{ "apiVersion": "v1", "items": [ { "apiVersion": "operator.openshift.io/v1", "kind": "KubeAPIServer", "metadata": { "annotations": { "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true", "release.openshift.io/create-only": "true" }, "creationTimestamp": "2026-04-28T12:19:40Z", "generation": 9, "name": "cluster", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "kind": "ClusterVersion", "name": "version", "uid": "4fe684f8-aeed-45a4-8f12-2870760bf847" } ], "resourceVersion": "54894", "uid": "bb3d3dd8-cd99-49d4-93a3-eee62cb5ae31" }, "spec": { "logLevel": "Normal", "managementState": "Managed", "observedConfig": { "admission": { "pluginConfig": { "PodSecurity": { "configuration": { "defaults": { "audit": "restricted", "audit-version": "latest", "enforce": "privileged", "enforce-version": "latest", "warn": "restricted", "warn-version": "latest" } } }, "network.openshift.io/ExternalIPRanger": { "configuration": { "allowIngressIP": false, "apiVersion": "network.openshift.io/v1", "kind": "ExternalIPRangerAdmissionConfig" } }, "network.openshift.io/RestrictedEndpointsAdmission": { "configuration": { "apiVersion": "network.openshift.io/v1", "kind": "RestrictedEndpointsAdmissionConfig", "restrictedCIDRs": [ "10.128.0.0/14", "172.30.0.0/16" ] } } } }, "apiServerArguments": { "api-audiences": [ "https://kubernetes.default.svc" ], "authentication-token-webhook-config-file": [ "/etc/kubernetes/static-pod-resources/secrets/webhook-authenticator/kubeConfig" ], "authentication-token-webhook-version": [ "v1" ], "authorization-mode": [ "Scope", "SystemMasters", "RBAC", "Node" ], "enable-admission-plugins": [ "authorization.openshift.io/RestrictSubjectBindings", "authorization.openshift.io/ValidateRoleBindingRestriction" ], "etcd-servers": [ "https://10.0.53.45:2379", "https://10.0.87.199:2379", "https://10.0.9.171:2379", "https://localhost:2379" ], "feature-gates": [ "AdditionalRoutingCapabilities=true", "AdminNetworkPolicy=true", "AlibabaPlatform=true", "AzureWorkloadIdentity=true", "BuildCSIVolumes=true", "CPMSMachineNamePrefix=true", "ConsolePluginContentSecurityPolicy=true", "ExternalOIDC=true", "ExternalOIDCWithUIDAndExtraClaimMappings=true", "GatewayAPI=true", "GatewayAPIController=true", "HighlyAvailableArbiter=true", "ImageVolume=true", "IngressControllerLBSubnetsAWS=true", "KMSv1=true", "MachineConfigNodes=true", "ManagedBootImages=true", "ManagedBootImagesAWS=true", "MetricsCollectionProfiles=true", "NetworkDiagnosticsConfig=true", "NetworkLiveMigration=true", "NetworkSegmentation=true", "NewOLM=true", "PinnedImages=true", "ProcMountType=true", "RouteAdvertisements=true", "RouteExternalCertificate=true", "ServiceAccountTokenNodeBinding=true", "SetEIPForNLBIngressController=true", "SigstoreImageVerification=true", "StoragePerformantSecurityPolicy=true", "UpgradeStatus=true", "UserNamespacesPodSecurityStandards=true", "UserNamespacesSupport=true", "VSphereMultiDisk=true", "VSphereMultiNetworks=true", "AWSClusterHostedDNS=false", "AWSClusterHostedDNSInstall=false", "AWSDedicatedHosts=false", "AWSServiceLBNetworkSecurityGroup=false", "AutomatedEtcdBackup=false", "AzureClusterHostedDNSInstall=false", "AzureDedicatedHosts=false", "AzureMultiDisk=false", "BootImageSkewEnforcement=false", "BootcNodeManagement=false", "ClusterAPIInstall=false", "ClusterAPIInstallIBMCloud=false", "ClusterMonitoringConfig=false", "ClusterVersionOperatorConfiguration=false", "DNSNameResolver=false", "DualReplica=false", "DyanmicServiceEndpointIBMCloud=false", "DynamicResourceAllocation=false", "EtcdBackendQuota=false", "EventedPLEG=false", "Example=false", "Example2=false", "ExternalSnapshotMetadata=false", "GCPClusterHostedDNS=false", "GCPClusterHostedDNSInstall=false", "GCPCustomAPIEndpoints=false", "GCPCustomAPIEndpointsInstall=false", "ImageModeStatusReporting=false", "ImageStreamImportMode=false", "IngressControllerDynamicConfigurationManager=false", "InsightsConfig=false", "InsightsConfigAPI=false", "InsightsOnDemandDataGather=false", "IrreconcilableMachineConfig=false", "KMSEncryptionProvider=false", "MachineAPIMigration=false", "MachineAPIOperatorDisableMachineHealthCheckController=false", "ManagedBootImagesAzure=false", "ManagedBootImagesvSphere=false", "MaxUnavailableStatefulSet=false", "MinimumKubeletVersion=false", "MixedCPUsAllocation=false", "MultiArchInstallAzure=false", "MultiDiskSetup=false", "MutatingAdmissionPolicy=false", "NewOLMCatalogdAPIV1Metas=false", "NewOLMOwnSingleNamespace=false", "NewOLMPreflightPermissionChecks=false", "NewOLMWebhookProviderOpenshiftServiceCA=false", "NoRegistryClusterOperations=false", "NodeSwap=false", "NutanixMultiSubnets=false", "OVNObservability=false", "OpenShiftPodSecurityAdmission=false", "PreconfiguredUDNAddresses=false", "SELinuxMount=false", "ShortCertRotation=false", "SignatureStores=false", "SigstoreImageVerificationPKI=false", "TranslateStreamCloseWebsocketRequests=false", "VSphereConfigurableMaxAllowedBlockVolumesPerNode=false", "VSphereHostVMGroupZonal=false", "VSphereMixedNodeEnv=false", "VolumeAttributesClass=false", "VolumeGroupSnapshot=false" ], "goaway-chance": [ "0.001" ], "send-retry-after-while-not-ready-once": [ "false" ], "service-account-issuer": [ "https://kubernetes.default.svc" ], "service-account-jwks-uri": [ "https://api.clusterpool420-54bqn.rhtap.devcluster.openshift.com:6443/openid/v1/jwks" ], "shutdown-delay-duration": [ "129s" ] }, "authConfig": { "oauthMetadataFile": "/etc/kubernetes/static-pod-resources/configmaps/oauth-metadata/oauthMetadata" }, "corsAllowedOrigins": [ "//127\\.0\\.0\\.1(:|$)", "//localhost(:|$)" ], "gracefulTerminationDuration": "194", "imagePolicyConfig": { "internalRegistryHostname": "image-registry.openshift-image-registry.svc:5000" }, "servicesSubnet": "172.30.0.0/16", "servingInfo": { "bindAddress": "0.0.0.0:6443", "bindNetwork": "tcp4", "cipherSuites": [ "TLS_AES_128_GCM_SHA256", "TLS_AES_256_GCM_SHA384", "TLS_CHACHA20_POLY1305_SHA256", "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256", "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256" ], "minTLSVersion": "VersionTLS12", "namedCertificates": [ { "certFile": "/etc/kubernetes/static-pod-certs/secrets/localhost-serving-cert-certkey/tls.crt", "keyFile": "/etc/kubernetes/static-pod-certs/secrets/localhost-serving-cert-certkey/tls.key" }, { "certFile": "/etc/kubernetes/static-pod-certs/secrets/service-network-serving-certkey/tls.crt", "keyFile": "/etc/kubernetes/static-pod-certs/secrets/service-network-serving-certkey/tls.key" }, { "certFile": "/etc/kubernetes/static-pod-certs/secrets/external-loadbalancer-serving-certkey/tls.crt", "keyFile": "/etc/kubernetes/static-pod-certs/secrets/external-loadbalancer-serving-certkey/tls.key" }, { "certFile": "/etc/kubernetes/static-pod-certs/secrets/internal-loadbalancer-serving-certkey/tls.crt", "keyFile": "/etc/kubernetes/static-pod-certs/secrets/internal-loadbalancer-serving-certkey/tls.key" }, { "certFile": "/etc/kubernetes/static-pod-resources/secrets/localhost-recovery-serving-certkey/tls.crt", "keyFile": "/etc/kubernetes/static-pod-resources/secrets/localhost-recovery-serving-certkey/tls.key" } ] } }, "operatorLogLevel": "Normal", "unsupportedConfigOverrides": null }, "status": { "conditions": [ { "lastTransitionTime": "2026-04-28T12:22:58Z", "reason": "DefaultCertRotationBase", "status": "True", "type": "CertRotationTimeUpgradeable" }, { "lastTransitionTime": "2026-04-28T12:22:58Z", "reason": "NoUnsupportedConfigOverrides", "status": "True", "type": "UnsupportedConfigOverridesUpgradeable" }, { "lastTransitionTime": "2026-04-28T12:22:58Z", "reason": "ExpectedReason", "status": "False", "type": "PodSecurityCustomerEvaluationConditionsDetected" }, { "lastTransitionTime": "2026-04-28T12:22:58Z", "reason": "ExpectedReason", "status": "False", "type": "PodSecurityOpenshiftEvaluationConditionsDetected" }, { "lastTransitionTime": "2026-04-28T12:22:58Z", "reason": "ExpectedReason", "status": "False", "type": "PodSecurityRunLevelZeroEvaluationConditionsDetected" }, { "lastTransitionTime": "2026-04-28T12:22:58Z", "reason": "ExpectedReason", "status": "False", "type": "PodSecurityDisabledSyncerEvaluationConditionsDetected" }, { "lastTransitionTime": "2026-04-28T12:22:58Z", "message": "Could not evaluate violations for namespaces: [kube-node-lease openshift openshift-apiserver-operator openshift-cloud-credential-operator openshift-cloud-network-config-controller openshift-cluster-olm-operator openshift-cluster-samples-operator openshift-cluster-storage-operator openshift-config-managed openshift-config-operator openshift-console openshift-console-operator openshift-console-user-settings openshift-controller-manager openshift-controller-manager-operator openshift-dns-operator openshift-host-network openshift-ingress-canary openshift-ingress-operator openshift-kube-controller-manager-operator openshift-kube-storage-version-migrator openshift-kube-storage-version-migrator-operator openshift-network-console openshift-network-diagnostics openshift-node openshift-route-controller-manager openshift-service-ca openshift-service-ca-operator openshift-user-workload-monitoring]", "reason": "PSViolationDecisionInconclusive", "status": "True", "type": "PodSecurityInconclusiveEvaluationConditionsDetected" }, { "lastTransitionTime": "2026-04-28T12:22:59Z", "status": "False", "type": "Encrypted" }, { "lastTransitionTime": "2026-04-28T12:22:59Z", "status": "False", "type": "StartupMonitorPodContainerExcessiveRestartsDegraded" }, { "lastTransitionTime": "2026-04-28T12:22:59Z", "status": "False", "type": "StartupMonitorPodDegraded" }, { "lastTransitionTime": "2026-04-28T12:22:59Z", "status": "False", "type": "EncryptionStateControllerDegraded" }, { "lastTransitionTime": "2026-04-28T12:22:59Z", "status": "False", "type": "EncryptionMigrationControllerDegraded" }, { "lastTransitionTime": "2026-04-28T12:22:59Z", "status": "False", "type": "EncryptionMigrationControllerProgressing" }, { "lastTransitionTime": "2026-04-28T12:34:30Z", "status": "False", "type": "StaticPodsDegraded" }, { "lastTransitionTime": "2026-04-28T12:22:59Z", "status": "False", "type": "EncryptionKeyControllerDegraded" }, { "lastTransitionTime": "2026-04-28T12:22:59Z", "status": "False", "type": "StaticPodFallbackRevisionDegraded" }, { "lastTransitionTime": "2026-04-28T12:22:59Z", "status": "False", "type": "EncryptionPruneControllerDegraded" }, { "lastTransitionTime": "2026-04-28T13:03:56Z", "status": "False", "type": "MutatingAdmissionWebhookConfigurationError" }, { "lastTransitionTime": "2026-04-28T13:05:05Z", "status": "False", "type": "ValidatingAdmissionWebhookConfigurationError" }, { "lastTransitionTime": "2026-04-28T13:03:47Z", "status": "False", "type": "CRDConversionWebhookConfigurationError" }, { "lastTransitionTime": "2026-04-28T12:23:00Z", "status": "False", "type": "VirtualResourceAdmissionError" }, { "lastTransitionTime": "2026-04-28T12:23:00Z", "reason": "AsExpected", "status": "False", "type": "MissingStaticPodControllerDegraded" }, { "lastTransitionTime": "2026-04-28T12:23:00Z", "message": "latency profile not set on cluster", "reason": "ProfileEmpty", "status": "True", "type": "WorkerLatencyProfileComplete" }, { "lastTransitionTime": "2026-04-28T12:23:00Z", "reason": "ProfileEmpty", "status": "False", "type": "WorkerLatencyProfileProgressing" }, { "lastTransitionTime": "2026-04-28T12:27:37Z", "reason": "AsExpected", "status": "False", "type": "RevisionControllerDegraded" }, { "lastTransitionTime": "2026-04-28T12:27:41Z", "status": "False", "type": "InstallerControllerDegraded" }, { "lastTransitionTime": "2026-04-28T12:23:00Z", "status": "False", "type": "NodeInstallerDegraded" }, { "lastTransitionTime": "2026-04-28T12:49:27Z", "message": "3 nodes are at revision 6", "reason": "AllNodesAtLatestRevision", "status": "False", "type": "NodeInstallerProgressing" }, { "lastTransitionTime": "2026-04-28T12:29:11Z", "message": "3 nodes are active; 3 nodes are at revision 6", "status": "True", "type": "StaticPodsAvailable" }, { "lastTransitionTime": "2026-04-28T12:27:26Z", "reason": "AsExpected", "status": "False", "type": "NodeKubeconfigControllerDegraded" }, { "lastTransitionTime": "2026-04-28T12:23:00Z", "reason": "AsExpected", "status": "False", "type": "WorkerLatencyProfileDegraded" }, { "lastTransitionTime": "2026-04-28T12:23:01Z", "message": "All master nodes are ready", "reason": "MasterNodesReady", "status": "False", "type": "NodeControllerDegraded" }, { "lastTransitionTime": "2026-04-28T12:38:42Z", "reason": "AsExpected", "status": "False", "type": "GuardControllerDegraded" }, { "lastTransitionTime": "2026-04-28T12:23:01Z", "status": "False", "type": "InstallerPodContainerWaitingDegraded" }, { "lastTransitionTime": "2026-04-28T12:23:01Z", "status": "False", "type": "InstallerPodNetworkingDegraded" }, { "lastTransitionTime": "2026-04-28T12:23:01Z", "status": "False", "type": "InstallerPodPendingDegraded" }, { "lastTransitionTime": "2026-04-28T12:34:28Z", "reason": "AsExpected", "status": "False", "type": "BackingResourceControllerDegraded" }, { "lastTransitionTime": "2026-04-28T12:34:38Z", "status": "False", "type": "ConfigObservationDegraded" }, { "lastTransitionTime": "2026-04-28T12:23:06Z", "status": "False", "type": "AuditPolicyDegraded" }, { "lastTransitionTime": "2026-04-28T12:23:07Z", "status": "False", "type": "ResourceSyncControllerDegraded" }, { "lastTransitionTime": "2026-04-28T12:23:12Z", "message": "Kubelet and API server minor versions are synced.", "reason": "KubeletMinorVersionsSynced", "status": "True", "type": "KubeletMinorVersionUpgradeable" }, { "lastTransitionTime": "2026-04-28T12:34:33Z", "reason": "AsExpected", "status": "False", "type": "KubeAPIServerStaticResourcesDegraded" }, { "lastTransitionTime": "2026-04-28T12:34:19Z", "status": "False", "type": "TargetConfigControllerDegraded" }, { "lastTransitionTime": "2026-04-28T12:34:19Z", "status": "False", "type": "CertRotation_KubeSchedulerClient_Degraded" }, { "lastTransitionTime": "2026-04-28T12:34:28Z", "status": "False", "type": "CertRotation_NodeSystemAdminClient_Degraded" }, { "lastTransitionTime": "2026-04-28T12:34:28Z", "status": "False", "type": "CertRotation_KubeControllerManagerClient_Degraded" }, { "lastTransitionTime": "2026-04-28T12:34:28Z", "status": "False", "type": "CertRotation_ExternalLoadBalancerServing_Degraded" }, { "lastTransitionTime": "2026-04-28T12:34:30Z", "status": "False", "type": "CertRotation_AggregatorProxyClientCert_Degraded" }, { "lastTransitionTime": "2026-04-28T12:34:32Z", "status": "False", "type": "CertRotation_InternalLoadBalancerServing_Degraded" }, { "lastTransitionTime": "2026-04-28T12:34:35Z", "status": "False", "type": "CertRotation_LocalhostRecoveryServing_Degraded" }, { "lastTransitionTime": "2026-04-28T12:34:36Z", "status": "False", "type": "CertRotation_KubeAPIServerToKubeletClientCert_Degraded" }, { "lastTransitionTime": "2026-04-28T12:35:21Z", "status": "False", "type": "CertRotation_CheckEndpointsClient_Degraded" }, { "lastTransitionTime": "2026-04-28T12:35:21Z", "status": "False", "type": "CertRotation_ControlPlaneNodeAdminClient_Degraded" }, { "lastTransitionTime": "2026-04-28T12:35:21Z", "status": "False", "type": "CertRotation_ServiceNetworkServing_Degraded" }, { "lastTransitionTime": "2026-04-28T12:35:21Z", "status": "False", "type": "CertRotation_LocalhostServing_Degraded" } ], "latestAvailableRevision": 6, "nodeStatuses": [ { "currentRevision": 6, "lastFailedCount": 0, "lastFailedReason": "", "lastFailedRevision": 0, "lastFallbackCount": 0, "nodeName": "ip-10-0-53-45.ec2.internal", "targetRevision": 0 }, { "currentRevision": 6, "lastFailedCount": 0, "lastFailedReason": "", "lastFailedRevision": 0, "lastFallbackCount": 0, "nodeName": "ip-10-0-87-199.ec2.internal", "targetRevision": 0 }, { "currentRevision": 6, "lastFailedCount": 0, "lastFailedReason": "", "lastFailedRevision": 0, "lastFallbackCount": 0, "nodeName": "ip-10-0-9-171.ec2.internal", "targetRevision": 0 } ], "readyReplicas": 0, "serviceAccountIssuers": [ { "name": "https://kubernetes.default.svc" } ] } } ], "kind": "List", "metadata": { "resourceVersion": "" } }