{ "apiVersion": "v1", "items": [ { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-03-31T03:46:07Z", "generation": 1, "name": "global-pull-secret-syncer", "namespace": "kube-system", "resourceVersion": "16876", "uid": "0fb142ee-92a9-4b7a-888c-8ef1f41c9f87" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "name": "global-pull-secret-syncer" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "hypershift.openshift.io/globalps-config-hash": "1cead869", "name": "global-pull-secret-syncer" } }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "sync-global-pullsecret" ], "command": [ "/usr/bin/control-plane-operator" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:80748ba08e1c264a8c105e7f607eff386a66378e024443a844993ee9292858c1", "imagePullPolicy": "IfNotPresent", "name": "global-pull-secret-syncer", "resources": { "requests": { "cpu": "5m", "memory": "35Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet", "name": "kubelet-config" }, { "mountPath": "/var/run/dbus", "name": "dbus" }, { "mountPath": "/etc/original-pull-secret", "name": "original-pull-secret", "readOnly": true } ] } ], "dnsPolicy": "Default", "nodeSelector": { "hypershift.openshift.io/nodepool-globalps-enabled": "true" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet", "type": "Directory" }, "name": "kubelet-config" }, { "hostPath": { "path": "/var/run/dbus", "type": "Directory" }, "name": "dbus" }, { "name": "original-pull-secret", "secret": { "defaultMode": 420, "secretName": "original-pull-secret" } } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": 1 }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-03-31T03:46:07Z", "generation": 1, "labels": { "hypershift.openshift.io/managed": "true" }, "name": "konnectivity-agent", "namespace": "kube-system", "resourceVersion": "10926", "uid": "dbf74a0e-7ddc-451c-8a64-03936323ca1b" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "konnectivity-agent" } }, "template": { "metadata": { "annotations": { "hypershift.openshift.io/release-image": "quay.io/openshift-release-dev/ocp-release@sha256:44b31013c170e946fbd2bc1e3d58371cec9be40994271cfbbc87fb2effda1d9a" }, "creationTimestamp": null, "labels": { "app": "konnectivity-agent" } }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "--logtostderr=true", "--ca-cert", "/etc/konnectivity/ca/ca.crt", "--agent-cert", "/etc/konnectivity/agent/tls.crt", "--agent-key", "/etc/konnectivity/agent/tls.key", "--proxy-server-host", "konnectivity-server.apps.kx-5bb39f5ebe.hypershift.local", "--proxy-server-port", "443", "--health-server-port", "2041", "--agent-identifiers=default-route=true", "--keepalive-time", "30s", "--probe-interval", "5s", "--sync-interval", "5s", "--sync-interval-cap", "30s", "--v", "3" ], "command": [ "/usr/bin/proxy-agent" ], "env": [ { "name": "HTTP_PROXY" }, { "name": "HTTPS_PROXY" }, { "name": "NO_PROXY" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:eff3318d5ac1d3a141221b536233305f54b3334fab56e5f8ba20ef8a9ed21429", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 6, "httpGet": { "path": "healthz", "port": 2041, "scheme": "HTTP" }, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "konnectivity-agent", "readinessProbe": { "failureThreshold": 1, "httpGet": { "path": "readyz", "port": 2041, "scheme": "HTTP" }, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "40m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "startupProbe": { "failureThreshold": 60, "httpGet": { "path": "healthz", "port": 2041, "scheme": "HTTP" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 5 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/konnectivity/agent", "name": "agent-certs" }, { "mountPath": "/etc/konnectivity/ca", "name": "konnectivity-ca" } ] } ], "dnsPolicy": "Default", "hostNetwork": true, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsUser": 1000 }, "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "name": "agent-certs", "secret": { "defaultMode": 416, "secretName": "konnectivity-agent" } }, { "configMap": { "defaultMode": 416, "name": "konnectivity-ca-bundle" }, "name": "konnectivity-ca" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "config.openshift.io/inject-proxy-cabundle": "csi-driver", "deprecated.daemonset.template.generation": "1", "operator.openshift.io/spec-hash": "e5e9fbce3dd801f4be488481306d565acfcb668484e1f1e9fe38158a8f31c194" }, "creationTimestamp": "2026-03-31T03:46:08Z", "generation": 1, "name": "aws-ebs-csi-driver-node", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "10924", "uid": "8ba3bc29-837a-4ba0-b74f-57e46adab462" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "aws-ebs-csi-driver-node" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "openshift.io/required-scc": "privileged", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "aws-ebs-csi-driver-node" } }, "spec": { "containers": [ { "args": [ "node", "--endpoint=$(CSI_ENDPOINT)", "--logtostderr", "--v=2", "--reserved-volume-attachments=1" ], "env": [ { "name": "CSI_ENDPOINT", "value": "unix:/csi/csi.sock" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a505dd5b62d744c2cfda2666b5e21e0a4704354a3114488bd3291456085e1e33", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "host": "127.0.0.1", "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "csi-driver", "ports": [ { "containerPort": 10300, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet", "mountPropagation": "Bidirectional", "name": "kubelet-dir" }, { "mountPath": "/csi", "name": "socket-dir" }, { "mountPath": "/dev", "name": "device-dir" }, { "mountPath": "/etc/selinux", "name": "etc-selinux" }, { "mountPath": "/sys/fs", "name": "sys-fs" } ] }, { "args": [ "--csi-address=/csi/csi.sock", "--kubelet-registration-path=/var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock", "--http-endpoint=127.0.0.1:10309", "--v=2" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a498046d64605bcccee2440aa4f04a4602baaae263cf01d977ec5208e876b1fd", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "/bin/sh", "-c", "rm -rf /registration/ebs.csi.aws.com-reg.sock /csi/csi.sock" ] } } }, "livenessProbe": { "failureThreshold": 5, "httpGet": { "host": "127.0.0.1", "path": "/healthz", "port": "rhealthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "csi-node-driver-registrar", "ports": [ { "containerPort": 10309, "name": "rhealthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/csi", "name": "socket-dir" }, { "mountPath": "/registration", "name": "registration-dir" } ] }, { "args": [ "--csi-address=/csi/csi.sock", "--http-endpoint=127.0.0.1:10300", "--v=2", "--probe-timeout=3s" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:fab570ecdc9c3620b032bc4c5b44240f5ebac0bb9e48dfeea32bcd36eb462e5a", "imagePullPolicy": "IfNotPresent", "name": "csi-liveness-probe", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/csi", "name": "socket-dir" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "aws-ebs-csi-driver-node-sa", "serviceAccountName": "aws-ebs-csi-driver-node-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet", "type": "Directory" }, "name": "kubelet-dir" }, { "hostPath": { "path": "/var/lib/kubelet/plugins/ebs.csi.aws.com/", "type": "DirectoryOrCreate" }, "name": "socket-dir" }, { "hostPath": { "path": "/var/lib/kubelet/plugins_registry/", "type": "Directory" }, "name": "registration-dir" }, { "hostPath": { "path": "/dev", "type": "Directory" }, "name": "device-dir" }, { "hostPath": { "path": "/etc/selinux", "type": "DirectoryOrCreate" }, "name": "etc-selinux" }, { "hostPath": { "path": "/sys/fs", "type": "Directory" }, "name": "sys-fs" }, { "name": "metrics-serving-cert", "secret": { "defaultMode": 420, "secretName": "aws-ebs-csi-driver-node-metrics-serving-cert" } } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-03-31T03:46:19Z", "generation": 1, "labels": { "openshift-app": "tuned" }, "name": "tuned", "namespace": "openshift-cluster-node-tuning-operator", "ownerReferences": [ { "apiVersion": "tuned.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Tuned", "name": "default", "uid": "28312413-c71f-46de-a583-7701a77a8d1f" } ], "resourceVersion": "10785", "uid": "e4cf8b01-1c72-4ed4-ac38-bc8089361245" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "openshift-app": "tuned" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "tuned", "openshift-app": "tuned" } }, "spec": { "containers": [ { "command": [ "/usr/bin/cluster-node-tuning-operator", "ocp-tuned", "--in-cluster", "-v=0" ], "env": [ { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "OCP_NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "RESYNC_PERIOD", "value": "600" }, { "name": "RELEASE_VERSION", "value": "4.20.8" }, { "name": "CLUSTER_NODE_TUNED_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a258c226562adb14e3a163a1940938526ee6a0928982a7667d85d9a7334ce639" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a258c226562adb14e3a163a1940938526ee6a0928982a7667d85d9a7334ce639", "imagePullPolicy": "IfNotPresent", "name": "tuned", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/modprobe.d", "mountPropagation": "HostToContainer", "name": "etc-modprobe-d" }, { "mountPath": "/etc/sysconfig", "mountPropagation": "HostToContainer", "name": "etc-sysconfig" }, { "mountPath": "/etc/kubernetes", "mountPropagation": "HostToContainer", "name": "etc-kubernetes", "readOnly": true }, { "mountPath": "/etc/sysctl.d", "mountPropagation": "HostToContainer", "name": "etc-sysctl-d", "readOnly": true }, { "mountPath": "/etc/sysctl.conf", "mountPropagation": "HostToContainer", "name": "etc-sysctl-conf", "readOnly": true }, { "mountPath": "/etc/systemd", "mountPropagation": "HostToContainer", "name": "etc-systemd" }, { "mountPath": "/etc/tuned", "name": "etc-tuned" }, { "mountPath": "/run", "mountPropagation": "HostToContainer", "name": "run" }, { "mountPath": "/sys", "mountPropagation": "HostToContainer", "name": "sys" }, { "mountPath": "/tmp", "name": "tmp" }, { "mountPath": "/lib/modules", "mountPropagation": "HostToContainer", "name": "lib-modules", "readOnly": true }, { "mountPath": "/var/lib/kubelet", "mountPropagation": "HostToContainer", "name": "var-lib-kubelet", "readOnly": true }, { "mountPath": "/host", "mountPropagation": "HostToContainer", "name": "host" } ] } ], "dnsPolicy": "ClusterFirst", "hostIPC": true, "hostNetwork": true, "hostPID": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "tuned", "serviceAccountName": "tuned", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/modprobe.d", "type": "Directory" }, "name": "etc-modprobe-d" }, { "hostPath": { "path": "/etc/sysconfig", "type": "Directory" }, "name": "etc-sysconfig" }, { "hostPath": { "path": "/etc/kubernetes", "type": "Directory" }, "name": "etc-kubernetes" }, { "hostPath": { "path": "/etc/sysctl.d", "type": "Directory" }, "name": "etc-sysctl-d" }, { "hostPath": { "path": "/etc/sysctl.conf", "type": "File" }, "name": "etc-sysctl-conf" }, { "hostPath": { "path": "/etc/systemd", "type": "Directory" }, "name": "etc-systemd" }, { "hostPath": { "path": "/run", "type": "Directory" }, "name": "run" }, { "hostPath": { "path": "/sys", "type": "Directory" }, "name": "sys" }, { "hostPath": { "path": "/lib/modules", "type": "Directory" }, "name": "lib-modules" }, { "hostPath": { "path": "/var/lib/kubelet", "type": "Directory" }, "name": "var-lib-kubelet" }, { "hostPath": { "path": "/", "type": "Directory" }, "name": "host" }, { "emptyDir": { "medium": "Memory" }, "name": "etc-tuned" }, { "emptyDir": { "medium": "Memory" }, "name": "tmp" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-03-31T03:46:14Z", "generation": 1, "labels": { "dns.operator.openshift.io/owning-dns": "default" }, "name": "dns-default", "namespace": "openshift-dns", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "controller": true, "kind": "DNS", "name": "default", "uid": "78d61ea1-e709-4516-a236-08a748d51d59" } ], "resourceVersion": "12472", "uid": "4d6d9466-cdb4-4475-8827-bbff6d7290f7" }, "spec": { "minReadySeconds": 9, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "dns.operator.openshift.io/daemonset-dns": "default" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "true", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "dns.operator.openshift.io/daemonset-dns": "default" } }, "spec": { "containers": [ { "args": [ "-conf", "/etc/coredns/Corefile" ], "command": [ "coredns" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:943018739e3db1763c3184b460dbc409e058abbac76d57b9927faad317be85e4", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/health", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "dns", "ports": [ { "containerPort": 5353, "name": "dns", "protocol": "UDP" }, { "containerPort": 5353, "name": "dns-tcp", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": 8181, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 3, "successThreshold": 1, "timeoutSeconds": 3 }, "resources": { "requests": { "cpu": "50m", "memory": "70Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/coredns", "name": "config-volume", "readOnly": true }, { "mountPath": "/tmp", "name": "tmp-dir" } ] }, { "args": [ "--logtostderr", "--secure-listen-address=:9154", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", "--upstream=http://127.0.0.1:9153/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca1344cb64140188b7cae7bbc51fb751566c0b0c97d5e39b5850e628032c4a5e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9154, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "40Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-tls", "readOnly": true }, { "mountPath": "/tmp", "name": "tmp-dir" } ] } ], "dnsPolicy": "Default", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "dns", "serviceAccountName": "dns", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "Corefile", "path": "Corefile" } ], "name": "dns-default" }, "name": "config-volume" }, { "name": "metrics-tls", "secret": { "defaultMode": 420, "secretName": "dns-default-metrics-tls" } }, { "emptyDir": {}, "name": "tmp-dir" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": "10%", "maxUnavailable": 0 }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-03-31T03:46:15Z", "generation": 1, "name": "node-resolver", "namespace": "openshift-dns", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "controller": true, "kind": "DNS", "name": "default", "uid": "78d61ea1-e709-4516-a236-08a748d51d59" } ], "resourceVersion": "10868", "uid": "13cb1618-296b-44f1-a9d4-fea7503cb02c" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "dns.operator.openshift.io/daemonset-node-resolver": "" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "dns.operator.openshift.io/daemonset-node-resolver": "" } }, "spec": { "containers": [ { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -uo pipefail\n\ntrap 'jobs -p | xargs kill || true; wait; exit 0' TERM\n\nOPENSHIFT_MARKER=\"openshift-generated-node-resolver\"\nHOSTS_FILE=\"/etc/hosts\"\nTEMP_FILE=\"/tmp/hosts.tmp\"\n\nIFS=', ' read -r -a services \u003c\u003c\u003c \"${SERVICES}\"\n\n# Make a temporary file with the old hosts file's attributes.\nif ! cp -f --attributes-only \"${HOSTS_FILE}\" \"${TEMP_FILE}\"; then\n echo \"Failed to preserve hosts file. Exiting.\"\n exit 1\nfi\n\nwhile true; do\n declare -A svc_ips\n for svc in \"${services[@]}\"; do\n # Fetch service IP from cluster dns if present. We make several tries\n # to do it: IPv4, IPv6, IPv4 over TCP and IPv6 over TCP. The two last ones\n # are for deployments with Kuryr on older OpenStack (OSP13) - those do not\n # support UDP loadbalancers and require reaching DNS through TCP.\n cmds=('dig -t A @\"${NAMESERVER}\" +short \"${svc}.${CLUSTER_DOMAIN}\"|grep -v \"^;\"'\n 'dig -t AAAA @\"${NAMESERVER}\" +short \"${svc}.${CLUSTER_DOMAIN}\"|grep -v \"^;\"'\n 'dig -t A +tcp +retry=0 @\"${NAMESERVER}\" +short \"${svc}.${CLUSTER_DOMAIN}\"|grep -v \"^;\"'\n 'dig -t AAAA +tcp +retry=0 @\"${NAMESERVER}\" +short \"${svc}.${CLUSTER_DOMAIN}\"|grep -v \"^;\"')\n for i in ${!cmds[*]}\n do\n ips=($(eval \"${cmds[i]}\"))\n if [[ \"$?\" -eq 0 \u0026\u0026 \"${#ips[@]}\" -ne 0 ]]; then\n svc_ips[\"${svc}\"]=\"${ips[@]}\"\n break\n fi\n done\n done\n\n # Update /etc/hosts only if we get valid service IPs\n # We will not update /etc/hosts when there is coredns service outage or api unavailability\n # Stale entries could exist in /etc/hosts if the service is deleted\n if [[ -n \"${svc_ips[*]-}\" ]]; then\n # Build a new hosts file from /etc/hosts with our custom entries filtered out\n if ! sed --silent \"/# ${OPENSHIFT_MARKER}/d; w ${TEMP_FILE}\" \"${HOSTS_FILE}\"; then\n # Only continue rebuilding the hosts entries if its original content is preserved\n sleep 60 \u0026 wait\n continue\n fi\n\n # Append resolver entries for services\n rc=0\n for svc in \"${!svc_ips[@]}\"; do\n for ip in ${svc_ips[${svc}]}; do\n echo \"${ip} ${svc} ${svc}.${CLUSTER_DOMAIN} # ${OPENSHIFT_MARKER}\" \u003e\u003e \"${TEMP_FILE}\" || rc=$?\n done\n done\n if [[ $rc -ne 0 ]]; then\n sleep 60 \u0026 wait\n continue\n fi\n\n\n # TODO: Update /etc/hosts atomically to avoid any inconsistent behavior\n # Replace /etc/hosts with our modified version if needed\n cmp \"${TEMP_FILE}\" \"${HOSTS_FILE}\" || cp -f \"${TEMP_FILE}\" \"${HOSTS_FILE}\"\n # TEMP_FILE is not removed to avoid file create/delete and attributes copy churn\n fi\n sleep 60 \u0026 wait\n unset svc_ips\ndone\n" ], "env": [ { "name": "SERVICES", "value": "image-registry.openshift-image-registry.svc" }, { "name": "NAMESERVER", "value": "172.30.0.10" }, { "name": "CLUSTER_DOMAIN", "value": "cluster.local" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:da4f8a01ef5d0607cf76fa7b219fafdb6020cb4cf9a0a88cfe76d292c1a561fc", "imagePullPolicy": "IfNotPresent", "name": "dns-node-resolver", "resources": { "requests": { "cpu": "5m", "memory": "21Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/hosts", "name": "hosts-file" }, { "mountPath": "/tmp", "name": "tmp-dir" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "node-resolver", "serviceAccountName": "node-resolver", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/hosts", "type": "File" }, "name": "hosts-file" }, { "emptyDir": {}, "name": "tmp-dir" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "33%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "operator.openshift.io/spec-hash": "ac3149ba70ffcd1067c17b5306f5ac5143794561f908993bbc51f00e5c2f7a5d" }, "creationTimestamp": "2026-03-31T03:46:10Z", "generation": 1, "name": "node-ca", "namespace": "openshift-image-registry", "resourceVersion": "10861", "uid": "573e0514-3c12-4007-9325-05b6d530bbf3" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "name": "node-ca" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "node-ca" } }, "spec": { "containers": [ { "command": [ "/bin/sh", "-c", "trap 'jobs -p | xargs -r kill; echo shutting down node-ca; exit 0' TERM\nwhile [ true ];\ndo\n for f in $(ls /tmp/serviceca); do\n echo $f\n ca_file_path=\"/tmp/serviceca/${f}\"\n f=$(echo $f | sed -r 's/(.*)\\.\\./\\1:/')\n reg_dir_path=\"/etc/docker/certs.d/${f}\"\n if [ -e \"${reg_dir_path}\" ]; then\n cp -u $ca_file_path $reg_dir_path/ca.crt\n else\n mkdir $reg_dir_path\n cp $ca_file_path $reg_dir_path/ca.crt\n fi\n done\n for d in $(ls /etc/docker/certs.d); do\n echo $d\n dp=$(echo $d | sed -r 's/(.*):/\\1\\.\\./')\n reg_conf_path=\"/tmp/serviceca/${dp}\"\n if [ ! -e \"${reg_conf_path}\" ]; then\n rm -rf /etc/docker/certs.d/$d\n fi\n done\n sleep 60 \u0026 wait ${!}\ndone\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:56a85660a445eced5c79a595a0eccf590087c5672d50f49d4c25ad52f9a44f04", "imagePullPolicy": "IfNotPresent", "name": "node-ca", "resources": { "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": true, "runAsGroup": 0, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp/serviceca", "name": "serviceca" }, { "mountPath": "/etc/docker/certs.d", "name": "host" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "node-ca", "serviceAccountName": "node-ca", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/docker/certs.d", "type": "" }, "name": "host" }, { "configMap": { "defaultMode": 420, "name": "image-registry-certificates" }, "name": "serviceca" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-03-31T03:46:11Z", "generation": 1, "labels": { "ingress.openshift.io/canary": "canary_controller" }, "name": "ingress-canary", "namespace": "openshift-ingress-canary", "resourceVersion": "11376", "uid": "b0236b0d-1a8f-4035-aee9-fc5b585502d3" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "ingresscanary.operator.openshift.io/daemonset-ingresscanary": "canary_controller" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "ingresscanary.operator.openshift.io/daemonset-ingresscanary": "canary_controller" } }, "spec": { "containers": [ { "command": [ "ingress-operator", "serve-healthcheck" ], "env": [ { "name": "TLS_CERT", "value": "/etc/tls-cert/tls.crt" }, { "name": "TLS_KEY", "value": "/etc/tls-cert/tls.key" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e84cb128d930bd1ab867cc89b7b7bf2b2c0e41105ab93b5381069945b3ee9c57", "imagePullPolicy": "IfNotPresent", "name": "serve-healthcheck-canary", "ports": [ { "containerPort": 8443, "protocol": "TCP" }, { "containerPort": 8888, "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls-cert", "name": "cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "node-role.kubernetes.io/infra", "operator": "Exists" } ], "volumes": [ { "name": "cert", "secret": { "defaultMode": 272, "secretName": "canary-serving-cert" } } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "deprecated.daemonset.template.generation": "1", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-03-31T03:52:17Z", "generation": 1, "labels": { "app.kubernetes.io/name": "insights-runtime-extractor" }, "name": "insights-runtime-extractor", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "7d777fe6-74d8-41fd-80a6-ab03d9ae1ab7" } ], "resourceVersion": "11520", "uid": "23993a1f-a18a-4461-9ffe-2404bc5d9fcc" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/name": "insights-runtime-extractor" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "insights-runtime-extractor-scc", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "insights-runtime-extractor" } }, "spec": { "containers": [ { "args": [ "--secure-listen-address=:8443", "--upstream=http://127.0.0.1:8000", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca1344cb64140188b7cae7bbc51fb751566c0b0c97d5e39b5850e628032c4a5e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "insights-runtime-extractor-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "kube-rbac-proxy-cm" } ] }, { "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:25bda9d34e23ba6bc9df5cf7104bdb237269740a3a76ee025f88b34e68b7e2b5", "imagePullPolicy": "Always", "name": "exporter", "resources": { "requests": { "cpu": "10m", "memory": "200Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/data", "name": "data-volume" } ] }, { "env": [ { "name": "CONTAINER_RUNTIME_ENDPOINT", "value": "unix:///crio.sock" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bffebf689df67af02a06b97d3d9bfcfdccd597350d132171ee68f3d0ed29a3f6", "imagePullPolicy": "Always", "livenessProbe": { "exec": { "command": [ "crictl", "info" ] }, "failureThreshold": 3, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "extractor", "resources": { "requests": { "cpu": "10m", "memory": "200Mi" } }, "securityContext": { "capabilities": { "add": [ "CAP_SYS_ADMIN" ], "drop": [ "ALL" ] }, "privileged": true, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/crio.sock", "name": "crio-socket" }, { "mountPath": "/data", "name": "data-volume" } ] } ], "dnsPolicy": "ClusterFirst", "hostPID": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "insights-runtime-extractor-sa", "serviceAccountName": "insights-runtime-extractor-sa", "terminationGracePeriodSeconds": 30, "volumes": [ { "hostPath": { "path": "/run/crio/crio.sock", "type": "Socket" }, "name": "crio-socket" }, { "emptyDir": {}, "name": "data-volume" }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "kube-rbac-proxy-cm" }, { "name": "insights-runtime-extractor-tls", "secret": { "defaultMode": 420, "secretName": "insights-runtime-extractor-tls" } } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "33%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-03-31T03:54:09Z", "generation": 1, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "node-exporter", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "1.9.1" }, "name": "node-exporter", "namespace": "openshift-monitoring", "resourceVersion": "12071", "uid": "d0e0e1b3-805d-4bee-9759-02bc335fda87" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/name": "node-exporter", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "kubectl.kubernetes.io/default-container": "node-exporter", "openshift.io/required-scc": "node-exporter", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "node-exporter", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "1.9.1" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--web.listen-address=127.0.0.1:9100", "--path.sysfs=/host/sys", "--path.rootfs=/host/root", "--path.udev.data=/host/root/run/udev/data", "--no-collector.wifi", "--collector.filesystem.mount-points-exclude=^/(dev|proc|sys|run/k3s/containerd/.+|var/lib/docker/.+|var/lib/kubelet/pods/.+)($|/)", "--collector.netclass.ignored-devices=^(veth.*|[a-f0-9]{15}|enP.*|ovn-k8s-mp[0-9]*|br-ex|br-int|br-ext|br[0-9]*|tun[0-9]*|cali[a-f0-9]*)$", "--collector.netdev.device-exclude=^(veth.*|[a-f0-9]{15}|enP.*|ovn-k8s-mp[0-9]*|br-ex|br-int|br-ext|br[0-9]*|tun[0-9]*|cali[a-f0-9]*)$", "--collector.cpu.info", "--collector.textfile.directory=/var/node_exporter/textfile", "--no-collector.btrfs", "--runtime.gomaxprocs=0", "--no-collector.cpufreq", "--no-collector.tcpstat", "--collector.netdev", "--collector.netclass", "--collector.netclass.netlink", "--no-collector.buddyinfo", "--no-collector.mountstats", "--no-collector.ksmd", "--no-collector.processes", "--no-collector.systemd" ], "command": [ "/bin/sh", "-c", "export GOMAXPROCS=4\n# We don't take CPU affinity into account as the container doesn't have integer CPU requests.\n# In case of error, fallback to the default value.\nNUM_CPUS=$(grep -c '^processor' \"/proc/cpuinfo\" 2\u003e/dev/null || echo \"0\")\nif [ \"$NUM_CPUS\" -lt \"$GOMAXPROCS\" ]; then\n export GOMAXPROCS=\"$NUM_CPUS\"\nfi\necho \"ts=$(date --iso-8601=seconds) num_cpus=$NUM_CPUS gomaxprocs=$GOMAXPROCS\"\nexec /bin/node_exporter \"$0\" \"$@\"\n" ], "env": [ { "name": "DBUS_SYSTEM_BUS_ADDRESS", "value": "unix:path=/host/root/var/run/dbus/system_bus_socket" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bc107371c693a3a4b940362c4effe0059add81b28544580c7f06d62c2c6e3425", "imagePullPolicy": "IfNotPresent", "name": "node-exporter", "resources": { "requests": { "cpu": "8m", "memory": "32Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/host/sys", "mountPropagation": "HostToContainer", "name": "sys", "readOnly": true }, { "mountPath": "/host/root", "mountPropagation": "HostToContainer", "name": "root", "readOnly": true }, { "mountPath": "/var/node_exporter/textfile", "name": "node-exporter-textfile", "readOnly": true }, { "mountPath": "/var/node_exporter/accelerators_collector_config", "name": "node-exporter-accelerators-collector-config", "readOnly": true } ], "workingDir": "/var/node_exporter/textfile" }, { "args": [ "--secure-listen-address=[$(IP)]:9100", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:9100/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "env": [ { "name": "IP", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "status.podIP" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca1344cb64140188b7cae7bbc51fb751566c0b0c97d5e39b5850e628032c4a5e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9100, "hostPort": 9100, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "node-exporter-tls" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca" }, { "mountPath": "/etc/kube-rbac-policy", "name": "node-exporter-kube-rbac-proxy-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "hostPID": true, "initContainers": [ { "command": [ "/bin/sh", "-c", "[[ ! -d /node_exporter/collectors/init ]] || find /node_exporter/collectors/init -perm /111 -type f -exec {} \\;" ], "env": [ { "name": "TMPDIR", "value": "/tmp" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bc107371c693a3a4b940362c4effe0059add81b28544580c7f06d62c2c6e3425", "imagePullPolicy": "IfNotPresent", "name": "init-textfile", "resources": { "requests": { "cpu": "1m", "memory": "1Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/node_exporter/textfile", "name": "node-exporter-textfile" }, { "mountPath": "/var/log/wtmp", "name": "node-exporter-wtmp", "readOnly": true } ], "workingDir": "/var/node_exporter/textfile" } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "node-exporter", "serviceAccountName": "node-exporter", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/sys", "type": "" }, "name": "sys" }, { "hostPath": { "path": "/", "type": "" }, "name": "root" }, { "emptyDir": {}, "name": "node-exporter-textfile" }, { "name": "node-exporter-tls", "secret": { "defaultMode": 420, "secretName": "node-exporter-tls" } }, { "hostPath": { "path": "/var/log/wtmp", "type": "File" }, "name": "node-exporter-wtmp" }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "name": "node-exporter-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "node-exporter-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "config.yaml", "path": "config.yaml" } ], "name": "node-exporter-accelerators-collector-config" }, "name": "node-exporter-accelerators-collector-config" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "kubernetes.io/description": "This daemon set launches the Multus networking component on each node.\n", "release.openshift.io/version": "4.20.8" }, "creationTimestamp": "2026-03-31T03:46:25Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "2pcf5093fb1dpqq37df3mvn2eh63vsdj" }, "name": "multus", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "80d3ee70-e7f0-4309-8094-9c9eade11a7d" } ], "resourceVersion": "10886", "uid": "969e1d87-1ba1-4dd6-aab1-b2a510553108" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "multus" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "multus", "component": "network", "openshift.io/component": "network", "type": "infra" } }, "spec": { "containers": [ { "args": [ "MULTUS_DAEMON_OPT=\"\"\n/entrypoint/cnibincopy.sh; exec /usr/src/multus-cni/bin/multus-daemon $MULTUS_DAEMON_OPT\n" ], "command": [ "/bin/bash", "-ec", "--" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/usr/src/multus-cni/rhel8/bin/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/usr/src/multus-cni/rhel9/bin/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/usr/src/multus-cni/bin/" }, { "name": "KUBERNETES_SERVICE_PORT", "value": "443" }, { "name": "KUBERNETES_SERVICE_HOST", "value": "api.kx-5bb39f5ebe.hypershift.local" }, { "name": "MULTUS_NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "K8S_NODE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5f0b67cfbbc381243fb91ccc17345b56d05f4d717c667e8c644e5bf05633ba71", "imagePullPolicy": "IfNotPresent", "name": "kube-multus", "resources": { "requests": { "cpu": "10m", "memory": "65Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/etc/os-release", "name": "os-release" }, { "mountPath": "/host/etc/cni/net.d", "name": "system-cni-dir" }, { "mountPath": "/host/run/multus/cni/net.d", "name": "multus-cni-dir" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/run/multus", "mountPropagation": "HostToContainer", "name": "multus-socket-dir-parent" }, { "mountPath": "/run/k8s.cni.cncf.io", "name": "host-run-k8s-cni-cncf-io" }, { "mountPath": "/run/netns", "mountPropagation": "HostToContainer", "name": "host-run-netns" }, { "mountPath": "/var/lib/cni/bin", "name": "host-var-lib-cni-bin" }, { "mountPath": "/var/lib/cni/multus", "name": "host-var-lib-cni-multus" }, { "mountPath": "/var/lib/kubelet", "mountPropagation": "HostToContainer", "name": "host-var-lib-kubelet" }, { "mountPath": "/hostroot", "mountPropagation": "HostToContainer", "name": "hostroot" }, { "mountPath": "/etc/cni/multus/net.d", "name": "multus-conf-dir" }, { "mountPath": "/etc/cni/net.d/multus.d", "name": "multus-daemon-config", "readOnly": true }, { "mountPath": "/etc/cni/multus/certs", "name": "host-run-multus-certs" }, { "mountPath": "/etc/kubernetes", "name": "etc-kubernetes" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "hostPID": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/kubernetes/cni/net.d", "type": "Directory" }, "name": "system-cni-dir" }, { "hostPath": { "path": "/var/run/multus/cni/net.d", "type": "Directory" }, "name": "multus-cni-dir" }, { "hostPath": { "path": "/var/lib/cni/bin", "type": "Directory" }, "name": "cnibin" }, { "hostPath": { "path": "/etc/os-release", "type": "File" }, "name": "os-release" }, { "configMap": { "defaultMode": 484, "name": "cni-copy-resources" }, "name": "cni-binary-copy" }, { "hostPath": { "path": "/run/multus", "type": "DirectoryOrCreate" }, "name": "multus-socket-dir-parent" }, { "hostPath": { "path": "/run/k8s.cni.cncf.io", "type": "" }, "name": "host-run-k8s-cni-cncf-io" }, { "hostPath": { "path": "/run/netns/", "type": "" }, "name": "host-run-netns" }, { "hostPath": { "path": "/var/lib/cni/bin", "type": "" }, "name": "host-var-lib-cni-bin" }, { "hostPath": { "path": "/var/lib/cni/multus", "type": "" }, "name": "host-var-lib-cni-multus" }, { "hostPath": { "path": "/var/lib/kubelet", "type": "" }, "name": "host-var-lib-kubelet" }, { "hostPath": { "path": "/", "type": "" }, "name": "hostroot" }, { "hostPath": { "path": "/etc/cni/multus/net.d", "type": "" }, "name": "multus-conf-dir" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "daemon-config.json", "path": "daemon-config.json" } ], "name": "multus-daemon-config" }, "name": "multus-daemon-config" }, { "hostPath": { "path": "/etc/cni/multus/certs", "type": "" }, "name": "host-run-multus-certs" }, { "hostPath": { "path": "/etc/kubernetes", "type": "" }, "name": "etc-kubernetes" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "kubernetes.io/description": "This daemon installs and configures auxiliary CNI plugins on each node.\n", "release.openshift.io/version": "4.20.8" }, "creationTimestamp": "2026-03-31T03:46:25Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "2pcf5093fb1dpqq37df3mvn2eh63vsdj" }, "name": "multus-additional-cni-plugins", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "80d3ee70-e7f0-4309-8094-9c9eade11a7d" } ], "resourceVersion": "11358", "uid": "e30a7996-de2e-401b-9cd8-607b5350a4ab" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "multus-additional-cni-plugins" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "multus-additional-cni-plugins", "component": "network", "openshift.io/component": "network", "type": "infra" } }, "spec": { "containers": [ { "args": [ "trap : TERM INT; sleep infinity \u0026 wait\n" ], "command": [ "/bin/bash", "-ec", "--" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5f0b67cfbbc381243fb91ccc17345b56d05f4d717c667e8c644e5bf05633ba71", "imagePullPolicy": "IfNotPresent", "name": "kube-multus-additional-cni-plugins", "resources": { "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "initContainers": [ { "command": [ "/entrypoint/cnibincopy.sh" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/usr/src/egress-router-cni/rhel8/bin/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/usr/src/egress-router-cni/rhel9/bin/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/usr/src/egress-router-cni/bin/" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2e564f336c77116053f34d4201d364d8da04e789cfffa0ea422574c95f2d6404", "imagePullPolicy": "IfNotPresent", "name": "egress-router-binary-copy", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/os-release", "name": "os-release", "readOnly": true } ] }, { "command": [ "/bin/bash", "-c", "/entrypoint/cnibincopy.sh \u0026\u0026 cp -n /sysctls/allowlist.conf /host/etc/cni/tuning/" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/usr/src/plugins/rhel8/bin/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/usr/src/plugins/rhel9/bin/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/usr/src/plugins/bin/" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2e57e192c3c1240fd935dcd55c8fde5e70e78bf81d6176c96edf21fafe59f8ba", "imagePullPolicy": "IfNotPresent", "name": "cni-plugins", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/os-release", "name": "os-release", "readOnly": true }, { "mountPath": "/host/etc/cni/tuning/", "name": "tuning-conf-dir" }, { "mountPath": "/sysctls", "name": "cni-sysctl-allowlist" } ] }, { "command": [ "/entrypoint/cnibincopy.sh" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/bondcni/rhel8/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/bondcni/rhel9/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/bondcni/rhel9/" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d3209a996e5ce362136e70a0bcf06d89973905de73e234b644d8ae8886d067f1", "imagePullPolicy": "IfNotPresent", "name": "bond-cni-plugin", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/os-release", "name": "os-release", "readOnly": true } ] }, { "command": [ "/entrypoint/cnibincopy.sh" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/usr/src/route-override/rhel8/bin/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/usr/src/route-override/rhel9/bin/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/usr/src/route-override/bin/" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ef2bfb546cd8aac31b7671585f718f44b268ed43a9c8562016ab741558a7dfa1", "imagePullPolicy": "IfNotPresent", "name": "routeoverride-cni", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/os-release", "name": "os-release", "readOnly": true } ] }, { "command": [ "/entrypoint/cnibincopy.sh" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/usr/src/whereabouts/rhel8/bin/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/usr/src/whereabouts/rhel9/bin/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/usr/src/whereabouts/bin/" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:fac526ab9335a9a8decb028a30673f4ae718deae8da114f36103b6438ba6458f", "imagePullPolicy": "IfNotPresent", "name": "whereabouts-cni-bincopy", "resources": { "requests": { "cpu": "10m", "memory": "10Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/os-release", "name": "os-release", "readOnly": true } ] }, { "command": [ "/bin/sh", "-c", "#!/bin/sh\n\nset -u -e\n\nCNI_BIN_DIR=${CNI_BIN_DIR:-\"/host/opt/cni/bin/\"}\nWHEREABOUTS_KUBECONFIG_FILE_HOST=${WHEREABOUTS_KUBECONFIG_FILE_HOST:-\"/etc/cni/net.d/whereabouts.d/whereabouts.kubeconfig\"}\nCNI_CONF_DIR=${CNI_CONF_DIR:-\"/host/etc/kubernetes/cni/net.d\"}\nWHEREABOUTS_RECONCILER_CRON=${WHEREABOUTS_RECONCILER_CRON:-30 4 * * *}\n\n# Make a whereabouts.d directory (for our kubeconfig)\n\nmkdir -p $CNI_CONF_DIR/whereabouts.d\nWHEREABOUTS_KUBECONFIG=$CNI_CONF_DIR/whereabouts.d/whereabouts.kubeconfig\nWHEREABOUTS_CONF_FILE=$CNI_CONF_DIR/whereabouts.d/whereabouts.conf\nWHEREABOUTS_KUBECONFIG_LITERAL=$(echo \"$WHEREABOUTS_KUBECONFIG\" | sed -e s'|/host||')\n\n# Write the nodename to the whereabouts.d directory for standardized hostname reference across cloud providers\necho $NODENAME \u003e $CNI_CONF_DIR/whereabouts.d/nodename\n\nSERVICE_ACCOUNT_PATH=/var/run/secrets/kubernetes.io/serviceaccount\nKUBE_CA_FILE=${KUBE_CA_FILE:-$SERVICE_ACCOUNT_PATH/ca.crt}\nSERVICE_ACCOUNT_TOKEN=$(cat $SERVICE_ACCOUNT_PATH/token)\nSERVICE_ACCOUNT_TOKEN_PATH=$SERVICE_ACCOUNT_PATH/token\nSKIP_TLS_VERIFY=${SKIP_TLS_VERIFY:-false}\n\n\nfunction log()\n{\n echo \"$(date -Iseconds) ${1}\"\n}\n\nfunction error()\n{\n log \"ERR: {$1}\"\n}\n\nfunction warn()\n{\n log \"WARN: {$1}\"\n}\n\n\nfunction generateKubeConfig {\n# Check if we're running as a k8s pod.\nif [ -f \"$SERVICE_ACCOUNT_PATH/token\" ]; then\n # We're running as a k8d pod - expect some variables.\n if [ -z ${KUBERNETES_SERVICE_HOST} ]; then\n error \"KUBERNETES_SERVICE_HOST not set\"; exit 1;\n fi\n if [ -z ${KUBERNETES_SERVICE_PORT} ]; then\n error \"KUBERNETES_SERVICE_PORT not set\"; exit 1;\n fi\n\n if [ \"$SKIP_TLS_VERIFY\" == \"true\" ]; then\n TLS_CFG=\"insecure-skip-tls-verify: true\"\n elif [ -f \"$KUBE_CA_FILE\" ]; then\n TLS_CFG=\"certificate-authority-data: $(cat $KUBE_CA_FILE | base64 | tr -d '\\n')\"\n fi\n\n # Kubernetes service address must be wrapped if it is IPv6 address\n KUBERNETES_SERVICE_HOST_WRAP=$KUBERNETES_SERVICE_HOST\n if [ \"$KUBERNETES_SERVICE_HOST_WRAP\" != \"${KUBERNETES_SERVICE_HOST_WRAP#*:[0-9a-fA-F]}\" ]; then\n KUBERNETES_SERVICE_HOST_WRAP=\\[$KUBERNETES_SERVICE_HOST_WRAP\\]\n fi\n\n # Write a kubeconfig file for the CNI plugin. Do this\n # to skip TLS verification for now. We should eventually support\n # writing more complete kubeconfig files. This is only used\n # if the provided CNI network config references it.\n touch $WHEREABOUTS_KUBECONFIG\n chmod ${KUBECONFIG_MODE:-600} $WHEREABOUTS_KUBECONFIG\n cat \u003e $WHEREABOUTS_KUBECONFIG \u003c\u003cEOF\n# Kubeconfig file for the Whereabouts CNI plugin.\napiVersion: v1\nkind: Config\nclusters:\n- name: local\n cluster:\n server: ${KUBERNETES_SERVICE_PROTOCOL:-https}://${KUBERNETES_SERVICE_HOST_WRAP}:${KUBERNETES_SERVICE_PORT}\n $TLS_CFG\nusers:\n- name: whereabouts\n user:\n token: \"${SERVICE_ACCOUNT_TOKEN}\"\ncontexts:\n- name: whereabouts-context\n context:\n cluster: local\n user: whereabouts\n namespace: ${WHEREABOUTS_NAMESPACE}\ncurrent-context: whereabouts-context\nEOF\n\n# Copy the config from ConfigMap to the desired directory\ncp /etc/whereabouts/config/whereabouts.conf $WHEREABOUTS_CONF_FILE\nchmod 600 $WHEREABOUTS_CONF_FILE\n\nelse\n warn \"Doesn't look like we're running in a kubernetes environment (no serviceaccount token)\"\nfi\n\n}\n\nfunction generateWhereaboutsConf {\n\n touch $WHEREABOUTS_CONF_FILE\n chmod ${KUBECONFIG_MODE:-600} $WHEREABOUTS_CONF_FILE\n cat \u003e $WHEREABOUTS_CONF_FILE \u003c\u003cEOF\n{\n \"datastore\": \"kubernetes\",\n \"kubernetes\": {\n \"kubeconfig\": \"${WHEREABOUTS_KUBECONFIG_LITERAL}\"\n },\n \"reconciler_cron_expression\": \"${WHEREABOUTS_RECONCILER_CRON}\"\n}\nEOF\n\n}\n\ngenerateKubeConfig\n# ------------------ end Generate a \"kube-config\"\n\n# ----------------- Generate a whereabouts conf\n# removed because we have the configmap\n#generateWhereaboutsConf\n# ---------------- End generate a whereabouts conf\n\n\n# copy whereabouts to the cni bin dir\n# SKIPPED DUE TO FIPS COPY.\n# cp -f /whereabouts $CNI_BIN_DIR\n\n# ---------------------- end generate a \"kube-config\".\n\n# Unless told otherwise, sleep forever.\n# This prevents Kubernetes from restarting the pod repeatedly.\nshould_sleep=${SLEEP:-\"true\"}\necho \"Done configuring CNI. Sleep=$should_sleep\"\nwhile [ \"$should_sleep\" == \"true\" ]; do\n sleep 1000000000000\ndone\n" ], "env": [ { "name": "NODENAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "KUBERNETES_SERVICE_PORT", "value": "443" }, { "name": "KUBERNETES_SERVICE_HOST", "value": "api.kx-5bb39f5ebe.hypershift.local" }, { "name": "CNI_BIN_DIR", "value": "/host/opt/cni/bin/" }, { "name": "CNI_CONF_DIR", "value": "/host/etc/cni/net.d" }, { "name": "SLEEP", "value": "false" }, { "name": "WHEREABOUTS_NAMESPACE", "value": "openshift-multus" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:fac526ab9335a9a8decb028a30673f4ae718deae8da114f36103b6438ba6458f", "imagePullPolicy": "IfNotPresent", "name": "whereabouts-cni", "resources": { "requests": { "cpu": "10m", "memory": "10Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/cni/net.d", "name": "system-cni-dir" }, { "mountPath": "/etc/whereabouts/config", "name": "whereabouts-flatfile-configmap" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "multus-ancillary-tools", "serviceAccountName": "multus-ancillary-tools", "terminationGracePeriodSeconds": 10, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/kubernetes/cni/net.d", "type": "" }, "name": "system-cni-dir" }, { "hostPath": { "path": "/var/run/multus/cni/net.d", "type": "" }, "name": "multus-cni-dir" }, { "hostPath": { "path": "/var/lib/cni/bin", "type": "" }, "name": "cnibin" }, { "hostPath": { "path": "/etc/os-release", "type": "File" }, "name": "os-release" }, { "configMap": { "defaultMode": 484, "name": "cni-copy-resources" }, "name": "cni-binary-copy" }, { "hostPath": { "path": "/etc/cni/tuning/", "type": "DirectoryOrCreate" }, "name": "tuning-conf-dir" }, { "configMap": { "defaultMode": 484, "name": "default-cni-sysctl-allowlist" }, "name": "cni-sysctl-allowlist" }, { "configMap": { "defaultMode": 420, "name": "whereabouts-flatfile-config" }, "name": "whereabouts-flatfile-configmap" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "kubernetes.io/description": "This daemonset launches the network metrics daemon on each node\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.20.8" }, "creationTimestamp": "2026-03-31T03:46:26Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "2pcf5093fb1dpqq37df3mvn2eh63vsdj" }, "name": "network-metrics-daemon", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "80d3ee70-e7f0-4309-8094-9c9eade11a7d" } ], "resourceVersion": "11524", "uid": "92b0f9bf-01e6-418d-ae1f-697e8cf9e7e7" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "network-metrics-daemon" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "network-metrics-daemon", "component": "network", "openshift.io/component": "network", "type": "infra" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "network.operator.openshift.io/dpu-host", "operator": "DoesNotExist" }, { "key": "network.operator.openshift.io/dpu", "operator": "DoesNotExist" } ] } ] } } }, "containers": [ { "args": [ "--node-name", "$(NODE_NAME)" ], "command": [ "/usr/bin/network-metrics" ], "env": [ { "name": "NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:47154813651033d59751fb655a384dbffb64dd26f10bd7f3be0c3128d0486356", "imagePullPolicy": "IfNotPresent", "name": "network-metrics-daemon", "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--logtostderr", "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "--upstream=http://127.0.0.1:9091/", "--tls-private-key-file=/etc/metrics/tls.key", "--tls-cert-file=/etc/metrics/tls.crt" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca1344cb64140188b7cae7bbc51fb751566c0b0c97d5e39b5850e628032c4a5e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/metrics", "name": "metrics-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "metrics-daemon-sa", "serviceAccountName": "metrics-daemon-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "name": "metrics-certs", "secret": { "defaultMode": 420, "secretName": "metrics-daemon-secret" } } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "33%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "kubernetes.io/description": "This daemonset deploys the network-check-target pods that run\na dummy app to be checked by network-check-source pod\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.20.8" }, "creationTimestamp": "2026-03-31T03:46:38Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "" }, "name": "network-check-target", "namespace": "openshift-network-diagnostics", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "80d3ee70-e7f0-4309-8094-9c9eade11a7d" } ], "resourceVersion": "12868", "uid": "995664e7-381f-4b5a-84e0-74cfb11187c7" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "network-check-target" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "network-check-target", "kubernetes.io/os": "linux" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "network.operator.openshift.io/dpu-host", "operator": "DoesNotExist" }, { "key": "network.operator.openshift.io/dpu", "operator": "DoesNotExist" } ] } ] } } }, "containers": [ { "command": [ "cluster-network-check-target" ], "env": [ { "name": "K8S_NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:03cf4cd7ef1518610c6c7b3ad27d1622d82e98e3dc6e3f8e5d0fceb5c8d3786e", "imagePullPolicy": "IfNotPresent", "name": "network-check-target-container", "ports": [ { "containerPort": 8080, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "10m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "default", "serviceAccountName": "default", "terminationGracePeriodSeconds": 10, "tolerations": [ { "operator": "Exists" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "kubernetes.io/description": "This daemon set runs the iptables-alerter on each node\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.20.8" }, "creationTimestamp": "2026-03-31T03:46:41Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "2pcf5093fb1dpqq37df3mvn2eh63vsdj" }, "name": "iptables-alerter", "namespace": "openshift-network-operator", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "80d3ee70-e7f0-4309-8094-9c9eade11a7d" } ], "resourceVersion": "10901", "uid": "2d506c51-783a-45d3-9a11-13843a8a6961" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "iptables-alerter" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "iptables-alerter", "component": "network", "openshift.io/component": "network", "type": "infra" } }, "spec": { "containers": [ { "command": [ "/iptables-alerter/iptables-alerter.sh" ], "env": [ { "name": "CONTAINER_RUNTIME_ENDPOINT", "value": "unix:///run/crio/crio.sock" }, { "name": "ALERTER_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:da4f8a01ef5d0607cf76fa7b219fafdb6020cb4cf9a0a88cfe76d292c1a561fc", "imagePullPolicy": "IfNotPresent", "name": "iptables-alerter", "resources": { "limits": { "cpu": "10m" }, "requests": { "cpu": "10m", "memory": "65Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/iptables-alerter", "name": "iptables-alerter-script" }, { "mountPath": "/host", "mountPropagation": "HostToContainer", "name": "host-slash", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "hostPID": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "iptables-alerter", "serviceAccountName": "iptables-alerter", "terminationGracePeriodSeconds": 10, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 484, "name": "iptables-alerter-script" }, "name": "iptables-alerter-script" }, { "hostPath": { "path": "/", "type": "" }, "name": "host-slash" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "2", "kubernetes.io/description": "This daemonset launches the ovn-kubernetes per node networking components.\n", "networkoperator.openshift.io/cluster-network-cidr": "10.128.0.0/14", "networkoperator.openshift.io/default-masquerade-network-cidrs": "169.254.0.0/17,fd69::/112", "networkoperator.openshift.io/hybrid-overlay-status": "disabled", "networkoperator.openshift.io/ip-family-mode": "single-stack", "release.openshift.io/version": "4.20.8" }, "creationTimestamp": "2026-03-31T03:46:35Z", "generation": 2, "labels": { "networkoperator.openshift.io/generates-operator-status": "2pcf5093fb1dpqq37df3mvn2eh63vsdj" }, "name": "ovnkube-node", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "80d3ee70-e7f0-4309-8094-9c9eade11a7d" } ], "resourceVersion": "11277", "uid": "b3f15731-be89-4dec-b4eb-58c897b58095" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "ovnkube-node" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "network.operator.openshift.io/ovnkube-script-lib-hash": "e5613985658ad37a9409a6dd5ab22464e9caf8fe", "networkoperator.openshift.io/cluster-network-cidr": "10.128.0.0/14", "networkoperator.openshift.io/hybrid-overlay-status": "disabled", "networkoperator.openshift.io/ip-family-mode": "single-stack", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "ovnkube-node", "component": "network", "kubernetes.io/os": "linux", "openshift.io/component": "network", "ovn-db-pod": "true", "type": "infra" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "network.operator.openshift.io/dpu-host", "operator": "DoesNotExist" }, { "key": "network.operator.openshift.io/smart-nic", "operator": "DoesNotExist" }, { "key": "network.operator.openshift.io/dpu", "operator": "DoesNotExist" } ] } ] } } }, "containers": [ { "command": [ "/bin/bash", "-c", "set -e\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nstart-ovn-controller ${OVN_LOG_LEVEL}\n" ], "env": [ { "name": "OVN_LOG_LEVEL", "value": "info" }, { "name": "K8S_NODE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1a2532940843248c57d52141185dd71fbc393ab28b65d48f682038632c1dbbad", "imagePullPolicy": "IfNotPresent", "name": "ovn-controller", "resources": { "requests": { "cpu": "10m", "memory": "300Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/run/openvswitch", "name": "run-openvswitch" }, { "mountPath": "/run/ovn/", "name": "run-ovn" }, { "mountPath": "/etc/openvswitch", "name": "etc-openvswitch" }, { "mountPath": "/etc/ovn/", "name": "etc-openvswitch" }, { "mountPath": "/var/lib/openvswitch", "name": "var-lib-openvswitch" }, { "mountPath": "/env", "name": "env-overrides" }, { "mountPath": "/var/log/ovn/", "name": "node-log" }, { "mountPath": "/dev/log", "name": "log-socket" } ] }, { "command": [ "/bin/bash", "-c", "set -euo pipefail\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nstart-audit-log-rotation\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1a2532940843248c57d52141185dd71fbc393ab28b65d48f682038632c1dbbad", "imagePullPolicy": "IfNotPresent", "name": "ovn-acl-logging", "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/var/log/ovn/", "name": "node-log" }, { "mountPath": "/run/ovn/", "name": "run-ovn" } ] }, { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -euo pipefail\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nstart-rbac-proxy-node ovn-node-metrics 9103 29103 /etc/pki/tls/metrics-cert/tls.key /etc/pki/tls/metrics-cert/tls.crt\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca1344cb64140188b7cae7bbc51fb751566c0b0c97d5e39b5850e628032c4a5e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-node", "ports": [ { "containerPort": 9103, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/etc/pki/tls/metrics-cert", "name": "ovn-node-metrics-cert", "readOnly": true } ] }, { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -euo pipefail\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nstart-rbac-proxy-node ovn-metrics 9105 29105 /etc/pki/tls/metrics-cert/tls.key /etc/pki/tls/metrics-cert/tls.crt\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca1344cb64140188b7cae7bbc51fb751566c0b0c97d5e39b5850e628032c4a5e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-ovn-metrics", "ports": [ { "containerPort": 9105, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/etc/pki/tls/metrics-cert", "name": "ovn-node-metrics-cert", "readOnly": true } ] }, { "command": [ "/bin/bash", "-c", "set -xem\nif [[ -f /env/_master ]]; then\n set -o allexport\n source /env/_master\n set +o allexport\nfi\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\n\ntrap quit-ovn-northd TERM INT\nstart-ovn-northd \"${OVN_LOG_LEVEL}\"\n" ], "env": [ { "name": "OVN_LOG_LEVEL", "value": "info" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1a2532940843248c57d52141185dd71fbc393ab28b65d48f682038632c1dbbad", "imagePullPolicy": "IfNotPresent", "name": "northd", "resources": { "requests": { "cpu": "10m", "memory": "300Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/etc/ovn", "name": "etc-openvswitch" }, { "mountPath": "/var/log/ovn", "name": "node-log" }, { "mountPath": "/run/ovn/", "name": "run-ovn" }, { "mountPath": "/env", "name": "env-overrides" } ] }, { "command": [ "/bin/bash", "-c", "set -xem\nif [[ -f /env/_master ]]; then\n set -o allexport\n source /env/_master\n set +o allexport\nfi\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\n\ntrap quit-nbdb TERM INT\nstart-nbdb ${OVN_LOG_LEVEL}\n" ], "env": [ { "name": "OVN_LOG_LEVEL", "value": "info" }, { "name": "K8S_NODE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1a2532940843248c57d52141185dd71fbc393ab28b65d48f682038632c1dbbad", "imagePullPolicy": "IfNotPresent", "lifecycle": { "postStart": { "exec": { "command": [ "/bin/bash", "-c", "set -x\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nnbdb-post-start 5000\n" ] } } }, "name": "nbdb", "readinessProbe": { "exec": { "command": [ "/bin/bash", "-c", "set -xeo pipefail\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\novndb-readiness-probe \"nb\"\n" ] }, "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "10m", "memory": "300Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/etc/ovn/", "name": "etc-openvswitch" }, { "mountPath": "/var/log/ovn", "name": "node-log" }, { "mountPath": "/run/ovn/", "name": "run-ovn" }, { "mountPath": "/env", "name": "env-overrides" } ] }, { "command": [ "/bin/bash", "-c", "set -xem\nif [[ -f /env/_master ]]; then\n set -o allexport\n source /env/_master\n set +o allexport\nfi\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\n\ntrap quit-sbdb TERM INT\nstart-sbdb ${OVN_LOG_LEVEL}\n" ], "env": [ { "name": "OVN_LOG_LEVEL", "value": "info" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1a2532940843248c57d52141185dd71fbc393ab28b65d48f682038632c1dbbad", "imagePullPolicy": "IfNotPresent", "lifecycle": { "postStart": { "exec": { "command": [ "/bin/bash", "-c", "set -x\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nsbdb-post-start\n" ] } } }, "name": "sbdb", "readinessProbe": { "exec": { "command": [ "/bin/bash", "-c", "set -xeo pipefail\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\novndb-readiness-probe \"sb\"\n" ] }, "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "10m", "memory": "300Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/etc/ovn/", "name": "etc-openvswitch" }, { "mountPath": "/run/ovn/", "name": "run-ovn" }, { "mountPath": "/var/log/ovn", "name": "node-log" }, { "mountPath": "/env", "name": "env-overrides" } ] }, { "command": [ "/bin/bash", "-c", "set -xe\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nstart-ovnkube-node ${OVN_KUBE_LOG_LEVEL} 29103 29105\n" ], "env": [ { "name": "KUBERNETES_SERVICE_PORT", "value": "443" }, { "name": "KUBERNETES_SERVICE_HOST", "value": "api.kx-5bb39f5ebe.hypershift.local" }, { "name": "OVN_CONTROLLER_INACTIVITY_PROBE", "value": "180000" }, { "name": "OVN_KUBE_LOG_LEVEL", "value": "4" }, { "name": "OVN_NODE_MODE", "value": "full" }, { "name": "K8S_NODE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1a2532940843248c57d52141185dd71fbc393ab28b65d48f682038632c1dbbad", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "rm", "-f", "/etc/cni/net.d/10-ovn-kubernetes.conf" ] } } }, "name": "ovnkube-controller", "ports": [ { "containerPort": 29105, "name": "ovnmetrics-port", "protocol": "TCP" } ], "readinessProbe": { "exec": { "command": [ "test", "-f", "/etc/cni/net.d/10-ovn-kubernetes.conf" ] }, "failureThreshold": 3, "initialDelaySeconds": 5, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "600Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/var/lib/kubelet", "mountPropagation": "HostToContainer", "name": "host-kubelet", "readOnly": true }, { "mountPath": "/etc/systemd/system", "name": "systemd-units", "readOnly": true }, { "mountPath": "/host", "mountPropagation": "HostToContainer", "name": "host-slash", "readOnly": true }, { "mountPath": "/run/ovn-kubernetes/", "name": "host-run-ovn-kubernetes" }, { "mountPath": "/run/netns", "mountPropagation": "HostToContainer", "name": "host-run-netns", "readOnly": true }, { "mountPath": "/run/systemd/private", "mountPropagation": "HostToContainer", "name": "run-systemd", "readOnly": true, "subPath": "private" }, { "mountPath": "/cni-bin-dir", "name": "host-cni-bin" }, { "mountPath": "/etc/cni/net.d", "name": "host-cni-netd" }, { "mountPath": "/var/lib/cni/networks/ovn-k8s-cni-overlay", "name": "host-var-lib-cni-networks-ovn-kubernetes" }, { "mountPath": "/run/openvswitch", "name": "run-openvswitch" }, { "mountPath": "/var/log/ovnkube/", "name": "etc-openvswitch" }, { "mountPath": "/run/ovn/", "name": "run-ovn" }, { "mountPath": "/etc/openvswitch", "name": "etc-openvswitch" }, { "mountPath": "/etc/ovn/", "name": "etc-openvswitch" }, { "mountPath": "/var/lib/openvswitch", "name": "var-lib-openvswitch" }, { "mountPath": "/run/ovnkube-config/", "name": "ovnkube-config" }, { "mountPath": "/env", "name": "env-overrides" } ] } ], "dnsPolicy": "Default", "hostNetwork": true, "hostPID": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "ovn-kubernetes-node", "serviceAccountName": "ovn-kubernetes-node", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet", "type": "" }, "name": "host-kubelet" }, { "hostPath": { "path": "/etc/systemd/system", "type": "" }, "name": "systemd-units" }, { "hostPath": { "path": "/", "type": "" }, "name": "host-slash" }, { "hostPath": { "path": "/run/netns", "type": "" }, "name": "host-run-netns" }, { "hostPath": { "path": "/run/systemd", "type": "" }, "name": "run-systemd" }, { "hostPath": { "path": "/var/lib/openvswitch/data", "type": "" }, "name": "var-lib-openvswitch" }, { "hostPath": { "path": "/var/lib/ovn-ic/etc", "type": "" }, "name": "etc-openvswitch" }, { "hostPath": { "path": "/var/run/openvswitch", "type": "" }, "name": "run-openvswitch" }, { "hostPath": { "path": "/var/run/ovn-ic", "type": "" }, "name": "run-ovn" }, { "hostPath": { "path": "/var/log/ovn", "type": "" }, "name": "node-log" }, { "hostPath": { "path": "/dev/log", "type": "" }, "name": "log-socket" }, { "hostPath": { "path": "/run/ovn-kubernetes", "type": "" }, "name": "host-run-ovn-kubernetes" }, { "hostPath": { "path": "/var/lib/cni/bin", "type": "" }, "name": "host-cni-bin" }, { "hostPath": { "path": "/var/run/multus/cni/net.d", "type": "" }, "name": "host-cni-netd" }, { "hostPath": { "path": "/var/lib/cni/networks/ovn-k8s-cni-overlay", "type": "" }, "name": "host-var-lib-cni-networks-ovn-kubernetes" }, { "configMap": { "defaultMode": 420, "name": "ovnkube-config" }, "name": "ovnkube-config" }, { "configMap": { "defaultMode": 420, "name": "env-overrides", "optional": true }, "name": "env-overrides" }, { "name": "ovn-node-metrics-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "ovn-node-metrics-cert" } }, { "configMap": { "defaultMode": 484, "name": "ovnkube-script-lib" }, "name": "ovnkube-script-lib" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 2, "updatedNumberScheduled": 3 } } ], "kind": "List", "metadata": { "resourceVersion": "" } }