{ "apiVersion": "v1", "items": [ { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2", "operator.openshift.io/spec-hash": "1c33c4582ce6cacfb66aff03ac8c075e3bc0a56a51e6c5ebc52a4a9d34d41a93" }, "creationTimestamp": "2026-04-28T12:56:35Z", "generation": 1, "labels": { "app": "klusterlet", "pod-template-hash": "54bf95fc67" }, "name": "klusterlet-54bf95fc67", "namespace": "open-cluster-management-agent", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "klusterlet", "uid": "fb3c28ae-6bce-49d3-bd27-faf91ef8ed43" } ], "resourceVersion": "47659", "uid": "bc9c3c9d-97d1-41fe-bc15-1318ca57ef0d" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "klusterlet", "pod-template-hash": "54bf95fc67" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "klusterlet", "pod-template-hash": "54bf95fc67" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "klusterlet" ] } ] }, "topologyKey": "failure-domain.beta.kubernetes.io/zone" }, "weight": 70 }, { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "klusterlet" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 30 } ] } }, "containers": [ { "args": [ "/registration-operator", "klusterlet" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:38f65ed06100af8f55530fd79ed5064f3839863caec0f610385abeea0e3c1efb", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "klusterlet", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "memory": "2Gi" }, "requests": { "cpu": "50m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmpdir" } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "klusterlet-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "klusterlet", "serviceAccountName": "klusterlet", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/infra", "operator": "Exists" } ], "volumes": [ { "emptyDir": {}, "name": "tmpdir" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "6cc56648017f38eb0613ab36c2079636eaa0e4b91ddd37e9c3c1fb8ebe60f8ac" }, "creationTimestamp": "2026-04-28T12:56:28Z", "generation": 2, "labels": { "app": "klusterlet", "pod-template-hash": "5c67f4cf9d" }, "name": "klusterlet-5c67f4cf9d", "namespace": "open-cluster-management-agent", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "klusterlet", "uid": "fb3c28ae-6bce-49d3-bd27-faf91ef8ed43" } ], "resourceVersion": "40367", "uid": "7cd98c97-7110-42fd-998f-1138c48de717" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "klusterlet", "pod-template-hash": "5c67f4cf9d" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "klusterlet", "pod-template-hash": "5c67f4cf9d" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "klusterlet" ] } ] }, "topologyKey": "failure-domain.beta.kubernetes.io/zone" }, "weight": 70 }, { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "klusterlet" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 30 } ] } }, "containers": [ { "args": [ "/registration-operator", "klusterlet" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:38f65ed06100af8f55530fd79ed5064f3839863caec0f610385abeea0e3c1efb", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "klusterlet", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "memory": "2Gi" }, "requests": { "cpu": "50m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmpdir" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "klusterlet", "serviceAccountName": "klusterlet", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/infra", "operator": "Exists" } ], "volumes": [ { "emptyDir": {}, "name": "tmpdir" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "4", "deployment.kubernetes.io/revision": "2", "operator.openshift.io/spec-hash": "5dedb1f9e82c659e21b345ddb68dc22fe760d2d106e224fae86b7665e2b73d52" }, "creationTimestamp": "2026-04-28T12:56:36Z", "generation": 3, "labels": { "app": "klusterlet-agent", "open-cluster-management.io/created-by-klusterlet": "klusterlet", "pod-template-hash": "586cbcd479" }, "name": "klusterlet-agent-586cbcd479", "namespace": "open-cluster-management-agent", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "klusterlet-agent", "uid": "021f2dab-1d47-4194-bc2b-d62ac71ec554" } ], "resourceVersion": "45619", "uid": "57f83ae4-3242-411b-9013-0d6aa1d05685" }, "spec": { "replicas": 3, "selector": { "matchLabels": { "app": "klusterlet-agent", "pod-template-hash": "586cbcd479" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "klusterlet-agent", "open-cluster-management.io/created-by-klusterlet": "klusterlet", "pod-template-hash": "586cbcd479" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "klusterlet-agent" ] } ] }, "topologyKey": "failure-domain.beta.kubernetes.io/zone" }, "weight": 70 }, { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "klusterlet-agent" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 30 } ] } }, "containers": [ { "args": [ "/registration-operator", "agent", "--spoke-cluster-name=clusterpool420-54bqn", "--bootstrap-kubeconfig=/spoke/bootstrap/kubeconfig", "--agent-id=452e15b8-71f1-4f43-a207-6a51f54930bf", "--workload-source-driver=kube", "--workload-source-config=/spoke/hub-kubeconfig/kubeconfig", "--kube-api-qps=50", "--kube-api-burst=100", "--reserved-cluster-claim-suffixes=openshift.io,open-cluster-management.io" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:38f65ed06100af8f55530fd79ed5064f3839863caec0f610385abeea0e3c1efb", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "klusterlet-agent", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "2m", "memory": "16Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/spoke/bootstrap", "name": "bootstrap-secret", "readOnly": true }, { "mountPath": "/spoke/hub-kubeconfig", "name": "hub-kubeconfig" }, { "mountPath": "/tmp", "name": "tmpdir" } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "klusterlet-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "klusterlet-work-sa", "serviceAccountName": "klusterlet-work-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/infra", "operator": "Exists" } ], "volumes": [ { "name": "bootstrap-secret", "secret": { "defaultMode": 420, "secretName": "bootstrap-hub-kubeconfig" } }, { "emptyDir": { "medium": "Memory" }, "name": "hub-kubeconfig" }, { "emptyDir": {}, "name": "tmpdir" } ] } } }, "status": { "availableReplicas": 3, "fullyLabeledReplicas": 3, "observedGeneration": 3, "readyReplicas": 3, "replicas": 3 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "4", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "92bbcc20e68295fab53dde32bae6b1f8607df4ee93d879fb1a31bad85284d782" }, "creationTimestamp": "2026-04-28T12:56:32Z", "generation": 4, "labels": { "app": "klusterlet-agent", "open-cluster-management.io/created-by-klusterlet": "klusterlet", "pod-template-hash": "6b76586c5d" }, "name": "klusterlet-agent-6b76586c5d", "namespace": "open-cluster-management-agent", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "klusterlet-agent", "uid": "021f2dab-1d47-4194-bc2b-d62ac71ec554" } ], "resourceVersion": "40525", "uid": "a2937e79-7ae6-4127-8929-3754da8e608b" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "klusterlet-agent", "pod-template-hash": "6b76586c5d" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "klusterlet-agent", "open-cluster-management.io/created-by-klusterlet": "klusterlet", "pod-template-hash": "6b76586c5d" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "klusterlet-agent" ] } ] }, "topologyKey": "failure-domain.beta.kubernetes.io/zone" }, "weight": 70 }, { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "klusterlet-agent" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 30 } ] } }, "containers": [ { "args": [ "/registration-operator", "agent", "--spoke-cluster-name=clusterpool420-54bqn", "--bootstrap-kubeconfig=/spoke/bootstrap/kubeconfig", "--agent-id=452e15b8-71f1-4f43-a207-6a51f54930bf", "--workload-source-driver=kube", "--workload-source-config=/spoke/hub-kubeconfig/kubeconfig", "--kube-api-qps=50", "--kube-api-burst=100", "--reserved-cluster-claim-suffixes=openshift.io,open-cluster-management.io" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:38f65ed06100af8f55530fd79ed5064f3839863caec0f610385abeea0e3c1efb", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "klusterlet-agent", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "2m", "memory": "16Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/spoke/bootstrap", "name": "bootstrap-secret", "readOnly": true }, { "mountPath": "/spoke/hub-kubeconfig", "name": "hub-kubeconfig" }, { "mountPath": "/tmp", "name": "tmpdir" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "klusterlet-work-sa", "serviceAccountName": "klusterlet-work-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/infra", "operator": "Exists" } ], "volumes": [ { "name": "bootstrap-secret", "secret": { "defaultMode": 420, "secretName": "bootstrap-hub-kubeconfig" } }, { "emptyDir": { "medium": "Memory" }, "name": "hub-kubeconfig" }, { "emptyDir": {}, "name": "tmpdir" } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:26Z", "generation": 1, "labels": { "app": "openshift-apiserver-operator", "pod-template-hash": "7f5546f969" }, "name": "openshift-apiserver-operator-7f5546f969", "namespace": "openshift-apiserver-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-apiserver-operator", "uid": "b30964de-86ba-4baa-827e-ad20c49a43ec" } ], "resourceVersion": "37686", "uid": "b6ef49ef-6a1c-4b40-84f1-6191ed61f8ec" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "openshift-apiserver-operator", "pod-template-hash": "7f5546f969" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-apiserver-operator", "pod-template-hash": "7f5546f969" }, "name": "openshift-apiserver-operator" }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml" ], "command": [ "cluster-openshift-apiserver-operator", "operator" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6878ff5398ff7aae09546c52f369f1b5d8401c7d27115158b77260948065c172" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b5f06d45c45b19dfbd6269970fe672267a5a3c79e92d103c510513425e1fa508" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.20.10" }, { "name": "OPERAND_IMAGE_VERSION", "value": "4.20.10" }, { "name": "KUBE_APISERVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e534588d63cc8ccabf3841cf4a0eea273269737eb90cc8e9d3d5157d5d0db181" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b5f06d45c45b19dfbd6269970fe672267a5a3c79e92d103c510513425e1fa508", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-apiserver-operator", "serviceAccountName": "openshift-apiserver-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "openshift-apiserver-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "openshift-apiserver-operator-config" }, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "9", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b5f06d45c45b19dfbd6269970fe672267a5a3c79e92d103c510513425e1fa508", "openshiftapiservers.operator.openshift.io/pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6878ff5398ff7aae09546c52f369f1b5d8401c7d27115158b77260948065c172", "operator.openshift.io/dep-desired.generation": "7", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "DTnbFQ==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "QLCEBg==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "tqdgGA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "fR-DCg==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "Y9uTwA==", "operator.openshift.io/spec-hash": "c2970d8ba6640238cf42fd2d8b24d838cbe389c7879844c5d6ca76319bf600f7" }, "creationTimestamp": "2026-04-28T12:57:58Z", "generation": 4, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "544c447dd", "revision": "1" }, "name": "apiserver-544c447dd", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "77d54c54-61c5-420c-9a34-a8a38262a06c" } ], "resourceVersion": "53022", "uid": "da0163e2-1da1-4d48-b323-70ccd29dd4b5" }, "spec": { "replicas": 3, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "pod-template-hash": "544c447dd" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-desired.generation": "7", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "DTnbFQ==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "QLCEBg==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "tqdgGA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "fR-DCg==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "Y9uTwA==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "544c447dd", "revision": "1" }, "name": "openshift-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec openshift-apiserver start --config=/var/run/configmaps/config/config.yaml -v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6878ff5398ff7aae09546c52f369f1b5d8401c7d27115158b77260948065c172", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "openshift-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/", "name": "node-pullsecrets", "readOnly": true }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/audit", "name": "audit" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/image-import-ca", "name": "image-import-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] }, { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)", "--v", "2" ], "command": [ "cluster-kube-apiserver-operator", "check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e534588d63cc8ccabf3841cf4a0eea273269737eb90cc8e9d3d5157d5d0db181", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/openshift-apiserver \u0026\u0026 touch /var/log/openshift-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/openshift-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6878ff5398ff7aae09546c52f369f1b5d8401c7d27115158b77260948065c172", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-apiserver-sa", "serviceAccountName": "openshift-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/", "type": "Directory" }, "name": "node-pullsecrets" }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit" }, { "name": "etcd-client", "secret": { "defaultMode": 384, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "configMap": { "defaultMode": 420, "name": "image-import-ca", "optional": true }, "name": "image-import-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 384, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 384, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/openshift-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "availableReplicas": 3, "fullyLabeledReplicas": 3, "observedGeneration": 4, "readyReplicas": 3, "replicas": 3 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "8", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b5f06d45c45b19dfbd6269970fe672267a5a3c79e92d103c510513425e1fa508", "openshiftapiservers.operator.openshift.io/pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6878ff5398ff7aae09546c52f369f1b5d8401c7d27115158b77260948065c172", "operator.openshift.io/dep-desired.generation": "7", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "DTnbFQ==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "QLCEBg==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "tqdgGA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "fo73XA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "d30057c79e7f0a17799296ba25d87b83c23b9ce9b0d6792206f5f16cce1eb077" }, "creationTimestamp": "2026-04-28T12:38:24Z", "generation": 7, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "557fc8b8f9", "revision": "1" }, "name": "apiserver-557fc8b8f9", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "77d54c54-61c5-420c-9a34-a8a38262a06c" } ], "resourceVersion": "50428", "uid": "64a129ea-4675-4d2d-b364-243c0c71bd34" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "pod-template-hash": "557fc8b8f9" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-desired.generation": "7", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "DTnbFQ==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "QLCEBg==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "tqdgGA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "fo73XA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "557fc8b8f9", "revision": "1" }, "name": "openshift-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec openshift-apiserver start --config=/var/run/configmaps/config/config.yaml -v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6878ff5398ff7aae09546c52f369f1b5d8401c7d27115158b77260948065c172", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "openshift-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/", "name": "node-pullsecrets", "readOnly": true }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/audit", "name": "audit" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/image-import-ca", "name": "image-import-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] }, { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)", "--v", "2" ], "command": [ "cluster-kube-apiserver-operator", "check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e534588d63cc8ccabf3841cf4a0eea273269737eb90cc8e9d3d5157d5d0db181", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/openshift-apiserver \u0026\u0026 touch /var/log/openshift-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/openshift-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6878ff5398ff7aae09546c52f369f1b5d8401c7d27115158b77260948065c172", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-apiserver-sa", "serviceAccountName": "openshift-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/", "type": "Directory" }, "name": "node-pullsecrets" }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit" }, { "name": "etcd-client", "secret": { "defaultMode": 384, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "configMap": { "defaultMode": 420, "name": "image-import-ca", "optional": true }, "name": "image-import-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 384, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 384, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/openshift-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "7", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b5f06d45c45b19dfbd6269970fe672267a5a3c79e92d103c510513425e1fa508", "openshiftapiservers.operator.openshift.io/pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6878ff5398ff7aae09546c52f369f1b5d8401c7d27115158b77260948065c172", "operator.openshift.io/dep-desired.generation": "6", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "8g4mpg==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "QLCEBg==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "tqdgGA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "fo73XA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "8da7b3be71d385b458185fa9e9846950023cf72f992d838d3dc37af63a77bb75" }, "creationTimestamp": "2026-04-28T12:34:46Z", "generation": 7, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "5bb979fcfb", "revision": "1" }, "name": "apiserver-5bb979fcfb", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "77d54c54-61c5-420c-9a34-a8a38262a06c" } ], "resourceVersion": "29623", "uid": "d10f925b-d4ff-4ba2-893f-b84f11b4bb21" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "pod-template-hash": "5bb979fcfb" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-desired.generation": "6", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "8g4mpg==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "QLCEBg==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "tqdgGA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "fo73XA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "5bb979fcfb", "revision": "1" }, "name": "openshift-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec openshift-apiserver start --config=/var/run/configmaps/config/config.yaml -v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6878ff5398ff7aae09546c52f369f1b5d8401c7d27115158b77260948065c172", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "openshift-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/", "name": "node-pullsecrets", "readOnly": true }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/audit", "name": "audit" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/image-import-ca", "name": "image-import-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] }, { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)", "--v", "2" ], "command": [ "cluster-kube-apiserver-operator", "check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e534588d63cc8ccabf3841cf4a0eea273269737eb90cc8e9d3d5157d5d0db181", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/openshift-apiserver \u0026\u0026 touch /var/log/openshift-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/openshift-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6878ff5398ff7aae09546c52f369f1b5d8401c7d27115158b77260948065c172", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-apiserver-sa", "serviceAccountName": "openshift-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/", "type": "Directory" }, "name": "node-pullsecrets" }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit" }, { "name": "etcd-client", "secret": { "defaultMode": 384, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "configMap": { "defaultMode": 420, "name": "image-import-ca", "optional": true }, "name": "image-import-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 384, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 384, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/openshift-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "3", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b5f06d45c45b19dfbd6269970fe672267a5a3c79e92d103c510513425e1fa508", "openshiftapiservers.operator.openshift.io/pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6878ff5398ff7aae09546c52f369f1b5d8401c7d27115158b77260948065c172", "operator.openshift.io/dep-desired.generation": "3", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "tNmIeA==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "QLCEBg==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "tqdgGA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "ef56c9ce4eb6ebfe7fb1efebf7590dee4f9f578d3b615e04cf25db08c1f1fa76" }, "creationTimestamp": "2026-04-28T12:26:23Z", "generation": 5, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "5cb7dcf878", "revision": "1" }, "name": "apiserver-5cb7dcf878", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "77d54c54-61c5-420c-9a34-a8a38262a06c" } ], "resourceVersion": "15888", "uid": "52956dd4-5217-4102-9efc-177f328a591f" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "pod-template-hash": "5cb7dcf878" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-desired.generation": "3", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "tNmIeA==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "QLCEBg==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "tqdgGA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "5cb7dcf878", "revision": "1" }, "name": "openshift-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec openshift-apiserver start --config=/var/run/configmaps/config/config.yaml -v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6878ff5398ff7aae09546c52f369f1b5d8401c7d27115158b77260948065c172", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "openshift-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/", "name": "node-pullsecrets", "readOnly": true }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/audit", "name": "audit" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/image-import-ca", "name": "image-import-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] }, { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)", "--v", "2" ], "command": [ "cluster-kube-apiserver-operator", "check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e534588d63cc8ccabf3841cf4a0eea273269737eb90cc8e9d3d5157d5d0db181", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/openshift-apiserver \u0026\u0026 touch /var/log/openshift-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/openshift-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6878ff5398ff7aae09546c52f369f1b5d8401c7d27115158b77260948065c172", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-apiserver-sa", "serviceAccountName": "openshift-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/", "type": "Directory" }, "name": "node-pullsecrets" }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit" }, { "name": "etcd-client", "secret": { "defaultMode": 384, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "configMap": { "defaultMode": 420, "name": "image-import-ca", "optional": true }, "name": "image-import-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 384, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 384, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/openshift-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 5, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "2", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b5f06d45c45b19dfbd6269970fe672267a5a3c79e92d103c510513425e1fa508", "openshiftapiservers.operator.openshift.io/pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6878ff5398ff7aae09546c52f369f1b5d8401c7d27115158b77260948065c172", "operator.openshift.io/dep-desired.generation": "2", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "fKwawA==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "QLCEBg==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "tqdgGA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "c17a83d39981f07b8db5403e00b89c22c4609efa9a96e069a78045a2826ba73d" }, "creationTimestamp": "2026-04-28T12:23:10Z", "generation": 7, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "66d7c59f7b", "revision": "1" }, "name": "apiserver-66d7c59f7b", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "77d54c54-61c5-420c-9a34-a8a38262a06c" } ], "resourceVersion": "14449", "uid": "c6efddc5-c129-4430-ae3e-bc8e95331b9e" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "pod-template-hash": "66d7c59f7b" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-desired.generation": "2", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "fKwawA==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "QLCEBg==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "tqdgGA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "66d7c59f7b", "revision": "1" }, "name": "openshift-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec openshift-apiserver start --config=/var/run/configmaps/config/config.yaml -v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6878ff5398ff7aae09546c52f369f1b5d8401c7d27115158b77260948065c172", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "openshift-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/", "name": "node-pullsecrets", "readOnly": true }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/audit", "name": "audit" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/image-import-ca", "name": "image-import-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] }, { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)", "--v", "2" ], "command": [ "cluster-kube-apiserver-operator", "check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e534588d63cc8ccabf3841cf4a0eea273269737eb90cc8e9d3d5157d5d0db181", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/openshift-apiserver \u0026\u0026 touch /var/log/openshift-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/openshift-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6878ff5398ff7aae09546c52f369f1b5d8401c7d27115158b77260948065c172", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-apiserver-sa", "serviceAccountName": "openshift-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/", "type": "Directory" }, "name": "node-pullsecrets" }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit" }, { "name": "etcd-client", "secret": { "defaultMode": 384, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "configMap": { "defaultMode": 420, "name": "image-import-ca", "optional": true }, "name": "image-import-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 384, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 384, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/openshift-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "5", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b5f06d45c45b19dfbd6269970fe672267a5a3c79e92d103c510513425e1fa508", "openshiftapiservers.operator.openshift.io/pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6878ff5398ff7aae09546c52f369f1b5d8401c7d27115158b77260948065c172", "operator.openshift.io/dep-desired.generation": "5", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "oplDRA==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "QLCEBg==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "tqdgGA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "3d4273042b604bcc841db14a9efbdbe69c27f773732f67efc250470ae4e1038d" }, "creationTimestamp": "2026-04-28T12:30:17Z", "generation": 7, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "687bfbfdd4", "revision": "1" }, "name": "apiserver-687bfbfdd4", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "77d54c54-61c5-420c-9a34-a8a38262a06c" } ], "resourceVersion": "26666", "uid": "bf2af0ec-9622-4fcd-b165-310dff590cd8" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "pod-template-hash": "687bfbfdd4" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-desired.generation": "5", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "oplDRA==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "QLCEBg==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "tqdgGA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "687bfbfdd4", "revision": "1" }, "name": "openshift-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec openshift-apiserver start --config=/var/run/configmaps/config/config.yaml -v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6878ff5398ff7aae09546c52f369f1b5d8401c7d27115158b77260948065c172", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "openshift-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/", "name": "node-pullsecrets", "readOnly": true }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/audit", "name": "audit" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/image-import-ca", "name": "image-import-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] }, { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)", "--v", "2" ], "command": [ "cluster-kube-apiserver-operator", "check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e534588d63cc8ccabf3841cf4a0eea273269737eb90cc8e9d3d5157d5d0db181", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/openshift-apiserver \u0026\u0026 touch /var/log/openshift-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/openshift-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6878ff5398ff7aae09546c52f369f1b5d8401c7d27115158b77260948065c172", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-apiserver-sa", "serviceAccountName": "openshift-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/", "type": "Directory" }, "name": "node-pullsecrets" }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit" }, { "name": "etcd-client", "secret": { "defaultMode": 384, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "configMap": { "defaultMode": 420, "name": "image-import-ca", "optional": true }, "name": "image-import-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 384, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 384, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/openshift-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b5f06d45c45b19dfbd6269970fe672267a5a3c79e92d103c510513425e1fa508", "openshiftapiservers.operator.openshift.io/pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6878ff5398ff7aae09546c52f369f1b5d8401c7d27115158b77260948065c172", "operator.openshift.io/dep-desired.generation": "2", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "fKwawA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "3beaf8186fa8a1a5a8bfd33600981fdff013c1e2f7766da500e31355f67cbe70" }, "creationTimestamp": "2026-04-28T12:23:05Z", "generation": 4, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "6c7b9fd979", "revision": "0" }, "name": "apiserver-6c7b9fd979", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "77d54c54-61c5-420c-9a34-a8a38262a06c" } ], "resourceVersion": "8968", "uid": "fb9e7195-3471-4d4b-b792-cd6d1f09be21" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "pod-template-hash": "6c7b9fd979" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-desired.generation": "2", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "fKwawA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "6c7b9fd979", "revision": "0" }, "name": "openshift-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec openshift-apiserver start --config=/var/run/configmaps/config/config.yaml -v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6878ff5398ff7aae09546c52f369f1b5d8401c7d27115158b77260948065c172", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "openshift-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/", "name": "node-pullsecrets", "readOnly": true }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/audit", "name": "audit" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/image-import-ca", "name": "image-import-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] }, { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)", "--v", "2" ], "command": [ "cluster-kube-apiserver-operator", "check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e534588d63cc8ccabf3841cf4a0eea273269737eb90cc8e9d3d5157d5d0db181", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/openshift-apiserver \u0026\u0026 touch /var/log/openshift-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/openshift-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6878ff5398ff7aae09546c52f369f1b5d8401c7d27115158b77260948065c172", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-apiserver-sa", "serviceAccountName": "openshift-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/", "type": "Directory" }, "name": "node-pullsecrets" }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "audit-0" }, "name": "audit" }, { "name": "etcd-client", "secret": { "defaultMode": 384, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "configMap": { "defaultMode": 420, "name": "image-import-ca", "optional": true }, "name": "image-import-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 384, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 384, "optional": true, "secretName": "encryption-config-0" } }, { "hostPath": { "path": "/var/log/openshift-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "6", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b5f06d45c45b19dfbd6269970fe672267a5a3c79e92d103c510513425e1fa508", "openshiftapiservers.operator.openshift.io/pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6878ff5398ff7aae09546c52f369f1b5d8401c7d27115158b77260948065c172", "operator.openshift.io/dep-desired.generation": "5", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "oplDRA==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "QLCEBg==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "tqdgGA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "fo73XA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "6c5efa58430ac4b45412803948bba413f1d37a1983c3813cc4e1564335dcb1cb" }, "creationTimestamp": "2026-04-28T12:34:40Z", "generation": 3, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "6d4976f488", "revision": "1" }, "name": "apiserver-6d4976f488", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "77d54c54-61c5-420c-9a34-a8a38262a06c" } ], "resourceVersion": "22560", "uid": "cd982709-0445-45ac-9e7e-ebbb33840c3a" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "pod-template-hash": "6d4976f488" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-desired.generation": "5", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "oplDRA==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "QLCEBg==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "tqdgGA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "fo73XA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "6d4976f488", "revision": "1" }, "name": "openshift-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec openshift-apiserver start --config=/var/run/configmaps/config/config.yaml -v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6878ff5398ff7aae09546c52f369f1b5d8401c7d27115158b77260948065c172", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "openshift-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/", "name": "node-pullsecrets", "readOnly": true }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/audit", "name": "audit" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/image-import-ca", "name": "image-import-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] }, { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)", "--v", "2" ], "command": [ "cluster-kube-apiserver-operator", "check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e534588d63cc8ccabf3841cf4a0eea273269737eb90cc8e9d3d5157d5d0db181", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/openshift-apiserver \u0026\u0026 touch /var/log/openshift-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/openshift-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6878ff5398ff7aae09546c52f369f1b5d8401c7d27115158b77260948065c172", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-apiserver-sa", "serviceAccountName": "openshift-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/", "type": "Directory" }, "name": "node-pullsecrets" }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit" }, { "name": "etcd-client", "secret": { "defaultMode": 384, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "configMap": { "defaultMode": 420, "name": "image-import-ca", "optional": true }, "name": "image-import-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 384, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 384, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/openshift-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "4", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b5f06d45c45b19dfbd6269970fe672267a5a3c79e92d103c510513425e1fa508", "openshiftapiservers.operator.openshift.io/pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6878ff5398ff7aae09546c52f369f1b5d8401c7d27115158b77260948065c172", "operator.openshift.io/dep-desired.generation": "4", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "HnHj5w==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "QLCEBg==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "tqdgGA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "20c66fb9ce558163e072112de5675386a8c9681444750d65cfcd5ed5696faca6" }, "creationTimestamp": "2026-04-28T12:27:27Z", "generation": 7, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "8c6964c5f", "revision": "1" }, "name": "apiserver-8c6964c5f", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "77d54c54-61c5-420c-9a34-a8a38262a06c" } ], "resourceVersion": "19219", "uid": "d84e9c56-39de-42dd-87a5-ceb35d51d478" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "pod-template-hash": "8c6964c5f" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-desired.generation": "4", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "HnHj5w==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "QLCEBg==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "tqdgGA==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "8c6964c5f", "revision": "1" }, "name": "openshift-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec openshift-apiserver start --config=/var/run/configmaps/config/config.yaml -v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6878ff5398ff7aae09546c52f369f1b5d8401c7d27115158b77260948065c172", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "openshift-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/", "name": "node-pullsecrets", "readOnly": true }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/audit", "name": "audit" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/image-import-ca", "name": "image-import-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] }, { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)", "--v", "2" ], "command": [ "cluster-kube-apiserver-operator", "check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e534588d63cc8ccabf3841cf4a0eea273269737eb90cc8e9d3d5157d5d0db181", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/openshift-apiserver \u0026\u0026 touch /var/log/openshift-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/openshift-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6878ff5398ff7aae09546c52f369f1b5d8401c7d27115158b77260948065c172", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-apiserver-sa", "serviceAccountName": "openshift-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/", "type": "Directory" }, "name": "node-pullsecrets" }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit" }, { "name": "etcd-client", "secret": { "defaultMode": 384, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "configMap": { "defaultMode": 420, "name": "image-import-ca", "optional": true }, "name": "image-import-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 384, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 384, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/openshift-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "config.openshift.io/inject-proxy": "authentication-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:28Z", "generation": 1, "labels": { "app": "authentication-operator", "pod-template-hash": "f87554fd5" }, "name": "authentication-operator-f87554fd5", "namespace": "openshift-authentication-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "authentication-operator", "uid": "a120e1bb-ba21-4e41-9d71-4074b176e59f" } ], "resourceVersion": "43469", "uid": "a775a32d-59b4-4971-9bc3-e031448be877" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "authentication-operator", "pod-template-hash": "f87554fd5" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "anyuid", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "authentication-operator", "pod-template-hash": "f87554fd5" }, "name": "authentication-operator" }, "spec": { "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/ca-bundle.crt ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/ca-bundle.crt /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec authentication-operator operator --config=/var/run/configmaps/config/operator-config.yaml --v=2 --terminate-on-files=/var/run/configmaps/trusted-ca-bundle/ca-bundle.crt --terminate-on-files=/tmp/terminate\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "IMAGE_OAUTH_SERVER", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:64f4369776af8e714a30e1badaa3fb68748e3ddec5854b00269073a5a81986f6" }, { "name": "IMAGE_OAUTH_APISERVER", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:de0da6a463a0d9467c735aa8afe0ada0622dfd458074d8a3188e23d73d931f45" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.20.10" }, { "name": "OPERAND_OAUTH_SERVER_IMAGE_VERSION", "value": "4.20.10_openshift" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:66ff063622438a3100d058e952e2e4e2a5ad138962a2ae4dc05d68e1ae431e40", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "authentication-operator", "resources": { "requests": { "cpu": "20m", "memory": "200Mi" } }, "securityContext": { "readOnlyRootFilesystem": false, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/run/configmaps/service-ca-bundle", "name": "service-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "authentication-operator", "serviceAccountName": "authentication-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 440, "name": "authentication-operator-config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "service-ca-bundle", "optional": true }, "name": "service-ca-bundle" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "6", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/rvs-hash": "XS4ORPonj0CIsXstKxI2rEPcQpOWk8HLWiHJ453RNXE68c7u6lP1OSRwKVvYbZKO7gvaWF2-MSywGK38nwI69Q", "operator.openshift.io/spec-hash": "687115beaa6c551143cbc63dba3596bec1dace6350c406509232ff810de26b28" }, "creationTimestamp": "2026-04-28T12:37:04Z", "generation": 3, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "556ff4675f" }, "name": "oauth-openshift-556ff4675f", "namespace": "openshift-authentication", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "oauth-openshift", "uid": "778b1381-68a3-4bb3-b1fb-99a2911a71d0" } ], "resourceVersion": "27172", "uid": "bc790c64-43da-4903-b77c-3d4f9e7c2010" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "oauth-openshift", "pod-template-hash": "556ff4675f" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/bootstrap-user-exists": "true", "operator.openshift.io/rvs-hash": "XS4ORPonj0CIsXstKxI2rEPcQpOWk8HLWiHJ453RNXE68c7u6lP1OSRwKVvYbZKO7gvaWF2-MSywGK38nwI69Q", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "556ff4675f" }, "name": "oauth-openshift", "namespace": "openshift-authentication" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-server osinserver \\\n--config=/var/config/system/configmaps/v4-0-config-system-cliconfig/v4-0-config-system-cliconfig \\\n--v=2 \\\n--audit-log-format=json \\\n--audit-log-maxbackup=10 \\\n--audit-log-maxsize=100 \\\n--audit-log-path=/var/log/oauth-server/audit.log \\\n--audit-policy-file=/var/run/configmaps/audit/audit.yaml\n" ], "command": [ "/bin/bash", "-ec" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:64f4369776af8e714a30e1badaa3fb68748e3ddec5854b00269073a5a81986f6", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "oauth-openshift", "ports": [ { "containerPort": 6443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/log/oauth-server", "name": "audit-dir" }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-session", "name": "v4-0-config-system-session", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-cliconfig", "name": "v4-0-config-system-cliconfig", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-serving-cert", "name": "v4-0-config-system-serving-cert", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-service-ca", "name": "v4-0-config-system-service-ca", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-router-certs", "name": "v4-0-config-system-router-certs", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-ocp-branding-template", "name": "v4-0-config-system-ocp-branding-template", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-login", "name": "v4-0-config-user-template-login", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-provider-selection", "name": "v4-0-config-user-template-provider-selection", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-error", "name": "v4-0-config-user-template-error", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle", "name": "v4-0-config-system-trusted-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-openshift", "serviceAccountName": "oauth-openshift", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit" }, "name": "audit-policies" }, { "hostPath": { "path": "/var/log/oauth-server", "type": "" }, "name": "audit-dir" }, { "name": "v4-0-config-system-session", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-session" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-cliconfig" }, "name": "v4-0-config-system-cliconfig" }, { "name": "v4-0-config-system-serving-cert", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-service-ca" }, "name": "v4-0-config-system-service-ca" }, { "name": "v4-0-config-system-router-certs", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-router-certs" } }, { "name": "v4-0-config-system-ocp-branding-template", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-ocp-branding-template" } }, { "name": "v4-0-config-user-template-login", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-login" } }, { "name": "v4-0-config-user-template-provider-selection", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-provider-selection" } }, { "name": "v4-0-config-user-template-error", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-error" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-trusted-ca-bundle", "optional": true }, "name": "v4-0-config-system-trusted-ca-bundle" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "6", "deployment.kubernetes.io/revision": "5", "operator.openshift.io/rvs-hash": "Fyhkr_BSSnj6M5e3uKhEYhLczEVIn6hIwhr6c683_lOEGpAs51Qwc_4-64rE49nSi_6Qb4jNQmmAHzb3E5j5yA", "operator.openshift.io/spec-hash": "e1baaeb04acab7e30920f0e9d257d59ad5491f47016dc0a1947012dd831e22b9" }, "creationTimestamp": "2026-04-28T12:57:57Z", "generation": 2, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "66f78ff459" }, "name": "oauth-openshift-66f78ff459", "namespace": "openshift-authentication", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "oauth-openshift", "uid": "778b1381-68a3-4bb3-b1fb-99a2911a71d0" } ], "resourceVersion": "41771", "uid": "1d5566aa-ab8c-4459-abcd-bc9d181ee9e6" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "oauth-openshift", "pod-template-hash": "66f78ff459" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/bootstrap-user-exists": "true", "operator.openshift.io/rvs-hash": "Fyhkr_BSSnj6M5e3uKhEYhLczEVIn6hIwhr6c683_lOEGpAs51Qwc_4-64rE49nSi_6Qb4jNQmmAHzb3E5j5yA", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "66f78ff459" }, "name": "oauth-openshift", "namespace": "openshift-authentication" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-server osinserver \\\n--config=/var/config/system/configmaps/v4-0-config-system-cliconfig/v4-0-config-system-cliconfig \\\n--v=2 \\\n--audit-log-format=json \\\n--audit-log-maxbackup=10 \\\n--audit-log-maxsize=100 \\\n--audit-log-path=/var/log/oauth-server/audit.log \\\n--audit-policy-file=/var/run/configmaps/audit/audit.yaml\n" ], "command": [ "/bin/bash", "-ec" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:64f4369776af8e714a30e1badaa3fb68748e3ddec5854b00269073a5a81986f6", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "oauth-openshift", "ports": [ { "containerPort": 6443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/log/oauth-server", "name": "audit-dir" }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-session", "name": "v4-0-config-system-session", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-cliconfig", "name": "v4-0-config-system-cliconfig", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-serving-cert", "name": "v4-0-config-system-serving-cert", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-service-ca", "name": "v4-0-config-system-service-ca", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-router-certs", "name": "v4-0-config-system-router-certs", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-ocp-branding-template", "name": "v4-0-config-system-ocp-branding-template", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-login", "name": "v4-0-config-user-template-login", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-provider-selection", "name": "v4-0-config-user-template-provider-selection", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-error", "name": "v4-0-config-user-template-error", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle", "name": "v4-0-config-system-trusted-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-openshift", "serviceAccountName": "oauth-openshift", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit" }, "name": "audit-policies" }, { "hostPath": { "path": "/var/log/oauth-server", "type": "" }, "name": "audit-dir" }, { "name": "v4-0-config-system-session", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-session" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-cliconfig" }, "name": "v4-0-config-system-cliconfig" }, { "name": "v4-0-config-system-serving-cert", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-service-ca" }, "name": "v4-0-config-system-service-ca" }, { "name": "v4-0-config-system-router-certs", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-router-certs" } }, { "name": "v4-0-config-system-ocp-branding-template", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-ocp-branding-template" } }, { "name": "v4-0-config-user-template-login", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-login" } }, { "name": "v4-0-config-user-template-provider-selection", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-provider-selection" } }, { "name": "v4-0-config-user-template-error", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-error" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-trusted-ca-bundle", "optional": true }, "name": "v4-0-config-system-trusted-ca-bundle" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "6", "deployment.kubernetes.io/revision": "2", "operator.openshift.io/rvs-hash": "4H4RpnX3INZkoCXVrmp-jlgHcM0n1X7JyqJIlZzFdG-T74Xvp5CDTuVDu2JhpAiI0UHGZWkVWRemwtU9dCn9Qg", "operator.openshift.io/spec-hash": "d7fbf0c3d07c401f37fd1281bf8b22a7d94ec939ed88f7831836518aef208d77" }, "creationTimestamp": "2026-04-28T12:37:10Z", "generation": 4, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "699d79cfc9" }, "name": "oauth-openshift-699d79cfc9", "namespace": "openshift-authentication", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "oauth-openshift", "uid": "778b1381-68a3-4bb3-b1fb-99a2911a71d0" } ], "resourceVersion": "27686", "uid": "9d41076e-2956-46f2-b87b-060ff58ed971" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "oauth-openshift", "pod-template-hash": "699d79cfc9" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/bootstrap-user-exists": "true", "operator.openshift.io/rvs-hash": "4H4RpnX3INZkoCXVrmp-jlgHcM0n1X7JyqJIlZzFdG-T74Xvp5CDTuVDu2JhpAiI0UHGZWkVWRemwtU9dCn9Qg", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "699d79cfc9" }, "name": "oauth-openshift", "namespace": "openshift-authentication" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-server osinserver \\\n--config=/var/config/system/configmaps/v4-0-config-system-cliconfig/v4-0-config-system-cliconfig \\\n--v=2 \\\n--audit-log-format=json \\\n--audit-log-maxbackup=10 \\\n--audit-log-maxsize=100 \\\n--audit-log-path=/var/log/oauth-server/audit.log \\\n--audit-policy-file=/var/run/configmaps/audit/audit.yaml\n" ], "command": [ "/bin/bash", "-ec" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:64f4369776af8e714a30e1badaa3fb68748e3ddec5854b00269073a5a81986f6", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "oauth-openshift", "ports": [ { "containerPort": 6443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/log/oauth-server", "name": "audit-dir" }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-session", "name": "v4-0-config-system-session", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-cliconfig", "name": "v4-0-config-system-cliconfig", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-serving-cert", "name": "v4-0-config-system-serving-cert", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-service-ca", "name": "v4-0-config-system-service-ca", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-router-certs", "name": "v4-0-config-system-router-certs", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-ocp-branding-template", "name": "v4-0-config-system-ocp-branding-template", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-login", "name": "v4-0-config-user-template-login", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-provider-selection", "name": "v4-0-config-user-template-provider-selection", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-error", "name": "v4-0-config-user-template-error", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle", "name": "v4-0-config-system-trusted-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-openshift", "serviceAccountName": "oauth-openshift", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit" }, "name": "audit-policies" }, { "hostPath": { "path": "/var/log/oauth-server", "type": "" }, "name": "audit-dir" }, { "name": "v4-0-config-system-session", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-session" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-cliconfig" }, "name": "v4-0-config-system-cliconfig" }, { "name": "v4-0-config-system-serving-cert", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-service-ca" }, "name": "v4-0-config-system-service-ca" }, { "name": "v4-0-config-system-router-certs", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-router-certs" } }, { "name": "v4-0-config-system-ocp-branding-template", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-ocp-branding-template" } }, { "name": "v4-0-config-user-template-login", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-login" } }, { "name": "v4-0-config-user-template-provider-selection", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-provider-selection" } }, { "name": "v4-0-config-user-template-error", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-error" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-trusted-ca-bundle", "optional": true }, "name": "v4-0-config-system-trusted-ca-bundle" } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "6", "deployment.kubernetes.io/revision": "3", "operator.openshift.io/rvs-hash": "ehFFCJzde84Q329mmqPWeTDweFkJ_ycDwTfdVko3b3McLD4eqvxoG83U_0XvPP9pFYXY0zsH41K69lERKWRPag", "operator.openshift.io/spec-hash": "92b9fddba15821a0e73a4682ad019e7787d7009655c4863ac2c15f45fe6c3132" }, "creationTimestamp": "2026-04-28T12:37:16Z", "generation": 2, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "6ff7cbb5f" }, "name": "oauth-openshift-6ff7cbb5f", "namespace": "openshift-authentication", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "oauth-openshift", "uid": "778b1381-68a3-4bb3-b1fb-99a2911a71d0" } ], "resourceVersion": "27308", "uid": "0d193bb6-2a57-4fb0-a627-9fd70b718669" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "oauth-openshift", "pod-template-hash": "6ff7cbb5f" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/bootstrap-user-exists": "true", "operator.openshift.io/rvs-hash": "ehFFCJzde84Q329mmqPWeTDweFkJ_ycDwTfdVko3b3McLD4eqvxoG83U_0XvPP9pFYXY0zsH41K69lERKWRPag", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "6ff7cbb5f" }, "name": "oauth-openshift", "namespace": "openshift-authentication" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-server osinserver \\\n--config=/var/config/system/configmaps/v4-0-config-system-cliconfig/v4-0-config-system-cliconfig \\\n--v=2 \\\n--audit-log-format=json \\\n--audit-log-maxbackup=10 \\\n--audit-log-maxsize=100 \\\n--audit-log-path=/var/log/oauth-server/audit.log \\\n--audit-policy-file=/var/run/configmaps/audit/audit.yaml\n" ], "command": [ "/bin/bash", "-ec" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:64f4369776af8e714a30e1badaa3fb68748e3ddec5854b00269073a5a81986f6", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "oauth-openshift", "ports": [ { "containerPort": 6443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/log/oauth-server", "name": "audit-dir" }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-session", "name": "v4-0-config-system-session", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-cliconfig", "name": "v4-0-config-system-cliconfig", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-serving-cert", "name": "v4-0-config-system-serving-cert", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-service-ca", "name": "v4-0-config-system-service-ca", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-router-certs", "name": "v4-0-config-system-router-certs", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-ocp-branding-template", "name": "v4-0-config-system-ocp-branding-template", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-login", "name": "v4-0-config-user-template-login", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-provider-selection", "name": "v4-0-config-user-template-provider-selection", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-error", "name": "v4-0-config-user-template-error", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle", "name": "v4-0-config-system-trusted-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-openshift", "serviceAccountName": "oauth-openshift", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit" }, "name": "audit-policies" }, { "hostPath": { "path": "/var/log/oauth-server", "type": "" }, "name": "audit-dir" }, { "name": "v4-0-config-system-session", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-session" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-cliconfig" }, "name": "v4-0-config-system-cliconfig" }, { "name": "v4-0-config-system-serving-cert", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-service-ca" }, "name": "v4-0-config-system-service-ca" }, { "name": "v4-0-config-system-router-certs", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-router-certs" } }, { "name": "v4-0-config-system-ocp-branding-template", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-ocp-branding-template" } }, { "name": "v4-0-config-user-template-login", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-login" } }, { "name": "v4-0-config-user-template-provider-selection", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-provider-selection" } }, { "name": "v4-0-config-user-template-error", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-error" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-trusted-ca-bundle", "optional": true }, "name": "v4-0-config-system-trusted-ca-bundle" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "6", "deployment.kubernetes.io/revision": "4", "operator.openshift.io/rvs-hash": "N0bFgfgYV_R67yHb1eBs5bffGLK64wBoVS2E5APUvLpPVUCxAv6DmRNRia42xUIVwBxeTInYBY2cIIjIMJ2wwA", "operator.openshift.io/spec-hash": "4a5f2678380615deb01f89c5c05b398eb668c49d77faf4b79959b801e52b4fca" }, "creationTimestamp": "2026-04-28T12:37:22Z", "generation": 4, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "76c99fdb48" }, "name": "oauth-openshift-76c99fdb48", "namespace": "openshift-authentication", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "oauth-openshift", "uid": "778b1381-68a3-4bb3-b1fb-99a2911a71d0" } ], "resourceVersion": "42717", "uid": "53143231-acff-44dd-8b52-45e0b67d3e2b" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "oauth-openshift", "pod-template-hash": "76c99fdb48" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/bootstrap-user-exists": "true", "operator.openshift.io/rvs-hash": "N0bFgfgYV_R67yHb1eBs5bffGLK64wBoVS2E5APUvLpPVUCxAv6DmRNRia42xUIVwBxeTInYBY2cIIjIMJ2wwA", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "76c99fdb48" }, "name": "oauth-openshift", "namespace": "openshift-authentication" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-server osinserver \\\n--config=/var/config/system/configmaps/v4-0-config-system-cliconfig/v4-0-config-system-cliconfig \\\n--v=2 \\\n--audit-log-format=json \\\n--audit-log-maxbackup=10 \\\n--audit-log-maxsize=100 \\\n--audit-log-path=/var/log/oauth-server/audit.log \\\n--audit-policy-file=/var/run/configmaps/audit/audit.yaml\n" ], "command": [ "/bin/bash", "-ec" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:64f4369776af8e714a30e1badaa3fb68748e3ddec5854b00269073a5a81986f6", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "oauth-openshift", "ports": [ { "containerPort": 6443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/log/oauth-server", "name": "audit-dir" }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-session", "name": "v4-0-config-system-session", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-cliconfig", "name": "v4-0-config-system-cliconfig", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-serving-cert", "name": "v4-0-config-system-serving-cert", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-service-ca", "name": "v4-0-config-system-service-ca", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-router-certs", "name": "v4-0-config-system-router-certs", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-ocp-branding-template", "name": "v4-0-config-system-ocp-branding-template", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-login", "name": "v4-0-config-user-template-login", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-provider-selection", "name": "v4-0-config-user-template-provider-selection", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-error", "name": "v4-0-config-user-template-error", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle", "name": "v4-0-config-system-trusted-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-openshift", "serviceAccountName": "oauth-openshift", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit" }, "name": "audit-policies" }, { "hostPath": { "path": "/var/log/oauth-server", "type": "" }, "name": "audit-dir" }, { "name": "v4-0-config-system-session", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-session" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-cliconfig" }, "name": "v4-0-config-system-cliconfig" }, { "name": "v4-0-config-system-serving-cert", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-service-ca" }, "name": "v4-0-config-system-service-ca" }, { "name": "v4-0-config-system-router-certs", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-router-certs" } }, { "name": "v4-0-config-system-ocp-branding-template", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-ocp-branding-template" } }, { "name": "v4-0-config-user-template-login", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-login" } }, { "name": "v4-0-config-user-template-provider-selection", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-provider-selection" } }, { "name": "v4-0-config-user-template-error", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-error" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-trusted-ca-bundle", "optional": true }, "name": "v4-0-config-system-trusted-ca-bundle" } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "6", "deployment.kubernetes.io/revision": "6", "operator.openshift.io/rvs-hash": "C0ZpynrD1o5yBUdWNWtmFAtc9xi9olOYJy8tHojA8U1XSxGQCWm2ktV1eifJDUAtFOoZr6nhk5ElK6VCUufF7Q", "operator.openshift.io/spec-hash": "2f45537a7cc92e00c9722c390a8872f0870667acd1a9add7704f7769a41f2556" }, "creationTimestamp": "2026-04-28T12:58:05Z", "generation": 2, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "7d58fb6444" }, "name": "oauth-openshift-7d58fb6444", "namespace": "openshift-authentication", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "oauth-openshift", "uid": "778b1381-68a3-4bb3-b1fb-99a2911a71d0" } ], "resourceVersion": "45099", "uid": "13c0beaf-e33e-41f9-a4b7-f8bd8a219cdd" }, "spec": { "replicas": 3, "selector": { "matchLabels": { "app": "oauth-openshift", "pod-template-hash": "7d58fb6444" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/bootstrap-user-exists": "true", "operator.openshift.io/rvs-hash": "C0ZpynrD1o5yBUdWNWtmFAtc9xi9olOYJy8tHojA8U1XSxGQCWm2ktV1eifJDUAtFOoZr6nhk5ElK6VCUufF7Q", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "7d58fb6444" }, "name": "oauth-openshift", "namespace": "openshift-authentication" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-server osinserver \\\n--config=/var/config/system/configmaps/v4-0-config-system-cliconfig/v4-0-config-system-cliconfig \\\n--v=2 \\\n--audit-log-format=json \\\n--audit-log-maxbackup=10 \\\n--audit-log-maxsize=100 \\\n--audit-log-path=/var/log/oauth-server/audit.log \\\n--audit-policy-file=/var/run/configmaps/audit/audit.yaml\n" ], "command": [ "/bin/bash", "-ec" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:64f4369776af8e714a30e1badaa3fb68748e3ddec5854b00269073a5a81986f6", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "oauth-openshift", "ports": [ { "containerPort": 6443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/log/oauth-server", "name": "audit-dir" }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-session", "name": "v4-0-config-system-session", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-cliconfig", "name": "v4-0-config-system-cliconfig", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-serving-cert", "name": "v4-0-config-system-serving-cert", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-service-ca", "name": "v4-0-config-system-service-ca", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-router-certs", "name": "v4-0-config-system-router-certs", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-ocp-branding-template", "name": "v4-0-config-system-ocp-branding-template", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-login", "name": "v4-0-config-user-template-login", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-provider-selection", "name": "v4-0-config-user-template-provider-selection", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-error", "name": "v4-0-config-user-template-error", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle", "name": "v4-0-config-system-trusted-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-openshift", "serviceAccountName": "oauth-openshift", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit" }, "name": "audit-policies" }, { "hostPath": { "path": "/var/log/oauth-server", "type": "" }, "name": "audit-dir" }, { "name": "v4-0-config-system-session", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-session" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-cliconfig" }, "name": "v4-0-config-system-cliconfig" }, { "name": "v4-0-config-system-serving-cert", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-service-ca" }, "name": "v4-0-config-system-service-ca" }, { "name": "v4-0-config-system-router-certs", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-router-certs" } }, { "name": "v4-0-config-system-ocp-branding-template", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-ocp-branding-template" } }, { "name": "v4-0-config-user-template-login", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-login" } }, { "name": "v4-0-config-user-template-provider-selection", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-provider-selection" } }, { "name": "v4-0-config-user-template-error", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-error" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-trusted-ca-bundle", "optional": true }, "name": "v4-0-config-system-trusted-ca-bundle" } ] } } }, "status": { "availableReplicas": 3, "fullyLabeledReplicas": 3, "observedGeneration": 2, "readyReplicas": 3, "replicas": 3 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/default-logs-container": "manager", "operator.openshift.io/spec-hash": "98cd91160fd621c321ee8b5c2768f879ae7486c1b8af9e60ccd5be10fefbbe0c" }, "creationTimestamp": "2026-04-28T12:23:32Z", "generation": 1, "labels": { "control-plane": "catalogd-controller-manager", "pod-template-hash": "597bffc7d" }, "name": "catalogd-controller-manager-597bffc7d", "namespace": "openshift-catalogd", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "catalogd-controller-manager", "uid": "7676b0a6-621a-4af0-aae4-c5115f4a91b1" } ], "resourceVersion": "44362", "uid": "7890815f-76eb-41e7-a7b6-d1e0e3fb3ae8" }, "spec": { "minReadySeconds": 5, "replicas": 1, "selector": { "matchLabels": { "control-plane": "catalogd-controller-manager", "pod-template-hash": "597bffc7d" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager", "openshift.io/required-scc": "privileged", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "control-plane": "catalogd-controller-manager", "pod-template-hash": "597bffc7d" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/arch", "operator": "In", "values": [ "amd64", "arm64", "ppc64le", "s390x" ] }, { "key": "kubernetes.io/os", "operator": "In", "values": [ "linux" ] } ] } ] } } }, "containers": [ { "args": [ "--leader-elect", "--metrics-bind-address=:7443", "--external-address=catalogd-service.openshift-catalogd.svc", "--tls-cert=/var/certs/tls.crt", "--tls-key=/var/certs/tls.key", "--v=4", "--global-pull-secret=openshift-config/pull-secret" ], "command": [ "./catalogd" ], "env": [ { "name": "SSL_CERT_DIR", "value": "/var/ca-certs" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:71f7b45e7da7f308b6459cfaf75907bf8941fc3d862f2fcfc7ad5f7b88b32a67", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/cache/", "name": "cache" }, { "mountPath": "/tmp", "name": "tmp" }, { "mountPath": "/var/certs", "name": "catalogserver-certs" }, { "mountPath": "/var/ca-certs", "name": "ca-certs", "readOnly": true }, { "mountPath": "/etc/containers", "name": "etc-containers", "readOnly": true }, { "mountPath": "/etc/docker", "name": "etc-docker", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seLinuxOptions": { "type": "spc_t" }, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "catalogd-controller-manager", "serviceAccountName": "catalogd-controller-manager", "terminationGracePeriodSeconds": 10, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "emptyDir": {}, "name": "cache" }, { "emptyDir": {}, "name": "tmp" }, { "name": "catalogserver-certs", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "optional": false, "secretName": "catalogserver-cert" } }, { "name": "ca-certs", "projected": { "defaultMode": 420, "sources": [ { "configMap": { "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "catalogd-trusted-ca-bundle", "optional": false } }, { "configMap": { "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "openshift-service-ca.crt", "optional": false } } ] } }, { "hostPath": { "path": "/etc/containers", "type": "Directory" }, "name": "etc-containers" }, { "hostPath": { "path": "/etc/docker", "type": "Directory" }, "name": "etc-docker" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "CloudControllerManager", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:20:18Z", "generation": 2, "labels": { "k8s-app": "cloud-manager-operator", "pod-template-hash": "5487576c66" }, "name": "cluster-cloud-controller-manager-operator-5487576c66", "namespace": "openshift-cloud-controller-manager-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-cloud-controller-manager-operator", "uid": "3597cba6-7498-4ca8-9c93-1c384395ac15" } ], "resourceVersion": "3822", "uid": "f4a07ddc-4a72-4b34-85c8-889fe3e6d234" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "k8s-app": "cloud-manager-operator", "pod-template-hash": "5487576c66" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "cluster-cloud-controller-manager", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "cloud-manager-operator", "pod-template-hash": "5487576c66" } }, "spec": { "containers": [ { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -o allexport\nif [[ -f /etc/kubernetes/apiserver-url.env ]]; then\n source /etc/kubernetes/apiserver-url.env\nelse\n URL_ONLY_KUBECONFIG=/etc/kubernetes/kubeconfig\nfi\nexec /cluster-controller-manager-operator \\\n--leader-elect=true \\\n--leader-elect-lease-duration=137s \\\n--leader-elect-renew-deadline=107s \\\n--leader-elect-retry-period=26s \\\n--leader-elect-resource-namespace=openshift-cloud-controller-manager-operator \\\n\"--images-json=/etc/cloud-controller-manager-config/images.json\" \\\n--metrics-bind-address=127.0.0.1:9257 \\\n--health-addr=127.0.0.1:9259\n" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.20.10" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0d4456a19a1d7a7406588609decd6273f15882468041d868f12773bb1a3a3194", "imagePullPolicy": "IfNotPresent", "name": "cluster-cloud-controller-manager", "ports": [ { "containerPort": 9257, "name": "metrics", "protocol": "TCP" }, { "containerPort": 9259, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/cloud-controller-manager-config/", "name": "images" }, { "mountPath": "/etc/kubernetes", "name": "host-etc-kube", "readOnly": true } ] }, { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -o allexport\nif [[ -f /etc/kubernetes/apiserver-url.env ]]; then\n source /etc/kubernetes/apiserver-url.env\nelse\n URL_ONLY_KUBECONFIG=/etc/kubernetes/kubeconfig\nfi\nexec /config-sync-controllers \\\n--leader-elect=true \\\n--leader-elect-lease-duration=137s \\\n--leader-elect-renew-deadline=107s \\\n--leader-elect-retry-period=26s \\\n--leader-elect-resource-namespace=openshift-cloud-controller-manager-operator \\\n--health-addr=127.0.0.1:9260\n" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.20.10" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0d4456a19a1d7a7406588609decd6273f15882468041d868f12773bb1a3a3194", "imagePullPolicy": "IfNotPresent", "name": "config-sync-controllers", "ports": [ { "containerPort": 9260, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "25Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kubernetes", "name": "host-etc-kube", "readOnly": true } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9258", "--upstream=http://127.0.0.1:9257/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9258, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "auth-proxy-config" }, { "mountPath": "/etc/tls/private", "name": "cloud-controller-manager-operator-tls" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cluster-cloud-controller-manager", "serviceAccountName": "cluster-cloud-controller-manager", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node.cloudprovider.kubernetes.io/uninitialized", "value": "true" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoSchedule", "key": "node.cloudprovider.kubernetes.io/uninitialized", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/not-ready", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "cloud-controller-manager-images" }, "name": "images" }, { "hostPath": { "path": "/etc/kubernetes", "type": "Directory" }, "name": "host-etc-kube" }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "auth-proxy-config" }, { "name": "cloud-controller-manager-operator-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "cloud-controller-manager-operator-tls" } } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "CloudControllerManager", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "2", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:21:26Z", "generation": 1, "labels": { "k8s-app": "cloud-manager-operator", "pod-template-hash": "69bd8fdf75" }, "name": "cluster-cloud-controller-manager-operator-69bd8fdf75", "namespace": "openshift-cloud-controller-manager-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-cloud-controller-manager-operator", "uid": "3597cba6-7498-4ca8-9c93-1c384395ac15" } ], "resourceVersion": "11268", "uid": "bdb36229-76df-4bdc-b39a-f640d1d12d51" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "k8s-app": "cloud-manager-operator", "pod-template-hash": "69bd8fdf75" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "cluster-cloud-controller-manager", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "cloud-manager-operator", "pod-template-hash": "69bd8fdf75" } }, "spec": { "containers": [ { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -o allexport\nif [[ -f /etc/kubernetes/apiserver-url.env ]]; then\n source /etc/kubernetes/apiserver-url.env\nelse\n URL_ONLY_KUBECONFIG=/etc/kubernetes/kubeconfig\nfi\nexec /cluster-controller-manager-operator \\\n--leader-elect=true \\\n--leader-elect-lease-duration=137s \\\n--leader-elect-renew-deadline=107s \\\n--leader-elect-retry-period=26s \\\n--leader-elect-resource-namespace=openshift-cloud-controller-manager-operator \\\n\"--images-json=/etc/cloud-controller-manager-config/images.json\" \\\n--metrics-bind-address=127.0.0.1:9257 \\\n--health-addr=127.0.0.1:9259\n" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.20.10" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0d4456a19a1d7a7406588609decd6273f15882468041d868f12773bb1a3a3194", "imagePullPolicy": "IfNotPresent", "name": "cluster-cloud-controller-manager", "ports": [ { "containerPort": 9257, "hostPort": 9257, "name": "metrics", "protocol": "TCP" }, { "containerPort": 9259, "hostPort": 9259, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/cloud-controller-manager-config/", "name": "images" }, { "mountPath": "/etc/kubernetes", "name": "host-etc-kube", "readOnly": true } ] }, { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -o allexport\nif [[ -f /etc/kubernetes/apiserver-url.env ]]; then\n source /etc/kubernetes/apiserver-url.env\nelse\n URL_ONLY_KUBECONFIG=/etc/kubernetes/kubeconfig\nfi\nexec /config-sync-controllers \\\n--leader-elect=true \\\n--leader-elect-lease-duration=137s \\\n--leader-elect-renew-deadline=107s \\\n--leader-elect-retry-period=26s \\\n--leader-elect-resource-namespace=openshift-cloud-controller-manager-operator \\\n--health-addr=127.0.0.1:9260\n" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.20.10" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0d4456a19a1d7a7406588609decd6273f15882468041d868f12773bb1a3a3194", "imagePullPolicy": "IfNotPresent", "name": "config-sync-controllers", "ports": [ { "containerPort": 9260, "hostPort": 9260, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "25Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kubernetes", "name": "host-etc-kube", "readOnly": true } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9258", "--upstream=http://127.0.0.1:9257/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9258, "hostPort": 9258, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "auth-proxy-config" }, { "mountPath": "/etc/tls/private", "name": "cloud-controller-manager-operator-tls" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cluster-cloud-controller-manager", "serviceAccountName": "cluster-cloud-controller-manager", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node.cloudprovider.kubernetes.io/uninitialized", "value": "true" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoSchedule", "key": "node.cloudprovider.kubernetes.io/uninitialized", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/not-ready", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "cloud-controller-manager-images" }, "name": "images" }, { "hostPath": { "path": "/etc/kubernetes", "type": "Directory" }, "name": "host-etc-kube" }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "auth-proxy-config" }, { "name": "cloud-controller-manager-operator-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "cloud-controller-manager-operator-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2", "operator.openshift.io/generation": "2", "operator.openshift.io/spec-hash": "7cd3c89ae88db02a14872f691f9dee65081897da15d3a62905f5a95a7650b4e5" }, "creationTimestamp": "2026-04-28T12:57:58Z", "generation": 1, "labels": { "infrastructure.openshift.io/cloud-controller-manager": "AWS", "k8s-app": "aws-cloud-controller-manager", "pod-template-hash": "74f68b9cd8" }, "name": "aws-cloud-controller-manager-74f68b9cd8", "namespace": "openshift-cloud-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "aws-cloud-controller-manager", "uid": "a757a8c2-3f2c-40ad-8511-38db480b5c43" } ], "resourceVersion": "41356", "uid": "4dce38e9-41bc-4cbd-94be-f639c4a0dc3a" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "infrastructure.openshift.io/cloud-controller-manager": "AWS", "k8s-app": "aws-cloud-controller-manager", "pod-template-hash": "74f68b9cd8" } }, "template": { "metadata": { "annotations": { "operator.openshift.io/config-hash": "b972835da2013976bb716bdfe5654d363a136128621ea3987e6fec70759cce0a", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "infrastructure.openshift.io/cloud-controller-manager": "AWS", "k8s-app": "aws-cloud-controller-manager", "pod-template-hash": "74f68b9cd8" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "infrastructure.openshift.io/cloud-controller-manager": "AWS", "k8s-app": "aws-cloud-controller-manager" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -o allexport\nif [[ -f /etc/kubernetes/apiserver-url.env ]]; then\n source /etc/kubernetes/apiserver-url.env\nfi\nexec /bin/aws-cloud-controller-manager \\\n--cloud-config=$(CLOUD_CONFIG) \\\n--cloud-provider=aws \\\n--use-service-account-credentials=true \\\n--configure-cloud-routes=false \\\n--leader-elect=true \\\n--leader-elect-lease-duration=137s \\\n--leader-elect-renew-deadline=107s \\\n--leader-elect-retry-period=26s \\\n--leader-elect-resource-namespace=openshift-cloud-controller-manager \\\n--secure-port=0 \\\n-v=2\n" ], "env": [ { "name": "CLOUD_CONFIG", "value": "/etc/kubernetes-cloud-config/cloud.conf" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f84b098f3912dca5fa2bfd988c9b55870b33cd5a21dade229fb3fc44fa0c94bd", "imagePullPolicy": "IfNotPresent", "name": "cloud-controller-manager", "ports": [ { "containerPort": 10258, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "200m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kubernetes", "name": "host-etc-kube", "readOnly": true }, { "mountPath": "/etc/kubernetes-cloud-config", "name": "config-accm", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cloud-controller-manager", "serviceAccountName": "cloud-controller-manager", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoSchedule", "key": "node.cloudprovider.kubernetes.io/uninitialized", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/not-ready", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "cloud.conf", "path": "cloud.conf" } ], "name": "cloud-conf" }, "name": "config-accm" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "ccm-trusted-ca" }, "name": "trusted-ca" }, { "hostPath": { "path": "/etc/kubernetes", "type": "Directory" }, "name": "host-etc-kube" } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/generation": "1", "operator.openshift.io/spec-hash": "60361e348a8208d250f13aa16af721930e735d52126230d469403268b2049325" }, "creationTimestamp": "2026-04-28T12:21:06Z", "generation": 2, "labels": { "infrastructure.openshift.io/cloud-controller-manager": "AWS", "k8s-app": "aws-cloud-controller-manager", "pod-template-hash": "f5bcc8b55" }, "name": "aws-cloud-controller-manager-f5bcc8b55", "namespace": "openshift-cloud-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "aws-cloud-controller-manager", "uid": "a757a8c2-3f2c-40ad-8511-38db480b5c43" } ], "resourceVersion": "41018", "uid": "3a9cd820-13da-43fc-857c-6d8a69ff1c4f" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "infrastructure.openshift.io/cloud-controller-manager": "AWS", "k8s-app": "aws-cloud-controller-manager", "pod-template-hash": "f5bcc8b55" } }, "template": { "metadata": { "annotations": { "operator.openshift.io/config-hash": "c125d8fd44d93e466523cf235ca862bb9b2a57db4c66f3e4eb50f8379feca59b", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "infrastructure.openshift.io/cloud-controller-manager": "AWS", "k8s-app": "aws-cloud-controller-manager", "pod-template-hash": "f5bcc8b55" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "infrastructure.openshift.io/cloud-controller-manager": "AWS", "k8s-app": "aws-cloud-controller-manager" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -o allexport\nif [[ -f /etc/kubernetes/apiserver-url.env ]]; then\n source /etc/kubernetes/apiserver-url.env\nfi\nexec /bin/aws-cloud-controller-manager \\\n--cloud-config=$(CLOUD_CONFIG) \\\n--cloud-provider=aws \\\n--use-service-account-credentials=true \\\n--configure-cloud-routes=false \\\n--leader-elect=true \\\n--leader-elect-lease-duration=137s \\\n--leader-elect-renew-deadline=107s \\\n--leader-elect-retry-period=26s \\\n--leader-elect-resource-namespace=openshift-cloud-controller-manager \\\n--secure-port=0 \\\n-v=2\n" ], "env": [ { "name": "CLOUD_CONFIG", "value": "/etc/kubernetes-cloud-config/cloud.conf" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f84b098f3912dca5fa2bfd988c9b55870b33cd5a21dade229fb3fc44fa0c94bd", "imagePullPolicy": "IfNotPresent", "name": "cloud-controller-manager", "ports": [ { "containerPort": 10258, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "200m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kubernetes", "name": "host-etc-kube", "readOnly": true }, { "mountPath": "/etc/kubernetes-cloud-config", "name": "config-accm", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cloud-controller-manager", "serviceAccountName": "cloud-controller-manager", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoSchedule", "key": "node.cloudprovider.kubernetes.io/uninitialized", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/not-ready", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "cloud.conf", "path": "cloud.conf" } ], "name": "cloud-conf" }, "name": "config-accm" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "ccm-trusted-ca" }, "name": "trusted-ca" }, { "hostPath": { "path": "/etc/kubernetes", "type": "Directory" }, "name": "host-etc-kube" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "config.openshift.io/inject-proxy": "cloud-credential-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T12:20:16Z", "generation": 1, "labels": { "app": "cloud-credential-operator", "control-plane": "controller-manager", "controller-tools.k8s.io": "1.0", "pod-template-hash": "7bdcd6459d" }, "name": "cloud-credential-operator-7bdcd6459d", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cloud-credential-operator", "uid": "dcb501f4-1229-4456-a3ec-da3a27c16f19" } ], "resourceVersion": "37675", "uid": "f0dd9754-d100-4abe-aece-c235597fb6e1" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "controller-manager", "controller-tools.k8s.io": "1.0", "pod-template-hash": "7bdcd6459d" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "cloud-credential-operator", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "cloud-credential-operator", "control-plane": "controller-manager", "controller-tools.k8s.io": "1.0", "pod-template-hash": "7bdcd6459d" } }, "spec": { "containers": [ { "args": [ "--secure-listen-address=0.0.0.0:8443", "--upstream=http://127.0.0.1:2112/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "cloud-credential-operator-serving-cert" } ] }, { "command": [ "/usr/bin/cloud-credential-operator", "operator" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.20.10" }, { "name": "AZURE_POD_IDENTITY_WEBHOOK_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e298b4968e0fa5fdbc9ee3a81762832181b025d81cbd9eb1153f543a864a9ee7" }, { "name": "AWS_POD_IDENTITY_WEBHOOK_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:66bada5f7f0b8590eb025fc6ace34e6ecf79c85aa37031fb74baef5561066084" }, { "name": "GCP_POD_IDENTITY_WEBHOOK_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a4a8646901725ad0e0867bf9ea81a309736a8660a9c31fc4cddca1eab244f78c" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b590e157edf56a5d2c3038bc1dacd3f5a7876c428516a77149767bac3c562771", "imagePullPolicy": "IfNotPresent", "name": "cloud-credential-operator", "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "cco-trusted-ca" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cloud-credential-operator", "serviceAccountName": "cloud-credential-operator", "terminationGracePeriodSeconds": 10, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "cco-trusted-ca", "optional": true }, "name": "cco-trusted-ca" }, { "name": "cloud-credential-operator-serving-cert", "secret": { "defaultMode": 420, "secretName": "cloud-credential-operator-serving-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "4c159c353b6fb4cb8438e4eddde0ece2191643cc5341e38945b68869036a4605" }, "creationTimestamp": "2026-04-28T12:33:27Z", "generation": 1, "labels": { "app": "pod-identity-webhook", "pod-template-hash": "85c6ff64b6" }, "name": "pod-identity-webhook-85c6ff64b6", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pod-identity-webhook", "uid": "62797594-1984-453f-9514-872e0a048e51" } ], "resourceVersion": "21682", "uid": "423bad4d-4b8f-40d4-a44b-0642dfe880fd" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "pod-identity-webhook", "pod-template-hash": "85c6ff64b6" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "pod-identity-webhook", "pod-template-hash": "85c6ff64b6" } }, "spec": { "containers": [ { "command": [ "/usr/bin/aws-pod-identity-webhook", "--aws-default-region=us-east-1", "--in-cluster=false", "--tls-cert=/var/run/app/certs/tls.crt", "--tls-key=/var/run/app/certs/tls.key", "--namespace=openshift-cloud-credential-operator", "--port=9443", "--service-name=pod-identity-webhook", "--annotation-prefix=eks.amazonaws.com", "--token-audience=sts.amazonaws.com", "--logtostderr" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:66bada5f7f0b8590eb025fc6ace34e6ecf79c85aa37031fb74baef5561066084", "imagePullPolicy": "IfNotPresent", "name": "pod-identity-webhook", "resources": { "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/app/certs", "name": "webhook-certs" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pod-identity-webhook", "serviceAccountName": "pod-identity-webhook", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "webhook-certs", "secret": { "defaultMode": 420, "secretName": "pod-identity-webhook" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "kubernetes.io/description": "This deployment launches the cloud network config controller which manages cloud-level network configurations\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.20.10" }, "creationTimestamp": "2026-04-28T12:21:27Z", "generation": 1, "labels": { "app": "cloud-network-config-controller", "component": "network", "openshift.io/component": "network", "pod-template-hash": "85d68fcdf5", "type": "infra" }, "name": "cloud-network-config-controller-85d68fcdf5", "namespace": "openshift-cloud-network-config-controller", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cloud-network-config-controller", "uid": "9535483d-7659-4424-af00-448bda0cb544" } ], "resourceVersion": "37694", "uid": "cbf5170d-1147-4132-ba0b-977863d33830" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "cloud-network-config-controller", "pod-template-hash": "85d68fcdf5" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "cloud-network-config-controller", "component": "network", "openshift.io/component": "network", "pod-template-hash": "85d68fcdf5", "type": "infra" }, "name": "cloud-network-config-controller" }, "spec": { "containers": [ { "args": [ "-platform-type", "AWS", "-platform-region=us-east-1", "-platform-api-url=", "-platform-aws-ca-override=", "-platform-azure-environment=", "-secret-name", "cloud-credentials" ], "command": [ "/usr/bin/cloud-network-config-controller" ], "env": [ { "name": "CONTROLLER_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "CONTROLLER_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "RELEASE_VERSION", "value": "4.20.10" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ad51f8246a2d5349b99ecd08ca56614f834a063d2e75bee2221225302a5cfe56", "imagePullPolicy": "IfNotPresent", "name": "controller", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/secret/cloudprovider", "name": "cloud-provider-secret", "readOnly": true }, { "mountPath": "/kube-cloud-config", "name": "kube-cloud-config", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cloud-network-config-controller", "serviceAccountName": "cloud-network-config-controller", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "cloud-provider-secret", "secret": { "defaultMode": 420, "secretName": "cloud-credentials" } }, { "configMap": { "defaultMode": 420, "name": "kube-cloud-config" }, "name": "kube-cloud-config" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca" }, "name": "trusted-ca" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "config.openshift.io/inject-proxy": "csi-driver", "config.openshift.io/inject-proxy-cabundle": "csi-driver", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "5", "operator.openshift.io/dep-5d02b1dbbfd3b1124537c2229e410cd2adfa2": "Y9uTwA==", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "4w1CIQ==", "operator.openshift.io/dep-b5233af8ffad2a3df77758ca90fc5d97e8259": "S8_q0g==", "operator.openshift.io/spec-hash": "c64f8239fc21ebf80d5d36d6da7b236d992199bbf74da67fc26180d94ba41d09" }, "creationTimestamp": "2026-04-28T12:57:59Z", "generation": 3, "labels": { "app": "aws-ebs-csi-driver-controller", "openshift.storage.network-policy.all-egress": "allow", "openshift.storage.network-policy.api-server": "allow", "openshift.storage.network-policy.dns": "allow", "openshift.storage.network-policy.metrics-range": "allow", "pod-template-hash": "6958b4fb47" }, "name": "aws-ebs-csi-driver-controller-6958b4fb47", "namespace": "openshift-cluster-csi-drivers", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "aws-ebs-csi-driver-controller", "uid": "0bd51293-9996-4400-a1d4-3e1e311d65c1" } ], "resourceVersion": "42234", "uid": "e5fb4283-f013-4a9a-96f2-1cbdeab24f10" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "6958b4fb47" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict-local-volumes": "aws-auth,aws-keys,bound-sa-token,socket-dir", "openshift.io/required-scc": "restricted-v2", "operator.openshift.io/dep-5d02b1dbbfd3b1124537c2229e410cd2adfa2": "Y9uTwA==", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "4w1CIQ==", "operator.openshift.io/dep-b5233af8ffad2a3df77758ca90fc5d97e8259": "S8_q0g==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "aws-ebs-csi-driver-controller", "openshift.storage.network-policy.all-egress": "allow", "openshift.storage.network-policy.api-server": "allow", "openshift.storage.network-policy.dns": "allow", "openshift.storage.network-policy.metrics-range": "allow", "pod-template-hash": "6958b4fb47" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "controller", "--endpoint=$(CSI_ENDPOINT)", "--k8s-tag-cluster-id=clusterpool420-54bqn-mkzlr", "--logtostderr", "--http-endpoint=localhost:8201", "--v=2", "--batching=true" ], "env": [ { "name": "CSI_ENDPOINT", "value": "unix:///var/lib/csi/sockets/pluginproxy/csi.sock" }, { "name": "AWS_SDK_LOAD_CONFIG", "value": "1" }, { "name": "AWS_CONFIG_FILE", "value": "/var/run/aws/auth/credentials" }, { "name": "AWS_REGION", "value": "us-east-1" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:913fe1e35c1e4b3c9abc0ae61adde94e85ea9e25666068686fe0b321787246e7", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "csi-driver", "ports": [ { "containerPort": 10301, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true }, { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "non-standard-root-system-trust-ca-bundle", "readOnly": true } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9201", "--upstream=http://127.0.0.1:8201/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-8201", "ports": [ { "containerPort": 9201, "name": "driver-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8202", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--default-fstype=ext4", "--feature-gates=Topology=true", "--extra-create-metadata=true", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:810a335ecb8e3d9779b8cdc355a764e50126fa69b6edfd2ce21cb692136fa97f", "imagePullPolicy": "IfNotPresent", "name": "csi-provisioner", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9202", "--upstream=http://127.0.0.1:8202/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "provisioner-kube-rbac-proxy", "ports": [ { "containerPort": 9202, "name": "provisioner-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8203", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:dc3467f43afb7207907d449c9f77cea3fc6f445497ffa875eec7d2389b28af76", "imagePullPolicy": "IfNotPresent", "name": "csi-attacher", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9203", "--upstream=http://127.0.0.1:8203/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "attacher-kube-rbac-proxy", "ports": [ { "containerPort": 9203, "name": "attacher-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8204", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--workers=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7d73b42253343784f1d2716cebb4071a2a081dd64a8ca3be74ded04606d9c36c", "imagePullPolicy": "IfNotPresent", "name": "csi-resizer", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9204", "--upstream=http://127.0.0.1:8204/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "resizer-kube-rbac-proxy", "ports": [ { "containerPort": 9204, "name": "resizer-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--metrics-address=localhost:8205", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--extra-create-metadata", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:98cbc5588e6e7d708ae1527f11dfd9f6c801ef27878f06d82d2d9b1b2cad0578", "imagePullPolicy": "IfNotPresent", "name": "csi-snapshotter", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9205", "--upstream=http://127.0.0.1:8205/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "snapshotter-kube-rbac-proxy", "ports": [ { "containerPort": 9205, "name": "snapshotter-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/csi/csi.sock", "--health-port=10301", "--v=2", "--probe-timeout=3s" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4900006e6a4308a5e1124ab220bebb2844742f2a67d379ee4b628a82650291de", "imagePullPolicy": "IfNotPresent", "name": "csi-liveness-probe", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/csi", "name": "socket-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "# Define file path variables\nCREDENTIALS_FILE=/var/run/aws/keys/credentials\nAUTH_CREDENTIALS_FILE=/var/run/aws/auth/credentials\nAWS_ACCESS_KEY_ID_FILE=/var/run/aws/keys/aws_access_key_id\nAWS_SECRET_ACCESS_KEY_FILE=/var/run/aws/keys/aws_secret_access_key\n\n# If credentials key exists in ebs-cloud-credentials secret, then use it as the auth file\nif [ -e \"$CREDENTIALS_FILE\" ]; then\n cp \"$CREDENTIALS_FILE\" \"$AUTH_CREDENTIALS_FILE\"\n echo \"Kubernetes Secret already contains credentials file, copied to the right place: $AUTH_CREDENTIALS_FILE\"\n exit 0\nfi\n\n# Otherwise, make sure the access keys are mounted in the pod...\nif [ ! -e \"$AWS_ACCESS_KEY_ID_FILE\" ] || [ ! -e \"$AWS_SECRET_ACCESS_KEY_FILE\" ]; then\n echo \"AWS keys not found\"\n exit 1\nfi\n\n# And create an auth file based on those keys\ncat \u003c\u003c-EOF \u003e \"$AUTH_CREDENTIALS_FILE\"\n[default]\naws_access_key_id=$(cat \"$AWS_ACCESS_KEY_ID_FILE\")\naws_secret_access_key=$(cat \"$AWS_SECRET_ACCESS_KEY_FILE\")\nEOF\necho \"Kubernetes Secret does not have credentials file, created a fresh one at $AUTH_CREDENTIALS_FILE\"\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:16816f988db21482c309e77207364b7c282a0fef96e6d7da129928aa477dcfa7", "imagePullPolicy": "IfNotPresent", "name": "init-aws-credentials-file", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "aws-ebs-csi-driver-controller-sa", "serviceAccountName": "aws-ebs-csi-driver-controller-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "emptyDir": {}, "name": "socket-dir" }, { "name": "metrics-serving-cert", "secret": { "defaultMode": 420, "secretName": "aws-ebs-csi-driver-controller-metrics-serving-cert" } }, { "name": "aws-keys", "secret": { "defaultMode": 420, "secretName": "ebs-cloud-credentials" } }, { "emptyDir": {}, "name": "aws-auth" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "aws-ebs-csi-driver-trusted-ca-bundle" }, "name": "non-standard-root-system-trust-ca-bundle" } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 3, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "config.openshift.io/inject-proxy": "csi-driver", "config.openshift.io/inject-proxy-cabundle": "csi-driver", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "4", "operator.openshift.io/dep-5d02b1dbbfd3b1124537c2229e410cd2adfa2": "b3aTLg==", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "4w1CIQ==", "operator.openshift.io/dep-b5233af8ffad2a3df77758ca90fc5d97e8259": "S8_q0g==", "operator.openshift.io/spec-hash": "e6ced5281a59de97a33906bbd8e0557c01ed91f50b2c2fe50e3a9ea2740ac3f6" }, "creationTimestamp": "2026-04-28T12:24:30Z", "generation": 5, "labels": { "app": "aws-ebs-csi-driver-controller", "openshift.storage.network-policy.all-egress": "allow", "openshift.storage.network-policy.api-server": "allow", "openshift.storage.network-policy.dns": "allow", "openshift.storage.network-policy.metrics-range": "allow", "pod-template-hash": "6bb7f6bc5" }, "name": "aws-ebs-csi-driver-controller-6bb7f6bc5", "namespace": "openshift-cluster-csi-drivers", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "aws-ebs-csi-driver-controller", "uid": "0bd51293-9996-4400-a1d4-3e1e311d65c1" } ], "resourceVersion": "41557", "uid": "3df13710-5cfb-4037-b3c2-c47c01a1812d" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "6bb7f6bc5" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict-local-volumes": "aws-auth,aws-keys,bound-sa-token,socket-dir", "openshift.io/required-scc": "restricted-v2", "operator.openshift.io/dep-5d02b1dbbfd3b1124537c2229e410cd2adfa2": "b3aTLg==", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "4w1CIQ==", "operator.openshift.io/dep-b5233af8ffad2a3df77758ca90fc5d97e8259": "S8_q0g==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "aws-ebs-csi-driver-controller", "openshift.storage.network-policy.all-egress": "allow", "openshift.storage.network-policy.api-server": "allow", "openshift.storage.network-policy.dns": "allow", "openshift.storage.network-policy.metrics-range": "allow", "pod-template-hash": "6bb7f6bc5" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "controller", "--endpoint=$(CSI_ENDPOINT)", "--k8s-tag-cluster-id=clusterpool420-54bqn-mkzlr", "--logtostderr", "--http-endpoint=localhost:8201", "--v=2", "--batching=true" ], "env": [ { "name": "CSI_ENDPOINT", "value": "unix:///var/lib/csi/sockets/pluginproxy/csi.sock" }, { "name": "AWS_SDK_LOAD_CONFIG", "value": "1" }, { "name": "AWS_CONFIG_FILE", "value": "/var/run/aws/auth/credentials" }, { "name": "AWS_REGION", "value": "us-east-1" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:913fe1e35c1e4b3c9abc0ae61adde94e85ea9e25666068686fe0b321787246e7", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "csi-driver", "ports": [ { "containerPort": 10301, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true }, { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "non-standard-root-system-trust-ca-bundle", "readOnly": true } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9201", "--upstream=http://127.0.0.1:8201/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-8201", "ports": [ { "containerPort": 9201, "name": "driver-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8202", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--default-fstype=ext4", "--feature-gates=Topology=true", "--extra-create-metadata=true", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:810a335ecb8e3d9779b8cdc355a764e50126fa69b6edfd2ce21cb692136fa97f", "imagePullPolicy": "IfNotPresent", "name": "csi-provisioner", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9202", "--upstream=http://127.0.0.1:8202/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "provisioner-kube-rbac-proxy", "ports": [ { "containerPort": 9202, "name": "provisioner-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8203", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:dc3467f43afb7207907d449c9f77cea3fc6f445497ffa875eec7d2389b28af76", "imagePullPolicy": "IfNotPresent", "name": "csi-attacher", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9203", "--upstream=http://127.0.0.1:8203/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "attacher-kube-rbac-proxy", "ports": [ { "containerPort": 9203, "name": "attacher-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8204", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--workers=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7d73b42253343784f1d2716cebb4071a2a081dd64a8ca3be74ded04606d9c36c", "imagePullPolicy": "IfNotPresent", "name": "csi-resizer", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9204", "--upstream=http://127.0.0.1:8204/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "resizer-kube-rbac-proxy", "ports": [ { "containerPort": 9204, "name": "resizer-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--metrics-address=localhost:8205", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--extra-create-metadata", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:98cbc5588e6e7d708ae1527f11dfd9f6c801ef27878f06d82d2d9b1b2cad0578", "imagePullPolicy": "IfNotPresent", "name": "csi-snapshotter", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9205", "--upstream=http://127.0.0.1:8205/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "snapshotter-kube-rbac-proxy", "ports": [ { "containerPort": 9205, "name": "snapshotter-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/csi/csi.sock", "--health-port=10301", "--v=2", "--probe-timeout=3s" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4900006e6a4308a5e1124ab220bebb2844742f2a67d379ee4b628a82650291de", "imagePullPolicy": "IfNotPresent", "name": "csi-liveness-probe", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/csi", "name": "socket-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "# Define file path variables\nCREDENTIALS_FILE=/var/run/aws/keys/credentials\nAUTH_CREDENTIALS_FILE=/var/run/aws/auth/credentials\nAWS_ACCESS_KEY_ID_FILE=/var/run/aws/keys/aws_access_key_id\nAWS_SECRET_ACCESS_KEY_FILE=/var/run/aws/keys/aws_secret_access_key\n\n# If credentials key exists in ebs-cloud-credentials secret, then use it as the auth file\nif [ -e \"$CREDENTIALS_FILE\" ]; then\n cp \"$CREDENTIALS_FILE\" \"$AUTH_CREDENTIALS_FILE\"\n echo \"Kubernetes Secret already contains credentials file, copied to the right place: $AUTH_CREDENTIALS_FILE\"\n exit 0\nfi\n\n# Otherwise, make sure the access keys are mounted in the pod...\nif [ ! -e \"$AWS_ACCESS_KEY_ID_FILE\" ] || [ ! -e \"$AWS_SECRET_ACCESS_KEY_FILE\" ]; then\n echo \"AWS keys not found\"\n exit 1\nfi\n\n# And create an auth file based on those keys\ncat \u003c\u003c-EOF \u003e \"$AUTH_CREDENTIALS_FILE\"\n[default]\naws_access_key_id=$(cat \"$AWS_ACCESS_KEY_ID_FILE\")\naws_secret_access_key=$(cat \"$AWS_SECRET_ACCESS_KEY_FILE\")\nEOF\necho \"Kubernetes Secret does not have credentials file, created a fresh one at $AUTH_CREDENTIALS_FILE\"\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:16816f988db21482c309e77207364b7c282a0fef96e6d7da129928aa477dcfa7", "imagePullPolicy": "IfNotPresent", "name": "init-aws-credentials-file", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "aws-ebs-csi-driver-controller-sa", "serviceAccountName": "aws-ebs-csi-driver-controller-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "emptyDir": {}, "name": "socket-dir" }, { "name": "metrics-serving-cert", "secret": { "defaultMode": 420, "secretName": "aws-ebs-csi-driver-controller-metrics-serving-cert" } }, { "name": "aws-keys", "secret": { "defaultMode": 420, "secretName": "ebs-cloud-credentials" } }, { "emptyDir": {}, "name": "aws-auth" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "aws-ebs-csi-driver-trusted-ca-bundle" }, "name": "non-standard-root-system-trust-ca-bundle" } ] } } }, "status": { "observedGeneration": 5, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "config.openshift.io/inject-proxy": "csi-driver", "config.openshift.io/inject-proxy-cabundle": "csi-driver", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "4w1CIQ==", "operator.openshift.io/spec-hash": "d9ee5647bf0f6d267a3a3734dfe9f67a6e1f84bdedf2cd5f5326a2e7e3f2e027" }, "creationTimestamp": "2026-04-28T12:24:26Z", "generation": 3, "labels": { "app": "aws-ebs-csi-driver-controller", "openshift.storage.network-policy.all-egress": "allow", "openshift.storage.network-policy.api-server": "allow", "openshift.storage.network-policy.dns": "allow", "openshift.storage.network-policy.metrics-range": "allow", "pod-template-hash": "7b5bc76b79" }, "name": "aws-ebs-csi-driver-controller-7b5bc76b79", "namespace": "openshift-cluster-csi-drivers", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "aws-ebs-csi-driver-controller", "uid": "0bd51293-9996-4400-a1d4-3e1e311d65c1" } ], "resourceVersion": "11331", "uid": "a898e175-cd9a-41c3-8dc0-7104ff6a54c8" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "7b5bc76b79" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict-local-volumes": "aws-auth,aws-keys,bound-sa-token,socket-dir", "openshift.io/required-scc": "restricted-v2", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "4w1CIQ==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "aws-ebs-csi-driver-controller", "openshift.storage.network-policy.all-egress": "allow", "openshift.storage.network-policy.api-server": "allow", "openshift.storage.network-policy.dns": "allow", "openshift.storage.network-policy.metrics-range": "allow", "pod-template-hash": "7b5bc76b79" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "controller", "--endpoint=$(CSI_ENDPOINT)", "--k8s-tag-cluster-id=clusterpool420-54bqn-mkzlr", "--logtostderr", "--http-endpoint=localhost:8201", "--v=2", "--batching=true" ], "env": [ { "name": "CSI_ENDPOINT", "value": "unix:///var/lib/csi/sockets/pluginproxy/csi.sock" }, { "name": "AWS_SDK_LOAD_CONFIG", "value": "1" }, { "name": "AWS_CONFIG_FILE", "value": "/var/run/aws/auth/credentials" }, { "name": "AWS_REGION", "value": "us-east-1" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:913fe1e35c1e4b3c9abc0ae61adde94e85ea9e25666068686fe0b321787246e7", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "csi-driver", "ports": [ { "containerPort": 10301, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true }, { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9201", "--upstream=http://127.0.0.1:8201/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-8201", "ports": [ { "containerPort": 9201, "name": "driver-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8202", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--default-fstype=ext4", "--feature-gates=Topology=true", "--extra-create-metadata=true", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:810a335ecb8e3d9779b8cdc355a764e50126fa69b6edfd2ce21cb692136fa97f", "imagePullPolicy": "IfNotPresent", "name": "csi-provisioner", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9202", "--upstream=http://127.0.0.1:8202/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "provisioner-kube-rbac-proxy", "ports": [ { "containerPort": 9202, "name": "provisioner-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8203", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:dc3467f43afb7207907d449c9f77cea3fc6f445497ffa875eec7d2389b28af76", "imagePullPolicy": "IfNotPresent", "name": "csi-attacher", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9203", "--upstream=http://127.0.0.1:8203/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "attacher-kube-rbac-proxy", "ports": [ { "containerPort": 9203, "name": "attacher-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8204", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--workers=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7d73b42253343784f1d2716cebb4071a2a081dd64a8ca3be74ded04606d9c36c", "imagePullPolicy": "IfNotPresent", "name": "csi-resizer", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9204", "--upstream=http://127.0.0.1:8204/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "resizer-kube-rbac-proxy", "ports": [ { "containerPort": 9204, "name": "resizer-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--metrics-address=localhost:8205", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--extra-create-metadata", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:98cbc5588e6e7d708ae1527f11dfd9f6c801ef27878f06d82d2d9b1b2cad0578", "imagePullPolicy": "IfNotPresent", "name": "csi-snapshotter", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9205", "--upstream=http://127.0.0.1:8205/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "snapshotter-kube-rbac-proxy", "ports": [ { "containerPort": 9205, "name": "snapshotter-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/csi/csi.sock", "--health-port=10301", "--v=2", "--probe-timeout=3s" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4900006e6a4308a5e1124ab220bebb2844742f2a67d379ee4b628a82650291de", "imagePullPolicy": "IfNotPresent", "name": "csi-liveness-probe", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/csi", "name": "socket-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "# Define file path variables\nCREDENTIALS_FILE=/var/run/aws/keys/credentials\nAUTH_CREDENTIALS_FILE=/var/run/aws/auth/credentials\nAWS_ACCESS_KEY_ID_FILE=/var/run/aws/keys/aws_access_key_id\nAWS_SECRET_ACCESS_KEY_FILE=/var/run/aws/keys/aws_secret_access_key\n\n# If credentials key exists in ebs-cloud-credentials secret, then use it as the auth file\nif [ -e \"$CREDENTIALS_FILE\" ]; then\n cp \"$CREDENTIALS_FILE\" \"$AUTH_CREDENTIALS_FILE\"\n echo \"Kubernetes Secret already contains credentials file, copied to the right place: $AUTH_CREDENTIALS_FILE\"\n exit 0\nfi\n\n# Otherwise, make sure the access keys are mounted in the pod...\nif [ ! -e \"$AWS_ACCESS_KEY_ID_FILE\" ] || [ ! -e \"$AWS_SECRET_ACCESS_KEY_FILE\" ]; then\n echo \"AWS keys not found\"\n exit 1\nfi\n\n# And create an auth file based on those keys\ncat \u003c\u003c-EOF \u003e \"$AUTH_CREDENTIALS_FILE\"\n[default]\naws_access_key_id=$(cat \"$AWS_ACCESS_KEY_ID_FILE\")\naws_secret_access_key=$(cat \"$AWS_SECRET_ACCESS_KEY_FILE\")\nEOF\necho \"Kubernetes Secret does not have credentials file, created a fresh one at $AUTH_CREDENTIALS_FILE\"\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:16816f988db21482c309e77207364b7c282a0fef96e6d7da129928aa477dcfa7", "imagePullPolicy": "IfNotPresent", "name": "init-aws-credentials-file", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "aws-ebs-csi-driver-controller-sa", "serviceAccountName": "aws-ebs-csi-driver-controller-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "emptyDir": {}, "name": "socket-dir" }, { "name": "metrics-serving-cert", "secret": { "defaultMode": 420, "secretName": "aws-ebs-csi-driver-controller-metrics-serving-cert" } }, { "name": "aws-keys", "secret": { "defaultMode": 420, "secretName": "ebs-cloud-credentials" } }, { "emptyDir": {}, "name": "aws-auth" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "config.openshift.io/inject-proxy": "csi-driver", "config.openshift.io/inject-proxy-cabundle": "csi-driver", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "3", "operator.openshift.io/dep-5d02b1dbbfd3b1124537c2229e410cd2adfa2": "b3aTLg==", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "4w1CIQ==", "operator.openshift.io/spec-hash": "81d39d2036fcf079c080e1db6bcd3b38bfe347592586c0aeed792322b71fc5c4" }, "creationTimestamp": "2026-04-28T12:24:28Z", "generation": 3, "labels": { "app": "aws-ebs-csi-driver-controller", "openshift.storage.network-policy.all-egress": "allow", "openshift.storage.network-policy.api-server": "allow", "openshift.storage.network-policy.dns": "allow", "openshift.storage.network-policy.metrics-range": "allow", "pod-template-hash": "84cd76d767" }, "name": "aws-ebs-csi-driver-controller-84cd76d767", "namespace": "openshift-cluster-csi-drivers", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "aws-ebs-csi-driver-controller", "uid": "0bd51293-9996-4400-a1d4-3e1e311d65c1" } ], "resourceVersion": "12125", "uid": "386ba582-c3c6-44f3-93bd-ccf2d0009673" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "84cd76d767" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict-local-volumes": "aws-auth,aws-keys,bound-sa-token,socket-dir", "openshift.io/required-scc": "restricted-v2", "operator.openshift.io/dep-5d02b1dbbfd3b1124537c2229e410cd2adfa2": "b3aTLg==", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "4w1CIQ==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "aws-ebs-csi-driver-controller", "openshift.storage.network-policy.all-egress": "allow", "openshift.storage.network-policy.api-server": "allow", "openshift.storage.network-policy.dns": "allow", "openshift.storage.network-policy.metrics-range": "allow", "pod-template-hash": "84cd76d767" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "controller", "--endpoint=$(CSI_ENDPOINT)", "--k8s-tag-cluster-id=clusterpool420-54bqn-mkzlr", "--logtostderr", "--http-endpoint=localhost:8201", "--v=2", "--batching=true" ], "env": [ { "name": "CSI_ENDPOINT", "value": "unix:///var/lib/csi/sockets/pluginproxy/csi.sock" }, { "name": "AWS_SDK_LOAD_CONFIG", "value": "1" }, { "name": "AWS_CONFIG_FILE", "value": "/var/run/aws/auth/credentials" }, { "name": "AWS_REGION", "value": "us-east-1" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:913fe1e35c1e4b3c9abc0ae61adde94e85ea9e25666068686fe0b321787246e7", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "csi-driver", "ports": [ { "containerPort": 10301, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true }, { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "non-standard-root-system-trust-ca-bundle", "readOnly": true } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9201", "--upstream=http://127.0.0.1:8201/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-8201", "ports": [ { "containerPort": 9201, "name": "driver-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8202", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--default-fstype=ext4", "--feature-gates=Topology=true", "--extra-create-metadata=true", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:810a335ecb8e3d9779b8cdc355a764e50126fa69b6edfd2ce21cb692136fa97f", "imagePullPolicy": "IfNotPresent", "name": "csi-provisioner", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9202", "--upstream=http://127.0.0.1:8202/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "provisioner-kube-rbac-proxy", "ports": [ { "containerPort": 9202, "name": "provisioner-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8203", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:dc3467f43afb7207907d449c9f77cea3fc6f445497ffa875eec7d2389b28af76", "imagePullPolicy": "IfNotPresent", "name": "csi-attacher", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9203", "--upstream=http://127.0.0.1:8203/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "attacher-kube-rbac-proxy", "ports": [ { "containerPort": 9203, "name": "attacher-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8204", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--workers=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7d73b42253343784f1d2716cebb4071a2a081dd64a8ca3be74ded04606d9c36c", "imagePullPolicy": "IfNotPresent", "name": "csi-resizer", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9204", "--upstream=http://127.0.0.1:8204/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "resizer-kube-rbac-proxy", "ports": [ { "containerPort": 9204, "name": "resizer-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--metrics-address=localhost:8205", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--extra-create-metadata", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:98cbc5588e6e7d708ae1527f11dfd9f6c801ef27878f06d82d2d9b1b2cad0578", "imagePullPolicy": "IfNotPresent", "name": "csi-snapshotter", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9205", "--upstream=http://127.0.0.1:8205/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "snapshotter-kube-rbac-proxy", "ports": [ { "containerPort": 9205, "name": "snapshotter-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/csi/csi.sock", "--health-port=10301", "--v=2", "--probe-timeout=3s" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4900006e6a4308a5e1124ab220bebb2844742f2a67d379ee4b628a82650291de", "imagePullPolicy": "IfNotPresent", "name": "csi-liveness-probe", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/csi", "name": "socket-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "# Define file path variables\nCREDENTIALS_FILE=/var/run/aws/keys/credentials\nAUTH_CREDENTIALS_FILE=/var/run/aws/auth/credentials\nAWS_ACCESS_KEY_ID_FILE=/var/run/aws/keys/aws_access_key_id\nAWS_SECRET_ACCESS_KEY_FILE=/var/run/aws/keys/aws_secret_access_key\n\n# If credentials key exists in ebs-cloud-credentials secret, then use it as the auth file\nif [ -e \"$CREDENTIALS_FILE\" ]; then\n cp \"$CREDENTIALS_FILE\" \"$AUTH_CREDENTIALS_FILE\"\n echo \"Kubernetes Secret already contains credentials file, copied to the right place: $AUTH_CREDENTIALS_FILE\"\n exit 0\nfi\n\n# Otherwise, make sure the access keys are mounted in the pod...\nif [ ! -e \"$AWS_ACCESS_KEY_ID_FILE\" ] || [ ! -e \"$AWS_SECRET_ACCESS_KEY_FILE\" ]; then\n echo \"AWS keys not found\"\n exit 1\nfi\n\n# And create an auth file based on those keys\ncat \u003c\u003c-EOF \u003e \"$AUTH_CREDENTIALS_FILE\"\n[default]\naws_access_key_id=$(cat \"$AWS_ACCESS_KEY_ID_FILE\")\naws_secret_access_key=$(cat \"$AWS_SECRET_ACCESS_KEY_FILE\")\nEOF\necho \"Kubernetes Secret does not have credentials file, created a fresh one at $AUTH_CREDENTIALS_FILE\"\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:16816f988db21482c309e77207364b7c282a0fef96e6d7da129928aa477dcfa7", "imagePullPolicy": "IfNotPresent", "name": "init-aws-credentials-file", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "aws-ebs-csi-driver-controller-sa", "serviceAccountName": "aws-ebs-csi-driver-controller-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "emptyDir": {}, "name": "socket-dir" }, { "name": "metrics-serving-cert", "secret": { "defaultMode": 420, "secretName": "aws-ebs-csi-driver-controller-metrics-serving-cert" } }, { "name": "aws-keys", "secret": { "defaultMode": 420, "secretName": "ebs-cloud-credentials" } }, { "emptyDir": {}, "name": "aws-auth" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "aws-ebs-csi-driver-trusted-ca-bundle" }, "name": "non-standard-root-system-trust-ca-bundle" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "config.openshift.io/inject-proxy": "csi-driver", "config.openshift.io/inject-proxy-cabundle": "csi-driver", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "4w1CIQ==", "operator.openshift.io/spec-hash": "efc6e55d30acb87bed0795b79b3a4d4cb0f3af84df44b86b5c05eb09c0e7d7c6" }, "creationTimestamp": "2026-04-28T12:24:26Z", "generation": 3, "labels": { "app": "aws-ebs-csi-driver-controller", "openshift.storage.network-policy.all-egress": "allow", "openshift.storage.network-policy.api-server": "allow", "openshift.storage.network-policy.dns": "allow", "openshift.storage.network-policy.metrics-range": "allow", "pod-template-hash": "9c7c6b695" }, "name": "aws-ebs-csi-driver-controller-9c7c6b695", "namespace": "openshift-cluster-csi-drivers", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "aws-ebs-csi-driver-controller", "uid": "0bd51293-9996-4400-a1d4-3e1e311d65c1" } ], "resourceVersion": "11420", "uid": "8a55b8b1-88e7-4b7d-baf8-53cfe8bb1bf6" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "9c7c6b695" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict-local-volumes": "aws-auth,aws-keys,bound-sa-token,socket-dir", "openshift.io/required-scc": "restricted-v2", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "4w1CIQ==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "aws-ebs-csi-driver-controller", "openshift.storage.network-policy.all-egress": "allow", "openshift.storage.network-policy.api-server": "allow", "openshift.storage.network-policy.dns": "allow", "openshift.storage.network-policy.metrics-range": "allow", "pod-template-hash": "9c7c6b695" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "controller", "--endpoint=$(CSI_ENDPOINT)", "--k8s-tag-cluster-id=clusterpool420-54bqn-mkzlr", "--logtostderr", "--http-endpoint=localhost:8201", "--v=2", "--batching=true" ], "env": [ { "name": "CSI_ENDPOINT", "value": "unix:///var/lib/csi/sockets/pluginproxy/csi.sock" }, { "name": "AWS_SDK_LOAD_CONFIG", "value": "1" }, { "name": "AWS_CONFIG_FILE", "value": "/var/run/aws/auth/credentials" }, { "name": "AWS_REGION", "value": "us-east-1" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:913fe1e35c1e4b3c9abc0ae61adde94e85ea9e25666068686fe0b321787246e7", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "csi-driver", "ports": [ { "containerPort": 10301, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true }, { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9201", "--upstream=http://127.0.0.1:8201/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=${TLS_CIPHER_SUITES}", "--tls-min-version=${TLS_MIN_VERSION}", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-8201", "ports": [ { "containerPort": 9201, "name": "driver-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8202", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--default-fstype=ext4", "--feature-gates=Topology=true", "--extra-create-metadata=true", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:810a335ecb8e3d9779b8cdc355a764e50126fa69b6edfd2ce21cb692136fa97f", "imagePullPolicy": "IfNotPresent", "name": "csi-provisioner", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9202", "--upstream=http://127.0.0.1:8202/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=${TLS_CIPHER_SUITES}", "--tls-min-version=${TLS_MIN_VERSION}", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "provisioner-kube-rbac-proxy", "ports": [ { "containerPort": 9202, "name": "provisioner-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8203", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:dc3467f43afb7207907d449c9f77cea3fc6f445497ffa875eec7d2389b28af76", "imagePullPolicy": "IfNotPresent", "name": "csi-attacher", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9203", "--upstream=http://127.0.0.1:8203/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=${TLS_CIPHER_SUITES}", "--tls-min-version=${TLS_MIN_VERSION}", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "attacher-kube-rbac-proxy", "ports": [ { "containerPort": 9203, "name": "attacher-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8204", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--workers=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7d73b42253343784f1d2716cebb4071a2a081dd64a8ca3be74ded04606d9c36c", "imagePullPolicy": "IfNotPresent", "name": "csi-resizer", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9204", "--upstream=http://127.0.0.1:8204/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=${TLS_CIPHER_SUITES}", "--tls-min-version=${TLS_MIN_VERSION}", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "resizer-kube-rbac-proxy", "ports": [ { "containerPort": 9204, "name": "resizer-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--metrics-address=localhost:8205", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--extra-create-metadata", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:98cbc5588e6e7d708ae1527f11dfd9f6c801ef27878f06d82d2d9b1b2cad0578", "imagePullPolicy": "IfNotPresent", "name": "csi-snapshotter", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9205", "--upstream=http://127.0.0.1:8205/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=${TLS_CIPHER_SUITES}", "--tls-min-version=${TLS_MIN_VERSION}", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "snapshotter-kube-rbac-proxy", "ports": [ { "containerPort": 9205, "name": "snapshotter-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/csi/csi.sock", "--health-port=10301", "--v=2", "--probe-timeout=3s" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4900006e6a4308a5e1124ab220bebb2844742f2a67d379ee4b628a82650291de", "imagePullPolicy": "IfNotPresent", "name": "csi-liveness-probe", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/csi", "name": "socket-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "# Define file path variables\nCREDENTIALS_FILE=/var/run/aws/keys/credentials\nAUTH_CREDENTIALS_FILE=/var/run/aws/auth/credentials\nAWS_ACCESS_KEY_ID_FILE=/var/run/aws/keys/aws_access_key_id\nAWS_SECRET_ACCESS_KEY_FILE=/var/run/aws/keys/aws_secret_access_key\n\n# If credentials key exists in ebs-cloud-credentials secret, then use it as the auth file\nif [ -e \"$CREDENTIALS_FILE\" ]; then\n cp \"$CREDENTIALS_FILE\" \"$AUTH_CREDENTIALS_FILE\"\n echo \"Kubernetes Secret already contains credentials file, copied to the right place: $AUTH_CREDENTIALS_FILE\"\n exit 0\nfi\n\n# Otherwise, make sure the access keys are mounted in the pod...\nif [ ! -e \"$AWS_ACCESS_KEY_ID_FILE\" ] || [ ! -e \"$AWS_SECRET_ACCESS_KEY_FILE\" ]; then\n echo \"AWS keys not found\"\n exit 1\nfi\n\n# And create an auth file based on those keys\ncat \u003c\u003c-EOF \u003e \"$AUTH_CREDENTIALS_FILE\"\n[default]\naws_access_key_id=$(cat \"$AWS_ACCESS_KEY_ID_FILE\")\naws_secret_access_key=$(cat \"$AWS_SECRET_ACCESS_KEY_FILE\")\nEOF\necho \"Kubernetes Secret does not have credentials file, created a fresh one at $AUTH_CREDENTIALS_FILE\"\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:16816f988db21482c309e77207364b7c282a0fef96e6d7da129928aa477dcfa7", "imagePullPolicy": "IfNotPresent", "name": "init-aws-credentials-file", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "aws-ebs-csi-driver-controller-sa", "serviceAccountName": "aws-ebs-csi-driver-controller-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "emptyDir": {}, "name": "socket-dir" }, { "name": "metrics-serving-cert", "secret": { "defaultMode": 420, "secretName": "aws-ebs-csi-driver-controller-metrics-serving-cert" } }, { "name": "aws-keys", "secret": { "defaultMode": 420, "secretName": "ebs-cloud-credentials" } }, { "emptyDir": {}, "name": "aws-auth" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "config.openshift.io/inject-proxy": "aws-ebs-csi-driver-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "8b01a91dbf45caf4700a09cd3e9be49d9b936c96eba22daea260a53c67b0964f", "storage.openshift.io/remove-from": "guest" }, "creationTimestamp": "2026-04-28T12:24:10Z", "generation": 1, "labels": { "name": "aws-ebs-csi-driver-operator", "openshift.storage.network-policy.api-server": "allow", "openshift.storage.network-policy.dns": "allow", "openshift.storage.network-policy.operator-metrics-range": "allow", "pod-template-hash": "67796f55c" }, "name": "aws-ebs-csi-driver-operator-67796f55c", "namespace": "openshift-cluster-csi-drivers", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "aws-ebs-csi-driver-operator", "uid": "3335eca7-e6af-4e61-8c68-d1712281abdd" } ], "resourceVersion": "11008", "uid": "326069d1-afa1-4c56-8608-59f1ae2f8811" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "aws-ebs-csi-driver-operator", "pod-template-hash": "67796f55c" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "aws-ebs-csi-driver-operator", "openshift.storage.network-policy.api-server": "allow", "openshift.storage.network-policy.dns": "allow", "openshift.storage.network-policy.operator-metrics-range": "allow", "pod-template-hash": "67796f55c" } }, "spec": { "containers": [ { "args": [ "start", "-v=2" ], "env": [ { "name": "DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:913fe1e35c1e4b3c9abc0ae61adde94e85ea9e25666068686fe0b321787246e7" }, { "name": "PROVISIONER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:810a335ecb8e3d9779b8cdc355a764e50126fa69b6edfd2ce21cb692136fa97f" }, { "name": "ATTACHER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:dc3467f43afb7207907d449c9f77cea3fc6f445497ffa875eec7d2389b28af76" }, { "name": "RESIZER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7d73b42253343784f1d2716cebb4071a2a081dd64a8ca3be74ded04606d9c36c" }, { "name": "SNAPSHOTTER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:98cbc5588e6e7d708ae1527f11dfd9f6c801ef27878f06d82d2d9b1b2cad0578" }, { "name": "NODE_DRIVER_REGISTRAR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d1441ca3d11dde0da6f275567fadbf055d93db7fbc95a7b7b6e99b0f7f01d7e5" }, { "name": "LIVENESS_PROBE_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4900006e6a4308a5e1124ab220bebb2844742f2a67d379ee4b628a82650291de" }, { "name": "KUBE_RBAC_PROXY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d" }, { "name": "TOOLS_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:16816f988db21482c309e77207364b7c282a0fef96e6d7da129928aa477dcfa7" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.20.10" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:85d25faef4d9ebbd1446d7ce7b746937d2f1844ca418cb8c87cbbf31835adbe6", "imagePullPolicy": "IfNotPresent", "name": "aws-ebs-csi-driver-operator", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "aws-ebs-csi-driver-operator", "serviceAccountName": "aws-ebs-csi-driver-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "emptyDir": { "medium": "Memory" }, "name": "tmp" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true", "kubectl.kubernetes.io/default-container": "machine-approver-controller" }, "creationTimestamp": "2026-04-28T12:20:10Z", "generation": 2, "labels": { "app": "machine-approver", "pod-template-hash": "67649c4555" }, "name": "machine-approver-67649c4555", "namespace": "openshift-cluster-machine-approver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "machine-approver", "uid": "301007a4-86a2-4e6a-a2cd-910995b4c0ce" } ], "resourceVersion": "3722", "uid": "5bbea84e-002c-4cf7-8094-7ea5dc718179" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "machine-approver", "pod-template-hash": "67649c4555" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "machine-approver", "pod-template-hash": "67649c4555" }, "name": "machine-approver" }, "spec": { "containers": [ { "args": [ "--secure-listen-address=0.0.0.0:9192", "--upstream=http://127.0.0.1:9191/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9192, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "auth-proxy-config" }, { "mountPath": "/etc/tls/private", "name": "machine-approver-tls" } ] }, { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2", "--logtostderr", "--leader-elect=true", "--leader-elect-lease-duration=137s", "--leader-elect-renew-deadline=107s", "--leader-elect-retry-period=26s", "--leader-elect-resource-namespace=openshift-cluster-machine-approver", "--api-group-version=machine.openshift.io/v1beta1", "--max-concurrent-reconciles=10" ], "command": [ "/usr/bin/machine-approver" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.20.10" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:699a5e48885d9ed2eb591be6f9033dabb97008896b1b2c8db1e648d2b44db5ea", "imagePullPolicy": "IfNotPresent", "name": "machine-approver-controller", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "machine-approver-sa", "serviceAccountName": "machine-approver-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "auth-proxy-config" }, { "name": "machine-approver-tls", "secret": { "defaultMode": 420, "secretName": "machine-approver-tls" } }, { "configMap": { "defaultMode": 440, "name": "machine-approver-config", "optional": true }, "name": "config" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "2", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true", "kubectl.kubernetes.io/default-container": "machine-approver-controller" }, "creationTimestamp": "2026-04-28T12:21:17Z", "generation": 1, "labels": { "app": "machine-approver", "pod-template-hash": "7dd996fb4" }, "name": "machine-approver-7dd996fb4", "namespace": "openshift-cluster-machine-approver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "machine-approver", "uid": "301007a4-86a2-4e6a-a2cd-910995b4c0ce" } ], "resourceVersion": "10170", "uid": "d5a3f4f4-f6c8-4a9c-b425-102db3dec098" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "machine-approver", "pod-template-hash": "7dd996fb4" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "machine-approver", "pod-template-hash": "7dd996fb4" }, "name": "machine-approver" }, "spec": { "containers": [ { "args": [ "--secure-listen-address=0.0.0.0:9192", "--upstream=http://127.0.0.1:9191/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9192, "hostPort": 9192, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "auth-proxy-config" }, { "mountPath": "/etc/tls/private", "name": "machine-approver-tls" } ] }, { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2", "--logtostderr", "--leader-elect=true", "--leader-elect-lease-duration=137s", "--leader-elect-renew-deadline=107s", "--leader-elect-retry-period=26s", "--leader-elect-resource-namespace=openshift-cluster-machine-approver", "--api-group-version=machine.openshift.io/v1beta1", "--max-concurrent-reconciles=10" ], "command": [ "/usr/bin/machine-approver" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.20.10" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:699a5e48885d9ed2eb591be6f9033dabb97008896b1b2c8db1e648d2b44db5ea", "imagePullPolicy": "IfNotPresent", "name": "machine-approver-controller", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "machine-approver-sa", "serviceAccountName": "machine-approver-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "auth-proxy-config" }, { "name": "machine-approver-tls", "secret": { "defaultMode": 420, "secretName": "machine-approver-tls" } }, { "configMap": { "defaultMode": 440, "name": "machine-approver-config", "optional": true }, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "NodeTuning", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:38Z", "generation": 1, "labels": { "name": "cluster-node-tuning-operator", "pod-template-hash": "7f9d8c4ff7" }, "name": "cluster-node-tuning-operator-7f9d8c4ff7", "namespace": "openshift-cluster-node-tuning-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-node-tuning-operator", "uid": "bb8261b6-dcbb-4913-8bc3-3d6f11db7447" } ], "resourceVersion": "37714", "uid": "2f17a944-17a2-418f-9fda-922c8f20afc5" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "cluster-node-tuning-operator", "pod-template-hash": "7f9d8c4ff7" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "anyuid", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "cluster-node-tuning-operator", "pod-template-hash": "7f9d8c4ff7" } }, "spec": { "containers": [ { "args": [ "-v=0" ], "command": [ "cluster-node-tuning-operator" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.20.10" }, { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "RESYNC_PERIOD", "value": "600" }, { "name": "CLUSTER_NODE_TUNED_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:25cd333d04368d9b0cd2e047b615912326316092d8fe365f759216b474ccea16" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:25cd333d04368d9b0cd2e047b615912326316092d8fe365f759216b474ccea16", "imagePullPolicy": "IfNotPresent", "name": "cluster-node-tuning-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/secrets", "name": "node-tuning-operator-tls" }, { "mountPath": "/var/run/configmaps/trusted-ca/", "name": "trusted-ca" }, { "mountPath": "/apiserver.local.config/certificates", "name": "apiservice-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/control-plane": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 499 }, "serviceAccount": "cluster-node-tuning-operator", "serviceAccountName": "cluster-node-tuning-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "node-tuning-operator-tls", "secret": { "defaultMode": 420, "secretName": "node-tuning-operator-tls" } }, { "name": "apiservice-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "apiserver.crt" }, { "key": "tls.key", "path": "apiserver.key" } ], "secretName": "performance-addon-operator-webhook-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "OperatorLifecycleManagerV1", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T12:19:26Z", "generation": 1, "labels": { "name": "cluster-olm-operator", "pod-template-hash": "5b64c6dc59" }, "name": "cluster-olm-operator-5b64c6dc59", "namespace": "openshift-cluster-olm-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-olm-operator", "uid": "54213f3d-595a-4ab8-9277-bd531c65657d" } ], "resourceVersion": "37710", "uid": "aa181ac2-bf24-4676-9fb3-cd3f6c4471a9" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "cluster-olm-operator", "pod-template-hash": "5b64c6dc59" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "cluster-olm-operator", "pod-template-hash": "5b64c6dc59" } }, "spec": { "containers": [ { "args": [ "start" ], "command": [ "/cluster-olm-operator" ], "env": [ { "name": "OPERATOR_NAME", "value": "cluster-olm-operator" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.20.10" }, { "name": "KUBE_RBAC_PROXY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d" }, { "name": "CATALOGD_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:71f7b45e7da7f308b6459cfaf75907bf8941fc3d862f2fcfc7ad5f7b88b32a67" }, { "name": "OPERATOR_CONTROLLER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e505aaede09a98f8fd9fbfb8eee8e4a8a8972077765206f0c0cc3174d88feb57" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bfbe81867d7da1b5903dade75d62732511277516d897f722c9c2892731df857c", "imagePullPolicy": "IfNotPresent", "name": "cluster-olm-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/serving-cert", "name": "cluster-olm-operator-serving-cert" }, { "mountPath": "/operand-assets", "name": "operand-assets" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "-c", "if [ -e /cp-manifests ]; then /cp-manifests /operand-assets; else cp -a /openshift/manifests /operand-assets/catalogd; fi" ], "command": [ "/bin/sh" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:71f7b45e7da7f308b6459cfaf75907bf8941fc3d862f2fcfc7ad5f7b88b32a67", "imagePullPolicy": "IfNotPresent", "name": "copy-catalogd-manifests", "resources": {}, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/operand-assets", "name": "operand-assets" } ] }, { "args": [ "-c", "if [ -e /cp-manifests ]; then /cp-manifests /operand-assets; else cp -a /openshift/manifests /operand-assets/operator-controller; fi" ], "command": [ "/bin/sh" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e505aaede09a98f8fd9fbfb8eee8e4a8a8972077765206f0c0cc3174d88feb57", "imagePullPolicy": "IfNotPresent", "name": "copy-operator-controller-manifests", "resources": {}, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/operand-assets", "name": "operand-assets" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cluster-olm-operator", "serviceAccountName": "cluster-olm-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "cluster-olm-operator-serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "cluster-olm-operator-serving-cert" } }, { "emptyDir": {}, "name": "operand-assets" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T12:23:36Z", "generation": 1, "labels": { "name": "cluster-samples-operator", "pod-template-hash": "5c8c98f754" }, "name": "cluster-samples-operator-5c8c98f754", "namespace": "openshift-cluster-samples-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-samples-operator", "uid": "39767c5d-e5e7-474e-acef-1c3ad9a0b04a" } ], "resourceVersion": "9249", "uid": "4f768bbd-885a-412c-bbc9-f9b5cefe0693" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "cluster-samples-operator", "pod-template-hash": "5c8c98f754" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "cluster-samples-operator", "pod-template-hash": "5c8c98f754" } }, "spec": { "containers": [ { "command": [ "cluster-samples-operator" ], "env": [ { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "OPERATOR_NAME", "value": "cluster-samples-operator" }, { "name": "RELEASE_VERSION", "value": "4.20.10" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f41da9499d0375bab1ed6d8b2c2f2fa555408d8f942049dac418b5833551509c", "imagePullPolicy": "IfNotPresent", "name": "cluster-samples-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/secrets", "name": "samples-operator-tls" } ] }, { "args": [ "--namespace=openshift-cluster-samples-operator", "--process-name=cluster-samples-operator", "--termination-grace-period=30s", "--files=/etc/secrets/tls.crt,/etc/secrets/tls.key" ], "command": [ "cluster-samples-operator-watch", "file-watcher-watchdog" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f41da9499d0375bab1ed6d8b2c2f2fa555408d8f942049dac418b5833551509c", "imagePullPolicy": "IfNotPresent", "name": "cluster-samples-operator-watch", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cluster-samples-operator", "serviceAccountName": "cluster-samples-operator", "shareProcessNamespace": true, "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "samples-operator-tls", "secret": { "defaultMode": 420, "secretName": "samples-operator-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "Storage", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:48Z", "generation": 1, "labels": { "name": "cluster-storage-operator", "openshift.storage.network-policy.api-server": "allow", "openshift.storage.network-policy.dns": "allow", "openshift.storage.network-policy.operator-metrics": "allow", "pod-template-hash": "bc6bf578b" }, "name": "cluster-storage-operator-bc6bf578b", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-storage-operator", "uid": "8ebc7f07-753e-4835-ab7d-dd5cf38ea2dc" } ], "resourceVersion": "37713", "uid": "0aa5b97c-0837-492c-a0e5-f19f6ebce12e" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "cluster-storage-operator", "pod-template-hash": "bc6bf578b" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "cluster-storage-operator", "openshift.storage.network-policy.api-server": "allow", "openshift.storage.network-policy.dns": "allow", "openshift.storage.network-policy.operator-metrics": "allow", "pod-template-hash": "bc6bf578b" } }, "spec": { "containers": [ { "args": [ "start", "-v=2", "--terminate-on-files=/var/run/secrets/serving-cert/tls.crt", "--terminate-on-files=/var/run/secrets/serving-cert/tls.key" ], "command": [ "cluster-storage-operator", "start" ], "env": [ { "name": "OPERATOR_IMAGE_VERSION", "value": "4.20.10" }, { "name": "OPERAND_IMAGE_VERSION", "value": "4.20.10" }, { "name": "AWS_EBS_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:85d25faef4d9ebbd1446d7ce7b746937d2f1844ca418cb8c87cbbf31835adbe6" }, { "name": "AWS_EBS_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:913fe1e35c1e4b3c9abc0ae61adde94e85ea9e25666068686fe0b321787246e7" }, { "name": "GCP_PD_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1e47f1059b55d4a1be6761661ae10112e9f8c86bd20425525d7ba6e534f02760" }, { "name": "GCP_PD_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ac0e8b869055456971734efaf5db32d47af3b1fd10000cbc6d0a21b6cbd57c5b" }, { "name": "OPENSTACK_CINDER_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:687ec07c2b2596698cf882a4d393b94415cdce5ae736857226eeb5c2dc5c24ab" }, { "name": "OPENSTACK_CINDER_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3f66f0397ef6dc4e68e2acb3c72ea94721e2a27a0da8c3622d38e55434cb6049" }, { "name": "OVIRT_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:92a31d4ceed75b2fd0535516031c325026fba4b67e9f8e5876cc323352c5c738" }, { "name": "OVIRT_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a14be158109a08961597d796896e5e54caac843a29679313a49b57dfd973d69a" }, { "name": "MANILA_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:80f9565d21c8c6586298aedb07cfb87f4ca8ce4526b1763e1388318dd8da2509" }, { "name": "MANILA_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:113cb75cf2001889bb2b54481f94fd8ef8e2d81ff9665ddd7d1e9d6ab4bbb843" }, { "name": "MANILA_NFS_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:61de30855c2c3b0885a2161c9627161338b0c278ac59456c78f647aacf53eacb" }, { "name": "PROVISIONER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:810a335ecb8e3d9779b8cdc355a764e50126fa69b6edfd2ce21cb692136fa97f" }, { "name": "ATTACHER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:dc3467f43afb7207907d449c9f77cea3fc6f445497ffa875eec7d2389b28af76" }, { "name": "RESIZER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7d73b42253343784f1d2716cebb4071a2a081dd64a8ca3be74ded04606d9c36c" }, { "name": "SNAPSHOTTER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:98cbc5588e6e7d708ae1527f11dfd9f6c801ef27878f06d82d2d9b1b2cad0578" }, { "name": "NODE_DRIVER_REGISTRAR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d1441ca3d11dde0da6f275567fadbf055d93db7fbc95a7b7b6e99b0f7f01d7e5" }, { "name": "LIVENESS_PROBE_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4900006e6a4308a5e1124ab220bebb2844742f2a67d379ee4b628a82650291de" }, { "name": "VSPHERE_PROBLEM_DETECTOR_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a24620b9e8429a3b15b3adfa1d41523e65eb4b3fed5e2c1ca3df3855b8d203d7" }, { "name": "AZURE_DISK_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:de6c48690f810adcb9f5dd731b72d9082c6859f66bb8c0f541f6c67e742768d2" }, { "name": "AZURE_DISK_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b1fbe322bb03922654a38079c8f02129a4eb66b06d4662faf8c462dd83ad7f87" }, { "name": "AZURE_FILE_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b4f1cd63bffa6fa392e530060f7c06a60203d5f6763c577d47439f0660b279ce" }, { "name": "AZURE_FILE_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:48eb2abdedf1dd43772cc4642d1ba12881e84a846971f5d02f97dd60c028c8d8" }, { "name": "KUBE_RBAC_PROXY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d" }, { "name": "VMWARE_VSPHERE_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5aef4e80af2a9f61eade04b8bc0cec4f808eeaa29b36def1ab75b4d07d8e16e1" }, { "name": "VMWARE_VSPHERE_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:881f35f91bd0b71690dc6524839cb2d2cc99314f31fc033c6d1fbeeffa2fe8e5" }, { "name": "VMWARE_VSPHERE_SYNCER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0a8a60b4922503c5516e5c51cd022117e2371bc79dd4bad8ead440b023219603" }, { "name": "CLUSTER_CLOUD_CONTROLLER_MANAGER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0d4456a19a1d7a7406588609decd6273f15882468041d868f12773bb1a3a3194" }, { "name": "IBM_VPC_BLOCK_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:81bc5ea44526646e3a390e0a79f9fdb5cf9cd0aa9b16083bd3d89fd1bf37dba3" }, { "name": "IBM_VPC_BLOCK_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:872629e0d23feb2e0721ea53dfd2e88b4e1d36c9378531e52cef9a0bb3a0533b" }, { "name": "POWERVS_BLOCK_CSI_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f8c8d938f418093fdf3b0c405de873443326ae71623be0f64bf4e50a4b3d9e27" }, { "name": "POWERVS_BLOCK_CSI_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:210fbb22b9e0c8db583dd96a9fae7697cf7687d54de2f61b01df160b530c524a" }, { "name": "VOLUME_DATA_SOURCE_VALIDATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6764998c99ef3251e09715573e448b6c1094d222885fcfef7e367b1eeca6d2f1" }, { "name": "TOOLS_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:16816f988db21482c309e77207364b7c282a0fef96e6d7da129928aa477dcfa7" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5db3c2fa06b52a3ebede5072f856a1c98305db3eea7fd62c964755542b217aa5", "imagePullPolicy": "IfNotPresent", "name": "cluster-storage-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/serving-cert", "name": "cluster-storage-operator-serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 11411, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cluster-storage-operator", "serviceAccountName": "cluster-storage-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "cluster-storage-operator-serving-cert", "secret": { "defaultMode": 420, "secretName": "cluster-storage-operator-serving-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "4200e8bfff07e81807f2118de183ad1c4fc982d192f1bbd53f4fbd257e766f5b" }, "creationTimestamp": "2026-04-28T12:24:12Z", "generation": 1, "labels": { "app": "csi-snapshot-controller", "openshift.storage.network-policy.all-egress": "allow", "openshift.storage.network-policy.api-server": "allow", "openshift.storage.network-policy.dns": "allow", "pod-template-hash": "bbbdcdc4b" }, "name": "csi-snapshot-controller-bbbdcdc4b", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "csi-snapshot-controller", "uid": "9294a53e-92a3-4f4b-97c4-284758ab7c53" } ], "resourceVersion": "11818", "uid": "7e1a0b91-d840-46f0-a5ec-742ad9bd85bc" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "csi-snapshot-controller", "pod-template-hash": "bbbdcdc4b" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "csi-snapshot-controller", "openshift.storage.network-policy.all-egress": "allow", "openshift.storage.network-policy.api-server": "allow", "openshift.storage.network-policy.dns": "allow", "pod-template-hash": "bbbdcdc4b" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app": "csi-snapshot-controller" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "--v=2", "--leader-election=true", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-storage-operator" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:077f040019b732500d4495f270354f6fa248be24c526946893ce39d759a2c376", "imagePullPolicy": "IfNotPresent", "name": "snapshot-controller", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "csi-snapshot-controller", "serviceAccountName": "csi-snapshot-controller", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "CSISnapshot", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:38Z", "generation": 1, "labels": { "app": "csi-snapshot-controller-operator", "openshift.storage.network-policy.api-server": "allow", "openshift.storage.network-policy.dns": "allow", "openshift.storage.network-policy.operator-metrics": "allow", "pod-template-hash": "78f5677fc" }, "name": "csi-snapshot-controller-operator-78f5677fc", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "csi-snapshot-controller-operator", "uid": "7ba912bd-bafd-4806-b903-6866b7947269" } ], "resourceVersion": "37707", "uid": "309cb785-bb34-451d-a270-801128796a99" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "csi-snapshot-controller-operator", "pod-template-hash": "78f5677fc" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "csi-snapshot-controller-operator", "openshift.storage.network-policy.api-server": "allow", "openshift.storage.network-policy.dns": "allow", "openshift.storage.network-policy.operator-metrics": "allow", "pod-template-hash": "78f5677fc" } }, "spec": { "containers": [ { "args": [ "start", "-v=2" ], "env": [ { "name": "OPERAND_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:077f040019b732500d4495f270354f6fa248be24c526946893ce39d759a2c376" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.20.10" }, { "name": "OPERAND_IMAGE_VERSION", "value": "4.20.10" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:85fe9cdfa83caa835f5bd9f4a760255058f6c3017e2c86ff8b3c11832c3ba428", "imagePullPolicy": "IfNotPresent", "name": "csi-snapshot-controller-operator", "resources": { "requests": { "cpu": "10m", "memory": "65Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "csi-snapshot-controller-operator", "serviceAccountName": "csi-snapshot-controller-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "e9f87a346d6313427ce2d934bdc0e8a9385a78d04553ed3662c6619cf690a229" }, "creationTimestamp": "2026-04-28T12:24:10Z", "generation": 1, "labels": { "name": "volume-data-source-validator", "openshift.storage.network-policy.api-server": "allow", "openshift.storage.network-policy.dns": "allow", "pod-template-hash": "5fd95dcdc5" }, "name": "volume-data-source-validator-5fd95dcdc5", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "volume-data-source-validator", "uid": "3c17c929-98bb-4e9e-b218-2c7ddd34c9b2" } ], "resourceVersion": "37728", "uid": "1455e59a-3bf0-48b2-9a5d-5ec3f91580f1" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "volume-data-source-validator", "pod-template-hash": "5fd95dcdc5" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "volume-data-source-validator", "openshift.storage.network-policy.api-server": "allow", "openshift.storage.network-policy.dns": "allow", "pod-template-hash": "5fd95dcdc5" } }, "spec": { "containers": [ { "args": [ "--v=2", "--http-endpoint=127.0.0.1:8443", "--leader-election=true", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-storage-operator" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6764998c99ef3251e09715573e448b6c1094d222885fcfef7e367b1eeca6d2f1", "imagePullPolicy": "Always", "name": "volume-data-source-validator", "ports": [ { "containerPort": 8443, "name": "validator-http", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "volume-data-source-validator", "serviceAccountName": "volume-data-source-validator", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "kubernetes.io/description": "The cluster-version operator manages OpenShift updates and reconciles core resources and cluster operators." }, "creationTimestamp": "2026-04-28T12:19:04Z", "generation": 2, "labels": { "k8s-app": "cluster-version-operator", "pod-template-hash": "5d5bd47f68" }, "name": "cluster-version-operator-5d5bd47f68", "namespace": "openshift-cluster-version", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-version-operator", "uid": "64a25b7d-27d1-409f-a05a-d9cff6a3a438" } ], "resourceVersion": "2919", "uid": "ca861d0f-7b82-4d93-9fc8-f430acc40798" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "k8s-app": "cluster-version-operator", "pod-template-hash": "5d5bd47f68" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "hostaccess", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "cluster-version-operator", "pod-template-hash": "5d5bd47f68" }, "name": "cluster-version-operator" }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "start", "--release-image=quay.io/openshift-release-dev/ocp-release@sha256:cc38e0842d2a6b998ba257ec2df49325088c840726fa79d4840dab0bd83ddfd8", "--enable-auto-update=false", "--listen=0.0.0.0:9099", "--serving-cert-file=/etc/tls/serving-cert/tls.crt", "--serving-key-file=/etc/tls/serving-cert/tls.key", "--v=2", "--always-enable-capabilities=Ingress" ], "env": [ { "name": "OPERATOR_IMAGE_VERSION", "value": "0.0.1-snapshot" }, { "name": "KUBERNETES_SERVICE_PORT", "value": "6443" }, { "name": "KUBERNETES_SERVICE_HOST", "value": "127.0.0.1" }, { "name": "NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "CLUSTER_PROFILE", "value": "self-managed-high-availability" } ], "image": "quay.io/openshift-release-dev/ocp-release@sha256:cc38e0842d2a6b998ba257ec2df49325088c840726fa79d4840dab0bd83ddfd8", "imagePullPolicy": "IfNotPresent", "name": "cluster-version-operator", "ports": [ { "containerPort": 9099, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/ssl/certs", "name": "etc-ssl-certs", "readOnly": true }, { "mountPath": "/etc/cvo/updatepayloads", "name": "etc-cvo-updatepayloads", "readOnly": true }, { "mountPath": "/etc/tls/serving-cert", "name": "serving-cert", "readOnly": true }, { "mountPath": "/etc/tls/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount", "name": "kube-api-access", "readOnly": true } ] } ], "dnsPolicy": "Default", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 130, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/network-unavailable", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/not-ready", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/etc/ssl/certs", "type": "" }, "name": "etc-ssl-certs" }, { "hostPath": { "path": "/etc/cvo/updatepayloads", "type": "" }, "name": "etc-cvo-updatepayloads" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "cluster-version-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "openshift-service-ca.crt" }, "name": "service-ca" }, { "name": "kube-api-access", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "expirationSeconds": 3600, "path": "token" } }, { "configMap": { "items": [ { "key": "ca.crt", "path": "ca.crt" } ], "name": "kube-root-ca.crt" } }, { "downwardAPI": { "items": [ { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" }, "path": "namespace" } ] } } ] } } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "2", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "kubernetes.io/description": "The cluster-version operator manages OpenShift updates and reconciles core resources and cluster operators." }, "creationTimestamp": "2026-04-28T12:20:07Z", "generation": 1, "labels": { "k8s-app": "cluster-version-operator", "pod-template-hash": "768b5666b8" }, "name": "cluster-version-operator-768b5666b8", "namespace": "openshift-cluster-version", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-version-operator", "uid": "64a25b7d-27d1-409f-a05a-d9cff6a3a438" } ], "resourceVersion": "8550", "uid": "469f5c4e-5bf5-4ba1-974c-e7fcab3aaf22" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "k8s-app": "cluster-version-operator", "pod-template-hash": "768b5666b8" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "hostaccess", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "cluster-version-operator", "pod-template-hash": "768b5666b8" }, "name": "cluster-version-operator" }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "start", "--release-image=quay.io/openshift-release-dev/ocp-release@sha256:cc38e0842d2a6b998ba257ec2df49325088c840726fa79d4840dab0bd83ddfd8", "--enable-auto-update=false", "--listen=0.0.0.0:9099", "--serving-cert-file=/etc/tls/serving-cert/tls.crt", "--serving-key-file=/etc/tls/serving-cert/tls.key", "--v=2", "--always-enable-capabilities=Ingress" ], "env": [ { "name": "OPERATOR_IMAGE_VERSION", "value": "0.0.1-snapshot" }, { "name": "KUBERNETES_SERVICE_PORT", "value": "6443" }, { "name": "KUBERNETES_SERVICE_HOST", "value": "api-int.clusterpool420-54bqn.rhtap.devcluster.openshift.com" }, { "name": "NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "CLUSTER_PROFILE", "value": "self-managed-high-availability" } ], "image": "quay.io/openshift-release-dev/ocp-release@sha256:cc38e0842d2a6b998ba257ec2df49325088c840726fa79d4840dab0bd83ddfd8", "imagePullPolicy": "IfNotPresent", "name": "cluster-version-operator", "ports": [ { "containerPort": 9099, "hostPort": 9099, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/ssl/certs", "name": "etc-ssl-certs", "readOnly": true }, { "mountPath": "/etc/cvo/updatepayloads", "name": "etc-cvo-updatepayloads", "readOnly": true }, { "mountPath": "/etc/tls/serving-cert", "name": "serving-cert", "readOnly": true }, { "mountPath": "/etc/tls/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount", "name": "kube-api-access", "readOnly": true } ] } ], "dnsPolicy": "Default", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 130, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/network-unavailable", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/not-ready", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/etc/ssl/certs", "type": "" }, "name": "etc-ssl-certs" }, { "hostPath": { "path": "/etc/cvo/updatepayloads", "type": "" }, "name": "etc-cvo-updatepayloads" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "cluster-version-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "openshift-service-ca.crt" }, "name": "service-ca" }, { "name": "kube-api-access", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "expirationSeconds": 3600, "path": "token" } }, { "configMap": { "items": [ { "key": "ca.crt", "path": "ca.crt" } ], "name": "kube-root-ca.crt" } }, { "downwardAPI": { "items": [ { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" }, "path": "namespace" } ] } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:44Z", "generation": 1, "labels": { "app": "openshift-config-operator", "pod-template-hash": "6d6dc69dc9" }, "name": "openshift-config-operator-6d6dc69dc9", "namespace": "openshift-config-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-config-operator", "uid": "7f979d19-bc6d-4388-9b32-ae0d1476e32b" } ], "resourceVersion": "37742", "uid": "6969cbd2-f80c-459c-aeee-1085bcf2e11c" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "openshift-config-operator", "pod-template-hash": "6d6dc69dc9" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-config-operator", "pod-template-hash": "6d6dc69dc9" }, "name": "openshift-config-operator" }, "spec": { "containers": [ { "command": [ "cluster-config-operator", "operator", "--operator-version=$(OPERATOR_IMAGE_VERSION)", "--authoritative-feature-gate-dir=/available-featuregates" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d635bc7b67932706a527e470477d075ec05427e689f4e9feb339bfce2f8a19b1" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.20.10" }, { "name": "OPERAND_IMAGE_VERSION", "value": "4.20.10" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d635bc7b67932706a527e470477d075ec05427e689f4e9feb339bfce2f8a19b1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 3, "periodSeconds": 3, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "openshift-config-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 3, "periodSeconds": 3, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/available-featuregates", "name": "available-featuregates" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "write-available-featuresets", "--asset-output-dir=/available-featuregates", "--payload-version=$(OPERATOR_IMAGE_VERSION)" ], "env": [ { "name": "OPERATOR_IMAGE_VERSION", "value": "4.20.10" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3baaaae4f6e003d4b3067e8e0d8543fb7475a43139c29ac9852700b014e83f84", "imagePullPolicy": "IfNotPresent", "name": "openshift-api", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/available-featuregates", "name": "available-featuregates" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-config-operator", "serviceAccountName": "openshift-config-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "config-operator-serving-cert" } }, { "emptyDir": { "sizeLimit": "100Mi" }, "name": "available-featuregates" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "config.openshift.io/inject-proxy": "console-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:49Z", "generation": 1, "labels": { "name": "console-operator", "pod-template-hash": "549fb5b6fd" }, "name": "console-operator-549fb5b6fd", "namespace": "openshift-console-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console-operator", "uid": "67f774e0-7d4e-4e38-9ad1-c27c514b4827" } ], "resourceVersion": "49351", "uid": "9db08574-d25f-4afd-b866-d0aee6078d14" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "console-operator", "pod-template-hash": "549fb5b6fd" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "console-operator", "pod-template-hash": "549fb5b6fd" } }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/controller-config.yaml" ], "command": [ "console", "operator" ], "env": [ { "name": "CONSOLE_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4888da710eab3d218b897e02aca4d7dd3d9b6e2772c274f7e7c3a5e6e0581ac2" }, { "name": "DOWNLOADS_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:54bcffc0ae940df16e95936d364fa3226dd2c0aaa0aab7935e041bbe7c0b63ec" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.20.10" }, { "name": "OPERATOR_NAME", "value": "console-operator" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9c5527396e3b3ad4edf0d5124b2c0474b5449951f3840bf5f688281bcaec63d2", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "console-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console-operator", "serviceAccountName": "console-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "console-operator-config" }, "name": "config" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca" }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "10644", "console.openshift.io/console-config-version": "25874", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4888da710eab3d218b897e02aca4d7dd3d9b6e2772c274f7e7c3a5e6e0581ac2", "console.openshift.io/infrastructure-config-version": "538", "console.openshift.io/oauth-secret-version": "7935", "console.openshift.io/proxy-config-version": "556", "console.openshift.io/service-ca-config-version": "25880", "console.openshift.io/trusted-ca-config-version": "25889", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "2", "operator.openshift.io/spec-hash": "b8b509bb45ca66c54d5846b146bc6168be587c0017a5f3cbd00022d7c7b71972" }, "creationTimestamp": "2026-04-28T12:35:57Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "54b4db449f" }, "name": "console-54b4db449f", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "e06780d1-b848-4528-851b-d6fc5888135c" } ], "resourceVersion": "28569", "uid": "1211af41-e745-4940-b929-58a716d621df" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "54b4db449f" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "10644", "console.openshift.io/console-config-version": "25874", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4888da710eab3d218b897e02aca4d7dd3d9b6e2772c274f7e7c3a5e6e0581ac2", "console.openshift.io/infrastructure-config-version": "538", "console.openshift.io/oauth-secret-version": "7935", "console.openshift.io/proxy-config-version": "556", "console.openshift.io/service-ca-config-version": "25880", "console.openshift.io/trusted-ca-config-version": "25889", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "54b4db449f" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4888da710eab3d218b897e02aca4d7dd3d9b6e2772c274f7e7c3a5e6e0581ac2", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "10644", "console.openshift.io/console-config-version": "29479", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4888da710eab3d218b897e02aca4d7dd3d9b6e2772c274f7e7c3a5e6e0581ac2", "console.openshift.io/infrastructure-config-version": "538", "console.openshift.io/oauth-secret-version": "7935", "console.openshift.io/proxy-config-version": "556", "console.openshift.io/service-ca-config-version": "25880", "console.openshift.io/trusted-ca-config-version": "25889", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "4", "operator.openshift.io/spec-hash": "b6e77fd95a512c55094b9d82eca24c091a5b5d934f0da3529576441a8ac0ee0e" }, "creationTimestamp": "2026-04-28T12:41:03Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "7469fdfbb4" }, "name": "console-7469fdfbb4", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "e06780d1-b848-4528-851b-d6fc5888135c" } ], "resourceVersion": "43278", "uid": "ac30d700-7d0c-46f2-8212-5ab8ff8194cc" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "7469fdfbb4" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "10644", "console.openshift.io/console-config-version": "29479", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4888da710eab3d218b897e02aca4d7dd3d9b6e2772c274f7e7c3a5e6e0581ac2", "console.openshift.io/infrastructure-config-version": "538", "console.openshift.io/oauth-secret-version": "7935", "console.openshift.io/proxy-config-version": "556", "console.openshift.io/service-ca-config-version": "25880", "console.openshift.io/trusted-ca-config-version": "25889", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "7469fdfbb4" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4888da710eab3d218b897e02aca4d7dd3d9b6e2772c274f7e7c3a5e6e0581ac2", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "10644", "console.openshift.io/console-config-version": "29479", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4888da710eab3d218b897e02aca4d7dd3d9b6e2772c274f7e7c3a5e6e0581ac2", "console.openshift.io/infrastructure-config-version": "538", "console.openshift.io/oauth-secret-version": "7935", "console.openshift.io/proxy-config-version": "40939", "console.openshift.io/service-ca-config-version": "25880", "console.openshift.io/trusted-ca-config-version": "25889", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "5", "operator.openshift.io/spec-hash": "d2dcb3f4ca4f1412c25f0225d232488cdeb99e7289d4de87ad849c3e4af0bf35" }, "creationTimestamp": "2026-04-28T12:57:57Z", "generation": 2, "labels": { "app": "console", "component": "ui", "pod-template-hash": "75fd797d55" }, "name": "console-75fd797d55", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "e06780d1-b848-4528-851b-d6fc5888135c" } ], "resourceVersion": "41189", "uid": "20f36121-51b3-488e-941c-9de2ca28c30c" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "75fd797d55" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "10644", "console.openshift.io/console-config-version": "29479", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4888da710eab3d218b897e02aca4d7dd3d9b6e2772c274f7e7c3a5e6e0581ac2", "console.openshift.io/infrastructure-config-version": "538", "console.openshift.io/oauth-secret-version": "7935", "console.openshift.io/proxy-config-version": "40939", "console.openshift.io/service-ca-config-version": "25880", "console.openshift.io/trusted-ca-config-version": "25889", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "75fd797d55" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4888da710eab3d218b897e02aca4d7dd3d9b6e2772c274f7e7c3a5e6e0581ac2", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "10644", "console.openshift.io/console-config-version": "26232", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4888da710eab3d218b897e02aca4d7dd3d9b6e2772c274f7e7c3a5e6e0581ac2", "console.openshift.io/infrastructure-config-version": "538", "console.openshift.io/oauth-secret-version": "7935", "console.openshift.io/proxy-config-version": "556", "console.openshift.io/service-ca-config-version": "25880", "console.openshift.io/trusted-ca-config-version": "25889", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "3", "operator.openshift.io/spec-hash": "0b6175f314826c10332e9177993126c6602fdccdea583532f8a28821b1164d18" }, "creationTimestamp": "2026-04-28T12:36:34Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "7747d4b496" }, "name": "console-7747d4b496", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "e06780d1-b848-4528-851b-d6fc5888135c" } ], "resourceVersion": "29989", "uid": "a04d442b-2cf7-49d9-8bc2-18432179ccdc" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "7747d4b496" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "10644", "console.openshift.io/console-config-version": "26232", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4888da710eab3d218b897e02aca4d7dd3d9b6e2772c274f7e7c3a5e6e0581ac2", "console.openshift.io/infrastructure-config-version": "538", "console.openshift.io/oauth-secret-version": "7935", "console.openshift.io/proxy-config-version": "556", "console.openshift.io/service-ca-config-version": "25880", "console.openshift.io/trusted-ca-config-version": "25889", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "7747d4b496" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4888da710eab3d218b897e02aca4d7dd3d9b6e2772c274f7e7c3a5e6e0581ac2", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "10644", "console.openshift.io/console-config-version": "25874", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4888da710eab3d218b897e02aca4d7dd3d9b6e2772c274f7e7c3a5e6e0581ac2", "console.openshift.io/infrastructure-config-version": "538", "console.openshift.io/oauth-secret-version": "7935", "console.openshift.io/proxy-config-version": "556", "console.openshift.io/service-ca-config-version": "25879", "console.openshift.io/trusted-ca-config-version": "25886", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "b02fffdb841eff73fb872ce3fc0a7b4c2156f3dc8554fdc676aeaab9a2f7cabf" }, "creationTimestamp": "2026-04-28T12:35:55Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "9bbdf5bbf" }, "name": "console-9bbdf5bbf", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "e06780d1-b848-4528-851b-d6fc5888135c" } ], "resourceVersion": "26413", "uid": "42420f9b-5677-425a-9ff1-d47cbc48751e" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "9bbdf5bbf" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "10644", "console.openshift.io/console-config-version": "25874", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4888da710eab3d218b897e02aca4d7dd3d9b6e2772c274f7e7c3a5e6e0581ac2", "console.openshift.io/infrastructure-config-version": "538", "console.openshift.io/oauth-secret-version": "7935", "console.openshift.io/proxy-config-version": "556", "console.openshift.io/service-ca-config-version": "25879", "console.openshift.io/trusted-ca-config-version": "25886", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "9bbdf5bbf" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4888da710eab3d218b897e02aca4d7dd3d9b6e2772c274f7e7c3a5e6e0581ac2", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "10644", "console.openshift.io/console-config-version": "29479", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4888da710eab3d218b897e02aca4d7dd3d9b6e2772c274f7e7c3a5e6e0581ac2", "console.openshift.io/infrastructure-config-version": "538", "console.openshift.io/oauth-secret-version": "7935", "console.openshift.io/proxy-config-version": "40939", "console.openshift.io/service-ca-config-version": "25880", "console.openshift.io/trusted-ca-config-version": "41066", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "6", "operator.openshift.io/spec-hash": "eff3cf15db7a78ba4295e90979ca7180b1840252b840ef06b6db8a7f62c57240" }, "creationTimestamp": "2026-04-28T12:57:58Z", "generation": 1, "labels": { "app": "console", "component": "ui", "pod-template-hash": "ff58d6574" }, "name": "console-ff58d6574", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "e06780d1-b848-4528-851b-d6fc5888135c" } ], "resourceVersion": "48710", "uid": "0cb2f996-7be4-4fd7-84c5-8dc9d2f2910c" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "ff58d6574" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "10644", "console.openshift.io/console-config-version": "29479", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4888da710eab3d218b897e02aca4d7dd3d9b6e2772c274f7e7c3a5e6e0581ac2", "console.openshift.io/infrastructure-config-version": "538", "console.openshift.io/oauth-secret-version": "7935", "console.openshift.io/proxy-config-version": "40939", "console.openshift.io/service-ca-config-version": "25880", "console.openshift.io/trusted-ca-config-version": "41066", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "ff58d6574" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4888da710eab3d218b897e02aca4d7dd3d9b6e2772c274f7e7c3a5e6e0581ac2", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "dfdca6167dedab5aeda6728b3d27b8707613af3fc0d002edfd27c84058100aa1" }, "creationTimestamp": "2026-04-28T12:23:19Z", "generation": 1, "labels": { "app": "console", "component": "downloads", "pod-template-hash": "76bc67d54f" }, "name": "downloads-76bc67d54f", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "downloads", "uid": "9eb23303-5e76-4067-921c-cc2bc83c70d0" } ], "resourceVersion": "48089", "uid": "f4344d0c-c90c-46b7-bcc9-da699bcf67cf" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "console", "component": "downloads", "pod-template-hash": "76bc67d54f" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "downloads", "pod-template-hash": "76bc67d54f" }, "name": "downloads" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "downloads" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "-c", "cat \u003c\u003cEOF \u003e\u003e/tmp/serve.py\nimport errno, http.server, os, re, signal, socket, sys, tarfile, tempfile, threading, time, zipfile\n\nsignal.signal(signal.SIGTERM, lambda signum, frame: sys.exit(0))\n\ndef write_index(path, message):\n with open(path, 'wb') as f:\n f.write('\\n'.join([\n '\u003c!doctype html\u003e',\n '\u003chtml lang=\"en\"\u003e',\n '\u003chead\u003e',\n ' \u003cmeta charset=\"utf-8\"\u003e',\n '\u003c/head\u003e',\n '\u003cbody\u003e',\n ' {}'.format(message),\n '\u003c/body\u003e',\n '\u003c/html\u003e',\n '',\n ]).encode('utf-8'))\n\n# Launch multiple listeners as threads\nclass Thread(threading.Thread):\n def __init__(self, i, socket):\n threading.Thread.__init__(self)\n self.i = i\n self.socket = socket\n self.daemon = True\n self.start()\n\n def run(self):\n server = http.server.SimpleHTTPRequestHandler\n server.server_version = \"OpenShift Downloads Server\"\n server.sys_version = \"\"\n httpd = http.server.HTTPServer(addr, server, False)\n\n # Prevent the HTTP server from re-binding every handler.\n # https://stackoverflow.com/questions/46210672/\n httpd.socket = self.socket\n httpd.server_bind = self.server_close = lambda self: None\n\n httpd.serve_forever()\n\ntemp_dir = tempfile.mkdtemp()\nprint('serving from {}'.format(temp_dir))\nos.chdir(temp_dir)\nfor arch in ['amd64', 'arm64', 'ppc64le', 's390x']:\n os.mkdir(arch)\ncontent = ['\u003ca href=\"oc-license\"\u003elicense\u003c/a\u003e']\nos.symlink('/usr/share/openshift/LICENSE', 'oc-license')\n\nfor arch, operating_system, path in [\n ('amd64', 'linux', '/usr/share/openshift/linux_amd64/oc'),\n ('amd64', 'mac', '/usr/share/openshift/mac/oc'),\n ('amd64', 'windows', '/usr/share/openshift/windows/oc.exe'),\n ('arm64', 'linux', '/usr/share/openshift/linux_arm64/oc'),\n ('arm64', 'mac', '/usr/share/openshift/mac_arm64/oc'),\n ('ppc64le', 'linux', '/usr/share/openshift/linux_ppc64le/oc'),\n ('s390x', 'linux', '/usr/share/openshift/linux_s390x/oc'),\n ]:\n basename = os.path.basename(path)\n target_path = os.path.join(arch, operating_system, basename)\n os.mkdir(os.path.join(arch, operating_system))\n os.symlink(path, target_path)\n base_root, _ = os.path.splitext(basename)\n archive_path_root = os.path.join(arch, operating_system, base_root)\n with tarfile.open('{}.tar'.format(archive_path_root), 'w') as tar:\n tar.add(path, basename)\n with zipfile.ZipFile('{}.zip'.format(archive_path_root), 'w') as zip:\n zip.write(path, basename)\n content.append(\n '\u003ca href=\"{0}\"\u003eoc ({1} {2})\u003c/a\u003e (\u003ca href=\"{3}.tar\"\u003etar\u003c/a\u003e \u003ca href=\"{3}.zip\"\u003ezip\u003c/a\u003e)'.format(\n target_path, arch, operating_system, archive_path_root\n )\n )\n\nfor root, directories, filenames in os.walk(temp_dir):\n root_link = os.path.relpath(temp_dir, os.path.join(root, 'child')).replace(os.path.sep, '/')\n for directory in directories:\n write_index(\n path=os.path.join(root, directory, 'index.html'),\n message='\u003cp\u003eDirectory listings are disabled. See \u003ca href=\"{}\"\u003ehere\u003c/a\u003e for available content.\u003c/p\u003e'.format(root_link),\n )\n\nwrite_index(\n path=os.path.join(temp_dir, 'index.html'),\n message='\\n'.join(\n ['\u003cul\u003e'] +\n [' \u003cli\u003e{}\u003c/li\u003e'.format(entry) for entry in content] +\n ['\u003c/ul\u003e']\n ),\n)\n\n# Create socket\n# IPv6 should handle IPv4 passively so long as it is not bound to a\n# specific address or set to IPv6_ONLY\n# https://stackoverflow.com/questions/25817848/python-3-does-http-server-support-ipv6\ntry:\n addr = ('::', 8080)\n sock = socket.socket(socket.AF_INET6, socket.SOCK_STREAM)\nexcept socket.error as err:\n # errno.EAFNOSUPPORT is \"socket.error: [Errno 97] Address family not supported by protocol\"\n # When IPv6 is disabled, socket will bind using IPv4.\n if err.errno == errno.EAFNOSUPPORT:\n addr = ('', 8080)\n sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)\n else:\n raise \nsock.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)\nsock.bind(addr)\nsock.listen(5)\n\n[Thread(i, socket=sock) for i in range(100)]\ntime.sleep(9e9)\nEOF\nexec python3 /tmp/serve.py\n" ], "command": [ "/bin/sh" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:54bcffc0ae940df16e95936d364fa3226dd2c0aaa0aab7935e041bbe7c0b63ec", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "download-server", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 0, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:26Z", "generation": 1, "labels": { "app": "openshift-controller-manager-operator", "pod-template-hash": "5dff68d557" }, "name": "openshift-controller-manager-operator-5dff68d557", "namespace": "openshift-controller-manager-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-controller-manager-operator", "uid": "5e8b4750-1e59-4aff-8653-a4eda218b008" } ], "resourceVersion": "37724", "uid": "132f4081-5948-4446-887a-cbe0f288fe4d" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "openshift-controller-manager-operator", "pod-template-hash": "5dff68d557" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-operator", "pod-template-hash": "5dff68d557" }, "name": "openshift-controller-manager-operator" }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml" ], "command": [ "cluster-openshift-controller-manager-operator", "operator" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.20.10" }, { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:af1eb150167fac7cd4c9f922a5e366b60dc70ba8d99f2e25aa53459d40493c3e" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.20.10" }, { "name": "ROUTE_CONTROLLER_MANAGER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:64d96b8072428631c2724d434a39aa50ad60d03dce28de258bd1f78191982a81" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:80a585dd4aab4c34d6e5ce3373512617fbc28d48e09c190b75f953ffec9f2aad", "imagePullPolicy": "IfNotPresent", "name": "openshift-controller-manager-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-operator", "serviceAccountName": "openshift-controller-manager-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "openshift-controller-manager-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "openshift-controller-manager-operator-config" }, "name": "config" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "8", "operator.openshift.io/spec-hash": "58580cb6d5a8ba11d60f7225ec043392f0679019b87aa60a44fdc7c1a2a46e91", "release.openshift.io/version": "4.20.10" }, "creationTimestamp": "2026-04-28T12:57:58Z", "generation": 3, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "549cdc9d96" }, "name": "controller-manager-549cdc9d96", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "bcedc524-790d-4f42-90b7-c590c7a4aede" } ], "resourceVersion": "41412", "uid": "2dcccd78-9438-4482-8837-9eaca041312f" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "549cdc9d96" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "19869", "configmaps/config": "40953", "configmaps/openshift-global-ca": "6407", "configmaps/openshift-service-ca": "7071", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "3", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "549cdc9d96" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:af1eb150167fac7cd4c9f922a5e366b60dc70ba8d99f2e25aa53459d40493c3e", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "7", "operator.openshift.io/spec-hash": "8d392c42e69eadf8d5b8906ec097baa6387580ff7eee6b6261596d7a3a56bba5", "release.openshift.io/version": "4.20.10" }, "creationTimestamp": "2026-04-28T12:34:45Z", "generation": 7, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "5d695bd89d" }, "name": "controller-manager-5d695bd89d", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "bcedc524-790d-4f42-90b7-c590c7a4aede" } ], "resourceVersion": "41823", "uid": "c4d16f16-7260-45c9-a603-fe5cbf15069f" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "5d695bd89d" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "19869", "configmaps/config": "22421", "configmaps/openshift-global-ca": "6407", "configmaps/openshift-service-ca": "7071", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "3", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "5d695bd89d" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:af1eb150167fac7cd4c9f922a5e366b60dc70ba8d99f2e25aa53459d40493c3e", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "9", "operator.openshift.io/spec-hash": "58ae07324b97166667f098cbea72164e2393f275da278d4f041a03e51826abc2", "release.openshift.io/version": "4.20.10" }, "creationTimestamp": "2026-04-28T12:58:00Z", "generation": 4, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "5dd5dcf8fd" }, "name": "controller-manager-5dd5dcf8fd", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "bcedc524-790d-4f42-90b7-c590c7a4aede" } ], "resourceVersion": "44008", "uid": "970f95f2-4f78-4868-8259-1012b7a8711e" }, "spec": { "replicas": 3, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "5dd5dcf8fd" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "19869", "configmaps/config": "41330", "configmaps/openshift-global-ca": "41132", "configmaps/openshift-service-ca": "7071", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "3", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "5dd5dcf8fd" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:af1eb150167fac7cd4c9f922a5e366b60dc70ba8d99f2e25aa53459d40493c3e", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "availableReplicas": 3, "fullyLabeledReplicas": 3, "observedGeneration": 4, "readyReplicas": 3, "replicas": 3 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "6", "operator.openshift.io/spec-hash": "9ccfff3e2baf5196329f30a7af9a06d4b6dd0117c4bd74aa1cbee4cfb5c318f5", "release.openshift.io/version": "4.20.10" }, "creationTimestamp": "2026-04-28T12:34:24Z", "generation": 7, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "655999c65b" }, "name": "controller-manager-655999c65b", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "bcedc524-790d-4f42-90b7-c590c7a4aede" } ], "resourceVersion": "22743", "uid": "ffbf1e30-d449-4ae3-bf24-303c10e48359" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "655999c65b" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "19869", "configmaps/config": "20480", "configmaps/openshift-global-ca": "6407", "configmaps/openshift-service-ca": "7071", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "655999c65b" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:af1eb150167fac7cd4c9f922a5e366b60dc70ba8d99f2e25aa53459d40493c3e", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "2", "operator.openshift.io/spec-hash": "88046602b20ebc23f758cb8fc96b7e8193dfcaf2af159fa2f967a51208c8f053", "release.openshift.io/version": "4.20.10" }, "creationTimestamp": "2026-04-28T12:23:01Z", "generation": 3, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "6c78d98c4b" }, "name": "controller-manager-6c78d98c4b", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "bcedc524-790d-4f42-90b7-c590c7a4aede" } ], "resourceVersion": "19893", "uid": "60bfabb4-87cd-458b-bbec-3deeaf4d4404" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "6c78d98c4b" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "0", "configmaps/config": "6400", "configmaps/openshift-global-ca": "6403", "configmaps/openshift-service-ca": "6402", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "6c78d98c4b" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:af1eb150167fac7cd4c9f922a5e366b60dc70ba8d99f2e25aa53459d40493c3e", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "503e752806f25d4f8932ae9cf91cc8120aab50a41fc335855ce9fedca47630ad", "release.openshift.io/version": "4.20.10" }, "creationTimestamp": "2026-04-28T12:22:59Z", "generation": 4, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "768969f78" }, "name": "controller-manager-768969f78", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "bcedc524-790d-4f42-90b7-c590c7a4aede" } ], "resourceVersion": "7726", "uid": "43300c9e-a877-4800-87da-7b9e452ec9a2" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "768969f78" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "0", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "1", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "768969f78" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:af1eb150167fac7cd4c9f922a5e366b60dc70ba8d99f2e25aa53459d40493c3e", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "5", "operator.openshift.io/spec-hash": "7c6d53d3554e5c136edd7e547c4ffa87f29e7392fe6735434f777509c5b4e4da", "release.openshift.io/version": "4.20.10" }, "creationTimestamp": "2026-04-28T12:34:05Z", "generation": 7, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "798765c868" }, "name": "controller-manager-798765c868", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "bcedc524-790d-4f42-90b7-c590c7a4aede" } ], "resourceVersion": "21330", "uid": "9ad21a42-f3aa-4b79-916d-bab1d09f53a7" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "798765c868" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "19869", "configmaps/config": "7702", "configmaps/openshift-global-ca": "6407", "configmaps/openshift-service-ca": "7071", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "798765c868" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:af1eb150167fac7cd4c9f922a5e366b60dc70ba8d99f2e25aa53459d40493c3e", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "4", "operator.openshift.io/spec-hash": "19f40daa6c3ed3e692ff8b64b9de715394122812a7576542770c5943dea9ed85", "release.openshift.io/version": "4.20.10" }, "creationTimestamp": "2026-04-28T12:23:19Z", "generation": 3, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "7fd7b46d7c" }, "name": "controller-manager-7fd7b46d7c", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "bcedc524-790d-4f42-90b7-c590c7a4aede" } ], "resourceVersion": "20176", "uid": "8bdc067e-561a-4dc5-8a3c-252bc017b24e" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "7fd7b46d7c" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "0", "configmaps/config": "7702", "configmaps/openshift-global-ca": "6407", "configmaps/openshift-service-ca": "7071", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "7fd7b46d7c" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:af1eb150167fac7cd4c9f922a5e366b60dc70ba8d99f2e25aa53459d40493c3e", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "3", "operator.openshift.io/spec-hash": "af73d9dc14745272cd638da17401e2d667b7238030ba6debf6a4a8786fb43d32", "release.openshift.io/version": "4.20.10" }, "creationTimestamp": "2026-04-28T12:23:02Z", "generation": 3, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "df4948db4" }, "name": "controller-manager-df4948db4", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "bcedc524-790d-4f42-90b7-c590c7a4aede" } ], "resourceVersion": "20032", "uid": "2a0312ce-4a5a-44db-aaa0-603c85df34b3" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "df4948db4" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "0", "configmaps/config": "6600", "configmaps/openshift-global-ca": "6407", "configmaps/openshift-service-ca": "6402", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "df4948db4" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:af1eb150167fac7cd4c9f922a5e366b60dc70ba8d99f2e25aa53459d40493c3e", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:25Z", "generation": 1, "labels": { "name": "dns-operator", "pod-template-hash": "667796f4c5" }, "name": "dns-operator-667796f4c5", "namespace": "openshift-dns-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "dns-operator", "uid": "73d0b5f8-4434-4f43-b7a9-0247be49acb9" } ], "resourceVersion": "37730", "uid": "af908359-0d04-474f-9b4a-3f415f6a4f89" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "dns-operator", "pod-template-hash": "667796f4c5" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "dns-operator", "pod-template-hash": "667796f4c5" } }, "spec": { "containers": [ { "command": [ "dns-operator" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.20.10" }, { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7dda9a36fa7d08aba04d9e9d63a9728c1cf19a36c22e70a395f9fe82ab7c7c67" }, { "name": "OPENSHIFT_CLI_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:19548cb9eb6ac87a350ba9026eaedfdfa7befed3bb5df8fadd30294c95b15ab0" }, { "name": "KUBE_RBAC_PROXY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ebbb5bead759f4c4ab443f449daca8a30d0db4e72740173befb8195879d9a13d", "imagePullPolicy": "IfNotPresent", "name": "dns-operator", "resources": { "requests": { "cpu": "10m", "memory": "29Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp-dir" } ] }, { "args": [ "--logtostderr", "--secure-listen-address=:9393", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", "--upstream=http://127.0.0.1:60000/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9393, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "40Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-tls", "readOnly": true }, { "mountPath": "/tmp", "name": "tmp-dir" } ] } ], "dnsPolicy": "Default", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "dns-operator", "serviceAccountName": "dns-operator", "terminationGracePeriodSeconds": 2, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "metrics-tls", "secret": { "defaultMode": 420, "secretName": "metrics-tls" } }, { "emptyDir": {}, "name": "tmp-dir" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:28Z", "generation": 1, "labels": { "app": "etcd-operator", "pod-template-hash": "fbbb7cf9" }, "name": "etcd-operator-fbbb7cf9", "namespace": "openshift-etcd-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "etcd-operator", "uid": "bc22e6c9-80a5-483d-af1e-5eb00c566472" } ], "resourceVersion": "37756", "uid": "89e9b626-ff05-49ae-b846-c0e1ad956215" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "etcd-operator", "pod-template-hash": "fbbb7cf9" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "etcd-operator", "pod-template-hash": "fbbb7cf9" }, "name": "etcd-operator" }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "--terminate-on-files=/var/run/secrets/serving-cert/tls.crt", "--terminate-on-files=/var/run/secrets/serving-cert/tls.key", "--terminate-on-files=/var/run/secrets/etcd-client/tls.crt", "--terminate-on-files=/var/run/secrets/etcd-client/tls.key", "--terminate-on-files=/var/run/configmaps/etcd-ca/ca-bundle.crt", "--terminate-on-files=/var/run/configmaps/etcd-service-ca/service-ca.crt" ], "command": [ "cluster-etcd-operator", "operator" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4e75321a047a82ea1873a9518cc33a9700e2d18fbc23a4f77a67b39a066fa776" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f668de2ef5b91dc1634734960b9ba475070c2e6640da0a290baf68f2aea2f439" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.20.10" }, { "name": "OPERAND_IMAGE_VERSION", "value": "4.20.10" }, { "name": "OPENSHIFT_PROFILE", "value": "web" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f668de2ef5b91dc1634734960b9ba475070c2e6640da0a290baf68f2aea2f439", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 60, "successThreshold": 1, "timeoutSeconds": 30 }, "name": "etcd-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/configmaps/etcd-ca", "name": "etcd-ca" }, { "mountPath": "/var/run/configmaps/etcd-service-ca", "name": "etcd-service-ca" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/tmp", "name": "tmp-dir" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "etcd-operator", "serviceAccountName": "etcd-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "etcd-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "etcd-operator-config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "etcd-ca-bundle" }, "name": "etcd-ca" }, { "configMap": { "defaultMode": 420, "name": "etcd-service-ca-bundle" }, "name": "etcd-service-ca" }, { "name": "etcd-client", "secret": { "defaultMode": 420, "secretName": "etcd-client" } }, { "emptyDir": {}, "name": "tmp-dir" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:08Z", "generation": 1, "labels": { "app.kubernetes.io/name": "cluster", "openshift.io/required-scc": "restricted-v2", "pod-template-hash": "778f7d6bfb" }, "name": "cluster-778f7d6bfb", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster", "uid": "b79b5cee-2640-42c6-848d-a507e3d21c16" } ], "resourceVersion": "46082", "uid": "764ac58a-c29d-4fb8-b09c-3a2e737ba53f" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "cluster", "pod-template-hash": "778f7d6bfb" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "cluster", "openshift.io/required-scc": "restricted-v2", "pod-template-hash": "778f7d6bfb" } }, "spec": { "containers": [ { "env": [ { "name": "INSECURE", "value": "true" } ], "image": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:3cb24a8c10d7bb3664b4b379eea192c5212470c534f37429802d82306500514f", "imagePullPolicy": "IfNotPresent", "name": "cluster", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/gitops/ssl", "name": "backend-ssl", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "gitops-service-cluster", "serviceAccountName": "gitops-service-cluster", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "backend-ssl", "secret": { "defaultMode": 420, "secretName": "cluster" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:08Z", "generation": 1, "labels": { "app": "gitops-plugin", "pod-template-hash": "5576bd9658" }, "name": "gitops-plugin-5576bd9658", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "gitops-plugin", "uid": "c5f61bf1-7f07-47bd-824a-bba8c560c7f7" } ], "resourceVersion": "46981", "uid": "ba8bec11-16c6-446d-993d-76ad74566077" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "gitops-plugin", "pod-template-hash": "5576bd9658" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "gitops-plugin", "pod-template-hash": "5576bd9658" } }, "spec": { "containers": [ { "image": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:247e31fbbaf50acd865432bf5561ba4d7a46ed397a2ca06116d9f77f70745b01", "imagePullPolicy": "IfNotPresent", "name": "gitops-plugin", "ports": [ { "containerPort": 9001, "name": "http", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/httpd-ssl/certs/tls.crt", "name": "console-serving-cert", "readOnly": true, "subPath": "tls.crt" }, { "mountPath": "/etc/httpd-ssl/private/tls.key", "name": "console-serving-cert", "readOnly": true, "subPath": "tls.key" }, { "mountPath": "/etc/httpd-cfg/httpd.conf", "name": "httpd-cfg", "readOnly": true, "subPath": "httpd.conf" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "httpd-cfg" }, "name": "httpd-cfg" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:10Z", "generation": 1, "labels": { "app.kubernetes.io/name": "openshift-gitops-applicationset-controller", "pod-template-hash": "575c7f9684" }, "name": "openshift-gitops-applicationset-controller-575c7f9684", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-gitops-applicationset-controller", "uid": "f562fafa-843f-45be-9450-7463300dd21c" } ], "resourceVersion": "46424", "uid": "31ef18b2-6469-47fd-a483-b562fbfcb80f" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "openshift-gitops-applicationset-controller", "pod-template-hash": "575c7f9684" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "openshift-gitops-applicationset-controller", "pod-template-hash": "575c7f9684" } }, "spec": { "containers": [ { "command": [ "entrypoint.sh", "argocd-applicationset-controller", "--argocd-repo-server", "openshift-gitops-repo-server.openshift-gitops.svc.cluster.local:8081", "--loglevel", "info", "--logformat", "text" ], "env": [ { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77", "imagePullPolicy": "IfNotPresent", "name": "argocd-applicationset-controller", "ports": [ { "containerPort": 7000, "name": "webhook", "protocol": "TCP" }, { "containerPort": 8080, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "2", "memory": "1Gi" }, "requests": { "cpu": "250m", "memory": "512Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/ssh", "name": "ssh-known-hosts" }, { "mountPath": "/app/config/tls", "name": "tls-certs" }, { "mountPath": "/app/config/gpg/source", "name": "gpg-keys" }, { "mountPath": "/app/config/gpg/keys", "name": "gpg-keyring" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-gitops-applicationset-controller", "serviceAccountName": "openshift-gitops-applicationset-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "argocd-ssh-known-hosts-cm" }, "name": "ssh-known-hosts" }, { "configMap": { "defaultMode": 420, "name": "argocd-tls-certs-cm" }, "name": "tls-certs" }, { "configMap": { "defaultMode": 420, "name": "argocd-gpg-keys-cm" }, "name": "gpg-keys" }, { "emptyDir": {}, "name": "gpg-keyring" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-04-28T12:59:10Z", "generation": 1, "labels": { "app.kubernetes.io/name": "openshift-gitops-dex-server", "dex.config.changed": "04282026-125926-UTC", "pod-template-hash": "566d8b6ff8" }, "name": "openshift-gitops-dex-server-566d8b6ff8", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-gitops-dex-server", "uid": "a9329fdb-33d2-465b-a10c-209d2409f6ae" } ], "resourceVersion": "47193", "uid": "97d9d10b-f50c-4afd-8beb-2c414a52da96" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "openshift-gitops-dex-server", "pod-template-hash": "566d8b6ff8" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "openshift-gitops-dex-server", "dex.config.changed": "04282026-125926-UTC", "pod-template-hash": "566d8b6ff8" } }, "spec": { "containers": [ { "command": [ "/shared/argocd-dex", "rundex" ], "image": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:83636e08a79df87cb99ad9b91553cb6cffd81166113c4b6952bf1d419d43e26a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/live", "port": 5558, "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "dex", "ports": [ { "containerPort": 5556, "name": "http", "protocol": "TCP" }, { "containerPort": 5557, "name": "grpc", "protocol": "TCP" }, { "containerPort": 5558, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "static-files" }, { "mountPath": "/tmp", "name": "dexconfig" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "cp", "-n", "/usr/local/bin/argocd", "/shared/argocd-dex" ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77", "imagePullPolicy": "IfNotPresent", "name": "copyutil", "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "static-files" }, { "mountPath": "/tmp", "name": "dexconfig" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-gitops-argocd-dex-server", "serviceAccountName": "openshift-gitops-argocd-dex-server", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "static-files" }, { "emptyDir": {}, "name": "dexconfig" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:08Z", "generation": 2, "labels": { "app.kubernetes.io/name": "openshift-gitops-dex-server", "pod-template-hash": "68dd6d9b46" }, "name": "openshift-gitops-dex-server-68dd6d9b46", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-gitops-dex-server", "uid": "a9329fdb-33d2-465b-a10c-209d2409f6ae" } ], "resourceVersion": "47205", "uid": "dd0dfa8b-e617-4ed6-a692-def6cb6dd1c6" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/name": "openshift-gitops-dex-server", "pod-template-hash": "68dd6d9b46" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "openshift-gitops-dex-server", "pod-template-hash": "68dd6d9b46" } }, "spec": { "containers": [ { "command": [ "/shared/argocd-dex", "rundex" ], "image": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:83636e08a79df87cb99ad9b91553cb6cffd81166113c4b6952bf1d419d43e26a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/live", "port": 5558, "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "dex", "ports": [ { "containerPort": 5556, "name": "http", "protocol": "TCP" }, { "containerPort": 5557, "name": "grpc", "protocol": "TCP" }, { "containerPort": 5558, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "static-files" }, { "mountPath": "/tmp", "name": "dexconfig" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "cp", "-n", "/usr/local/bin/argocd", "/shared/argocd-dex" ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77", "imagePullPolicy": "IfNotPresent", "name": "copyutil", "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "static-files" }, { "mountPath": "/tmp", "name": "dexconfig" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-gitops-argocd-dex-server", "serviceAccountName": "openshift-gitops-argocd-dex-server", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "static-files" }, { "emptyDir": {}, "name": "dexconfig" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:09Z", "generation": 1, "labels": { "app.kubernetes.io/name": "openshift-gitops-redis", "pod-template-hash": "68469975f8" }, "name": "openshift-gitops-redis-68469975f8", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-gitops-redis", "uid": "ffef3e2d-68c8-4a7a-910f-f48f304ead5e" } ], "resourceVersion": "46983", "uid": "fe957583-1cc6-4c60-860d-a627ffc68f34" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "openshift-gitops-redis", "pod-template-hash": "68469975f8" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "openshift-gitops-redis", "pod-template-hash": "68469975f8" } }, "spec": { "containers": [ { "args": [ "redis-server", "--protected-mode", "no", "--save", "", "--appendonly", "no", "--requirepass $(REDIS_PASSWORD)" ], "env": [ { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "admin.password", "name": "openshift-gitops-redis-initial-password" } } } ], "image": "registry.redhat.io/rhel9/redis-7@sha256:3d31c0cfaf4219f5bd1c52882b603215d1cb4aaef5b8d1a128d0174e090f96f3", "imagePullPolicy": "IfNotPresent", "name": "redis", "ports": [ { "containerPort": 6379, "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/redis/tls", "name": "argocd-operator-redis-tls" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-gitops-argocd-redis", "serviceAccountName": "openshift-gitops-argocd-redis", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "argocd-operator-redis-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-operator-redis-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:09Z", "generation": 1, "labels": { "app.kubernetes.io/name": "openshift-gitops-repo-server", "pod-template-hash": "59b57bbdcd" }, "name": "openshift-gitops-repo-server-59b57bbdcd", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-gitops-repo-server", "uid": "d9389544-711b-4951-88b4-4607a9e60d79" } ], "resourceVersion": "47452", "uid": "f0029aee-c49a-4dd7-bf58-6a9e1816c4e9" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "openshift-gitops-repo-server", "pod-template-hash": "59b57bbdcd" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "openshift-gitops-repo-server", "pod-template-hash": "59b57bbdcd" } }, "spec": { "automountServiceAccountToken": false, "containers": [ { "command": [ "uid_entrypoint.sh", "argocd-repo-server", "--redis", "openshift-gitops-redis.openshift-gitops.svc.cluster.local:6379", "--loglevel", "info", "--logformat", "text" ], "env": [ { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "admin.password", "name": "openshift-gitops-redis-initial-password" } } } ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "name": "argocd-repo-server", "ports": [ { "containerPort": 8081, "name": "server", "protocol": "TCP" }, { "containerPort": 8084, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "1Gi" }, "requests": { "cpu": "250m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/ssh", "name": "ssh-known-hosts" }, { "mountPath": "/app/config/tls", "name": "tls-certs" }, { "mountPath": "/app/config/gpg/source", "name": "gpg-keys" }, { "mountPath": "/app/config/gpg/keys", "name": "gpg-keyring" }, { "mountPath": "/app/config/reposerver/tls", "name": "argocd-repo-server-tls" }, { "mountPath": "/app/config/reposerver/tls/redis", "name": "argocd-operator-redis-tls" }, { "mountPath": "/home/argocd/cmp-server/plugins", "name": "plugins" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "cp", "-n", "/usr/local/bin/argocd-cmp-server", "/var/run/argocd/argocd-cmp-server" ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77", "imagePullPolicy": "IfNotPresent", "name": "copyutil", "resources": { "limits": { "cpu": "1", "memory": "1Gi" }, "requests": { "cpu": "250m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/argocd", "name": "var-files" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "argocd-ssh-known-hosts-cm" }, "name": "ssh-known-hosts" }, { "configMap": { "defaultMode": 420, "name": "argocd-tls-certs-cm" }, "name": "tls-certs" }, { "configMap": { "defaultMode": 420, "name": "argocd-gpg-keys-cm" }, "name": "gpg-keys" }, { "emptyDir": {}, "name": "gpg-keyring" }, { "name": "argocd-repo-server-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-repo-server-tls" } }, { "name": "argocd-operator-redis-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-operator-redis-tls" } }, { "emptyDir": {}, "name": "var-files" }, { "emptyDir": {}, "name": "plugins" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:09Z", "generation": 1, "labels": { "app.kubernetes.io/name": "openshift-gitops-server", "pod-template-hash": "866fb7d6fd" }, "name": "openshift-gitops-server-866fb7d6fd", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-gitops-server", "uid": "aef408cf-2ac5-48ec-ba53-3d85bdbdf489" } ], "resourceVersion": "47910", "uid": "e9adf615-c9ac-47e6-90cb-08379dfd10e7" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "openshift-gitops-server", "pod-template-hash": "866fb7d6fd" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "openshift-gitops-server", "pod-template-hash": "866fb7d6fd" } }, "spec": { "containers": [ { "command": [ "argocd-server", "--staticassets", "/shared/app", "--dex-server", "https://openshift-gitops-dex-server.openshift-gitops.svc.cluster.local:5556", "--repo-server", "openshift-gitops-repo-server.openshift-gitops.svc.cluster.local:8081", "--redis", "openshift-gitops-redis.openshift-gitops.svc.cluster.local:6379", "--loglevel", "info", "--logformat", "text" ], "env": [ { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "admin.password", "name": "openshift-gitops-redis-initial-password" } } } ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 3, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "argocd-server", "ports": [ { "containerPort": 8080, "protocol": "TCP" }, { "containerPort": 8083, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 3, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "125m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/ssh", "name": "ssh-known-hosts" }, { "mountPath": "/app/config/tls", "name": "tls-certs" }, { "mountPath": "/app/config/server/tls", "name": "argocd-repo-server-tls" }, { "mountPath": "/app/config/server/tls/redis", "name": "argocd-operator-redis-tls" }, { "mountPath": "/home/argocd", "name": "plugins-home" }, { "mountPath": "/home/argocd/params", "name": "argocd-cmd-params-cm" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-gitops-argocd-server", "serviceAccountName": "openshift-gitops-argocd-server", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "argocd-ssh-known-hosts-cm" }, "name": "ssh-known-hosts" }, { "configMap": { "defaultMode": 420, "name": "argocd-tls-certs-cm" }, "name": "tls-certs" }, { "name": "argocd-repo-server-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-repo-server-tls" } }, { "name": "argocd-operator-redis-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-operator-redis-tls" } }, { "emptyDir": {}, "name": "plugins-home" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "server.profile.enabled", "path": "profiler.enabled" } ], "name": "argocd-cmd-params-cm", "optional": true }, "name": "argocd-cmd-params-cm" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry", "config.openshift.io/inject-proxy": "cluster-image-registry-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:42Z", "generation": 1, "labels": { "name": "cluster-image-registry-operator", "pod-template-hash": "bc7657889" }, "name": "cluster-image-registry-operator-bc7657889", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-image-registry-operator", "uid": "863f246b-0e6f-4a8d-9b3b-1b213c83adfb" } ], "resourceVersion": "42313", "uid": "7e4a4631-b482-4b9f-bdce-1ec97164278e" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "cluster-image-registry-operator", "pod-template-hash": "bc7657889" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "cluster-image-registry-operator", "pod-template-hash": "bc7657889" } }, "spec": { "containers": [ { "args": [ "--files=/var/run/configmaps/trusted-ca/tls-ca-bundle.pem", "--files=/etc/secrets/tls.crt", "--files=/etc/secrets/tls.key" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.20.10" }, { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "cluster-image-registry-operator" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:66e1ae8b485d66b94ea7237a2e5920db1ecbbfc8adf855f75b328d32362df4e8" }, { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8e067469bb7292d3e5e255e39aff4363f948f20ceb96b5ac9e80aca5fe564dca" }, { "name": "IMAGE_PRUNER", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:19548cb9eb6ac87a350ba9026eaedfdfa7befed3bb5df8fadd30294c95b15ab0" }, { "name": "AZURE_ENVIRONMENT_FILEPATH", "value": "/tmp/azurestackcloud.json" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.20.10" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:66e1ae8b485d66b94ea7237a2e5920db1ecbbfc8adf855f75b328d32362df4e8", "imagePullPolicy": "IfNotPresent", "name": "cluster-image-registry-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/trusted-ca/", "name": "trusted-ca" }, { "mountPath": "/etc/secrets", "name": "image-registry-operator-tls" }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true }, { "mountPath": "/tmp", "name": "tmp" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "ca-trust-extracted-pem" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cluster-image-registry-operator", "serviceAccountName": "cluster-image-registry-operator", "shareProcessNamespace": false, "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "emptyDir": {}, "name": "tmp" }, { "name": "image-registry-operator-tls", "secret": { "defaultMode": 420, "secretName": "image-registry-operator-tls" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } }, { "emptyDir": {}, "name": "ca-trust-extracted-pem" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "2", "imageregistry.operator.openshift.io/checksum": "sha256:302ec4749c07bb8f00d91255c8585ff4da76d8fa78f0c8bb3b9230edbb9a354b", "operator.openshift.io/spec-hash": "b63c6647a8179c0529f6966d2479eca41ebbaa9f52604af4b6e6bf9fcb00175b", "release.openshift.io/version": "4.20.10" }, "creationTimestamp": "2026-04-28T12:34:31Z", "generation": 4, "labels": { "docker-registry": "default", "pod-template-hash": "5cf95db984" }, "name": "image-registry-5cf95db984", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "image-registry", "uid": "02f5fc5c-9885-4339-8d9b-a90439be4e37" } ], "resourceVersion": "42590", "uid": "6b568056-0f7e-4e86-9581-4d6404a173f2" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "docker-registry": "default", "pod-template-hash": "5cf95db984" } }, "template": { "metadata": { "annotations": { "imageregistry.operator.openshift.io/dependencies-checksum": "sha256:4f7c14275bd330f116d6ddd46a62a0e941d4e032dd329cbafa59815f6a67fab1", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "docker-registry": "default", "pod-template-hash": "5cf95db984" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "namespaces": [ "openshift-image-registry" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/sh", "-c", "mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem \u0026\u0026 update-ca-trust extract --output /etc/pki/ca-trust/extracted/ \u0026\u0026 exec /usr/bin/dockerregistry" ], "env": [ { "name": "REGISTRY_STORAGE", "value": "s3" }, { "name": "REGISTRY_STORAGE_S3_BUCKET", "value": "clusterpool420-54bqn-mkzlr-image-registry-us-east-1-thbpvlersv" }, { "name": "REGISTRY_STORAGE_S3_REGION", "value": "us-east-1" }, { "name": "REGISTRY_STORAGE_S3_ENCRYPT", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_FORCEPATHSTYLE", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH", "value": "/var/run/secrets/cloud/credentials" }, { "name": "REGISTRY_STORAGE_S3_USEDUALSTACK", "value": "true" }, { "name": "REGISTRY_HTTP_ADDR", "value": ":5000" }, { "name": "REGISTRY_HTTP_NET", "value": "tcp" }, { "name": "REGISTRY_HTTP_SECRET", "value": "b2ffa31d77bb0fdbd4889a480d9d9e9e3c619d45c7a9c56ae53c2c5810bc396358baf9139a5925098f2bc1d7a93873bb52571b627a0158a51cbe656f67996700" }, { "name": "REGISTRY_LOG_LEVEL", "value": "info" }, { "name": "REGISTRY_OPENSHIFT_QUOTA_ENABLED", "value": "true" }, { "name": "REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR", "value": "inmemory" }, { "name": "REGISTRY_STORAGE_DELETE_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL", "value": "10s" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD", "value": "1" }, { "name": "REGISTRY_OPENSHIFT_METRICS_ENABLED", "value": "true" }, { "name": "REGISTRY_OPENSHIFT_SERVER_ADDR", "value": "image-registry.openshift-image-registry.svc:5000" }, { "name": "REGISTRY_HTTP_TLS_CERTIFICATE", "value": "/etc/secrets/tls.crt" }, { "name": "REGISTRY_HTTP_TLS_KEY", "value": "/etc/secrets/tls.key" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8e067469bb7292d3e5e255e39aff4363f948f20ceb96b5ac9e80aca5fe564dca", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "registry", "ports": [ { "containerPort": 5000, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/cloud", "name": "image-registry-private-configuration", "readOnly": true }, { "mountPath": "/etc/secrets", "name": "registry-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted", "name": "ca-trust-extracted" }, { "mountPath": "/etc/pki/ca-trust/source/anchors", "name": "registry-certificates" }, { "mountPath": "/usr/share/pki/ca-trust-source", "name": "trusted-ca" }, { "mountPath": "/var/lib/kubelet/", "name": "installation-pull-secrets" }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 1000340000, "fsGroupChangePolicy": "OnRootMismatch" }, "serviceAccount": "registry", "serviceAccountName": "registry", "terminationGracePeriodSeconds": 55, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "kubernetes.io/hostname", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "node-role.kubernetes.io/worker", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "DoNotSchedule" } ], "volumes": [ { "name": "image-registry-private-configuration", "secret": { "defaultMode": 420, "optional": false, "secretName": "image-registry-private-configuration" } }, { "name": "registry-tls", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "image-registry-tls" } } ] } }, { "emptyDir": {}, "name": "ca-trust-extracted" }, { "configMap": { "defaultMode": 420, "name": "image-registry-certificates" }, "name": "registry-certificates" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "anchors/ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "name": "installation-pull-secrets", "secret": { "defaultMode": 420, "items": [ { "key": ".dockerconfigjson", "path": "config.json" } ], "optional": true, "secretName": "installation-pull-secrets" } }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "3", "imageregistry.operator.openshift.io/checksum": "sha256:279d1349bd7d6d71d778713b956d9bbc434d2d59599c7607bb4f0c40ba5a2116", "operator.openshift.io/spec-hash": "a4c3fdb1b847269c77ace7e9c276eb55f34689ade6dad23bd9b0c173c51f0197", "release.openshift.io/version": "4.20.10" }, "creationTimestamp": "2026-04-28T12:57:59Z", "generation": 2, "labels": { "docker-registry": "default", "pod-template-hash": "7bc85f45f7" }, "name": "image-registry-7bc85f45f7", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "image-registry", "uid": "02f5fc5c-9885-4339-8d9b-a90439be4e37" } ], "resourceVersion": "47442", "uid": "0c27efda-5b0c-4af7-a032-f91404e9bb0d" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "docker-registry": "default", "pod-template-hash": "7bc85f45f7" } }, "template": { "metadata": { "annotations": { "imageregistry.operator.openshift.io/dependencies-checksum": "sha256:8ff0f4d1eaf82a9fced7cef3a1958751e880b23cb9b2ba011bdfbae0fc4910e1", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "docker-registry": "default", "pod-template-hash": "7bc85f45f7" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "namespaces": [ "openshift-image-registry" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/sh", "-c", "mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem \u0026\u0026 update-ca-trust extract --output /etc/pki/ca-trust/extracted/ \u0026\u0026 exec /usr/bin/dockerregistry" ], "env": [ { "name": "REGISTRY_STORAGE", "value": "s3" }, { "name": "REGISTRY_STORAGE_S3_BUCKET", "value": "clusterpool420-54bqn-mkzlr-image-registry-us-east-1-thbpvlersv" }, { "name": "REGISTRY_STORAGE_S3_REGION", "value": "us-east-1" }, { "name": "REGISTRY_STORAGE_S3_ENCRYPT", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_FORCEPATHSTYLE", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH", "value": "/var/run/secrets/cloud/credentials" }, { "name": "REGISTRY_STORAGE_S3_USEDUALSTACK", "value": "true" }, { "name": "REGISTRY_HTTP_ADDR", "value": ":5000" }, { "name": "REGISTRY_HTTP_NET", "value": "tcp" }, { "name": "REGISTRY_HTTP_SECRET", "value": "b2ffa31d77bb0fdbd4889a480d9d9e9e3c619d45c7a9c56ae53c2c5810bc396358baf9139a5925098f2bc1d7a93873bb52571b627a0158a51cbe656f67996700" }, { "name": "REGISTRY_LOG_LEVEL", "value": "info" }, { "name": "REGISTRY_OPENSHIFT_QUOTA_ENABLED", "value": "true" }, { "name": "REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR", "value": "inmemory" }, { "name": "REGISTRY_STORAGE_DELETE_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL", "value": "10s" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD", "value": "1" }, { "name": "REGISTRY_OPENSHIFT_METRICS_ENABLED", "value": "true" }, { "name": "REGISTRY_OPENSHIFT_SERVER_ADDR", "value": "image-registry.openshift-image-registry.svc:5000" }, { "name": "REGISTRY_HTTP_TLS_CERTIFICATE", "value": "/etc/secrets/tls.crt" }, { "name": "REGISTRY_HTTP_TLS_KEY", "value": "/etc/secrets/tls.key" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8e067469bb7292d3e5e255e39aff4363f948f20ceb96b5ac9e80aca5fe564dca", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "registry", "ports": [ { "containerPort": 5000, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/cloud", "name": "image-registry-private-configuration", "readOnly": true }, { "mountPath": "/etc/secrets", "name": "registry-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted", "name": "ca-trust-extracted" }, { "mountPath": "/etc/pki/ca-trust/source/anchors", "name": "registry-certificates" }, { "mountPath": "/usr/share/pki/ca-trust-source", "name": "trusted-ca" }, { "mountPath": "/var/lib/kubelet/", "name": "installation-pull-secrets" }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 1000340000, "fsGroupChangePolicy": "OnRootMismatch" }, "serviceAccount": "registry", "serviceAccountName": "registry", "terminationGracePeriodSeconds": 55, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "kubernetes.io/hostname", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "node-role.kubernetes.io/worker", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "DoNotSchedule" } ], "volumes": [ { "name": "image-registry-private-configuration", "secret": { "defaultMode": 420, "optional": false, "secretName": "image-registry-private-configuration" } }, { "name": "registry-tls", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "image-registry-tls" } } ] } }, { "emptyDir": {}, "name": "ca-trust-extracted" }, { "configMap": { "defaultMode": 420, "name": "image-registry-certificates" }, "name": "registry-certificates" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "anchors/ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "name": "installation-pull-secrets", "secret": { "defaultMode": 420, "items": [ { "key": ".dockerconfigjson", "path": "config.json" } ], "optional": true, "secretName": "installation-pull-secrets" } }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 2, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "imageregistry.operator.openshift.io/checksum": "sha256:5de7a69208a1b6fdf3f810fed6e66ab15da7c2c5ee9f78d2a472ce5b727bc04c", "operator.openshift.io/spec-hash": "788e5f4ad918ca59bc6a4b30bb07ec9b09f8844a6f223aefd7e28784ce031c7d", "release.openshift.io/version": "4.20.10" }, "creationTimestamp": "2026-04-28T12:34:30Z", "generation": 3, "labels": { "docker-registry": "default", "pod-template-hash": "85d4d7fdc7" }, "name": "image-registry-85d4d7fdc7", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "image-registry", "uid": "02f5fc5c-9885-4339-8d9b-a90439be4e37" } ], "resourceVersion": "24853", "uid": "e4073fa4-f2c7-4fb1-91be-cd507a656711" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "docker-registry": "default", "pod-template-hash": "85d4d7fdc7" } }, "template": { "metadata": { "annotations": { "imageregistry.operator.openshift.io/dependencies-checksum": "sha256:0d1299dafc987cd440d830eaecee9b33934b5d3cd6dc2936cc98401e1f18e64b", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "docker-registry": "default", "pod-template-hash": "85d4d7fdc7" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "namespaces": [ "openshift-image-registry" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/sh", "-c", "mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem \u0026\u0026 update-ca-trust extract --output /etc/pki/ca-trust/extracted/ \u0026\u0026 exec /usr/bin/dockerregistry" ], "env": [ { "name": "REGISTRY_STORAGE", "value": "s3" }, { "name": "REGISTRY_STORAGE_S3_BUCKET", "value": "clusterpool420-54bqn-mkzlr-image-registry-us-east-1-thbpvlersv" }, { "name": "REGISTRY_STORAGE_S3_REGION", "value": "us-east-1" }, { "name": "REGISTRY_STORAGE_S3_ENCRYPT", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_FORCEPATHSTYLE", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH", "value": "/var/run/secrets/cloud/credentials" }, { "name": "REGISTRY_STORAGE_S3_USEDUALSTACK", "value": "true" }, { "name": "REGISTRY_HTTP_ADDR", "value": ":5000" }, { "name": "REGISTRY_HTTP_NET", "value": "tcp" }, { "name": "REGISTRY_HTTP_SECRET", "value": "b2ffa31d77bb0fdbd4889a480d9d9e9e3c619d45c7a9c56ae53c2c5810bc396358baf9139a5925098f2bc1d7a93873bb52571b627a0158a51cbe656f67996700" }, { "name": "REGISTRY_LOG_LEVEL", "value": "info" }, { "name": "REGISTRY_OPENSHIFT_QUOTA_ENABLED", "value": "true" }, { "name": "REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR", "value": "inmemory" }, { "name": "REGISTRY_STORAGE_DELETE_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL", "value": "10s" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD", "value": "1" }, { "name": "REGISTRY_OPENSHIFT_METRICS_ENABLED", "value": "true" }, { "name": "REGISTRY_OPENSHIFT_SERVER_ADDR", "value": "image-registry.openshift-image-registry.svc:5000" }, { "name": "REGISTRY_HTTP_TLS_CERTIFICATE", "value": "/etc/secrets/tls.crt" }, { "name": "REGISTRY_HTTP_TLS_KEY", "value": "/etc/secrets/tls.key" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8e067469bb7292d3e5e255e39aff4363f948f20ceb96b5ac9e80aca5fe564dca", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "registry", "ports": [ { "containerPort": 5000, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/cloud", "name": "image-registry-private-configuration", "readOnly": true }, { "mountPath": "/etc/secrets", "name": "registry-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted", "name": "ca-trust-extracted" }, { "mountPath": "/etc/pki/ca-trust/source/anchors", "name": "registry-certificates" }, { "mountPath": "/usr/share/pki/ca-trust-source", "name": "trusted-ca" }, { "mountPath": "/var/lib/kubelet/", "name": "installation-pull-secrets" }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 1000340000, "fsGroupChangePolicy": "OnRootMismatch" }, "serviceAccount": "registry", "serviceAccountName": "registry", "terminationGracePeriodSeconds": 55, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "kubernetes.io/hostname", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "node-role.kubernetes.io/worker", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "DoNotSchedule" } ], "volumes": [ { "name": "image-registry-private-configuration", "secret": { "defaultMode": 420, "optional": false, "secretName": "image-registry-private-configuration" } }, { "name": "registry-tls", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "image-registry-tls" } } ] } }, { "emptyDir": {}, "name": "ca-trust-extracted" }, { "configMap": { "defaultMode": 420, "name": "image-registry-certificates" }, "name": "registry-certificates" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "anchors/ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "name": "installation-pull-secrets", "secret": { "defaultMode": 420, "items": [ { "key": ".dockerconfigjson", "path": "config.json" } ], "optional": true, "secretName": "installation-pull-secrets" } }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "Ingress", "config.openshift.io/inject-proxy": "ingress-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:44Z", "generation": 1, "labels": { "name": "ingress-operator", "pod-template-hash": "b87565675" }, "name": "ingress-operator-b87565675", "namespace": "openshift-ingress-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "ingress-operator", "uid": "bfd16753-369a-4fce-956e-5b5c99690801" } ], "resourceVersion": "44831", "uid": "e2efb2ff-01ed-4fa4-a8a8-287359b52482" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "ingress-operator", "pod-template-hash": "b87565675" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "ingress-operator", "pod-template-hash": "b87565675" } }, "spec": { "containers": [ { "command": [ "ingress-operator", "start", "--namespace", "$(WATCH_NAMESPACE)", "--image", "$(IMAGE)", "--canary-image", "$(CANARY_IMAGE)", "--release-version", "$(RELEASE_VERSION)", "--gateway-api-operator-catalog", "$(GATEWAY_API_OPERATOR_CATALOG)", "--gateway-api-operator-channel", "$(GATEWAY_API_OPERATOR_CHANNEL)", "--gateway-api-operator-version", "$(GATEWAY_API_OPERATOR_VERSION)", "--istio-version", "$(ISTIO_VERSION)" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.20.10" }, { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d94824ed709df94d62da480e88e2244584177ce51b84795052db53189335512f" }, { "name": "CANARY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c78938caa5ed42b075aeaabf001ba274a172fdec1a219ecee76d7e855200b0a2" }, { "name": "GATEWAY_API_OPERATOR_CATALOG", "value": "redhat-operators" }, { "name": "GATEWAY_API_OPERATOR_CHANNEL", "value": "stable" }, { "name": "GATEWAY_API_OPERATOR_VERSION", "value": "servicemeshoperator3.v3.1.0" }, { "name": "ISTIO_VERSION", "value": "v1.26.2" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c78938caa5ed42b075aeaabf001ba274a172fdec1a219ecee76d7e855200b0a2", "imagePullPolicy": "IfNotPresent", "name": "ingress-operator", "resources": { "requests": { "cpu": "10m", "memory": "56Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] }, { "args": [ "--logtostderr", "--secure-listen-address=:9393", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", "--upstream=http://127.0.0.1:60000/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9393, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "40Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "ingress-operator", "serviceAccountName": "ingress-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "metrics-tls", "secret": { "defaultMode": 420, "secretName": "metrics-tls" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca" }, "name": "trusted-ca" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:24:12Z", "generation": 1, "labels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "ingresscontroller.operator.openshift.io/hash": "6cf9bd458b", "pod-template-hash": "75cfd5445c" }, "name": "router-default-75cfd5445c", "namespace": "openshift-ingress", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "router-default", "uid": "4f0ce718-9d11-4811-b909-563277314b4a" } ], "resourceVersion": "48701", "uid": "39194714-1869-4b57-ab5f-a463478f37d9" }, "spec": { "minReadySeconds": 30, "replicas": 2, "selector": { "matchLabels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "pod-template-hash": "75cfd5445c" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "ingresscontroller.operator.openshift.io/hash": "6cf9bd458b", "pod-template-hash": "75cfd5445c" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "node.openshift.io/remote-worker", "operator": "NotIn", "values": [ "" ] } ] } ] } }, "podAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/deployment-ingresscontroller", "operator": "In", "values": [ "default" ] }, { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "NotIn", "values": [ "6cf9bd458b" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] }, "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/deployment-ingresscontroller", "operator": "In", "values": [ "default" ] }, { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "In", "values": [ "6cf9bd458b" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "env": [ { "name": "DEFAULT_CERTIFICATE_DIR", "value": "/etc/pki/tls/private" }, { "name": "DEFAULT_DESTINATION_CA_PATH", "value": "/var/run/configmaps/service-ca/service-ca.crt" }, { "name": "RELOAD_INTERVAL", "value": "5s" }, { "name": "ROUTER_ALLOW_WILDCARD_ROUTES", "value": "false" }, { "name": "ROUTER_CANONICAL_HOSTNAME", "value": "router-default.apps.clusterpool420-54bqn.rhtap.devcluster.openshift.com" }, { "name": "ROUTER_CIPHERS", "value": "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384" }, { "name": "ROUTER_CIPHERSUITES", "value": "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256" }, { "name": "ROUTER_DISABLE_HTTP2", "value": "true" }, { "name": "ROUTER_DISABLE_NAMESPACE_OWNERSHIP_CHECK", "value": "false" }, { "name": "ROUTER_DOMAIN", "value": "apps.clusterpool420-54bqn.rhtap.devcluster.openshift.com" }, { "name": "ROUTER_ENABLE_EXTERNAL_CERTIFICATE", "value": "true" }, { "name": "ROUTER_LOAD_BALANCE_ALGORITHM", "value": "random" }, { "name": "ROUTER_METRICS_TLS_CERT_FILE", "value": "/etc/pki/tls/metrics-certs/tls.crt" }, { "name": "ROUTER_METRICS_TLS_KEY_FILE", "value": "/etc/pki/tls/metrics-certs/tls.key" }, { "name": "ROUTER_METRICS_TYPE", "value": "haproxy" }, { "name": "ROUTER_SERVICE_NAME", "value": "default" }, { "name": "ROUTER_SERVICE_NAMESPACE", "value": "openshift-ingress" }, { "name": "ROUTER_SET_FORWARDED_HEADERS", "value": "append" }, { "name": "ROUTER_TCP_BALANCE_SCHEME", "value": "source" }, { "name": "ROUTER_THREADS", "value": "4" }, { "name": "ROUTER_USE_PROXY_PROTOCOL", "value": "true" }, { "name": "SSL_MIN_VERSION", "value": "TLSv1.2" }, { "name": "STATS_PASSWORD_FILE", "value": "/var/lib/haproxy/conf/metrics-auth/statsPassword" }, { "name": "STATS_PORT", "value": "1936" }, { "name": "STATS_USERNAME_FILE", "value": "/var/lib/haproxy/conf/metrics-auth/statsUsername" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d94824ed709df94d62da480e88e2244584177ce51b84795052db53189335512f", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "terminationGracePeriodSeconds": 10, "timeoutSeconds": 1 }, "name": "router", "ports": [ { "containerPort": 80, "name": "http", "protocol": "TCP" }, { "containerPort": 443, "name": "https", "protocol": "TCP" }, { "containerPort": 1936, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/ready", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": true, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 120, "httpGet": { "path": "/healthz/ready", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 1, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/tls/private", "name": "default-certificate", "readOnly": true }, { "mountPath": "/var/run/configmaps/service-ca", "name": "service-ca-bundle", "readOnly": true }, { "mountPath": "/var/lib/haproxy/conf/metrics-auth", "name": "stats-auth", "readOnly": true }, { "mountPath": "/etc/pki/tls/metrics-certs", "name": "metrics-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/worker": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "router", "serviceAccountName": "router", "terminationGracePeriodSeconds": 3600, "tolerations": [ { "effect": "NoExecute", "key": "kubernetes.io/e2e-evict-taint-key", "operator": "Equal", "value": "evictTaintVal" } ], "topologySpreadConstraints": [ { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "In", "values": [ "6cf9bd458b" ] } ] }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "ScheduleAnyway" } ], "volumes": [ { "name": "default-certificate", "secret": { "defaultMode": 420, "secretName": "router-certs-default" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "service-ca-bundle", "optional": false }, "name": "service-ca-bundle" }, { "name": "stats-auth", "secret": { "defaultMode": 420, "secretName": "router-stats-default" } }, { "name": "metrics-certs", "secret": { "defaultMode": 420, "secretName": "router-metrics-certs-default" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "config.openshift.io/inject-proxy": "insights-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:47Z", "generation": 1, "labels": { "app": "insights-operator", "pod-template-hash": "55ff4dbb46" }, "name": "insights-operator-55ff4dbb46", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "insights-operator", "uid": "18491e17-fe4e-4321-9a2a-e7fa4ff31047" } ], "resourceVersion": "37762", "uid": "dc30142e-6f67-4635-b224-381ff7852839" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "insights-operator", "pod-template-hash": "55ff4dbb46" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "insights-operator", "pod-template-hash": "55ff4dbb46" } }, "spec": { "containers": [ { "args": [ "start", "--config=/etc/insights-operator/server.yaml" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "RELEASE_VERSION", "value": "4.20.10" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e95894a4bd036aae2b2ed928c7b90324683069d1918f5e5c63ba9ca60b346eda", "imagePullPolicy": "IfNotPresent", "name": "insights-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "54Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp" }, { "mountPath": "/var/lib/insights-operator", "name": "snapshots" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/run/configmaps/service-ca-bundle", "name": "service-ca-bundle", "readOnly": true }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "operator", "serviceAccountName": "operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 900 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 900 } ], "volumes": [ { "emptyDir": {}, "name": "tmp" }, { "emptyDir": {}, "name": "snapshots" }, { "configMap": { "defaultMode": 420, "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "service-ca-bundle", "optional": true }, "name": "service-ca-bundle" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "openshift-insights-serving-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:43Z", "generation": 1, "labels": { "app": "kube-apiserver-operator", "pod-template-hash": "7f989df88d" }, "name": "kube-apiserver-operator-7f989df88d", "namespace": "openshift-kube-apiserver-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kube-apiserver-operator", "uid": "defec6da-7b0a-4e49-95fc-8de55e46ce87" } ], "resourceVersion": "37767", "uid": "147a20e8-0476-40cf-bb5e-4c92d6c6e694" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "kube-apiserver-operator", "pod-template-hash": "7f989df88d" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "kube-apiserver-operator", "pod-template-hash": "7f989df88d" }, "name": "kube-apiserver-operator" }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml" ], "command": [ "cluster-kube-apiserver-operator", "operator" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c0de888efca9517114523611d30bad710d0e813d13349df6377b7eee0e0367f2" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e534588d63cc8ccabf3841cf4a0eea273269737eb90cc8e9d3d5157d5d0db181" }, { "name": "OPERAND_IMAGE_VERSION", "value": "1.33.6" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.20.10" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e534588d63cc8ccabf3841cf4a0eea273269737eb90cc8e9d3d5157d5d0db181", "imagePullPolicy": "IfNotPresent", "name": "kube-apiserver-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount", "name": "kube-api-access", "readOnly": true }, { "mountPath": "/tmp", "name": "tmp-dir" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "kube-apiserver-operator", "serviceAccountName": "kube-apiserver-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "kube-apiserver-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "kube-apiserver-operator-config" }, "name": "config" }, { "name": "kube-api-access", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "expirationSeconds": 3600, "path": "token" } }, { "configMap": { "items": [ { "key": "ca.crt", "path": "ca.crt" } ], "name": "kube-root-ca.crt" } }, { "downwardAPI": { "items": [ { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" }, "path": "namespace" } ] } } ] } }, { "emptyDir": {}, "name": "tmp-dir" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:26Z", "generation": 1, "labels": { "app": "kube-controller-manager-operator", "pod-template-hash": "56cdc88cc5" }, "name": "kube-controller-manager-operator-56cdc88cc5", "namespace": "openshift-kube-controller-manager-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kube-controller-manager-operator", "uid": "0ceaccb2-aa23-45ed-ba59-9605419540a6" } ], "resourceVersion": "36867", "uid": "a6c40865-070b-4f7e-b3d3-b83ad1254793" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "kube-controller-manager-operator", "pod-template-hash": "56cdc88cc5" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "kube-controller-manager-operator", "pod-template-hash": "56cdc88cc5" }, "name": "kube-controller-manager-operator" }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml" ], "command": [ "cluster-kube-controller-manager-operator", "operator" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c0de888efca9517114523611d30bad710d0e813d13349df6377b7eee0e0367f2" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7ab46ee06d9f3da35f63d67bc84f00408aa6c94116fee3f802bc2626e0f1ef23" }, { "name": "CLUSTER_POLICY_CONTROLLER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:102abcba063be0f03fce5277601344338f1814518017ac2254b65ec04fdb8929" }, { "name": "TOOLS_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:16816f988db21482c309e77207364b7c282a0fef96e6d7da129928aa477dcfa7" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.20.10" }, { "name": "OPERAND_IMAGE_VERSION", "value": "1.33.6" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7ab46ee06d9f3da35f63d67bc84f00408aa6c94116fee3f802bc2626e0f1ef23", "imagePullPolicy": "IfNotPresent", "name": "kube-controller-manager-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount", "name": "kube-api-access", "readOnly": true }, { "mountPath": "/tmp", "name": "tmp-dir" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "kube-controller-manager-operator", "serviceAccountName": "kube-controller-manager-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "kube-controller-manager-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "kube-controller-manager-operator-config" }, "name": "config" }, { "name": "kube-api-access", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "expirationSeconds": 3600, "path": "token" } }, { "configMap": { "items": [ { "key": "ca.crt", "path": "ca.crt" } ], "name": "kube-root-ca.crt" } }, { "downwardAPI": { "items": [ { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" }, "path": "namespace" } ] } } ] } }, { "emptyDir": {}, "name": "tmp-dir" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:26Z", "generation": 1, "labels": { "app": "openshift-kube-scheduler-operator", "pod-template-hash": "78f5df5b86" }, "name": "openshift-kube-scheduler-operator-78f5df5b86", "namespace": "openshift-kube-scheduler-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-kube-scheduler-operator", "uid": "e53de295-33e1-4497-8e2c-f7cc86a8c68e" } ], "resourceVersion": "37768", "uid": "27c77931-c52a-41da-afe7-3c36335cbba8" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "openshift-kube-scheduler-operator", "pod-template-hash": "78f5df5b86" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-kube-scheduler-operator", "pod-template-hash": "78f5df5b86" }, "name": "openshift-kube-scheduler-operator" }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml" ], "command": [ "cluster-kube-scheduler-operator", "operator" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c0de888efca9517114523611d30bad710d0e813d13349df6377b7eee0e0367f2" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d5ad9a1fbfd99978c4fe177a4c2563acf8f7a9b0e0db75616bfe1e01494a0083" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.20.10" }, { "name": "OPERAND_IMAGE_VERSION", "value": "1.33.6" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d5ad9a1fbfd99978c4fe177a4c2563acf8f7a9b0e0db75616bfe1e01494a0083", "imagePullPolicy": "IfNotPresent", "name": "kube-scheduler-operator-container", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp" }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount", "name": "kube-api-access", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-kube-scheduler-operator", "serviceAccountName": "openshift-kube-scheduler-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "emptyDir": {}, "name": "tmp" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "kube-scheduler-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "openshift-kube-scheduler-operator-config" }, "name": "config" }, { "name": "kube-api-access", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "expirationSeconds": 3600, "path": "token" } }, { "configMap": { "items": [ { "key": "ca.crt", "path": "ca.crt" } ], "name": "kube-root-ca.crt" } }, { "downwardAPI": { "items": [ { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" }, "path": "namespace" } ] } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T12:19:25Z", "generation": 1, "labels": { "app": "kube-storage-version-migrator-operator", "pod-template-hash": "57b87c7f48" }, "name": "kube-storage-version-migrator-operator-57b87c7f48", "namespace": "openshift-kube-storage-version-migrator-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kube-storage-version-migrator-operator", "uid": "2c30c4d8-9bd4-4a65-84ab-0af30414008f" } ], "resourceVersion": "37779", "uid": "0f70eec0-2504-4e90-8c48-0edbd6af486a" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "kube-storage-version-migrator-operator", "pod-template-hash": "57b87c7f48" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "kube-storage-version-migrator-operator", "pod-template-hash": "57b87c7f48" }, "name": "kube-storage-version-migrator-operator" }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml" ], "command": [ "cluster-kube-storage-version-migrator-operator", "start" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:862110549944bdf8b068e75e8f680398bbd43b4a86f8bea8f70506bc1ea957e9" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:fd2882e4095f7805353e1a43e4f4cdaffd164d323ff8ce900d08b6a07cc9b92d" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.20.10" }, { "name": "OPERAND_IMAGE_VERSION", "value": "4.20.10" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:fd2882e4095f7805353e1a43e4f4cdaffd164d323ff8ce900d08b6a07cc9b92d", "imagePullPolicy": "IfNotPresent", "name": "kube-storage-version-migrator-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "kube-storage-version-migrator-operator", "serviceAccountName": "kube-storage-version-migrator-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "8bc55bab4ebd25bd73946b6f26f1d4d508d610e9882a447159485f30d6acf175" }, "creationTimestamp": "2026-04-28T12:22:54Z", "generation": 1, "labels": { "app": "migrator", "pod-template-hash": "6bb857f745" }, "name": "migrator-6bb857f745", "namespace": "openshift-kube-storage-version-migrator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "migrator", "uid": "191d2b82-2b1a-403b-a5d3-e6ec054d6c9b" } ], "resourceVersion": "6066", "uid": "a732e144-c9a3-4aca-a655-45b13d4f8992" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "migrator", "pod-template-hash": "6bb857f745" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "migrator", "pod-template-hash": "6bb857f745" } }, "spec": { "containers": [ { "args": [ "trap 'echo \"Termination signal received, but ignored. Continuing...\"; sleep infinity' TERM\nmigrator \"$@\" \u0026 wait $!", "bash", "--alsologtostderr", "--v=2" ], "command": [ "/bin/bash", "-c" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:862110549944bdf8b068e75e8f680398bbd43b4a86f8bea8f70506bc1ea957e9", "imagePullPolicy": "IfNotPresent", "name": "migrator", "resources": { "requests": { "cpu": "10m", "memory": "200Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "trap 'echo \"Gracefully sleeping for 25s to let another pod start...\"; sleep 25; exit' EXIT\nwhile true; do echo \"Waiting for termination...\"; sleep 3600 \u0026 wait $!; done" ], "command": [ "/bin/bash", "-c" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:862110549944bdf8b068e75e8f680398bbd43b4a86f8bea8f70506bc1ea957e9", "imagePullPolicy": "IfNotPresent", "name": "graceful-termination", "resources": { "requests": { "cpu": "1m", "memory": "1Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "kube-storage-version-migrator-sa", "serviceAccountName": "kube-storage-version-migrator-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "MachineAPI", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:20:15Z", "generation": 1, "labels": { "k8s-app": "cluster-autoscaler-operator", "pod-template-hash": "687cd4986" }, "name": "cluster-autoscaler-operator-687cd4986", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-autoscaler-operator", "uid": "559130d0-3990-4f13-b156-01a3f06401ba" } ], "resourceVersion": "37785", "uid": "ffcf089b-1774-4759-b0e5-95aa79e111f2" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "k8s-app": "cluster-autoscaler-operator", "pod-template-hash": "687cd4986" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "cluster-autoscaler-operator", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "cluster-autoscaler-operator", "pod-template-hash": "687cd4986" } }, "spec": { "containers": [ { "args": [ "--secure-listen-address=0.0.0.0:9192", "--upstream=http://127.0.0.1:9191/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9192, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "auth-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/private", "name": "cert", "readOnly": true } ] }, { "args": [ "-alsologtostderr" ], "command": [ "cluster-autoscaler-operator" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.20.10" }, { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "CLUSTER_AUTOSCALER_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "LEADER_ELECTION_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "CLUSTER_AUTOSCALER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:70e1d80000a8fbda051bfa144a98f72a3a471bfe3dc810497af321d1f16bd12e" }, { "name": "WEBHOOKS_CERT_DIR", "value": "/etc/cluster-autoscaler-operator/tls" }, { "name": "WEBHOOKS_PORT", "value": "8443" }, { "name": "METRICS_PORT", "value": "9191" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:dd8a75f2699f58559994b25ac5c49146bb903c205a7d2508608f470bbf9a76f5", "imagePullPolicy": "IfNotPresent", "name": "cluster-autoscaler-operator", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/cluster-autoscaler-operator/tls", "name": "cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cluster-autoscaler-operator", "serviceAccountName": "cluster-autoscaler-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "cluster-autoscaler-operator-cert" } }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy-cluster-autoscaler-operator" }, "name": "auth-proxy-config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "baremetal", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:44Z", "generation": 1, "labels": { "k8s-app": "cluster-baremetal-operator", "pod-template-hash": "5566cb99cf" }, "name": "cluster-baremetal-operator-5566cb99cf", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-baremetal-operator", "uid": "b13f0a20-0d8c-4ce4-b116-dbc2729e6386" } ], "resourceVersion": "37776", "uid": "5819d241-0652-4688-90ab-ec39e04418df" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "k8s-app": "cluster-baremetal-operator", "pod-template-hash": "5566cb99cf" } }, "template": { "metadata": { "annotations": { "capability.openshift.io/name": "baremetal", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true", "openshift.io/required-scc": "anyuid", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "cluster-baremetal-operator", "pod-template-hash": "5566cb99cf" } }, "spec": { "containers": [ { "args": [ "--enable-leader-election" ], "command": [ "/usr/bin/cluster-baremetal-operator" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.20.10" }, { "name": "COMPONENT_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "METRICS_PORT", "value": "8080" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b3531fa1ca692699ad45c80e0987518d838f636785b5f5180a5dfd50b823c86f", "imagePullPolicy": "IfNotPresent", "name": "cluster-baremetal-operator", "ports": [ { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/cluster-baremetal-operator/tls", "name": "cert", "readOnly": true }, { "mountPath": "/etc/cluster-baremetal-operator/images", "name": "images", "readOnly": true } ] }, { "args": [ "--secure-listen-address=0.0.0.0:8443", "--upstream=http://localhost:8080/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--config-file=/etc/baremetal-kube-rbac-proxy/config-file.yaml", "--logtostderr=true", "--v=10" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "baremetal-kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/baremetal-kube-rbac-proxy", "name": "config" }, { "mountPath": "/etc/tls/private", "name": "cluster-baremetal-operator-tls" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "cluster-baremetal-operator", "serviceAccountName": "cluster-baremetal-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "cert", "secret": { "defaultMode": 420, "secretName": "cluster-baremetal-webhook-server-cert" } }, { "configMap": { "defaultMode": 420, "name": "baremetal-kube-rbac-proxy" }, "name": "config" }, { "name": "cluster-baremetal-operator-tls", "secret": { "defaultMode": 420, "secretName": "cluster-baremetal-operator-tls" } }, { "configMap": { "defaultMode": 420, "name": "cluster-baremetal-operator-images" }, "name": "images" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "MachineAPI", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T12:20:08Z", "generation": 1, "labels": { "k8s-app": "control-plane-machine-set-operator", "pod-template-hash": "7658bb4f76" }, "name": "control-plane-machine-set-operator-7658bb4f76", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "control-plane-machine-set-operator", "uid": "11f6bc6e-05a6-465e-a82c-35f4e3d3bf7f" } ], "resourceVersion": "36892", "uid": "f7bbdf7b-aed0-41d2-8c4a-286ac08b26f8" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "k8s-app": "control-plane-machine-set-operator", "pod-template-hash": "7658bb4f76" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "control-plane-machine-set-operator", "pod-template-hash": "7658bb4f76" } }, "spec": { "containers": [ { "args": [ "-v=2", "--leader-elect=true", "--leader-elect-lease-duration=137s", "--leader-elect-renew-deadline=107s", "--leader-elect-retry-period=26s", "--leader-elect-resource-namespace=openshift-machine-api" ], "command": [ "/manager" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.20.10" }, { "name": "COMPONENT_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c854f3e50852f3f3951dce7966b7b53160cfa910e83d2914e6cf8081062a62f1", "imagePullPolicy": "IfNotPresent", "name": "control-plane-machine-set-operator", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "control-plane-machine-set-operator-tls" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "control-plane-machine-set-operator", "serviceAccountName": "control-plane-machine-set-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "control-plane-machine-set-operator-tls", "secret": { "defaultMode": 420, "secretName": "control-plane-machine-set-operator-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2", "machine.openshift.io/owned": "", "openshift.io/required-scc": "restricted-v2", "operator.openshift.io/dep-openshift-machine-api.mao-trusted-ca.configmap": "Y9uTwA==", "operator.openshift.io/spec-hash": "6ad3074a9c70c78cef7ede0d25eec8f8367ef481a8f93d19354a47cf6d3b499f" }, "creationTimestamp": "2026-04-28T12:58:40Z", "generation": 1, "labels": { "api": "clusterapi", "k8s-app": "controller", "pod-template-hash": "745f5dc5bb" }, "name": "machine-api-controllers-745f5dc5bb", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "machine-api-controllers", "uid": "abfb0743-1737-4e37-a565-35192315c309" } ], "resourceVersion": "44361", "uid": "ca70f3fc-cdf5-4df5-845d-33ef5fcb459c" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "api": "clusterapi", "k8s-app": "controller", "pod-template-hash": "745f5dc5bb" } }, "template": { "metadata": { "annotations": { "operator.openshift.io/dep-openshift-machine-api.mao-trusted-ca.configmap": "Y9uTwA==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "api": "clusterapi", "k8s-app": "controller", "pod-template-hash": "745f5dc5bb" } }, "spec": { "containers": [ { "args": [ "--logtostderr=true", "--v=3", "--leader-elect=true", "--leader-elect-lease-duration=120s", "--namespace=openshift-machine-api", "--feature-gates=AzureWorkloadIdentity=true,MachineAPIMigration=false,VSphereHostVMGroupZonal=false,VSphereMultiDisk=true" ], "command": [ "/machineset-controller" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1f2f6342ed580a28220e225f0ce46fd849027e1f4c09f39bb3b6a75e848c2787", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "machineset-controller", "ports": [ { "containerPort": 8443, "name": "webhook-server", "protocol": "TCP" }, { "containerPort": 9441, "name": "healthz", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/readyz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/machine-api-operator/tls", "name": "machineset-webhook-cert", "readOnly": true } ] }, { "args": [ "--logtostderr=true", "--v=3", "--leader-elect=true", "--leader-elect-lease-duration=120s", "--namespace=openshift-machine-api", "--feature-gates=AzureWorkloadIdentity=true,MachineAPIMigration=false,VSphereHostVMGroupZonal=false,VSphereMultiDisk=true" ], "command": [ "/machine-controller-manager" ], "env": [ { "name": "NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "RELEASE_VERSION", "value": "4.20.10" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:40caac43a9e6407d706bd75ad6ae8cdd644981fa9f31b054f1d0f236dec637b7", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "machine-controller", "ports": [ { "containerPort": 8440, "name": "machine-webhook", "protocol": "TCP" }, { "containerPort": 9440, "name": "healthz", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true }, { "mountPath": "/etc/machine-api-operator/tls", "name": "machine-webhook-cert", "readOnly": true } ] }, { "args": [ "--logtostderr=true", "--v=3", "--leader-elect=true", "--leader-elect-lease-duration=120s", "--namespace=openshift-machine-api" ], "command": [ "/nodelink-controller" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1f2f6342ed580a28220e225f0ce46fd849027e1f4c09f39bb3b6a75e848c2787", "imagePullPolicy": "IfNotPresent", "name": "nodelink-controller", "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--logtostderr=true", "--v=3", "--leader-elect=true", "--leader-elect-lease-duration=120s", "--namespace=openshift-machine-api" ], "command": [ "/machine-healthcheck" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1f2f6342ed580a28220e225f0ce46fd849027e1f4c09f39bb3b6a75e848c2787", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "machine-healthcheck-controller", "ports": [ { "containerPort": 9442, "name": "healthz", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--secure-listen-address=0.0.0.0:8442", "--upstream=http://localhost:8082", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-machineset-mtrc", "ports": [ { "containerPort": 8442, "name": "machineset-mtrc", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "config" }, { "mountPath": "/etc/tls/private", "name": "machine-api-controllers-tls" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:8441", "--upstream=http://localhost:8081", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-machine-mtrc", "ports": [ { "containerPort": 8441, "name": "machine-mtrc", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "config" }, { "mountPath": "/etc/tls/private", "name": "machine-api-controllers-tls" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:8444", "--upstream=http://localhost:8083", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-mhc-mtrc", "ports": [ { "containerPort": 8444, "name": "mhc-mtrc", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "config" }, { "mountPath": "/etc/tls/private", "name": "machine-api-controllers-tls" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "machine-api-controllers", "serviceAccountName": "machine-api-controllers", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master" }, { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "machineset-webhook-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "machine-api-operator-webhook-cert" } }, { "name": "machine-webhook-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "machine-api-operator-machine-webhook-cert" } }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "config" }, { "name": "machine-api-controllers-tls", "secret": { "defaultMode": 420, "secretName": "machine-api-controllers-tls" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "mao-trusted-ca", "optional": true }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "machine.openshift.io/owned": "", "openshift.io/required-scc": "restricted-v2", "operator.openshift.io/dep-openshift-machine-api.mao-trusted-ca.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "771a92445c18621d06d4ec0528e42e141ed261cca3383f9a575ca7e96dcaed13" }, "creationTimestamp": "2026-04-28T12:24:09Z", "generation": 2, "labels": { "api": "clusterapi", "k8s-app": "controller", "pod-template-hash": "8c55d965d" }, "name": "machine-api-controllers-8c55d965d", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "machine-api-controllers", "uid": "abfb0743-1737-4e37-a565-35192315c309" } ], "resourceVersion": "44408", "uid": "091b3066-1ab5-4b3c-a250-ebbfd91ea516" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "api": "clusterapi", "k8s-app": "controller", "pod-template-hash": "8c55d965d" } }, "template": { "metadata": { "annotations": { "operator.openshift.io/dep-openshift-machine-api.mao-trusted-ca.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "api": "clusterapi", "k8s-app": "controller", "pod-template-hash": "8c55d965d" } }, "spec": { "containers": [ { "args": [ "--logtostderr=true", "--v=3", "--leader-elect=true", "--leader-elect-lease-duration=120s", "--namespace=openshift-machine-api", "--feature-gates=AzureWorkloadIdentity=true,MachineAPIMigration=false,VSphereHostVMGroupZonal=false,VSphereMultiDisk=true" ], "command": [ "/machineset-controller" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1f2f6342ed580a28220e225f0ce46fd849027e1f4c09f39bb3b6a75e848c2787", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "machineset-controller", "ports": [ { "containerPort": 8443, "name": "webhook-server", "protocol": "TCP" }, { "containerPort": 9441, "name": "healthz", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/readyz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/machine-api-operator/tls", "name": "machineset-webhook-cert", "readOnly": true } ] }, { "args": [ "--logtostderr=true", "--v=3", "--leader-elect=true", "--leader-elect-lease-duration=120s", "--namespace=openshift-machine-api", "--feature-gates=AzureWorkloadIdentity=true,MachineAPIMigration=false,VSphereHostVMGroupZonal=false,VSphereMultiDisk=true" ], "command": [ "/machine-controller-manager" ], "env": [ { "name": "NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "RELEASE_VERSION", "value": "4.20.10" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:40caac43a9e6407d706bd75ad6ae8cdd644981fa9f31b054f1d0f236dec637b7", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "machine-controller", "ports": [ { "containerPort": 8440, "name": "machine-webhook", "protocol": "TCP" }, { "containerPort": 9440, "name": "healthz", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true }, { "mountPath": "/etc/machine-api-operator/tls", "name": "machine-webhook-cert", "readOnly": true } ] }, { "args": [ "--logtostderr=true", "--v=3", "--leader-elect=true", "--leader-elect-lease-duration=120s", "--namespace=openshift-machine-api" ], "command": [ "/nodelink-controller" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1f2f6342ed580a28220e225f0ce46fd849027e1f4c09f39bb3b6a75e848c2787", "imagePullPolicy": "IfNotPresent", "name": "nodelink-controller", "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--logtostderr=true", "--v=3", "--leader-elect=true", "--leader-elect-lease-duration=120s", "--namespace=openshift-machine-api" ], "command": [ "/machine-healthcheck" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1f2f6342ed580a28220e225f0ce46fd849027e1f4c09f39bb3b6a75e848c2787", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "machine-healthcheck-controller", "ports": [ { "containerPort": 9442, "name": "healthz", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--secure-listen-address=0.0.0.0:8442", "--upstream=http://localhost:8082", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-machineset-mtrc", "ports": [ { "containerPort": 8442, "name": "machineset-mtrc", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "config" }, { "mountPath": "/etc/tls/private", "name": "machine-api-controllers-tls" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:8441", "--upstream=http://localhost:8081", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-machine-mtrc", "ports": [ { "containerPort": 8441, "name": "machine-mtrc", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "config" }, { "mountPath": "/etc/tls/private", "name": "machine-api-controllers-tls" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:8444", "--upstream=http://localhost:8083", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-mhc-mtrc", "ports": [ { "containerPort": 8444, "name": "mhc-mtrc", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "config" }, { "mountPath": "/etc/tls/private", "name": "machine-api-controllers-tls" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "machine-api-controllers", "serviceAccountName": "machine-api-controllers", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master" }, { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "machineset-webhook-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "machine-api-operator-webhook-cert" } }, { "name": "machine-webhook-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "machine-api-operator-machine-webhook-cert" } }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "config" }, { "name": "machine-api-controllers-tls", "secret": { "defaultMode": 420, "secretName": "machine-api-controllers-tls" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "mao-trusted-ca", "optional": true }, "name": "trusted-ca" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "MachineAPI", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:49Z", "generation": 1, "labels": { "k8s-app": "machine-api-operator", "pod-template-hash": "69587dc7f8" }, "name": "machine-api-operator-69587dc7f8", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "machine-api-operator", "uid": "7927a2e7-68b8-4f17-9fa9-4c3f5b6c458b" } ], "resourceVersion": "37799", "uid": "08a95495-9fd6-4c50-92d1-a0360ef71e9d" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "k8s-app": "machine-api-operator", "pod-template-hash": "69587dc7f8" } }, "template": { "metadata": { "annotations": { "capability.openshift.io/name": "MachineAPI", "kubectl.kubernetes.io/default-container": "machine-api-operator", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "machine-api-operator", "pod-template-hash": "69587dc7f8" } }, "spec": { "containers": [ { "args": [ "--secure-listen-address=0.0.0.0:8443", "--upstream=http://localhost:8080/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "config" }, { "mountPath": "/etc/tls/private", "name": "machine-api-operator-tls" } ] }, { "args": [ "start", "--images-json=/etc/machine-api-operator-config/images/images.json", "--alsologtostderr", "--v=3" ], "command": [ "/machine-api-operator" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.20.10" }, { "name": "COMPONENT_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "METRICS_PORT", "value": "8080" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1f2f6342ed580a28220e225f0ce46fd849027e1f4c09f39bb3b6a75e848c2787", "imagePullPolicy": "IfNotPresent", "name": "machine-api-operator", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/machine-api-operator-config/images", "name": "images" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "machine-api-operator", "serviceAccountName": "machine-api-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "machine-api-operator-images" }, "name": "images" }, { "name": "machine-api-operator-tls", "secret": { "defaultMode": 420, "secretName": "machine-api-operator-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:24:12Z", "generation": 1, "labels": { "k8s-app": "machine-config-controller", "pod-template-hash": "5d8c65fb9d" }, "name": "machine-config-controller-5d8c65fb9d", "namespace": "openshift-machine-config-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "machine-config-controller", "uid": "b804b548-474f-47b0-a045-a56799d08763" } ], "resourceVersion": "11396", "uid": "3b6beb95-c615-4277-9379-1984e7f14f8a" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "k8s-app": "machine-config-controller", "pod-template-hash": "5d8c65fb9d" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "machine-config-controller", "pod-template-hash": "5d8c65fb9d" } }, "spec": { "containers": [ { "args": [ "start", "--resourcelock-namespace=openshift-machine-config-operator", "--v=2", "--payload-version=4.20.10" ], "command": [ "/usr/bin/machine-config-controller" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:78049f96745a9151b653d765af94eb5ef1761909643f5a3b262a6959e9c75a80", "imagePullPolicy": "IfNotPresent", "name": "machine-config-controller", "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--secure-listen-address=0.0.0.0:9001", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--upstream=http://127.0.0.1:8797", "--logtostderr=true", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9001, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "proxy-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "mcc-auth-proxy-config" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "machine-config-controller", "serviceAccountName": "machine-config-controller", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "proxy-tls", "secret": { "defaultMode": 420, "secretName": "mcc-proxy-tls" } }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "mcc-auth-proxy-config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:46Z", "generation": 1, "labels": { "k8s-app": "machine-config-operator", "pod-template-hash": "b4d6f7cbb" }, "name": "machine-config-operator-b4d6f7cbb", "namespace": "openshift-machine-config-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "machine-config-operator", "uid": "fa082074-6918-44f5-bdea-624e759e762e" } ], "resourceVersion": "37817", "uid": "2a8bdf15-9d05-4492-a90b-26dd04029599" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "k8s-app": "machine-config-operator", "pod-template-hash": "b4d6f7cbb" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "anyuid", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "machine-config-operator", "pod-template-hash": "b4d6f7cbb" } }, "spec": { "containers": [ { "args": [ "start", "--images-json=/etc/mco/images/images.json", "--payload-version=4.20.10", "--operator-image=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:78049f96745a9151b653d765af94eb5ef1761909643f5a3b262a6959e9c75a80" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.20.10" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:78049f96745a9151b653d765af94eb5ef1761909643f5a3b262a6959e9c75a80", "imagePullPolicy": "IfNotPresent", "name": "machine-config-operator", "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/mco/images", "name": "images" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9001", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--upstream=http://127.0.0.1:8797", "--logtostderr=true", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9001, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "proxy-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "auth-proxy-config" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "machine-config-operator", "serviceAccountName": "machine-config-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "machine-config-operator-images" }, "name": "images" }, { "name": "proxy-tls", "secret": { "defaultMode": 420, "secretName": "mco-proxy-tls" } }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "auth-proxy-config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "marketplace", "config.openshift.io/inject-proxy": "marketplace-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:28Z", "generation": 1, "labels": { "name": "marketplace-operator", "pod-template-hash": "f974c8c5d" }, "name": "marketplace-operator-f974c8c5d", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "marketplace-operator", "uid": "e526897b-8ce1-4780-a2a0-430c36757c92" } ], "resourceVersion": "49217", "uid": "cd017d42-2759-4bc7-abfc-934c3ec9e8a4" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "marketplace-operator", "pod-template-hash": "f974c8c5d" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "marketplace-operator", "pod-template-hash": "f974c8c5d" } }, "spec": { "containers": [ { "args": [ "-defaultsDir=/defaults", "-clusterOperatorName=marketplace", "-tls-cert", "/var/run/secrets/serving-cert/tls.crt", "-tls-key", "/var/run/secrets/serving-cert/tls.key" ], "command": [ "marketplace-operator" ], "env": [ { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "marketplace-operator" }, { "name": "RELEASE_VERSION", "value": "4.20.10" }, { "name": "GOMEMLIMIT", "value": "5MiB" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:24469169e1d51fb9a67dc7b4995a877ebc6ef82cc9fd539531e99746f6686192", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "marketplace-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8080, "name": "healthz", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1m", "memory": "5Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem/", "name": "marketplace-trusted-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "marketplace-operator-metrics" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "marketplace-operator", "serviceAccountName": "marketplace-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "emptyDir": {}, "name": "tmp" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "marketplace-trusted-ca", "optional": true }, "name": "marketplace-trusted-ca" }, { "name": "marketplace-operator-metrics", "secret": { "defaultMode": 420, "secretName": "marketplace-operator-metrics" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:39Z", "generation": 1, "labels": { "app": "cluster-monitoring-operator", "app.kubernetes.io/name": "cluster-monitoring-operator", "pod-template-hash": "579bff556b" }, "name": "cluster-monitoring-operator-579bff556b", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-monitoring-operator", "uid": "9bb62c32-5ad5-40e8-8642-4d6b8ab6c574" } ], "resourceVersion": "37805", "uid": "70c84150-a339-4d4e-9291-7800c3523854" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "cluster-monitoring-operator", "pod-template-hash": "579bff556b" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "cluster-monitoring-operator", "app.kubernetes.io/name": "cluster-monitoring-operator", "pod-template-hash": "579bff556b" } }, "spec": { "containers": [ { "args": [ "-namespace=openshift-monitoring", "-namespace-user-workload=openshift-user-workload-monitoring", "-configmap=cluster-monitoring-config", "-release-version=$(RELEASE_VERSION)", "-v=2", "-cert-file=/etc/tls/private/tls.crt", "-key-file=/etc/tls/private/tls.key", "-images=prometheus-operator=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:feb5c355d50d9f87922af2ebac547d88fd53715069568fbce3ab747ea3a4eca4", "-images=prometheus-config-reloader=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0bf92f64e29ca5efe44fdd04ffc34142c53099dd1d6c54e103fd85e96659438b", "-images=prometheus-operator-admission-webhook=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2f98d1d398c1eb81649410282ca2fbce43ff1b60fed91e25a8b462b236afa393", "-images=configmap-reloader=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:56ec75b3a19d10c8db14061c6a92f6a9f1fda6493269a32d3a911baee86643d8", "-images=prometheus=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ef0700d2eed9c28b628c7ef13a5ff36e6831dc16fed57000506daa8f64e75f01", "-images=alertmanager=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:59a82bd52f612e0931b74ab0e39b4464eadcd29fb301efcfc4aea4ac6e25f78a", "-images=node-exporter=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ecafc4918fb47e234aa58f2e8a4582dc0e639db8ea0676f7b1d8716e90c38ff1", "-images=kube-state-metrics=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b2f6ea32c1a1f9a078e8a3bb519e114791e62377a21fc2bb417c6cf974389bdc", "-images=openshift-state-metrics=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a872f7a00e6f1c4df68a6586afa52bb972e95a23f57e26838f0d060ef591cca4", "-images=kube-rbac-proxy=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "-images=telemeter-client=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:fdac1ddb66cdc493809ab1cfc407266d206e890e81c03e04509f9cd92d232171", "-images=prom-label-proxy=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3bc057f778bfd1a7e4eb26fb519bf63cb02dfa384f9ecbe899cbcd5b889f2980", "-images=thanos=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:fd8227acfd60a39dfcb99af4f0e38512b596b9f9ae35b61975310aff61e442bb", "-images=monitoring-plugin=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ee8a5148de25b530effebb1191c020878e3084ff8ec91952b234791b6f768052", "-images=kube-metrics-server=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:73f384d125310976a07016d670e78fa0f2f8f61065bdc3b3f5ef2935f20f7753" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.20.10" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7f08f47f92b39ffcbd8c7614beb4979545b48de0c77affc352b70ed6deda0bff", "imagePullPolicy": "IfNotPresent", "name": "cluster-monitoring-operator", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "75Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "cluster-monitoring-operator-tls", "readOnly": true }, { "mountPath": "/etc/cluster-monitoring-operator/telemetry", "name": "telemetry-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cluster-monitoring-operator", "serviceAccountName": "cluster-monitoring-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node.kubernetes.io/memory-pressure", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "telemetry-config" }, "name": "telemetry-config" }, { "name": "cluster-monitoring-operator-tls", "secret": { "defaultMode": 420, "secretName": "cluster-monitoring-operator-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:29:35Z", "generation": 1, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "kube-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.16.0", "pod-template-hash": "575979669d" }, "name": "kube-state-metrics-575979669d", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kube-state-metrics", "uid": "a081d5cb-8b26-4bac-845c-c9b805718a7f" } ], "resourceVersion": "17081", "uid": "2de36053-9c03-442b-8be7-6a6980d09178" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/name": "kube-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "575979669d" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "kube-state-metrics", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "kube-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.16.0", "pod-template-hash": "575979669d" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--host=127.0.0.1", "--port=8081", "--telemetry-host=127.0.0.1", "--telemetry-port=8082", "--custom-resource-state-config-file=/etc/kube-state-metrics/custom-resource-state-configmap.yaml", "--metric-denylist=\n^kube_secret_labels$,\n^kube_.+_annotations$,\n^kube_customresource_.+_annotations_info$,\n^kube_customresource_.+_labels_info$\n", "--metric-labels-allowlist=pods=[*],nodes=[*],namespaces=[*],persistentvolumes=[*],persistentvolumeclaims=[*],poddisruptionbudgets=[*]", "--metric-denylist=\n^kube_.+_created$,\n^kube_.+_metadata_resource_version$,\n^kube_replicaset_metadata_generation$,\n^kube_replicaset_status_observed_generation$,\n^kube_pod_restart_policy$,\n^kube_pod_init_container_status_terminated$,\n^kube_pod_init_container_status_running$,\n^kube_pod_container_status_terminated$,\n^kube_pod_container_status_running$,\n^kube_pod_completion_time$,\n^kube_pod_status_scheduled$\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b2f6ea32c1a1f9a078e8a3bb519e114791e62377a21fc2bb417c6cf974389bdc", "imagePullPolicy": "IfNotPresent", "name": "kube-state-metrics", "resources": { "requests": { "cpu": "2m", "memory": "80Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp", "name": "volume-directive-shadow" }, { "mountPath": "/etc/kube-state-metrics", "name": "kube-state-metrics-custom-resource-state-configmap", "readOnly": true } ] }, { "args": [ "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8081/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-main", "ports": [ { "containerPort": 8443, "name": "https-main", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "kube-state-metrics-tls" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca" }, { "mountPath": "/etc/kube-rbac-policy", "name": "kube-state-metrics-kube-rbac-proxy-config", "readOnly": true } ] }, { "args": [ "--secure-listen-address=:9443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8082/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-self", "ports": [ { "containerPort": 9443, "name": "https-self", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "kube-state-metrics-tls" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca" }, { "mountPath": "/etc/kube-rbac-policy", "name": "kube-state-metrics-kube-rbac-proxy-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kube-state-metrics", "serviceAccountName": "kube-state-metrics", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "volume-directive-shadow" }, { "name": "kube-state-metrics-tls", "secret": { "defaultMode": 420, "secretName": "kube-state-metrics-tls" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "name": "kube-state-metrics-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "kube-state-metrics-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "kube-state-metrics-custom-resource-state-configmap" }, "name": "kube-state-metrics-custom-resource-state-configmap" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:29:39Z", "generation": 1, "labels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "6dcd779f5f" }, "name": "metrics-server-6dcd779f5f", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "metrics-server", "uid": "16c6fadf-2d1e-4889-b905-53a3502857a0" } ], "resourceVersion": "47423", "uid": "c5baf491-a1b1-4545-9954-899b9133945e" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "6dcd779f5f" } }, "template": { "metadata": { "annotations": { "monitoring.openshift.io/kubelet-serving-ca-bundle-hash": "24tavajar3osn", "monitoring.openshift.io/metrics-server-client-certs-hash": "187jpdkt5rse", "monitoring.openshift.io/serving-ca-secret-hash": "5gt20r4e3i3g", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "6dcd779f5f" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--secure-port=10250", "--kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname", "--kubelet-use-node-status-port", "--metric-resolution=15s", "--kubelet-certificate-authority=/etc/tls/kubelet-serving-ca-bundle/ca-bundle.crt", "--kubelet-client-certificate=/etc/tls/metrics-server-client-certs/tls.crt", "--kubelet-client-key=/etc/tls/metrics-server-client-certs/tls.key", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--shutdown-send-retry-after=true", "--shutdown-delay-duration=150s", "--disable-http2-serving=true", "--tls-min-version=VersionTLS12", "--client-ca-file=/etc/client-ca-bundle/client-ca-file", "--requestheader-client-ca-file=/etc/client-ca-bundle/requestheader-client-ca-file", "--requestheader-allowed-names=kube-apiserver-proxy,system:kube-apiserver-proxy,system:openshift-aggregator", "--requestheader-extra-headers-prefix=X-Remote-Extra-", "--requestheader-group-headers=X-Remote-Group", "--requestheader-username-headers=X-Remote-User", "--audit-policy-file=/etc/audit/metadata-profile.yaml", "--audit-log-path=/var/log/metrics-server/audit.log", "--audit-log-maxsize=100", "--audit-log-maxbackup=5", "--audit-log-compress=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:73f384d125310976a07016d670e78fa0f2f8f61065bdc3b3f5ef2935f20f7753", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/livez", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "metrics-server", "ports": [ { "containerPort": 10250, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 6, "httpGet": { "path": "/readyz", "port": "https", "scheme": "HTTPS" }, "initialDelaySeconds": 20, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1m", "memory": "40Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-metrics-server-tls" }, { "mountPath": "/etc/tls/metrics-server-client-certs", "name": "secret-metrics-server-client-certs" }, { "mountPath": "/etc/tls/kubelet-serving-ca-bundle", "name": "configmap-kubelet-serving-ca-bundle" }, { "mountPath": "/etc/audit", "name": "metrics-server-audit-profiles", "readOnly": true }, { "mountPath": "/var/log/metrics-server", "name": "audit-log" }, { "mountPath": "/etc/client-ca-bundle", "name": "client-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "metrics-server", "serviceAccountName": "metrics-server", "terminationGracePeriodSeconds": 170, "volumes": [ { "name": "secret-metrics-server-client-certs", "secret": { "defaultMode": 420, "secretName": "metrics-server-client-certs" } }, { "name": "secret-metrics-server-tls", "secret": { "defaultMode": 420, "secretName": "metrics-server-tls" } }, { "configMap": { "defaultMode": 420, "name": "kubelet-serving-ca-bundle" }, "name": "configmap-kubelet-serving-ca-bundle" }, { "emptyDir": {}, "name": "audit-log" }, { "configMap": { "defaultMode": 420, "name": "metrics-server-audit-profiles" }, "name": "metrics-server-audit-profiles" }, { "name": "client-ca-bundle", "secret": { "defaultMode": 420, "secretName": "metrics-server-93pck2ms661sp" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:29:39Z", "generation": 1, "labels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "79ccf9d8b8" }, "name": "monitoring-plugin-79ccf9d8b8", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "monitoring-plugin", "uid": "79166ab7-458f-4490-b19d-6bc6d8f486b4" } ], "resourceVersion": "47701", "uid": "c5793dab-729f-4f73-bbe3-eedad1cbf84d" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "79ccf9d8b8" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "79ccf9d8b8" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "automountServiceAccountToken": false, "containers": [ { "args": [ "--config-path=/opt/app-root/web/dist", "--static-path=/opt/app-root/web/dist", "--cert=/var/cert/tls.crt", "--key=/var/cert/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12" ], "command": [ "/opt/app-root/plugin-backend" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ee8a5148de25b530effebb1191c020878e3084ff8ec91952b234791b6f768052", "imagePullPolicy": "IfNotPresent", "name": "monitoring-plugin", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/cert", "name": "monitoring-plugin-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "monitoring-plugin-cert", "secret": { "defaultMode": 420, "secretName": "monitoring-plugin-cert" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:29:35Z", "generation": 1, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "openshift-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "5489fc9d7" }, "name": "openshift-state-metrics-5489fc9d7", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-state-metrics", "uid": "36c263e9-c67b-4cf3-b442-56deb2fdf47c" } ], "resourceVersion": "37823", "uid": "5ad15fdc-402a-4fa1-8cc6-0ba50cd04554" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/name": "openshift-state-metrics", "pod-template-hash": "5489fc9d7" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "openshift-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "5489fc9d7" } }, "spec": { "containers": [ { "args": [ "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8081/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-policy/config.yaml", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-main", "ports": [ { "containerPort": 8443, "name": "https-main", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "openshift-state-metrics-tls" }, { "mountPath": "/etc/kube-rbac-policy", "name": "openshift-state-metrics-kube-rbac-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] }, { "args": [ "--secure-listen-address=:9443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8082/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-policy/config.yaml", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-self", "ports": [ { "containerPort": 9443, "name": "https-self", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "openshift-state-metrics-tls" }, { "mountPath": "/etc/kube-rbac-policy", "name": "openshift-state-metrics-kube-rbac-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] }, { "args": [ "--host=127.0.0.1", "--port=8081", "--telemetry-host=127.0.0.1", "--telemetry-port=8082" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a872f7a00e6f1c4df68a6586afa52bb972e95a23f57e26838f0d060ef591cca4", "imagePullPolicy": "IfNotPresent", "name": "openshift-state-metrics", "resources": { "requests": { "cpu": "1m", "memory": "32Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-state-metrics", "serviceAccountName": "openshift-state-metrics", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "openshift-state-metrics-tls", "secret": { "defaultMode": 420, "secretName": "openshift-state-metrics-tls" } }, { "name": "openshift-state-metrics-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "openshift-state-metrics-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:29:24Z", "generation": 1, "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.85.0", "pod-template-hash": "64d98dfd98" }, "name": "prometheus-operator-64d98dfd98", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "prometheus-operator", "uid": "f2151c1f-caeb-4852-9cf0-07e85b311079" } ], "resourceVersion": "16525", "uid": "48be8ef2-b3a1-4834-b065-0afc6a5b5407" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/name": "prometheus-operator", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "64d98dfd98" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "prometheus-operator", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.85.0", "pod-template-hash": "64d98dfd98" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--kubelet-service=kube-system/kubelet", "--prometheus-config-reloader=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0bf92f64e29ca5efe44fdd04ffc34142c53099dd1d6c54e103fd85e96659438b", "--kubelet-endpoints=true", "--kubelet-endpointslice=false", "--watch-referenced-objects-in-all-namespaces=true", "--prometheus-instance-namespaces=openshift-monitoring", "--thanos-ruler-instance-namespaces=openshift-monitoring", "--alertmanager-instance-namespaces=openshift-monitoring", "--config-reloader-cpu-limit=0", "--config-reloader-memory-limit=0", "--config-reloader-cpu-request=1m", "--config-reloader-memory-request=10Mi", "--web.listen-address=127.0.0.1:8080", "--controller-id=openshift-monitoring/prometheus-operator" ], "env": [ { "name": "GOGC", "value": "30" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:feb5c355d50d9f87922af2ebac547d88fd53715069568fbce3ab747ea3a4eca4", "imagePullPolicy": "IfNotPresent", "name": "prometheus-operator", "resources": { "requests": { "cpu": "5m", "memory": "150Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://localhost:8080/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "prometheus-operator-tls", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true }, { "mountPath": "/etc/kube-rbac-policy", "name": "prometheus-operator-kube-rbac-proxy-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "prometheus-operator", "serviceAccountName": "prometheus-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "prometheus-operator-tls", "secret": { "defaultMode": 420, "secretName": "prometheus-operator-tls" } }, { "name": "prometheus-operator-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "prometheus-operator-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:24:08Z", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.85.0", "pod-template-hash": "6c9d88f5fb" }, "name": "prometheus-operator-admission-webhook-6c9d88f5fb", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "prometheus-operator-admission-webhook", "uid": "0a82d666-3e27-4b57-88f1-6893810c77c9" } ], "resourceVersion": "47650", "uid": "ce604f82-66aa-4b5c-9ec3-b1b999d1bbc9" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "6c9d88f5fb" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "prometheus-operator-admission-webhook", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.85.0", "pod-template-hash": "6c9d88f5fb" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "automountServiceAccountToken": false, "containers": [ { "args": [ "--web.enable-tls=true", "--web.cert-file=/etc/tls/private/tls.crt", "--web.key-file=/etc/tls/private/tls.key", "--web.tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--web.tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2f98d1d398c1eb81649410282ca2fbce43ff1b60fed91e25a8b462b236afa393", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "prometheus-operator-admission-webhook", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "5m", "memory": "30Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "tls-certificates", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "prometheus-operator-admission-webhook", "serviceAccountName": "prometheus-operator-admission-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls-certificates", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "prometheus-operator-admission-webhook-tls" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-04-28T12:58:07Z", "generation": 1, "labels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "telemeter-client", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "555c959bf4" }, "name": "telemeter-client-555c959bf4", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "telemeter-client", "uid": "fe1860de-b58b-4995-bbff-eed01c143889" } ], "resourceVersion": "42067", "uid": "48c669b8-5e8c-401e-9e6d-dac2e20c7097" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/name": "telemeter-client", "pod-template-hash": "555c959bf4" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}", "telemeter-token-hash": "15goceamu8hbo" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "telemeter-client", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "555c959bf4" } }, "spec": { "containers": [ { "command": [ "/usr/bin/telemeter-client", "--id=$(ID)", "--from=$(FROM)", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--from-ca-file=/etc/serving-certs-ca-bundle/service-ca.crt", "--from-token-file=/var/run/secrets/kubernetes.io/serviceaccount/token", "--to=$(TO)", "--to-token-file=/etc/telemeter/token", "--listen=localhost:8080", "--anonymize-salt-file=/etc/telemeter/salt", "--anonymize-labels=$(ANONYMIZE_LABELS)", "--match={__name__=~\"cluster:usage:.*\"}", "--match={__name__=\"count:up0\"}", "--match={__name__=\"count:up1\"}", "--match={__name__=\"cluster_version\"}", "--match={__name__=\"cluster_version_available_updates\"}", "--match={__name__=\"cluster_version_capability\"}", "--match={__name__=\"cluster_operator_up\"}", "--match={__name__=\"cluster_operator_conditions\"}", "--match={__name__=\"cluster_version_payload\"}", "--match={__name__=\"cluster_installer\"}", "--match={__name__=\"cluster_infrastructure_provider\"}", "--match={__name__=\"cluster_feature_set\"}", "--match={__name__=\"instance:etcd_object_counts:sum\"}", "--match={__name__=\"ALERTS\",alertstate=\"firing\",severity=~\"critical|warning|info|none\"}", "--match={__name__=\"code:apiserver_request_total:rate:sum\"}", "--match={__name__=\"cluster:capacity_cpu_cores:sum\"}", "--match={__name__=\"cluster:capacity_memory_bytes:sum\"}", "--match={__name__=\"cluster:cpu_usage_cores:sum\"}", "--match={__name__=\"cluster:memory_usage_bytes:sum\"}", "--match={__name__=\"openshift:cpu_usage_cores:sum\"}", "--match={__name__=\"openshift:memory_usage_bytes:sum\"}", "--match={__name__=\"workload:cpu_usage_cores:sum\"}", "--match={__name__=\"workload:memory_usage_bytes:sum\"}", "--match={__name__=\"cluster:virt_platform_nodes:sum\"}", "--match={__name__=\"cluster:node_instance_type_count:sum\"}", "--match={__name__=\"cnv:vmi_status_running:count\"}", "--match={__name__=\"cnv_abnormal\", reason=~\"memory_working_set_delta_from_request|memory_rss_delta_from_request\"}", "--match={__name__=\"cluster:vmi_request_cpu_cores:sum\"}", "--match={__name__=\"node_role_os_version_machine:cpu_capacity_cores:sum\"}", "--match={__name__=\"node_role_os_version_machine:cpu_capacity_sockets:sum\"}", "--match={__name__=\"subscription_sync_total\"}", "--match={__name__=\"olm_resolution_duration_seconds\"}", "--match={__name__=\"csv_succeeded\"}", "--match={__name__=\"csv_abnormal\"}", "--match={__name__=\"cluster:kube_persistentvolumeclaim_resource_requests_storage_bytes:provisioner:sum\"}", "--match={__name__=\"cluster:kubelet_volume_stats_used_bytes:provisioner:sum\"}", "--match={__name__=\"ceph_cluster_total_bytes\"}", "--match={__name__=\"ceph_cluster_total_used_raw_bytes\"}", "--match={__name__=\"ceph_health_status\"}", "--match={__name__=\"odf_system_raw_capacity_total_bytes\"}", "--match={__name__=\"odf_system_raw_capacity_used_bytes\"}", "--match={__name__=\"odf_system_health_status\"}", "--match={__name__=\"job:ceph_osd_metadata:count\"}", "--match={__name__=\"job:kube_pv:count\"}", "--match={__name__=\"job:odf_system_pvs:count\"}", "--match={__name__=\"job:ceph_pools_iops:total\"}", "--match={__name__=\"job:ceph_pools_iops_bytes:total\"}", "--match={__name__=\"job:ceph_versions_running:count\"}", "--match={__name__=\"job:noobaa_total_unhealthy_buckets:sum\"}", "--match={__name__=\"job:noobaa_bucket_count:sum\"}", "--match={__name__=\"job:noobaa_total_object_count:sum\"}", "--match={__name__=\"odf_system_bucket_count\", system_type=\"OCS\", system_vendor=\"Red Hat\"}", "--match={__name__=\"odf_system_objects_total\", system_type=\"OCS\", system_vendor=\"Red Hat\"}", "--match={__name__=\"noobaa_accounts_num\"}", "--match={__name__=\"noobaa_total_usage\"}", "--match={__name__=\"console_url\"}", "--match={__name__=\"cluster:console_auth_login_requests_total:sum\"}", "--match={__name__=\"cluster:console_auth_login_successes_total:sum\"}", "--match={__name__=\"cluster:console_auth_login_failures_total:sum\"}", "--match={__name__=\"cluster:console_auth_logout_requests_total:sum\"}", "--match={__name__=\"cluster:console_usage_users:max\"}", "--match={__name__=\"cluster:console_plugins_info:max\"}", "--match={__name__=\"cluster:console_customization_perspectives_info:max\"}", "--match={__name__=\"cluster:ovnkube_controller_egress_routing_via_host:max\"}", "--match={__name__=\"cluster:ovnkube_controller_admin_network_policies_db_objects:max\",table_name=~\"ACL|Address_Set\"}", "--match={__name__=\"cluster:ovnkube_controller_baseline_admin_network_policies_db_objects:max\",table_name=~\"ACL|Address_Set\"}", "--match={__name__=\"cluster:ovnkube_controller_admin_network_policies_rules:max\",direction=~\"Ingress|Egress\",action=~\"Pass|Allow|Deny\"}", "--match={__name__=\"cluster:ovnkube_controller_baseline_admin_network_policies_rules:max\",direction=~\"Ingress|Egress\",action=~\"Allow|Deny\"}", "--match={__name__=\"cluster:network_attachment_definition_instances:max\"}", "--match={__name__=\"cluster:network_attachment_definition_enabled_instance_up:max\"}", "--match={__name__=\"cluster:ingress_controller_aws_nlb_active:sum\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:min\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:max\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:avg\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:median\"}", "--match={__name__=\"cluster:openshift_route_info:tls_termination:sum\"}", "--match={__name__=\"insightsclient_request_send_total\"}", "--match={__name__=\"cam_app_workload_migrations\"}", "--match={__name__=\"cluster:apiserver_current_inflight_requests:sum:max_over_time:2m\"}", "--match={__name__=\"cluster:alertmanager_integrations:max\"}", "--match={__name__=\"cluster:telemetry_selected_series:count\"}", "--match={__name__=\"openshift:prometheus_tsdb_head_series:sum\"}", "--match={__name__=\"openshift:prometheus_tsdb_head_samples_appended_total:sum\"}", "--match={__name__=\"monitoring:container_memory_working_set_bytes:sum\"}", "--match={__name__=\"namespace_job:scrape_series_added:topk3_sum1h\"}", "--match={__name__=\"namespace_job:scrape_samples_post_metric_relabeling:topk3\"}", "--match={__name__=\"monitoring:haproxy_server_http_responses_total:sum\"}", "--match={__name__=\"profile:cluster_monitoring_operator_collection_profile:max\"}", "--match={__name__=\"vendor_model:node_accelerator_cards:sum\",vendor=~\"NVIDIA|AMD|GAUDI|INTEL|QUALCOMM|Marvell|Mellanox\"}", "--match={__name__=\"rhmi_status\"}", "--match={__name__=\"status:upgrading:version:rhoam_state:max\"}", "--match={__name__=\"state:rhoam_critical_alerts:max\"}", "--match={__name__=\"state:rhoam_warning_alerts:max\"}", "--match={__name__=\"rhoam_7d_slo_percentile:max\"}", "--match={__name__=\"rhoam_7d_slo_remaining_error_budget:max\"}", "--match={__name__=\"cluster_legacy_scheduler_policy\"}", "--match={__name__=\"cluster_master_schedulable\"}", "--match={__name__=\"che_workspace_status\"}", "--match={__name__=\"che_workspace_started_total\"}", "--match={__name__=\"che_workspace_failure_total\"}", "--match={__name__=\"che_workspace_start_time_seconds_sum\"}", "--match={__name__=\"che_workspace_start_time_seconds_count\"}", "--match={__name__=\"cco_credentials_mode\"}", "--match={__name__=\"cluster:kube_persistentvolume_plugin_type_counts:sum\"}", "--match={__name__=\"acm_managed_cluster_info\"}", "--match={__name__=\"acm_managed_cluster_worker_cores:max\"}", "--match={__name__=\"acm_console_page_count:sum\", page=~\"overview-classic|overview-fleet|search|search-details|clusters|application|governance\"}", "--match={__name__=\"cluster:vsphere_vcenter_info:sum\"}", "--match={__name__=\"cluster:vsphere_esxi_version_total:sum\"}", "--match={__name__=\"cluster:vsphere_node_hw_version_total:sum\"}", "--match={__name__=\"openshift:build_by_strategy:sum\"}", "--match={__name__=\"rhods_aggregate_availability\"}", "--match={__name__=\"rhods_total_users\"}", "--match={__name__=\"instance:etcd_disk_wal_fsync_duration_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"instance:etcd_mvcc_db_total_size_in_bytes:sum\"}", "--match={__name__=\"instance:etcd_network_peer_round_trip_time_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"instance:etcd_mvcc_db_total_size_in_use_in_bytes:sum\"}", "--match={__name__=\"instance:etcd_disk_backend_commit_duration_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"jaeger_operator_instances_storage_types\"}", "--match={__name__=\"jaeger_operator_instances_strategies\"}", "--match={__name__=\"jaeger_operator_instances_agent_strategies\"}", "--match={__name__=\"type:tempo_operator_tempostack_storage_backend:sum\",type=~\"azure|gcs|s3\"}", "--match={__name__=\"state:tempo_operator_tempostack_managed:sum\",state=~\"Managed|Unmanaged\"}", "--match={__name__=\"type:tempo_operator_tempostack_multi_tenancy:sum\",type=~\"static|openshift|disabled\"}", "--match={__name__=\"enabled:tempo_operator_tempostack_jaeger_ui:sum\",enabled=~\"true|false\"}", "--match={__name__=\"type:opentelemetry_collector_receivers:sum\",type=~\"jaeger|hostmetrics|opencensus|prometheus|zipkin|kafka|filelog|journald|k8sevents|kubeletstats|k8scluster|k8sobjects|otlp\"}", "--match={__name__=\"type:opentelemetry_collector_exporters:sum\",type=~\"debug|logging|otlp|otlphttp|prometheus|lokiexporter|kafka|awscloudwatchlogs|loadbalancing\"}", "--match={__name__=\"type:opentelemetry_collector_processors:sum\",type=~\"batch|memorylimiter|attributes|resource|span|k8sattributes|resourcedetection|filter|routing|cumulativetodelta|groupbyattrs\"}", "--match={__name__=\"type:opentelemetry_collector_extensions:sum\",type=~\"zpages|ballast|memorylimiter|jaegerremotesampling|healthcheck|pprof|oauth2clientauth|oidcauth|bearertokenauth|filestorage\"}", "--match={__name__=\"type:opentelemetry_collector_connectors:sum\",type=~\"spanmetrics|forward\"}", "--match={__name__=\"type:opentelemetry_collector_info:sum\",type=~\"deployment|daemonset|sidecar|statefulset\"}", "--match={__name__=\"appsvcs:cores_by_product:sum\"}", "--match={__name__=\"nto_custom_profiles:count\"}", "--match={__name__=\"openshift_csi_share_configmap\"}", "--match={__name__=\"openshift_csi_share_secret\"}", "--match={__name__=\"openshift_csi_share_mount_failures_total\"}", "--match={__name__=\"openshift_csi_share_mount_requests_total\"}", "--match={__name__=\"eo_es_storage_info\"}", "--match={__name__=\"eo_es_redundancy_policy_info\"}", "--match={__name__=\"eo_es_defined_delete_namespaces_total\"}", "--match={__name__=\"eo_es_misconfigured_memory_resources_info\"}", "--match={__name__=\"cluster:eo_es_data_nodes_total:max\"}", "--match={__name__=\"cluster:eo_es_documents_created_total:sum\"}", "--match={__name__=\"cluster:eo_es_documents_deleted_total:sum\"}", "--match={__name__=\"pod:eo_es_shards_total:max\"}", "--match={__name__=\"eo_es_cluster_management_state_info\"}", "--match={__name__=\"imageregistry:imagestreamtags_count:sum\"}", "--match={__name__=\"imageregistry:operations_count:sum\"}", "--match={__name__=\"log_logging_info\"}", "--match={__name__=\"log_collector_error_count_total\"}", "--match={__name__=\"log_forwarder_pipeline_info\"}", "--match={__name__=\"log_forwarder_input_info\"}", "--match={__name__=\"log_forwarder_output_info\"}", "--match={__name__=\"cluster:log_collected_bytes_total:sum\"}", "--match={__name__=\"cluster:log_logged_bytes_total:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_pipelines:sum\"}", "--match={__name__=\"openshift_logging:log_forwarders:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_input_type:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_output_type:sum\"}", "--match={__name__=\"openshift_logging:vector_component_received_bytes_total:rate5m\"}", "--match={__name__=\"cluster:kata_monitor_running_shim_count:sum\"}", "--match={__name__=\"platform:hypershift_hostedclusters:max\"}", "--match={__name__=\"platform:hypershift_nodepools:max\"}", "--match={__name__=\"cluster_name:hypershift_nodepools_size:sum\"}", "--match={__name__=\"cluster_name:hypershift_nodepools_available_replicas:sum\"}", "--match={__name__=\"namespace:noobaa_unhealthy_bucket_claims:max\"}", "--match={__name__=\"namespace:noobaa_buckets_claims:max\"}", "--match={__name__=\"namespace:noobaa_unhealthy_namespace_resources:max\"}", "--match={__name__=\"namespace:noobaa_namespace_resources:max\"}", "--match={__name__=\"namespace:noobaa_unhealthy_namespace_buckets:max\"}", "--match={__name__=\"namespace:noobaa_namespace_buckets:max\"}", "--match={__name__=\"namespace:noobaa_accounts:max\"}", "--match={__name__=\"namespace:noobaa_usage:max\"}", "--match={__name__=\"namespace:noobaa_system_health_status:max\"}", "--match={__name__=\"ocs_advanced_feature_usage\"}", "--match={__name__=\"os_image_url_override:sum\"}", "--match={__name__=\"cluster:mcd_nodes_with_unsupported_packages:count\"}", "--match={__name__=\"cluster:mcd_total_unsupported_packages:sum\"}", "--match={__name__=\"cluster:vsphere_topology_tags:max\"}", "--match={__name__=\"cluster:vsphere_infrastructure_failure_domains:max\"}", "--match={__name__=\"apiserver_list_watch_request_success_total:rate:sum\", verb=~\"LIST|WATCH\"}", "--match={__name__=\"rhacs:telemetry:rox_central_info\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_clusters\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_nodes\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_vcpus\"}", "--match={__name__=\"rhacs:telemetry:rox_sensor_info\"}", "--match={__name__=\"cluster:volume_manager_selinux_pod_context_mismatch_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volume_context_mismatch_warnings_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volume_context_mismatch_errors_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volumes_admitted_total\"}", "--match={__name__=\"ols:provider_model_configuration\"}", "--match={__name__=\"ols:rest_api_query_calls_total:2xx\"}", "--match={__name__=\"ols:rest_api_query_calls_total:4xx\"}", "--match={__name__=\"ols:rest_api_query_calls_total:5xx\"}", "--match={__name__=\"openshift:openshift_network_operator_ipsec_state:info\"}", "--match={__name__=\"cluster:health:group_severity:count\", severity=~\"critical|warning|info|none\"}", "--match={__name__=\"cluster:controlplane_topology:info\", mode=~\"HighlyAvailable|HighlyAvailableArbiter|SingleReplica|DualReplica|External\"}", "--match={__name__=\"cluster:infrastructure_topology:info\", mode=~\"HighlyAvailable|SingleReplica\"}", "--match={__name__=\"cluster:selinux_warning_controller_selinux_volume_conflict:count\"}", "--match={__name__=\"cluster:mtv_migrations_status_total:sum\", provider=~\"ova|vsphere|openstack|openshift|ovirt|awsec2\", target=~\"Local|Remote\", mode=~\"Cold|Warm|RCM\", status=~\"Succeeded|Failed|Canceled\"}", "--limit-bytes=5242880" ], "env": [ { "name": "ANONYMIZE_LABELS" }, { "name": "FROM", "value": "https://prometheus-k8s.openshift-monitoring.svc:9091" }, { "name": "ID", "value": "dc03c1ea-64a8-4a07-82a4-29693f7fb210" }, { "name": "TO", "value": "https://infogw.api.openshift.com/" }, { "name": "HTTP_PROXY" }, { "name": "HTTPS_PROXY" }, { "name": "NO_PROXY" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:fdac1ddb66cdc493809ab1cfc407266d206e890e81c03e04509f9cd92d232171", "imagePullPolicy": "IfNotPresent", "name": "telemeter-client", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "40Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/serving-certs-ca-bundle", "name": "serving-certs-ca-bundle" }, { "mountPath": "/etc/telemeter", "name": "secret-telemeter-client" }, { "mountPath": "/etc/tls/private", "name": "federate-client-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem/", "name": "telemeter-trusted-ca-bundle", "readOnly": true } ] }, { "args": [ "--reload-url=http://localhost:8080/-/reload", "--watched-dir=/etc/serving-certs-ca-bundle" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0bf92f64e29ca5efe44fdd04ffc34142c53099dd1d6c54e103fd85e96659438b", "imagePullPolicy": "IfNotPresent", "name": "reload", "resources": { "requests": { "cpu": "1m", "memory": "10Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/serving-certs-ca-bundle", "name": "serving-certs-ca-bundle" } ] }, { "args": [ "--secure-listen-address=:8443", "--upstream=http://127.0.0.1:8080/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--config-file=/etc/kube-rbac-policy/config.yaml", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "telemeter-client-tls" }, { "mountPath": "/etc/kube-rbac-policy", "name": "secret-telemeter-client-kube-rbac-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "telemeter-client", "serviceAccountName": "telemeter-client", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "telemeter-client-serving-certs-ca-bundle" }, "name": "serving-certs-ca-bundle" }, { "name": "secret-telemeter-client", "secret": { "defaultMode": 420, "secretName": "telemeter-client" } }, { "name": "telemeter-client-tls", "secret": { "defaultMode": 420, "secretName": "telemeter-client-tls" } }, { "name": "federate-client-tls", "secret": { "defaultMode": 420, "secretName": "federate-client-certs" } }, { "name": "secret-telemeter-client-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "telemeter-client-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "telemeter-trusted-ca-bundle-aq21igpnn5meu", "optional": true }, "name": "telemeter-trusted-ca-bundle" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:29:40Z", "generation": 2, "labels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "telemeter-client", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "75f4bdf9c7" }, "name": "telemeter-client-75f4bdf9c7", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "telemeter-client", "uid": "fe1860de-b58b-4995-bbff-eed01c143889" } ], "resourceVersion": "42084", "uid": "84429b97-bffc-4501-8370-1d55a8816078" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/name": "telemeter-client", "pod-template-hash": "75f4bdf9c7" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}", "telemeter-token-hash": "15goceamu8hbo" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "telemeter-client", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "75f4bdf9c7" } }, "spec": { "containers": [ { "command": [ "/usr/bin/telemeter-client", "--id=$(ID)", "--from=$(FROM)", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--from-ca-file=/etc/serving-certs-ca-bundle/service-ca.crt", "--from-token-file=/var/run/secrets/kubernetes.io/serviceaccount/token", "--to=$(TO)", "--to-token-file=/etc/telemeter/token", "--listen=localhost:8080", "--anonymize-salt-file=/etc/telemeter/salt", "--anonymize-labels=$(ANONYMIZE_LABELS)", "--match={__name__=~\"cluster:usage:.*\"}", "--match={__name__=\"count:up0\"}", "--match={__name__=\"count:up1\"}", "--match={__name__=\"cluster_version\"}", "--match={__name__=\"cluster_version_available_updates\"}", "--match={__name__=\"cluster_version_capability\"}", "--match={__name__=\"cluster_operator_up\"}", "--match={__name__=\"cluster_operator_conditions\"}", "--match={__name__=\"cluster_version_payload\"}", "--match={__name__=\"cluster_installer\"}", "--match={__name__=\"cluster_infrastructure_provider\"}", "--match={__name__=\"cluster_feature_set\"}", "--match={__name__=\"instance:etcd_object_counts:sum\"}", "--match={__name__=\"ALERTS\",alertstate=\"firing\",severity=~\"critical|warning|info|none\"}", "--match={__name__=\"code:apiserver_request_total:rate:sum\"}", "--match={__name__=\"cluster:capacity_cpu_cores:sum\"}", "--match={__name__=\"cluster:capacity_memory_bytes:sum\"}", "--match={__name__=\"cluster:cpu_usage_cores:sum\"}", "--match={__name__=\"cluster:memory_usage_bytes:sum\"}", "--match={__name__=\"openshift:cpu_usage_cores:sum\"}", "--match={__name__=\"openshift:memory_usage_bytes:sum\"}", "--match={__name__=\"workload:cpu_usage_cores:sum\"}", "--match={__name__=\"workload:memory_usage_bytes:sum\"}", "--match={__name__=\"cluster:virt_platform_nodes:sum\"}", "--match={__name__=\"cluster:node_instance_type_count:sum\"}", "--match={__name__=\"cnv:vmi_status_running:count\"}", "--match={__name__=\"cnv_abnormal\", reason=~\"memory_working_set_delta_from_request|memory_rss_delta_from_request\"}", "--match={__name__=\"cluster:vmi_request_cpu_cores:sum\"}", "--match={__name__=\"node_role_os_version_machine:cpu_capacity_cores:sum\"}", "--match={__name__=\"node_role_os_version_machine:cpu_capacity_sockets:sum\"}", "--match={__name__=\"subscription_sync_total\"}", "--match={__name__=\"olm_resolution_duration_seconds\"}", "--match={__name__=\"csv_succeeded\"}", "--match={__name__=\"csv_abnormal\"}", "--match={__name__=\"cluster:kube_persistentvolumeclaim_resource_requests_storage_bytes:provisioner:sum\"}", "--match={__name__=\"cluster:kubelet_volume_stats_used_bytes:provisioner:sum\"}", "--match={__name__=\"ceph_cluster_total_bytes\"}", "--match={__name__=\"ceph_cluster_total_used_raw_bytes\"}", "--match={__name__=\"ceph_health_status\"}", "--match={__name__=\"odf_system_raw_capacity_total_bytes\"}", "--match={__name__=\"odf_system_raw_capacity_used_bytes\"}", "--match={__name__=\"odf_system_health_status\"}", "--match={__name__=\"job:ceph_osd_metadata:count\"}", "--match={__name__=\"job:kube_pv:count\"}", "--match={__name__=\"job:odf_system_pvs:count\"}", "--match={__name__=\"job:ceph_pools_iops:total\"}", "--match={__name__=\"job:ceph_pools_iops_bytes:total\"}", "--match={__name__=\"job:ceph_versions_running:count\"}", "--match={__name__=\"job:noobaa_total_unhealthy_buckets:sum\"}", "--match={__name__=\"job:noobaa_bucket_count:sum\"}", "--match={__name__=\"job:noobaa_total_object_count:sum\"}", "--match={__name__=\"odf_system_bucket_count\", system_type=\"OCS\", system_vendor=\"Red Hat\"}", "--match={__name__=\"odf_system_objects_total\", system_type=\"OCS\", system_vendor=\"Red Hat\"}", "--match={__name__=\"noobaa_accounts_num\"}", "--match={__name__=\"noobaa_total_usage\"}", "--match={__name__=\"console_url\"}", "--match={__name__=\"cluster:console_auth_login_requests_total:sum\"}", "--match={__name__=\"cluster:console_auth_login_successes_total:sum\"}", "--match={__name__=\"cluster:console_auth_login_failures_total:sum\"}", "--match={__name__=\"cluster:console_auth_logout_requests_total:sum\"}", "--match={__name__=\"cluster:console_usage_users:max\"}", "--match={__name__=\"cluster:console_plugins_info:max\"}", "--match={__name__=\"cluster:console_customization_perspectives_info:max\"}", "--match={__name__=\"cluster:ovnkube_controller_egress_routing_via_host:max\"}", "--match={__name__=\"cluster:ovnkube_controller_admin_network_policies_db_objects:max\",table_name=~\"ACL|Address_Set\"}", "--match={__name__=\"cluster:ovnkube_controller_baseline_admin_network_policies_db_objects:max\",table_name=~\"ACL|Address_Set\"}", "--match={__name__=\"cluster:ovnkube_controller_admin_network_policies_rules:max\",direction=~\"Ingress|Egress\",action=~\"Pass|Allow|Deny\"}", "--match={__name__=\"cluster:ovnkube_controller_baseline_admin_network_policies_rules:max\",direction=~\"Ingress|Egress\",action=~\"Allow|Deny\"}", "--match={__name__=\"cluster:network_attachment_definition_instances:max\"}", "--match={__name__=\"cluster:network_attachment_definition_enabled_instance_up:max\"}", "--match={__name__=\"cluster:ingress_controller_aws_nlb_active:sum\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:min\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:max\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:avg\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:median\"}", "--match={__name__=\"cluster:openshift_route_info:tls_termination:sum\"}", "--match={__name__=\"insightsclient_request_send_total\"}", "--match={__name__=\"cam_app_workload_migrations\"}", "--match={__name__=\"cluster:apiserver_current_inflight_requests:sum:max_over_time:2m\"}", "--match={__name__=\"cluster:alertmanager_integrations:max\"}", "--match={__name__=\"cluster:telemetry_selected_series:count\"}", "--match={__name__=\"openshift:prometheus_tsdb_head_series:sum\"}", "--match={__name__=\"openshift:prometheus_tsdb_head_samples_appended_total:sum\"}", "--match={__name__=\"monitoring:container_memory_working_set_bytes:sum\"}", "--match={__name__=\"namespace_job:scrape_series_added:topk3_sum1h\"}", "--match={__name__=\"namespace_job:scrape_samples_post_metric_relabeling:topk3\"}", "--match={__name__=\"monitoring:haproxy_server_http_responses_total:sum\"}", "--match={__name__=\"profile:cluster_monitoring_operator_collection_profile:max\"}", "--match={__name__=\"vendor_model:node_accelerator_cards:sum\",vendor=~\"NVIDIA|AMD|GAUDI|INTEL|QUALCOMM|Marvell|Mellanox\"}", "--match={__name__=\"rhmi_status\"}", "--match={__name__=\"status:upgrading:version:rhoam_state:max\"}", "--match={__name__=\"state:rhoam_critical_alerts:max\"}", "--match={__name__=\"state:rhoam_warning_alerts:max\"}", "--match={__name__=\"rhoam_7d_slo_percentile:max\"}", "--match={__name__=\"rhoam_7d_slo_remaining_error_budget:max\"}", "--match={__name__=\"cluster_legacy_scheduler_policy\"}", "--match={__name__=\"cluster_master_schedulable\"}", "--match={__name__=\"che_workspace_status\"}", "--match={__name__=\"che_workspace_started_total\"}", "--match={__name__=\"che_workspace_failure_total\"}", "--match={__name__=\"che_workspace_start_time_seconds_sum\"}", "--match={__name__=\"che_workspace_start_time_seconds_count\"}", "--match={__name__=\"cco_credentials_mode\"}", "--match={__name__=\"cluster:kube_persistentvolume_plugin_type_counts:sum\"}", "--match={__name__=\"acm_managed_cluster_info\"}", "--match={__name__=\"acm_managed_cluster_worker_cores:max\"}", "--match={__name__=\"acm_console_page_count:sum\", page=~\"overview-classic|overview-fleet|search|search-details|clusters|application|governance\"}", "--match={__name__=\"cluster:vsphere_vcenter_info:sum\"}", "--match={__name__=\"cluster:vsphere_esxi_version_total:sum\"}", "--match={__name__=\"cluster:vsphere_node_hw_version_total:sum\"}", "--match={__name__=\"openshift:build_by_strategy:sum\"}", "--match={__name__=\"rhods_aggregate_availability\"}", "--match={__name__=\"rhods_total_users\"}", "--match={__name__=\"instance:etcd_disk_wal_fsync_duration_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"instance:etcd_mvcc_db_total_size_in_bytes:sum\"}", "--match={__name__=\"instance:etcd_network_peer_round_trip_time_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"instance:etcd_mvcc_db_total_size_in_use_in_bytes:sum\"}", "--match={__name__=\"instance:etcd_disk_backend_commit_duration_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"jaeger_operator_instances_storage_types\"}", "--match={__name__=\"jaeger_operator_instances_strategies\"}", "--match={__name__=\"jaeger_operator_instances_agent_strategies\"}", "--match={__name__=\"type:tempo_operator_tempostack_storage_backend:sum\",type=~\"azure|gcs|s3\"}", "--match={__name__=\"state:tempo_operator_tempostack_managed:sum\",state=~\"Managed|Unmanaged\"}", "--match={__name__=\"type:tempo_operator_tempostack_multi_tenancy:sum\",type=~\"static|openshift|disabled\"}", "--match={__name__=\"enabled:tempo_operator_tempostack_jaeger_ui:sum\",enabled=~\"true|false\"}", "--match={__name__=\"type:opentelemetry_collector_receivers:sum\",type=~\"jaeger|hostmetrics|opencensus|prometheus|zipkin|kafka|filelog|journald|k8sevents|kubeletstats|k8scluster|k8sobjects|otlp\"}", "--match={__name__=\"type:opentelemetry_collector_exporters:sum\",type=~\"debug|logging|otlp|otlphttp|prometheus|lokiexporter|kafka|awscloudwatchlogs|loadbalancing\"}", "--match={__name__=\"type:opentelemetry_collector_processors:sum\",type=~\"batch|memorylimiter|attributes|resource|span|k8sattributes|resourcedetection|filter|routing|cumulativetodelta|groupbyattrs\"}", "--match={__name__=\"type:opentelemetry_collector_extensions:sum\",type=~\"zpages|ballast|memorylimiter|jaegerremotesampling|healthcheck|pprof|oauth2clientauth|oidcauth|bearertokenauth|filestorage\"}", "--match={__name__=\"type:opentelemetry_collector_connectors:sum\",type=~\"spanmetrics|forward\"}", "--match={__name__=\"type:opentelemetry_collector_info:sum\",type=~\"deployment|daemonset|sidecar|statefulset\"}", "--match={__name__=\"appsvcs:cores_by_product:sum\"}", "--match={__name__=\"nto_custom_profiles:count\"}", "--match={__name__=\"openshift_csi_share_configmap\"}", "--match={__name__=\"openshift_csi_share_secret\"}", "--match={__name__=\"openshift_csi_share_mount_failures_total\"}", "--match={__name__=\"openshift_csi_share_mount_requests_total\"}", "--match={__name__=\"eo_es_storage_info\"}", "--match={__name__=\"eo_es_redundancy_policy_info\"}", "--match={__name__=\"eo_es_defined_delete_namespaces_total\"}", "--match={__name__=\"eo_es_misconfigured_memory_resources_info\"}", "--match={__name__=\"cluster:eo_es_data_nodes_total:max\"}", "--match={__name__=\"cluster:eo_es_documents_created_total:sum\"}", "--match={__name__=\"cluster:eo_es_documents_deleted_total:sum\"}", "--match={__name__=\"pod:eo_es_shards_total:max\"}", "--match={__name__=\"eo_es_cluster_management_state_info\"}", "--match={__name__=\"imageregistry:imagestreamtags_count:sum\"}", "--match={__name__=\"imageregistry:operations_count:sum\"}", "--match={__name__=\"log_logging_info\"}", "--match={__name__=\"log_collector_error_count_total\"}", "--match={__name__=\"log_forwarder_pipeline_info\"}", "--match={__name__=\"log_forwarder_input_info\"}", "--match={__name__=\"log_forwarder_output_info\"}", "--match={__name__=\"cluster:log_collected_bytes_total:sum\"}", "--match={__name__=\"cluster:log_logged_bytes_total:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_pipelines:sum\"}", "--match={__name__=\"openshift_logging:log_forwarders:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_input_type:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_output_type:sum\"}", "--match={__name__=\"openshift_logging:vector_component_received_bytes_total:rate5m\"}", "--match={__name__=\"cluster:kata_monitor_running_shim_count:sum\"}", "--match={__name__=\"platform:hypershift_hostedclusters:max\"}", "--match={__name__=\"platform:hypershift_nodepools:max\"}", "--match={__name__=\"cluster_name:hypershift_nodepools_size:sum\"}", "--match={__name__=\"cluster_name:hypershift_nodepools_available_replicas:sum\"}", "--match={__name__=\"namespace:noobaa_unhealthy_bucket_claims:max\"}", "--match={__name__=\"namespace:noobaa_buckets_claims:max\"}", "--match={__name__=\"namespace:noobaa_unhealthy_namespace_resources:max\"}", "--match={__name__=\"namespace:noobaa_namespace_resources:max\"}", "--match={__name__=\"namespace:noobaa_unhealthy_namespace_buckets:max\"}", "--match={__name__=\"namespace:noobaa_namespace_buckets:max\"}", "--match={__name__=\"namespace:noobaa_accounts:max\"}", "--match={__name__=\"namespace:noobaa_usage:max\"}", "--match={__name__=\"namespace:noobaa_system_health_status:max\"}", "--match={__name__=\"ocs_advanced_feature_usage\"}", "--match={__name__=\"os_image_url_override:sum\"}", "--match={__name__=\"cluster:mcd_nodes_with_unsupported_packages:count\"}", "--match={__name__=\"cluster:mcd_total_unsupported_packages:sum\"}", "--match={__name__=\"cluster:vsphere_topology_tags:max\"}", "--match={__name__=\"cluster:vsphere_infrastructure_failure_domains:max\"}", "--match={__name__=\"apiserver_list_watch_request_success_total:rate:sum\", verb=~\"LIST|WATCH\"}", "--match={__name__=\"rhacs:telemetry:rox_central_info\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_clusters\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_nodes\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_vcpus\"}", "--match={__name__=\"rhacs:telemetry:rox_sensor_info\"}", "--match={__name__=\"cluster:volume_manager_selinux_pod_context_mismatch_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volume_context_mismatch_warnings_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volume_context_mismatch_errors_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volumes_admitted_total\"}", "--match={__name__=\"ols:provider_model_configuration\"}", "--match={__name__=\"ols:rest_api_query_calls_total:2xx\"}", "--match={__name__=\"ols:rest_api_query_calls_total:4xx\"}", "--match={__name__=\"ols:rest_api_query_calls_total:5xx\"}", "--match={__name__=\"openshift:openshift_network_operator_ipsec_state:info\"}", "--match={__name__=\"cluster:health:group_severity:count\", severity=~\"critical|warning|info|none\"}", "--match={__name__=\"cluster:controlplane_topology:info\", mode=~\"HighlyAvailable|HighlyAvailableArbiter|SingleReplica|DualReplica|External\"}", "--match={__name__=\"cluster:infrastructure_topology:info\", mode=~\"HighlyAvailable|SingleReplica\"}", "--match={__name__=\"cluster:selinux_warning_controller_selinux_volume_conflict:count\"}", "--match={__name__=\"cluster:mtv_migrations_status_total:sum\", provider=~\"ova|vsphere|openstack|openshift|ovirt|awsec2\", target=~\"Local|Remote\", mode=~\"Cold|Warm|RCM\", status=~\"Succeeded|Failed|Canceled\"}", "--limit-bytes=5242880" ], "env": [ { "name": "ANONYMIZE_LABELS" }, { "name": "FROM", "value": "https://prometheus-k8s.openshift-monitoring.svc:9091" }, { "name": "ID", "value": "dc03c1ea-64a8-4a07-82a4-29693f7fb210" }, { "name": "TO", "value": "https://infogw.api.openshift.com/" }, { "name": "HTTP_PROXY" }, { "name": "HTTPS_PROXY" }, { "name": "NO_PROXY" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:fdac1ddb66cdc493809ab1cfc407266d206e890e81c03e04509f9cd92d232171", "imagePullPolicy": "IfNotPresent", "name": "telemeter-client", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "40Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/serving-certs-ca-bundle", "name": "serving-certs-ca-bundle" }, { "mountPath": "/etc/telemeter", "name": "secret-telemeter-client" }, { "mountPath": "/etc/tls/private", "name": "federate-client-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem/", "name": "telemeter-trusted-ca-bundle", "readOnly": true } ] }, { "args": [ "--reload-url=http://localhost:8080/-/reload", "--watched-dir=/etc/serving-certs-ca-bundle" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0bf92f64e29ca5efe44fdd04ffc34142c53099dd1d6c54e103fd85e96659438b", "imagePullPolicy": "IfNotPresent", "name": "reload", "resources": { "requests": { "cpu": "1m", "memory": "10Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/serving-certs-ca-bundle", "name": "serving-certs-ca-bundle" } ] }, { "args": [ "--secure-listen-address=:8443", "--upstream=http://127.0.0.1:8080/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--config-file=/etc/kube-rbac-policy/config.yaml", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "telemeter-client-tls" }, { "mountPath": "/etc/kube-rbac-policy", "name": "secret-telemeter-client-kube-rbac-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "telemeter-client", "serviceAccountName": "telemeter-client", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "telemeter-client-serving-certs-ca-bundle" }, "name": "serving-certs-ca-bundle" }, { "name": "secret-telemeter-client", "secret": { "defaultMode": 420, "secretName": "telemeter-client" } }, { "name": "telemeter-client-tls", "secret": { "defaultMode": 420, "secretName": "telemeter-client-tls" } }, { "name": "federate-client-tls", "secret": { "defaultMode": 420, "secretName": "federate-client-certs" } }, { "name": "secret-telemeter-client-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "telemeter-client-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "telemeter-trusted-ca-bundle-8i12ta5c71j38", "optional": true }, "name": "telemeter-trusted-ca-bundle" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:34:58Z", "generation": 1, "labels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.39.2", "pod-template-hash": "7b77447678" }, "name": "thanos-querier-7b77447678", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "thanos-querier", "uid": "4ec07d56-bbaa-4088-b2b5-bd6e58603b8a" } ], "resourceVersion": "47585", "uid": "bff2da83-5110-4fd0-910d-e7bf2eff0a49" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "7b77447678" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.39.2", "pod-template-hash": "7b77447678" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "query", "--grpc-address=127.0.0.1:10901", "--http-address=127.0.0.1:9090", "--log.format=logfmt", "--query.replica-label=prometheus_replica", "--query.replica-label=thanos_ruler_replica", "--endpoint=dnssrv+_grpc._tcp.prometheus-operated.openshift-monitoring.svc.cluster.local", "--query.auto-downsampling", "--store.sd-dns-resolver=miekgdns", "--grpc-client-tls-secure", "--grpc-client-tls-cert=/etc/tls/grpc/client.crt", "--grpc-client-tls-key=/etc/tls/grpc/client.key", "--grpc-client-tls-ca=/etc/tls/grpc/ca.crt", "--grpc-client-server-name=prometheus-grpc", "--web.disable-cors" ], "env": [ { "name": "HOST_IP_ADDRESS", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "status.hostIP" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:fd8227acfd60a39dfcb99af4f0e38512b596b9f9ae35b61975310aff61e442bb", "imagePullPolicy": "IfNotPresent", "name": "thanos-query", "ports": [ { "containerPort": 9090, "name": "http", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "12Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/grpc", "name": "secret-grpc-tls" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9091", "--upstream=http://127.0.0.1:9090", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--ignore-paths=/-/healthy,/-/ready", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 4, "httpGet": { "path": "/-/healthy", "port": 9091, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "kube-rbac-proxy-web", "ports": [ { "containerPort": 9091, "name": "web", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 20, "httpGet": { "path": "/-/ready", "port": 9091, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy-web" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9092", "--upstream=http://127.0.0.1:9095", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--allow-paths=/api/v1/query,/api/v1/query_range,/api/v1/labels,/api/v1/label/*/values,/api/v1/series", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9092, "name": "tenancy", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy" } ] }, { "args": [ "--insecure-listen-address=127.0.0.1:9095", "--upstream=http://127.0.0.1:9090", "--label=namespace", "--enable-label-apis", "--error-on-replace", "--rules-with-active-alerts", "--enable-label-matchers-for-rules-api" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3bc057f778bfd1a7e4eb26fb519bf63cb02dfa384f9ecbe899cbcd5b889f2980", "imagePullPolicy": "IfNotPresent", "name": "prom-label-proxy", "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--secure-listen-address=0.0.0.0:9093", "--upstream=http://127.0.0.1:9095", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--allow-paths=/api/v1/rules,/api/v1/alerts", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-rules", "ports": [ { "containerPort": 9093, "name": "tenancy-rules", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy-rules" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9094", "--upstream=http://127.0.0.1:9090", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--client-ca-file=/etc/tls/client/client-ca.crt", "--allow-paths=/metrics", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-metrics", "ports": [ { "containerPort": 9094, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy-metrics" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "thanos-querier", "serviceAccountName": "thanos-querier", "terminationGracePeriodSeconds": 120, "volumes": [ { "name": "secret-thanos-querier-tls", "secret": { "defaultMode": 420, "secretName": "thanos-querier-tls" } }, { "name": "secret-thanos-querier-kube-rbac-proxy", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy" } }, { "name": "secret-thanos-querier-kube-rbac-proxy-web", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy-web" } }, { "name": "secret-thanos-querier-kube-rbac-proxy-rules", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy-rules" } }, { "name": "secret-thanos-querier-kube-rbac-proxy-metrics", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy-metrics" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "name": "secret-grpc-tls", "secret": { "defaultMode": 420, "secretName": "thanos-querier-grpc-tls-btatlh4mnqauv" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "2", "kubernetes.io/description": "This deployment launches the Multus admisson controller component.\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.20.10" }, "creationTimestamp": "2026-04-28T12:23:40Z", "generation": 4, "labels": { "app": "multus-admission-controller", "component": "network", "namespace": "openshift-multus", "openshift.io/component": "network", "pod-template-hash": "547864795d", "type": "infra" }, "name": "multus-admission-controller-547864795d", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "multus-admission-controller", "uid": "412753f5-5c98-497e-a1bb-35a3e1baf218" } ], "resourceVersion": "40059", "uid": "f0cb41c4-e8ca-4a45-bc90-ea5469000be6" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "multus-admission-controller", "namespace": "openshift-multus", "pod-template-hash": "547864795d" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict-local-volumes": "hosted-cluster-api-access", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "multus-admission-controller", "component": "network", "namespace": "openshift-multus", "openshift.io/component": "network", "pod-template-hash": "547864795d", "type": "infra" } }, "spec": { "containers": [ { "command": [ "/bin/bash", "-c", "set -euo pipefail\nexec /usr/bin/webhook \\\n -bind-address=0.0.0.0 \\\n -port=6443 \\\n -tls-private-key-file=/etc/webhook/tls.key \\\n -tls-cert-file=/etc/webhook/tls.crt \\\n -metrics-listen-address=127.0.0.1:9091 \\\n -alsologtostderr=true \\\n -ignore-namespaces=openshift-etcd,openshift-console,openshift-ingress-canary,openshift-apiserver,openshift-apiserver-operator,openshift-authentication,openshift-authentication-operator,openshift-catalogd,openshift-cloud-controller-manager,openshift-cloud-controller-manager-operator,openshift-cloud-credential-operator,openshift-cloud-network-config-controller,openshift-cluster-csi-drivers,openshift-cluster-machine-approver,openshift-cluster-node-tuning-operator,openshift-cluster-samples-operator,openshift-cluster-storage-operator,openshift-cluster-version,openshift-config-operator,openshift-console,openshift-console-operator,openshift-controller-manager,openshift-controller-manager-operator,openshift-dns-operator,openshift-etcd-operator,openshift-image-registry,openshift-ingress-operator,openshift-insights,openshift-kube-apiserver,openshift-kube-apiserver-operator,openshift-kube-controller-manager,openshift-kube-controller-manager-operator,openshift-kube-scheduler,openshift-kube-scheduler-operator,openshift-kube-storage-version-migrator,openshift-kube-storage-version-migrator-operator,openshift-machine-api,openshift-machine-config-operator,openshift-marketplace,openshift-monitoring,openshift-multus,openshift-network-console,openshift-network-diagnostics,openshift-network-node-identity,openshift-network-operator,openshift-oauth-apiserver,openshift-operator-controller,openshift-operator-lifecycle-manager,openshift-ovn-kubernetes,openshift-route-controller-manager,openshift-service-ca-operator,openshift-user-workload-monitoring" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4e6201fee16773d6948a0f5aa4b25ef2d9ee1efff716f8baa851395d6a5e5bae", "imagePullPolicy": "IfNotPresent", "name": "multus-admission-controller", "ports": [ { "containerPort": 9091, "name": "metrics-port", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/webhook", "name": "webhook-certs", "readOnly": true } ] }, { "args": [ "--logtostderr", "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--upstream=http://127.0.0.1:9091/", "--tls-private-key-file=/etc/webhook/tls.key", "--tls-cert-file=/etc/webhook/tls.crt" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/webhook", "name": "webhook-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "multus-ac", "serviceAccountName": "multus-ac", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "webhook-certs", "secret": { "defaultMode": 420, "secretName": "multus-admission-controller-secret" } } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "kubernetes.io/description": "This deployment launches the Multus admisson controller component.\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.20.10" }, "creationTimestamp": "2026-04-28T12:21:35Z", "generation": 3, "labels": { "app": "multus-admission-controller", "component": "network", "namespace": "openshift-multus", "openshift.io/component": "network", "pod-template-hash": "6ff5768bb4", "type": "infra" }, "name": "multus-admission-controller-6ff5768bb4", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "multus-admission-controller", "uid": "412753f5-5c98-497e-a1bb-35a3e1baf218" } ], "resourceVersion": "9497", "uid": "8fd41fbb-4556-451b-98a2-c68fa4425ba4" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "multus-admission-controller", "namespace": "openshift-multus", "pod-template-hash": "6ff5768bb4" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict-local-volumes": "hosted-cluster-api-access", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "multus-admission-controller", "component": "network", "namespace": "openshift-multus", "openshift.io/component": "network", "pod-template-hash": "6ff5768bb4", "type": "infra" } }, "spec": { "containers": [ { "command": [ "/bin/bash", "-c", "set -euo pipefail\nexec /usr/bin/webhook \\\n -bind-address=0.0.0.0 \\\n -port=6443 \\\n -tls-private-key-file=/etc/webhook/tls.key \\\n -tls-cert-file=/etc/webhook/tls.crt \\\n -metrics-listen-address=127.0.0.1:9091 \\\n -alsologtostderr=true \\\n -ignore-namespaces=openshift-etcd,openshift-console,openshift-ingress-canary,openshift-apiserver-operator,openshift-authentication-operator,openshift-cloud-controller-manager,openshift-cloud-controller-manager-operator,openshift-cloud-credential-operator,openshift-cloud-network-config-controller,openshift-cluster-csi-drivers,openshift-cluster-machine-approver,openshift-cluster-node-tuning-operator,openshift-cluster-samples-operator,openshift-cluster-storage-operator,openshift-cluster-version,openshift-config-operator,openshift-console,openshift-console-operator,openshift-controller-manager-operator,openshift-dns-operator,openshift-etcd-operator,openshift-image-registry,openshift-ingress-operator,openshift-insights,openshift-kube-apiserver,openshift-kube-apiserver-operator,openshift-kube-controller-manager,openshift-kube-controller-manager-operator,openshift-kube-scheduler-operator,openshift-kube-storage-version-migrator-operator,openshift-machine-api,openshift-machine-config-operator,openshift-marketplace,openshift-monitoring,openshift-network-operator,openshift-operator-lifecycle-manager,openshift-service-ca-operator,openshift-user-workload-monitoring" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4e6201fee16773d6948a0f5aa4b25ef2d9ee1efff716f8baa851395d6a5e5bae", "imagePullPolicy": "IfNotPresent", "name": "multus-admission-controller", "ports": [ { "containerPort": 9091, "name": "metrics-port", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/webhook", "name": "webhook-certs", "readOnly": true } ] }, { "args": [ "--logtostderr", "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--upstream=http://127.0.0.1:9091/", "--tls-private-key-file=/etc/webhook/tls.key", "--tls-cert-file=/etc/webhook/tls.crt" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/webhook", "name": "webhook-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "multus-ac", "serviceAccountName": "multus-ac", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "webhook-certs", "secret": { "defaultMode": 420, "secretName": "multus-admission-controller-secret" } } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "3", "kubernetes.io/description": "This deployment launches the Multus admisson controller component.\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.20.10" }, "creationTimestamp": "2026-04-28T12:56:32Z", "generation": 2, "labels": { "app": "multus-admission-controller", "component": "network", "namespace": "openshift-multus", "openshift.io/component": "network", "pod-template-hash": "7b66cf79f8", "type": "infra" }, "name": "multus-admission-controller-7b66cf79f8", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "multus-admission-controller", "uid": "412753f5-5c98-497e-a1bb-35a3e1baf218" } ], "resourceVersion": "40018", "uid": "45c6f27c-6656-4b45-8010-11d5b578534d" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "multus-admission-controller", "namespace": "openshift-multus", "pod-template-hash": "7b66cf79f8" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict-local-volumes": "hosted-cluster-api-access", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "multus-admission-controller", "component": "network", "namespace": "openshift-multus", "openshift.io/component": "network", "pod-template-hash": "7b66cf79f8", "type": "infra" } }, "spec": { "containers": [ { "command": [ "/bin/bash", "-c", "set -euo pipefail\nexec /usr/bin/webhook \\\n -bind-address=0.0.0.0 \\\n -port=6443 \\\n -tls-private-key-file=/etc/webhook/tls.key \\\n -tls-cert-file=/etc/webhook/tls.crt \\\n -metrics-listen-address=127.0.0.1:9091 \\\n -alsologtostderr=true \\\n -ignore-namespaces=openshift-etcd,openshift-console,openshift-ingress-canary,openshift-apiserver,openshift-apiserver-operator,openshift-authentication,openshift-authentication-operator,openshift-catalogd,openshift-cloud-controller-manager,openshift-cloud-controller-manager-operator,openshift-cloud-credential-operator,openshift-cloud-network-config-controller,openshift-cluster-csi-drivers,openshift-cluster-machine-approver,openshift-cluster-node-tuning-operator,openshift-cluster-samples-operator,openshift-cluster-storage-operator,openshift-cluster-version,openshift-config-operator,openshift-console,openshift-console-operator,openshift-controller-manager,openshift-controller-manager-operator,openshift-dns,openshift-dns-operator,openshift-etcd-operator,openshift-image-registry,openshift-ingress,openshift-ingress-operator,openshift-insights,openshift-kube-apiserver,openshift-kube-apiserver-operator,openshift-kube-controller-manager,openshift-kube-controller-manager-operator,openshift-kube-scheduler,openshift-kube-scheduler-operator,openshift-kube-storage-version-migrator,openshift-kube-storage-version-migrator-operator,openshift-machine-api,openshift-machine-config-operator,openshift-marketplace,openshift-monitoring,openshift-multus,openshift-network-console,openshift-network-diagnostics,openshift-network-node-identity,openshift-network-operator,openshift-oauth-apiserver,openshift-operator-controller,openshift-operator-lifecycle-manager,openshift-ovn-kubernetes,openshift-route-controller-manager,openshift-service-ca-operator,openshift-user-workload-monitoring" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4e6201fee16773d6948a0f5aa4b25ef2d9ee1efff716f8baa851395d6a5e5bae", "imagePullPolicy": "IfNotPresent", "name": "multus-admission-controller", "ports": [ { "containerPort": 9091, "name": "metrics-port", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/webhook", "name": "webhook-certs", "readOnly": true } ] }, { "args": [ "--logtostderr", "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--upstream=http://127.0.0.1:9091/", "--tls-private-key-file=/etc/webhook/tls.key", "--tls-cert-file=/etc/webhook/tls.crt" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/webhook", "name": "webhook-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "multus-ac", "serviceAccountName": "multus-ac", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "webhook-certs", "secret": { "defaultMode": 420, "secretName": "multus-admission-controller-secret" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 2, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "kubernetes.io/description": "This deployment deploys the Networking console plugin pod which serves\nthe contents of the Networking section in OpenShift Console\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.20.10" }, "creationTimestamp": "2026-04-28T12:21:52Z", "generation": 1, "labels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator", "pod-template-hash": "78b94cb978" }, "name": "networking-console-plugin-78b94cb978", "namespace": "openshift-network-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "networking-console-plugin", "uid": "67844c48-f7d9-4762-8a4d-4e43216e7571" } ], "resourceVersion": "37834", "uid": "2e1c47be-5076-4177-b258-7f58e01deccc" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator", "pod-template-hash": "78b94cb978" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator", "pod-template-hash": "78b94cb978" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator" } }, "namespaces": [ "openshift-network-console" ], "topologyKey": "kubernetes.io/hostname" }, "weight": 90 } ] } }, "automountServiceAccountToken": false, "containers": [ { "command": [ "/bin/sh", "-c", "if echo \"$POD_IP\" | grep -qE '^([0-9]{1,3}\\.){3}[0-9]{1,3}$'; then\n LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME=\"9443\"\nelse\n LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME=\"[::]:9443\"\nfi\nsed \"s/LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME/$LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME/g\" /etc/nginx/nginx.conf \u003e /tmp/nginx.conf\nexec nginx -c /tmp/nginx.conf -g 'daemon off;'\n" ], "env": [ { "name": "POD_IP", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "status.podIP" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b95ba9250879852026fd4072e45242556d16e0972392b2aeab94ee156f1f2a51", "imagePullPolicy": "IfNotPresent", "name": "networking-console-plugin", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/cert", "name": "networking-console-plugin-cert", "readOnly": true }, { "mountPath": "/etc/nginx/nginx.conf", "name": "nginx-conf", "readOnly": true, "subPath": "nginx.conf" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "networking-console-plugin" }, "name": "nginx-conf" }, { "name": "networking-console-plugin-cert", "secret": { "defaultMode": 420, "secretName": "networking-console-plugin-cert" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "kubernetes.io/description": "This deployment deploys the network-check-source pod that performs\npod network connectivity checks\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.20.10" }, "creationTimestamp": "2026-04-28T12:21:47Z", "generation": 1, "labels": { "app": "network-check-source", "kubernetes.io/os": "linux", "pod-template-hash": "67dc9b6c86" }, "name": "network-check-source-67dc9b6c86", "namespace": "openshift-network-diagnostics", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "network-check-source", "uid": "31d0a0e6-72b8-47af-b4b1-7ca77b09a962" } ], "resourceVersion": "37856", "uid": "7fe3b65f-1e6c-4126-87e8-cc93432687fb" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "network-check-source", "pod-template-hash": "67dc9b6c86" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "network-check-source", "kubernetes.io/os": "linux", "pod-template-hash": "67dc9b6c86" } }, "spec": { "containers": [ { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)" ], "command": [ "cluster-network-check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7cccd7383da135deb310d9e29497f82f3e4f77aa26b70ddef8a121614509316a", "imagePullPolicy": "IfNotPresent", "name": "check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "40Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "network-diagnostics", "serviceAccountName": "network-diagnostics", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:22Z", "generation": 1, "labels": { "name": "network-operator", "pod-template-hash": "5657d98947" }, "name": "network-operator-5657d98947", "namespace": "openshift-network-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "network-operator", "uid": "030adcd7-6c8b-4a0b-8c3c-19cb91b17686" } ], "resourceVersion": "8386", "uid": "0e03870e-b431-431f-b873-af83e6a4242e" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "network-operator", "pod-template-hash": "5657d98947" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "network-operator", "pod-template-hash": "5657d98947" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "name": "network-operator" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -o allexport\nif [[ -f /etc/kubernetes/apiserver-url.env ]]; then\n source /etc/kubernetes/apiserver-url.env\nelse\n echo \"Error: /etc/kubernetes/apiserver-url.env is missing\"\n exit 1\nfi\nexec /usr/bin/cluster-network-operator start --listen=0.0.0.0:9104\n" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.20.10" }, { "name": "KUBE_PROXY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6a7068c1d4fc60c7eab6e77e69842975de10102d96f2c0a61231a8612a9c2a79" }, { "name": "KUBE_RBAC_PROXY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d" }, { "name": "MULTUS_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:eac241a15ee53f5e2d9c6b0f10a270cf1659b0ec21abeaa6a886d986b1be2b96" }, { "name": "MULTUS_ADMISSION_CONTROLLER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4e6201fee16773d6948a0f5aa4b25ef2d9ee1efff716f8baa851395d6a5e5bae" }, { "name": "CNI_PLUGINS_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f7cd448053773ed82f03537d69230b477018abf3b41f9bf35db275842401db4b" }, { "name": "BOND_CNI_PLUGIN_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8c734cf09c23371c5c1b8641bb3c8e70a75e971dbec69f650d530744d0204e5a" }, { "name": "WHEREABOUTS_CNI_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ad2362214464e42209bf8d87230bb1856b8b40d5e910de1aea1a78bedb579d6d" }, { "name": "ROUTE_OVERRRIDE_CNI_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bffdc055f929ad77dfc877a51f796fcffa3a6c7edc073cc32683423082205562" }, { "name": "MULTUS_NETWORKPOLICY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4b0e172159ae774cb5565f54bcec3959febf85355367fef50c31a89ea552d88e" }, { "name": "OVN_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:be9536be398e75c14bd0b63d9eb35467ad5ec3d1351a16820c7f348644b8ba1e" }, { "name": "OVN_NB_RAFT_ELECTION_TIMER", "value": "10" }, { "name": "OVN_SB_RAFT_ELECTION_TIMER", "value": "16" }, { "name": "OVN_NORTHD_PROBE_INTERVAL", "value": "10000" }, { "name": "OVN_CONTROLLER_INACTIVITY_PROBE", "value": "180000" }, { "name": "OVN_NB_INACTIVITY_PROBE", "value": "60000" }, { "name": "EGRESS_ROUTER_CNI_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f81e82ff821e1ae1f1599096e640787b6ad069a3aa72adff529cd389411d8e8e" }, { "name": "NETWORK_METRICS_DAEMON_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:30b3e8c37cfb65dca5c7e6cbf4fa1a6ef065b01b01f97c5c5cf7e1bbd3709a9e" }, { "name": "NETWORK_CHECK_SOURCE_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7cccd7383da135deb310d9e29497f82f3e4f77aa26b70ddef8a121614509316a" }, { "name": "NETWORK_CHECK_TARGET_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7cccd7383da135deb310d9e29497f82f3e4f77aa26b70ddef8a121614509316a" }, { "name": "NETWORK_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7cccd7383da135deb310d9e29497f82f3e4f77aa26b70ddef8a121614509316a" }, { "name": "CLOUD_NETWORK_CONFIG_CONTROLLER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ad51f8246a2d5349b99ecd08ca56614f834a063d2e75bee2221225302a5cfe56" }, { "name": "CLI_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:19548cb9eb6ac87a350ba9026eaedfdfa7befed3bb5df8fadd30294c95b15ab0" }, { "name": "FRR_K8S_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:972e353d2cff823a15cc3a6a23f41b99c5567bcd4390353989d0720d063fd2ba" }, { "name": "NETWORKING_CONSOLE_PLUGIN_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b95ba9250879852026fd4072e45242556d16e0972392b2aeab94ee156f1f2a51" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7cccd7383da135deb310d9e29497f82f3e4f77aa26b70ddef8a121614509316a", "imagePullPolicy": "IfNotPresent", "name": "network-operator", "ports": [ { "containerPort": 9104, "hostPort": 9104, "name": "cno", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kubernetes", "name": "host-etc-kube", "readOnly": true }, { "mountPath": "/var/run/secrets/serving-cert", "name": "metrics-tls" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "cluster-network-operator", "serviceAccountName": "cluster-network-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/not-ready", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/network-unavailable", "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/kubernetes", "type": "Directory" }, "name": "host-etc-kube" }, { "name": "metrics-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "metrics-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "3", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "QLCEBg==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "tqdgGA==", "operator.openshift.io/spec-hash": "111d766ce8487024fda28adbe5732212b069d0eba077b5d788605092a2129366" }, "creationTimestamp": "2026-04-28T12:27:31Z", "generation": 7, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "5b9c9745f6", "revision": "1" }, "name": "apiserver-5b9c9745f6", "namespace": "openshift-oauth-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "c8a2e9ab-3ace-4fb4-ab76-652ffb45421c" } ], "resourceVersion": "18360", "uid": "a88a6f0d-12e5-4430-bf9b-10464392904c" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "pod-template-hash": "5b9c9745f6" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "QLCEBg==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "tqdgGA==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "5b9c9745f6", "revision": "1" }, "name": "openshift-oauth-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-apiserver start \\\n --secure-port=8443 \\\n --audit-log-path=/var/log/oauth-apiserver/audit.log \\\n --audit-log-format=json \\\n --audit-log-maxsize=100 \\\n --audit-log-maxbackup=10 \\\n --audit-policy-file=/var/run/configmaps/audit/policy.yaml \\\n --etcd-cafile=/var/run/configmaps/etcd-serving-ca/ca-bundle.crt \\\n --etcd-keyfile=/var/run/secrets/etcd-client/tls.key \\\n --etcd-certfile=/var/run/secrets/etcd-client/tls.crt \\\n --etcd-healthcheck-timeout=9s \\\n --etcd-readycheck-timeout=9s \\\n --shutdown-delay-duration=50s \\\n --shutdown-send-retry-after=true \\\n --tls-private-key-file=/var/run/secrets/serving-cert/tls.key \\\n --tls-cert-file=/var/run/secrets/serving-cert/tls.crt \\\n --enable-priority-and-fairness=false \\\n --api-audiences=https://kubernetes.default.svc \\\n --cors-allowed-origins='//127\\.0\\.0\\.1(:|$)' \\\n --cors-allowed-origins='//localhost(:|$)' \\\n --etcd-servers=https://10.0.163.114:2379 \\\n --etcd-servers=https://10.0.53.45:2379 \\\n --etcd-servers=https://10.0.87.199:2379 \\\n --tls-cipher-suites=TLS_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-min-version=VersionTLS12 \\\n --v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:de0da6a463a0d9467c735aa8afe0ada0622dfd458074d8a3188e23d73d931f45", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "oauth-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "150m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/oauth-apiserver \u0026\u0026 touch /var/log/oauth-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/oauth-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:de0da6a463a0d9467c735aa8afe0ada0622dfd458074d8a3188e23d73d931f45", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-apiserver-sa", "serviceAccountName": "oauth-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit-policies" }, { "name": "etcd-client", "secret": { "defaultMode": 420, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 420, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/oauth-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "QLCEBg==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "tqdgGA==", "operator.openshift.io/spec-hash": "e85e2c2b93af129174471d334ea36ac3e4840afb6f001e5c6ab46ef12db24a10" }, "creationTimestamp": "2026-04-28T12:23:23Z", "generation": 4, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "68778c9d89", "revision": "1" }, "name": "apiserver-68778c9d89", "namespace": "openshift-oauth-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "c8a2e9ab-3ace-4fb4-ab76-652ffb45421c" } ], "resourceVersion": "13771", "uid": "a4d3dfb6-1629-4f06-a11d-da0a187d2255" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "pod-template-hash": "68778c9d89" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "QLCEBg==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "tqdgGA==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "68778c9d89", "revision": "1" }, "name": "openshift-oauth-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-apiserver start \\\n --secure-port=8443 \\\n --audit-log-path=/var/log/oauth-apiserver/audit.log \\\n --audit-log-format=json \\\n --audit-log-maxsize=100 \\\n --audit-log-maxbackup=10 \\\n --audit-policy-file=/var/run/configmaps/audit/policy.yaml \\\n --etcd-cafile=/var/run/configmaps/etcd-serving-ca/ca-bundle.crt \\\n --etcd-keyfile=/var/run/secrets/etcd-client/tls.key \\\n --etcd-certfile=/var/run/secrets/etcd-client/tls.crt \\\n --etcd-healthcheck-timeout=9s \\\n --etcd-readycheck-timeout=9s \\\n --shutdown-delay-duration=50s \\\n --shutdown-send-retry-after=true \\\n --tls-private-key-file=/var/run/secrets/serving-cert/tls.key \\\n --tls-cert-file=/var/run/secrets/serving-cert/tls.crt \\\n --enable-priority-and-fairness=false \\\n --api-audiences=https://kubernetes.default.svc \\\n --cors-allowed-origins='//127\\.0\\.0\\.1(:|$)' \\\n --cors-allowed-origins='//localhost(:|$)' \\\n --etcd-servers=https://10.0.163.114:2379 \\\n --tls-cipher-suites=TLS_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-min-version=VersionTLS12 \\\n --v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:de0da6a463a0d9467c735aa8afe0ada0622dfd458074d8a3188e23d73d931f45", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "oauth-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "150m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/oauth-apiserver \u0026\u0026 touch /var/log/oauth-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/oauth-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:de0da6a463a0d9467c735aa8afe0ada0622dfd458074d8a3188e23d73d931f45", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-apiserver-sa", "serviceAccountName": "oauth-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit-policies" }, { "name": "etcd-client", "secret": { "defaultMode": 420, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 420, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/oauth-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "4", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "QLCEBg==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "tqdgGA==", "operator.openshift.io/spec-hash": "5e650caa685ee7f330cd24367c2c20922fd2a7502b8c098eee02444ee18e1f8c" }, "creationTimestamp": "2026-04-28T12:29:30Z", "generation": 7, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "6cf778bb9", "revision": "1" }, "name": "apiserver-6cf778bb9", "namespace": "openshift-oauth-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "c8a2e9ab-3ace-4fb4-ab76-652ffb45421c" } ], "resourceVersion": "29156", "uid": "b7be4ac2-0c5b-4259-8b48-52e3354ef081" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "pod-template-hash": "6cf778bb9" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "QLCEBg==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "tqdgGA==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "6cf778bb9", "revision": "1" }, "name": "openshift-oauth-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-apiserver start \\\n --secure-port=8443 \\\n --audit-log-path=/var/log/oauth-apiserver/audit.log \\\n --audit-log-format=json \\\n --audit-log-maxsize=100 \\\n --audit-log-maxbackup=10 \\\n --audit-policy-file=/var/run/configmaps/audit/policy.yaml \\\n --etcd-cafile=/var/run/configmaps/etcd-serving-ca/ca-bundle.crt \\\n --etcd-keyfile=/var/run/secrets/etcd-client/tls.key \\\n --etcd-certfile=/var/run/secrets/etcd-client/tls.crt \\\n --etcd-healthcheck-timeout=9s \\\n --etcd-readycheck-timeout=9s \\\n --shutdown-delay-duration=50s \\\n --shutdown-send-retry-after=true \\\n --tls-private-key-file=/var/run/secrets/serving-cert/tls.key \\\n --tls-cert-file=/var/run/secrets/serving-cert/tls.crt \\\n --enable-priority-and-fairness=false \\\n --api-audiences=https://kubernetes.default.svc \\\n --cors-allowed-origins='//127\\.0\\.0\\.1(:|$)' \\\n --cors-allowed-origins='//localhost(:|$)' \\\n --etcd-servers=https://10.0.163.114:2379 \\\n --etcd-servers=https://10.0.53.45:2379 \\\n --etcd-servers=https://10.0.87.199:2379 \\\n --etcd-servers=https://10.0.9.171:2379 \\\n --tls-cipher-suites=TLS_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-min-version=VersionTLS12 \\\n --v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:de0da6a463a0d9467c735aa8afe0ada0622dfd458074d8a3188e23d73d931f45", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "oauth-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "150m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/oauth-apiserver \u0026\u0026 touch /var/log/oauth-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/oauth-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:de0da6a463a0d9467c735aa8afe0ada0622dfd458074d8a3188e23d73d931f45", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-apiserver-sa", "serviceAccountName": "oauth-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit-policies" }, { "name": "etcd-client", "secret": { "defaultMode": 420, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 420, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/oauth-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "5", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "QLCEBg==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "tqdgGA==", "operator.openshift.io/spec-hash": "cf9c8e5c38c240dff23d884a27ec608aaf00951d1ecd6dcb2f7a43caec119701" }, "creationTimestamp": "2026-04-28T12:38:09Z", "generation": 4, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "869df995fd", "revision": "1" }, "name": "apiserver-869df995fd", "namespace": "openshift-oauth-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "c8a2e9ab-3ace-4fb4-ab76-652ffb45421c" } ], "resourceVersion": "49280", "uid": "1f18740e-427b-4169-97ab-6931e5d83984" }, "spec": { "replicas": 3, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "pod-template-hash": "869df995fd" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "QLCEBg==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "tqdgGA==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "869df995fd", "revision": "1" }, "name": "openshift-oauth-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-apiserver start \\\n --secure-port=8443 \\\n --audit-log-path=/var/log/oauth-apiserver/audit.log \\\n --audit-log-format=json \\\n --audit-log-maxsize=100 \\\n --audit-log-maxbackup=10 \\\n --audit-policy-file=/var/run/configmaps/audit/policy.yaml \\\n --etcd-cafile=/var/run/configmaps/etcd-serving-ca/ca-bundle.crt \\\n --etcd-keyfile=/var/run/secrets/etcd-client/tls.key \\\n --etcd-certfile=/var/run/secrets/etcd-client/tls.crt \\\n --etcd-healthcheck-timeout=9s \\\n --etcd-readycheck-timeout=9s \\\n --shutdown-delay-duration=50s \\\n --shutdown-send-retry-after=true \\\n --tls-private-key-file=/var/run/secrets/serving-cert/tls.key \\\n --tls-cert-file=/var/run/secrets/serving-cert/tls.crt \\\n --enable-priority-and-fairness=false \\\n --api-audiences=https://kubernetes.default.svc \\\n --cors-allowed-origins='//127\\.0\\.0\\.1(:|$)' \\\n --cors-allowed-origins='//localhost(:|$)' \\\n --etcd-servers=https://10.0.53.45:2379 \\\n --etcd-servers=https://10.0.87.199:2379 \\\n --etcd-servers=https://10.0.9.171:2379 \\\n --tls-cipher-suites=TLS_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-min-version=VersionTLS12 \\\n --v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:de0da6a463a0d9467c735aa8afe0ada0622dfd458074d8a3188e23d73d931f45", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "oauth-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "150m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/oauth-apiserver \u0026\u0026 touch /var/log/oauth-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/oauth-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:de0da6a463a0d9467c735aa8afe0ada0622dfd458074d8a3188e23d73d931f45", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-apiserver-sa", "serviceAccountName": "oauth-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit-policies" }, { "name": "etcd-client", "secret": { "defaultMode": 420, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 420, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/oauth-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "availableReplicas": 3, "fullyLabeledReplicas": 3, "observedGeneration": 4, "readyReplicas": 3, "replicas": 3 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "2", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "QLCEBg==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "tqdgGA==", "operator.openshift.io/spec-hash": "15d13dba4ac1a6d02bdbbe4a1e31122c76aa0b2b39189e678be5078f63684b0a" }, "creationTimestamp": "2026-04-28T12:25:30Z", "generation": 7, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "bd44cd6c7", "revision": "1" }, "name": "apiserver-bd44cd6c7", "namespace": "openshift-oauth-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "c8a2e9ab-3ace-4fb4-ab76-652ffb45421c" } ], "resourceVersion": "16002", "uid": "59694f46-1fe7-4618-bb15-ce3615b00111" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "pod-template-hash": "bd44cd6c7" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "QLCEBg==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "tqdgGA==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "bd44cd6c7", "revision": "1" }, "name": "openshift-oauth-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-apiserver start \\\n --secure-port=8443 \\\n --audit-log-path=/var/log/oauth-apiserver/audit.log \\\n --audit-log-format=json \\\n --audit-log-maxsize=100 \\\n --audit-log-maxbackup=10 \\\n --audit-policy-file=/var/run/configmaps/audit/policy.yaml \\\n --etcd-cafile=/var/run/configmaps/etcd-serving-ca/ca-bundle.crt \\\n --etcd-keyfile=/var/run/secrets/etcd-client/tls.key \\\n --etcd-certfile=/var/run/secrets/etcd-client/tls.crt \\\n --etcd-healthcheck-timeout=9s \\\n --etcd-readycheck-timeout=9s \\\n --shutdown-delay-duration=50s \\\n --shutdown-send-retry-after=true \\\n --tls-private-key-file=/var/run/secrets/serving-cert/tls.key \\\n --tls-cert-file=/var/run/secrets/serving-cert/tls.crt \\\n --enable-priority-and-fairness=false \\\n --api-audiences=https://kubernetes.default.svc \\\n --cors-allowed-origins='//127\\.0\\.0\\.1(:|$)' \\\n --cors-allowed-origins='//localhost(:|$)' \\\n --etcd-servers=https://10.0.163.114:2379 \\\n --etcd-servers=https://10.0.53.45:2379 \\\n --tls-cipher-suites=TLS_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-min-version=VersionTLS12 \\\n --v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:de0da6a463a0d9467c735aa8afe0ada0622dfd458074d8a3188e23d73d931f45", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "oauth-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "150m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/oauth-apiserver \u0026\u0026 touch /var/log/oauth-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/oauth-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:de0da6a463a0d9467c735aa8afe0ada0622dfd458074d8a3188e23d73d931f45", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-apiserver-sa", "serviceAccountName": "oauth-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit-policies" }, { "name": "etcd-client", "secret": { "defaultMode": 420, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 420, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/oauth-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/default-logs-container": "manager", "operator.openshift.io/spec-hash": "c2f33c296afb1e1af01bf319b7d36e5c01eb4516c4c284149dd1944e78e49ed6" }, "creationTimestamp": "2026-04-28T12:23:32Z", "generation": 1, "labels": { "control-plane": "operator-controller-controller-manager", "pod-template-hash": "6d87948f46" }, "name": "operator-controller-controller-manager-6d87948f46", "namespace": "openshift-operator-controller", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "operator-controller-controller-manager", "uid": "464941cd-15be-4802-aa38-b87fddc6bdcc" } ], "resourceVersion": "43992", "uid": "8aac1937-60b1-42e4-94b7-5dfad137b629" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "operator-controller-controller-manager", "pod-template-hash": "6d87948f46" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager", "openshift.io/required-scc": "privileged", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "control-plane": "operator-controller-controller-manager", "pod-template-hash": "6d87948f46" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/arch", "operator": "In", "values": [ "amd64", "arm64", "ppc64le", "s390x" ] }, { "key": "kubernetes.io/os", "operator": "In", "values": [ "linux" ] } ] } ] } } }, "containers": [ { "args": [ "--health-probe-bind-address=:8081", "--metrics-bind-address=:8443", "--leader-elect", "--tls-cert=/var/certs/tls.crt", "--tls-key=/var/certs/tls.key", "--catalogd-cas-dir=/var/ca-certs", "--v=4", "--global-pull-secret=openshift-config/pull-secret" ], "command": [ "/operator-controller" ], "env": [ { "name": "SSL_CERT_DIR", "value": "/var/ca-certs" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e505aaede09a98f8fd9fbfb8eee8e4a8a8972077765206f0c0cc3174d88feb57", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/cache", "name": "cache" }, { "mountPath": "/tmp", "name": "tmp" }, { "mountPath": "/var/certs", "name": "operator-controller-certs" }, { "mountPath": "/var/ca-certs", "name": "ca-certs", "readOnly": true }, { "mountPath": "/etc/containers", "name": "etc-containers", "readOnly": true }, { "mountPath": "/etc/docker", "name": "etc-docker", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seLinuxOptions": { "type": "spc_t" }, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "operator-controller-controller-manager", "serviceAccountName": "operator-controller-controller-manager", "terminationGracePeriodSeconds": 10, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "emptyDir": {}, "name": "cache" }, { "emptyDir": {}, "name": "tmp" }, { "name": "operator-controller-certs", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "optional": false, "secretName": "operator-controller-cert" } }, { "name": "ca-certs", "projected": { "defaultMode": 420, "sources": [ { "configMap": { "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "operator-controller-trusted-ca-bundle", "optional": false } }, { "configMap": { "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "openshift-service-ca.crt", "optional": false } } ] } }, { "hostPath": { "path": "/etc/containers", "type": "Directory" }, "name": "etc-containers" }, { "hostPath": { "path": "/etc/docker", "type": "Directory" }, "name": "etc-docker" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "OperatorLifecycleManager", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T12:19:46Z", "generation": 1, "labels": { "app": "catalog-operator", "pod-template-hash": "844d774c86" }, "name": "catalog-operator-844d774c86", "namespace": "openshift-operator-lifecycle-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "catalog-operator", "uid": "0bada976-f151-4bec-84b6-5e120bdd4178" } ], "resourceVersion": "49339", "uid": "2fef0896-6303-4f11-9031-4b373b29379d" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "catalog-operator", "pod-template-hash": "844d774c86" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "catalog-operator", "pod-template-hash": "844d774c86" } }, "spec": { "containers": [ { "args": [ "--namespace", "openshift-marketplace", "--configmapServerImage=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:81159e13a5d29cf66cfb85015781902ee01d97efd26aa1595c8f279077780928", "--opmImage=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:81159e13a5d29cf66cfb85015781902ee01d97efd26aa1595c8f279077780928", "--util-image", "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f0d423f1b02bacdec9a2bbbbbac79f24a0de2477da9aa34bfc74400a0bf782f9", "--writeStatusName", "operator-lifecycle-manager-catalog", "--tls-cert", "/srv-cert/tls.crt", "--tls-key", "/srv-cert/tls.key", "--client-ca", "/profile-collector-cert/tls.crt", "--set-workload-user-id=false" ], "command": [ "/bin/catalog" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.20.10" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f0d423f1b02bacdec9a2bbbbbac79f24a0de2477da9aa34bfc74400a0bf782f9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "catalog-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "80Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/srv-cert", "name": "srv-cert", "readOnly": true }, { "mountPath": "/profile-collector-cert", "name": "profile-collector-cert", "readOnly": true }, { "mountPath": "/tmp", "name": "tmpfs" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "olm-operator-serviceaccount", "serviceAccountName": "olm-operator-serviceaccount", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "srv-cert", "secret": { "defaultMode": 420, "secretName": "catalog-operator-serving-cert" } }, { "name": "profile-collector-cert", "secret": { "defaultMode": 420, "secretName": "pprof-cert" } }, { "emptyDir": {}, "name": "tmpfs" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "OperatorLifecycleManager", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T12:19:45Z", "generation": 1, "labels": { "app": "olm-operator", "pod-template-hash": "858d9d666b" }, "name": "olm-operator-858d9d666b", "namespace": "openshift-operator-lifecycle-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "olm-operator", "uid": "d790797a-b417-4a42-8d80-05b832a1bb92" } ], "resourceVersion": "49254", "uid": "f38c7f01-1fa1-4408-a950-b5676425284c" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "olm-operator", "pod-template-hash": "858d9d666b" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "olm-operator", "pod-template-hash": "858d9d666b" } }, "spec": { "containers": [ { "args": [ "--namespace", "$(OPERATOR_NAMESPACE)", "--writeStatusName", "operator-lifecycle-manager", "--writePackageServerStatusName", "operator-lifecycle-manager-packageserver", "--tls-cert", "/srv-cert/tls.crt", "--tls-key", "/srv-cert/tls.key", "--client-ca", "/profile-collector-cert/tls.crt", "--protectedCopiedCSVNamespaces", "openshift" ], "command": [ "/bin/olm" ], "env": [ { "name": "OPERATOR_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "OPERATOR_NAME", "value": "olm-operator" }, { "name": "RELEASE_VERSION", "value": "4.20.10" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f0d423f1b02bacdec9a2bbbbbac79f24a0de2477da9aa34bfc74400a0bf782f9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "olm-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "160Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/srv-cert", "name": "srv-cert", "readOnly": true }, { "mountPath": "/profile-collector-cert", "name": "profile-collector-cert", "readOnly": true }, { "mountPath": "/tmp", "name": "tmpfs" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "olm-operator-serviceaccount", "serviceAccountName": "olm-operator-serviceaccount", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "srv-cert", "secret": { "defaultMode": 420, "secretName": "olm-operator-serving-cert" } }, { "name": "profile-collector-cert", "secret": { "defaultMode": 420, "secretName": "pprof-cert" } }, { "emptyDir": {}, "name": "tmpfs" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "OperatorLifecycleManager", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T12:19:43Z", "generation": 1, "labels": { "app": "package-server-manager", "pod-template-hash": "76568fdc4" }, "name": "package-server-manager-76568fdc4", "namespace": "openshift-operator-lifecycle-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "package-server-manager", "uid": "3f03472f-9c33-4700-aa10-fe8cb2c938f3" } ], "resourceVersion": "49365", "uid": "e1bddad5-980f-4fc5-b378-8eb1772b68fe" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "package-server-manager", "pod-template-hash": "76568fdc4" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "package-server-manager", "pod-template-hash": "76568fdc4" } }, "spec": { "containers": [ { "args": [ "--secure-listen-address=0.0.0.0:8443", "--upstream=http://127.0.0.1:9090/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "package-server-manager-serving-cert" } ] }, { "args": [ "--name", "$(PACKAGESERVER_NAME)", "--namespace", "$(PACKAGESERVER_NAMESPACE)", "--metrics=:9090" ], "command": [ "/bin/psm", "start" ], "env": [ { "name": "PACKAGESERVER_NAME", "value": "packageserver" }, { "name": "PACKAGESERVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f0d423f1b02bacdec9a2bbbbbac79f24a0de2477da9aa34bfc74400a0bf782f9" }, { "name": "PACKAGESERVER_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "RELEASE_VERSION", "value": "4.20.10" }, { "name": "GOMEMLIMIT", "value": "5MiB" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f0d423f1b02bacdec9a2bbbbbac79f24a0de2477da9aa34bfc74400a0bf782f9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "package-server-manager", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "olm-operator-serviceaccount", "serviceAccountName": "olm-operator-serviceaccount", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "package-server-manager-serving-cert", "secret": { "defaultMode": 420, "secretName": "package-server-manager-serving-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:24:10Z", "generation": 1, "labels": { "app": "packageserver", "pod-template-hash": "857864d666" }, "name": "packageserver-857864d666", "namespace": "openshift-operator-lifecycle-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "packageserver", "uid": "77f8d943-eda6-41a4-bb46-f1272c9ae63e" } ], "resourceVersion": "44068", "uid": "4295b49f-7faa-468a-be4f-06f7ad36d0b6" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "packageserver", "pod-template-hash": "857864d666" } }, "template": { "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "olm.operatorGroup": "olm-operators", "olm.operatorNamespace": "openshift-operator-lifecycle-manager", "olm.targetNamespaces": "openshift-operator-lifecycle-manager", "olmcahash": "fca6c4b33c280572b5c5ec56f09f1fca5a6a2f10551a96f7635e334c28c1fd15", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "packageserver", "pod-template-hash": "857864d666" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "packageserver" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/package-server", "-v=4", "--secure-port", "5443", "--global-namespace", "openshift-marketplace" ], "env": [ { "name": "OPERATOR_CONDITION_NAME", "value": "packageserver" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f0d423f1b02bacdec9a2bbbbbac79f24a0de2477da9aa34bfc74400a0bf782f9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "packageserver", "ports": [ { "containerPort": 5443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmpfs" }, { "mountPath": "/apiserver.local.config/certificates", "name": "apiservice-cert" }, { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "webhook-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "olm-operator-serviceaccount", "serviceAccountName": "olm-operator-serviceaccount", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "emptyDir": {}, "name": "tmpfs" }, { "name": "apiservice-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "apiserver.crt" }, { "key": "tls.key", "path": "apiserver.key" } ], "secretName": "packageserver-service-cert" } }, { "name": "webhook-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "packageserver-service-cert" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:01Z", "generation": 1, "labels": { "control-plane": "gitops-operator", "pod-template-hash": "7f5f7964c7" }, "name": "openshift-gitops-operator-controller-manager-7f5f7964c7", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-gitops-operator-controller-manager", "uid": "ab7a88e5-6c92-4022-b293-9ce08c284022" } ], "resourceVersion": "46187", "uid": "b421a3ed-1e50-4318-a471-32a7698ff637" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "gitops-operator", "pod-template-hash": "7f5f7964c7" } }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"argoproj.io/v1alpha1\",\n \"kind\": \"AppProject\",\n \"metadata\": {\n \"name\": \"example\"\n },\n \"spec\": null\n },\n {\n \"apiVersion\": \"argoproj.io/v1alpha1\",\n \"kind\": \"Application\",\n \"metadata\": {\n \"name\": \"example\"\n },\n \"spec\": null\n },\n {\n \"apiVersion\": \"argoproj.io/v1alpha1\",\n \"kind\": \"ApplicationSet\",\n \"metadata\": {\n \"name\": \"example\"\n },\n \"spec\": null\n },\n {\n \"apiVersion\": \"argoproj.io/v1alpha1\",\n \"kind\": \"NotificationsConfiguration\",\n \"metadata\": {\n \"name\": \"default-notifications-configuration\"\n },\n \"spec\": {\n \"templates\": {\n \"template.app-created\": \"email:\\n subject: Application {{.app.metadata.name}} has been created.\\nmessage: Application {{.app.metadata.name}} has been created.\\nteams:\\n title: Application {{.app.metadata.name}} has been created.\",\n \"template.app-deleted\": \"email:\\n subject: Application {{.app.metadata.name}} has been deleted.\\nmessage: Application {{.app.metadata.name}} has been deleted.\\nteams:\\n title: Application {{.app.metadata.name}} has been deleted.\",\n \"template.app-deployed\": \"email:\\n subject: New version of an application {{.app.metadata.name}} is up and running.\\nmessage: |\\n {{if eq .serviceType \\\"slack\\\"}}:white_check_mark:{{end}} Application {{.app.metadata.name}} is now running new version of deployments manifests.\\nslack:\\n attachments: |\\n [{\\n \\\"title\\\": \\\"{{ .app.metadata.name}}\\\",\\n \\\"title_link\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\",\\n \\\"color\\\": \\\"#18be52\\\",\\n \\\"fields\\\": [\\n {\\n \\\"title\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\",\\n \\\"short\\\": true\\n },\\n {\\n \\\"title\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\",\\n \\\"short\\\": true\\n },\\n {\\n \\\"title\\\": \\\"Revision\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.revision}}\\\",\\n \\\"short\\\": true\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"title\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\",\\n \\\"short\\\": true\\n }\\n {{end}}\\n ]\\n }]\\n deliveryPolicy: Post\\n groupingKey: \\\"\\\"\\n notifyBroadcast: false\\nteams:\\n facts: |\\n [{\\n \\\"name\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Revision\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.revision}}\\\"\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"name\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\"\\n }\\n {{end}}\\n ]\\n potentialAction: |-\\n [{\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Operation Application\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\"\\n }]\\n },\\n {\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Repository\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.app.spec.source.repoURL | call .repo.RepoURLToHTTPS}}\\\"\\n }]\\n }]\\n themeColor: '#000080'\\n title: New version of an application {{.app.metadata.name}} is up and running.\",\n \"template.app-health-degraded\": \"email:\\n subject: Application {{.app.metadata.name}} has degraded.\\nmessage: |\\n {{if eq .serviceType \\\"slack\\\"}}:exclamation:{{end}} Application {{.app.metadata.name}} has degraded.\\n Application details: {{.context.argocdUrl}}/applications/{{.app.metadata.name}}.\\nslack:\\n attachments: |\\n [{\\n \\\"title\\\": \\\"{{ .app.metadata.name}}\\\",\\n \\\"title_link\\\": \\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\",\\n \\\"color\\\": \\\"#f4c030\\\",\\n \\\"fields\\\": [\\n {\\n \\\"title\\\": \\\"Health Status\\\",\\n \\\"value\\\": \\\"{{.app.status.health.status}}\\\",\\n \\\"short\\\": true\\n },\\n {\\n \\\"title\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\",\\n \\\"short\\\": true\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"title\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\",\\n \\\"short\\\": true\\n }\\n {{end}}\\n ]\\n }]\\n deliveryPolicy: Post\\n groupingKey: \\\"\\\"\\n notifyBroadcast: false\\nteams:\\n facts: |\\n [{\\n \\\"name\\\": \\\"Health Status\\\",\\n \\\"value\\\": \\\"{{.app.status.health.status}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\"\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"name\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\"\\n }\\n {{end}}\\n ]\\n potentialAction: |\\n [{\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Application\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\"\\n }]\\n },\\n {\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Repository\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.app.spec.source.repoURL | call .repo.RepoURLToHTTPS}}\\\"\\n }]\\n }]\\n themeColor: '#FF0000'\\n title: Application {{.app.metadata.name}} has degraded.\",\n \"template.app-sync-failed\": \"email:\\n subject: Failed to sync application {{.app.metadata.name}}.\\nmessage: |\\n {{if eq .serviceType \\\"slack\\\"}}:exclamation:{{end}} The sync operation of application {{.app.metadata.name}} has failed at {{.app.status.operationState.finishedAt}} with the following error: {{.app.status.operationState.message}}\\n Sync operation details are available at: {{.context.argocdUrl}}/applications/{{.app.metadata.name}}?operation=true .\\nslack:\\n attachments: |\\n [{\\n \\\"title\\\": \\\"{{ .app.metadata.name}}\\\",\\n \\\"title_link\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\",\\n \\\"color\\\": \\\"#E96D76\\\",\\n \\\"fields\\\": [\\n {\\n \\\"title\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\",\\n \\\"short\\\": true\\n },\\n {\\n \\\"title\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\",\\n \\\"short\\\": true\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"title\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\",\\n \\\"short\\\": true\\n }\\n {{end}}\\n ]\\n }]\\n deliveryPolicy: Post\\n groupingKey: \\\"\\\"\\n notifyBroadcast: false\\nteams:\\n facts: |\\n [{\\n \\\"name\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Failed at\\\",\\n \\\"value\\\": \\\"{{.app.status.operationState.finishedAt}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\"\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"name\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\"\\n }\\n {{end}}\\n ]\\n potentialAction: |-\\n [{\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Operation\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}?operation=true\\\"\\n }]\\n },\\n {\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Repository\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.app.spec.source.repoURL | call .repo.RepoURLToHTTPS}}\\\"\\n }]\\n }]\\n themeColor: '#FF0000'\\n title: Failed to sync application {{.app.metadata.name}}.\",\n \"template.app-sync-running\": \"email:\\n subject: Start syncing application {{.app.metadata.name}}.\\nmessage: |\\n The sync operation of application {{.app.metadata.name}} has started at {{.app.status.operationState.startedAt}}.\\n Sync operation details are available at: {{.context.argocdUrl}}/applications/{{.app.metadata.name}}?operation=true .\\nslack:\\n attachments: |\\n [{\\n \\\"title\\\": \\\"{{ .app.metadata.name}}\\\",\\n \\\"title_link\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\",\\n \\\"color\\\": \\\"#0DADEA\\\",\\n \\\"fields\\\": [\\n {\\n \\\"title\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\",\\n \\\"short\\\": true\\n },\\n {\\n \\\"title\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\",\\n \\\"short\\\": true\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"title\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\",\\n \\\"short\\\": true\\n }\\n {{end}}\\n ]\\n }]\\n deliveryPolicy: Post\\n groupingKey: \\\"\\\"\\n notifyBroadcast: false\\nteams:\\n facts: |\\n [{\\n \\\"name\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Started at\\\",\\n \\\"value\\\": \\\"{{.app.status.operationState.startedAt}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\"\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"name\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\"\\n }\\n {{end}}\\n ]\\n potentialAction: |-\\n [{\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Operation\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}?operation=true\\\"\\n }]\\n },\\n {\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Repository\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.app.spec.source.repoURL | call .repo.RepoURLToHTTPS}}\\\"\\n }]\\n }]\\n title: Start syncing application {{.app.metadata.name}}.\",\n \"template.app-sync-status-unknown\": \"email:\\n subject: Application {{.app.metadata.name}} sync status is 'Unknown'\\nmessage: |\\n {{if eq .serviceType \\\"slack\\\"}}:exclamation:{{end}} Application {{.app.metadata.name}} sync is 'Unknown'.\\n Application details: {{.context.argocdUrl}}/applications/{{.app.metadata.name}}.\\n {{if ne .serviceType \\\"slack\\\"}}\\n {{range $c := .app.status.conditions}}\\n * {{$c.message}}\\n {{end}}\\n {{end}}\\nslack:\\n attachments: |\\n [{\\n \\\"title\\\": \\\"{{ .app.metadata.name}}\\\",\\n \\\"title_link\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\",\\n \\\"color\\\": \\\"#E96D76\\\",\\n \\\"fields\\\": [\\n {\\n \\\"title\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\",\\n \\\"short\\\": true\\n },\\n {\\n \\\"title\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\",\\n \\\"short\\\": true\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"title\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\",\\n \\\"short\\\": true\\n }\\n {{end}}\\n ]\\n }]\\n deliveryPolicy: Post\\n groupingKey: \\\"\\\"\\n notifyBroadcast: false\\nteams:\\n facts: |\\n [{\\n \\\"name\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\"\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"name\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\"\\n }\\n {{end}}\\n ]\\n potentialAction: |-\\n [{\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Application\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\"\\n }]\\n },\\n {\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Repository\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.app.spec.source.repoURL | call .repo.RepoURLToHTTPS}}\\\"\\n }]\\n }]\\n title: Application {{.app.metadata.name}} sync status is 'Unknown'\",\n \"template.app-sync-succeeded\": \"email:\\n subject: Application {{.app.metadata.name}} has been successfully synced.\\nmessage: |\\n {{if eq .serviceType \\\"slack\\\"}}:white_check_mark:{{end}} Application {{.app.metadata.name}} has been successfully synced at {{.app.status.operationState.finishedAt}}.\\n Sync operation details are available at: {{.context.argocdUrl}}/applications/{{.app.metadata.name}}?operation=true .\\nslack:\\n attachments: |\\n [{\\n \\\"title\\\": \\\"{{ .app.metadata.name}}\\\",\\n \\\"title_link\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\",\\n \\\"color\\\": \\\"#18be52\\\",\\n \\\"fields\\\": [\\n {\\n \\\"title\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\",\\n \\\"short\\\": true\\n },\\n {\\n \\\"title\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\",\\n \\\"short\\\": true\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"title\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\",\\n \\\"short\\\": true\\n }\\n {{end}}\\n ]\\n }]\\n deliveryPolicy: Post\\n groupingKey: \\\"\\\"\\n notifyBroadcast: false\\nteams:\\n facts: |\\n [{\\n \\\"name\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Synced at\\\",\\n \\\"value\\\": \\\"{{.app.status.operationState.finishedAt}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\"\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"name\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\"\\n }\\n {{end}}\\n ]\\n potentialAction: |-\\n [{\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Operation Details\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}?operation=true\\\"\\n }]\\n },\\n {\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Repository\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.app.spec.source.repoURL | call .repo.RepoURLToHTTPS}}\\\"\\n }]\\n }]\\n themeColor: '#000080'\\n title: Application {{.app.metadata.name}} has been successfully synced\"\n },\n \"triggers\": {\n \"trigger.on-created\": \"- description: Application is created.\\n oncePer: app.metadata.name\\n send:\\n - app-created\\n when: \\\"true\\\"\",\n \"trigger.on-deleted\": \"- description: Application is deleted.\\n oncePer: app.metadata.name\\n send:\\n - app-deleted\\n when: app.metadata.deletionTimestamp != nil\",\n \"trigger.on-deployed\": \"- description: Application is synced and healthy. Triggered once per commit.\\n oncePer: app.status.operationState.syncResult.revision\\n send:\\n - app-deployed\\n when: app.status.operationState.phase in ['Succeeded'] and app.status.health.status\\n == 'Healthy'\",\n \"trigger.on-health-degraded\": \"- description: Application has degraded\\n send:\\n - app-health-degraded\\n when: app.status.health.status == 'Degraded'\",\n \"trigger.on-sync-failed\": \"- description: Application syncing has failed\\n send:\\n - app-sync-failed\\n when: app.status.operationState.phase in ['Error', 'Failed']\",\n \"trigger.on-sync-running\": \"- description: Application is being synced\\n send:\\n - app-sync-running\\n when: app.status.operationState.phase in ['Running']\",\n \"trigger.on-sync-status-unknown\": \"- description: Application status is 'Unknown'\\n send:\\n - app-sync-status-unknown\\n when: app.status.sync.status == 'Unknown'\",\n \"trigger.on-sync-succeeded\": \"- description: Application syncing has succeeded\\n send:\\n - app-sync-succeeded\\n when: app.status.operationState.phase in ['Succeeded']\"\n }\n }\n },\n {\n \"apiVersion\": \"argoproj.io/v1alpha1\",\n \"kind\": \"Rollout\",\n \"metadata\": {\n \"name\": \"example\"\n },\n \"spec\": null\n },\n {\n \"apiVersion\": \"argoproj.io/v1alpha1\",\n \"kind\": \"RolloutManager\",\n \"metadata\": {\n \"name\": \"example\"\n },\n \"spec\": null\n },\n {\n \"apiVersion\": \"argoproj.io/v1beta1\",\n \"kind\": \"ArgoCD\",\n \"metadata\": {\n \"name\": \"argocd\"\n },\n \"spec\": {\n \"controller\": {\n \"resources\": {\n \"limits\": {\n \"cpu\": \"2000m\",\n \"memory\": \"2048Mi\"\n },\n \"requests\": {\n \"cpu\": \"250m\",\n \"memory\": \"1024Mi\"\n }\n }\n },\n \"ha\": {\n \"enabled\": false,\n \"resources\": {\n \"limits\": {\n \"cpu\": \"500m\",\n \"memory\": \"256Mi\"\n },\n \"requests\": {\n \"cpu\": \"250m\",\n \"memory\": \"128Mi\"\n }\n }\n },\n \"rbac\": {\n \"defaultPolicy\": \"\",\n \"policy\": \"g, system:cluster-admins, role:admin\\n\",\n \"scopes\": \"[groups]\"\n },\n \"redis\": {\n \"resources\": {\n \"limits\": {\n \"cpu\": \"500m\",\n \"memory\": \"256Mi\"\n },\n \"requests\": {\n \"cpu\": \"250m\",\n \"memory\": \"128Mi\"\n }\n }\n },\n \"repo\": {\n \"resources\": {\n \"limits\": {\n \"cpu\": \"1000m\",\n \"memory\": \"1024Mi\"\n },\n \"requests\": {\n \"cpu\": \"250m\",\n \"memory\": \"256Mi\"\n }\n }\n },\n \"resourceExclusions\": \"- apiGroups:\\n - \\\"\\\"\\n - discovery.k8s.io\\n kinds:\\n - Endpoints\\n - EndpointSlice\\n- apiGroups:\\n - apiregistration.k8s.io\\n kinds:\\n - APIService\\n- apiGroups:\\n - coordination.k8s.io\\n kinds:\\n - Lease\\n- apiGroups:\\n - authentication.k8s.io\\n - authorization.k8s.io\\n kinds:\\n - SelfSubjectReview\\n - TokenReview\\n - LocalSubjectAccessReview\\n - SelfSubjectAccessReview\\n - SelfSubjectRulesReview\\n - SubjectAccessReview\\n- apiGroups:\\n - certificates.k8s.io\\n kinds:\\n - CertificateSigningRequest\\n- apiGroups:\\n - cert-manager.io\\n kinds:\\n - CertificateRequest\\n- apiGroups:\\n - cilium.io\\n kinds:\\n - CiliumIdentity\\n - CiliumEndpoint\\n - CiliumEndpointSlice\\n- apiGroups:\\n - kyverno.io\\n - reports.kyverno.io\\n - wgpolicyk8s.io\\n kinds:\\n - PolicyReport\\n - ClusterPolicyReport\\n - EphemeralReport\\n - ClusterEphemeralReport\\n - AdmissionReport\\n - ClusterAdmissionReport\\n - BackgroundScanReport\\n - ClusterBackgroundScanReport\\n - UpdateRequest\\n- apiGroups:\\n - tekton.dev\\n clusters:\\n - '*'\\n kinds:\\n - TaskRun\\n - PipelineRun\\n\",\n \"server\": {\n \"resources\": {\n \"limits\": {\n \"cpu\": \"500m\",\n \"memory\": \"256Mi\"\n },\n \"requests\": {\n \"cpu\": \"125m\",\n \"memory\": \"128Mi\"\n }\n },\n \"route\": {\n \"enabled\": true\n }\n },\n \"sso\": {\n \"dex\": {\n \"openShiftOAuth\": true,\n \"resources\": {\n \"limits\": {\n \"cpu\": \"500m\",\n \"memory\": \"256Mi\"\n },\n \"requests\": {\n \"cpu\": \"250m\",\n \"memory\": \"128Mi\"\n }\n }\n },\n \"provider\": \"dex\"\n }\n }\n },\n {\n \"apiVersion\": \"pipelines.openshift.io/v1alpha1\",\n \"kind\": \"GitopsService\",\n \"metadata\": {\n \"name\": \"gitopsservice-sample\"\n },\n \"spec\": null\n }\n]", "capabilities": "Deep Insights", "console.openshift.io/plugins": "[\"gitops-plugin\"]", "containerImage": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d6d9185b0cade4ee521460ce8285a2fb0686d42b2ba861ce1be9ebe602d622f6", "createdAt": "2026-03-04T06:59:29Z", "description": "Enables teams to adopt GitOps principles for managing cluster configurations and application delivery across hybrid multi-cluster Kubernetes environments.", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "true", "features.operators.openshift.io/proxy-aware": "true", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "kubectl.kubernetes.io/default-container": "manager", "olm.operatorGroup": "global-operators", "olm.operatorNamespace": "openshift-operators", "olm.skipRange": "", "olm.targetNamespaces": "", "olmcahash": "b0821d804d719dfa334e023e092e8d19a474aff365312658d5899e3a97156c72", "operatorframework.io/cluster-monitoring": "true", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argocd-image-updater.argoproj.io\",\"kind\":\"ImageUpdater\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"AnalysisRun\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"AnalysisTemplate\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"AppProject\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"Application\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"ApplicationSet\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"ArgoCD\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"ArgoCD\",\"version\":\"v1beta1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"ClusterAnalysisTemplate\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"Experiment\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"NamespaceManagement\",\"version\":\"v1beta1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"NotificationsConfiguration\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"Rollout\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"RolloutManager\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"pipelines.openshift.io\",\"kind\":\"GitopsService\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"openshift-gitops-operator\",\"version\":\"1.20.2\"}}]}", "operatorframework.io/suggested-namespace": "openshift-gitops-operator", "operators.openshift.io/infrastructure-features": "[\"disconnected\"]", "operators.openshift.io/must-gather-image": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:0bbc78d0063324e6ff3feac9673085b4732b8bbff2b1f05240a90e897738417b", "operators.openshift.io/valid-subscription": "[\"OpenShift Container Platform\", \"OpenShift Platform Plus\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.35.0", "operators.operatorframework.io/internal-objects": "[\"gitopsservices.pipelines.openshift.io\"]", "operators.operatorframework.io/project_layout": "go.kubebuilder.io/v4", "repository": "https://github.com/redhat-developer/gitops-operator", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "control-plane": "gitops-operator", "pod-template-hash": "7f5f7964c7" } }, "spec": { "containers": [ { "args": [ "--health-probe-bind-address=:8081", "--metrics-bind-address=127.0.0.1:8080", "--leader-elect" ], "command": [ "/usr/local/bin/manager" ], "env": [ { "name": "ARGOCD_CLUSTER_CONFIG_NAMESPACES", "value": "openshift-gitops,tssc-gitops" }, { "name": "CLUSTER_SCOPED_ARGO_ROLLOUTS_NAMESPACES", "value": "openshift-gitops" }, { "name": "OPERATOR_NAME", "value": "gitops-operator" }, { "name": "LABEL_SELECTOR" }, { "name": "ENABLE_CONVERSION_WEBHOOK", "value": "true" }, { "name": "RELATED_IMAGE_ARGOCD_DEX_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:83636e08a79df87cb99ad9b91553cb6cffd81166113c4b6952bf1d419d43e26a" }, { "name": "ARGOCD_DEX_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:83636e08a79df87cb99ad9b91553cb6cffd81166113c4b6952bf1d419d43e26a" }, { "name": "RELATED_IMAGE_BACKEND_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:3cb24a8c10d7bb3664b4b379eea192c5212470c534f37429802d82306500514f" }, { "name": "BACKEND_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:3cb24a8c10d7bb3664b4b379eea192c5212470c534f37429802d82306500514f" }, { "name": "RELATED_IMAGE_ARGOCD_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77" }, { "name": "ARGOCD_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77" }, { "name": "ARGOCD_REPOSERVER_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77" }, { "name": "RELATED_IMAGE_ARGOCD_REDIS_IMAGE", "value": "registry.redhat.io/rhel9/redis-7@sha256:3d31c0cfaf4219f5bd1c52882b603215d1cb4aaef5b8d1a128d0174e090f96f3" }, { "name": "ARGOCD_REDIS_IMAGE", "value": "registry.redhat.io/rhel9/redis-7@sha256:3d31c0cfaf4219f5bd1c52882b603215d1cb4aaef5b8d1a128d0174e090f96f3" }, { "name": "ARGOCD_REDIS_HA_IMAGE", "value": "registry.redhat.io/rhel9/redis-7@sha256:3d31c0cfaf4219f5bd1c52882b603215d1cb4aaef5b8d1a128d0174e090f96f3" }, { "name": "RELATED_IMAGE_ARGOCD_REDIS_HA_PROXY_IMAGE", "value": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:f83f1a5094075596f1b02cc8d99baa44be80f69f58864e925ede0b4f63f94fe3" }, { "name": "ARGOCD_REDIS_HA_PROXY_IMAGE", "value": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:f83f1a5094075596f1b02cc8d99baa44be80f69f58864e925ede0b4f63f94fe3" }, { "name": "RELATED_IMAGE_GITOPS_CONSOLE_PLUGIN_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:247e31fbbaf50acd865432bf5561ba4d7a46ed397a2ca06116d9f77f70745b01" }, { "name": "GITOPS_CONSOLE_PLUGIN_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:247e31fbbaf50acd865432bf5561ba4d7a46ed397a2ca06116d9f77f70745b01" }, { "name": "RELATED_IMAGE_ARGOCD_EXTENSION_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:01f2083a5780e3265f09b3dadff6637a8f03f80effd6c74ee8861128a5a5e29b" }, { "name": "ARGOCD_EXTENSION_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:01f2083a5780e3265f09b3dadff6637a8f03f80effd6c74ee8861128a5a5e29b" }, { "name": "RELATED_IMAGE_ARGO_ROLLOUTS_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:1148ea134b04dbc3c3d7ea01247e5b1c4b27f7c65816b6583ff0cb8f87465806" }, { "name": "ARGO_ROLLOUTS_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:1148ea134b04dbc3c3d7ea01247e5b1c4b27f7c65816b6583ff0cb8f87465806" }, { "name": "RELATED_IMAGE_MUST_GATHER_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:0bbc78d0063324e6ff3feac9673085b4732b8bbff2b1f05240a90e897738417b" }, { "name": "RELATED_IMAGE_KUBE_RBAC_PROXY_IMAGE", "value": "registry.redhat.io/openshift4/ose-kube-rbac-proxy-rhel9@sha256:b473bb5efee9fb78c1e654ef94da9213e29a8eccfda2e8359b7c1b6b4049b554" }, { "name": "ARGOCD_PRINCIPAL_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:f40819e802a93e2cee6ce520f6dabb6977c0f5fa503141964dc211112d748a3b" }, { "name": "RELATED_IMAGE_ARGOCD_PRINCIPAL_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:f40819e802a93e2cee6ce520f6dabb6977c0f5fa503141964dc211112d748a3b" }, { "name": "ARGOCD_AGENT_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:f40819e802a93e2cee6ce520f6dabb6977c0f5fa503141964dc211112d748a3b" }, { "name": "RELATED_IMAGE_ARGOCD_AGENT_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:f40819e802a93e2cee6ce520f6dabb6977c0f5fa503141964dc211112d748a3b" }, { "name": "ARGOCD_IMAGE_UPDATER_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:87dc8057b7a1fba6ef4adc8f16468147f761eccefef949836fb40c474cd11a4e" }, { "name": "RELATED_IMAGE_ARGOCD_IMAGE_UPDATER_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:87dc8057b7a1fba6ef4adc8f16468147f761eccefef949836fb40c474cd11a4e" }, { "name": "OPERATOR_CONDITION_NAME", "value": "openshift-gitops-operator.v1.20.2" } ], "image": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d6d9185b0cade4ee521460ce8285a2fb0686d42b2ba861ce1be9ebe602d622f6", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/apiserver.local.config/certificates", "name": "apiservice-cert" }, { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "webhook-cert" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:8443", "--upstream=http://127.0.0.1:8080", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--logtostderr=true", "--allow-paths=/metrics", "--http2-disable" ], "env": [ { "name": "ARGOCD_CLUSTER_CONFIG_NAMESPACES", "value": "openshift-gitops,tssc-gitops" }, { "name": "OPERATOR_CONDITION_NAME", "value": "openshift-gitops-operator.v1.20.2" } ], "image": "registry.redhat.io/openshift4/ose-kube-rbac-proxy-rhel9@sha256:b473bb5efee9fb78c1e654ef94da9213e29a8eccfda2e8359b7c1b6b4049b554", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "128Mi" }, "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "kube-rbac-proxy-tls", "readOnly": true }, { "mountPath": "/apiserver.local.config/certificates", "name": "apiservice-cert" }, { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "webhook-cert" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "openshift-gitops-operator-controller-manager", "serviceAccountName": "openshift-gitops-operator-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "name": "kube-rbac-proxy-tls", "secret": { "defaultMode": 420, "secretName": "kube-rbac-proxy-tls" } }, { "name": "apiservice-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "apiserver.crt" }, { "key": "tls.key", "path": "apiserver.key" } ], "secretName": "openshift-gitops-operator-controller-manager-service-cert" } }, { "name": "webhook-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "openshift-gitops-operator-controller-manager-service-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:06Z", "generation": 1, "labels": { "app": "openshift-pipelines-operator", "name": "openshift-pipelines-operator", "pod-template-hash": "7f4f84c8cf" }, "name": "openshift-pipelines-operator-7f4f84c8cf", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-pipelines-operator", "uid": "bebe741d-9558-44bb-9667-a1b42d376402" } ], "resourceVersion": "46177", "uid": "17848e06-7016-4d29-9157-ebc782e8ce7b" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "openshift-pipelines-operator", "pod-template-hash": "7f4f84c8cf" } }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"ManualApprovalGate\",\n \"metadata\": {\n \"name\": \"manual-approval-gate\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"OpenShiftPipelinesAsCode\",\n \"metadata\": {\n \"name\": \"pipelines-as-code\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonAddon\",\n \"metadata\": {\n \"name\": \"addon\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonChain\",\n \"metadata\": {\n \"name\": \"chain\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonConfig\",\n \"metadata\": {\n \"name\": \"config\"\n },\n \"spec\": {\n \"addon\": {\n \"params\": [\n {\n \"name\": \"pipelineTemplates\",\n \"value\": \"true\"\n },\n {\n \"name\": \"resolverTasks\",\n \"value\": \"true\"\n },\n {\n \"name\": \"resolverStepActions\",\n \"value\": \"true\"\n },\n {\n \"name\": \"communityResolverTasks\",\n \"value\": \"true\"\n }\n ]\n },\n \"params\": [\n {\n \"name\": \"createRbacResource\",\n \"value\": \"true\"\n },\n {\n \"name\": \"legacyPipelineRbac\",\n \"value\": \"true\"\n },\n {\n \"name\": \"createCABundleConfigMaps\",\n \"value\": \"true\"\n }\n ],\n \"profile\": \"all\",\n \"pruner\": {\n \"keep\": 100,\n \"resources\": [\n \"pipelinerun\",\n \"taskrun\"\n ],\n \"schedule\": \"0 8 * * *\"\n },\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonHub\",\n \"metadata\": {\n \"name\": \"hub\"\n },\n \"spec\": {\n \"api\": {\n \"catalogRefreshInterval\": \"30m\"\n },\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonInstallerSet\",\n \"metadata\": {\n \"name\": \"foo\"\n },\n \"spec\": {\n \"manifests\": []\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonPipeline\",\n \"metadata\": {\n \"name\": \"pipeline\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonPruner\",\n \"metadata\": {\n \"name\": \"pruner\"\n },\n \"spec\": {\n \"disabled\": true,\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonResult\",\n \"metadata\": {\n \"name\": \"result\"\n },\n \"spec\": {\n \"auth_disable\": true,\n \"db_enable_auto_migration\": true,\n \"db_host\": \"tekton-results-postgres-service.openshift-pipelines.svc.cluster.local\",\n \"db_port\": 5432,\n \"log_level\": \"debug\",\n \"logging_pvc_name\": \"tekton-logs\",\n \"logs_api\": true,\n \"logs_buffer_size\": 32768,\n \"logs_path\": \"/logs\",\n \"logs_type\": \"File\",\n \"prometheus_port\": 9090,\n \"server_port\": 8080,\n \"targetNamespace\": \"openshift-pipelines\",\n \"tls_hostname_override\": \"tekton-results-api-service.openshift-pipelines.svc.cluster.local\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonTrigger\",\n \"metadata\": {\n \"name\": \"trigger\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n }\n]", "capabilities": "Full Lifecycle", "categories": "Developer Tools, Integration \u0026 Delivery", "certified": "false", "console.openshift.io/plugins": "[\"pipelines-console-plugin\"]", "description": "Red Hat OpenShift Pipelines is a cloud-native CI/CD solution for building pipelines using Tekton concepts which run natively on OpenShift and Kubernetes.", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "true", "features.operators.openshift.io/proxy-aware": "true", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "olm.operatorGroup": "global-operators", "olm.operatorNamespace": "openshift-operators", "olm.skipRange": "\u003e=1.20.0 \u003c1.21.1", "olm.targetNamespaces": "", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"ManualApprovalGate\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"OpenShiftPipelinesAsCode\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonAddon\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonChain\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonConfig\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonHub\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonInstallerSet\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonPipeline\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonPruner\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonResult\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonTrigger\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"openshift-pipelines-operator-rh\",\"version\":\"1.21.1\"}}]}", "operators.openshift.io/valid-subscription": "[\"OpenShift Container Platform\", \"OpenShift Platform Plus\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.37.0", "operators.operatorframework.io/internal-objects": "[\"tektoninstallersets.operator.tekton.dev\", \"tektonconfigs.operator.tekton.dev\",\"tektonpipelines.operator.tekton.dev\",\"tektontriggers.operator.tekton.dev\",\"tektonaddons.operator.tekton.dev\", \"tektonhubs.operator.tekton.dev\", \"tektonresults.operator.tekton.dev\", \"tektonchains.operator.tekton.dev\", \"openshiftpipelinesascodes.operator.tekton.dev\", \"manualapprovalgates.operator.tekton.dev\",\"tektonpruners.operator.tekton.dev\"]", "operators.operatorframework.io/project_layout": "unknown", "repository": "https://github.com/tektoncd/operator", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "app": "openshift-pipelines-operator", "name": "openshift-pipelines-operator", "pod-template-hash": "7f4f84c8cf" } }, "spec": { "containers": [ { "args": [ "-controllers", "tektonconfig,tektonpipeline,tektontrigger,tektonhub,tektonchain,tektonaddon,tektonresult,openshiftpipelinesascode,manualapprovalgate,tektonpruner", "-unique-process-name", "tekton-operator-lifecycle" ], "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "PLATFORM", "value": "openshift" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "redhat-openshift-pipelines-operator" }, { "name": "IMAGE_PIPELINES_PROXY", "value": "registry.redhat.io/openshift-pipelines/pipelines-operator-proxy-rhel9@sha256:4747a491c6fd2de939e00dbd9fb12ac4f813bce077c8dfe4463be1e72634602b" }, { "name": "IMAGE_JOB_PRUNER_TKN", "value": "registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:d437b27347de52003798e4dadfa3827f078792795c3d3a683fcdcb59b6b1db1d" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "VERSION", "value": "1.21.1" }, { "name": "AUTOINSTALL_COMPONENTS", "value": "false" }, { "name": "DEFAULT_TARGET_NAMESPACE", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_TARGET_NAMESPACE", "name": "tekton-config-defaults" } } }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-config-observability" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-controller-config-leader-election" }, { "name": "IMAGE_HUB_TEKTON_HUB_DB", "value": "registry.redhat.io/rhel9/postgresql-15@sha256:90ec347a35ab8a5d530c8d09f5347b13cc71df04f3b994bfa8b1a409b1171d59" }, { "name": "IMAGE_ADDONS_PARAM_BUILDER_IMAGE", "value": "registry.redhat.io/rhel9/buildah@sha256:4e604d18fc609d25b2fc99814281944acaac78e8cd5e47b8359709b8b505db86" }, { "name": "IMAGE_ADDONS_PARAM_KN_IMAGE", "value": "registry.redhat.io/openshift-serverless-1/kn-client-kn-rhel9@sha256:e213fd263772c5286aa560132cd8c043cf2946f04f96eedf18cd240859bd8a48" }, { "name": "IMAGE_ADDONS_MVN_SETTINGS", "value": "registry.redhat.io/ubi9/ubi-minimal@sha256:61d5ad475048c2e655cd46d0a55dfeaec182cc3faa6348cb85989a7c9e196483" }, { "name": "IMAGE_ADDONS_SKOPEO_COPY", "value": "registry.redhat.io/rhel9/skopeo@sha256:3c1d54513adc2998955731da23ec354a15942fa7dd2e37dc818f85a947f400d4" }, { "name": "IMAGE_ADDONS_GENERATE", "value": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:bc10e7d6122ede5cf4f2882c200447683255465a1080e826761e90bfb983506e" }, { "name": "IMAGE_ADDONS_GEN_ENV_FILE", "value": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:bc10e7d6122ede5cf4f2882c200447683255465a1080e826761e90bfb983506e" }, { "name": "IMAGE_ADDONS_PARAM_MAVEN_IMAGE", "value": "registry.redhat.io/ubi9/openjdk-17@sha256:d334d3c36867a1eef7daa598af10b5f620394ca0234b12e71b8b7e99bda9224e" }, { "name": "IMAGE_ADDONS_OC", "value": "image-registry.openshift-image-registry.svc:5000/openshift/cli:latest" }, { "name": "IMAGE_PIPELINES_TEKTON_PIPELINES_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-controller-rhel9@sha256:862f686cb10b000d301bb4b49af39eefb046d6abb7fd2187ef8c59925736c932" }, { "name": "IMAGE_PIPELINES_WEBHOOK", "value": "registry.redhat.io/openshift-pipelines/pipelines-webhook-rhel9@sha256:7ce8fca678919af6ad687d11858ecce0d392f478da4e6b57a5ea3e736008341e" }, { "name": "IMAGE_PIPELINES_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-resolvers-rhel9@sha256:15cd02433813f9809c7bdb16707636f2a4336fe501ac4663abc38ee7cdfeb917" }, { "name": "IMAGE_PIPELINES_TEKTON_EVENTS_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-events-rhel9@sha256:34a30986fb4cdc8edfbb5f39619013ea623fb2f633ee83a384d3b98e4bc133cc" }, { "name": "IMAGE_PIPELINES_ARG__ENTRYPOINT_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel9@sha256:fd9f6bc408772348ae540701c6bf2b178028362801acb748e1dde80c06eba70d" }, { "name": "IMAGE_PIPELINES_ARG__GIT_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel9@sha256:800678e319e2c32d73acde7862ec9e7803a8c9210597ef4e99ea324945e89447" }, { "name": "IMAGE_ADDONS_PARAM_GITINITIMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel9@sha256:800678e319e2c32d73acde7862ec9e7803a8c9210597ef4e99ea324945e89447" }, { "name": "IMAGE_ADDONS_GIT_RUN", "value": "registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel9@sha256:800678e319e2c32d73acde7862ec9e7803a8c9210597ef4e99ea324945e89447" }, { "name": "IMAGE_ADDONS_REPORT", "value": "registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel9@sha256:800678e319e2c32d73acde7862ec9e7803a8c9210597ef4e99ea324945e89447" }, { "name": "IMAGE_ADDONS_GIT_CLONE", "value": "registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel9@sha256:800678e319e2c32d73acde7862ec9e7803a8c9210597ef4e99ea324945e89447" }, { "name": "IMAGE_ADDONS_PREPARE_AND_RUN", "value": "registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel9@sha256:800678e319e2c32d73acde7862ec9e7803a8c9210597ef4e99ea324945e89447" }, { "name": "IMAGE_ADDONS_CACHE_UPLOAD", "value": "registry.redhat.io/openshift-pipelines/pipelines-cache-rhel9@sha256:82ba1d7a148765c8e51a56ab07f8044556ec86212add03fd422f19f8202b5de7" }, { "name": "IMAGE_ADDONS_CACHE_FETCH", "value": "registry.redhat.io/openshift-pipelines/pipelines-cache-rhel9@sha256:82ba1d7a148765c8e51a56ab07f8044556ec86212add03fd422f19f8202b5de7" }, { "name": "IMAGE_PIPELINES_ARG__WORKINGDIRINIT_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-workingdirinit-rhel9@sha256:5e4adc0c5619537d0c15175208883e3405d92dcd48566a40c59422905fcac30e" }, { "name": "IMAGE_PIPELINES_ARG__SIDECARLOGRESULTS_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-sidecarlogresults-rhel9@sha256:b5e859d02a515139f799f0fce9446333393461c845ee1cf638747960dc382064" }, { "name": "IMAGE_PIPELINES_ARG__NOP_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-nop-rhel9@sha256:ea0574a3ee9e6be79189c65b589b6b6d666459a80b8c87ec10653d210dbe510d" }, { "name": "IMAGE_PIPELINES_ARG__SHELL_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel9@sha256:fd9f6bc408772348ae540701c6bf2b178028362801acb748e1dde80c06eba70d" }, { "name": "IMAGE_TRIGGERS_TEKTON_TRIGGERS_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-triggers-controller-rhel9@sha256:68b3df2abb2eb76d8acc58ecd1872ccb85e76177d9d895fb9c1e722354d090dd" }, { "name": "IMAGE_TRIGGERS_WEBHOOK", "value": "registry.redhat.io/openshift-pipelines/pipelines-triggers-webhook-rhel9@sha256:c30b1378603e087951a70484ad015d2cc066de6d61f0d8def27f042ff80802f0" }, { "name": "IMAGE_TRIGGERS_TEKTON_TRIGGERS_CORE_INTERCEPTORS", "value": "registry.redhat.io/openshift-pipelines/pipelines-triggers-core-interceptors-rhel9@sha256:1662f3da4827b60da673f6362d7fbe9673a945d965b3556d61e31951a93eb3ee" }, { "name": "IMAGE_TRIGGERS_ARG__EL_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-triggers-eventlistenersink-rhel9@sha256:df87d4d8bad3d7df88ef56cc89eef6d4af76e5d442f0778c52d67582ed952a74" }, { "name": "IMAGE_ADDONS_KN", "value": "registry.redhat.io/openshift-serverless-1/kn-client-kn-rhel9@sha256:e213fd263772c5286aa560132cd8c043cf2946f04f96eedf18cd240859bd8a48" }, { "name": "IMAGE_ADDONS_OPC", "value": "registry.redhat.io/openshift-pipelines/pipelines-opc-rhel9@sha256:e9c148d7532ece3e679fa6d13e75b003e8058489e8059bd611ca537bc61622d5" }, { "name": "IMAGE_ADDONS_SKOPEO_RESULTS", "value": "registry.redhat.io/rhel9/skopeo@sha256:3c1d54513adc2998955731da23ec354a15942fa7dd2e37dc818f85a947f400d4" }, { "name": "IMAGE_ADDONS_BUILD", "value": "registry.redhat.io/rhel9/buildah@sha256:4e604d18fc609d25b2fc99814281944acaac78e8cd5e47b8359709b8b505db86" }, { "name": "IMAGE_ADDONS_S2I_BUILD", "value": "registry.redhat.io/rhel9/buildah@sha256:4e604d18fc609d25b2fc99814281944acaac78e8cd5e47b8359709b8b505db86" }, { "name": "IMAGE_ADDONS_S2I_GENERATE", "value": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:bc10e7d6122ede5cf4f2882c200447683255465a1080e826761e90bfb983506e" }, { "name": "IMAGE_ADDONS_LOAD_SCRIPTS", "value": "registry.redhat.io/ubi9/ubi-minimal@sha256:61d5ad475048c2e655cd46d0a55dfeaec182cc3faa6348cb85989a7c9e196483" }, { "name": "IMAGE_ADDONS_MAVEN_GENERATE", "value": "registry.redhat.io/ubi9/ubi-minimal@sha256:61d5ad475048c2e655cd46d0a55dfeaec182cc3faa6348cb85989a7c9e196483" }, { "name": "IMAGE_ADDONS_PREPARE", "value": "registry.redhat.io/ubi9/ubi-minimal@sha256:61d5ad475048c2e655cd46d0a55dfeaec182cc3faa6348cb85989a7c9e196483" }, { "name": "IMAGE_ADDONS_PARAM_TKN_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:d437b27347de52003798e4dadfa3827f078792795c3d3a683fcdcb59b6b1db1d" }, { "name": "IMAGE_ADDONS_TKN", "value": "registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:d437b27347de52003798e4dadfa3827f078792795c3d3a683fcdcb59b6b1db1d" }, { "name": "IMAGE_ADDONS_TKN_CLI_SERVE", "value": "registry.redhat.io/openshift-pipelines/pipelines-serve-tkn-cli-rhel9@sha256:5566ebbc75f2a2a911f3cc884f969a3c45104341a99e51a795c6bc31ce43e625" }, { "name": "IMAGE_ADDONS_TKN_CLI_SERVE_INIT_CONFIG", "value": "registry.redhat.io/openshift-pipelines/pipelines-serve-tkn-cli-rhel9@sha256:5566ebbc75f2a2a911f3cc884f969a3c45104341a99e51a795c6bc31ce43e625" }, { "name": "IMAGE_CHAINS_TEKTON_CHAINS_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:77751c15706d768514ad33f2c360ce7e342e9462d5ebde420cb20b2fe4e1de78" }, { "name": "IMAGE_RESULTS_POSTGRES", "value": "registry.redhat.io/rhel9/postgresql-15@sha256:90ec347a35ab8a5d530c8d09f5347b13cc71df04f3b994bfa8b1a409b1171d59" }, { "name": "IMAGE_HUB_TEKTON_HUB_DB_MIGRATION", "value": "registry.redhat.io/openshift-pipelines/pipelines-hub-db-migration-rhel9@sha256:ea102b77de3b59ac56c9ea8543c5553e3cf1d712a7169acf83f52bb4616d9e36" }, { "name": "IMAGE_HUB_TEKTON_HUB_API", "value": "registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel9@sha256:89e90575bdafa605b0b196f98bcab56828325a953e74fcb7d1787e0c4242165d" }, { "name": "IMAGE_HUB_TEKTON_HUB_UI", "value": "registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel9@sha256:f8692bb593354b163f674c4c53b766697b076dec36460c1b9b58d30b10e5bf3a" }, { "name": "IMAGE_MAG_TEKTON_TASKGROUP_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-controller-rhel9@sha256:d9c4f719c84f09e3e5d17be3545fc71a87dfeb6d8e10b01fb6bf3ebb104f841e" }, { "name": "IMAGE_MAG_MANUAL_APPROVAL", "value": "registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-webhook-rhel9@sha256:19b256464b54b825d7c2c3fe07b3807e1daf9e29680f9d7ce9b134f0ff007497" }, { "name": "IMAGE_PRUNER_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-pruner-controller-rhel9@sha256:ca3f17907c0f31a6cf2b9d58f53f97078ad189e1eadfe0671262a3a616360207" }, { "name": "IMAGE_PRUNER_WEBHOOK", "value": "registry.redhat.io/openshift-pipelines/pipelines-pruner-webhook-rhel9@sha256:32860b6284883d1c0d8d73333ac930c8ccdb34a94048f31c7aab4f879892a3a6" }, { "name": "IMAGE_PAC_PAC_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-controller-rhel9@sha256:03656ac687c2f3ba6dfd72f7373c6fb67169660a07a579b009c8d8f89b7c0576" }, { "name": "IMAGE_PAC_PAC_WEBHOOK", "value": "registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-webhook-rhel9@sha256:d489fcc781d7ea7017d10297458c19414ce1415fdd0aa41c2e614359c7f6304f" }, { "name": "IMAGE_PAC_PAC_WATCHER", "value": "registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel9@sha256:ab8152479af7d6fe719c90de7de5b7c97c409f8649db724f51e99dec57cb171b" }, { "name": "IMAGE_PAC_PAC_CLI", "value": "registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-cli-rhel9@sha256:4512fbe386db96e9bf873f2321a748984946df77c8d9cee65252647d9da02636" }, { "name": "IMAGE_RESULTS_WATCHER", "value": "registry.redhat.io/openshift-pipelines/pipelines-results-watcher-rhel9@sha256:41427cc1b6689f776e95574529ef9b22a6dde840f23c2b78103416ab37cc5800" }, { "name": "IMAGE_RESULTS_API", "value": "registry.redhat.io/openshift-pipelines/pipelines-results-api-rhel9@sha256:803e2eeb32b2cc79f4ed8a34f9b1c4ef35c750c3b1cc9352dd0f690dd75ae177" }, { "name": "IMAGE_RESULTS_RETENTION_POLICY_AGENT", "value": "registry.redhat.io/openshift-pipelines/pipelines-results-retention-policy-agent-rhel9@sha256:a70f1da59119c9bb43362b87e5bc2b05113e8796b8ca8e1ff0439b66772a7244" }, { "name": "IMAGE_ADDONS_MAVEN_GOALS", "value": "registry.redhat.io/ubi9/openjdk-17@sha256:d334d3c36867a1eef7daa598af10b5f620394ca0234b12e71b8b7e99bda9224e" }, { "name": "IMAGE_PIPELINES_CONSOLE_PLUGIN", "value": "registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel9@sha256:7be2fe2114db1ec77293b48dc1e940f8809f7cb668f2415c1d73c3f9ba9ddbb0" }, { "name": "OPERATOR_CONDITION_NAME", "value": "openshift-pipelines-operator-rh.v1.21.1" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-rhel9-operator@sha256:382b0a75f78315937335f73a0f841738e3d08a893789c7156314d6cdaaa54417", "imagePullPolicy": "Always", "name": "openshift-pipelines-operator-lifecycle", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" }, { "args": [ "-controllers", "tektoninstallerset", "-unique-process-name", "tekton-operator-cluster-operations" ], "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "redhat-openshift-pipelines-operator" }, { "name": "PROFILING_PORT", "value": "9009" }, { "name": "VERSION", "value": "v0.78.1" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-controller-config-leader-election" }, { "name": "AUTOINSTALL_COMPONENTS", "value": "false" }, { "name": "OPERATOR_CONDITION_NAME", "value": "openshift-pipelines-operator-rh.v1.21.1" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-rhel9-operator@sha256:382b0a75f78315937335f73a0f841738e3d08a893789c7156314d6cdaaa54417", "imagePullPolicy": "Always", "name": "openshift-pipelines-operator-cluster-operations", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-pipelines-operator", "serviceAccountName": "openshift-pipelines-operator", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:10Z", "generation": 1, "labels": { "app": "rhdh-operator", "app.kubernetes.io/component": "rhdh-operator", "control-plane": "controller-manager", "pod-template-hash": "54f5b67dd9" }, "name": "rhdh-operator-54f5b67dd9", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "rhdh-operator", "uid": "8d589252-0ec9-4242-9ec9-4174a9ae1c79" } ], "resourceVersion": "47457", "uid": "b7b5a138-87b5-43e7-a830-1ce26ef95002" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "rhdh-operator", "pod-template-hash": "54f5b67dd9" } }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"rhdh.redhat.com/v1alpha3\",\n \"kind\": \"Backstage\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/name\": \"backstage\"\n },\n \"name\": \"developer-hub\"\n }\n },\n {\n \"apiVersion\": \"rhdh.redhat.com/v1alpha4\",\n \"kind\": \"Backstage\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/name\": \"backstage\"\n },\n \"name\": \"developer-hub\"\n }\n },\n {\n \"apiVersion\": \"rhdh.redhat.com/v1alpha5\",\n \"kind\": \"Backstage\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/name\": \"backstage\"\n },\n \"name\": \"developer-hub\"\n }\n }\n]", "capabilities": "Seamless Upgrades", "categories": "Developer Tools", "certified": "true", "containerImage": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:2a1f7829c8d1e004bd140f5df42d2399fad74204ef849b143bfee06990619b31", "createdAt": "2026-03-23T20:29:00Z", "description": "Red Hat Developer Hub is a Red Hat supported version of Backstage. It comes with pre-built plug-ins and configuration settings, supports use of an external database, and can help streamline the process of setting up a self-managed internal developer portal for adopters who are just starting out.", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "false", "features.operators.openshift.io/proxy-aware": "false", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "kubectl.kubernetes.io/default-container": "manager", "olm.operatorGroup": "global-operators", "olm.operatorNamespace": "openshift-operators", "olm.targetNamespaces": "", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhdh.redhat.com\",\"kind\":\"Backstage\",\"version\":\"v1alpha3\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhdh.redhat.com\",\"kind\":\"Backstage\",\"version\":\"v1alpha4\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhdh.redhat.com\",\"kind\":\"Backstage\",\"version\":\"v1alpha5\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"rhdh\",\"version\":\"1.9.3\"}}]}", "operatorframework.io/suggested-namespace": "rhdh-operator", "operators.openshift.io/valid-subscription": "[\"Red Hat Developer Hub\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.37.0", "operators.operatorframework.io/project_layout": "go.kubebuilder.io/v4", "repository": "https://gitlab.cee.redhat.com/rhidp/rhdh/", "skipRange": "\u003e=1.0.0 \u003c1.9.3", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "app": "rhdh-operator", "app.kubernetes.io/component": "rhdh-operator", "control-plane": "controller-manager", "pod-template-hash": "54f5b67dd9" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/arch", "operator": "In", "values": [ "amd64" ] }, { "key": "kubernetes.io/os", "operator": "In", "values": [ "linux" ] } ] } ] } } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--health-probe-bind-address=:8081", "--metrics-bind-address=:8443", "--metrics-secure=true", "--leader-elect" ], "command": [ "/manager" ], "env": [ { "name": "OPERATOR_NAME", "value": "rhdh-operator" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "RELATED_IMAGE_postgresql", "value": "registry.redhat.io/rhel9/postgresql-15@sha256:8a00879923de4ed645006786a211c6fccc46b578db09edb58090a0a2bdca7a27" }, { "name": "RELATED_IMAGE_backstage", "value": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:12a7f6cc89bf4364c038090b2b6532d90ab006444489f66a75c0d11da9f6e567" }, { "name": "RELATED_IMAGE_catalog_index", "value": "registry.access.redhat.com/rhdh/plugin-catalog-index@sha256:7685bc0f28b4ae5fe41bb60bb807700be8572cc3a1d39c12cf5f82955684134c" }, { "name": "OPERATOR_CONDITION_NAME", "value": "rhdh-operator.v1.9.3" } ], "image": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:2a1f7829c8d1e004bd140f5df42d2399fad74204ef849b143bfee06990619b31", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "health", "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 8081, "name": "health", "protocol": "TCP" }, { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": "health", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "ephemeral-storage": "20Mi", "memory": "1Gi" }, "requests": { "cpu": "10m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/default-config", "name": "default-config" }, { "mountPath": "/plugin-deps", "name": "plugin-deps" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "rhdh-controller-manager", "serviceAccountName": "rhdh-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "configMap": { "defaultMode": 420, "name": "rhdh-default-config" }, "name": "default-config" }, { "configMap": { "defaultMode": 420, "name": "rhdh-plugin-deps", "optional": true }, "name": "plugin-deps" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:58:48Z", "generation": 1, "labels": { "control-plane": "operator-controller-manager", "pod-template-hash": "5f6fcbb4d6" }, "name": "rhtas-operator-controller-manager-5f6fcbb4d6", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "rhtas-operator-controller-manager", "uid": "7ab085bc-3b52-49ab-8ff4-12961e27822a" } ], "resourceVersion": "45126", "uid": "ed4f751f-0472-43aa-88f4-8aa949a05efe" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "operator-controller-manager", "pod-template-hash": "5f6fcbb4d6" } }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"rhtas.redhat.com/v1alpha1\",\n \"kind\": \"CTlog\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/instance\": \"securesign-sample\",\n \"app.kubernetes.io/name\": \"securesign-sample\",\n \"app.kubernetes.io/part-of\": \"trusted-artifact-signer\"\n },\n \"name\": \"ctlog-sample\"\n },\n \"spec\": {}\n },\n {\n \"apiVersion\": \"rhtas.redhat.com/v1alpha1\",\n \"kind\": \"Fulcio\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/instance\": \"securesign-sample\",\n \"app.kubernetes.io/name\": \"securesign-sample\",\n \"app.kubernetes.io/part-of\": \"trusted-artifact-signer\"\n },\n \"name\": \"fulcio-sample\"\n },\n \"spec\": {\n \"certificate\": {\n \"commonName\": \"fulcio.hostname\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n },\n \"config\": {\n \"OIDCIssuers\": [\n {\n \"ClientID\": \"trusted-artifact-signer\",\n \"Issuer\": \"https://your-oidc-issuer-url\",\n \"IssuerURL\": \"https://your-oidc-issuer-url\",\n \"Type\": \"email\"\n }\n ]\n },\n \"externalAccess\": {\n \"enabled\": true\n }\n }\n },\n {\n \"apiVersion\": \"rhtas.redhat.com/v1alpha1\",\n \"kind\": \"Rekor\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/instance\": \"securesign-sample\",\n \"app.kubernetes.io/name\": \"securesign-sample\",\n \"app.kubernetes.io/part-of\": \"trusted-artifact-signer\"\n },\n \"name\": \"rekor-sample\"\n },\n \"spec\": {\n \"externalAccess\": {\n \"enabled\": true\n }\n }\n },\n {\n \"apiVersion\": \"rhtas.redhat.com/v1alpha1\",\n \"kind\": \"Securesign\",\n \"metadata\": {\n \"annotations\": {\n \"rhtas.redhat.com/metrics\": \"true\"\n },\n \"labels\": {\n \"app.kubernetes.io/instance\": \"securesign-sample\",\n \"app.kubernetes.io/name\": \"securesign-sample\",\n \"app.kubernetes.io/part-of\": \"trusted-artifact-signer\"\n },\n \"name\": \"securesign-sample\"\n },\n \"spec\": {\n \"ctlog\": {\n \"monitoring\": {\n \"enabled\": true\n }\n },\n \"fulcio\": {\n \"certificate\": {\n \"commonName\": \"fulcio.hostname\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n },\n \"config\": {\n \"OIDCIssuers\": [\n {\n \"ClientID\": \"trusted-artifact-signer\",\n \"Issuer\": \"https://your-oidc-issuer-url\",\n \"IssuerURL\": \"https://your-oidc-issuer-url\",\n \"Type\": \"email\"\n }\n ]\n },\n \"externalAccess\": {\n \"enabled\": true\n },\n \"monitoring\": {\n \"enabled\": true\n }\n },\n \"rekor\": {\n \"externalAccess\": {\n \"enabled\": true\n },\n \"monitoring\": {\n \"enabled\": true\n }\n },\n \"trillian\": {\n \"database\": {\n \"create\": true\n },\n \"monitoring\": {\n \"enabled\": true\n }\n },\n \"tsa\": {\n \"externalAccess\": {\n \"enabled\": true\n },\n \"monitoring\": {\n \"enabled\": true\n },\n \"ntpMonitoring\": {\n \"enabled\": true\n },\n \"signer\": {\n \"certificateChain\": {\n \"intermediateCA\": [\n {\n \"commonName\": \"tsa.hostname-intermediate\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n }\n ],\n \"leafCA\": {\n \"commonName\": \"tsa.hostname-leaf\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n },\n \"rootCA\": {\n \"commonName\": \"tsa.hostname-root\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n }\n }\n }\n },\n \"tuf\": {\n \"externalAccess\": {\n \"enabled\": true\n },\n \"keys\": [\n {\n \"name\": \"rekor.pub\"\n },\n {\n \"name\": \"ctfe.pub\"\n },\n {\n \"name\": \"fulcio_v1.crt.pem\"\n },\n {\n \"name\": \"tsa.certchain.pem\"\n }\n ],\n \"pvc\": {\n \"accessModes\": [\n \"ReadWriteOnce\"\n ],\n \"retain\": true,\n \"size\": \"100Mi\"\n },\n \"rootKeySecretRef\": {\n \"name\": \"tuf-root-keys\"\n }\n }\n }\n },\n {\n \"apiVersion\": \"rhtas.redhat.com/v1alpha1\",\n \"kind\": \"TimestampAuthority\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/created-by\": \"rhtas-operator\",\n \"app.kubernetes.io/instance\": \"timestampauthority-sample\",\n \"app.kubernetes.io/managed-by\": \"kustomize\",\n \"app.kubernetes.io/name\": \"timestampauthority\",\n \"app.kubernetes.io/part-of\": \"rhtas-operator\"\n },\n \"name\": \"timestampauthority-sample\"\n },\n \"spec\": {\n \"externalAccess\": {\n \"enabled\": true\n },\n \"monitoring\": {\n \"enabled\": true\n },\n \"ntpMonitoring\": {\n \"enabled\": true\n },\n \"signer\": {\n \"certificateChain\": {\n \"intermediateCA\": [\n {\n \"commonName\": \"tsa.hostname-intermediate\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n }\n ],\n \"leafCA\": {\n \"commonName\": \"tsa.hostname-leaf\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n },\n \"rootCA\": {\n \"commonName\": \"tsa.hostname-root\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n }\n }\n }\n }\n },\n {\n \"apiVersion\": \"rhtas.redhat.com/v1alpha1\",\n \"kind\": \"Trillian\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/instance\": \"securesign-sample\",\n \"app.kubernetes.io/name\": \"securesign-sample\",\n \"app.kubernetes.io/part-of\": \"trusted-artifact-signer\"\n },\n \"name\": \"trillian-sample\"\n },\n \"spec\": {\n \"database\": {\n \"create\": true\n },\n \"server\": {\n \"replicas\": 1\n },\n \"signer\": {\n \"replicas\": 1\n }\n }\n },\n {\n \"apiVersion\": \"rhtas.redhat.com/v1alpha1\",\n \"kind\": \"Tuf\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/instance\": \"securesign-sample\",\n \"app.kubernetes.io/name\": \"securesign-sample\",\n \"app.kubernetes.io/part-of\": \"trusted-artifact-signer\"\n },\n \"name\": \"tuf-sample\"\n },\n \"spec\": {\n \"externalAccess\": {\n \"enabled\": true\n },\n \"keys\": [\n {\n \"name\": \"rekor.pub\",\n \"secretRef\": {\n \"key\": \"public\",\n \"name\": \"rekor-pub-key\"\n }\n },\n {\n \"name\": \"fulcio_v1.crt.pem\",\n \"secretRef\": {\n \"key\": \"cert\",\n \"name\": \"fulcio-pub-key\"\n }\n },\n {\n \"name\": \"ctfe.pub\",\n \"secretRef\": {\n \"key\": \"public\",\n \"name\": \"ctlog-pub-key\"\n }\n },\n {\n \"name\": \"tsa.certchain.pem\",\n \"secretRef\": {\n \"key\": \"certificateChain\",\n \"name\": \"tsa-cert-chain\"\n }\n }\n ],\n \"pvc\": {\n \"accessModes\": [\n \"ReadWriteMany\"\n ],\n \"retain\": true,\n \"size\": \"100Mi\"\n }\n }\n }\n]", "capabilities": "Seamless Upgrades", "containerImage": "registry.redhat.io/rhtas/rhtas-rhel9-operator@sha256:1d97e631c15e5b2f10de5c394e207f0f110a4720f3fbb8986b90932cd3059f93", "createdAt": "2026-04-16T14:50:18Z", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "false", "features.operators.openshift.io/proxy-aware": "true", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "kubectl.kubernetes.io/default-container": "manager", "olm.operatorGroup": "global-operators", "olm.operatorNamespace": "openshift-operators", "olm.targetNamespaces": "", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtas.redhat.com\",\"kind\":\"CTlog\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtas.redhat.com\",\"kind\":\"Fulcio\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtas.redhat.com\",\"kind\":\"Rekor\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtas.redhat.com\",\"kind\":\"Securesign\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtas.redhat.com\",\"kind\":\"TimestampAuthority\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtas.redhat.com\",\"kind\":\"Trillian\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtas.redhat.com\",\"kind\":\"Tuf\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"rhtas-operator\",\"version\":\"1.3.4\"}}]}", "operators.openshift.io/valid-subscription": "[\"Red Hat Trusted Artifact Signer\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.36.1-ocp", "operators.operatorframework.io/project_layout": "go.kubebuilder.io/v4", "repository": "https://github.com/securesign/secure-sign-operator", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "control-plane": "operator-controller-manager", "pod-template-hash": "5f6fcbb4d6" } }, "spec": { "containers": [ { "args": [ "--leader-elect", "--metrics-bind-address=0.0.0.0:8080" ], "command": [ "/manager" ], "env": [ { "name": "OPENSHIFT", "value": "true" }, { "name": "RELATED_IMAGE_TRILLIAN_LOG_SIGNER", "value": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:f211db01228530de8ed46b05189c492e6c3629df1098da57d31f2765a22ef014" }, { "name": "RELATED_IMAGE_TRILLIAN_LOG_SERVER", "value": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:523fa259ebf067ac3076748d4f5c86e01e5b1960034c0876add5d67b0ca21b0b" }, { "name": "RELATED_IMAGE_TRILLIAN_DB", "value": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:ab5c3e921b58d17bf6b596d2d7acf64a28b34f3f3a66720c1a07e6555ed9e0b8" }, { "name": "RELATED_IMAGE_TRILLIAN_NETCAT", "value": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:15692e0deea2ee5ef374514639030317a5b033c1bd1778673329a9745feb41d1" }, { "name": "RELATED_IMAGE_CREATETREE", "value": "registry.redhat.io/rhtas/createtree-rhel9@sha256:163edb41ea7f64afc8333ee14d4b28161f7017285afcca6ca12238732c77b98d" }, { "name": "RELATED_IMAGE_FULCIO_SERVER", "value": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:2d478c389bc89afc6b331bc662a84dfc1bbb9da2681ab6dc5ad36f44c346699a" }, { "name": "RELATED_IMAGE_REKOR_MONITOR", "value": "registry.redhat.io/rhtas/rekor-monitor-rhel9@sha256:5f9cefb77c78ded0062fda73b6589767813de9448a845fe91e72cfe22df1f386" }, { "name": "RELATED_IMAGE_REKOR_REDIS", "value": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:22b8cfd123fdd66827b81f2431903198e33579906102b2f6295276cf3eb197a6" }, { "name": "RELATED_IMAGE_REKOR_SERVER", "value": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:b4a5a2c2518dba5f7812c8b4112e25a0f867a4b187c23adfc727395f871c8ca6" }, { "name": "RELATED_IMAGE_REKOR_SEARCH_UI", "value": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:204dc28f6182267851d39eff08649e921877e2771d2c39acb798aa7896f5bcef" }, { "name": "RELATED_IMAGE_BACKFILL_REDIS", "value": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:35b00d6cc82f90b4577af0d2c15153e255d6bb946349bb85f175216cefad1d07" }, { "name": "RELATED_IMAGE_TUF", "value": "registry.redhat.io/rhtas/tuffer-rhel9@sha256:3516168bd98b02eec2b6ffc247549a04dbb4483e7be4d08b63569f469e4a1f66" }, { "name": "RELATED_IMAGE_CTLOG", "value": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:95b5aefafd17dd44794f6d5d1e75278faa5a74f2472db667409d1c88caaef1f1" }, { "name": "RELATED_IMAGE_HTTP_SERVER", "value": "registry.redhat.io/ubi9/httpd-24@sha256:7a48172cdda2a565001998fac2f3aeaa65677f080dd9cb3f9e26ef0963afdef0" }, { "name": "RELATED_IMAGE_SEGMENT_REPORTING", "value": "registry.redhat.io/rhtas/segment-reporting-rhel9@sha256:5d9f194515a383a350f0f7f610de9d9b5e555b792cc1e1b3577cf84bcfd82499" }, { "name": "RELATED_IMAGE_TIMESTAMP_AUTHORITY", "value": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:a4aae20d4d24fc780fd7f613a54c6587538007b23e2a84b826c6812a19abd9ed" }, { "name": "RELATED_IMAGE_CLIENT_SERVER", "value": "registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72" }, { "name": "OPERATOR_CONDITION_NAME", "value": "rhtas-operator.v1.3.4" } ], "image": "registry.redhat.io/rhtas/rhtas-rhel9-operator@sha256:1d97e631c15e5b2f10de5c394e207f0f110a4720f3fbb8986b90932cd3059f93", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 8080, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "rhtas-operator-controller-manager", "serviceAccountName": "rhtas-operator-controller-manager", "terminationGracePeriodSeconds": 10 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:06Z", "generation": 1, "labels": { "app": "tekton-operator", "name": "tekton-operator-webhook", "pod-template-hash": "8f475cf58" }, "name": "tekton-operator-webhook-8f475cf58", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-operator-webhook", "uid": "9a7754e9-496e-4497-9d7f-dbed9a221d5f" } ], "resourceVersion": "46098", "uid": "0cac8600-9835-4ca9-8711-c4ffa5cf7f7f" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "tekton-operator-webhook", "pod-template-hash": "8f475cf58" } }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"ManualApprovalGate\",\n \"metadata\": {\n \"name\": \"manual-approval-gate\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"OpenShiftPipelinesAsCode\",\n \"metadata\": {\n \"name\": \"pipelines-as-code\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonAddon\",\n \"metadata\": {\n \"name\": \"addon\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonChain\",\n \"metadata\": {\n \"name\": \"chain\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonConfig\",\n \"metadata\": {\n \"name\": \"config\"\n },\n \"spec\": {\n \"addon\": {\n \"params\": [\n {\n \"name\": \"pipelineTemplates\",\n \"value\": \"true\"\n },\n {\n \"name\": \"resolverTasks\",\n \"value\": \"true\"\n },\n {\n \"name\": \"resolverStepActions\",\n \"value\": \"true\"\n },\n {\n \"name\": \"communityResolverTasks\",\n \"value\": \"true\"\n }\n ]\n },\n \"params\": [\n {\n \"name\": \"createRbacResource\",\n \"value\": \"true\"\n },\n {\n \"name\": \"legacyPipelineRbac\",\n \"value\": \"true\"\n },\n {\n \"name\": \"createCABundleConfigMaps\",\n \"value\": \"true\"\n }\n ],\n \"profile\": \"all\",\n \"pruner\": {\n \"keep\": 100,\n \"resources\": [\n \"pipelinerun\",\n \"taskrun\"\n ],\n \"schedule\": \"0 8 * * *\"\n },\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonHub\",\n \"metadata\": {\n \"name\": \"hub\"\n },\n \"spec\": {\n \"api\": {\n \"catalogRefreshInterval\": \"30m\"\n },\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonInstallerSet\",\n \"metadata\": {\n \"name\": \"foo\"\n },\n \"spec\": {\n \"manifests\": []\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonPipeline\",\n \"metadata\": {\n \"name\": \"pipeline\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonPruner\",\n \"metadata\": {\n \"name\": \"pruner\"\n },\n \"spec\": {\n \"disabled\": true,\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonResult\",\n \"metadata\": {\n \"name\": \"result\"\n },\n \"spec\": {\n \"auth_disable\": true,\n \"db_enable_auto_migration\": true,\n \"db_host\": \"tekton-results-postgres-service.openshift-pipelines.svc.cluster.local\",\n \"db_port\": 5432,\n \"log_level\": \"debug\",\n \"logging_pvc_name\": \"tekton-logs\",\n \"logs_api\": true,\n \"logs_buffer_size\": 32768,\n \"logs_path\": \"/logs\",\n \"logs_type\": \"File\",\n \"prometheus_port\": 9090,\n \"server_port\": 8080,\n \"targetNamespace\": \"openshift-pipelines\",\n \"tls_hostname_override\": \"tekton-results-api-service.openshift-pipelines.svc.cluster.local\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonTrigger\",\n \"metadata\": {\n \"name\": \"trigger\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n }\n]", "capabilities": "Full Lifecycle", "categories": "Developer Tools, Integration \u0026 Delivery", "certified": "false", "console.openshift.io/plugins": "[\"pipelines-console-plugin\"]", "description": "Red Hat OpenShift Pipelines is a cloud-native CI/CD solution for building pipelines using Tekton concepts which run natively on OpenShift and Kubernetes.", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "true", "features.operators.openshift.io/proxy-aware": "true", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "olm.operatorGroup": "global-operators", "olm.operatorNamespace": "openshift-operators", "olm.skipRange": "\u003e=1.20.0 \u003c1.21.1", "olm.targetNamespaces": "", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"ManualApprovalGate\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"OpenShiftPipelinesAsCode\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonAddon\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonChain\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonConfig\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonHub\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonInstallerSet\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonPipeline\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonPruner\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonResult\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonTrigger\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"openshift-pipelines-operator-rh\",\"version\":\"1.21.1\"}}]}", "operators.openshift.io/valid-subscription": "[\"OpenShift Container Platform\", \"OpenShift Platform Plus\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.37.0", "operators.operatorframework.io/internal-objects": "[\"tektoninstallersets.operator.tekton.dev\", \"tektonconfigs.operator.tekton.dev\",\"tektonpipelines.operator.tekton.dev\",\"tektontriggers.operator.tekton.dev\",\"tektonaddons.operator.tekton.dev\", \"tektonhubs.operator.tekton.dev\", \"tektonresults.operator.tekton.dev\", \"tektonchains.operator.tekton.dev\", \"openshiftpipelinesascodes.operator.tekton.dev\", \"manualapprovalgates.operator.tekton.dev\",\"tektonpruners.operator.tekton.dev\"]", "operators.operatorframework.io/project_layout": "unknown", "repository": "https://github.com/tektoncd/operator", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "app": "tekton-operator", "name": "tekton-operator-webhook", "pod-template-hash": "8f475cf58" } }, "spec": { "containers": [ { "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-webhook-config-leader-election" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-operator-webhook" }, { "name": "WEBHOOK_SECRET_NAME", "value": "tekton-operator-webhook-certs" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "PLATFORM", "value": "openshift" }, { "name": "AUTOINSTALL_COMPONENTS", "value": "false" }, { "name": "OPERATOR_CONDITION_NAME", "value": "openshift-pipelines-operator-rh.v1.21.1" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-operator-webhook-rhel9@sha256:7d79d27acad66cc8b34f0a38c7ad1f9663b80c4712e7659b1637cda597ff7248", "imagePullPolicy": "IfNotPresent", "name": "tekton-operator-webhook", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-pipelines-operator", "serviceAccountName": "openshift-pipelines-operator", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "kubernetes.io/description": "This deployment launches the ovn-kubernetes controller (control-plane) networking components.\n", "networkoperator.openshift.io/cluster-network-cidr": "10.128.0.0/14", "networkoperator.openshift.io/hybrid-overlay-status": "disabled", "networkoperator.openshift.io/ip-family-mode": "single-stack", "release.openshift.io/version": "4.20.10" }, "creationTimestamp": "2026-04-28T12:21:44Z", "generation": 1, "labels": { "app": "ovnkube-control-plane", "component": "network", "kubernetes.io/os": "linux", "openshift.io/component": "network", "pod-template-hash": "77c98597dd", "type": "infra" }, "name": "ovnkube-control-plane-77c98597dd", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "ovnkube-control-plane", "uid": "bb7d2d2d-d75b-47ce-af02-30cbf0417cfa" } ], "resourceVersion": "4853", "uid": "2ed0e54d-81ff-43b6-b61f-6bbeb763bc38" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "ovnkube-control-plane", "pod-template-hash": "77c98597dd" } }, "template": { "metadata": { "annotations": { "networkoperator.openshift.io/cluster-network-cidr": "10.128.0.0/14", "networkoperator.openshift.io/hybrid-overlay-status": "disabled", "networkoperator.openshift.io/ip-family-mode": "single-stack", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "ovnkube-control-plane", "component": "network", "kubernetes.io/os": "linux", "openshift.io/component": "network", "pod-template-hash": "77c98597dd", "type": "infra" } }, "spec": { "containers": [ { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -euo pipefail\nTLS_PK=/etc/pki/tls/metrics-cert/tls.key\nTLS_CERT=/etc/pki/tls/metrics-cert/tls.crt\n# As the secret mount is optional we must wait for the files to be present.\n# The service is created in monitor.yaml and this is created in sdn.yaml.\nTS=$(date +%s)\nWARN_TS=$(( ${TS} + $(( 20 * 60)) ))\nHAS_LOGGED_INFO=0\n\nlog_missing_certs(){\n CUR_TS=$(date +%s)\n if [[ \"${CUR_TS}\" -gt \"WARN_TS\" ]]; then\n echo $(date -Iseconds) WARN: ovn-control-plane-metrics-cert not mounted after 20 minutes.\n elif [[ \"${HAS_LOGGED_INFO}\" -eq 0 ]] ; then\n echo $(date -Iseconds) INFO: ovn-control-plane-metrics-cert not mounted. Waiting 20 minutes.\n HAS_LOGGED_INFO=1\n fi\n}\nwhile [[ ! -f \"${TLS_PK}\" || ! -f \"${TLS_CERT}\" ]] ; do\n log_missing_certs\n sleep 5\ndone\n\necho $(date -Iseconds) INFO: ovn-control-plane-metrics-certs mounted, starting kube-rbac-proxy\nexec /usr/bin/kube-rbac-proxy \\\n --logtostderr \\\n --secure-listen-address=:9108 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 \\\n --upstream=http://127.0.0.1:29108/ \\\n --tls-private-key-file=${TLS_PK} \\\n --tls-cert-file=${TLS_CERT}\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:883be225980cafa658d73b7d87ac99a39dce0fa8fb7754158ec28dc218bc903d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9108, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/tls/metrics-cert", "name": "ovn-control-plane-metrics-cert", "readOnly": true } ] }, { "command": [ "/bin/bash", "-c", "set -xe\nif [[ -f \"/env/_master\" ]]; then\n set -o allexport\n source \"/env/_master\"\n set +o allexport\nfi\n\novn_v4_join_subnet_opt=\nif [[ \"\" != \"\" ]]; then\n ovn_v4_join_subnet_opt=\"--gateway-v4-join-subnet \"\nfi\novn_v6_join_subnet_opt=\nif [[ \"\" != \"\" ]]; then\n ovn_v6_join_subnet_opt=\"--gateway-v6-join-subnet \"\nfi\n\novn_v4_transit_switch_subnet_opt=\nif [[ \"\" != \"\" ]]; then\n ovn_v4_transit_switch_subnet_opt=\"--cluster-manager-v4-transit-switch-subnet \"\nfi\novn_v6_transit_switch_subnet_opt=\nif [[ \"\" != \"\" ]]; then\n ovn_v6_transit_switch_subnet_opt=\"--cluster-manager-v6-transit-switch-subnet \"\nfi\n\ndns_name_resolver_enabled_flag=\nif [[ \"false\" == \"true\" ]]; then\n dns_name_resolver_enabled_flag=\"--enable-dns-name-resolver\"\nfi\n\npersistent_ips_enabled_flag=\"--enable-persistent-ips\"\n\n# This is needed so that converting clusters from GA to TP\n# will rollout control plane pods as well\nnetwork_segmentation_enabled_flag=\nmulti_network_enabled_flag=\nif [[ \"true\" == \"true\" ]]; then\n multi_network_enabled_flag=\"--enable-multi-network\"\nfi\nif [[ \"true\" == \"true\" ]]; then\n if [[ \"true\" != \"true\" ]]; then\n multi_network_enabled_flag=\"--enable-multi-network\"\n fi\n network_segmentation_enabled_flag=\"--enable-network-segmentation\"\nfi\n\nroute_advertisements_enable_flag=\nif [[ \"false\" == \"true\" ]]; then\n route_advertisements_enable_flag=\"--enable-route-advertisements\"\nfi\n\npreconfigured_udn_addresses_enable_flag=\nif [[ \"false\" == \"true\" ]]; then\n preconfigured_udn_addresses_enable_flag=\"--enable-preconfigured-udn-addresses\"\nfi\n\n# Enable multi-network policy if configured (control-plane always full mode)\nmulti_network_policy_enabled_flag=\nif [[ \"false\" == \"true\" ]]; then\n multi_network_policy_enabled_flag=\"--enable-multi-networkpolicy\"\nfi\n\n# Enable admin network policy if configured (control-plane always full mode)\nadmin_network_policy_enabled_flag=\nif [[ \"true\" == \"true\" ]]; then\n admin_network_policy_enabled_flag=\"--enable-admin-network-policy\"\nfi\n\nif [ \"shared\" == \"shared\" ]; then\n gateway_mode_flags=\"--gateway-mode shared\"\nelif [ \"shared\" == \"local\" ]; then\n gateway_mode_flags=\"--gateway-mode local\"\nelse\n echo \"Invalid OVN_GATEWAY_MODE: \\\"shared\\\". Must be \\\"local\\\" or \\\"shared\\\".\"\n exit 1\nfi\n\necho \"I$(date \"+%m%d %H:%M:%S.%N\") - ovnkube-control-plane - start ovnkube --init-cluster-manager ${K8S_NODE}\"\nexec /usr/bin/ovnkube \\\n --enable-interconnect \\\n --init-cluster-manager \"${K8S_NODE}\" \\\n --config-file=/run/ovnkube-config/ovnkube.conf \\\n --loglevel \"${OVN_KUBE_LOG_LEVEL}\" \\\n --metrics-bind-address \"127.0.0.1:29108\" \\\n --metrics-enable-pprof \\\n --metrics-enable-config-duration \\\n ${ovn_v4_join_subnet_opt} \\\n ${ovn_v6_join_subnet_opt} \\\n ${ovn_v4_transit_switch_subnet_opt} \\\n ${ovn_v6_transit_switch_subnet_opt} \\\n ${dns_name_resolver_enabled_flag} \\\n ${persistent_ips_enabled_flag} \\\n ${multi_network_enabled_flag} \\\n ${network_segmentation_enabled_flag} \\\n ${gateway_mode_flags} \\\n ${route_advertisements_enable_flag} \\\n ${preconfigured_udn_addresses_enable_flag} \\\n --enable-egress-ip=true \\\n --enable-egress-firewall=true \\\n --enable-egress-qos=true \\\n --enable-egress-service=true \\\n --enable-multicast \\\n --enable-multi-external-gateway=true \\\n ${multi_network_policy_enabled_flag} \\\n ${admin_network_policy_enabled_flag}\n" ], "env": [ { "name": "OVN_KUBE_LOG_LEVEL", "value": "4" }, { "name": "K8S_NODE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:be9536be398e75c14bd0b63d9eb35467ad5ec3d1351a16820c7f348644b8ba1e", "imagePullPolicy": "IfNotPresent", "name": "ovnkube-cluster-manager", "ports": [ { "containerPort": 29108, "name": "metrics-port", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "300Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/run/ovnkube-config/", "name": "ovnkube-config" }, { "mountPath": "/env", "name": "env-overrides" } ] } ], "dnsPolicy": "Default", "hostNetwork": true, "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "ovn-kubernetes-control-plane", "serviceAccountName": "ovn-kubernetes-control-plane", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "key": "node.kubernetes.io/not-ready", "operator": "Exists" }, { "key": "node.kubernetes.io/unreachable", "operator": "Exists" }, { "key": "node.kubernetes.io/network-unavailable", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "ovnkube-config" }, "name": "ovnkube-config" }, { "configMap": { "defaultMode": 420, "name": "env-overrides", "optional": true }, "name": "env-overrides" }, { "name": "ovn-control-plane-metrics-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "ovn-control-plane-metrics-cert" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:05:02Z", "generation": 1, "labels": { "app": "pipelines-as-code-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/deployment-spec-applied-hash": "fa2cfb68cc1b2a80c7adc6a689630221", "pod-template-hash": "5d89cd6d6" }, "name": "pipelines-as-code-controller-5d89cd6d6", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-as-code-controller", "uid": "dcdc5d77-024f-4d23-ae24-5ebd16280b33" } ], "resourceVersion": "54903", "uid": "30e70edd-c07c-4e93-9c65-0eb0481af27d" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "pod-template-hash": "5d89cd6d6" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-as-code-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/deployment-spec-applied-hash": "fa2cfb68cc1b2a80c7adc6a689630221", "pod-template-hash": "5d89cd6d6" } }, "spec": { "containers": [ { "command": [ "/ko-app/pipelines-as-code-controller" ], "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "K_METRICS_CONFIG", "value": "{\"Domain\":\"pipelinesascode.tekton.dev/controller\",\"Component\":\"pac_controller\",\"PrometheusPort\":9090,\"ConfigMap\":{\"name\":\"pipelines-as-code-config-observability\"}}" }, { "name": "K_SINK_TIMEOUT", "value": "30" }, { "name": "K_TRACING_CONFIG", "value": "{\"backend\":\"prometheus\",\"debug\":\"false\",\"sample-rate\":\"0\"}" }, { "name": "PAC_CONTROLLER_CONFIGMAP", "value": "pipelines-as-code" }, { "name": "PAC_CONTROLLER_LABEL", "value": "default" }, { "name": "PAC_CONTROLLER_SECRET", "value": "pipelines-as-code-secret" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TLS_CERT", "value": "cert" }, { "name": "TLS_KEY", "value": "key" }, { "name": "TLS_SECRET_NAME", "value": "pipelines-as-code-tls-secret" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-controller-rhel9@sha256:03656ac687c2f3ba6dfd72f7373c6fb67169660a07a579b009c8d8f89b7c0576", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "api", "scheme": "HTTP" }, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "pac-controller", "ports": [ { "containerPort": 8082, "name": "api", "protocol": "TCP" }, { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "api", "scheme": "HTTP" }, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/pipelines-as-code/tls", "name": "tls", "readOnly": true }, { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-controller", "serviceAccountName": "pipelines-as-code-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "pipelines-as-code-tls-secret" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:05:02Z", "generation": 1, "labels": { "app": "pipelines-as-code-watcher", "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/deployment-spec-applied-hash": "8258d02df45cdbf20a1640da7b5bc1b4", "pod-template-hash": "965bf8f5d" }, "name": "pipelines-as-code-watcher-965bf8f5d", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-as-code-watcher", "uid": "ba1cfb2e-72be-4f2e-b367-0158e9d6b9b3" } ], "resourceVersion": "55070", "uid": "e4ec111a-ec98-4714-97d9-8c9b25abe08e" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "pod-template-hash": "965bf8f5d" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-as-code-watcher", "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/deployment-spec-applied-hash": "8258d02df45cdbf20a1640da7b5bc1b4", "pod-template-hash": "965bf8f5d" } }, "spec": { "containers": [ { "command": [ "/ko-app/pipelines-as-code-watcher" ], "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "pac-watcher-config-leader-election" }, { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "pipelines-as-code-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipelinesascode" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel9@sha256:ab8152479af7d6fe719c90de7de5b7c97c409f8649db724f51e99dec57cb171b", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "pac-watcher", "ports": [ { "containerPort": 8080, "name": "probes", "protocol": "TCP" }, { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-watcher", "serviceAccountName": "pipelines-as-code-watcher", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:05:02Z", "generation": 1, "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/deployment-spec-applied-hash": "41e51166a122e3e803f896a8c4485f12", "pod-template-hash": "869f67d8dc" }, "name": "pipelines-as-code-webhook-869f67d8dc", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-as-code-webhook", "uid": "529d635c-6d08-4025-a9b8-a7cf0d00df95" } ], "resourceVersion": "54875", "uid": "5aa4b38d-df73-45c7-b528-fe9ab0aa6503" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "pod-template-hash": "869f67d8dc" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/deployment-spec-applied-hash": "41e51166a122e3e803f896a8c4485f12", "pod-template-hash": "869f67d8dc" } }, "spec": { "containers": [ { "command": [ "/ko-app/pipelines-as-code-webhook" ], "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "pac-webhook-config-leader-election" }, { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipelinesascode" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SECRET_NAME", "value": "pipelines-as-code-webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "pipelines-as-code-webhook" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-webhook-rhel9@sha256:d489fcc781d7ea7017d10297458c19414ce1415fdd0aa41c2e614359c7f6304f", "imagePullPolicy": "IfNotPresent", "name": "pac-webhook", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-webhook", "serviceAccountName": "pipelines-as-code-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:05:20Z", "generation": 1, "labels": { "app": "pipelines-console-plugin", "app.kubernetes.io/part-of": "tekton-config", "name": "pipelines-console-plugin", "pod-template-hash": "6868ddd9bb" }, "name": "pipelines-console-plugin-6868ddd9bb", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-console-plugin", "uid": "c27fd7d6-f4e4-48c4-9427-1497fe0f6ee1" } ], "resourceVersion": "55207", "uid": "d8633e54-7140-4e63-bfb5-848a6f5579b3" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "pipelines-console-plugin", "name": "pipelines-console-plugin", "pod-template-hash": "6868ddd9bb" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-console-plugin", "app.kubernetes.io/part-of": "tekton-config", "name": "pipelines-console-plugin", "pod-template-hash": "6868ddd9bb" } }, "spec": { "containers": [ { "image": "registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel9@sha256:7be2fe2114db1ec77293b48dc1e940f8809f7cb668f2415c1d73c3f9ba9ddbb0", "imagePullPolicy": "Always", "name": "pipelines-console-plugin", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/cert", "name": "pipelines-console-plugin-cert", "readOnly": true }, { "mountPath": "/etc/nginx/nginx.conf", "name": "nginx-conf", "readOnly": true, "subPath": "nginx.conf" }, { "mountPath": "/var/lib/nginx/tmp", "name": "nginx-tmp" }, { "mountPath": "/var/cache/nginx", "name": "nginx-cache" }, { "mountPath": "/var/run", "name": "nginx-run" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "pipelines-console-plugin-cert", "secret": { "defaultMode": 420, "secretName": "pipelines-console-plugin-cert" } }, { "configMap": { "defaultMode": 420, "name": "pipelines-console-plugin" }, "name": "nginx-conf" }, { "emptyDir": {}, "name": "nginx-tmp" }, { "emptyDir": {}, "name": "nginx-cache" }, { "emptyDir": {}, "name": "nginx-run" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:04:09Z", "generation": 1, "labels": { "app": "tekton-chains-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "e6df66e7c28d2f03648160282f14b74a", "pipeline.tekton.dev/release": "v0.26.2", "pod-template-hash": "5d54b65c9f", "version": "v0.26.2" }, "name": "tekton-chains-controller-5d54b65c9f", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-chains-controller", "uid": "a847f68f-5bf5-4647-9581-ffb2488bda8a" } ], "resourceVersion": "53419", "uid": "649af417-6a5d-4ed1-8d63-8a06c806e8ca" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "pod-template-hash": "5d54b65c9f" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-chains-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "e6df66e7c28d2f03648160282f14b74a", "pipeline.tekton.dev/release": "v0.26.2", "pod-template-hash": "5d54b65c9f", "version": "v0.26.2" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-chains-config-leader-election" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-chains-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/chains" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:77751c15706d768514ad33f2c360ce7e342e9462d5ebde420cb20b2fe4e1de78", "imagePullPolicy": "IfNotPresent", "name": "tekton-chains-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/signing-secrets", "name": "signing-secrets" }, { "mountPath": "/var/run/sigstore/cosign", "name": "oidc-info" }, { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-chains-controller", "serviceAccountName": "tekton-chains-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "signing-secrets", "secret": { "defaultMode": 420, "secretName": "signing-secrets" } }, { "name": "oidc-info", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "sigstore", "expirationSeconds": 600, "path": "oidc-token" } } ] } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:03:29Z", "generation": 1, "labels": { "app": "tekton-events-controller", "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.6.1", "operator.tekton.dev/deployment-spec-applied-hash": "173ec50dbc8530bcfa30448ca1cc490d", "pipeline.tekton.dev/release": "v1.6.1", "pod-template-hash": "6c7ccb665d", "version": "v1.6.1" }, "name": "tekton-events-controller-6c7ccb665d", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-events-controller", "uid": "5be0ef9c-4b74-4516-8980-a23618b4e38a" } ], "resourceVersion": "52665", "uid": "b641d97c-e10d-4e4f-b8cc-33fa344611ff" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "6c7ccb665d" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-events-controller", "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.6.1", "operator.tekton.dev/deployment-spec-applied-hash": "173ec50dbc8530bcfa30448ca1cc490d", "pipeline.tekton.dev/release": "v1.6.1", "pod-template-hash": "6c7ccb665d", "version": "v1.6.1" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } } }, "containers": [ { "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-events" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SSL_CERT_DIR", "value": "/etc/ssl/certs" }, { "name": "SSL_CERT_FILE", "value": "/etc/config-registry-cert/cert" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-events-rhel9@sha256:34a30986fb4cdc8edfbb5f39619013ea623fb2f633ee83a384d3b98e4bc133cc", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "tekton-events-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config-logging", "name": "config-logging" }, { "mountPath": "/etc/config-registry-cert", "name": "config-registry-cert" }, { "mountPath": "/etc/ssl/certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/etc/ssl/certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-events-controller", "serviceAccountName": "tekton-events-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "config-logging" }, "name": "config-logging" }, { "configMap": { "defaultMode": 420, "name": "config-registry-cert" }, "name": "config-registry-cert" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:03:29Z", "generation": 1, "labels": { "app": "tekton-operator", "name": "tekton-operator", "operator.tekton.dev/deployment-spec-applied-hash": "691f32c8ee88be653a0bc77734ee2834", "pod-template-hash": "869585b856" }, "name": "tekton-operator-proxy-webhook-869585b856", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-operator-proxy-webhook", "uid": "74f5be23-9329-4b07-b3f0-3d76aa0d838c" } ], "resourceVersion": "52520", "uid": "fe3c9fc2-6275-4c03-ad54-f964c9b24fa2" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "tekton-operator", "pod-template-hash": "869585b856" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-operator", "name": "tekton-operator", "operator.tekton.dev/deployment-spec-applied-hash": "691f32c8ee88be653a0bc77734ee2834", "pod-template-hash": "869585b856" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-proxy-webhook-config-leader-election" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SECRET_NAME", "value": "proxy-webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-operator-proxy-webhook" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-operator-proxy-rhel9@sha256:4747a491c6fd2de939e00dbd9fb12ac4f813bce077c8dfe4463be1e72634602b", "imagePullPolicy": "IfNotPresent", "name": "proxy", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "500Mi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-operators-proxy-webhook", "serviceAccountName": "tekton-operators-proxy-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:03:28Z", "generation": 1, "labels": { "app": "tekton-pipelines-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.6.1", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "6e033dba5687d6a92015681e75e280b1", "pipeline.tekton.dev/release": "v1.6.1", "pod-template-hash": "5cc495b7b6", "version": "v1.6.1" }, "name": "tekton-pipelines-controller-5cc495b7b6", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-pipelines-controller", "uid": "6559647e-56fe-49d9-b8d7-339197d72059" } ], "resourceVersion": "52698", "uid": "193c15e3-f782-4d33-a51c-8bf78c173ead" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "5cc495b7b6" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.6.1", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "6e033dba5687d6a92015681e75e280b1", "pipeline.tekton.dev/release": "v1.6.1", "pod-template-hash": "5cc495b7b6", "version": "v1.6.1" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-entrypoint-image", "registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel9@sha256:fd9f6bc408772348ae540701c6bf2b178028362801acb748e1dde80c06eba70d", "-nop-image", "registry.redhat.io/openshift-pipelines/pipelines-nop-rhel9@sha256:ea0574a3ee9e6be79189c65b589b6b6d666459a80b8c87ec10653d210dbe510d", "-sidecarlogresults-image", "registry.redhat.io/openshift-pipelines/pipelines-sidecarlogresults-rhel9@sha256:b5e859d02a515139f799f0fce9446333393461c845ee1cf638747960dc382064", "-workingdirinit-image", "registry.redhat.io/openshift-pipelines/pipelines-workingdirinit-rhel9@sha256:5e4adc0c5619537d0c15175208883e3405d92dcd48566a40c59422905fcac30e", "-shell-image", "registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel9@sha256:fd9f6bc408772348ae540701c6bf2b178028362801acb748e1dde80c06eba70d", "-shell-image-win", "mcr.microsoft.com/powershell:nanoserver@sha256:b6d5ff841b78bdf2dfed7550000fd4f3437385b8fa686ec0f010be24777654d6", "-disable-ha=false" ], "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults" }, { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-controller" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "CONFIG_SPIRE", "value": "config-spire" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipeline" }, { "name": "SSL_CERT_DIR", "value": "/etc/ssl/certs" }, { "name": "SSL_CERT_FILE", "value": "/etc/config-registry-cert/cert" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-controller-rhel9@sha256:862f686cb10b000d301bb4b49af39eefb046d6abb7fd2187ef8c59925736c932", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "tekton-pipelines-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config-logging", "name": "config-logging" }, { "mountPath": "/etc/config-registry-cert", "name": "config-registry-cert" }, { "mountPath": "/etc/ssl/certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/etc/ssl/certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-controller", "serviceAccountName": "tekton-pipelines-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "config-logging" }, "name": "config-logging" }, { "configMap": { "defaultMode": 420, "name": "config-registry-cert" }, "name": "config-registry-cert" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:03:29Z", "generation": 1, "labels": { "app": "tekton-pipelines-resolvers", "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.6.1", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "7b855a5f254ef58a66d5c00940807af2", "pipeline.tekton.dev/release": "v1.6.1", "pod-template-hash": "9cd6fb9bf", "version": "v1.6.1" }, "name": "tekton-pipelines-remote-resolvers-9cd6fb9bf", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-pipelines-remote-resolvers", "uid": "687f4b68-10aa-42de-ae1f-46d0559966c3" } ], "resourceVersion": "52516", "uid": "35ff4028-f601-4de4-929c-57f25c8f4f08" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "9cd6fb9bf" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-resolvers", "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.6.1", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "7b855a5f254ef58a66d5c00940807af2", "pipeline.tekton.dev/release": "v1.6.1", "pod-template-hash": "9cd6fb9bf", "version": "v1.6.1" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "command": [ "/sbin/tini", "--", "/ko-app/resolvers" ], "env": [ { "name": "ARTIFACT_HUB_API", "value": "https://artifacthub.io/" }, { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-resolvers" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/resolution" }, { "name": "PROBES_PORT", "value": "8080" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TEKTON_HUB_API" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-resolvers-rhel9@sha256:15cd02433813f9809c7bdb16707636f2a4336fe501ac4663abc38ee7cdfeb917", "imagePullPolicy": "IfNotPresent", "name": "controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "1", "memory": "4Gi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp-clone-volume" }, { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-resolvers", "serviceAccountName": "tekton-pipelines-resolvers", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": { "sizeLimit": "4Gi" }, "name": "tmp-clone-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:03:29Z", "generation": 1, "labels": { "app": "tekton-pipelines-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.6.1", "operator.tekton.dev/deployment-spec-applied-hash": "28a6c479f3f830e710ab5a08517751f4", "pipeline.tekton.dev/release": "v1.6.1", "pod-template-hash": "55c7fc7445", "version": "v1.6.1" }, "name": "tekton-pipelines-webhook-55c7fc7445", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-pipelines-webhook", "uid": "f37e499a-ae9b-4ec4-903f-1c79f99fe97a" } ], "resourceVersion": "52692", "uid": "3eb5eb7f-190e-4789-9f7b-dfbeb2c3d986" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "55c7fc7445" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.6.1", "operator.tekton.dev/deployment-spec-applied-hash": "28a6c479f3f830e710ab5a08517751f4", "pipeline.tekton.dev/release": "v1.6.1", "pod-template-hash": "55c7fc7445", "version": "v1.6.1" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-webhook" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipeline" }, { "name": "PROBES_PORT", "value": "8080" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_ADMISSION_CONTROLLER_NAME", "value": "webhook.pipeline.tekton.dev" }, { "name": "WEBHOOK_PORT", "value": "8443" }, { "name": "WEBHOOK_SECRET_NAME", "value": "webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-pipelines-webhook" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-webhook-rhel9@sha256:7ce8fca678919af6ad687d11858ecce0d392f478da4e6b57a5ea3e736008341e", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "webhook", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "cpu": "500m", "memory": "500Mi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-webhook", "serviceAccountName": "tekton-pipelines-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:04:16Z", "generation": 1, "labels": { "app": "tekton-results-api", "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.17.2", "operator.tekton.dev/deployment-spec-applied-hash": "585fffc85382a3bb1066f56ff6cc4f6c", "pod-template-hash": "754c966d49" }, "name": "tekton-results-api-754c966d49", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-results-api", "uid": "77a8b1e4-94b4-48b2-8be1-745add584dd6" } ], "resourceVersion": "53959", "uid": "63925aca-ad06-4a35-ad62-66857801850a" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.17.2", "pod-template-hash": "754c966d49" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-results-api", "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.17.2", "operator.tekton.dev/deployment-spec-applied-hash": "585fffc85382a3bb1066f56ff6cc4f6c", "pod-template-hash": "754c966d49" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.17.2" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "DB_HOST", "value": "tekton-results-postgres-service.openshift-pipelines.svc.cluster.local" }, { "name": "DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_PASSWORD", "name": "tekton-results-postgres" } } }, { "name": "DB_USER", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_USER", "name": "tekton-results-postgres" } } }, { "name": "IS_EXTERNAL_DB", "value": "false" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "LOGGING_PLUGIN_TLS_VERIFICATION_DISABLE", "value": "false" }, { "name": "ROUTE_ENABLED", "value": "true" }, { "name": "ROUTE_TLS_TERMINATION", "value": "edge" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-results-api-rhel9@sha256:803e2eeb32b2cc79f4ed8a34f9b1c4ef35c750c3b1cc9352dd0f690dd75ae177", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "api", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "startupProbe": { "failureThreshold": 10, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tekton/results", "name": "config", "readOnly": true }, { "mountPath": "/etc/tls", "name": "tls", "readOnly": true }, { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-results-api", "serviceAccountName": "tekton-results-api", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "tekton-results-api-config" }, "name": "config" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:04:16Z", "generation": 1, "labels": { "app": "tekton-results-retention-policy-agent", "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/version": "v0.17.2", "operator.tekton.dev/deployment-spec-applied-hash": "a5ce2114bfbf8041d5092ce0540ef7b4", "pod-template-hash": "7cd7dfc478" }, "name": "tekton-results-retention-policy-agent-7cd7dfc478", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-results-retention-policy-agent", "uid": "5fcf2f6e-acd6-444e-a446-16acde3d23c5" } ], "resourceVersion": "53653", "uid": "e303d50f-8cd3-419d-9010-e1bbdf533cf6" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/version": "v0.17.2", "pod-template-hash": "7cd7dfc478" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-results-retention-policy-agent", "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/version": "v0.17.2", "operator.tekton.dev/deployment-spec-applied-hash": "a5ce2114bfbf8041d5092ce0540ef7b4", "pod-template-hash": "7cd7dfc478" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "tekton-results-config-logging" }, { "name": "DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_PASSWORD", "name": "tekton-results-postgres" } } }, { "name": "DB_USER", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_USER", "name": "tekton-results-postgres" } } }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-results-retention-policy-agent-rhel9@sha256:a70f1da59119c9bb43362b87e5bc2b05113e8796b8ca8e1ff0439b66772a7244", "imagePullPolicy": "IfNotPresent", "name": "retention-policy-agent", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tekton/results", "name": "config", "readOnly": true }, { "mountPath": "/etc/tls", "name": "tls", "readOnly": true }, { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-results-watcher", "serviceAccountName": "tekton-results-watcher", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "tekton-results-api-config" }, "name": "config" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:04:16Z", "generation": 1, "labels": { "app": "tekton-results-watcher", "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.17.2", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "ff0a5cf8350df4c2d44bf2ec024250f8", "pod-template-hash": "df448485c" }, "name": "tekton-results-watcher-df448485c", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-results-watcher", "uid": "7de5a046-7ccf-40d0-8d62-1a17d470e4c2" } ], "resourceVersion": "53706", "uid": "5b8951f8-878c-4eff-ba8c-947b99ce3cc4" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.17.2", "pod-template-hash": "df448485c" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-results-watcher", "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.17.2", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "ff0a5cf8350df4c2d44bf2ec024250f8", "pod-template-hash": "df448485c" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.17.2" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-api_addr", "$(TEKTON_RESULTS_API_SERVICE)", "-auth_mode", "$(AUTH_MODE)" ], "env": [ { "name": "AUTH_MODE", "value": "token" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-results-config-leader-election" }, { "name": "CONFIG_LOGGING_NAME", "value": "tekton-results-config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-results-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/results" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TEKTON_RESULTS_API_SERVICE", "value": "tekton-results-api-service.openshift-pipelines.svc.cluster.local:8080" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-results-watcher-rhel9@sha256:41427cc1b6689f776e95574529ef9b22a6dde840f23c2b78103416ab37cc5800", "imagePullPolicy": "IfNotPresent", "name": "watcher", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tls", "name": "tls", "readOnly": true }, { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-results-watcher", "serviceAccountName": "tekton-results-watcher", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:03:52Z", "generation": 1, "labels": { "app": "tekton-triggers-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.34.0", "operator.tekton.dev/deployment-spec-applied-hash": "2f54ebefd857020d5d8c532df23ee9b7", "pod-template-hash": "75b9b7d4b7", "triggers.tekton.dev/release": "v0.34.0", "version": "v0.34.0" }, "name": "tekton-triggers-controller-75b9b7d4b7", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-triggers-controller", "uid": "353fd189-e75e-4369-9560-8d7c700ffcad" } ], "resourceVersion": "53140", "uid": "9ca45c0b-5a63-4c6c-b9b9-7b08fbe0b7c2" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers", "pod-template-hash": "75b9b7d4b7" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.34.0", "operator.tekton.dev/deployment-spec-applied-hash": "2f54ebefd857020d5d8c532df23ee9b7", "pod-template-hash": "75b9b7d4b7", "triggers.tekton.dev/release": "v0.34.0", "version": "v0.34.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-logtostderr", "-stderrthreshold", "INFO", "-el-image", "registry.redhat.io/openshift-pipelines/pipelines-triggers-eventlistenersink-rhel9@sha256:df87d4d8bad3d7df88ef56cc89eef6d4af76e5d442f0778c52d67582ed952a74", "-el-port", "8080", "-el-security-context=true", "-el-read-only-root-filesystem=true", "-el-events", "enable", "-el-readtimeout", "5", "-el-writetimeout", "40", "-el-idletimeout", "120", "-el-timeouthandler", "30", "-el-httpclient-readtimeout", "30", "-el-httpclient-keep-alive", "30", "-el-httpclient-tlshandshaketimeout", "10", "-el-httpclient-responseheadertimeout", "10", "-el-httpclient-expectcontinuetimeout", "1", "-period-seconds", "10", "-failure-threshold", "3" ], "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults-triggers" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-triggers-controllers" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability-triggers" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "METRICS_PROMETHEUS_PORT", "value": "9000" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-triggers-controller-rhel9@sha256:68b3df2abb2eb76d8acc58ecd1872ccb85e76177d9d895fb9c1e722354d090dd", "imagePullPolicy": "IfNotPresent", "name": "tekton-triggers-controller", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-controller", "serviceAccountName": "tekton-triggers-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:03:52Z", "generation": 1, "labels": { "app": "tekton-triggers-core-interceptors", "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.34.0", "operator.tekton.dev/deployment-spec-applied-hash": "627d37671a8eaaa776b716cbfd3f9729", "pod-template-hash": "5f4cc7769c", "triggers.tekton.dev/release": "v0.34.0", "version": "v0.34.0" }, "name": "tekton-triggers-core-interceptors-5f4cc7769c", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-triggers-core-interceptors", "uid": "9726fcda-c607-48fa-ad15-be335cb1fe02" } ], "resourceVersion": "53285", "uid": "711bb5cb-eb18-4aa4-9cbb-497194705eee" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers", "pod-template-hash": "5f4cc7769c" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-core-interceptors", "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.34.0", "operator.tekton.dev/deployment-spec-applied-hash": "627d37671a8eaaa776b716cbfd3f9729", "pod-template-hash": "5f4cc7769c", "triggers.tekton.dev/release": "v0.34.0", "version": "v0.34.0" } }, "spec": { "containers": [ { "args": [ "-logtostderr", "-stderrthreshold", "INFO" ], "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability-triggers" }, { "name": "INTERCEPTOR_TLS_SECRET_NAME", "value": "tekton-triggers-core-interceptors-certs" }, { "name": "INTERCEPTOR_TLS_SVC_NAME", "value": "tekton-triggers-core-interceptors" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-triggers-core-interceptors-rhel9@sha256:1662f3da4827b60da673f6362d7fbe9673a945d965b3556d61e31951a93eb3ee", "imagePullPolicy": "IfNotPresent", "name": "tekton-triggers-core-interceptors", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-core-interceptors", "serviceAccountName": "tekton-triggers-core-interceptors", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:03:52Z", "generation": 1, "labels": { "app": "tekton-triggers-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.34.0", "operator.tekton.dev/deployment-spec-applied-hash": "3214376621786fd6f100c2bfc8559d73", "pod-template-hash": "9bc9bd848", "triggers.tekton.dev/release": "v0.34.0", "version": "v0.34.0" }, "name": "tekton-triggers-webhook-9bc9bd848", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-triggers-webhook", "uid": "045e5e46-9257-4104-b4ac-907bd4f405ca" } ], "resourceVersion": "53081", "uid": "f23e5f26-2fba-49a4-a7b5-b87332382876" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers", "pod-template-hash": "9bc9bd848" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.34.0", "operator.tekton.dev/deployment-spec-applied-hash": "3214376621786fd6f100c2bfc8559d73", "pod-template-hash": "9bc9bd848", "triggers.tekton.dev/release": "v0.34.0", "version": "v0.34.0" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-triggers-webhook" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SECRET_NAME", "value": "triggers-webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-triggers-webhook" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-triggers-webhook-rhel9@sha256:c30b1378603e087951a70484ad015d2cc066de6d61f0d8def27f042ff80802f0", "imagePullPolicy": "IfNotPresent", "name": "webhook", "ports": [ { "containerPort": 9000, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-webhook", "serviceAccountName": "tekton-triggers-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:04:42Z", "generation": 1, "labels": { "app": "tkn-cli-serve", "pod-template-hash": "7bfc88fc6d" }, "name": "tkn-cli-serve-7bfc88fc6d", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tkn-cli-serve", "uid": "3e1e144c-802b-4478-98c6-55d16f8c8383" } ], "resourceVersion": "54596", "uid": "a421951a-0a61-48ba-ac02-7af579221479" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "tkn-cli-serve", "pod-template-hash": "7bfc88fc6d" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tkn-cli-serve", "pod-template-hash": "7bfc88fc6d" } }, "spec": { "containers": [ { "image": "registry.redhat.io/openshift-pipelines/pipelines-serve-tkn-cli-rhel9@sha256:5566ebbc75f2a2a911f3cc884f969a3c45104341a99e51a795c6bc31ce43e625", "imagePullPolicy": "IfNotPresent", "name": "tkn-cli-serve", "ports": [ { "containerPort": 8080, "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/httpd", "name": "httpd-config" }, { "mountPath": "/var/log/httpd", "name": "httpd-logs" }, { "mountPath": "/opt/app-root", "name": "app-root" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "cp -rL /etc/httpd/* /httpd-config/ 2\u003e/dev/null || true\nfind /httpd-config -type f -exec chmod u+w {} \\;\ncp -rL /opt/app-root/* /app-root/ 2\u003e/dev/null || true\nfind /app-root -type f -exec chmod u+w {} \\;\n" ], "image": "registry.redhat.io/openshift-pipelines/pipelines-serve-tkn-cli-rhel9@sha256:5566ebbc75f2a2a911f3cc884f969a3c45104341a99e51a795c6bc31ce43e625", "imagePullPolicy": "IfNotPresent", "name": "tkn-cli-serve-init-config", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/httpd-config", "name": "httpd-config" }, { "mountPath": "/app-root", "name": "app-root" } ] } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "httpd-config" }, { "emptyDir": {}, "name": "httpd-logs" }, { "emptyDir": {}, "name": "app-root" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "2", "operator.openshift.io/spec-hash": "490d5b432190ec96da81cb91fbc09194a3da138c8a9a15fe4d0ec1b64ed099fe", "release.openshift.io/version": "4.20.10" }, "creationTimestamp": "2026-04-28T12:23:39Z", "generation": 3, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "5868584b64", "route-controller-manager": "true" }, "name": "route-controller-manager-5868584b64", "namespace": "openshift-route-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "route-controller-manager", "uid": "c29bd852-4e48-478b-8734-a3c9ebb41923" } ], "resourceVersion": "20205", "uid": "39ee6a6a-516e-446d-b026-2fc3565f5a33" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "route-controller-manager", "pod-template-hash": "5868584b64", "route-controller-manager": "true" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "0", "configmaps/config": "9117", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "5868584b64", "route-controller-manager": "true" }, "name": "route-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "route-controller-manager": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "route-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:64d96b8072428631c2724d434a39aa50ad60d03dce28de258bd1f78191982a81", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "route-controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "route-controller-manager-sa", "serviceAccountName": "route-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "4", "operator.openshift.io/spec-hash": "54b4eb78436291e440218d25c048a5c3c587937af3b7329ca44405655265f814", "release.openshift.io/version": "4.20.10" }, "creationTimestamp": "2026-04-28T12:34:24Z", "generation": 7, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "5b54c47c6", "route-controller-manager": "true" }, "name": "route-controller-manager-5b54c47c6", "namespace": "openshift-route-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "route-controller-manager", "uid": "c29bd852-4e48-478b-8734-a3c9ebb41923" } ], "resourceVersion": "22716", "uid": "e8783e04-1ebe-42f2-88a9-f89966d23c89" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "route-controller-manager", "pod-template-hash": "5b54c47c6", "route-controller-manager": "true" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "19871", "configmaps/config": "20529", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "5b54c47c6", "route-controller-manager": "true" }, "name": "route-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "route-controller-manager": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "route-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:64d96b8072428631c2724d434a39aa50ad60d03dce28de258bd1f78191982a81", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "route-controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "route-controller-manager-sa", "serviceAccountName": "route-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "c18f5b7c6dad8085a88ff597c28f2df555652eb67864d78f56bfe18092563c4b", "release.openshift.io/version": "4.20.10" }, "creationTimestamp": "2026-04-28T12:23:01Z", "generation": 4, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "776c7b6768", "route-controller-manager": "true" }, "name": "route-controller-manager-776c7b6768", "namespace": "openshift-route-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "route-controller-manager", "uid": "c29bd852-4e48-478b-8734-a3c9ebb41923" } ], "resourceVersion": "20064", "uid": "351864f0-6548-45ed-a303-fe7a80a3c970" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "route-controller-manager", "pod-template-hash": "776c7b6768", "route-controller-manager": "true" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "0", "configmaps/config": "6404", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "776c7b6768", "route-controller-manager": "true" }, "name": "route-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "route-controller-manager": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "route-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:64d96b8072428631c2724d434a39aa50ad60d03dce28de258bd1f78191982a81", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "route-controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "route-controller-manager-sa", "serviceAccountName": "route-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "3", "operator.openshift.io/spec-hash": "27f97a7f80bfbac236554deeb10db1aea4ed5b0462435d646f01a6318c87e7c5", "release.openshift.io/version": "4.20.10" }, "creationTimestamp": "2026-04-28T12:34:05Z", "generation": 7, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "8fd7b6d78", "route-controller-manager": "true" }, "name": "route-controller-manager-8fd7b6d78", "namespace": "openshift-route-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "route-controller-manager", "uid": "c29bd852-4e48-478b-8734-a3c9ebb41923" } ], "resourceVersion": "21587", "uid": "534136a9-0db0-44db-824a-70e6df577af9" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "route-controller-manager", "pod-template-hash": "8fd7b6d78", "route-controller-manager": "true" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "19871", "configmaps/config": "9117", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "8fd7b6d78", "route-controller-manager": "true" }, "name": "route-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "route-controller-manager": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "route-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:64d96b8072428631c2724d434a39aa50ad60d03dce28de258bd1f78191982a81", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "route-controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "route-controller-manager-sa", "serviceAccountName": "route-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "5", "operator.openshift.io/spec-hash": "0b6a78d0d3686570c128bc237dae569a5b262b66a53ca96c1d617c62e8281513", "release.openshift.io/version": "4.20.10" }, "creationTimestamp": "2026-04-28T12:34:45Z", "generation": 4, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "f75c67b7c", "route-controller-manager": "true" }, "name": "route-controller-manager-f75c67b7c", "namespace": "openshift-route-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "route-controller-manager", "uid": "c29bd852-4e48-478b-8734-a3c9ebb41923" } ], "resourceVersion": "49414", "uid": "89b30893-bc7a-4cdb-9acc-c42314324d43" }, "spec": { "replicas": 3, "selector": { "matchLabels": { "app": "route-controller-manager", "pod-template-hash": "f75c67b7c", "route-controller-manager": "true" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "19871", "configmaps/config": "22424", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "3", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "f75c67b7c", "route-controller-manager": "true" }, "name": "route-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "route-controller-manager": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "route-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:64d96b8072428631c2724d434a39aa50ad60d03dce28de258bd1f78191982a81", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "route-controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "route-controller-manager-sa", "serviceAccountName": "route-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "availableReplicas": 3, "fullyLabeledReplicas": 3, "observedGeneration": 4, "readyReplicas": 3, "replicas": 3 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T12:19:26Z", "generation": 1, "labels": { "app": "service-ca-operator", "pod-template-hash": "6b886666f5" }, "name": "service-ca-operator-6b886666f5", "namespace": "openshift-service-ca-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "service-ca-operator", "uid": "b3e063f5-7866-462d-a1d9-079ac33cac9b" } ], "resourceVersion": "37865", "uid": "d3c3b8b4-2349-4812-99f6-88465bde7524" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "service-ca-operator", "pod-template-hash": "6b886666f5" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "service-ca-operator", "pod-template-hash": "6b886666f5" }, "name": "service-ca-operator" }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/operator-config.yaml", "-v=2" ], "command": [ "service-ca-operator", "operator" ], "env": [ { "name": "CONTROLLER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:46febd1de77e3841e979ac5f98f3d1395287dd552e67f79202318530af57657d" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.20.10" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:46febd1de77e3841e979ac5f98f3d1395287dd552e67f79202318530af57657d", "imagePullPolicy": "IfNotPresent", "name": "service-ca-operator", "resources": { "requests": { "cpu": "10m", "memory": "80Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsGroup": 1001, "runAsNonRoot": true, "runAsUser": 1001, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "service-ca-operator", "serviceAccountName": "service-ca-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "service-ca-operator-config" }, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "57b42a2cf7cde500e5a085456a0841203393518f0b5b016722338d5922d1e052" }, "creationTimestamp": "2026-04-28T12:23:00Z", "generation": 1, "labels": { "app": "service-ca", "pod-template-hash": "6bdf895d47", "service-ca": "true" }, "name": "service-ca-6bdf895d47", "namespace": "openshift-service-ca", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "service-ca", "uid": "0a23d999-1ce0-4d95-892c-b8a37ca1e190" } ], "resourceVersion": "6674", "uid": "711ef059-c963-4322-96a1-f5a28a774afe" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "service-ca", "pod-template-hash": "6bdf895d47", "service-ca": "true" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "service-ca", "pod-template-hash": "6bdf895d47", "service-ca": "true" }, "name": "service-ca" }, "spec": { "containers": [ { "args": [ "-v=2" ], "command": [ "service-ca-operator", "controller" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:46febd1de77e3841e979ac5f98f3d1395287dd552e67f79202318530af57657d", "imagePullPolicy": "IfNotPresent", "name": "service-ca-controller", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "120Mi" } }, "securityContext": { "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/signing-key", "name": "signing-key" }, { "mountPath": "/var/run/configmaps/signing-cabundle", "name": "signing-cabundle" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "service-ca", "serviceAccountName": "service-ca", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "signing-key", "secret": { "defaultMode": 420, "secretName": "signing-key" } }, { "configMap": { "defaultMode": 420, "name": "signing-cabundle" }, "name": "signing-cabundle" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:58:33Z", "generation": 1, "labels": { "name": "rhbk-operator", "pod-template-hash": "cf796b885" }, "name": "rhbk-operator-cf796b885", "namespace": "rhbk-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "rhbk-operator", "uid": "f11d67d4-bf13-484f-9460-23d139031f65" } ], "resourceVersion": "43483", "uid": "0e7e2acc-18db-4a3f-9b84-49cb366b4afc" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "rhbk-operator", "pod-template-hash": "cf796b885" } }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"k8s.keycloak.org/v2alpha1\",\n \"kind\": \"Keycloak\",\n \"metadata\": {\n \"name\": \"example-keycloak\",\n \"labels\": {\n \"app\": \"sso\"\n }\n },\n \"spec\": {\n \"instances\": 1,\n \"hostname\": {\n \"hostname\": \"example.org\"\n },\n \"http\": {\n \"tlsSecret\": \"my-tls-secret\"\n }\n }\n },\n {\n \"apiVersion\": \"k8s.keycloak.org/v2alpha1\",\n \"kind\": \"KeycloakRealmImport\",\n \"metadata\": {\n \"name\": \"example-keycloak-realm-import\",\n \"labels\": {\n \"app\": \"sso\"\n }\n },\n \"spec\": {\n \"keycloakCRName\": \"example-keycloak\",\n \"realm\": {}\n }\n }\n]", "capabilities": "Deep Insights", "categories": "Security", "certified": "false", "containerImage": "registry.redhat.io/rhbk/keycloak-rhel9-operator@sha256:27cc3e86042a74b64351e2fab9e9bbaf10c632affafc404ea96e4707dbe2ab93", "createdAt": "2026-03-26T22:02:28Z", "description": "An Operator for installing and managing Keycloak", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "false", "features.operators.openshift.io/proxy-aware": "false", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "olm.operatorGroup": "rhbk-operator", "olm.operatorNamespace": "rhbk-operator", "olm.targetNamespaces": "tssc-keycloak", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"k8s.keycloak.org\",\"kind\":\"Keycloak\",\"version\":\"v2alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"k8s.keycloak.org\",\"kind\":\"KeycloakRealmImport\",\"version\":\"v2alpha1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"rhbk-operator\",\"version\":\"26.4.11-opr.1\"}}]}", "operators.openshift.io/valid-subscription": "[\"OpenShift Container Platform\", \"OpenShift Platform Plus\"]", "repository": "https://github.com/keycloak/keycloak", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "name": "rhbk-operator", "pod-template-hash": "cf796b885" } }, "spec": { "containers": [ { "env": [ { "name": "RELATED_IMAGE_KEYCLOAK", "value": "registry.redhat.io/rhbk/keycloak-rhel9@sha256:a8ec9cc9b21641635ffc88656680601fb8fc2bc043e57b3feff4fb0f6cc0dbc2" }, { "name": "QUARKUS_OPERATOR_SDK_CONTROLLERS_KEYCLOAKREALMIMPORTCONTROLLER_NAMESPACES", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.annotations['olm.targetNamespaces']" } } }, { "name": "QUARKUS_OPERATOR_SDK_CONTROLLERS_KEYCLOAKCONTROLLER_NAMESPACES", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.annotations['olm.targetNamespaces']" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "rhbk-operator" }, { "name": "OPERATOR_CONDITION_NAME", "value": "rhbk-operator.v26.4.11-opr.1" } ], "image": "registry.redhat.io/rhbk/keycloak-rhel9-operator@sha256:27cc3e86042a74b64351e2fab9e9bbaf10c632affafc404ea96e4707dbe2ab93", "imagePullPolicy": "Always", "name": "rhbk-operator", "resources": { "limits": { "cpu": "700m", "memory": "450Mi" }, "requests": { "cpu": "300m", "memory": "450Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "rhbk-operator", "serviceAccountName": "rhbk-operator", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:58:52Z", "generation": 1, "labels": { "app.kubernetes.io/component": "client-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "69447b45bd" }, "name": "cli-server-69447b45bd", "namespace": "trusted-artifact-signer", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cli-server", "uid": "d0b45bb8-37fa-44c5-9ca4-3b7920768f59" } ], "resourceVersion": "45548", "uid": "e6a30814-6812-4c5d-80bc-38304d3e19b5" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "client-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "69447b45bd" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "client-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "69447b45bd" } }, "spec": { "containers": [ { "image": "registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72", "imagePullPolicy": "Always", "name": "cli-server", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:05:47Z", "generation": 1, "labels": { "pod-template-hash": "6b699d9b8f", "rhdh.redhat.com/app": "backstage-developer-hub" }, "name": "backstage-developer-hub-6b699d9b8f", "namespace": "tssc-dh", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "backstage-developer-hub", "uid": "817fc7a7-f265-4194-84c8-0f5840054949" } ], "resourceVersion": "62666", "uid": "e18aca3f-9d7d-40e5-89bd-532ec20b9656" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "pod-template-hash": "6b699d9b8f", "rhdh.redhat.com/app": "backstage-developer-hub" } }, "template": { "metadata": { "annotations": { "rhdh.redhat.com/ext-config-hash": "caec7c453eef63493898f63e2058bae8b3c501d984f45655fb473a916713111f" }, "creationTimestamp": null, "labels": { "pod-template-hash": "6b699d9b8f", "rhdh.redhat.com/app": "backstage-developer-hub" } }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "--config", "dynamic-plugins-root/app-config.dynamic-plugins.yaml", "--config", "/opt/app-root/src/default.app-config.yaml", "--config", "/opt/app-root/src/app-config.tssc.yaml" ], "env": [ { "name": "APP_CONFIG_backend_listen_port", "value": "7007" } ], "envFrom": [ { "secretRef": { "name": "backstage-psql-secret-developer-hub" } }, { "secretRef": { "name": "tssc-developer-hub-env" } } ], "image": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:12a7f6cc89bf4364c038090b2b6532d90ab006444489f66a75c0d11da9f6e567", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/.backstage/health/v1/liveness", "port": "backend", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 4 }, "name": "backstage-backend", "ports": [ { "containerPort": 7007, "name": "backend", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/.backstage/health/v1/readiness", "port": "backend", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 2, "timeoutSeconds": 4 }, "resources": { "limits": { "cpu": "4", "ephemeral-storage": "5Gi", "memory": "2560Mi" }, "requests": { "cpu": "250m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "startupProbe": { "failureThreshold": 3, "httpGet": { "path": "/.backstage/health/v1/liveness", "port": "backend", "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 4 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/opt/app-root/src/dynamic-plugins-root", "name": "dynamic-plugins-root" }, { "mountPath": "/extensions", "name": "extensions-catalog" }, { "mountPath": "/tmp", "name": "temp" }, { "mountPath": "/opt/app-root/src/default.app-config.yaml", "name": "backstage-appconfig-developer-hub", "readOnly": true, "subPath": "default.app-config.yaml" }, { "mountPath": "/opt/app-root/src/app-config.tssc.yaml", "name": "tssc-developer-hub-app-config", "readOnly": true, "subPath": "app-config.tssc.yaml" } ], "workingDir": "/opt/app-root/src" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "./install-dynamic-plugins.sh", "/dynamic-plugins-root" ], "env": [ { "name": "NPM_CONFIG_USERCONFIG", "value": "/opt/app-root/src/.npmrc.dynamic-plugins/.npmrc" }, { "name": "MAX_ENTRY_SIZE", "value": "30000000" }, { "name": "CATALOG_INDEX_IMAGE", "value": "registry.access.redhat.com/rhdh/plugin-catalog-index@sha256:7685bc0f28b4ae5fe41bb60bb807700be8572cc3a1d39c12cf5f82955684134c" }, { "name": "CATALOG_ENTITIES_EXTRACT_DIR", "value": "/extensions" } ], "image": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:12a7f6cc89bf4364c038090b2b6532d90ab006444489f66a75c0d11da9f6e567", "imagePullPolicy": "IfNotPresent", "name": "install-dynamic-plugins", "resources": { "limits": { "cpu": "1", "ephemeral-storage": "5Gi", "memory": "2560Mi" }, "requests": { "cpu": "250m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/dynamic-plugins-root", "name": "dynamic-plugins-root" }, { "mountPath": "/extensions", "name": "extensions-catalog" }, { "mountPath": "/opt/app-root/src/.config/containers", "name": "dynamic-plugins-registry-auth", "readOnly": true }, { "mountPath": "/opt/app-root/src/.npm/_cacache", "name": "npmcacache" }, { "mountPath": "/tmp", "name": "temp" }, { "mountPath": "/opt/app-root/src/.npmrc.dynamic-plugins", "name": "backstage-files-developer-hub" }, { "mountPath": "/opt/app-root/src/dynamic-plugins.yaml", "name": "backstage-dynamic-plugins-developer-hub", "readOnly": true, "subPath": "dynamic-plugins.yaml" } ], "workingDir": "/opt/app-root/src" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "dynamic-plugins-root", "persistentVolumeClaim": { "claimName": "developer-hub-dynamic-plugins-root" } }, { "name": "dynamic-plugins-registry-auth", "secret": { "defaultMode": 416, "optional": true, "secretName": "dynamic-plugins-registry-auth" } }, { "emptyDir": {}, "name": "extensions-catalog" }, { "emptyDir": {}, "name": "npmcacache" }, { "emptyDir": {}, "name": "temp" }, { "configMap": { "defaultMode": 420, "name": "backstage-appconfig-developer-hub", "optional": false }, "name": "backstage-appconfig-developer-hub" }, { "name": "backstage-files-developer-hub", "secret": { "defaultMode": 420, "optional": false, "secretName": "backstage-files-developer-hub" } }, { "configMap": { "defaultMode": 420, "name": "tssc-developer-hub-app-config", "optional": false }, "name": "tssc-developer-hub-app-config" }, { "configMap": { "defaultMode": 420, "name": "backstage-dynamic-plugins-developer-hub", "optional": false }, "name": "backstage-dynamic-plugins-developer-hub" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:58Z", "generation": 1, "labels": { "app.kubernetes.io/name": "tssc-gitops-applicationset-controller", "pod-template-hash": "68dcc749b4" }, "name": "tssc-gitops-applicationset-controller-68dcc749b4", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tssc-gitops-applicationset-controller", "uid": "5db4723b-8035-4ae9-b8e7-157a9f9ca0f0" } ], "resourceVersion": "48472", "uid": "033d67aa-8c67-4636-8d84-7fcd8ac744af" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tssc-gitops-applicationset-controller", "pod-template-hash": "68dcc749b4" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "tssc-gitops-applicationset-controller", "pod-template-hash": "68dcc749b4" } }, "spec": { "containers": [ { "command": [ "entrypoint.sh", "argocd-applicationset-controller", "--argocd-repo-server", "tssc-gitops-repo-server.tssc-gitops.svc.cluster.local:8081", "--loglevel", "info", "--logformat", "text" ], "env": [ { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77", "imagePullPolicy": "IfNotPresent", "name": "argocd-applicationset-controller", "ports": [ { "containerPort": 7000, "name": "webhook", "protocol": "TCP" }, { "containerPort": 8080, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "250m", "memory": "1Gi" }, "requests": { "cpu": "125m", "memory": "512Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/ssh", "name": "ssh-known-hosts" }, { "mountPath": "/app/config/tls", "name": "tls-certs" }, { "mountPath": "/app/config/gpg/source", "name": "gpg-keys" }, { "mountPath": "/app/config/gpg/keys", "name": "gpg-keyring" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tssc-gitops-applicationset-controller", "serviceAccountName": "tssc-gitops-applicationset-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "argocd-ssh-known-hosts-cm" }, "name": "ssh-known-hosts" }, { "configMap": { "defaultMode": 420, "name": "argocd-tls-certs-cm" }, "name": "tls-certs" }, { "configMap": { "defaultMode": 420, "name": "argocd-gpg-keys-cm" }, "name": "gpg-keys" }, { "emptyDir": {}, "name": "gpg-keyring" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:57Z", "generation": 2, "labels": { "app.kubernetes.io/name": "tssc-gitops-dex-server", "pod-template-hash": "56f8b8566c" }, "name": "tssc-gitops-dex-server-56f8b8566c", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tssc-gitops-dex-server", "uid": "fccd7bdb-81b4-458a-931b-4178fda6f96e" } ], "resourceVersion": "48848", "uid": "fcafdf4d-ebe9-4d0a-bf28-57baf63bc6c5" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/name": "tssc-gitops-dex-server", "pod-template-hash": "56f8b8566c" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "tssc-gitops-dex-server", "pod-template-hash": "56f8b8566c" } }, "spec": { "containers": [ { "command": [ "/shared/argocd-dex", "rundex" ], "image": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:83636e08a79df87cb99ad9b91553cb6cffd81166113c4b6952bf1d419d43e26a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/live", "port": 5558, "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "dex", "ports": [ { "containerPort": 5556, "name": "http", "protocol": "TCP" }, { "containerPort": 5557, "name": "grpc", "protocol": "TCP" }, { "containerPort": 5558, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "250m", "memory": "256Mi" }, "requests": { "cpu": "125m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "static-files" }, { "mountPath": "/tmp", "name": "dexconfig" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "cp", "-n", "/usr/local/bin/argocd", "/shared/argocd-dex" ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77", "imagePullPolicy": "IfNotPresent", "name": "copyutil", "resources": { "limits": { "cpu": "250m", "memory": "256Mi" }, "requests": { "cpu": "125m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "static-files" }, { "mountPath": "/tmp", "name": "dexconfig" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tssc-gitops-argocd-dex-server", "serviceAccountName": "tssc-gitops-argocd-dex-server", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "static-files" }, { "emptyDir": {}, "name": "dexconfig" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-04-28T12:59:58Z", "generation": 1, "labels": { "app.kubernetes.io/name": "tssc-gitops-dex-server", "dex.config.changed": "04282026-125926-UTC", "pod-template-hash": "7b594f7c97" }, "name": "tssc-gitops-dex-server-7b594f7c97", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tssc-gitops-dex-server", "uid": "fccd7bdb-81b4-458a-931b-4178fda6f96e" } ], "resourceVersion": "48836", "uid": "082d2578-e3d8-4121-a277-0d42eb88299f" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tssc-gitops-dex-server", "pod-template-hash": "7b594f7c97" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "tssc-gitops-dex-server", "dex.config.changed": "04282026-125926-UTC", "pod-template-hash": "7b594f7c97" } }, "spec": { "containers": [ { "command": [ "/shared/argocd-dex", "rundex" ], "image": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:83636e08a79df87cb99ad9b91553cb6cffd81166113c4b6952bf1d419d43e26a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/live", "port": 5558, "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "dex", "ports": [ { "containerPort": 5556, "name": "http", "protocol": "TCP" }, { "containerPort": 5557, "name": "grpc", "protocol": "TCP" }, { "containerPort": 5558, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "250m", "memory": "256Mi" }, "requests": { "cpu": "125m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "static-files" }, { "mountPath": "/tmp", "name": "dexconfig" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "cp", "-n", "/usr/local/bin/argocd", "/shared/argocd-dex" ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77", "imagePullPolicy": "IfNotPresent", "name": "copyutil", "resources": { "limits": { "cpu": "250m", "memory": "256Mi" }, "requests": { "cpu": "125m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "static-files" }, { "mountPath": "/tmp", "name": "dexconfig" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tssc-gitops-argocd-dex-server", "serviceAccountName": "tssc-gitops-argocd-dex-server", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "static-files" }, { "emptyDir": {}, "name": "dexconfig" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:58Z", "generation": 1, "labels": { "app.kubernetes.io/name": "tssc-gitops-redis", "pod-template-hash": "7bb468974" }, "name": "tssc-gitops-redis-7bb468974", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tssc-gitops-redis", "uid": "b4d57683-8df7-436b-b2fb-6eb9080ba615" } ], "resourceVersion": "48757", "uid": "93ad9c61-a320-4767-8a39-f3993782da07" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tssc-gitops-redis", "pod-template-hash": "7bb468974" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "tssc-gitops-redis", "pod-template-hash": "7bb468974" } }, "spec": { "containers": [ { "args": [ "redis-server", "--protected-mode", "no", "--save", "", "--appendonly", "no", "--requirepass $(REDIS_PASSWORD)" ], "env": [ { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "admin.password", "name": "tssc-gitops-redis-initial-password" } } } ], "image": "registry.redhat.io/rhel9/redis-7@sha256:3d31c0cfaf4219f5bd1c52882b603215d1cb4aaef5b8d1a128d0174e090f96f3", "imagePullPolicy": "IfNotPresent", "name": "redis", "ports": [ { "containerPort": 6379, "protocol": "TCP" } ], "resources": { "limits": { "cpu": "250m", "memory": "256Mi" }, "requests": { "cpu": "125m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/redis/tls", "name": "argocd-operator-redis-tls" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tssc-gitops-argocd-redis", "serviceAccountName": "tssc-gitops-argocd-redis", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "argocd-operator-redis-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-operator-redis-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:58Z", "generation": 1, "labels": { "app.kubernetes.io/name": "tssc-gitops-repo-server", "pod-template-hash": "6f65ff9f86" }, "name": "tssc-gitops-repo-server-6f65ff9f86", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tssc-gitops-repo-server", "uid": "c83a3923-1068-467c-934a-847da2839ad2" } ], "resourceVersion": "48874", "uid": "a7a108aa-4d14-4dc9-931e-2422411f32f0" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tssc-gitops-repo-server", "pod-template-hash": "6f65ff9f86" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "tssc-gitops-repo-server", "pod-template-hash": "6f65ff9f86" } }, "spec": { "automountServiceAccountToken": false, "containers": [ { "command": [ "uid_entrypoint.sh", "argocd-repo-server", "--redis", "tssc-gitops-redis.tssc-gitops.svc.cluster.local:6379", "--loglevel", "info", "--logformat", "text" ], "env": [ { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "admin.password", "name": "tssc-gitops-redis-initial-password" } } } ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "name": "argocd-repo-server", "ports": [ { "containerPort": 8081, "name": "server", "protocol": "TCP" }, { "containerPort": 8084, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "250m", "memory": "1Gi" }, "requests": { "cpu": "125m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/ssh", "name": "ssh-known-hosts" }, { "mountPath": "/app/config/tls", "name": "tls-certs" }, { "mountPath": "/app/config/gpg/source", "name": "gpg-keys" }, { "mountPath": "/app/config/gpg/keys", "name": "gpg-keyring" }, { "mountPath": "/app/config/reposerver/tls", "name": "argocd-repo-server-tls" }, { "mountPath": "/app/config/reposerver/tls/redis", "name": "argocd-operator-redis-tls" }, { "mountPath": "/home/argocd/cmp-server/plugins", "name": "plugins" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "cp", "-n", "/usr/local/bin/argocd-cmp-server", "/var/run/argocd/argocd-cmp-server" ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77", "imagePullPolicy": "IfNotPresent", "name": "copyutil", "resources": { "limits": { "cpu": "250m", "memory": "1Gi" }, "requests": { "cpu": "125m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/argocd", "name": "var-files" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "argocd-ssh-known-hosts-cm" }, "name": "ssh-known-hosts" }, { "configMap": { "defaultMode": 420, "name": "argocd-tls-certs-cm" }, "name": "tls-certs" }, { "configMap": { "defaultMode": 420, "name": "argocd-gpg-keys-cm" }, "name": "gpg-keys" }, { "emptyDir": {}, "name": "gpg-keyring" }, { "name": "argocd-repo-server-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-repo-server-tls" } }, { "name": "argocd-operator-redis-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-operator-redis-tls" } }, { "emptyDir": {}, "name": "var-files" }, { "emptyDir": {}, "name": "plugins" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:58Z", "generation": 1, "labels": { "app.kubernetes.io/name": "tssc-gitops-server", "pod-template-hash": "6fb588db66" }, "name": "tssc-gitops-server-6fb588db66", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tssc-gitops-server", "uid": "cc102351-c4ba-4eda-bac2-b3e3ab58fae7" } ], "resourceVersion": "49174", "uid": "30ad2f9e-3b7f-4faf-9073-d7a43716de98" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tssc-gitops-server", "pod-template-hash": "6fb588db66" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "tssc-gitops-server", "pod-template-hash": "6fb588db66" } }, "spec": { "containers": [ { "command": [ "argocd-server", "--staticassets", "/shared/app", "--dex-server", "https://tssc-gitops-dex-server.tssc-gitops.svc.cluster.local:5556", "--repo-server", "tssc-gitops-repo-server.tssc-gitops.svc.cluster.local:8081", "--redis", "tssc-gitops-redis.tssc-gitops.svc.cluster.local:6379", "--loglevel", "info", "--logformat", "text" ], "env": [ { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "admin.password", "name": "tssc-gitops-redis-initial-password" } } } ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 3, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "argocd-server", "ports": [ { "containerPort": 8080, "protocol": "TCP" }, { "containerPort": 8083, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 3, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "250m", "memory": "256Mi" }, "requests": { "cpu": "125m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/ssh", "name": "ssh-known-hosts" }, { "mountPath": "/app/config/tls", "name": "tls-certs" }, { "mountPath": "/app/config/server/tls", "name": "argocd-repo-server-tls" }, { "mountPath": "/app/config/server/tls/redis", "name": "argocd-operator-redis-tls" }, { "mountPath": "/home/argocd", "name": "plugins-home" }, { "mountPath": "/home/argocd/params", "name": "argocd-cmd-params-cm" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tssc-gitops-argocd-server", "serviceAccountName": "tssc-gitops-argocd-server", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "argocd-ssh-known-hosts-cm" }, "name": "ssh-known-hosts" }, { "configMap": { "defaultMode": 420, "name": "argocd-tls-certs-cm" }, "name": "tls-certs" }, { "name": "argocd-repo-server-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-repo-server-tls" } }, { "name": "argocd-operator-redis-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-operator-redis-tls" } }, { "emptyDir": {}, "name": "plugins-home" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "server.profile.enabled", "path": "profiler.enabled" } ], "name": "argocd-cmd-params-cm", "optional": true }, "name": "argocd-cmd-params-cm" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "app.kubernetes.io/part-of": "tssc", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "meta.helm.sh/release-name": "tssc-infrastructure", "meta.helm.sh/release-namespace": "tssc" }, "creationTimestamp": "2026-04-28T13:01:09Z", "generation": 1, "labels": { "app": "keycloak-pgsql-bee", "phase": "reference", "pod-template-hash": "9c8768f87" }, "name": "keycloak-pgsql-bee-9c8768f87", "namespace": "tssc-keycloak", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "keycloak-pgsql-bee", "uid": "52e35441-4e7d-4b38-8c1c-4309e9e270ba" } ], "resourceVersion": "50135", "uid": "4cbb5b82-de63-47b9-a3a9-ab749cb46386" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "keycloak-pgsql-bee", "pod-template-hash": "9c8768f87" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "keycloak-pgsql-bee", "phase": "reference", "pod-template-hash": "9c8768f87" } }, "spec": { "containers": [ { "env": [ { "name": "POSTGRESQL_USER", "valueFrom": { "secretKeyRef": { "key": "user", "name": "keycloak-pgsql-user" } } }, { "name": "POSTGRESQL_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "keycloak-pgsql-user" } } }, { "name": "POSTGRESQL_DATABASE", "valueFrom": { "secretKeyRef": { "key": "dbname", "name": "keycloak-pgsql-user" } } } ], "image": "registry.redhat.io/rhel9/postgresql-16:1-1754433677", "imagePullPolicy": "IfNotPresent", "name": "pgsql-bee", "ports": [ { "containerPort": 5432, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "tcpSocket": { "port": 5432 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "1Gi" }, "requests": { "cpu": "250m", "memory": "512Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/lib/pgsql/data", "name": "pgsql-storage" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "pgsql-storage", "persistentVolumeClaim": { "claimName": "keycloak-pgsql-data" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:03:24Z", "generation": 1, "labels": { "app.kubernetes.io/component": "ctlog", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "ctlog", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "678cc4d6f5" }, "name": "ctlog-678cc4d6f5", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "ctlog", "uid": "ee50a050-4a4d-44c0-a8b1-f417464cdccb" } ], "resourceVersion": "52587", "uid": "3a0ddefb-f7f3-4496-a3e6-a9ee88088356" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "ctlog", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "ctlog", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "678cc4d6f5" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "ctlog", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "ctlog", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "678cc4d6f5" } }, "spec": { "containers": [ { "args": [ "--http_endpoint=0.0.0.0:6962", "--log_config=/ctfe-keys/config", "--alsologtostderr", "--max_cert_chain_size", "153600", "--tls_certificate", "/var/run/secrets/tas/tls.crt", "--tls_key", "/var/run/secrets/tas/tls.key", "--trillian_tls_ca_cert_file", "/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt" ], "env": [ { "name": "SSL_CERT_DIR", "value": "/var/run/configs/tas/ca-trust:/var/run/secrets/kubernetes.io/serviceaccount" } ], "image": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:95b5aefafd17dd44794f6d5d1e75278faa5a74f2472db667409d1c88caaef1f1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6962, "scheme": "HTTPS" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "ctlog", "ports": [ { "containerPort": 6962, "name": "server", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6962, "scheme": "HTTPS" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/ctfe-keys", "name": "keys", "readOnly": true }, { "mountPath": "/var/run/configs/tas/ca-trust", "name": "ca-trust", "readOnly": true }, { "mountPath": "/var/run/secrets/tas", "name": "tls-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "ctlog", "serviceAccountName": "ctlog", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "keys", "secret": { "defaultMode": 420, "secretName": "ctlog-config-trusted-artifact-signergsfqh" } }, { "name": "ca-trust", "projected": { "defaultMode": 420, "sources": null } }, { "name": "tls-cert", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "tls.crt", "path": "tls.crt" } ], "name": "trusted-artifact-signer-ctlog-tls" } }, { "secret": { "items": [ { "key": "tls.key", "path": "tls.key" } ], "name": "trusted-artifact-signer-ctlog-tls" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:02:29Z", "generation": 1, "labels": { "app.kubernetes.io/component": "fulcio", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "fulcio-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "bdc4fb74" }, "name": "fulcio-server-bdc4fb74", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "fulcio-server", "uid": "3741881a-c042-4b17-a6eb-abe9f6a8be50" } ], "resourceVersion": "51106", "uid": "0d5b0b6e-7a7c-459b-96f5-14bff50e9c59" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "fulcio", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "fulcio-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "bdc4fb74" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "fulcio", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "fulcio-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "bdc4fb74" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "serve", "--port=5555", "--grpc-port=5554", "--log_type=prod", "--ca=fileca", "--fileca-key", "/var/run/fulcio-secrets/key.pem", "--fileca-cert", "/var/run/fulcio-secrets/cert.pem", "--ct-log-url=https://ctlog.tssc-tas.svc/trusted-artifact-signer", "--fileca-key-passwd", "$(PASSWORD)" ], "env": [ { "name": "PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "fulcio-cert-trusted-artifact-signerqlh8l" } } }, { "name": "SSL_CERT_DIR", "value": "/var/run/configs/tas/ca-trust:/var/run/secrets/kubernetes.io/serviceaccount" } ], "image": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:2d478c389bc89afc6b331bc662a84dfc1bbb9da2681ab6dc5ad36f44c346699a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5555, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "fulcio-server", "ports": [ { "containerPort": 5555, "name": "http", "protocol": "TCP" }, { "containerPort": 5554, "name": "grpc", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5555, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/fulcio-secrets", "name": "fulcio-cert", "readOnly": true }, { "mountPath": "/etc/fulcio-config", "name": "fulcio-config" }, { "mountPath": "/var/run/fulcio", "name": "oidc-info" }, { "mountPath": "/var/run/configs/tas/ca-trust", "name": "ca-trust", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "fulcio", "serviceAccountName": "fulcio", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "fulcio-config-js4qf" }, "name": "fulcio-config" }, { "name": "fulcio-cert", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "private", "path": "key.pem" } ], "name": "fulcio-cert-trusted-artifact-signerqlh8l" } }, { "secret": { "items": [ { "key": "cert", "path": "cert.pem" } ], "name": "fulcio-cert-trusted-artifact-signerqlh8l" } } ] } }, { "name": "oidc-info", "projected": { "defaultMode": 420, "sources": [ { "configMap": { "items": [ { "key": "ca.crt", "mode": 438, "path": "ca.crt" } ], "name": "kube-root-ca.crt" } } ] } }, { "name": "ca-trust", "projected": { "defaultMode": 420, "sources": null } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:03:20Z", "generation": 1, "labels": { "app.kubernetes.io/component": "rekor-redis", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-redis", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "57684b46fc" }, "name": "rekor-redis-57684b46fc", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "rekor-redis", "uid": "24f2038b-f84f-49ee-a1a2-f32fb7836b66" } ], "resourceVersion": "52568", "uid": "fa09e0ca-5052-4033-baef-9934ce12d5d4" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "rekor-redis", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-redis", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "57684b46fc" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "rekor-redis", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-redis", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "57684b46fc" } }, "spec": { "containers": [ { "env": [ { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "redis-password-trusted-artifact-signergc9lw" } } }, { "name": "SSL_CERT_DIR", "value": "/var/run/configs/tas/ca-trust:/var/run/secrets/kubernetes.io/serviceaccount" }, { "name": "REDIS_CONF", "value": "/config/redis.conf" } ], "image": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:22b8cfd123fdd66827b81f2431903198e33579906102b2f6295276cf3eb197a6", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "exec": { "command": [ "/bin/sh", "-c", "-i", "test $(redis-cli --tls --cacert /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt -h 127.0.0.1 -a $REDIS_PASSWORD ping) = 'PONG'" ] }, "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "rekor-redis", "ports": [ { "containerPort": 6379, "name": "redis", "protocol": "TCP" } ], "readinessProbe": { "exec": { "command": [ "/bin/sh", "-c", "-i", "test $(redis-cli --tls --cacert /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt -h 127.0.0.1 -a $REDIS_PASSWORD ping) = 'PONG'" ] }, "failureThreshold": 3, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/data", "name": "storage" }, { "mountPath": "/var/run/configs/tas/ca-trust", "name": "ca-trust", "readOnly": true }, { "mountPath": "/var/run/secrets/tas", "name": "tls-cert", "readOnly": true }, { "mountPath": "/config", "name": "config" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "cp $REDIS_CONF /config/redis.conf\necho \"tls-port 6379\" \u003e\u003e /config/redis.conf\necho \"port 0\" \u003e\u003e /config/redis.conf\necho \"tls-cert-file /var/run/secrets/tas/tls.crt\" \u003e\u003e /config/redis.conf\necho \"tls-key-file /var/run/secrets/tas/tls.key\" \u003e\u003e /config/redis.conf\necho \"tls-ca-cert-file /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt\" \u003e\u003e /config/redis.conf\necho \"tls-auth-clients no\" \u003e\u003e /config/redis.conf\n" ], "command": [ "/bin/bash", "-c" ], "image": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:22b8cfd123fdd66827b81f2431903198e33579906102b2f6295276cf3eb197a6", "imagePullPolicy": "IfNotPresent", "name": "enable-tls", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/config", "name": "config" } ] } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "rekor-redis", "serviceAccountName": "rekor-redis", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "storage" }, { "name": "ca-trust", "projected": { "defaultMode": 420, "sources": null } }, { "name": "tls-cert", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "tls.crt", "path": "tls.crt" } ], "name": "trusted-artifact-signer-rekor-redis-tls" } }, { "secret": { "items": [ { "key": "tls.key", "path": "tls.key" } ], "name": "trusted-artifact-signer-rekor-redis-tls" } } ] } }, { "emptyDir": {}, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:03:20Z", "generation": 1, "labels": { "app.kubernetes.io/component": "rekor-ui", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-search-ui", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "6df8cd8fdc" }, "name": "rekor-search-ui-6df8cd8fdc", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "rekor-search-ui", "uid": "d653d346-732a-4737-aa53-d1db73a33394" } ], "resourceVersion": "52559", "uid": "efa24e5d-38ae-42fe-a94e-1b3d81c74e08" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "rekor-ui", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-search-ui", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "6df8cd8fdc" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "rekor-ui", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-search-ui", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "6df8cd8fdc" } }, "spec": { "containers": [ { "env": [ { "name": "NEXT_PUBLIC_REKOR_DEFAULT_DOMAIN", "value": "https://rekor-server-tssc-tas.apps.clusterpool420-54bqn.rhtap.devcluster.openshift.com" } ], "image": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:204dc28f6182267851d39eff08649e921877e2771d2c39acb798aa7896f5bcef", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 3000, "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "rekor-search-ui", "ports": [ { "containerPort": 3000, "name": "3000-tcp", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 3000, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "rekor-ui", "serviceAccountName": "rekor-ui", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:03:20Z", "generation": 1, "labels": { "app.kubernetes.io/component": "rekor-server", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "678d76554d" }, "name": "rekor-server-678d76554d", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "rekor-server", "uid": "46e8cbc7-5207-4319-8261-fd99f98fa0d0" } ], "resourceVersion": "52893", "uid": "84c58847-44e7-4142-8748-ea77d7ba00d6" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "rekor-server", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "678d76554d" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "rekor-server", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "678d76554d" } }, "spec": { "containers": [ { "args": [ "serve", "--trillian_log_server.address", "trillian-logserver.tssc-tas.svc", "--trillian_log_server.port", "8091", "--trillian_log_server.sharding_config", "/sharding/sharding-config.yaml", "--rekor_server.address", "0.0.0.0", "--enable_retrieve_api=true", "--trillian_log_server.tlog_id", "6190959862905510259", "--log_type", "prod", "--rekor_server.signer", "/key/private", "--max_request_body_size", "10485760", "--search_index.storage_provider", "redis", "--redis_server.address", "rekor-redis.tssc-tas.svc", "--redis_server.port", "6379", "--redis_server.password", "$(REDIS_PASSWORD)", "--redis_server.enable-tls=true", "--enable_attestation_storage=true", "--attestation_storage_bucket", "file:///var/run/attestations?no_tmp_dir=true", "--max_attestation_size", "102400", "--trillian_log_server.tls=true" ], "env": [ { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "redis-password-trusted-artifact-signergc9lw" } } }, { "name": "SSL_CERT_DIR", "value": "/var/run/configs/tas/ca-trust:/var/run/secrets/kubernetes.io/serviceaccount" } ], "image": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:b4a5a2c2518dba5f7812c8b4112e25a0f867a4b187c23adfc727395f871c8ca6", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ping", "port": 3000, "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "rekor-server", "ports": [ { "containerPort": 3000, "name": "rekor-server", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ping", "port": 3000, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/key", "name": "rekor-private-key-volume", "readOnly": true }, { "mountPath": "/sharding", "name": "rekor-sharding-config" }, { "mountPath": "/var/run/attestations", "name": "storage" }, { "mountPath": "/var/run/configs/tas/ca-trust", "name": "ca-trust", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroupChangePolicy": "OnRootMismatch", "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "rekor", "serviceAccountName": "rekor", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "rekor-private-key-volume", "secret": { "defaultMode": 420, "items": [ { "key": "private", "path": "private" } ], "secretName": "rekor-signer-trusted-artifact-signer-xdh98" } }, { "configMap": { "defaultMode": 420, "name": "rekor-sharding-config-hk89x" }, "name": "rekor-sharding-config" }, { "name": "storage", "persistentVolumeClaim": { "claimName": "rekor-trusted-artifact-signer-pvc" } }, { "name": "ca-trust", "projected": { "defaultMode": 420, "sources": null } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:02:29Z", "generation": 1, "labels": { "app.kubernetes.io/component": "trillian-db", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-db", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "5d4767d44b" }, "name": "trillian-db-5d4767d44b", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "trillian-db", "uid": "213be185-c6bf-4896-83ba-4087025c0846" } ], "resourceVersion": "51314", "uid": "0ea1a299-390d-41dc-8dd9-979c3491c2cc" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "trillian-db", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-db", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "5d4767d44b" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "trillian-db", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-db", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "5d4767d44b" } }, "spec": { "containers": [ { "args": [ "--ssl-cert", "/var/run/secrets/tas/tls.crt", "--ssl-key", "/var/run/secrets/tas/tls.key" ], "command": [ "run-mysqld" ], "env": [ { "name": "MYSQL_USER", "valueFrom": { "secretKeyRef": { "key": "mysql-user", "name": "trillian-db-connection-p4mhz" } } }, { "name": "MYSQL_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "mysql-password", "name": "trillian-db-connection-p4mhz" } } }, { "name": "MYSQL_ROOT_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "mysql-root-password", "name": "trillian-db-connection-p4mhz" } } }, { "name": "MYSQL_PORT", "valueFrom": { "secretKeyRef": { "key": "mysql-port", "name": "trillian-db-connection-p4mhz" } } }, { "name": "MYSQL_DATABASE", "valueFrom": { "secretKeyRef": { "key": "mysql-database", "name": "trillian-db-connection-p4mhz" } } } ], "image": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:ab5c3e921b58d17bf6b596d2d7acf64a28b34f3f3a66720c1a07e6555ed9e0b8", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "exec": { "command": [ "bash", "-c", "mariadb-admin -u ${MYSQL_USER} -p${MYSQL_PASSWORD} ping --ssl" ] }, "failureThreshold": 3, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "trillian-db", "ports": [ { "containerPort": 3306, "name": "3306-tcp", "protocol": "TCP" } ], "readinessProbe": { "exec": { "command": [ "bash", "-c", "mariadb -u ${MYSQL_USER} -p${MYSQL_PASSWORD} -e \"SELECT 1;\" --ssl" ] }, "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/lib/mysql", "name": "storage" }, { "mountPath": "/var/run/secrets/tas", "name": "tls-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroupChangePolicy": "OnRootMismatch", "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "trillian-db", "serviceAccountName": "trillian-db", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "storage", "persistentVolumeClaim": { "claimName": "trillian-mysql" } }, { "name": "tls-cert", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "tls.crt", "path": "tls.crt" } ], "name": "trusted-artifact-signer-trillian-db-tls" } }, { "secret": { "items": [ { "key": "tls.key", "path": "tls.key" } ], "name": "trusted-artifact-signer-trillian-db-tls" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:02:29Z", "generation": 1, "labels": { "app.kubernetes.io/component": "trillian-logserver", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logserver", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "78b657b999" }, "name": "trillian-logserver-78b657b999", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "trillian-logserver", "uid": "27bf0699-c87d-4d4b-84f3-c0b1c865ef05" } ], "resourceVersion": "51482", "uid": "1420725b-75ca-4cbf-b815-f44842bb8c2b" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "trillian-logserver", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logserver", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "78b657b999" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "trillian-logserver", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logserver", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "78b657b999" } }, "spec": { "containers": [ { "args": [ "--storage_system=mysql", "--quota_system=mysql", "--mysql_uri=$(MYSQL_USER):$(MYSQL_PASSWORD)@tcp($(MYSQL_HOSTNAME):$(MYSQL_PORT))/$(MYSQL_DATABASE)", "--mysql_max_conns=30", "--mysql_max_idle_conns=10", "--rpc_endpoint=0.0.0.0:8091", "--http_endpoint=0.0.0.0:8090", "--alsologtostderr", "--max_msg_size_bytes", "153600", "--mysql_tls_ca", "/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt", "--mysql_server_name", "$(MYSQL_HOSTNAME).tssc-tas.svc", "--tls_cert_file", "/var/run/secrets/tas/tls.crt", "--tls_key_file", "/var/run/secrets/tas/tls.key" ], "env": [ { "name": "MYSQL_USER", "valueFrom": { "secretKeyRef": { "key": "mysql-user", "name": "trillian-db-connection-p4mhz" } } }, { "name": "MYSQL_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "mysql-password", "name": "trillian-db-connection-p4mhz" } } }, { "name": "MYSQL_HOSTNAME", "valueFrom": { "secretKeyRef": { "key": "mysql-host", "name": "trillian-db-connection-p4mhz" } } }, { "name": "MYSQL_PORT", "valueFrom": { "secretKeyRef": { "key": "mysql-port", "name": "trillian-db-connection-p4mhz" } } }, { "name": "MYSQL_DATABASE", "valueFrom": { "secretKeyRef": { "key": "mysql-database", "name": "trillian-db-connection-p4mhz" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "SSL_CERT_DIR", "value": "/var/run/configs/tas/ca-trust:/var/run/secrets/kubernetes.io/serviceaccount" } ], "image": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:523fa259ebf067ac3076748d4f5c86e01e5b1960034c0876add5d67b0ca21b0b", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8090, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "trillian-logserver", "ports": [ { "containerPort": 8091, "name": "8091-tcp", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8090, "scheme": "HTTPS" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/configs/tas/ca-trust", "name": "ca-trust", "readOnly": true }, { "mountPath": "/var/run/secrets/tas", "name": "tls-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "until nc -z -v -w30 $MYSQL_HOSTNAME $MYSQL_PORT; do echo \"Waiting for MySQL to start\"; sleep 5; done;" ], "env": [ { "name": "MYSQL_HOSTNAME", "valueFrom": { "secretKeyRef": { "key": "mysql-host", "name": "trillian-db-connection-p4mhz" } } }, { "name": "MYSQL_PORT", "valueFrom": { "secretKeyRef": { "key": "mysql-port", "name": "trillian-db-connection-p4mhz" } } } ], "image": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:15692e0deea2ee5ef374514639030317a5b033c1bd1778673329a9745feb41d1", "imagePullPolicy": "IfNotPresent", "name": "wait-for-trillian-db", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "trillian-logserver", "serviceAccountName": "trillian-logserver", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "ca-trust", "projected": { "defaultMode": 420, "sources": null } }, { "name": "tls-cert", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "tls.crt", "path": "tls.crt" } ], "name": "trusted-artifact-signer-trillian-logserver-tls" } }, { "secret": { "items": [ { "key": "tls.key", "path": "tls.key" } ], "name": "trusted-artifact-signer-trillian-logserver-tls" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:02:29Z", "generation": 1, "labels": { "app.kubernetes.io/component": "trillian-logsigner", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logsigner", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "5b44f4d688" }, "name": "trillian-logsigner-5b44f4d688", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "trillian-logsigner", "uid": "14f50a81-1bb5-4e16-8bed-97bed1b9304b" } ], "resourceVersion": "51469", "uid": "675fd925-8fd0-4877-ab34-44bfffdf3d95" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "trillian-logsigner", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logsigner", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "5b44f4d688" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "trillian-logsigner", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logsigner", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "5b44f4d688" } }, "spec": { "containers": [ { "args": [ "--storage_system=mysql", "--quota_system=mysql", "--mysql_uri=$(MYSQL_USER):$(MYSQL_PASSWORD)@tcp($(MYSQL_HOSTNAME):$(MYSQL_PORT))/$(MYSQL_DATABASE)", "--mysql_max_conns=30", "--mysql_max_idle_conns=10", "--rpc_endpoint=0.0.0.0:8091", "--http_endpoint=0.0.0.0:8090", "--alsologtostderr", "--election_system=k8s", "--lock_namespace=$(NAMESPACE)", "--lock_holder_identity=$(POD_NAME)", "--master_hold_interval=5s", "--master_hold_jitter=15s", "--max_msg_size_bytes", "153600", "--mysql_tls_ca", "/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt", "--mysql_server_name", "$(MYSQL_HOSTNAME).tssc-tas.svc", "--tls_cert_file", "/var/run/secrets/tas/tls.crt", "--tls_key_file", "/var/run/secrets/tas/tls.key" ], "env": [ { "name": "MYSQL_USER", "valueFrom": { "secretKeyRef": { "key": "mysql-user", "name": "trillian-db-connection-p4mhz" } } }, { "name": "MYSQL_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "mysql-password", "name": "trillian-db-connection-p4mhz" } } }, { "name": "MYSQL_HOSTNAME", "valueFrom": { "secretKeyRef": { "key": "mysql-host", "name": "trillian-db-connection-p4mhz" } } }, { "name": "MYSQL_PORT", "valueFrom": { "secretKeyRef": { "key": "mysql-port", "name": "trillian-db-connection-p4mhz" } } }, { "name": "MYSQL_DATABASE", "valueFrom": { "secretKeyRef": { "key": "mysql-database", "name": "trillian-db-connection-p4mhz" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "SSL_CERT_DIR", "value": "/var/run/configs/tas/ca-trust:/var/run/secrets/kubernetes.io/serviceaccount" } ], "image": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:f211db01228530de8ed46b05189c492e6c3629df1098da57d31f2765a22ef014", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8090, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "trillian-logsigner", "ports": [ { "containerPort": 8091, "name": "8091-tcp", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8090, "scheme": "HTTPS" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/configs/tas/ca-trust", "name": "ca-trust", "readOnly": true }, { "mountPath": "/var/run/secrets/tas", "name": "tls-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "until nc -z -v -w30 $MYSQL_HOSTNAME $MYSQL_PORT; do echo \"Waiting for MySQL to start\"; sleep 5; done;" ], "env": [ { "name": "MYSQL_HOSTNAME", "valueFrom": { "secretKeyRef": { "key": "mysql-host", "name": "trillian-db-connection-p4mhz" } } }, { "name": "MYSQL_PORT", "valueFrom": { "secretKeyRef": { "key": "mysql-port", "name": "trillian-db-connection-p4mhz" } } } ], "image": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:15692e0deea2ee5ef374514639030317a5b033c1bd1778673329a9745feb41d1", "imagePullPolicy": "IfNotPresent", "name": "wait-for-trillian-db", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "trillian-logsigner", "serviceAccountName": "trillian-logsigner", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "ca-trust", "projected": { "defaultMode": 420, "sources": null } }, { "name": "tls-cert", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "tls.crt", "path": "tls.crt" } ], "name": "trusted-artifact-signer-trillian-logsigner-tls" } }, { "secret": { "items": [ { "key": "tls.key", "path": "tls.key" } ], "name": "trusted-artifact-signer-trillian-logsigner-tls" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "meta.helm.sh/release-name": "trustedprofileanalyzer", "meta.helm.sh/release-namespace": "tssc-tpa" }, "creationTimestamp": "2026-04-28T13:04:47Z", "generation": 1, "labels": { "app.kubernetes.io/component": "importer", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "importer", "pod-template-hash": "6f455fcc59" }, "name": "importer-6f455fcc59", "namespace": "tssc-tpa", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "importer", "uid": "fc7836b1-8269-49d0-95f6-7362cfd400e6" } ], "resourceVersion": "54955", "uid": "da525e4d-61b7-41fd-b421-ddc412bc82a3" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "importer", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "importer", "pod-template-hash": "6f455fcc59" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "importer", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "importer", "pod-template-hash": "6f455fcc59" } }, "spec": { "affinity": { "podAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "server", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "server" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "importer", "--working-dir", "/data/workdir", "--concurrency", "1" ], "command": [ "/usr/local/bin/trustd" ], "env": [ { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "RUST_LOG", "value": "debug" }, { "name": "RUST_BACKTRACE", "value": "1" }, { "name": "INFRASTRUCTURE_ENABLED", "value": "true" }, { "name": "INFRASTRUCTURE_BIND", "value": "[::]:9010" }, { "name": "TRUSTD_DB_HOST", "valueFrom": { "secretKeyRef": { "key": "host", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_PORT", "valueFrom": { "secretKeyRef": { "key": "port", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_NAME", "valueFrom": { "secretKeyRef": { "key": "dbname", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_USER", "valueFrom": { "secretKeyRef": { "key": "user", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_SSLMODE", "value": "disable" }, { "name": "TRUSTD_STORAGE_STRATEGY", "value": "fs" }, { "name": "TRUSTD_STORAGE_FS_PATH", "value": "/data/storage" } ], "image": "registry.redhat.io/rhtpa/rhtpa-trustification-service-rhel9@sha256:c1fd3736f86667698e06b4b2fed5407867dd89dbe53f8e97a9aa23a87ce12909", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health/live", "port": 9010, "scheme": "HTTP" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "service", "ports": [ { "containerPort": 9010, "name": "infra", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health/ready", "port": 9010, "scheme": "HTTP" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1", "memory": "8Gi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/data/workdir", "name": "workdir" }, { "mountPath": "/data/storage", "name": "storage" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "ephemeral": { "volumeClaimTemplate": { "metadata": { "creationTimestamp": null, "labels": { "type": "importer-working-directory" } }, "spec": { "accessModes": [ "ReadWriteOnce" ], "resources": { "requests": { "storage": "32Gi" } }, "volumeMode": "Filesystem" } } }, "name": "workdir" }, { "name": "storage", "persistentVolumeClaim": { "claimName": "storage" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:58:27Z", "generation": 1, "labels": { "control-plane": "controller-manager", "pod-template-hash": "5b6d6bcbdc" }, "name": "rhtpa-operator-controller-manager-5b6d6bcbdc", "namespace": "tssc-tpa", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "rhtpa-operator-controller-manager", "uid": "85f2c776-5f22-48d8-ad72-a242c8166010" } ], "resourceVersion": "44673", "uid": "55fb00fa-50c6-41e2-8121-2b87fc110f10" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "controller-manager", "pod-template-hash": "5b6d6bcbdc" } }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"rhtpa.io/v1\",\n \"kind\": \"TrustedProfileAnalyzer\",\n \"metadata\": {\n \"name\": \"trustedprofileanalyzer-sample\"\n },\n \"spec\": {\n \"appDomain\": \"change-me\",\n \"collector\": {},\n \"database\": {},\n \"image\": {},\n \"infrastructure\": {\n \"port\": 9010\n },\n \"ingress\": {},\n \"metrics\": {\n \"enabled\": false\n },\n \"modules\": {\n \"createDatabase\": {\n \"enabled\": false,\n \"image\": {}\n },\n \"createImporters\": {\n \"enabled\": false,\n \"image\": {},\n \"importers\": {}\n },\n \"importer\": {\n \"concurrency\": 1,\n \"enabled\": true,\n \"image\": {},\n \"infrastructure\": {},\n \"metrics\": {},\n \"replicas\": 1,\n \"resources\": {\n \"requests\": {\n \"cpu\": 1,\n \"memory\": \"8Gi\"\n }\n },\n \"rust\": {},\n \"tracing\": {},\n \"workingDirectory\": {\n \"size\": \"32Gi\"\n }\n },\n \"migrateDatabase\": {\n \"enabled\": false,\n \"image\": {}\n },\n \"server\": {\n \"enabled\": true,\n \"image\": {},\n \"infrastructure\": {},\n \"ingress\": {},\n \"metrics\": {},\n \"replicas\": 1,\n \"resources\": {\n \"requests\": {\n \"cpu\": 1,\n \"memory\": \"8Gi\"\n }\n },\n \"rust\": {},\n \"tracing\": {}\n }\n },\n \"oidc\": {\n \"clients\": {\n \"cli\": {\n \"clientSecret\": null\n },\n \"frontend\": {}\n }\n },\n \"openshift\": {\n \"useServiceCa\": true\n },\n \"partOf\": \"trustify\",\n \"replicas\": 1,\n \"rust\": {},\n \"storage\": {},\n \"tls\": {},\n \"tracing\": {\n \"enabled\": false\n }\n }\n }\n]", "capabilities": "Basic Install", "createdAt": "2025-11-04T12:03:15Z", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "false", "features.operators.openshift.io/fips-compliant": "false", "features.operators.openshift.io/proxy-aware": "false", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "kubectl.kubernetes.io/default-container": "manager", "olm.operatorGroup": "rhtpa-operator", "olm.operatorNamespace": "tssc-tpa", "olm.targetNamespaces": "tssc-tpa", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtpa.io\",\"kind\":\"TrustedProfileAnalyzer\",\"version\":\"v1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"rhtpa-operator\",\"version\":\"1.1.4\"}}]}", "operators.openshift.io/valid-subscription": "[\"Red Hat Trusted Profile Analyzer\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.42.0", "operators.operatorframework.io/project_layout": "helm.sdk.operatorframework.io/v1", "repository": "https://github.com/trustification/trusted-profile-analyzer-operator", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager", "pod-template-hash": "5b6d6bcbdc" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8443", "--leader-elect", "--health-probe-bind-address=:8081" ], "env": [ { "name": "OPERATOR_CONDITION_NAME", "value": "rhtpa-operator.v1.1.4" } ], "image": "registry.redhat.io/rhtpa/rhtpa-rhel9-operator@sha256:95f5dcecd4c2f488420d608565bcac75909a65f2c9d443c34d93f7914f1cb1ef", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "rhtpa-operator-controller-manager", "serviceAccountName": "rhtpa-operator-controller-manager", "terminationGracePeriodSeconds": 10 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "meta.helm.sh/release-name": "trustedprofileanalyzer", "meta.helm.sh/release-namespace": "tssc-tpa" }, "creationTimestamp": "2026-04-28T13:04:47Z", "generation": 1, "labels": { "app.kubernetes.io/component": "server", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "server", "pod-template-hash": "558697ccd7" }, "name": "server-558697ccd7", "namespace": "tssc-tpa", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "server", "uid": "16841594-d859-4a19-b798-a588669ea1c4" } ], "resourceVersion": "54952", "uid": "b191689d-c85e-42d5-89e5-fe7f303ec36e" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "server", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "server", "pod-template-hash": "558697ccd7" } }, "template": { "metadata": { "annotations": { "configHash/auth": "df3dc17ba3028e60996773dc261d9620091791d7e7d0fc7694ea62415595604a" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "server", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "server", "pod-template-hash": "558697ccd7" } }, "spec": { "affinity": { "podAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "server", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "server" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "api", "--auth-configuration", "/etc/config/auth.yaml" ], "command": [ "/usr/local/bin/trustd" ], "env": [ { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "RUST_LOG", "value": "debug" }, { "name": "RUST_BACKTRACE", "value": "1" }, { "name": "INFRASTRUCTURE_ENABLED", "value": "true" }, { "name": "INFRASTRUCTURE_BIND", "value": "[::]:9010" }, { "name": "HTTP_SERVER_BIND_ADDR", "value": "::" }, { "name": "HTTP_SERVER_TLS_ENABLED", "value": "true" }, { "name": "HTTP_SERVER_TLS_KEY_FILE", "value": "/etc/tls/tls.key" }, { "name": "HTTP_SERVER_TLS_CERTIFICATE_FILE", "value": "/etc/tls/tls.crt" }, { "name": "TRUSTD_DB_HOST", "valueFrom": { "secretKeyRef": { "key": "host", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_PORT", "valueFrom": { "secretKeyRef": { "key": "port", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_NAME", "valueFrom": { "secretKeyRef": { "key": "dbname", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_USER", "valueFrom": { "secretKeyRef": { "key": "user", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_SSLMODE", "value": "disable" }, { "name": "TRUSTD_STORAGE_STRATEGY", "value": "fs" }, { "name": "TRUSTD_STORAGE_FS_PATH", "value": "/data/storage" }, { "name": "SWAGGER_UI_OIDC_ISSUER_URL", "value": "https://tssc-sso.apps.clusterpool420-54bqn.rhtap.devcluster.openshift.com/realms/tssc-iam" }, { "name": "SWAGGER_UI_OIDC_CLIENT_ID", "value": "frontend" }, { "name": "SWAGGER_UI_OIDC_TLS_CA_CERTIFICATES", "value": "/var/run/secrets/kubernetes.io/serviceaccount/ca.crt" }, { "name": "UI_ISSUER_URL", "value": "https://tssc-sso.apps.clusterpool420-54bqn.rhtap.devcluster.openshift.com/realms/tssc-iam" }, { "name": "UI_CLIENT_ID", "value": "frontend" }, { "name": "UI_LOAD_USER", "value": "true" } ], "image": "registry.redhat.io/rhtpa/rhtpa-trustification-service-rhel9@sha256:c1fd3736f86667698e06b4b2fed5407867dd89dbe53f8e97a9aa23a87ce12909", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health/live", "port": 9010, "scheme": "HTTP" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "service", "ports": [ { "containerPort": 9010, "name": "infra", "protocol": "TCP" }, { "containerPort": 8080, "name": "endpoint", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health/ready", "port": 9010, "scheme": "HTTP" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1", "memory": "8Gi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tls", "name": "tls", "readOnly": true }, { "mountPath": "/etc/config/auth.yaml", "name": "config-auth", "subPath": "auth.yaml" }, { "mountPath": "/data/storage", "name": "storage" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "secretName": "server-tls" } }, { "configMap": { "defaultMode": 420, "name": "server-auth" }, "name": "config-auth" }, { "name": "storage", "persistentVolumeClaim": { "claimName": "storage" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "app.kubernetes.io/part-of": "tssc", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "meta.helm.sh/release-name": "tssc-infrastructure", "meta.helm.sh/release-namespace": "tssc" }, "creationTimestamp": "2026-04-28T13:01:09Z", "generation": 1, "labels": { "app": "tpa-pgsql-bee", "phase": "reference", "pod-template-hash": "5f9d857cf7" }, "name": "tpa-pgsql-bee-5f9d857cf7", "namespace": "tssc-tpa", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tpa-pgsql-bee", "uid": "fcedc0eb-6d4e-48c6-b16c-7aea1ca35d16" } ], "resourceVersion": "50146", "uid": "9cda4db9-e493-4f55-b91d-50d1ef341228" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "tpa-pgsql-bee", "pod-template-hash": "5f9d857cf7" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tpa-pgsql-bee", "phase": "reference", "pod-template-hash": "5f9d857cf7" } }, "spec": { "containers": [ { "env": [ { "name": "POSTGRESQL_USER", "valueFrom": { "secretKeyRef": { "key": "user", "name": "tpa-pgsql-user" } } }, { "name": "POSTGRESQL_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "tpa-pgsql-user" } } }, { "name": "POSTGRESQL_DATABASE", "valueFrom": { "secretKeyRef": { "key": "dbname", "name": "tpa-pgsql-user" } } } ], "image": "registry.redhat.io/rhel9/postgresql-16:1-1754433677", "imagePullPolicy": "IfNotPresent", "name": "pgsql-bee", "ports": [ { "containerPort": 5432, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "tcpSocket": { "port": 5432 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "1Gi" }, "requests": { "cpu": "250m", "memory": "512Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/lib/pgsql/data", "name": "pgsql-storage" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "pgsql-storage", "persistentVolumeClaim": { "claimName": "tpa-pgsql-data" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } } ], "kind": "List", "metadata": { "resourceVersion": "" } }