwtlg", "--logtostderr", "--http-endpoint=localhost:8201", "--v=2", "--batching=true" ], "env": [ { "name": "CSI_ENDPOINT", "value": "unix:///var/lib/csi/sockets/pluginproxy/csi.sock" }, { "name": "AWS_SDK_LOAD_CONFIG", "value": "1" }, { "name": "AWS_CONFIG_FILE", "value": "/var/run/aws/auth/credentials" }, { "name": "AWS_REGION", "value": "us-east-1" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f2807c0412376cb2404cdef50b8bed2b35c01225561f1fbba24a5d611c9ed6df", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "csi-driver", "ports": [ { "containerPort": 10301, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true }, { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "non-standard-root-system-trust-ca-bundle", "readOnly": true } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9201", "--upstream=http://127.0.0.1:8201/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-8201", "ports": [ { "containerPort": 9201, "name": "driver-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8202", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--default-fstype=ext4", "--feature-gates=Topology=true", "--extra-create-metadata=true", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b54a79b0c5a39a23dc8a1809fffaa376a474945df364a30077112eab87d558dd", "imagePullPolicy": "IfNotPresent", "name": "csi-provisioner", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9202", "--upstream=http://127.0.0.1:8202/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "provisioner-kube-rbac-proxy", "ports": [ { "containerPort": 9202, "name": "provisioner-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8203", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:33c42e88b72c0ea9d58fed8db8cb2175e56399c3d2e988bcbb669bec3de291de", "imagePullPolicy": "IfNotPresent", "name": "csi-attacher", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9203", "--upstream=http://127.0.0.1:8203/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "attacher-kube-rbac-proxy", "ports": [ { "containerPort": 9203, "name": "attacher-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8204", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--workers=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a9d0a3f14e303f80c1e0b81cf38af700d1e038b875834bbc6d1a31ad60b16d8f", "imagePullPolicy": "IfNotPresent", "name": "csi-resizer", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9204", "--upstream=http://127.0.0.1:8204/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "resizer-kube-rbac-proxy", "ports": [ { "containerPort": 9204, "name": "resizer-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--metrics-address=localhost:8205", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--extra-create-metadata", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f5d39776894fdb35e4119a592bb9b2c754a834f542712fd7f57c54d6eceeca29", "imagePullPolicy": "IfNotPresent", "name": "csi-snapshotter", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9205", "--upstream=http://127.0.0.1:8205/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "snapshotter-kube-rbac-proxy", "ports": [ { "containerPort": 9205, "name": "snapshotter-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/csi/csi.sock", "--health-port=10301", "--v=2", "--probe-timeout=3s" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13aa61d56d283901b113a49524eb57e447eb541b56d3666f8186fd807cc3c180", "imagePullPolicy": "IfNotPresent", "name": "csi-liveness-probe", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/csi", "name": "socket-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "# Define file path variables\nCREDENTIALS_FILE=/var/run/aws/keys/credentials\nAUTH_CREDENTIALS_FILE=/var/run/aws/auth/credentials\nAWS_ACCESS_KEY_ID_FILE=/var/run/aws/keys/aws_access_key_id\nAWS_SECRET_ACCESS_KEY_FILE=/var/run/aws/keys/aws_secret_access_key\n\n# If credentials key exists in ebs-cloud-credentials secret, then use it as the auth file\nif [ -e \"$CREDENTIALS_FILE\" ]; then\n cp \"$CREDENTIALS_FILE\" \"$AUTH_CREDENTIALS_FILE\"\n echo \"Kubernetes Secret already contains credentials file, copied to the right place: $AUTH_CREDENTIALS_FILE\"\n exit 0\nfi\n\n# Otherwise, make sure the access keys are mounted in the pod...\nif [ ! -e \"$AWS_ACCESS_KEY_ID_FILE\" ] || [ ! -e \"$AWS_SECRET_ACCESS_KEY_FILE\" ]; then\n echo \"AWS keys not found\"\n exit 1\nfi\n\n# And create an auth file based on those keys\ncat \u003c\u003c-EOF \u003e \"$AUTH_CREDENTIALS_FILE\"\n[default]\naws_access_key_id=$(cat \"$AWS_ACCESS_KEY_ID_FILE\")\naws_secret_access_key=$(cat \"$AWS_SECRET_ACCESS_KEY_FILE\")\nEOF\necho \"Kubernetes Secret does not have credentials file, created a fresh one at $AUTH_CREDENTIALS_FILE\"\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:85ee65ef9fe7ad48c9e15d2b1a1bb9cdd28164ebe933c0202fc265ce0b11427a", "imagePullPolicy": "IfNotPresent", "name": "init-aws-credentials-file", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "aws-ebs-csi-driver-controller-sa", "serviceAccountName": "aws-ebs-csi-driver-controller-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "emptyDir": {}, "name": "socket-dir" }, { "name": "metrics-serving-cert", "secret": { "defaultMode": 420, "secretName": "aws-ebs-csi-driver-controller-metrics-serving-cert" } }, { "name": "aws-keys", "secret": { "defaultMode": 420, "secretName": "ebs-cloud-credentials" } }, { "emptyDir": {}, "name": "aws-auth" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "aws-ebs-csi-driver-trusted-ca-bundle" }, "name": "non-standard-root-system-trust-ca-bundle" } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-04-28T13:10:32Z", "lastUpdateTime": "2026-04-28T13:11:05Z", "message": "ReplicaSet \"aws-ebs-csi-driver-controller-6594776887\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:20Z", "lastUpdateTime": "2026-04-30T12:45:20Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 4, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "config.openshift.io/inject-proxy": "aws-ebs-csi-driver-operator", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "49e74e90bd85a7796c23be8896c5e08a8189332782e8a36470fc94f133730166", "storage.openshift.io/remove-from": "guest" }, "creationTimestamp": "2026-04-28T13:10:25Z", "generation": 1, "name": "aws-ebs-csi-driver-operator", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "35596", "uid": "6a6eabc8-e508-4c60-95bb-924c78d9ec5c" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "name": "aws-ebs-csi-driver-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "aws-ebs-csi-driver-operator" } }, "spec": { "containers": [ { "args": [ "start", "-v=2" ], "env": [ { "name": "DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f2807c0412376cb2404cdef50b8bed2b35c01225561f1fbba24a5d611c9ed6df" }, { "name": "PROVISIONER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b54a79b0c5a39a23dc8a1809fffaa376a474945df364a30077112eab87d558dd" }, { "name": "ATTACHER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:33c42e88b72c0ea9d58fed8db8cb2175e56399c3d2e988bcbb669bec3de291de" }, { "name": "RESIZER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a9d0a3f14e303f80c1e0b81cf38af700d1e038b875834bbc6d1a31ad60b16d8f" }, { "name": "SNAPSHOTTER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f5d39776894fdb35e4119a592bb9b2c754a834f542712fd7f57c54d6eceeca29" }, { "name": "NODE_DRIVER_REGISTRAR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c4a2626cc9c4903a32e67a6fa68b874fb5e67085126030389a8a3210bf766de7" }, { "name": "LIVENESS_PROBE_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13aa61d56d283901b113a49524eb57e447eb541b56d3666f8186fd807cc3c180" }, { "name": "KUBE_RBAC_PROXY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec" }, { "name": "TOOLS_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:85ee65ef9fe7ad48c9e15d2b1a1bb9cdd28164ebe933c0202fc265ce0b11427a" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.19.21" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:aa4e3b7674424cb71fe2e6bc73a4b922f9877717b68aa3bbea439c1f3744cf84", "imagePullPolicy": "IfNotPresent", "name": "aws-ebs-csi-driver-operator", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "aws-ebs-csi-driver-operator", "serviceAccountName": "aws-ebs-csi-driver-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "emptyDir": { "medium": "Memory" }, "name": "tmp" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:10:25Z", "lastUpdateTime": "2026-04-28T13:10:31Z", "message": "ReplicaSet \"aws-ebs-csi-driver-operator-74bfb7c475\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:44:20Z", "lastUpdateTime": "2026-04-30T12:44:20Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "2", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true", "kubectl.kubernetes.io/default-container": "machine-approver-controller" }, "creationTimestamp": "2026-04-28T13:07:28Z", "generation": 2, "labels": { "app": "machine-approver", "machine-approver": "true" }, "name": "machine-approver", "namespace": "openshift-cluster-machine-approver", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "7927", "uid": "ce23b42b-f330-4730-aef6-e3705aaef7ad" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "machine-approver" } }, "strategy": { "type": "Recreate" }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "machine-approver" }, "name": "machine-approver" }, "spec": { "containers": [ { "args": [ "--secure-listen-address=0.0.0.0:9192", "--upstream=http://127.0.0.1:9191/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9192, "hostPort": 9192, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "auth-proxy-config" }, { "mountPath": "/etc/tls/private", "name": "machine-approver-tls" } ] }, { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2", "--logtostderr", "--leader-elect=true", "--leader-elect-lease-duration=137s", "--leader-elect-renew-deadline=107s", "--leader-elect-retry-period=26s", "--leader-elect-resource-namespace=openshift-cluster-machine-approver", "--api-group-version=machine.openshift.io/v1beta1", "--max-concurrent-reconciles=10" ], "command": [ "/usr/bin/machine-approver" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.19.21" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:682927a9d259030c249ebe0eec6b5f197e07268fce4da2d2169f678ce613e155", "imagePullPolicy": "IfNotPresent", "name": "machine-approver-controller", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "machine-approver-sa", "serviceAccountName": "machine-approver-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "auth-proxy-config" }, { "name": "machine-approver-tls", "secret": { "defaultMode": 420, "secretName": "machine-approver-tls" } }, { "configMap": { "defaultMode": 440, "name": "machine-approver-config", "optional": true }, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:10:23Z", "lastUpdateTime": "2026-04-28T13:10:23Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-04-28T13:07:28Z", "lastUpdateTime": "2026-04-28T13:10:23Z", "message": "ReplicaSet \"machine-approver-685ff4947b\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 2, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "capability.openshift.io/name": "NodeTuning", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T13:06:39Z", "generation": 1, "name": "cluster-node-tuning-operator", "namespace": "openshift-cluster-node-tuning-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "37728", "uid": "91148cd2-8511-4564-b149-da3f5a4eea17" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "name": "cluster-node-tuning-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "anyuid", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "cluster-node-tuning-operator" } }, "spec": { "containers": [ { "args": [ "-v=0" ], "command": [ "cluster-node-tuning-operator" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.19.21" }, { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "RESYNC_PERIOD", "value": "600" }, { "name": "CLUSTER_NODE_TUNED_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2d6ca5a0ed404e18a79745d4c6e70b1f0242530c96f55500b8ec45b6f5ac3a31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2d6ca5a0ed404e18a79745d4c6e70b1f0242530c96f55500b8ec45b6f5ac3a31", "imagePullPolicy": "IfNotPresent", "name": "cluster-node-tuning-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/secrets", "name": "node-tuning-operator-tls" }, { "mountPath": "/var/run/configmaps/trusted-ca/", "name": "trusted-ca" }, { "mountPath": "/apiserver.local.config/certificates", "name": "apiservice-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 499 }, "serviceAccount": "cluster-node-tuning-operator", "serviceAccountName": "cluster-node-tuning-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "node-tuning-operator-tls", "secret": { "defaultMode": 420, "secretName": "node-tuning-operator-tls" } }, { "name": "apiservice-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "apiserver.crt" }, { "key": "tls.key", "path": "apiserver.key" } ], "secretName": "performance-addon-operator-webhook-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:06:39Z", "lastUpdateTime": "2026-04-28T13:10:24Z", "message": "ReplicaSet \"cluster-node-tuning-operator-7b45df9d7\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:20Z", "lastUpdateTime": "2026-04-30T12:45:20Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "capability.openshift.io/name": "OperatorLifecycleManagerV1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T13:06:25Z", "generation": 1, "name": "cluster-olm-operator", "namespace": "openshift-cluster-olm-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "37762", "uid": "4030126d-a6c7-4ca1-9c00-3b6acbe38422" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "name": "cluster-olm-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "cluster-olm-operator" } }, "spec": { "containers": [ { "args": [ "start" ], "command": [ "/cluster-olm-operator" ], "env": [ { "name": "OPERATOR_NAME", "value": "cluster-olm-operator" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.19.21" }, { "name": "KUBE_RBAC_PROXY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec" }, { "name": "CATALOGD_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4b8b8518ae8bd9a710b9b8d3dd2fdd1c14f1adff82c5d3ea156c1d7c60b2bc7b" }, { "name": "OPERATOR_CONTROLLER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:51d56ae5a3f6e3307b23225c0b09f5e081f6dcfad0fee043df20d730c138f399" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3240760b4da134233a91d401caec1b1a58d6e84164b618071dd9a9eca6b52f8e", "imagePullPolicy": "IfNotPresent", "name": "cluster-olm-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/serving-cert", "name": "cluster-olm-operator-serving-cert" }, { "mountPath": "/operand-assets", "name": "operand-assets" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "-c", "cp -a /openshift/manifests /operand-assets/catalogd" ], "command": [ "/bin/sh" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4b8b8518ae8bd9a710b9b8d3dd2fdd1c14f1adff82c5d3ea156c1d7c60b2bc7b", "imagePullPolicy": "IfNotPresent", "name": "copy-catalogd-manifests", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/operand-assets", "name": "operand-assets" } ] }, { "args": [ "-c", "cp -a /openshift/manifests /operand-assets/operator-controller" ], "command": [ "/bin/sh" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:51d56ae5a3f6e3307b23225c0b09f5e081f6dcfad0fee043df20d730c138f399", "imagePullPolicy": "IfNotPresent", "name": "copy-operator-controller-manifests", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/operand-assets", "name": "operand-assets" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cluster-olm-operator", "serviceAccountName": "cluster-olm-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "cluster-olm-operator-serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "cluster-olm-operator-serving-cert" } }, { "emptyDir": {}, "name": "operand-assets" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:06:25Z", "lastUpdateTime": "2026-04-28T13:10:06Z", "message": "ReplicaSet \"cluster-olm-operator-57cd64f57b\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:20Z", "lastUpdateTime": "2026-04-30T12:45:20Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T13:10:33Z", "generation": 1, "name": "cluster-samples-operator", "namespace": "openshift-cluster-samples-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "37627", "uid": "360abfa9-3b51-4ce0-835f-428ea8e460fa" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "name": "cluster-samples-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "cluster-samples-operator" } }, "spec": { "containers": [ { "command": [ "cluster-samples-operator" ], "env": [ { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "OPERATOR_NAME", "value": "cluster-samples-operator" }, { "name": "RELEASE_VERSION", "value": "4.19.21" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:af401dd0fec52822b482af96d67f5fa0935cfd20349c8b9347c35cce7ee4938e", "imagePullPolicy": "IfNotPresent", "name": "cluster-samples-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/secrets", "name": "samples-operator-tls" } ] }, { "args": [ "--namespace=openshift-cluster-samples-operator", "--process-name=cluster-samples-operator", "--termination-grace-period=30s", "--files=/etc/secrets/tls.crt,/etc/secrets/tls.key" ], "command": [ "cluster-samples-operator-watch", "file-watcher-watchdog" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:af401dd0fec52822b482af96d67f5fa0935cfd20349c8b9347c35cce7ee4938e", "imagePullPolicy": "IfNotPresent", "name": "cluster-samples-operator-watch", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cluster-samples-operator", "serviceAccountName": "cluster-samples-operator", "shareProcessNamespace": true, "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "samples-operator-tls", "secret": { "defaultMode": 420, "secretName": "samples-operator-tls" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:10:33Z", "lastUpdateTime": "2026-04-28T13:10:37Z", "message": "ReplicaSet \"cluster-samples-operator-7b98486898\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:19Z", "lastUpdateTime": "2026-04-30T12:45:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "capability.openshift.io/name": "Storage", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T13:06:44Z", "generation": 1, "name": "cluster-storage-operator", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "38612", "uid": "74a82e16-192c-499e-ada7-ee5cebb98717" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "name": "cluster-storage-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "cluster-storage-operator" } }, "spec": { "containers": [ { "args": [ "start", "-v=2", "--terminate-on-files=/var/run/secrets/serving-cert/tls.crt", "--terminate-on-files=/var/run/secrets/serving-cert/tls.key" ], "command": [ "cluster-storage-operator", "start" ], "env": [ { "name": "OPERATOR_IMAGE_VERSION", "value": "4.19.21" }, { "name": "OPERAND_IMAGE_VERSION", "value": "4.19.21" }, { "name": "AWS_EBS_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:aa4e3b7674424cb71fe2e6bc73a4b922f9877717b68aa3bbea439c1f3744cf84" }, { "name": "AWS_EBS_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f2807c0412376cb2404cdef50b8bed2b35c01225561f1fbba24a5d611c9ed6df" }, { "name": "GCP_PD_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7a58aca41b36fc340e9d9496cbe1d944e746b12a661bfdbb4614bf0477277417" }, { "name": "GCP_PD_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a762c716d81c7a92830c6ae392acad45520c7ec68bd68e6a19d8cdb07f98609b" }, { "name": "OPENSTACK_CINDER_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b73908bc86b5001593019d0ee10007f0e437b9d455d3362d8090f1cfa6de1aee" }, { "name": "OPENSTACK_CINDER_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e3fcc7433bde086bd6244e6c61513a44cf093ff2a4e188dceea4150ed2e612b8" }, { "name": "OVIRT_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4893eafb9aeeee2133cde054c8bc9c521d0a1ad9c7f1dfbacb61faab05856998" }, { "name": "OVIRT_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1f6d3bd7f3b5d2f1a8db0ba13eb28794f609ebf183fcface0a48a4c241b3b2cc" }, { "name": "MANILA_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:48a1f33b66c24a3cc315b83f3914e5997de53d30fcea6122fc303dcfc3f69b00" }, { "name": "MANILA_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9e7db05efe6be8bb89b954724b2bb194239883ab567d3d455793f82bbee2a076" }, { "name": "MANILA_NFS_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:127c0e2dac0202b8a2871d9fb2a87330202dcee3b6fda3fedb7d41ecc31087b5" }, { "name": "PROVISIONER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b54a79b0c5a39a23dc8a1809fffaa376a474945df364a30077112eab87d558dd" }, { "name": "ATTACHER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:33c42e88b72c0ea9d58fed8db8cb2175e56399c3d2e988bcbb669bec3de291de" }, { "name": "RESIZER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a9d0a3f14e303f80c1e0b81cf38af700d1e038b875834bbc6d1a31ad60b16d8f" }, { "name": "SNAPSHOTTER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f5d39776894fdb35e4119a592bb9b2c754a834f542712fd7f57c54d6eceeca29" }, { "name": "NODE_DRIVER_REGISTRAR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c4a2626cc9c4903a32e67a6fa68b874fb5e67085126030389a8a3210bf766de7" }, { "name": "LIVENESS_PROBE_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13aa61d56d283901b113a49524eb57e447eb541b56d3666f8186fd807cc3c180" }, { "name": "VSPHERE_PROBLEM_DETECTOR_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:490606097b878f11fe9dc5de4869a0e81cac65097cd764c06c84c6ad00310a2d" }, { "name": "AZURE_DISK_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b282b11bbe2e1344118071f4fef717291519de9beb4ecf8b971947b795ccf08f" }, { "name": "AZURE_DISK_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9070fd7dba093e5f375207a1cdd9889520d127d7d9b1750a25d93f64e0b5a6ff" }, { "name": "AZURE_FILE_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d81ac5701c05494439f8dd36b0331c8dfbfe8bdff7095b028f77015cbe8a88ae" }, { "name": "AZURE_FILE_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d2498fdaf7a7eaf931897522ebfca369ed496ae0a4def8d92745d42b7ec3cac6" }, { "name": "KUBE_RBAC_PROXY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec" }, { "name": "VMWARE_VSPHERE_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9a25f3889d185cafb5f213eadf4ff73a52d2e57ffa76ebaf9bfa9d5353dfbd09" }, { "name": "VMWARE_VSPHERE_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d45d79b3c18a55289908122811f2c7b8a36048fbd223a65d1240b7b872e9c964" }, { "name": "VMWARE_VSPHERE_SYNCER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:37d243c1da1418360f18000a78563db676392a29ba3b1f95666ee3d5d325e3bc" }, { "name": "CLUSTER_CLOUD_CONTROLLER_MANAGER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8714fb5e02b263466c0672e07d6875b39db6b45514cc048442c518086cc890c4" }, { "name": "IBM_VPC_BLOCK_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e739234ba3bb037e853ef81779f7644785190aa40df84a44742db3a92e3f9630" }, { "name": "IBM_VPC_BLOCK_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:011424d2b60a41f35112d7c08b5997f3d4269f1bd47f2e062974f0318cc5bd4a" }, { "name": "POWERVS_BLOCK_CSI_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:521ab642a1e852b797be875888d0b933889980246d5bb5f35cc2ad2c4f713f71" }, { "name": "POWERVS_BLOCK_CSI_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:dc99ba2929763b48030ff9e4fe82215a8bf7db23d8caebe036fedd020e3c63ef" }, { "name": "TOOLS_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:85ee65ef9fe7ad48c9e15d2b1a1bb9cdd28164ebe933c0202fc265ce0b11427a" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2f7b2344ff5eacb74ebb4d672c5367c0ab287bdab7471f221afcd56afaf6b3ea", "imagePullPolicy": "IfNotPresent", "name": "cluster-storage-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/serving-cert", "name": "cluster-storage-operator-serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 11411, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cluster-storage-operator", "serviceAccountName": "cluster-storage-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "cluster-storage-operator-serving-cert", "secret": { "defaultMode": 420, "secretName": "cluster-storage-operator-serving-cert" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:06:44Z", "lastUpdateTime": "2026-04-28T13:10:24Z", "message": "ReplicaSet \"cluster-storage-operator-756fdb9f8c\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:27Z", "lastUpdateTime": "2026-04-30T12:45:27Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "2ffa70e78bb6ce1e20f2cb357eed27ef0332e0132bfb889001c20865cab7ac8c" }, "creationTimestamp": "2026-04-28T13:10:24Z", "generation": 1, "name": "csi-snapshot-controller", "namespace": "openshift-cluster-storage-operator", "resourceVersion": "37747", "uid": "c548471b-9aa9-41ee-badb-064ce8f7c67f" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "csi-snapshot-controller" } }, "strategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "csi-snapshot-controller" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app": "csi-snapshot-controller" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "--v=2", "--leader-election=true", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-storage-operator" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b96ebef995c9ceff71affd27f102c470d5efbe05d3e56ccc54a83e69ede2aa25", "imagePullPolicy": "IfNotPresent", "name": "snapshot-controller", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "csi-snapshot-controller", "serviceAccountName": "csi-snapshot-controller", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-04-28T13:10:24Z", "lastUpdateTime": "2026-04-28T13:10:29Z", "message": "ReplicaSet \"csi-snapshot-controller-9f48b4d99\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:20Z", "lastUpdateTime": "2026-04-30T12:45:20Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "capability.openshift.io/name": "CSISnapshot", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T13:06:39Z", "generation": 1, "labels": { "app": "csi-snapshot-controller-operator" }, "name": "csi-snapshot-controller-operator", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "37700", "uid": "b6b32fd4-4a7e-46cf-baa2-0bb62aaeffa6" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "csi-snapshot-controller-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "csi-snapshot-controller-operator" } }, "spec": { "containers": [ { "args": [ "start", "-v=2" ], "env": [ { "name": "OPERAND_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b96ebef995c9ceff71affd27f102c470d5efbe05d3e56ccc54a83e69ede2aa25" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.19.21" }, { "name": "OPERAND_IMAGE_VERSION", "value": "4.19.21" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e186fcff92953fa09aaeee8a3ef064407f5df57cf07154f89cbd8e409ddbbb11", "imagePullPolicy": "IfNotPresent", "name": "csi-snapshot-controller-operator", "resources": { "requests": { "cpu": "10m", "memory": "65Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "csi-snapshot-controller-operator", "serviceAccountName": "csi-snapshot-controller-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:06:39Z", "lastUpdateTime": "2026-04-28T13:10:23Z", "message": "ReplicaSet \"csi-snapshot-controller-operator-fff79ddff\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:19Z", "lastUpdateTime": "2026-04-30T12:45:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "2", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "kubernetes.io/description": "The cluster-version operator manages OpenShift updates and reconciles core resources and cluster operators." }, "creationTimestamp": "2026-04-28T13:06:02Z", "generation": 2, "name": "cluster-version-operator", "namespace": "openshift-cluster-version", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "33934", "uid": "7eecb67d-da58-4c3e-8b62-d4c5afbf123c" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "k8s-app": "cluster-version-operator" } }, "strategy": { "type": "Recreate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "hostaccess", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "cluster-version-operator" }, "name": "cluster-version-operator" }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "start", "--release-image=quay.io/openshift-release-dev/ocp-release@sha256:12d5ae6dab3cabb473857c07c0b429de87a7c1034311d67e75e79fa1439019ed", "--enable-auto-update=false", "--listen=0.0.0.0:9099", "--serving-cert-file=/etc/tls/serving-cert/tls.crt", "--serving-key-file=/etc/tls/serving-cert/tls.key", "--v=2", "--always-enable-capabilities=Ingress" ], "env": [ { "name": "OPERATOR_IMAGE_VERSION", "value": "0.0.1-snapshot" }, { "name": "KUBERNETES_SERVICE_PORT", "value": "6443" }, { "name": "KUBERNETES_SERVICE_HOST", "value": "api-int.clusterpool419-klx7c.rhtap.devcluster.openshift.com" }, { "name": "NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "CLUSTER_PROFILE", "value": "self-managed-high-availability" } ], "image": "quay.io/openshift-release-dev/ocp-release@sha256:12d5ae6dab3cabb473857c07c0b429de87a7c1034311d67e75e79fa1439019ed", "imagePullPolicy": "IfNotPresent", "name": "cluster-version-operator", "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/ssl/certs", "name": "etc-ssl-certs", "readOnly": true }, { "mountPath": "/etc/cvo/updatepayloads", "name": "etc-cvo-updatepayloads", "readOnly": true }, { "mountPath": "/etc/tls/serving-cert", "name": "serving-cert", "readOnly": true }, { "mountPath": "/etc/tls/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount", "name": "kube-api-access", "readOnly": true } ] } ], "dnsPolicy": "Default", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 130, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/network-unavailable", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/not-ready", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/etc/ssl/certs", "type": "" }, "name": "etc-ssl-certs" }, { "hostPath": { "path": "/etc/cvo/updatepayloads", "type": "" }, "name": "etc-cvo-updatepayloads" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "cluster-version-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "openshift-service-ca.crt" }, "name": "service-ca" }, { "name": "kube-api-access", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "expirationSeconds": 3600, "path": "token" } }, { "configMap": { "items": [ { "key": "ca.crt", "path": "ca.crt" } ], "name": "kube-root-ca.crt" } }, { "downwardAPI": { "items": [ { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" }, "path": "namespace" } ] } } ] } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:06:02Z", "lastUpdateTime": "2026-04-28T13:10:23Z", "message": "ReplicaSet \"cluster-version-operator-8465fbd8f5\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:44:12Z", "lastUpdateTime": "2026-04-30T12:44:12Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 2, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T13:06:43Z", "generation": 1, "labels": { "app": "openshift-config-operator" }, "name": "openshift-config-operator", "namespace": "openshift-config-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "37707", "uid": "65e0ab0c-3e07-4c12-91ba-5b28d6a2ee77" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "openshift-config-operator" } }, "strategy": { "type": "Recreate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-config-operator" }, "name": "openshift-config-operator" }, "spec": { "containers": [ { "command": [ "cluster-config-operator", "operator", "--operator-version=$(OPERATOR_IMAGE_VERSION)", "--authoritative-feature-gate-dir=/available-featuregates" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f9508e13218441d850440c8d2bb1673d5641762717207c2fc1ef1feb5fa5ed2d" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.19.21" }, { "name": "OPERAND_IMAGE_VERSION", "value": "4.19.21" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f9508e13218441d850440c8d2bb1673d5641762717207c2fc1ef1feb5fa5ed2d", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 3, "periodSeconds": 3, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "openshift-config-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 3, "periodSeconds": 3, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/available-featuregates", "name": "available-featuregates" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "write-available-featuresets", "--asset-output-dir=/available-featuregates", "--payload-version=$(OPERATOR_IMAGE_VERSION)" ], "env": [ { "name": "OPERATOR_IMAGE_VERSION", "value": "4.19.21" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8c307c90bde693e40227d4a94a0782574639a4f72ec76aeddfa1653f47f6718d", "imagePullPolicy": "IfNotPresent", "name": "openshift-api", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/available-featuregates", "name": "available-featuregates" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-config-operator", "serviceAccountName": "openshift-config-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "config-operator-serving-cert" } }, { "emptyDir": { "sizeLimit": "100Mi" }, "name": "available-featuregates" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:06:43Z", "lastUpdateTime": "2026-04-28T13:10:02Z", "message": "ReplicaSet \"openshift-config-operator-64f59669bf\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:19Z", "lastUpdateTime": "2026-04-30T12:45:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "config.openshift.io/inject-proxy": "console-operator", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T13:18:49Z", "generation": 1, "name": "console-operator", "namespace": "openshift-console-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "37801", "uid": "5e1508cc-86cf-4f94-97d5-21b31ef5cf4e" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "name": "console-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "console-operator" } }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/controller-config.yaml" ], "command": [ "console", "operator" ], "env": [ { "name": "CONSOLE_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:51163dc62f9f3d636c12a570ec636c119a34bc31bb1320fc2764dff1f63d8a75" }, { "name": "DOWNLOADS_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:572829eb365c0909a891d558ef2c27e6265dfa1d9d635ed52239366c67c8162b" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.19.21" }, { "name": "OPERATOR_NAME", "value": "console-operator" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f75d223273c2c14682610b45fd46dcc24af96416636aea9d8c2d8bf54b7da760", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "console-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console-operator", "serviceAccountName": "console-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "console-operator-config" }, "name": "config" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca" }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:18:49Z", "lastUpdateTime": "2026-04-28T13:21:08Z", "message": "ReplicaSet \"console-operator-78cbfc998d\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:20Z", "lastUpdateTime": "2026-04-30T12:45:20Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "22784", "console.openshift.io/console-config-version": "27787", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:51163dc62f9f3d636c12a570ec636c119a34bc31bb1320fc2764dff1f63d8a75", "console.openshift.io/infrastructure-config-version": "438", "console.openshift.io/oauth-secret-version": "22800", "console.openshift.io/proxy-config-version": "534", "console.openshift.io/service-ca-config-version": "22830", "console.openshift.io/trusted-ca-config-version": "22835", "deployment.kubernetes.io/revision": "6", "operator.openshift.io/spec-hash": "31abee126062b544c158dfbabc1d6bdbafc284c32d844365fd4995aa05107918" }, "creationTimestamp": "2026-04-28T13:20:53Z", "generation": 7, "labels": { "app": "console", "component": "ui" }, "name": "console", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "controller": true, "kind": "Console", "name": "cluster", "uid": "1da8f498-7913-457b-9322-627d30e49f14" } ], "resourceVersion": "39652", "uid": "80c6a411-7426-40b3-a700-02eb5599dd0c" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "console", "component": "ui" } }, "strategy": { "rollingUpdate": { "maxSurge": 3, "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "22784", "console.openshift.io/console-config-version": "27787", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:51163dc62f9f3d636c12a570ec636c119a34bc31bb1320fc2764dff1f63d8a75", "console.openshift.io/infrastructure-config-version": "438", "console.openshift.io/oauth-secret-version": "22800", "console.openshift.io/proxy-config-version": "534", "console.openshift.io/service-ca-config-version": "22830", "console.openshift.io/trusted-ca-config-version": "22835", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:51163dc62f9f3d636c12a570ec636c119a34bc31bb1320fc2764dff1f63d8a75", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-04-28T13:21:09Z", "lastUpdateTime": "2026-04-28T13:27:05Z", "message": "ReplicaSet \"console-d97748d84\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:58Z", "lastUpdateTime": "2026-04-30T12:45:58Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 7, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "50709389ede91e495912ca9ed4b01cc25888554bd62b40643a290021ef271510" }, "creationTimestamp": "2026-04-28T13:20:51Z", "generation": 1, "labels": { "app": "console", "component": "downloads" }, "name": "downloads", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "controller": true, "kind": "Console", "name": "cluster", "uid": "1da8f498-7913-457b-9322-627d30e49f14" } ], "resourceVersion": "37726", "uid": "30eaa1b2-ddf1-464e-9847-d86442fda59f" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "console", "component": "downloads" } }, "strategy": { "rollingUpdate": { "maxSurge": 3, "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "downloads" }, "name": "downloads" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "downloads" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "-c", "cat \u003c\u003cEOF \u003e\u003e/tmp/serve.py\nimport errno, http.server, os, re, signal, socket, sys, tarfile, tempfile, threading, time, zipfile\n\nsignal.signal(signal.SIGTERM, lambda signum, frame: sys.exit(0))\n\ndef write_index(path, message):\n with open(path, 'wb') as f:\n f.write('\\n'.join([\n '\u003c!doctype html\u003e',\n '\u003chtml lang=\"en\"\u003e',\n '\u003chead\u003e',\n ' \u003cmeta charset=\"utf-8\"\u003e',\n '\u003c/head\u003e',\n '\u003cbody\u003e',\n ' {}'.format(message),\n '\u003c/body\u003e',\n '\u003c/html\u003e',\n '',\n ]).encode('utf-8'))\n\n# Launch multiple listeners as threads\nclass Thread(threading.Thread):\n def __init__(self, i, socket):\n threading.Thread.__init__(self)\n self.i = i\n self.socket = socket\n self.daemon = True\n self.start()\n\n def run(self):\n server = http.server.SimpleHTTPRequestHandler\n server.server_version = \"OpenShift Downloads Server\"\n server.sys_version = \"\"\n httpd = http.server.HTTPServer(addr, server, False)\n\n # Prevent the HTTP server from re-binding every handler.\n # https://stackoverflow.com/questions/46210672/\n httpd.socket = self.socket\n httpd.server_bind = self.server_close = lambda self: None\n\n httpd.serve_forever()\n\ntemp_dir = tempfile.mkdtemp()\nprint('serving from {}'.format(temp_dir))\nos.chdir(temp_dir)\nfor arch in ['amd64', 'arm64', 'ppc64le', 's390x']:\n os.mkdir(arch)\ncontent = ['\u003ca href=\"oc-license\"\u003elicense\u003c/a\u003e']\nos.symlink('/usr/share/openshift/LICENSE', 'oc-license')\n\nfor arch, operating_system, path in [\n ('amd64', 'linux', '/usr/share/openshift/linux_amd64/oc'),\n ('amd64', 'mac', '/usr/share/openshift/mac/oc'),\n ('amd64', 'windows', '/usr/share/openshift/windows/oc.exe'),\n ('arm64', 'linux', '/usr/share/openshift/linux_arm64/oc'),\n ('arm64', 'mac', '/usr/share/openshift/mac_arm64/oc'),\n ('ppc64le', 'linux', '/usr/share/openshift/linux_ppc64le/oc'),\n ('s390x', 'linux', '/usr/share/openshift/linux_s390x/oc'),\n ]:\n basename = os.path.basename(path)\n target_path = os.path.join(arch, operating_system, basename)\n os.mkdir(os.path.join(arch, operating_system))\n os.symlink(path, target_path)\n base_root, _ = os.path.splitext(basename)\n archive_path_root = os.path.join(arch, operating_system, base_root)\n with tarfile.open('{}.tar'.format(archive_path_root), 'w') as tar:\n tar.add(path, basename)\n with zipfile.ZipFile('{}.zip'.format(archive_path_root), 'w') as zip:\n zip.write(path, basename)\n content.append(\n '\u003ca href=\"{0}\"\u003eoc ({1} {2})\u003c/a\u003e (\u003ca href=\"{3}.tar\"\u003etar\u003c/a\u003e \u003ca href=\"{3}.zip\"\u003ezip\u003c/a\u003e)'.format(\n target_path, arch, operating_system, archive_path_root\n )\n )\n\nfor root, directories, filenames in os.walk(temp_dir):\n root_link = os.path.relpath(temp_dir, os.path.join(root, 'child')).replace(os.path.sep, '/')\n for directory in directories:\n write_index(\n path=os.path.join(root, directory, 'index.html'),\n message='\u003cp\u003eDirectory listings are disabled. See \u003ca href=\"{}\"\u003ehere\u003c/a\u003e for available content.\u003c/p\u003e'.format(root_link),\n )\n\nwrite_index(\n path=os.path.join(temp_dir, 'index.html'),\n message='\\n'.join(\n ['\u003cul\u003e'] +\n [' \u003cli\u003e{}\u003c/li\u003e'.format(entry) for entry in content] +\n ['\u003c/ul\u003e']\n ),\n)\n\n# Create socket\n# IPv6 should handle IPv4 passively so long as it is not bound to a\n# specific address or set to IPv6_ONLY\n# https://stackoverflow.com/questions/25817848/python-3-does-http-server-support-ipv6\ntry:\n addr = ('::', 8080)\n sock = socket.socket(socket.AF_INET6, socket.SOCK_STREAM)\nexcept socket.error as err:\n # errno.EAFNOSUPPORT is \"socket.error: [Errno 97] Address family not supported by protocol\"\n # When IPv6 is disabled, socket will bind using IPv4.\n if err.errno == errno.EAFNOSUPPORT:\n addr = ('', 8080)\n sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)\n else:\n raise \nsock.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)\nsock.bind(addr)\nsock.listen(5)\n\n[Thread(i, socket=sock) for i in range(100)]\ntime.sleep(9e9)\nEOF\nexec python3 /tmp/serve.py\n" ], "command": [ "/bin/sh" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:572829eb365c0909a891d558ef2c27e6265dfa1d9d635ed52239366c67c8162b", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "download-server", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 0, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-04-28T13:21:09Z", "lastUpdateTime": "2026-04-28T13:22:08Z", "message": "ReplicaSet \"downloads-67f89d687c\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:20Z", "lastUpdateTime": "2026-04-30T12:45:20Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T13:06:28Z", "generation": 1, "labels": { "app": "openshift-controller-manager-operator" }, "name": "openshift-controller-manager-operator", "namespace": "openshift-controller-manager-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "38815", "uid": "275a716e-55fc-44ca-8c2d-9c1878e5d859" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "openshift-controller-manager-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-operator" }, "name": "openshift-controller-manager-operator" }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml" ], "command": [ "cluster-openshift-controller-manager-operator", "operator" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.19.21" }, { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:14b1c94f600742ae722877e8bfbe20e93cea42401b58abda26b2aa830726a91a" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.19.21" }, { "name": "ROUTE_CONTROLLER_MANAGER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:94c7a575f524db8682645a6faf18647ef8b0064518c3baf2e6485f18ca006695" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bb2ca5441779e5d5b6e6d37e2e3557c46139440cf90da5030392f625ff9a32d8", "imagePullPolicy": "IfNotPresent", "name": "openshift-controller-manager-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-operator", "serviceAccountName": "openshift-controller-manager-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "openshift-controller-manager-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "openshift-controller-manager-operator-config" }, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:06:28Z", "lastUpdateTime": "2026-04-28T13:09:44Z", "message": "ReplicaSet \"openshift-controller-manager-operator-5f5c984b9d\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:29Z", "lastUpdateTime": "2026-04-30T12:45:29Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "9", "operator.openshift.io/spec-hash": "503a05cc8791943a9e958660f43a39989589725439344ad16235409df1917421", "release.openshift.io/version": "4.19.21" }, "creationTimestamp": "2026-04-28T13:09:47Z", "generation": 9, "labels": { "app": "openshift-controller-manager", "controller-manager": "true" }, "name": "controller-manager", "namespace": "openshift-controller-manager", "resourceVersion": "40757", "uid": "1006d8df-a181-4b76-af81-2a6069324903" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 3, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true" } }, "strategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "40372", "configmaps/config": "40436", "configmaps/openshift-global-ca": "5655", "configmaps/openshift-service-ca": "6384", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "3", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:14b1c94f600742ae722877e8bfbe20e93cea42401b58abda26b2aa830726a91a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" } ] } } }, "status": { "availableReplicas": 3, "conditions": [ { "lastTransitionTime": "2026-04-30T12:45:20Z", "lastUpdateTime": "2026-04-30T12:45:20Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-04-28T13:09:47Z", "lastUpdateTime": "2026-04-30T12:48:07Z", "message": "ReplicaSet \"controller-manager-7ff75d8c48\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 9, "readyReplicas": 3, "replicas": 3, "updatedReplicas": 3 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T13:06:27Z", "generation": 1, "name": "dns-operator", "namespace": "openshift-dns-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "37927", "uid": "a061e0df-e8b2-4322-b7d2-d42511139a1d" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "name": "dns-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "dns-operator" } }, "spec": { "containers": [ { "command": [ "dns-operator" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.19.21" }, { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:88d63e4d0d516fe69d8456c4245fd5c521227acfd983a9656de927331f95cda1" }, { "name": "OPENSHIFT_CLI_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:89cc60ac50c5ec7e9693c317e51a77592d39fb2fed332e71161c9da5805aa7ba" }, { "name": "KUBE_RBAC_PROXY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:679491629a735bd3b2441fba15175a873908aa48f73f8e62c875d947ee8ed53d", "imagePullPolicy": "IfNotPresent", "name": "dns-operator", "resources": { "requests": { "cpu": "10m", "memory": "29Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--logtostderr", "--secure-listen-address=:9393", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", "--upstream=http://127.0.0.1:60000/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9393, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "40Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-tls", "readOnly": true } ] } ], "dnsPolicy": "Default", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "dns-operator", "serviceAccountName": "dns-operator", "terminationGracePeriodSeconds": 2, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "metrics-tls", "secret": { "defaultMode": 420, "secretName": "metrics-tls" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:06:27Z", "lastUpdateTime": "2026-04-28T13:10:26Z", "message": "ReplicaSet \"dns-operator-786d8864c5\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:21Z", "lastUpdateTime": "2026-04-30T12:45:21Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T13:06:29Z", "generation": 1, "labels": { "app": "etcd-operator" }, "name": "etcd-operator", "namespace": "openshift-etcd-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "38126", "uid": "6bae3f64-c708-4002-93b4-54963d48029a" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "etcd-operator" } }, "strategy": { "type": "Recreate" }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "etcd-operator" }, "name": "etcd-operator" }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "--terminate-on-files=/var/run/secrets/serving-cert/tls.crt", "--terminate-on-files=/var/run/secrets/serving-cert/tls.key", "--terminate-on-files=/var/run/secrets/etcd-client/tls.crt", "--terminate-on-files=/var/run/secrets/etcd-client/tls.key", "--terminate-on-files=/var/run/configmaps/etcd-ca/ca-bundle.crt", "--terminate-on-files=/var/run/configmaps/etcd-service-ca/service-ca.crt" ], "command": [ "cluster-etcd-operator", "operator" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b38a5ba2641ec2c7ec54022359fd98a29628f7758d0b3b6e8bbe481db869ea0a" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:011052c71e7fa8a5a6ff74834311209cc742de6bc4a04551fbbbdffb4299e209" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.19.21" }, { "name": "OPERAND_IMAGE_VERSION", "value": "4.19.21" }, { "name": "OPENSHIFT_PROFILE", "value": "web" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:011052c71e7fa8a5a6ff74834311209cc742de6bc4a04551fbbbdffb4299e209", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 60, "successThreshold": 1, "timeoutSeconds": 30 }, "name": "etcd-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/configmaps/etcd-ca", "name": "etcd-ca" }, { "mountPath": "/var/run/configmaps/etcd-service-ca", "name": "etcd-service-ca" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "etcd-operator", "serviceAccountName": "etcd-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "etcd-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "etcd-operator-config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "etcd-ca-bundle" }, "name": "etcd-ca" }, { "configMap": { "defaultMode": 420, "name": "etcd-service-ca-bundle" }, "name": "etcd-service-ca" }, { "name": "etcd-client", "secret": { "defaultMode": 420, "secretName": "etcd-client" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:06:29Z", "lastUpdateTime": "2026-04-28T13:09:45Z", "message": "ReplicaSet \"etcd-operator-7cf5697694\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:23Z", "lastUpdateTime": "2026-04-30T12:45:23Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry", "config.openshift.io/inject-proxy": "cluster-image-registry-operator", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T13:06:42Z", "generation": 1, "name": "cluster-image-registry-operator", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "37995", "uid": "7e6365dc-d892-4016-b4ac-3036ece6daec" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "name": "cluster-image-registry-operator" } }, "strategy": { "type": "Recreate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "cluster-image-registry-operator" } }, "spec": { "containers": [ { "args": [ "--files=/var/run/configmaps/trusted-ca/tls-ca-bundle.pem", "--files=/etc/secrets/tls.crt", "--files=/etc/secrets/tls.key" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.19.21" }, { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "cluster-image-registry-operator" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b9bfcef1ba0dcdf98cf56daca9e4725b129264a1eb2d05b1d81ed4ac1bbf158e" }, { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7419e4b62a36dd2d518e10724ab264a73cc1d1ae6242657d70099d4dde31638e" }, { "name": "IMAGE_PRUNER", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:89cc60ac50c5ec7e9693c317e51a77592d39fb2fed332e71161c9da5805aa7ba" }, { "name": "AZURE_ENVIRONMENT_FILEPATH", "value": "/tmp/azurestackcloud.json" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.19.21" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b9bfcef1ba0dcdf98cf56daca9e4725b129264a1eb2d05b1d81ed4ac1bbf158e", "imagePullPolicy": "IfNotPresent", "name": "cluster-image-registry-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/trusted-ca/", "name": "trusted-ca" }, { "mountPath": "/etc/secrets", "name": "image-registry-operator-tls" }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cluster-image-registry-operator", "serviceAccountName": "cluster-image-registry-operator", "shareProcessNamespace": false, "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "image-registry-operator-tls", "secret": { "defaultMode": 420, "secretName": "image-registry-operator-tls" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:06:42Z", "lastUpdateTime": "2026-04-28T13:10:24Z", "message": "ReplicaSet \"cluster-image-registry-operator-7b987c7f94\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:22Z", "lastUpdateTime": "2026-04-30T12:45:22Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "imageregistry.operator.openshift.io/checksum": "sha256:3f39af81ac42673de2e22550b800d1ea96ef9d969b409ddd6035210a9b53b92d", "operator.openshift.io/spec-hash": "fe8532de2618c9636909bfdfe6184518c8f3955deaaeb16fd6502ae5ee99df34", "release.openshift.io/version": "4.19.21" }, "creationTimestamp": "2026-04-28T13:20:09Z", "generation": 1, "labels": { "docker-registry": "default" }, "name": "image-registry", "namespace": "openshift-image-registry", "resourceVersion": "39714", "uid": "af07e9fd-8018-4e40-844f-e2b0910ba79d" }, "spec": { "progressDeadlineSeconds": 60, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "docker-registry": "default" } }, "strategy": { "rollingUpdate": { "maxSurge": 1, "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "imageregistry.operator.openshift.io/dependencies-checksum": "sha256:3ac74ae436b5c5580ed88d5759ccfa8bf3ee6f08b0eb4563eef1d4258f5a7094", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "docker-registry": "default" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "namespaces": [ "openshift-image-registry" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/sh", "-c", "mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem \u0026\u0026 update-ca-trust extract --output /etc/pki/ca-trust/extracted/ \u0026\u0026 exec /usr/bin/dockerregistry" ], "env": [ { "name": "REGISTRY_STORAGE", "value": "s3" }, { "name": "REGISTRY_STORAGE_S3_BUCKET", "value": "clusterpool419-klx7c-pwtlg-image-registry-us-east-1-fgqtdaucki" }, { "name": "REGISTRY_STORAGE_S3_REGION", "value": "us-east-1" }, { "name": "REGISTRY_STORAGE_S3_ENCRYPT", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_FORCEPATHSTYLE", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH", "value": "/var/run/secrets/cloud/credentials" }, { "name": "REGISTRY_STORAGE_S3_USEDUALSTACK", "value": "true" }, { "name": "REGISTRY_HTTP_ADDR", "value": ":5000" }, { "name": "REGISTRY_HTTP_NET", "value": "tcp" }, { "name": "REGISTRY_HTTP_SECRET", "value": "1fb1ea8c13422cc8b166672150a68dc3ae9e18b02f6b1d4c6463f863f0cb819a546eb3db782d14c2fdeb88d83ac7737ce2a87e915a3b1a9e2a4ea50e5c7f1a15" }, { "name": "REGISTRY_LOG_LEVEL", "value": "info" }, { "name": "REGISTRY_OPENSHIFT_QUOTA_ENABLED", "value": "true" }, { "name": "REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR", "value": "inmemory" }, { "name": "REGISTRY_STORAGE_DELETE_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL", "value": "10s" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD", "value": "1" }, { "name": "REGISTRY_OPENSHIFT_METRICS_ENABLED", "value": "true" }, { "name": "REGISTRY_OPENSHIFT_SERVER_ADDR", "value": "image-registry.openshift-image-registry.svc:5000" }, { "name": "REGISTRY_HTTP_TLS_CERTIFICATE", "value": "/etc/secrets/tls.crt" }, { "name": "REGISTRY_HTTP_TLS_KEY", "value": "/etc/secrets/tls.key" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7419e4b62a36dd2d518e10724ab264a73cc1d1ae6242657d70099d4dde31638e", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "registry", "ports": [ { "containerPort": 5000, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/cloud", "name": "image-registry-private-configuration", "readOnly": true }, { "mountPath": "/etc/secrets", "name": "registry-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted", "name": "ca-trust-extracted" }, { "mountPath": "/etc/pki/ca-trust/source/anchors", "name": "registry-certificates" }, { "mountPath": "/usr/share/pki/ca-trust-source", "name": "trusted-ca" }, { "mountPath": "/var/lib/kubelet/", "name": "installation-pull-secrets" }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 1000310000, "fsGroupChangePolicy": "OnRootMismatch" }, "serviceAccount": "registry", "serviceAccountName": "registry", "terminationGracePeriodSeconds": 55, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "kubernetes.io/hostname", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "node-role.kubernetes.io/worker", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "DoNotSchedule" } ], "volumes": [ { "name": "image-registry-private-configuration", "secret": { "defaultMode": 420, "optional": false, "secretName": "image-registry-private-configuration" } }, { "name": "registry-tls", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "image-registry-tls" } } ] } }, { "emptyDir": {}, "name": "ca-trust-extracted" }, { "configMap": { "defaultMode": 420, "name": "image-registry-certificates" }, "name": "registry-certificates" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "anchors/ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "name": "installation-pull-secrets", "secret": { "defaultMode": 420, "items": [ { "key": ".dockerconfigjson", "path": "config.json" } ], "optional": true, "secretName": "installation-pull-secrets" } }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-04-28T13:20:09Z", "lastUpdateTime": "2026-04-28T13:20:34Z", "message": "ReplicaSet \"image-registry-5d59fc7f7d\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:57Z", "lastUpdateTime": "2026-04-30T12:45:57Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "capability.openshift.io/name": "Ingress", "config.openshift.io/inject-proxy": "ingress-operator", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T13:06:42Z", "generation": 1, "name": "ingress-operator", "namespace": "openshift-ingress-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "37769", "uid": "03860a65-3998-4bf0-ad55-cef8279d2154" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "name": "ingress-operator" } }, "strategy": { "type": "Recreate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "ingress-operator" } }, "spec": { "containers": [ { "command": [ "ingress-operator", "start", "--namespace", "$(WATCH_NAMESPACE)", "--image", "$(IMAGE)", "--canary-image", "$(CANARY_IMAGE)", "--release-version", "$(RELEASE_VERSION)", "--gateway-api-operator-catalog", "$(GATEWAY_API_OPERATOR_CATALOG)", "--gateway-api-operator-channel", "$(GATEWAY_API_OPERATOR_CHANNEL)", "--gateway-api-operator-version", "$(GATEWAY_API_OPERATOR_VERSION)", "--istio-version", "$(ISTIO_VERSION)" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.19.21" }, { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:160c8df965ce1a4988cbcd4e89a33e101ccc53c439d7833fffccba7056caef66" }, { "name": "CANARY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:089aba15916e89ca8f604629fecab61151596526be89e70339561edb4b928a55" }, { "name": "GATEWAY_API_OPERATOR_CATALOG", "value": "redhat-operators" }, { "name": "GATEWAY_API_OPERATOR_CHANNEL", "value": "stable" }, { "name": "GATEWAY_API_OPERATOR_VERSION", "value": "servicemeshoperator3.v3.1.0" }, { "name": "ISTIO_VERSION", "value": "v1.26.2" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:089aba15916e89ca8f604629fecab61151596526be89e70339561edb4b928a55", "imagePullPolicy": "IfNotPresent", "name": "ingress-operator", "resources": { "requests": { "cpu": "10m", "memory": "56Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] }, { "args": [ "--logtostderr", "--secure-listen-address=:9393", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", "--upstream=http://127.0.0.1:60000/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9393, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "40Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "ingress-operator", "serviceAccountName": "ingress-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "metrics-tls", "secret": { "defaultMode": 420, "secretName": "metrics-tls" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca" }, "name": "trusted-ca" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:06:42Z", "lastUpdateTime": "2026-04-28T13:10:26Z", "message": "ReplicaSet \"ingress-operator-c5dfd5867\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:20Z", "lastUpdateTime": "2026-04-30T12:45:20Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:10:26Z", "generation": 1, "labels": { "ingresscontroller.operator.openshift.io/owning-ingresscontroller": "default" }, "name": "router-default", "namespace": "openshift-ingress", "resourceVersion": "39963", "uid": "0a7c3ee9-d232-4418-ba61-ca190f1a33d0" }, "spec": { "minReadySeconds": 30, "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "50%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "ingresscontroller.operator.openshift.io/hash": "7c65957454" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "node.openshift.io/remote-worker", "operator": "NotIn", "values": [ "" ] } ] } ] } }, "podAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/deployment-ingresscontroller", "operator": "In", "values": [ "default" ] }, { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "NotIn", "values": [ "7c65957454" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] }, "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/deployment-ingresscontroller", "operator": "In", "values": [ "default" ] }, { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "In", "values": [ "7c65957454" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "env": [ { "name": "DEFAULT_CERTIFICATE_DIR", "value": "/etc/pki/tls/private" }, { "name": "DEFAULT_DESTINATION_CA_PATH", "value": "/var/run/configmaps/service-ca/service-ca.crt" }, { "name": "RELOAD_INTERVAL", "value": "5s" }, { "name": "ROUTER_ALLOW_WILDCARD_ROUTES", "value": "false" }, { "name": "ROUTER_CANONICAL_HOSTNAME", "value": "router-default.apps.clusterpool419-klx7c.rhtap.devcluster.openshift.com" }, { "name": "ROUTER_CIPHERS", "value": "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384" }, { "name": "ROUTER_CIPHERSUITES", "value": "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256" }, { "name": "ROUTER_DISABLE_HTTP2", "value": "true" }, { "name": "ROUTER_DISABLE_NAMESPACE_OWNERSHIP_CHECK", "value": "false" }, { "name": "ROUTER_DOMAIN", "value": "apps.clusterpool419-klx7c.rhtap.devcluster.openshift.com" }, { "name": "ROUTER_ENABLE_EXTERNAL_CERTIFICATE", "value": "true" }, { "name": "ROUTER_LOAD_BALANCE_ALGORITHM", "value": "random" }, { "name": "ROUTER_METRICS_TLS_CERT_FILE", "value": "/etc/pki/tls/metrics-certs/tls.crt" }, { "name": "ROUTER_METRICS_TLS_KEY_FILE", "value": "/etc/pki/tls/metrics-certs/tls.key" }, { "name": "ROUTER_METRICS_TYPE", "value": "haproxy" }, { "name": "ROUTER_SERVICE_NAME", "value": "default" }, { "name": "ROUTER_SERVICE_NAMESPACE", "value": "openshift-ingress" }, { "name": "ROUTER_SET_FORWARDED_HEADERS", "value": "append" }, { "name": "ROUTER_TCP_BALANCE_SCHEME", "value": "source" }, { "name": "ROUTER_THREADS", "value": "4" }, { "name": "ROUTER_USE_PROXY_PROTOCOL", "value": "true" }, { "name": "SSL_MIN_VERSION", "value": "TLSv1.2" }, { "name": "STATS_PASSWORD_FILE", "value": "/var/lib/haproxy/conf/metrics-auth/statsPassword" }, { "name": "STATS_PORT", "value": "1936" }, { "name": "STATS_USERNAME_FILE", "value": "/var/lib/haproxy/conf/metrics-auth/statsUsername" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:160c8df965ce1a4988cbcd4e89a33e101ccc53c439d7833fffccba7056caef66", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "terminationGracePeriodSeconds": 10, "timeoutSeconds": 1 }, "name": "router", "ports": [ { "containerPort": 80, "name": "http", "protocol": "TCP" }, { "containerPort": 443, "name": "https", "protocol": "TCP" }, { "containerPort": 1936, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/ready", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": true, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 120, "httpGet": { "path": "/healthz/ready", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 1, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/tls/private", "name": "default-certificate", "readOnly": true }, { "mountPath": "/var/run/configmaps/service-ca", "name": "service-ca-bundle", "readOnly": true }, { "mountPath": "/var/lib/haproxy/conf/metrics-auth", "name": "stats-auth", "readOnly": true }, { "mountPath": "/etc/pki/tls/metrics-certs", "name": "metrics-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/worker": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "router", "serviceAccountName": "router", "terminationGracePeriodSeconds": 3600, "tolerations": [ { "effect": "NoExecute", "key": "kubernetes.io/e2e-evict-taint-key", "operator": "Equal", "value": "evictTaintVal" } ], "topologySpreadConstraints": [ { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "In", "values": [ "7c65957454" ] } ] }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "ScheduleAnyway" } ], "volumes": [ { "name": "default-certificate", "secret": { "defaultMode": 420, "secretName": "router-certs-default" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "service-ca-bundle", "optional": false }, "name": "service-ca-bundle" }, { "name": "stats-auth", "secret": { "defaultMode": 420, "secretName": "router-stats-default" } }, { "name": "metrics-certs", "secret": { "defaultMode": 420, "secretName": "router-metrics-certs-default" } } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-04-28T13:10:26Z", "lastUpdateTime": "2026-04-28T13:20:39Z", "message": "ReplicaSet \"router-default-c8d74f4f6\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:46:17Z", "lastUpdateTime": "2026-04-30T12:46:17Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "config.openshift.io/inject-proxy": "insights-operator", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T13:06:45Z", "generation": 1, "name": "insights-operator", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "37794", "uid": "e6f2d571-d85b-4656-b2bf-916364512d6a" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "insights-operator" } }, "strategy": { "type": "Recreate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "insights-operator" } }, "spec": { "containers": [ { "args": [ "start", "--config=/etc/insights-operator/server.yaml" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "RELEASE_VERSION", "value": "4.19.21" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1aa1e37671e87ecd6488fb920046c9c54272bd56f87728fea704223b7384a4b9", "imagePullPolicy": "IfNotPresent", "name": "insights-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "54Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/insights-operator", "name": "snapshots" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/run/configmaps/service-ca-bundle", "name": "service-ca-bundle", "readOnly": true }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "operator", "serviceAccountName": "operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 900 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 900 } ], "volumes": [ { "emptyDir": {}, "name": "snapshots" }, { "configMap": { "defaultMode": 420, "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "service-ca-bundle", "optional": true }, "name": "service-ca-bundle" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "openshift-insights-serving-cert" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:06:45Z", "lastUpdateTime": "2026-04-28T13:09:56Z", "message": "ReplicaSet \"insights-operator-85b8c969f7\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:20Z", "lastUpdateTime": "2026-04-30T12:45:20Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T13:06:42Z", "generation": 1, "labels": { "app": "kube-apiserver-operator" }, "name": "kube-apiserver-operator", "namespace": "openshift-kube-apiserver-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "37609", "uid": "267e8750-0ae5-4e74-8615-0ed298ed24ff" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "kube-apiserver-operator" } }, "strategy": { "type": "Recreate" }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "kube-apiserver-operator" }, "name": "kube-apiserver-operator" }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml" ], "command": [ "cluster-kube-apiserver-operator", "operator" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8ea49f6535b66aa24867061cdc18e5a6ebc10eee4981f1449b28c1e5b86d0af5" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:15b529c316614d5d837222e7e8fd5cc44b43ab4d8b8cf1cab9cc238757db3a9d" }, { "name": "OPERAND_IMAGE_VERSION", "value": "1.32.10" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.19.21" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:15b529c316614d5d837222e7e8fd5cc44b43ab4d8b8cf1cab9cc238757db3a9d", "imagePullPolicy": "IfNotPresent", "name": "kube-apiserver-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount", "name": "kube-api-access", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "kube-apiserver-operator", "serviceAccountName": "kube-apiserver-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "kube-apiserver-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "kube-apiserver-operator-config" }, "name": "config" }, { "name": "kube-api-access", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "expirationSeconds": 3600, "path": "token" } }, { "configMap": { "items": [ { "key": "ca.crt", "path": "ca.crt" } ], "name": "kube-root-ca.crt" } }, { "downwardAPI": { "items": [ { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" }, "path": "namespace" } ] } } ] } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:06:42Z", "lastUpdateTime": "2026-04-28T13:09:56Z", "message": "ReplicaSet \"kube-apiserver-operator-5fc5d85cc9\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:19Z", "lastUpdateTime": "2026-04-30T12:45:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T13:06:25Z", "generation": 1, "labels": { "app": "kube-controller-manager-operator" }, "name": "kube-controller-manager-operator", "namespace": "openshift-kube-controller-manager-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "38567", "uid": "b402f40e-4636-4ed6-a9ec-7ca219d90990" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "kube-controller-manager-operator" } }, "strategy": { "type": "Recreate" }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "kube-controller-manager-operator" }, "name": "kube-controller-manager-operator" }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml" ], "command": [ "cluster-kube-controller-manager-operator", "operator" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8ea49f6535b66aa24867061cdc18e5a6ebc10eee4981f1449b28c1e5b86d0af5" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5a93114390b77188cb6041ab878573353d30b56b2fc1617646ce56c524b31ad9" }, { "name": "CLUSTER_POLICY_CONTROLLER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:52f12d1f46e53e0e33ea7e69421fe348371573bd9d9f8d8edb8209790c207263" }, { "name": "TOOLS_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:85ee65ef9fe7ad48c9e15d2b1a1bb9cdd28164ebe933c0202fc265ce0b11427a" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.19.21" }, { "name": "OPERAND_IMAGE_VERSION", "value": "1.32.10" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5a93114390b77188cb6041ab878573353d30b56b2fc1617646ce56c524b31ad9", "imagePullPolicy": "IfNotPresent", "name": "kube-controller-manager-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount", "name": "kube-api-access", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "kube-controller-manager-operator", "serviceAccountName": "kube-controller-manager-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "kube-controller-manager-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "kube-controller-manager-operator-config" }, "name": "config" }, { "name": "kube-api-access", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "expirationSeconds": 3600, "path": "token" } }, { "configMap": { "items": [ { "key": "ca.crt", "path": "ca.crt" } ], "name": "kube-root-ca.crt" } }, { "downwardAPI": { "items": [ { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" }, "path": "namespace" } ] } } ] } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:06:25Z", "lastUpdateTime": "2026-04-28T13:09:45Z", "message": "ReplicaSet \"kube-controller-manager-operator-d8fbfbf45\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:27Z", "lastUpdateTime": "2026-04-30T12:45:27Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T13:06:25Z", "generation": 1, "labels": { "app": "openshift-kube-scheduler-operator" }, "name": "openshift-kube-scheduler-operator", "namespace": "openshift-kube-scheduler-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "37654", "uid": "579289f7-bcc9-41f9-83e3-6f0d06ecb0ce" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "openshift-kube-scheduler-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-kube-scheduler-operator" }, "name": "openshift-kube-scheduler-operator" }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml" ], "command": [ "cluster-kube-scheduler-operator", "operator" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8ea49f6535b66aa24867061cdc18e5a6ebc10eee4981f1449b28c1e5b86d0af5" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:55c34be971655d7e5ec38546683326ccaced97cb0f857c5cc94e20542ed5b704" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.19.21" }, { "name": "OPERAND_IMAGE_VERSION", "value": "1.32.10" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:55c34be971655d7e5ec38546683326ccaced97cb0f857c5cc94e20542ed5b704", "imagePullPolicy": "IfNotPresent", "name": "kube-scheduler-operator-container", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount", "name": "kube-api-access", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-kube-scheduler-operator", "serviceAccountName": "openshift-kube-scheduler-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "kube-scheduler-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "openshift-kube-scheduler-operator-config" }, "name": "config" }, { "name": "kube-api-access", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "expirationSeconds": 3600, "path": "token" } }, { "configMap": { "items": [ { "key": "ca.crt", "path": "ca.crt" } ], "name": "kube-root-ca.crt" } }, { "downwardAPI": { "items": [ { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" }, "path": "namespace" } ] } } ] } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:06:25Z", "lastUpdateTime": "2026-04-28T13:09:44Z", "message": "ReplicaSet \"openshift-kube-scheduler-operator-7fdffb6b5c\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:19Z", "lastUpdateTime": "2026-04-30T12:45:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T13:06:25Z", "generation": 1, "labels": { "app": "kube-storage-version-migrator-operator" }, "name": "kube-storage-version-migrator-operator", "namespace": "openshift-kube-storage-version-migrator-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "37692", "uid": "9da87ad3-1926-4144-b0f2-ac015d970af0" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "kube-storage-version-migrator-operator" } }, "strategy": { "type": "Recreate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "kube-storage-version-migrator-operator" }, "name": "kube-storage-version-migrator-operator" }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml" ], "command": [ "cluster-kube-storage-version-migrator-operator", "start" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:089ab1e990f8c8c27cdc7e01a43807907defafc657d126bd46156b40b6357055" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:89b0f0b7159fbc23cc593dc07b23f3c306246f5a708cceb2b99382d597d4643b" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.19.21" }, { "name": "OPERAND_IMAGE_VERSION", "value": "4.19.21" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:89b0f0b7159fbc23cc593dc07b23f3c306246f5a708cceb2b99382d597d4643b", "imagePullPolicy": "IfNotPresent", "name": "kube-storage-version-migrator-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "kube-storage-version-migrator-operator", "serviceAccountName": "kube-storage-version-migrator-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:06:25Z", "lastUpdateTime": "2026-04-28T13:09:44Z", "message": "ReplicaSet \"kube-storage-version-migrator-operator-dd7cdf98b\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:19Z", "lastUpdateTime": "2026-04-30T12:45:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "51dee9b9e74f4dd11652f8c8ceea0e2289136f22f5d69dc590c514a743d761e6" }, "creationTimestamp": "2026-04-28T13:09:48Z", "generation": 1, "labels": { "app": "migrator" }, "name": "migrator", "namespace": "openshift-kube-storage-version-migrator", "resourceVersion": "37607", "uid": "f89671ed-dd0d-424a-910a-820ce74966c0" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "migrator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "migrator" } }, "spec": { "containers": [ { "args": [ "trap 'echo \"Termination signal received, but ignored. Continuing...\"; sleep infinity' TERM\nmigrator \"$@\" \u0026 wait $!", "bash", "--alsologtostderr", "--v=2" ], "command": [ "/bin/bash", "-c" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:089ab1e990f8c8c27cdc7e01a43807907defafc657d126bd46156b40b6357055", "imagePullPolicy": "IfNotPresent", "name": "migrator", "resources": { "requests": { "cpu": "10m", "memory": "200Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "trap 'echo \"Gracefully sleeping for 25s to let another pod start...\"; sleep 25; exit' EXIT\nwhile true; do echo \"Waiting for termination...\"; sleep 3600 \u0026 wait $!; done" ], "command": [ "/bin/bash", "-c" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:089ab1e990f8c8c27cdc7e01a43807907defafc657d126bd46156b40b6357055", "imagePullPolicy": "IfNotPresent", "name": "graceful-termination", "resources": { "requests": { "cpu": "1m", "memory": "1Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "kube-storage-version-migrator-sa", "serviceAccountName": "kube-storage-version-migrator-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:09:48Z", "lastUpdateTime": "2026-04-28T13:09:51Z", "message": "ReplicaSet \"migrator-c689db697\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:19Z", "lastUpdateTime": "2026-04-30T12:45:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "capability.openshift.io/name": "MachineAPI", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T13:07:33Z", "generation": 1, "labels": { "k8s-app": "cluster-autoscaler-operator" }, "name": "cluster-autoscaler-operator", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "38925", "uid": "5ebb0d6d-3d7a-4f38-9135-322708660d34" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "k8s-app": "cluster-autoscaler-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "cluster-autoscaler-operator", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "cluster-autoscaler-operator" } }, "spec": { "containers": [ { "args": [ "--secure-listen-address=0.0.0.0:9192", "--upstream=http://127.0.0.1:9191/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9192, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "auth-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/private", "name": "cert", "readOnly": true } ] }, { "args": [ "-alsologtostderr" ], "command": [ "cluster-autoscaler-operator" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.19.21" }, { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "CLUSTER_AUTOSCALER_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "LEADER_ELECTION_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "CLUSTER_AUTOSCALER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:dce208b9dab621adf012c0ad993ba086e6a9713b05af187e1e2839b0049c3727" }, { "name": "WEBHOOKS_CERT_DIR", "value": "/etc/cluster-autoscaler-operator/tls" }, { "name": "WEBHOOKS_PORT", "value": "8443" }, { "name": "METRICS_PORT", "value": "9191" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d8038c023145a4f0564aaaa9400c0b5115dae7fafe3f8ec059262112c969a2d4", "imagePullPolicy": "IfNotPresent", "name": "cluster-autoscaler-operator", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/cluster-autoscaler-operator/tls", "name": "cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cluster-autoscaler-operator", "serviceAccountName": "cluster-autoscaler-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "cluster-autoscaler-operator-cert" } }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy-cluster-autoscaler-operator" }, "name": "auth-proxy-config" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:07:33Z", "lastUpdateTime": "2026-04-28T13:11:08Z", "message": "ReplicaSet \"cluster-autoscaler-operator-74b489d86f\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:30Z", "lastUpdateTime": "2026-04-30T12:45:30Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "capability.openshift.io/name": "baremetal", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T13:06:44Z", "generation": 1, "labels": { "k8s-app": "cluster-baremetal-operator" }, "name": "cluster-baremetal-operator", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "38816", "uid": "0cfcbafc-4ae8-4eff-95f8-6d05165c7353" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "k8s-app": "cluster-baremetal-operator" } }, "strategy": { "type": "Recreate" }, "template": { "metadata": { "annotations": { "capability.openshift.io/name": "baremetal", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true", "openshift.io/required-scc": "anyuid", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "cluster-baremetal-operator" } }, "spec": { "containers": [ { "args": [ "--enable-leader-election" ], "command": [ "/usr/bin/cluster-baremetal-operator" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.19.21" }, { "name": "COMPONENT_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "METRICS_PORT", "value": "8080" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0a3b7bfca0b06a7474f9a71a3fe17df6aa36a73f7ce86676983e6871f4cc3527", "imagePullPolicy": "IfNotPresent", "name": "cluster-baremetal-operator", "ports": [ { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/cluster-baremetal-operator/tls", "name": "cert", "readOnly": true }, { "mountPath": "/etc/cluster-baremetal-operator/images", "name": "images", "readOnly": true } ] }, { "args": [ "--secure-listen-address=0.0.0.0:8443", "--upstream=http://localhost:8080/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--config-file=/etc/baremetal-kube-rbac-proxy/config-file.yaml", "--logtostderr=true", "--v=10" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "baremetal-kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/baremetal-kube-rbac-proxy", "name": "config" }, { "mountPath": "/etc/tls/private", "name": "cluster-baremetal-operator-tls" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "cluster-baremetal-operator", "serviceAccountName": "cluster-baremetal-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "cert", "secret": { "defaultMode": 420, "secretName": "cluster-baremetal-webhook-server-cert" } }, { "configMap": { "defaultMode": 420, "name": "baremetal-kube-rbac-proxy" }, "name": "config" }, { "name": "cluster-baremetal-operator-tls", "secret": { "defaultMode": 420, "secretName": "cluster-baremetal-operator-tls" } }, { "configMap": { "defaultMode": 420, "name": "cluster-baremetal-operator-images" }, "name": "images" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:06:44Z", "lastUpdateTime": "2026-04-28T13:11:10Z", "message": "ReplicaSet \"cluster-baremetal-operator-7d8f96dcf6\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:29Z", "lastUpdateTime": "2026-04-30T12:45:29Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "capability.openshift.io/name": "MachineAPI", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T13:07:26Z", "generation": 1, "labels": { "k8s-app": "control-plane-machine-set-operator" }, "name": "control-plane-machine-set-operator", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "37718", "uid": "b56bc22b-33b2-4918-b551-d7d2f9063443" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "k8s-app": "control-plane-machine-set-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "control-plane-machine-set-operator" } }, "spec": { "containers": [ { "args": [ "-v=2", "--leader-elect=true", "--leader-elect-lease-duration=137s", "--leader-elect-renew-deadline=107s", "--leader-elect-retry-period=26s", "--leader-elect-resource-namespace=openshift-machine-api" ], "command": [ "/manager" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.19.21" }, { "name": "COMPONENT_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ee650c3bd64716add05d4b2346b6a258fb7b6632d58fe09cc2507dff2103a5e8", "imagePullPolicy": "IfNotPresent", "name": "control-plane-machine-set-operator", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "control-plane-machine-set-operator-tls" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "control-plane-machine-set-operator", "serviceAccountName": "control-plane-machine-set-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "control-plane-machine-set-operator-tls", "secret": { "defaultMode": 420, "secretName": "control-plane-machine-set-operator-tls" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:07:26Z", "lastUpdateTime": "2026-04-28T13:11:08Z", "message": "ReplicaSet \"control-plane-machine-set-operator-76d66bf4f4\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:19Z", "lastUpdateTime": "2026-04-30T12:45:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "machine.openshift.io/owned": "", "openshift.io/required-scc": "restricted-v2", "operator.openshift.io/dep-openshift-machine-api.mao-trusted-ca.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "e977aa8088353c7bdaf8e17d3922d506acebb73d07bb9d2b01e324d0e7de16ce" }, "creationTimestamp": "2026-04-28T13:11:11Z", "generation": 1, "labels": { "api": "clusterapi", "k8s-app": "controller" }, "name": "machine-api-controllers", "namespace": "openshift-machine-api", "resourceVersion": "37623", "uid": "a78c7787-fbc3-4562-bd5b-dd352a8627a5" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "api": "clusterapi", "k8s-app": "controller" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "operator.openshift.io/dep-openshift-machine-api.mao-trusted-ca.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "api": "clusterapi", "k8s-app": "controller" } }, "spec": { "containers": [ { "args": [ "--logtostderr=true", "--v=3", "--leader-elect=true", "--leader-elect-lease-duration=120s", "--namespace=openshift-machine-api", "--feature-gates=AzureWorkloadIdentity=true,GCPLabelsTags=true,MachineAPIMigration=false,VSphereHostVMGroupZonal=false,VSphereMultiDisk=false" ], "command": [ "/machineset-controller" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:130a8bd316f2517534533ff6a857c9587540be097cca253bc4fc06d62d7d012c", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "machineset-controller", "ports": [ { "containerPort": 8443, "name": "webhook-server", "protocol": "TCP" }, { "containerPort": 9441, "name": "healthz", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/readyz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/machine-api-operator/tls", "name": "machineset-webhook-cert", "readOnly": true } ] }, { "args": [ "--logtostderr=true", "--v=3", "--leader-elect=true", "--leader-elect-lease-duration=120s", "--namespace=openshift-machine-api", "--feature-gates=AzureWorkloadIdentity=true,GCPLabelsTags=true,MachineAPIMigration=false,VSphereHostVMGroupZonal=false,VSphereMultiDisk=false" ], "command": [ "/machine-controller-manager" ], "env": [ { "name": "NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "RELEASE_VERSION", "value": "4.19.21" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5a3255e45f2bc1fa3a3669bb87af3b13bb278b0d5e8d665f5d772b43700de89e", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "machine-controller", "ports": [ { "containerPort": 8440, "name": "machine-webhook", "protocol": "TCP" }, { "containerPort": 9440, "name": "healthz", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true }, { "mountPath": "/etc/machine-api-operator/tls", "name": "machine-webhook-cert", "readOnly": true } ] }, { "args": [ "--logtostderr=true", "--v=3", "--leader-elect=true", "--leader-elect-lease-duration=120s", "--namespace=openshift-machine-api" ], "command": [ "/nodelink-controller" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:130a8bd316f2517534533ff6a857c9587540be097cca253bc4fc06d62d7d012c", "imagePullPolicy": "IfNotPresent", "name": "nodelink-controller", "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--logtostderr=true", "--v=3", "--leader-elect=true", "--leader-elect-lease-duration=120s", "--namespace=openshift-machine-api" ], "command": [ "/machine-healthcheck" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:130a8bd316f2517534533ff6a857c9587540be097cca253bc4fc06d62d7d012c", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "machine-healthcheck-controller", "ports": [ { "containerPort": 9442, "name": "healthz", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--secure-listen-address=0.0.0.0:8442", "--upstream=http://localhost:8082", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-machineset-mtrc", "ports": [ { "containerPort": 8442, "name": "machineset-mtrc", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "config" }, { "mountPath": "/etc/tls/private", "name": "machine-api-controllers-tls" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:8441", "--upstream=http://localhost:8081", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-machine-mtrc", "ports": [ { "containerPort": 8441, "name": "machine-mtrc", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "config" }, { "mountPath": "/etc/tls/private", "name": "machine-api-controllers-tls" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:8444", "--upstream=http://localhost:8083", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-mhc-mtrc", "ports": [ { "containerPort": 8444, "name": "mhc-mtrc", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "config" }, { "mountPath": "/etc/tls/private", "name": "machine-api-controllers-tls" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "machine-api-controllers", "serviceAccountName": "machine-api-controllers", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master" }, { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "machineset-webhook-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "machine-api-operator-webhook-cert" } }, { "name": "machine-webhook-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "machine-api-operator-machine-webhook-cert" } }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "config" }, { "name": "machine-api-controllers-tls", "secret": { "defaultMode": 420, "secretName": "machine-api-controllers-tls" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "mao-trusted-ca", "optional": true }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:11:11Z", "lastUpdateTime": "2026-04-28T13:12:02Z", "message": "ReplicaSet \"machine-api-controllers-559687c785\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:19Z", "lastUpdateTime": "2026-04-30T12:45:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "capability.openshift.io/name": "MachineAPI", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T13:06:46Z", "generation": 1, "labels": { "k8s-app": "machine-api-operator" }, "name": "machine-api-operator", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "37729", "uid": "d652646a-3794-4084-aad7-62c1cc2bbf82" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "k8s-app": "machine-api-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "capability.openshift.io/name": "MachineAPI", "kubectl.kubernetes.io/default-container": "machine-api-operator", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "machine-api-operator" } }, "spec": { "containers": [ { "args": [ "--secure-listen-address=0.0.0.0:8443", "--upstream=http://localhost:8080/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "config" }, { "mountPath": "/etc/tls/private", "name": "machine-api-operator-tls" } ] }, { "args": [ "start", "--images-json=/etc/machine-api-operator-config/images/images.json", "--alsologtostderr", "--v=3" ], "command": [ "/machine-api-operator" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.19.21" }, { "name": "COMPONENT_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "METRICS_PORT", "value": "8080" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:130a8bd316f2517534533ff6a857c9587540be097cca253bc4fc06d62d7d012c", "imagePullPolicy": "IfNotPresent", "name": "machine-api-operator", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/machine-api-operator-config/images", "name": "images" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "machine-api-operator", "serviceAccountName": "machine-api-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "machine-api-operator-images" }, "name": "images" }, { "name": "machine-api-operator-tls", "secret": { "defaultMode": 420, "secretName": "machine-api-operator-tls" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:06:46Z", "lastUpdateTime": "2026-04-28T13:11:11Z", "message": "ReplicaSet \"machine-api-operator-84764bcf7b\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:20Z", "lastUpdateTime": "2026-04-30T12:45:20Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:11:13Z", "generation": 1, "name": "machine-config-controller", "namespace": "openshift-machine-config-operator", "resourceVersion": "37710", "uid": "8af5554e-320f-4a04-bb00-7561a5418fd7" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "k8s-app": "machine-config-controller" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "machine-config-controller" } }, "spec": { "containers": [ { "args": [ "start", "--resourcelock-namespace=openshift-machine-config-operator", "--v=2", "--payload-version=4.19.21" ], "command": [ "/usr/bin/machine-config-controller" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9f6f6af7f1e599723592d47a3c2081cd03b977c70ed4df7351a489f6ae6a71bc", "imagePullPolicy": "IfNotPresent", "name": "machine-config-controller", "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--secure-listen-address=0.0.0.0:9001", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--upstream=http://127.0.0.1:8797", "--logtostderr=true", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9001, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "proxy-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "mcc-auth-proxy-config" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "machine-config-controller", "serviceAccountName": "machine-config-controller", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "proxy-tls", "secret": { "defaultMode": 420, "secretName": "mcc-proxy-tls" } }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "mcc-auth-proxy-config" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:11:13Z", "lastUpdateTime": "2026-04-28T13:11:14Z", "message": "ReplicaSet \"machine-config-controller-9b6c9dbfb\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:19Z", "lastUpdateTime": "2026-04-30T12:45:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T13:06:45Z", "generation": 1, "labels": { "k8s-app": "machine-config-operator" }, "name": "machine-config-operator", "namespace": "openshift-machine-config-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "37782", "uid": "459642d3-ac59-4ace-ba27-4351e450825f" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "k8s-app": "machine-config-operator" } }, "strategy": { "type": "Recreate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "anyuid", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "machine-config-operator" } }, "spec": { "containers": [ { "args": [ "start", "--images-json=/etc/mco/images/images.json", "--payload-version=4.19.21", "--operator-image=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9f6f6af7f1e599723592d47a3c2081cd03b977c70ed4df7351a489f6ae6a71bc" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.19.21" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9f6f6af7f1e599723592d47a3c2081cd03b977c70ed4df7351a489f6ae6a71bc", "imagePullPolicy": "IfNotPresent", "name": "machine-config-operator", "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/mco/images", "name": "images" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9001", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--upstream=http://127.0.0.1:8797", "--logtostderr=true", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9001, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "proxy-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "auth-proxy-config" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "machine-config-operator", "serviceAccountName": "machine-config-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "machine-config-operator-images" }, "name": "images" }, { "name": "proxy-tls", "secret": { "defaultMode": 420, "secretName": "mco-proxy-tls" } }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "auth-proxy-config" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:06:45Z", "lastUpdateTime": "2026-04-28T13:10:51Z", "message": "ReplicaSet \"machine-config-operator-59cd449855\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:20Z", "lastUpdateTime": "2026-04-30T12:45:20Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "capability.openshift.io/name": "marketplace", "config.openshift.io/inject-proxy": "marketplace-operator", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T13:06:29Z", "generation": 1, "name": "marketplace-operator", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "38020", "uid": "71f58660-acf9-47da-9110-4d4412a61201" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "name": "marketplace-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "marketplace-operator" } }, "spec": { "containers": [ { "args": [ "-defaultsDir=/defaults", "-clusterOperatorName=marketplace", "-tls-cert", "/var/run/secrets/serving-cert/tls.crt", "-tls-key", "/var/run/secrets/serving-cert/tls.key" ], "command": [ "marketplace-operator" ], "env": [ { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "marketplace-operator" }, { "name": "RELEASE_VERSION", "value": "4.19.21" }, { "name": "GOMEMLIMIT", "value": "5MiB" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1f45c72d02d1b4c5408a70037f47e5a4ac5051ddc10360300ac265b624206a05", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "marketplace-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8080, "name": "healthz", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1m", "memory": "5Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/ca-trust/extracted/pem/", "name": "marketplace-trusted-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "marketplace-operator-metrics" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "marketplace-operator", "serviceAccountName": "marketplace-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "marketplace-trusted-ca", "optional": true }, "name": "marketplace-trusted-ca" }, { "name": "marketplace-operator-metrics", "secret": { "defaultMode": 420, "secretName": "marketplace-operator-metrics" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:06:29Z", "lastUpdateTime": "2026-04-28T13:10:52Z", "message": "ReplicaSet \"marketplace-operator-5645957bb6\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:22Z", "lastUpdateTime": "2026-04-30T12:45:22Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T13:06:40Z", "generation": 1, "labels": { "app": "cluster-monitoring-operator", "app.kubernetes.io/name": "cluster-monitoring-operator" }, "name": "cluster-monitoring-operator", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "37606", "uid": "859b38c2-4d83-4e6d-859f-723c705495dc" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "cluster-monitoring-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "cluster-monitoring-operator", "app.kubernetes.io/name": "cluster-monitoring-operator" } }, "spec": { "containers": [ { "args": [ "-namespace=openshift-monitoring", "-namespace-user-workload=openshift-user-workload-monitoring", "-configmap=cluster-monitoring-config", "-release-version=$(RELEASE_VERSION)", "-v=2", "-cert-file=/etc/tls/private/tls.crt", "-key-file=/etc/tls/private/tls.key", "-images=prometheus-operator=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bc84046e6814c711eacc8bb4629809e0dd5df60db21aaec3888d60e470a0828c", "-images=prometheus-config-reloader=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:068cfa5a62734f46e7b7315aa9ef0ad9b4b9e5bff6f9dd400f80f694e58c9f81", "-images=prometheus-operator-admission-webhook=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5dc48f18fe37f8f5b7e0a8dee07e473fcd48585063dc7e39524af52f6c6a9106", "-images=configmap-reloader=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:49c6cea85337d5a40550f032572b21aa3e9637a72bf30923b6003d0e20bbcdd3", "-images=prometheus=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:26e8327cb010c0c76dacb990a067c716443e60fccd6eb13d513b1db7e5a7ed76", "-images=alertmanager=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:98be01460af2ecbdc04f98c7c8ca0d23b6530409ee7f8bf5d451e9b4bd35c59d", "-images=node-exporter=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2ff0422ff7d963a59bd869131b9d362eaba19b71d47b116c24a46302fa4fa39b", "-images=kube-state-metrics=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e4ef059d93cc62ee78ca36d77c141eb5d61f6ddea5f4427759f8899497a45f65", "-images=openshift-state-metrics=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0f74dee0826d2a12f0ab44cd171182f9c9807979d88df6709f2c1caf69bf973b", "-images=kube-rbac-proxy=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "-images=telemeter-client=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:aa6cc320f100d71bcdaa4153bbcd0eced8afcd1644459a7b46eb578851c0034e", "-images=prom-label-proxy=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e90ecd7a0cf88221ef200d11bc70937bc7f396533c023f684124e2068df9c221", "-images=thanos=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:255c6bb8bdfabf5bd8968ff3a9ddfe3a764c597f28bcba9f2312794c34e1ffff", "-images=monitoring-plugin=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7a88029aa52c432f0f54125da88a7a6a2616b8ad58c59f5a5329855bb1ca8692", "-images=kube-metrics-server=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c93aa21e5511321da290ca93029c91802c91aa6b348fe2c0f7c7ac930bae252c" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.19.21" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c5086fd5aea914c2172bfb6dd747325f5925ec9c5e373323645999d9865594ee", "imagePullPolicy": "IfNotPresent", "name": "cluster-monitoring-operator", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "75Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "cluster-monitoring-operator-tls", "readOnly": true }, { "mountPath": "/etc/cluster-monitoring-operator/telemetry", "name": "telemetry-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cluster-monitoring-operator", "serviceAccountName": "cluster-monitoring-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node.kubernetes.io/memory-pressure", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "telemetry-config" }, "name": "telemetry-config" }, { "name": "cluster-monitoring-operator-tls", "secret": { "defaultMode": 420, "secretName": "cluster-monitoring-operator-tls" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:06:40Z", "lastUpdateTime": "2026-04-28T13:11:02Z", "message": "ReplicaSet \"cluster-monitoring-operator-66685cc58c\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:19Z", "lastUpdateTime": "2026-04-30T12:45:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:16:15Z", "generation": 1, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "kube-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.15.0" }, "name": "kube-state-metrics", "namespace": "openshift-monitoring", "resourceVersion": "37715", "uid": "6ca02927-b53f-43b5-87eb-904c8727d2a5" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/name": "kube-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "kube-state-metrics", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "kube-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.15.0" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--host=127.0.0.1", "--port=8081", "--telemetry-host=127.0.0.1", "--telemetry-port=8082", "--metric-denylist=\n^kube_secret_labels$,\n^kube_.+_annotations$,\n^kube_customresource_.+_annotations_info$,\n^kube_customresource_.+_labels_info$\n", "--metric-labels-allowlist=pods=[*],nodes=[*],namespaces=[*],persistentvolumes=[*],persistentvolumeclaims=[*],poddisruptionbudgets=[*]", "--metric-denylist=\n^kube_.+_created$,\n^kube_.+_metadata_resource_version$,\n^kube_replicaset_metadata_generation$,\n^kube_replicaset_status_observed_generation$,\n^kube_pod_restart_policy$,\n^kube_pod_init_container_status_terminated$,\n^kube_pod_init_container_status_running$,\n^kube_pod_container_status_terminated$,\n^kube_pod_container_status_running$,\n^kube_pod_completion_time$,\n^kube_pod_status_scheduled$\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e4ef059d93cc62ee78ca36d77c141eb5d61f6ddea5f4427759f8899497a45f65", "imagePullPolicy": "IfNotPresent", "name": "kube-state-metrics", "resources": { "requests": { "cpu": "2m", "memory": "80Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp", "name": "volume-directive-shadow" }, { "mountPath": "/etc/kube-state-metrics", "name": "kube-state-metrics-custom-resource-state-configmap", "readOnly": true } ] }, { "args": [ "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8081/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-main", "ports": [ { "containerPort": 8443, "name": "https-main", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "kube-state-metrics-tls" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca" }, { "mountPath": "/etc/kube-rbac-policy", "name": "kube-state-metrics-kube-rbac-proxy-config", "readOnly": true } ] }, { "args": [ "--secure-listen-address=:9443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8082/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-self", "ports": [ { "containerPort": 9443, "name": "https-self", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "kube-state-metrics-tls" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca" }, { "mountPath": "/etc/kube-rbac-policy", "name": "kube-state-metrics-kube-rbac-proxy-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kube-state-metrics", "serviceAccountName": "kube-state-metrics", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "volume-directive-shadow" }, { "name": "kube-state-metrics-tls", "secret": { "defaultMode": 420, "secretName": "kube-state-metrics-tls" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "name": "kube-state-metrics-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "kube-state-metrics-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "kube-state-metrics-custom-resource-state-configmap" }, "name": "kube-state-metrics-custom-resource-state-configmap" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:16:15Z", "lastUpdateTime": "2026-04-28T13:16:18Z", "message": "ReplicaSet \"kube-state-metrics-9cd77c766\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:19Z", "lastUpdateTime": "2026-04-30T12:45:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-04-28T13:16:20Z", "generation": 2, "labels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "metrics-server", "namespace": "openshift-monitoring", "resourceVersion": "40920", "uid": "e2306d3a-b22b-4d06-8843-9d20003e37c0" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "monitoring.openshift.io/kubelet-serving-ca-bundle-hash": "1roabg52vatu", "monitoring.openshift.io/metrics-server-client-certs-hash": "1vdo53egl42lg", "monitoring.openshift.io/serving-ca-secret-hash": "d93sqdkt0qkvi", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--secure-port=10250", "--kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname", "--kubelet-use-node-status-port", "--metric-resolution=15s", "--kubelet-certificate-authority=/etc/tls/kubelet-serving-ca-bundle/ca-bundle.crt", "--kubelet-client-certificate=/etc/tls/metrics-server-client-certs/tls.crt", "--kubelet-client-key=/etc/tls/metrics-server-client-certs/tls.key", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--shutdown-send-retry-after=true", "--shutdown-delay-duration=150s", "--disable-http2-serving=true", "--tls-min-version=VersionTLS12", "--client-ca-file=/etc/client-ca-bundle/client-ca-file", "--requestheader-client-ca-file=/etc/client-ca-bundle/requestheader-client-ca-file", "--requestheader-allowed-names=kube-apiserver-proxy,system:kube-apiserver-proxy,system:openshift-aggregator", "--requestheader-extra-headers-prefix=X-Remote-Extra-", "--requestheader-group-headers=X-Remote-Group", "--requestheader-username-headers=X-Remote-User", "--audit-policy-file=/etc/audit/metadata-profile.yaml", "--audit-log-path=/var/log/metrics-server/audit.log", "--audit-log-maxsize=100", "--audit-log-maxbackup=5", "--audit-log-compress=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c93aa21e5511321da290ca93029c91802c91aa6b348fe2c0f7c7ac930bae252c", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/livez", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "metrics-server", "ports": [ { "containerPort": 10250, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 6, "httpGet": { "path": "/readyz", "port": "https", "scheme": "HTTPS" }, "initialDelaySeconds": 20, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1m", "memory": "40Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-metrics-server-tls" }, { "mountPath": "/etc/tls/metrics-server-client-certs", "name": "secret-metrics-server-client-certs" }, { "mountPath": "/etc/tls/kubelet-serving-ca-bundle", "name": "configmap-kubelet-serving-ca-bundle" }, { "mountPath": "/etc/audit", "name": "metrics-server-audit-profiles", "readOnly": true }, { "mountPath": "/var/log/metrics-server", "name": "audit-log" }, { "mountPath": "/etc/client-ca-bundle", "name": "client-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "metrics-server", "serviceAccountName": "metrics-server", "terminationGracePeriodSeconds": 170, "volumes": [ { "name": "secret-metrics-server-client-certs", "secret": { "defaultMode": 420, "secretName": "metrics-server-client-certs" } }, { "name": "secret-metrics-server-tls", "secret": { "defaultMode": 420, "secretName": "metrics-server-tls" } }, { "configMap": { "defaultMode": 420, "name": "kubelet-serving-ca-bundle" }, "name": "configmap-kubelet-serving-ca-bundle" }, { "emptyDir": {}, "name": "audit-log" }, { "configMap": { "defaultMode": 420, "name": "metrics-server-audit-profiles" }, "name": "metrics-server-audit-profiles" }, { "name": "client-ca-bundle", "secret": { "defaultMode": 420, "secretName": "metrics-server-6nt2ivmspig3m" } } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-04-30T12:46:02Z", "lastUpdateTime": "2026-04-30T12:46:02Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-04-28T13:16:20Z", "lastUpdateTime": "2026-04-30T12:48:29Z", "message": "ReplicaSet \"metrics-server-545c6cd765\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 2, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:18:52Z", "generation": 1, "labels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "monitoring-plugin", "namespace": "openshift-monitoring", "resourceVersion": "39372", "uid": "c63ab816-6ce3-4e34-9e0c-effe8fdee581" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "automountServiceAccountToken": false, "containers": [ { "args": [ "-config-path=/opt/app-root/web/dist", "-static-path=/opt/app-root/web/dist", "-cert=/var/cert/tls.crt", "-key=/var/cert/tls.key" ], "command": [ "/opt/app-root/plugin-backend" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7a88029aa52c432f0f54125da88a7a6a2616b8ad58c59f5a5329855bb1ca8692", "imagePullPolicy": "IfNotPresent", "name": "monitoring-plugin", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/cert", "name": "monitoring-plugin-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "monitoring-plugin-cert", "secret": { "defaultMode": 420, "secretName": "monitoring-plugin-cert" } } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-04-28T13:18:52Z", "lastUpdateTime": "2026-04-28T13:19:55Z", "message": "ReplicaSet \"monitoring-plugin-6b6f4bdff8\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:19Z", "lastUpdateTime": "2026-04-30T12:45:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:16:15Z", "generation": 1, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "openshift-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "openshift-state-metrics", "namespace": "openshift-monitoring", "resourceVersion": "37757", "uid": "80a48256-82f9-416e-82db-e652df657124" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/name": "openshift-state-metrics" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "openshift-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "spec": { "containers": [ { "args": [ "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8081/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-policy/config.yaml", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-main", "ports": [ { "containerPort": 8443, "name": "https-main", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "openshift-state-metrics-tls" }, { "mountPath": "/etc/kube-rbac-policy", "name": "openshift-state-metrics-kube-rbac-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] }, { "args": [ "--secure-listen-address=:9443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8082/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-policy/config.yaml", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-self", "ports": [ { "containerPort": 9443, "name": "https-self", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "openshift-state-metrics-tls" }, { "mountPath": "/etc/kube-rbac-policy", "name": "openshift-state-metrics-kube-rbac-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] }, { "args": [ "--host=127.0.0.1", "--port=8081", "--telemetry-host=127.0.0.1", "--telemetry-port=8082" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0f74dee0826d2a12f0ab44cd171182f9c9807979d88df6709f2c1caf69bf973b", "imagePullPolicy": "IfNotPresent", "name": "openshift-state-metrics", "resources": { "requests": { "cpu": "1m", "memory": "32Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-state-metrics", "serviceAccountName": "openshift-state-metrics", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "openshift-state-metrics-tls", "secret": { "defaultMode": 420, "secretName": "openshift-state-metrics-tls" } }, { "name": "openshift-state-metrics-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "openshift-state-metrics-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:16:15Z", "lastUpdateTime": "2026-04-28T13:16:17Z", "message": "ReplicaSet \"openshift-state-metrics-df784dd69\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:20Z", "lastUpdateTime": "2026-04-30T12:45:20Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:16:09Z", "generation": 1, "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.81.0" }, "name": "prometheus-operator", "namespace": "openshift-monitoring", "resourceVersion": "37630", "uid": "59bf9b30-4865-46ab-aab6-2bf8f8805228" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/name": "prometheus-operator", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "prometheus-operator", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.81.0" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--kubelet-service=kube-system/kubelet", "--prometheus-config-reloader=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:068cfa5a62734f46e7b7315aa9ef0ad9b4b9e5bff6f9dd400f80f694e58c9f81", "--kubelet-endpoints=true", "--kubelet-endpointslice=false", "--watch-referenced-objects-in-all-namespaces=true", "--prometheus-instance-namespaces=openshift-monitoring", "--thanos-ruler-instance-namespaces=openshift-monitoring", "--alertmanager-instance-namespaces=openshift-monitoring", "--config-reloader-cpu-limit=0", "--config-reloader-memory-limit=0", "--config-reloader-cpu-request=1m", "--config-reloader-memory-request=10Mi", "--web.listen-address=127.0.0.1:8080", "--controller-id=openshift-monitoring/prometheus-operator" ], "env": [ { "name": "GOGC", "value": "30" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bc84046e6814c711eacc8bb4629809e0dd5df60db21aaec3888d60e470a0828c", "imagePullPolicy": "IfNotPresent", "name": "prometheus-operator", "resources": { "requests": { "cpu": "5m", "memory": "150Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://localhost:8080/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "prometheus-operator-tls", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true }, { "mountPath": "/etc/kube-rbac-policy", "name": "prometheus-operator-kube-rbac-proxy-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "prometheus-operator", "serviceAccountName": "prometheus-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "prometheus-operator-tls", "secret": { "defaultMode": 420, "secretName": "prometheus-operator-tls" } }, { "name": "prometheus-operator-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "prometheus-operator-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:16:09Z", "lastUpdateTime": "2026-04-28T13:16:12Z", "message": "ReplicaSet \"prometheus-operator-bcdd488cb\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:19Z", "lastUpdateTime": "2026-04-30T12:45:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:11:02Z", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.81.0" }, "name": "prometheus-operator-admission-webhook", "namespace": "openshift-monitoring", "resourceVersion": "38726", "uid": "a02fadae-cebc-43bd-a270-15486f030b8b" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "prometheus-operator-admission-webhook", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.81.0" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "automountServiceAccountToken": false, "containers": [ { "args": [ "--web.enable-tls=true", "--web.cert-file=/etc/tls/private/tls.crt", "--web.key-file=/etc/tls/private/tls.key", "--web.tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--web.tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5dc48f18fe37f8f5b7e0a8dee07e473fcd48585063dc7e39524af52f6c6a9106", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "prometheus-operator-admission-webhook", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "5m", "memory": "30Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "tls-certificates", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "prometheus-operator-admission-webhook", "serviceAccountName": "prometheus-operator-admission-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls-certificates", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "prometheus-operator-admission-webhook-tls" } } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-04-28T13:11:02Z", "lastUpdateTime": "2026-04-28T13:16:08Z", "message": "ReplicaSet \"prometheus-operator-admission-webhook-6b665945dd\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:20Z", "lastUpdateTime": "2026-04-30T12:45:20Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:21:23Z", "generation": 1, "labels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "telemeter-client", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "telemeter-client", "namespace": "openshift-monitoring", "resourceVersion": "37746", "uid": "8953de28-c3c9-4eeb-98b3-b1c5bc2893d7" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/name": "telemeter-client" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}", "telemeter-token-hash": "15goceamu8hbo" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "telemeter-client", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "spec": { "containers": [ { "command": [ "/usr/bin/telemeter-client", "--id=$(ID)", "--from=$(FROM)", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--from-ca-file=/etc/serving-certs-ca-bundle/service-ca.crt", "--from-token-file=/var/run/secrets/kubernetes.io/serviceaccount/token", "--to=$(TO)", "--to-token-file=/etc/telemeter/token", "--listen=localhost:8080", "--anonymize-salt-file=/etc/telemeter/salt", "--anonymize-labels=$(ANONYMIZE_LABELS)", "--match={__name__=~\"cluster:usage:.*\"}", "--match={__name__=\"count:up0\"}", "--match={__name__=\"count:up1\"}", "--match={__name__=\"cluster_version\"}", "--match={__name__=\"cluster_version_available_updates\"}", "--match={__name__=\"cluster_version_capability\"}", "--match={__name__=\"cluster_operator_up\"}", "--match={__name__=\"cluster_operator_conditions\"}", "--match={__name__=\"cluster_version_payload\"}", "--match={__name__=\"cluster_installer\"}", "--match={__name__=\"cluster_infrastructure_provider\"}", "--match={__name__=\"cluster_feature_set\"}", "--match={__name__=\"instance:etcd_object_counts:sum\"}", "--match={__name__=\"ALERTS\",alertstate=\"firing\",severity=~\"critical|warning|info|none\"}", "--match={__name__=\"code:apiserver_request_total:rate:sum\"}", "--match={__name__=\"cluster:capacity_cpu_cores:sum\"}", "--match={__name__=\"cluster:capacity_memory_bytes:sum\"}", "--match={__name__=\"cluster:cpu_usage_cores:sum\"}", "--match={__name__=\"cluster:memory_usage_bytes:sum\"}", "--match={__name__=\"openshift:cpu_usage_cores:sum\"}", "--match={__name__=\"openshift:memory_usage_bytes:sum\"}", "--match={__name__=\"workload:cpu_usage_cores:sum\"}", "--match={__name__=\"workload:memory_usage_bytes:sum\"}", "--match={__name__=\"cluster:virt_platform_nodes:sum\"}", "--match={__name__=\"cluster:node_instance_type_count:sum\"}", "--match={__name__=\"cnv:vmi_status_running:count\"}", "--match={__name__=\"cnv_abnormal\", reason=~\"memory_working_set_delta_from_request|memory_rss_delta_from_request\"}", "--match={__name__=\"cluster:vmi_request_cpu_cores:sum\"}", "--match={__name__=\"node_role_os_version_machine:cpu_capacity_cores:sum\"}", "--match={__name__=\"node_role_os_version_machine:cpu_capacity_sockets:sum\"}", "--match={__name__=\"subscription_sync_total\"}", "--match={__name__=\"olm_resolution_duration_seconds\"}", "--match={__name__=\"csv_succeeded\"}", "--match={__name__=\"csv_abnormal\"}", "--match={__name__=\"cluster:kube_persistentvolumeclaim_resource_requests_storage_bytes:provisioner:sum\"}", "--match={__name__=\"cluster:kubelet_volume_stats_used_bytes:provisioner:sum\"}", "--match={__name__=\"ceph_cluster_total_bytes\"}", "--match={__name__=\"ceph_cluster_total_used_raw_bytes\"}", "--match={__name__=\"ceph_health_status\"}", "--match={__name__=\"odf_system_raw_capacity_total_bytes\"}", "--match={__name__=\"odf_system_raw_capacity_used_bytes\"}", "--match={__name__=\"odf_system_health_status\"}", "--match={__name__=\"job:ceph_osd_metadata:count\"}", "--match={__name__=\"job:kube_pv:count\"}", "--match={__name__=\"job:odf_system_pvs:count\"}", "--match={__name__=\"job:ceph_pools_iops:total\"}", "--match={__name__=\"job:ceph_pools_iops_bytes:total\"}", "--match={__name__=\"job:ceph_versions_running:count\"}", "--match={__name__=\"job:noobaa_total_unhealthy_buckets:sum\"}", "--match={__name__=\"job:noobaa_bucket_count:sum\"}", "--match={__name__=\"job:noobaa_total_object_count:sum\"}", "--match={__name__=\"odf_system_bucket_count\", system_type=\"OCS\", system_vendor=\"Red Hat\"}", "--match={__name__=\"odf_system_objects_total\", system_type=\"OCS\", system_vendor=\"Red Hat\"}", "--match={__name__=\"noobaa_accounts_num\"}", "--match={__name__=\"noobaa_total_usage\"}", "--match={__name__=\"console_url\"}", "--match={__name__=\"cluster:console_auth_login_requests_total:sum\"}", "--match={__name__=\"cluster:console_auth_login_successes_total:sum\"}", "--match={__name__=\"cluster:console_auth_login_failures_total:sum\"}", "--match={__name__=\"cluster:console_auth_logout_requests_total:sum\"}", "--match={__name__=\"cluster:console_usage_users:max\"}", "--match={__name__=\"cluster:console_plugins_info:max\"}", "--match={__name__=\"cluster:console_customization_perspectives_info:max\"}", "--match={__name__=\"cluster:ovnkube_controller_egress_routing_via_host:max\"}", "--match={__name__=\"cluster:ovnkube_controller_admin_network_policies_db_objects:max\",table_name=~\"ACL|Address_Set\"}", "--match={__name__=\"cluster:ovnkube_controller_baseline_admin_network_policies_db_objects:max\",table_name=~\"ACL|Address_Set\"}", "--match={__name__=\"cluster:ovnkube_controller_admin_network_policies_rules:max\",direction=~\"Ingress|Egress\",action=~\"Pass|Allow|Deny\"}", "--match={__name__=\"cluster:ovnkube_controller_baseline_admin_network_policies_rules:max\",direction=~\"Ingress|Egress\",action=~\"Allow|Deny\"}", "--match={__name__=\"cluster:network_attachment_definition_instances:max\"}", "--match={__name__=\"cluster:network_attachment_definition_enabled_instance_up:max\"}", "--match={__name__=\"cluster:ingress_controller_aws_nlb_active:sum\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:min\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:max\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:avg\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:median\"}", "--match={__name__=\"cluster:openshift_route_info:tls_termination:sum\"}", "--match={__name__=\"insightsclient_request_send_total\"}", "--match={__name__=\"cam_app_workload_migrations\"}", "--match={__name__=\"cluster:apiserver_current_inflight_requests:sum:max_over_time:2m\"}", "--match={__name__=\"cluster:alertmanager_integrations:max\"}", "--match={__name__=\"cluster:telemetry_selected_series:count\"}", "--match={__name__=\"openshift:prometheus_tsdb_head_series:sum\"}", "--match={__name__=\"openshift:prometheus_tsdb_head_samples_appended_total:sum\"}", "--match={__name__=\"monitoring:container_memory_working_set_bytes:sum\"}", "--match={__name__=\"namespace_job:scrape_series_added:topk3_sum1h\"}", "--match={__name__=\"namespace_job:scrape_samples_post_metric_relabeling:topk3\"}", "--match={__name__=\"monitoring:haproxy_server_http_responses_total:sum\"}", "--match={__name__=\"profile:cluster_monitoring_operator_collection_profile:max\"}", "--match={__name__=\"vendor_model:node_accelerator_cards:sum\",vendor=~\"NVIDIA|AMD|GAUDI|INTEL|QUALCOMM\"}", "--match={__name__=\"rhmi_status\"}", "--match={__name__=\"status:upgrading:version:rhoam_state:max\"}", "--match={__name__=\"state:rhoam_critical_alerts:max\"}", "--match={__name__=\"state:rhoam_warning_alerts:max\"}", "--match={__name__=\"rhoam_7d_slo_percentile:max\"}", "--match={__name__=\"rhoam_7d_slo_remaining_error_budget:max\"}", "--match={__name__=\"cluster_legacy_scheduler_policy\"}", "--match={__name__=\"cluster_master_schedulable\"}", "--match={__name__=\"che_workspace_status\"}", "--match={__name__=\"che_workspace_started_total\"}", "--match={__name__=\"che_workspace_failure_total\"}", "--match={__name__=\"che_workspace_start_time_seconds_sum\"}", "--match={__name__=\"che_workspace_start_time_seconds_count\"}", "--match={__name__=\"cco_credentials_mode\"}", "--match={__name__=\"cluster:kube_persistentvolume_plugin_type_counts:sum\"}", "--match={__name__=\"acm_managed_cluster_info\"}", "--match={__name__=\"acm_managed_cluster_worker_cores:max\"}", "--match={__name__=\"acm_console_page_count:sum\", page=~\"overview-classic|overview-fleet|search|search-details|clusters|application|governance\"}", "--match={__name__=\"cluster:vsphere_vcenter_info:sum\"}", "--match={__name__=\"cluster:vsphere_esxi_version_total:sum\"}", "--match={__name__=\"cluster:vsphere_node_hw_version_total:sum\"}", "--match={__name__=\"openshift:build_by_strategy:sum\"}", "--match={__name__=\"rhods_aggregate_availability\"}", "--match={__name__=\"rhods_total_users\"}", "--match={__name__=\"instance:etcd_disk_wal_fsync_duration_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"instance:etcd_mvcc_db_total_size_in_bytes:sum\"}", "--match={__name__=\"instance:etcd_network_peer_round_trip_time_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"instance:etcd_mvcc_db_total_size_in_use_in_bytes:sum\"}", "--match={__name__=\"instance:etcd_disk_backend_commit_duration_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"jaeger_operator_instances_storage_types\"}", "--match={__name__=\"jaeger_operator_instances_strategies\"}", "--match={__name__=\"jaeger_operator_instances_agent_strategies\"}", "--match={__name__=\"type:tempo_operator_tempostack_storage_backend:sum\",type=~\"azure|gcs|s3\"}", "--match={__name__=\"state:tempo_operator_tempostack_managed:sum\",state=~\"Managed|Unmanaged\"}", "--match={__name__=\"type:tempo_operator_tempostack_multi_tenancy:sum\",type=~\"static|openshift|disabled\"}", "--match={__name__=\"enabled:tempo_operator_tempostack_jaeger_ui:sum\",enabled=~\"true|false\"}", "--match={__name__=\"type:opentelemetry_collector_receivers:sum\",type=~\"jaeger|hostmetrics|opencensus|prometheus|zipkin|kafka|filelog|journald|k8sevents|kubeletstats|k8scluster|k8sobjects|otlp\"}", "--match={__name__=\"type:opentelemetry_collector_exporters:sum\",type=~\"debug|logging|otlp|otlphttp|prometheus|lokiexporter|kafka|awscloudwatchlogs|loadbalancing\"}", "--match={__name__=\"type:opentelemetry_collector_processors:sum\",type=~\"batch|memorylimiter|attributes|resource|span|k8sattributes|resourcedetection|filter|routing|cumulativetodelta|groupbyattrs\"}", "--match={__name__=\"type:opentelemetry_collector_extensions:sum\",type=~\"zpages|ballast|memorylimiter|jaegerremotesampling|healthcheck|pprof|oauth2clientauth|oidcauth|bearertokenauth|filestorage\"}", "--match={__name__=\"type:opentelemetry_collector_connectors:sum\",type=~\"spanmetrics|forward\"}", "--match={__name__=\"type:opentelemetry_collector_info:sum\",type=~\"deployment|daemonset|sidecar|statefulset\"}", "--match={__name__=\"appsvcs:cores_by_product:sum\"}", "--match={__name__=\"nto_custom_profiles:count\"}", "--match={__name__=\"openshift_csi_share_configmap\"}", "--match={__name__=\"openshift_csi_share_secret\"}", "--match={__name__=\"openshift_csi_share_mount_failures_total\"}", "--match={__name__=\"openshift_csi_share_mount_requests_total\"}", "--match={__name__=\"eo_es_storage_info\"}", "--match={__name__=\"eo_es_redundancy_policy_info\"}", "--match={__name__=\"eo_es_defined_delete_namespaces_total\"}", "--match={__name__=\"eo_es_misconfigured_memory_resources_info\"}", "--match={__name__=\"cluster:eo_es_data_nodes_total:max\"}", "--match={__name__=\"cluster:eo_es_documents_created_total:sum\"}", "--match={__name__=\"cluster:eo_es_documents_deleted_total:sum\"}", "--match={__name__=\"pod:eo_es_shards_total:max\"}", "--match={__name__=\"eo_es_cluster_management_state_info\"}", "--match={__name__=\"imageregistry:imagestreamtags_count:sum\"}", "--match={__name__=\"imageregistry:operations_count:sum\"}", "--match={__name__=\"log_logging_info\"}", "--match={__name__=\"log_collector_error_count_total\"}", "--match={__name__=\"log_forwarder_pipeline_info\"}", "--match={__name__=\"log_forwarder_input_info\"}", "--match={__name__=\"log_forwarder_output_info\"}", "--match={__name__=\"cluster:log_collected_bytes_total:sum\"}", "--match={__name__=\"cluster:log_logged_bytes_total:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_pipelines:sum\"}", "--match={__name__=\"openshift_logging:log_forwarders:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_input_type:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_output_type:sum\"}", "--match={__name__=\"openshift_logging:vector_component_received_bytes_total:rate5m\"}", "--match={__name__=\"cluster:kata_monitor_running_shim_count:sum\"}", "--match={__name__=\"platform:hypershift_hostedclusters:max\"}", "--match={__name__=\"platform:hypershift_nodepools:max\"}", "--match={__name__=\"cluster_name:hypershift_nodepools_size:sum\"}", "--match={__name__=\"cluster_name:hypershift_nodepools_available_replicas:sum\"}", "--match={__name__=\"namespace:noobaa_unhealthy_bucket_claims:max\"}", "--match={__name__=\"namespace:noobaa_buckets_claims:max\"}", "--match={__name__=\"namespace:noobaa_unhealthy_namespace_resources:max\"}", "--match={__name__=\"namespace:noobaa_namespace_resources:max\"}", "--match={__name__=\"namespace:noobaa_unhealthy_namespace_buckets:max\"}", "--match={__name__=\"namespace:noobaa_namespace_buckets:max\"}", "--match={__name__=\"namespace:noobaa_accounts:max\"}", "--match={__name__=\"namespace:noobaa_usage:max\"}", "--match={__name__=\"namespace:noobaa_system_health_status:max\"}", "--match={__name__=\"ocs_advanced_feature_usage\"}", "--match={__name__=\"os_image_url_override:sum\"}", "--match={__name__=\"cluster:mcd_nodes_with_unsupported_packages:count\"}", "--match={__name__=\"cluster:mcd_total_unsupported_packages:sum\"}", "--match={__name__=\"cluster:vsphere_topology_tags:max\"}", "--match={__name__=\"cluster:vsphere_infrastructure_failure_domains:max\"}", "--match={__name__=\"apiserver_list_watch_request_success_total:rate:sum\", verb=~\"LIST|WATCH\"}", "--match={__name__=\"rhacs:telemetry:rox_central_info\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_clusters\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_nodes\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_vcpus\"}", "--match={__name__=\"rhacs:telemetry:rox_sensor_info\"}", "--match={__name__=\"cluster:volume_manager_selinux_pod_context_mismatch_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volume_context_mismatch_warnings_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volume_context_mismatch_errors_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volumes_admitted_total\"}", "--match={__name__=\"ols:provider_model_configuration\"}", "--match={__name__=\"ols:rest_api_query_calls_total:2xx\"}", "--match={__name__=\"ols:rest_api_query_calls_total:4xx\"}", "--match={__name__=\"ols:rest_api_query_calls_total:5xx\"}", "--match={__name__=\"openshift:openshift_network_operator_ipsec_state:info\"}", "--match={__name__=\"cluster:health:group_severity:count\", severity=~\"critical|warning|info|none\"}", "--match={__name__=\"cluster:controlplane_topology:info\", mode=~\"HighlyAvailable|HighlyAvailableArbiter|SingleReplica|DualReplica|External\"}", "--match={__name__=\"cluster:infrastructure_topology:info\", mode=~\"HighlyAvailable|SingleReplica\"}", "--limit-bytes=5242880" ], "env": [ { "name": "ANONYMIZE_LABELS" }, { "name": "FROM", "value": "https://prometheus-k8s.openshift-monitoring.svc:9091" }, { "name": "ID", "value": "76c7c556-7acf-4fff-a0cf-59b5048dedd1" }, { "name": "TO", "value": "https://infogw.api.openshift.com/" }, { "name": "HTTP_PROXY" }, { "name": "HTTPS_PROXY" }, { "name": "NO_PROXY" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:aa6cc320f100d71bcdaa4153bbcd0eced8afcd1644459a7b46eb578851c0034e", "imagePullPolicy": "IfNotPresent", "name": "telemeter-client", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "40Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/serving-certs-ca-bundle", "name": "serving-certs-ca-bundle" }, { "mountPath": "/etc/telemeter", "name": "secret-telemeter-client" }, { "mountPath": "/etc/tls/private", "name": "federate-client-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem/", "name": "telemeter-trusted-ca-bundle", "readOnly": true } ] }, { "args": [ "--reload-url=http://localhost:8080/-/reload", "--watched-dir=/etc/serving-certs-ca-bundle" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:068cfa5a62734f46e7b7315aa9ef0ad9b4b9e5bff6f9dd400f80f694e58c9f81", "imagePullPolicy": "IfNotPresent", "name": "reload", "resources": { "requests": { "cpu": "1m", "memory": "10Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/serving-certs-ca-bundle", "name": "serving-certs-ca-bundle" } ] }, { "args": [ "--secure-listen-address=:8443", "--upstream=http://127.0.0.1:8080/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--config-file=/etc/kube-rbac-policy/config.yaml", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "telemeter-client-tls" }, { "mountPath": "/etc/kube-rbac-policy", "name": "secret-telemeter-client-kube-rbac-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "telemeter-client", "serviceAccountName": "telemeter-client", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "telemeter-client-serving-certs-ca-bundle" }, "name": "serving-certs-ca-bundle" }, { "name": "secret-telemeter-client", "secret": { "defaultMode": 420, "secretName": "telemeter-client" } }, { "name": "telemeter-client-tls", "secret": { "defaultMode": 420, "secretName": "telemeter-client-tls" } }, { "name": "federate-client-tls", "secret": { "defaultMode": 420, "secretName": "federate-client-certs" } }, { "name": "secret-telemeter-client-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "telemeter-client-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "telemeter-trusted-ca-bundle-8i12ta5c71j38", "optional": true }, "name": "telemeter-trusted-ca-bundle" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:21:23Z", "lastUpdateTime": "2026-04-28T13:21:27Z", "message": "ReplicaSet \"telemeter-client-7464c8b844\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:20Z", "lastUpdateTime": "2026-04-30T12:45:20Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:21:20Z", "generation": 1, "labels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.37.2" }, "name": "thanos-querier", "namespace": "openshift-monitoring", "resourceVersion": "39259", "uid": "7ac8c69d-ed7b-4808-9559-232e78b8fadb" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.37.2" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "query", "--grpc-address=127.0.0.1:10901", "--http-address=127.0.0.1:9090", "--log.format=logfmt", "--query.replica-label=prometheus_replica", "--query.replica-label=thanos_ruler_replica", "--endpoint=dnssrv+_grpc._tcp.prometheus-operated.openshift-monitoring.svc.cluster.local", "--query.auto-downsampling", "--store.sd-dns-resolver=miekgdns", "--grpc-client-tls-secure", "--grpc-client-tls-cert=/etc/tls/grpc/client.crt", "--grpc-client-tls-key=/etc/tls/grpc/client.key", "--grpc-client-tls-ca=/etc/tls/grpc/ca.crt", "--grpc-client-server-name=prometheus-grpc", "--rule=dnssrv+_grpc._tcp.prometheus-operated.openshift-monitoring.svc.cluster.local", "--target=dnssrv+_grpc._tcp.prometheus-operated.openshift-monitoring.svc.cluster.local", "--web.disable-cors" ], "env": [ { "name": "HOST_IP_ADDRESS", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "status.hostIP" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:255c6bb8bdfabf5bd8968ff3a9ddfe3a764c597f28bcba9f2312794c34e1ffff", "imagePullPolicy": "IfNotPresent", "name": "thanos-query", "ports": [ { "containerPort": 9090, "name": "http", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "12Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/grpc", "name": "secret-grpc-tls" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9091", "--upstream=http://127.0.0.1:9090", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--ignore-paths=/-/healthy,/-/ready", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 4, "httpGet": { "path": "/-/healthy", "port": 9091, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "kube-rbac-proxy-web", "ports": [ { "containerPort": 9091, "name": "web", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 20, "httpGet": { "path": "/-/ready", "port": 9091, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy-web" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9092", "--upstream=http://127.0.0.1:9095", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--allow-paths=/api/v1/query,/api/v1/query_range,/api/v1/labels,/api/v1/label/*/values,/api/v1/series", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9092, "name": "tenancy", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy" } ] }, { "args": [ "--insecure-listen-address=127.0.0.1:9095", "--upstream=http://127.0.0.1:9090", "--label=namespace", "--enable-label-apis", "--error-on-replace", "--rules-with-active-alerts" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e90ecd7a0cf88221ef200d11bc70937bc7f396533c023f684124e2068df9c221", "imagePullPolicy": "IfNotPresent", "name": "prom-label-proxy", "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--secure-listen-address=0.0.0.0:9093", "--upstream=http://127.0.0.1:9095", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--allow-paths=/api/v1/rules,/api/v1/alerts", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-rules", "ports": [ { "containerPort": 9093, "name": "tenancy-rules", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy-rules" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9094", "--upstream=http://127.0.0.1:9090", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--client-ca-file=/etc/tls/client/client-ca.crt", "--allow-paths=/metrics", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-metrics", "ports": [ { "containerPort": 9094, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy-metrics" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "thanos-querier", "serviceAccountName": "thanos-querier", "terminationGracePeriodSeconds": 120, "volumes": [ { "name": "secret-thanos-querier-tls", "secret": { "defaultMode": 420, "secretName": "thanos-querier-tls" } }, { "name": "secret-thanos-querier-kube-rbac-proxy", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy" } }, { "name": "secret-thanos-querier-kube-rbac-proxy-web", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy-web" } }, { "name": "secret-thanos-querier-kube-rbac-proxy-rules", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy-rules" } }, { "name": "secret-thanos-querier-kube-rbac-proxy-metrics", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy-metrics" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "name": "secret-grpc-tls", "secret": { "defaultMode": 420, "secretName": "thanos-querier-grpc-tls-ebtg9tgne4kd4" } } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-04-28T13:21:20Z", "lastUpdateTime": "2026-04-28T13:21:32Z", "message": "ReplicaSet \"thanos-querier-5b6cf94465\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:20Z", "lastUpdateTime": "2026-04-30T12:45:20Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "3", "kubernetes.io/description": "This deployment launches the Multus admisson controller component.\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.19.21" }, "creationTimestamp": "2026-04-28T13:08:36Z", "generation": 3, "labels": { "app": "multus-admission-controller", "networkoperator.openshift.io/generates-operator-status": "stand-alone" }, "name": "multus-admission-controller", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "a4417b55-69e6-439e-881a-2de94059b2e9" } ], "resourceVersion": "38261", "uid": "be89ff5c-ee1a-4631-8d76-32cf3d323e10" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "multus-admission-controller", "namespace": "openshift-multus" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict-local-volumes": "hosted-cluster-api-access", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "multus-admission-controller", "component": "network", "namespace": "openshift-multus", "openshift.io/component": "network", "type": "infra" } }, "spec": { "containers": [ { "command": [ "/bin/bash", "-c", "set -euo pipefail\nexec /usr/bin/webhook \\\n -bind-address=0.0.0.0 \\\n -port=6443 \\\n -tls-private-key-file=/etc/webhook/tls.key \\\n -tls-cert-file=/etc/webhook/tls.crt \\\n -metrics-listen-address=127.0.0.1:9091 \\\n -alsologtostderr=true \\\n -ignore-namespaces=openshift-etcd,openshift-console,openshift-ingress-canary,openshift-apiserver,openshift-apiserver-operator,openshift-authentication,openshift-authentication-operator,openshift-catalogd,openshift-cloud-controller-manager,openshift-cloud-controller-manager-operator,openshift-cloud-credential-operator,openshift-cloud-network-config-controller,openshift-cluster-csi-drivers,openshift-cluster-machine-approver,openshift-cluster-node-tuning-operator,openshift-cluster-samples-operator,openshift-cluster-storage-operator,openshift-cluster-version,openshift-config-operator,openshift-console,openshift-console-operator,openshift-controller-manager,openshift-controller-manager-operator,openshift-dns,openshift-dns-operator,openshift-etcd-operator,openshift-image-registry,openshift-ingress,openshift-ingress-operator,openshift-insights,openshift-kube-apiserver,openshift-kube-apiserver-operator,openshift-kube-controller-manager,openshift-kube-controller-manager-operator,openshift-kube-scheduler,openshift-kube-scheduler-operator,openshift-kube-storage-version-migrator,openshift-kube-storage-version-migrator-operator,openshift-machine-api,openshift-machine-config-operator,openshift-marketplace,openshift-monitoring,openshift-multus,openshift-network-console,openshift-network-diagnostics,openshift-network-node-identity,openshift-network-operator,openshift-oauth-apiserver,openshift-operator-controller,openshift-operator-lifecycle-manager,openshift-ovn-kubernetes,openshift-route-controller-manager,openshift-service-ca-operator,openshift-user-workload-monitoring" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:fe0e9f6f3272bc3b2955ae0dfd41436b266a125b815d368d7ac332ddfad16ea2", "imagePullPolicy": "IfNotPresent", "name": "multus-admission-controller", "ports": [ { "containerPort": 9091, "name": "metrics-port", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/webhook", "name": "webhook-certs", "readOnly": true } ] }, { "args": [ "--logtostderr", "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--upstream=http://127.0.0.1:9091/", "--tls-private-key-file=/etc/webhook/tls.key", "--tls-cert-file=/etc/webhook/tls.crt" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/webhook", "name": "webhook-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "multus-ac", "serviceAccountName": "multus-ac", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "webhook-certs", "secret": { "defaultMode": 420, "secretName": "multus-admission-controller-secret" } } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-04-30T12:45:19Z", "lastUpdateTime": "2026-04-30T12:45:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-04-28T13:08:36Z", "lastUpdateTime": "2026-04-30T12:45:24Z", "message": "ReplicaSet \"multus-admission-controller-86d8bcf985\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 3, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "kubernetes.io/description": "This deployment deploys the Networking console plugin pod which serves\nthe contents of the Networking section in OpenShift Console\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.19.21" }, "creationTimestamp": "2026-04-28T13:21:55Z", "generation": 1, "labels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator", "networkoperator.openshift.io/generates-operator-status": "stand-alone" }, "name": "networking-console-plugin", "namespace": "openshift-network-console", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "a4417b55-69e6-439e-881a-2de94059b2e9" } ], "resourceVersion": "38659", "uid": "698d1c58-a6f5-4b0b-98d2-a1dbc84aa861" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator" } }, "namespaces": [ "openshift-network-console" ], "topologyKey": "kubernetes.io/hostname" }, "weight": 90 } ] } }, "automountServiceAccountToken": false, "containers": [ { "command": [ "/bin/sh", "-c", "if echo \"$POD_IP\" | grep -qE '^([0-9]{1,3}\\.){3}[0-9]{1,3}$'; then\n LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME=\"9443\"\nelse\n LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME=\"[::]:9443\"\nfi\nsed \"s/LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME/$LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME/g\" /etc/nginx/nginx.conf \u003e /tmp/nginx.conf\nexec nginx -c /tmp/nginx.conf -g 'daemon off;'\n" ], "env": [ { "name": "POD_IP", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "status.podIP" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:12f188adf3514551a41f8afb8601416ef5efb8e0d03a3ac3598d7163b42323ef", "imagePullPolicy": "IfNotPresent", "name": "networking-console-plugin", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/cert", "name": "networking-console-plugin-cert", "readOnly": true }, { "mountPath": "/etc/nginx/nginx.conf", "name": "nginx-conf", "readOnly": true, "subPath": "nginx.conf" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "networking-console-plugin" }, "name": "nginx-conf" }, { "name": "networking-console-plugin-cert", "secret": { "defaultMode": 420, "secretName": "networking-console-plugin-cert" } } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-04-28T13:21:55Z", "lastUpdateTime": "2026-04-28T13:22:00Z", "message": "ReplicaSet \"networking-console-plugin-8684d95bf7\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:19Z", "lastUpdateTime": "2026-04-30T12:45:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "kubernetes.io/description": "This deployment deploys the network-check-source pod that performs\npod network connectivity checks\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.19.21" }, "creationTimestamp": "2026-04-28T13:08:47Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "" }, "name": "network-check-source", "namespace": "openshift-network-diagnostics", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "a4417b55-69e6-439e-881a-2de94059b2e9" } ], "resourceVersion": "37641", "uid": "68449b74-b71e-43c4-a6fe-129c21c656cf" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "network-check-source" } }, "strategy": { "type": "Recreate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "network-check-source", "kubernetes.io/os": "linux" } }, "spec": { "containers": [ { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)" ], "command": [ "cluster-network-check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d9605a3b59597c329c8a642a059bce7151acec5bba001e0216c8b187a71c0e81", "imagePullPolicy": "IfNotPresent", "name": "check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "40Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "network-diagnostics", "serviceAccountName": "network-diagnostics", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:08:47Z", "lastUpdateTime": "2026-04-28T13:16:08Z", "message": "ReplicaSet \"network-check-source-854f4ccf55\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:19Z", "lastUpdateTime": "2026-04-30T12:45:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T13:06:27Z", "generation": 1, "labels": { "name": "network-operator" }, "name": "network-operator", "namespace": "openshift-network-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "33946", "uid": "69929fe0-e4e2-4a3b-9127-28fef8eda66b" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "name": "network-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "network-operator" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "name": "network-operator" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -o allexport\nif [[ -f /etc/kubernetes/apiserver-url.env ]]; then\n source /etc/kubernetes/apiserver-url.env\nelse\n echo \"Error: /etc/kubernetes/apiserver-url.env is missing\"\n exit 1\nfi\nexec /usr/bin/cluster-network-operator start --listen=0.0.0.0:9104\n" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.19.21" }, { "name": "KUBE_PROXY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2989a711a78e6a65271cc963146454c95d674e5bd4c78d5a50f5c530d688275a" }, { "name": "KUBE_RBAC_PROXY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec" }, { "name": "MULTUS_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:094cbce7cc4e1bd27ee7cf835480c0fe2508b3c6bb5a0f1f7ecddeec7576d0c1" }, { "name": "MULTUS_ADMISSION_CONTROLLER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:fe0e9f6f3272bc3b2955ae0dfd41436b266a125b815d368d7ac332ddfad16ea2" }, { "name": "CNI_PLUGINS_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:63b741b5f285b32a171c862a7f9745ce5e6d098c67be83659b3be2e55c3097c4" }, { "name": "BOND_CNI_PLUGIN_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:82fc78e36f6f5bd2e89f611ea0e2841a9eae5bdf58731d9367a68f8ebbd69b5d" }, { "name": "WHEREABOUTS_CNI_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e21cfbd5bf9a5483d9a6dc19cf42a8e38041b5dc2f2f87d9d6b15a5144a4337a" }, { "name": "ROUTE_OVERRRIDE_CNI_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f079efcd11722822249f2b767972ba6ad8f9bb635e4b148effa2def44f301c3f" }, { "name": "MULTUS_NETWORKPOLICY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c0413cfdecb1f14f2fcfad94a4ce5e90989069fda2d9e1a31d9e0f91afe199bc" }, { "name": "OVN_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7ceec17ad53fcca042f4d92ef70c1a8139bd9b0fae31299b7c3dfd4020923ad1" }, { "name": "OVN_NB_RAFT_ELECTION_TIMER", "value": "10" }, { "name": "OVN_SB_RAFT_ELECTION_TIMER", "value": "16" }, { "name": "OVN_NORTHD_PROBE_INTERVAL", "value": "10000" }, { "name": "OVN_CONTROLLER_INACTIVITY_PROBE", "value": "180000" }, { "name": "OVN_NB_INACTIVITY_PROBE", "value": "60000" }, { "name": "EGRESS_ROUTER_CNI_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:28674c8a775dee5633130b524fb69e01616407d48ca628b5613ca09d34fc8bdf" }, { "name": "NETWORK_METRICS_DAEMON_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b4ae4f114e1a07b9c5e25658e69ca9afa5ae3d4ff1b64b7f1130603f556c4745" }, { "name": "NETWORK_CHECK_SOURCE_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d9605a3b59597c329c8a642a059bce7151acec5bba001e0216c8b187a71c0e81" }, { "name": "NETWORK_CHECK_TARGET_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d9605a3b59597c329c8a642a059bce7151acec5bba001e0216c8b187a71c0e81" }, { "name": "NETWORK_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d9605a3b59597c329c8a642a059bce7151acec5bba001e0216c8b187a71c0e81" }, { "name": "CLOUD_NETWORK_CONFIG_CONTROLLER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a79651492129358ffd9aa58108dc6eb477a3835b70d6d46b8cbd729e5b5141eb" }, { "name": "CLI_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:89cc60ac50c5ec7e9693c317e51a77592d39fb2fed332e71161c9da5805aa7ba" }, { "name": "FRR_K8S_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1206a2fc4aab2f4378018dfd089e0afcf79da9e285d0eb6b685935737d9e71ba" }, { "name": "NETWORKING_CONSOLE_PLUGIN_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:12f188adf3514551a41f8afb8601416ef5efb8e0d03a3ac3598d7163b42323ef" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d9605a3b59597c329c8a642a059bce7151acec5bba001e0216c8b187a71c0e81", "imagePullPolicy": "IfNotPresent", "name": "network-operator", "ports": [ { "containerPort": 9104, "hostPort": 9104, "name": "cno", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kubernetes", "name": "host-etc-kube", "readOnly": true }, { "mountPath": "/var/run/secrets/serving-cert", "name": "metrics-tls" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "cluster-network-operator", "serviceAccountName": "cluster-network-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/not-ready", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/network-unavailable", "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/kubernetes", "type": "Directory" }, "name": "host-etc-kube" }, { "name": "metrics-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "metrics-tls" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:06:27Z", "lastUpdateTime": "2026-04-28T13:06:27Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-04-28T13:06:27Z", "lastUpdateTime": "2026-04-28T13:08:11Z", "message": "ReplicaSet \"network-operator-56dc67d697\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "5", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "S1SBAw==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "9Ot5hw==", "operator.openshift.io/spec-hash": "758ffcafb87892ca6653e01c3b270bc1cfdf6995a506db8a1a46daa624501285" }, "creationTimestamp": "2026-04-28T13:10:10Z", "generation": 5, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "revision": "1" }, "name": "apiserver", "namespace": "openshift-oauth-apiserver", "resourceVersion": "37632", "uid": "f099039d-081c-4752-8cdd-9e5950240630" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 3, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver" } }, "strategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "S1SBAw==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "9Ot5hw==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "revision": "1" }, "name": "openshift-oauth-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-apiserver start \\\n --secure-port=8443 \\\n --audit-log-path=/var/log/oauth-apiserver/audit.log \\\n --audit-log-format=json \\\n --audit-log-maxsize=100 \\\n --audit-log-maxbackup=10 \\\n --audit-policy-file=/var/run/configmaps/audit/policy.yaml \\\n --etcd-cafile=/var/run/configmaps/etcd-serving-ca/ca-bundle.crt \\\n --etcd-keyfile=/var/run/secrets/etcd-client/tls.key \\\n --etcd-certfile=/var/run/secrets/etcd-client/tls.crt \\\n --etcd-healthcheck-timeout=9s \\\n --etcd-readycheck-timeout=9s \\\n --shutdown-delay-duration=50s \\\n --shutdown-send-retry-after=true \\\n --tls-private-key-file=/var/run/secrets/serving-cert/tls.key \\\n --tls-cert-file=/var/run/secrets/serving-cert/tls.crt \\\n --enable-priority-and-fairness=false \\\n --api-audiences=https://kubernetes.default.svc \\\n --cors-allowed-origins='//127\\.0\\.0\\.1(:|$)' \\\n --cors-allowed-origins='//localhost(:|$)' \\\n --etcd-servers=https://10.0.63.100:2379 \\\n --etcd-servers=https://10.0.7.57:2379 \\\n --etcd-servers=https://10.0.95.179:2379 \\\n --tls-cipher-suites=TLS_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-min-version=VersionTLS12 \\\n --v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86865210405bf013b8faf3dc5c4f791a0c2f81c49166dc1df669a734646e2291", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "oauth-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "150m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/oauth-apiserver \u0026\u0026 touch /var/log/oauth-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/oauth-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86865210405bf013b8faf3dc5c4f791a0c2f81c49166dc1df669a734646e2291", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-apiserver-sa", "serviceAccountName": "oauth-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit-policies" }, { "name": "etcd-client", "secret": { "defaultMode": 420, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 420, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/oauth-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "availableReplicas": 3, "conditions": [ { "lastTransitionTime": "2026-04-28T13:10:10Z", "lastUpdateTime": "2026-04-28T13:25:18Z", "message": "ReplicaSet \"apiserver-56d77bc9b\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:19Z", "lastUpdateTime": "2026-04-30T12:45:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 5, "readyReplicas": 3, "replicas": 3, "updatedReplicas": 3 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/default-logs-container": "manager", "operator.openshift.io/spec-hash": "145e38e03fbac275151a5a36d7dfd15e8a23bef1e23c12723f786a6eb40aa9f4" }, "creationTimestamp": "2026-04-28T13:10:17Z", "generation": 1, "labels": { "control-plane": "operator-controller-controller-manager" }, "name": "operator-controller-controller-manager", "namespace": "openshift-operator-controller", "resourceVersion": "37629", "uid": "15c813ae-7602-4e86-91ae-0392aaaccd01" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "control-plane": "operator-controller-controller-manager" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager", "openshift.io/required-scc": "privileged", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "control-plane": "operator-controller-controller-manager" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/arch", "operator": "In", "values": [ "amd64", "arm64", "ppc64le", "s390x" ] }, { "key": "kubernetes.io/os", "operator": "In", "values": [ "linux" ] } ] } ] } } }, "containers": [ { "args": [ "--health-probe-bind-address=:8081", "--metrics-bind-address=:8443", "--leader-elect", "--tls-cert=/var/certs/tls.crt", "--tls-key=/var/certs/tls.key", "--catalogd-cas-dir=/var/ca-certs", "--v=4", "--global-pull-secret=openshift-config/pull-secret" ], "command": [ "/operator-controller" ], "env": [ { "name": "SSL_CERT_DIR", "value": "/var/ca-certs" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:51d56ae5a3f6e3307b23225c0b09f5e081f6dcfad0fee043df20d730c138f399", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/cache", "name": "cache" }, { "mountPath": "/var/certs", "name": "operator-controller-certs" }, { "mountPath": "/var/ca-certs", "name": "ca-certs", "readOnly": true }, { "mountPath": "/etc/containers", "name": "etc-containers", "readOnly": true }, { "mountPath": "/etc/docker", "name": "etc-docker", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seLinuxOptions": { "type": "spc_t" }, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "operator-controller-controller-manager", "serviceAccountName": "operator-controller-controller-manager", "terminationGracePeriodSeconds": 10, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "emptyDir": {}, "name": "cache" }, { "name": "operator-controller-certs", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "optional": false, "secretName": "operator-controller-cert" } }, { "name": "ca-certs", "projected": { "defaultMode": 420, "sources": [ { "configMap": { "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "operator-controller-trusted-ca-bundle", "optional": false } }, { "configMap": { "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "openshift-service-ca.crt", "optional": false } } ] } }, { "hostPath": { "path": "/etc/containers", "type": "Directory" }, "name": "etc-containers" }, { "hostPath": { "path": "/etc/docker", "type": "Directory" }, "name": "etc-docker" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:10:17Z", "lastUpdateTime": "2026-04-28T13:10:32Z", "message": "ReplicaSet \"operator-controller-controller-manager-f8bf894c5\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:19Z", "lastUpdateTime": "2026-04-30T12:45:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "capability.openshift.io/name": "OperatorLifecycleManager", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T13:06:43Z", "generation": 1, "labels": { "app": "catalog-operator" }, "name": "catalog-operator", "namespace": "openshift-operator-lifecycle-manager", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "37772", "uid": "4a680400-fcb4-46aa-a295-3fc8c00cb24b" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "catalog-operator" } }, "strategy": { "type": "Recreate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "catalog-operator" } }, "spec": { "containers": [ { "args": [ "--namespace", "openshift-marketplace", "--configmapServerImage=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b5dfa5317c248f9e52534f239400573e7e74c56bb86e3cd824b69b303118ae5e", "--opmImage=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b5dfa5317c248f9e52534f239400573e7e74c56bb86e3cd824b69b303118ae5e", "--util-image", "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:053cf37df6a04671b2bb3d1806e30bba8c31379e30016a50e36ad6c7d2b48855", "--writeStatusName", "operator-lifecycle-manager-catalog", "--tls-cert", "/srv-cert/tls.crt", "--tls-key", "/srv-cert/tls.key", "--client-ca", "/profile-collector-cert/tls.crt", "--set-workload-user-id=false" ], "command": [ "/bin/catalog" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.19.21" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:053cf37df6a04671b2bb3d1806e30bba8c31379e30016a50e36ad6c7d2b48855", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "catalog-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "80Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/srv-cert", "name": "srv-cert", "readOnly": true }, { "mountPath": "/profile-collector-cert", "name": "profile-collector-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "olm-operator-serviceaccount", "serviceAccountName": "olm-operator-serviceaccount", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "srv-cert", "secret": { "defaultMode": 420, "secretName": "catalog-operator-serving-cert" } }, { "name": "profile-collector-cert", "secret": { "defaultMode": 420, "secretName": "pprof-cert" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:06:43Z", "lastUpdateTime": "2026-04-28T13:11:11Z", "message": "ReplicaSet \"catalog-operator-ff5748c75\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:20Z", "lastUpdateTime": "2026-04-30T12:45:20Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "capability.openshift.io/name": "OperatorLifecycleManager", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T13:06:42Z", "generation": 1, "labels": { "app": "olm-operator" }, "name": "olm-operator", "namespace": "openshift-operator-lifecycle-manager", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "38773", "uid": "aacf6745-91c6-40d7-8eee-ab93b6d78da0" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "olm-operator" } }, "strategy": { "type": "Recreate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "olm-operator" } }, "spec": { "containers": [ { "args": [ "--namespace", "$(OPERATOR_NAMESPACE)", "--writeStatusName", "operator-lifecycle-manager", "--writePackageServerStatusName", "operator-lifecycle-manager-packageserver", "--tls-cert", "/srv-cert/tls.crt", "--tls-key", "/srv-cert/tls.key", "--client-ca", "/profile-collector-cert/tls.crt", "--protectedCopiedCSVNamespaces", "openshift" ], "command": [ "/bin/olm" ], "env": [ { "name": "OPERATOR_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "OPERATOR_NAME", "value": "olm-operator" }, { "name": "RELEASE_VERSION", "value": "4.19.21" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:053cf37df6a04671b2bb3d1806e30bba8c31379e30016a50e36ad6c7d2b48855", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "olm-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "160Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/srv-cert", "name": "srv-cert", "readOnly": true }, { "mountPath": "/profile-collector-cert", "name": "profile-collector-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "olm-operator-serviceaccount", "serviceAccountName": "olm-operator-serviceaccount", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "srv-cert", "secret": { "defaultMode": 420, "secretName": "olm-operator-serving-cert" } }, { "name": "profile-collector-cert", "secret": { "defaultMode": 420, "secretName": "pprof-cert" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:06:42Z", "lastUpdateTime": "2026-04-28T13:11:11Z", "message": "ReplicaSet \"olm-operator-79dc74bd7b\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:29Z", "lastUpdateTime": "2026-04-30T12:45:29Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "capability.openshift.io/name": "OperatorLifecycleManager", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T13:06:41Z", "generation": 1, "labels": { "app": "package-server-manager" }, "name": "package-server-manager", "namespace": "openshift-operator-lifecycle-manager", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "39657", "uid": "47fee4a8-9cbd-4049-bcdc-d8aa0c0a9755" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "package-server-manager" } }, "strategy": { "type": "Recreate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "package-server-manager" } }, "spec": { "containers": [ { "args": [ "--secure-listen-address=0.0.0.0:8443", "--upstream=http://127.0.0.1:9090/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "package-server-manager-serving-cert" } ] }, { "args": [ "--name", "$(PACKAGESERVER_NAME)", "--namespace", "$(PACKAGESERVER_NAMESPACE)", "--metrics=:9090" ], "command": [ "/bin/psm", "start" ], "env": [ { "name": "PACKAGESERVER_NAME", "value": "packageserver" }, { "name": "PACKAGESERVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:053cf37df6a04671b2bb3d1806e30bba8c31379e30016a50e36ad6c7d2b48855" }, { "name": "PACKAGESERVER_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "RELEASE_VERSION", "value": "4.19.21" }, { "name": "GOMEMLIMIT", "value": "5MiB" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:053cf37df6a04671b2bb3d1806e30bba8c31379e30016a50e36ad6c7d2b48855", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "package-server-manager", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "olm-operator-serviceaccount", "serviceAccountName": "olm-operator-serviceaccount", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "package-server-manager-serving-cert", "secret": { "defaultMode": 420, "secretName": "package-server-manager-serving-cert" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:06:41Z", "lastUpdateTime": "2026-04-28T13:11:43Z", "message": "ReplicaSet \"package-server-manager-6b8f55778c\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:46:00Z", "lastUpdateTime": "2026-04-30T12:46:00Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:11:13Z", "generation": 1, "labels": { "olm.deployment-spec-hash": "bCbXBmdw5862ZiCrJJXLH5D6DIRPnrPL090bD", "olm.managed": "true", "olm.owner": "packageserver", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-operator-lifecycle-manager" }, "name": "packageserver", "namespace": "openshift-operator-lifecycle-manager", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "packageserver", "uid": "b82a9f8c-7f13-48bf-a613-ac2488ade2df" } ], "resourceVersion": "38073", "uid": "f848c320-3ab0-4948-9599-3a259bad3f00" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 1, "selector": { "matchLabels": { "app": "packageserver" } }, "strategy": { "rollingUpdate": { "maxSurge": 1, "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "olm.operatorGroup": "olm-operators", "olm.operatorNamespace": "openshift-operator-lifecycle-manager", "olm.targetNamespaces": "openshift-operator-lifecycle-manager", "olmcahash": "f679cbd856d2b962a0d8b72e288d6d47d208d455bc34dbfaf5e093ae5f3c0e7b", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "packageserver" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "packageserver" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/package-server", "-v=4", "--secure-port", "5443", "--global-namespace", "openshift-marketplace" ], "env": [ { "name": "OPERATOR_CONDITION_NAME", "value": "packageserver" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:053cf37df6a04671b2bb3d1806e30bba8c31379e30016a50e36ad6c7d2b48855", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "packageserver", "ports": [ { "containerPort": 5443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmpfs" }, { "mountPath": "/apiserver.local.config/certificates", "name": "apiservice-cert" }, { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "webhook-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "olm-operator-serviceaccount", "serviceAccountName": "olm-operator-serviceaccount", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "emptyDir": {}, "name": "tmpfs" }, { "name": "apiservice-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "apiserver.crt" }, { "key": "tls.key", "path": "apiserver.key" } ], "secretName": "packageserver-service-cert" } }, { "name": "webhook-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "packageserver-service-cert" } } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-04-28T13:11:13Z", "lastUpdateTime": "2026-04-28T13:11:26Z", "message": "ReplicaSet \"packageserver-546f44bb4f\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:20Z", "lastUpdateTime": "2026-04-30T12:45:20Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "kubernetes.io/description": "This deployment launches the ovn-kubernetes controller (control-plane) networking components.\n", "networkoperator.openshift.io/cluster-network-cidr": "10.128.0.0/14", "networkoperator.openshift.io/hybrid-overlay-status": "disabled", "networkoperator.openshift.io/ip-family-mode": "single-stack", "release.openshift.io/version": "4.19.21" }, "creationTimestamp": "2026-04-28T13:08:45Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "stand-alone" }, "name": "ovnkube-control-plane", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "a4417b55-69e6-439e-881a-2de94059b2e9" } ], "resourceVersion": "4531", "uid": "9a946aa8-cc77-49b1-bef8-1191cd8f9669" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "ovnkube-control-plane" } }, "strategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "networkoperator.openshift.io/cluster-network-cidr": "10.128.0.0/14", "networkoperator.openshift.io/hybrid-overlay-status": "disabled", "networkoperator.openshift.io/ip-family-mode": "single-stack", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "ovnkube-control-plane", "component": "network", "kubernetes.io/os": "linux", "openshift.io/component": "network", "type": "infra" } }, "spec": { "containers": [ { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -euo pipefail\nTLS_PK=/etc/pki/tls/metrics-cert/tls.key\nTLS_CERT=/etc/pki/tls/metrics-cert/tls.crt\n# As the secret mount is optional we must wait for the files to be present.\n# The service is created in monitor.yaml and this is created in sdn.yaml.\nTS=$(date +%s)\nWARN_TS=$(( ${TS} + $(( 20 * 60)) ))\nHAS_LOGGED_INFO=0\n\nlog_missing_certs(){\n CUR_TS=$(date +%s)\n if [[ \"${CUR_TS}\" -gt \"WARN_TS\" ]]; then\n echo $(date -Iseconds) WARN: ovn-control-plane-metrics-cert not mounted after 20 minutes.\n elif [[ \"${HAS_LOGGED_INFO}\" -eq 0 ]] ; then\n echo $(date -Iseconds) INFO: ovn-control-plane-metrics-cert not mounted. Waiting 20 minutes.\n HAS_LOGGED_INFO=1\n fi\n}\nwhile [[ ! -f \"${TLS_PK}\" || ! -f \"${TLS_CERT}\" ]] ; do\n log_missing_certs\n sleep 5\ndone\n\necho $(date -Iseconds) INFO: ovn-control-plane-metrics-certs mounted, starting kube-rbac-proxy\nexec /usr/bin/kube-rbac-proxy \\\n --logtostderr \\\n --secure-listen-address=:9108 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 \\\n --upstream=http://127.0.0.1:29108/ \\\n --tls-private-key-file=${TLS_PK} \\\n --tls-cert-file=${TLS_CERT}\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c1941415b797978d87bc22827047503ed729d4fcbd1a14c94b1856605097b2ec", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9108, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/tls/metrics-cert", "name": "ovn-control-plane-metrics-cert", "readOnly": true } ] }, { "command": [ "/bin/bash", "-c", "set -xe\nif [[ -f \"/env/_master\" ]]; then\n set -o allexport\n source \"/env/_master\"\n set +o allexport\nfi\n\novn_v4_join_subnet_opt=\nif [[ \"\" != \"\" ]]; then\n ovn_v4_join_subnet_opt=\"--gateway-v4-join-subnet \"\nfi\novn_v6_join_subnet_opt=\nif [[ \"\" != \"\" ]]; then\n ovn_v6_join_subnet_opt=\"--gateway-v6-join-subnet \"\nfi\n\novn_v4_transit_switch_subnet_opt=\nif [[ \"\" != \"\" ]]; then\n ovn_v4_transit_switch_subnet_opt=\"--cluster-manager-v4-transit-switch-subnet \"\nfi\novn_v6_transit_switch_subnet_opt=\nif [[ \"\" != \"\" ]]; then\n ovn_v6_transit_switch_subnet_opt=\"--cluster-manager-v6-transit-switch-subnet \"\nfi\n\ndns_name_resolver_enabled_flag=\nif [[ \"false\" == \"true\" ]]; then\n dns_name_resolver_enabled_flag=\"--enable-dns-name-resolver\"\nfi\n\npersistent_ips_enabled_flag=\nif [[ \"true\" == \"true\" ]]; then\n persistent_ips_enabled_flag=\"--enable-persistent-ips\"\nfi\n\n# This is needed so that converting clusters from GA to TP\n# will rollout control plane pods as well\nnetwork_segmentation_enabled_flag=\nmulti_network_enabled_flag=\nif [[ \"true\" == \"true\" ]]; then\n multi_network_enabled_flag=\"--enable-multi-network\"\n network_segmentation_enabled_flag=\"--enable-network-segmentation\"\nfi\n\nroute_advertisements_enable_flag=\nif [[ \"false\" == \"true\" ]]; then\n route_advertisements_enable_flag=\"--enable-route-advertisements\"\nfi\n\nif [ \"shared\" == \"shared\" ]; then\n gateway_mode_flags=\"--gateway-mode shared\"\nelif [ \"shared\" == \"local\" ]; then\n gateway_mode_flags=\"--gateway-mode local\"\nelse\n echo \"Invalid OVN_GATEWAY_MODE: \\\"shared\\\". Must be \\\"local\\\" or \\\"shared\\\".\"\n exit 1\nfi\n\necho \"I$(date \"+%m%d %H:%M:%S.%N\") - ovnkube-control-plane - start ovnkube --init-cluster-manager ${K8S_NODE}\"\nexec /usr/bin/ovnkube \\\n --enable-interconnect \\\n --init-cluster-manager \"${K8S_NODE}\" \\\n --config-file=/run/ovnkube-config/ovnkube.conf \\\n --loglevel \"${OVN_KUBE_LOG_LEVEL}\" \\\n --metrics-bind-address \"127.0.0.1:29108\" \\\n --metrics-enable-pprof \\\n --metrics-enable-config-duration \\\n ${ovn_v4_join_subnet_opt} \\\n ${ovn_v6_join_subnet_opt} \\\n ${ovn_v4_transit_switch_subnet_opt} \\\n ${ovn_v6_transit_switch_subnet_opt} \\\n ${dns_name_resolver_enabled_flag} \\\n ${persistent_ips_enabled_flag} \\\n ${multi_network_enabled_flag} \\\n ${network_segmentation_enabled_flag} \\\n ${gateway_mode_flags} \\\n ${route_advertisements_enable_flag}\n" ], "env": [ { "name": "OVN_KUBE_LOG_LEVEL", "value": "4" }, { "name": "K8S_NODE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7ceec17ad53fcca042f4d92ef70c1a8139bd9b0fae31299b7c3dfd4020923ad1", "imagePullPolicy": "IfNotPresent", "name": "ovnkube-cluster-manager", "ports": [ { "containerPort": 29108, "name": "metrics-port", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "300Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/run/ovnkube-config/", "name": "ovnkube-config" }, { "mountPath": "/env", "name": "env-overrides" } ] } ], "dnsPolicy": "Default", "hostNetwork": true, "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "ovn-kubernetes-control-plane", "serviceAccountName": "ovn-kubernetes-control-plane", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "key": "node.kubernetes.io/not-ready", "operator": "Exists" }, { "key": "node.kubernetes.io/unreachable", "operator": "Exists" }, { "key": "node.kubernetes.io/network-unavailable", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "ovnkube-config" }, "name": "ovnkube-config" }, { "configMap": { "defaultMode": 420, "name": "env-overrides", "optional": true }, "name": "env-overrides" }, { "name": "ovn-control-plane-metrics-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "ovn-control-plane-metrics-cert" } } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-04-28T13:09:11Z", "lastUpdateTime": "2026-04-28T13:09:11Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-04-28T13:08:45Z", "lastUpdateTime": "2026-04-28T13:09:12Z", "message": "ReplicaSet \"ovnkube-control-plane-74f87448ff\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "7", "operator.openshift.io/spec-hash": "24b8c3ab6a210f93cfc07dce5dd9d173cd78000b5c2a77fb4888aa07e2348b1a", "release.openshift.io/version": "4.19.21" }, "creationTimestamp": "2026-04-28T13:09:49Z", "generation": 7, "labels": { "app": "route-controller-manager", "route-controller-manager": "true" }, "name": "route-controller-manager", "namespace": "openshift-route-controller-manager", "resourceVersion": "40764", "uid": "90cc85dd-7cd1-4874-bfdf-febeeb2b6e91" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 3, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "route-controller-manager", "route-controller-manager": "true" } }, "strategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "40374", "configmaps/config": "40438", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "3", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "route-controller-manager": "true" }, "name": "route-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "route-controller-manager": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "route-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:94c7a575f524db8682645a6faf18647ef8b0064518c3baf2e6485f18ca006695", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "route-controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "route-controller-manager-sa", "serviceAccountName": "route-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } } ] } } }, "status": { "availableReplicas": 3, "conditions": [ { "lastTransitionTime": "2026-04-30T12:45:20Z", "lastUpdateTime": "2026-04-30T12:45:20Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-04-28T13:09:49Z", "lastUpdateTime": "2026-04-30T12:48:07Z", "message": "ReplicaSet \"route-controller-manager-5567cdcdbd\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 7, "readyReplicas": 3, "replicas": 3, "updatedReplicas": 3 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T13:06:27Z", "generation": 1, "labels": { "app": "service-ca-operator" }, "name": "service-ca-operator", "namespace": "openshift-service-ca-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "f43af8b5-5ace-4094-b987-c3b7b2f26f7e" } ], "resourceVersion": "37724", "uid": "494f4cc2-b299-4b7f-8592-d737efa07f5a" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "service-ca-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "service-ca-operator" }, "name": "service-ca-operator" }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/operator-config.yaml", "-v=2" ], "command": [ "service-ca-operator", "operator" ], "env": [ { "name": "CONTROLLER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:fcf7739a321a4e5855e39ab30780e6033049e15720c610075897f8703904552c" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.19.21" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:fcf7739a321a4e5855e39ab30780e6033049e15720c610075897f8703904552c", "imagePullPolicy": "IfNotPresent", "name": "service-ca-operator", "resources": { "requests": { "cpu": "10m", "memory": "80Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsGroup": 1001, "runAsNonRoot": true, "runAsUser": 1001, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "service-ca-operator", "serviceAccountName": "service-ca-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "service-ca-operator-config" }, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:06:27Z", "lastUpdateTime": "2026-04-28T13:09:44Z", "message": "ReplicaSet \"service-ca-operator-8c4c7f695\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:19Z", "lastUpdateTime": "2026-04-30T12:45:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "fce861c6ecadda075027efcbf33d31401fae73f87c106713124659d2cec39be2" }, "creationTimestamp": "2026-04-28T13:09:50Z", "generation": 1, "labels": { "app": "service-ca", "service-ca": "true" }, "name": "service-ca", "namespace": "openshift-service-ca", "resourceVersion": "37721", "uid": "6d06db9e-9189-421e-aafb-b18fafd15d83" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "service-ca", "service-ca": "true" } }, "strategy": { "type": "Recreate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "service-ca", "service-ca": "true" }, "name": "service-ca" }, "spec": { "containers": [ { "args": [ "-v=2" ], "command": [ "service-ca-operator", "controller" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:fcf7739a321a4e5855e39ab30780e6033049e15720c610075897f8703904552c", "imagePullPolicy": "IfNotPresent", "name": "service-ca-controller", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "120Mi" } }, "securityContext": { "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/signing-key", "name": "signing-key" }, { "mountPath": "/var/run/configmaps/signing-cabundle", "name": "signing-cabundle" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "service-ca", "serviceAccountName": "service-ca", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "signing-key", "secret": { "defaultMode": 420, "secretName": "signing-key" } }, { "configMap": { "defaultMode": 420, "name": "signing-cabundle" }, "name": "signing-cabundle" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-04-28T13:09:50Z", "lastUpdateTime": "2026-04-28T13:09:53Z", "message": "ReplicaSet \"service-ca-56577df76c\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-04-30T12:45:19Z", "lastUpdateTime": "2026-04-30T12:45:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } } ], "kind": "List", "metadata": { "resourceVersion": "" } }