{ "apiVersion": "v1", "items": [ { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/ibm-cloud-managed": "true" }, "creationTimestamp": "2026-04-23T19:23:51Z", "generation": 1, "labels": { "name": "cluster-samples-operator", "pod-template-hash": "67f4d568c7" }, "name": "cluster-samples-operator-67f4d568c7", "namespace": "openshift-cluster-samples-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-samples-operator", "uid": "fec067d2-871e-48c4-94ad-48e333e6df75" } ], "resourceVersion": "10923", "uid": "cf1ee38a-ffba-45ea-b4a2-562097501417" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "cluster-samples-operator", "pod-template-hash": "67f4d568c7" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "name": "cluster-samples-operator", "pod-template-hash": "67f4d568c7" } }, "spec": { "containers": [ { "command": [ "cluster-samples-operator" ], "env": [ { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "OPERATOR_NAME", "value": "cluster-samples-operator" }, { "name": "RELEASE_VERSION", "value": "4.21.9" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e8b96d9318b3b8c9ed0afe4e6381f635c6b0c2f20772044ac68001ed49af2c87", "imagePullPolicy": "IfNotPresent", "name": "cluster-samples-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/secrets", "name": "samples-operator-tls" } ] }, { "args": [ "--namespace=openshift-cluster-samples-operator", "--process-name=cluster-samples-operator", "--termination-grace-period=30s", "--files=/etc/secrets/tls.crt,/etc/secrets/tls.key" ], "command": [ "cluster-samples-operator-watch", "file-watcher-watchdog" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e8b96d9318b3b8c9ed0afe4e6381f635c6b0c2f20772044ac68001ed49af2c87", "imagePullPolicy": "IfNotPresent", "name": "cluster-samples-operator-watch", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cluster-samples-operator", "serviceAccountName": "cluster-samples-operator", "shareProcessNamespace": true, "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "samples-operator-tls", "secret": { "defaultMode": 420, "secretName": "samples-operator-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "b4300ea187330bbe4e81fcf254daa0b3d3010a5e7ad117a75ba412a6061b411e" }, "creationTimestamp": "2026-04-23T19:23:48Z", "generation": 1, "labels": { "name": "volume-data-source-validator", "openshift.storage.network-policy.api-server": "allow", "openshift.storage.network-policy.dns": "allow", "pod-template-hash": "6944588dcc" }, "name": "volume-data-source-validator-6944588dcc", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "volume-data-source-validator", "uid": "cefe6679-1d18-4b7a-b3bd-af67479a90d8" } ], "resourceVersion": "10250", "uid": "522d508b-8925-460c-b6d5-fa872785483d" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "volume-data-source-validator", "pod-template-hash": "6944588dcc" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "name": "volume-data-source-validator", "openshift.storage.network-policy.api-server": "allow", "openshift.storage.network-policy.dns": "allow", "pod-template-hash": "6944588dcc" } }, "spec": { "containers": [ { "args": [ "--v=2", "--http-endpoint=127.0.0.1:8443", "--leader-election=true", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-storage-operator" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3bba1358d4a0ae878ff491c0c2cbfffe60649e110b40342b878fe8fa332f8858", "imagePullPolicy": "IfNotPresent", "name": "volume-data-source-validator", "ports": [ { "containerPort": 8443, "name": "validator-http", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "volume-data-source-validator", "serviceAccountName": "volume-data-source-validator", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "config.openshift.io/inject-proxy": "console-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true" }, "creationTimestamp": "2026-04-23T19:23:53Z", "generation": 1, "labels": { "name": "console-operator", "pod-template-hash": "66dbbb6468" }, "name": "console-operator-66dbbb6468", "namespace": "openshift-console-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console-operator", "uid": "d38b255d-0442-4aaa-9ae7-ded5f354320c" } ], "resourceVersion": "10932", "uid": "65506375-a705-4a98-80da-0df0ba3b1734" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "console-operator", "pod-template-hash": "66dbbb6468" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "name": "console-operator", "pod-template-hash": "66dbbb6468" } }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/controller-config.yaml" ], "command": [ "console", "operator" ], "env": [ { "name": "CONSOLE_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6c6d412ccf0c3d6a14645a79df6c4658c0f8725d7954cb83c3d2f0116499345a" }, { "name": "DOWNLOADS_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:23204877f166455ce8f9de9b91a467eeda576f172d5f96124a68aa986c4775d6" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.21.9" }, { "name": "OPERATOR_NAME", "value": "console-operator" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:682fa6318f393db679ed7d255426ac22aca6a61dc3ad9452161b72375e029930", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "console-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca" } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console-operator", "serviceAccountName": "console-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "console-operator-config" }, "name": "config" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca" }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "10827", "console.openshift.io/console-config-version": "12461", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6c6d412ccf0c3d6a14645a79df6c4658c0f8725d7954cb83c3d2f0116499345a", "console.openshift.io/infrastructure-config-version": "1452", "console.openshift.io/oauth-secret-version": "10832", "console.openshift.io/proxy-config-version": "1462", "console.openshift.io/service-ca-config-version": "11325", "console.openshift.io/trusted-ca-config-version": "11393", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "4", "operator.openshift.io/spec-hash": "5b7de4f193af56b7d53c64423e0e141dc5479de1c7fc998398749e85d20fdf98" }, "creationTimestamp": "2026-04-23T19:33:39Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "6457b7df48" }, "name": "console-6457b7df48", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "0116651a-f567-4e92-ad4b-5bfe7a3e4174" } ], "resourceVersion": "13843", "uid": "dc997f0a-59ad-467e-bab5-f0c580b4ff78" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "6457b7df48" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "10827", "console.openshift.io/console-config-version": "12461", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6c6d412ccf0c3d6a14645a79df6c4658c0f8725d7954cb83c3d2f0116499345a", "console.openshift.io/infrastructure-config-version": "1452", "console.openshift.io/oauth-secret-version": "10832", "console.openshift.io/proxy-config-version": "1462", "console.openshift.io/service-ca-config-version": "11325", "console.openshift.io/trusted-ca-config-version": "11393", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app": "console", "component": "ui", "pod-template-hash": "6457b7df48" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6c6d412ccf0c3d6a14645a79df6c4658c0f8725d7954cb83c3d2f0116499345a", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "10827", "console.openshift.io/console-config-version": "12046", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6c6d412ccf0c3d6a14645a79df6c4658c0f8725d7954cb83c3d2f0116499345a", "console.openshift.io/infrastructure-config-version": "1452", "console.openshift.io/oauth-secret-version": "10832", "console.openshift.io/proxy-config-version": "1462", "console.openshift.io/service-ca-config-version": "11325", "console.openshift.io/trusted-ca-config-version": "11393", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "3", "operator.openshift.io/spec-hash": "4dc5e88780976fa0c4b82a713b7ab7af9baa40ad543d0952156bca7bad939988" }, "creationTimestamp": "2026-04-23T19:33:31Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "6685b4cb5f" }, "name": "console-6685b4cb5f", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "0116651a-f567-4e92-ad4b-5bfe7a3e4174" } ], "resourceVersion": "13270", "uid": "10ca4b87-15b8-4d76-8869-8158a47e93f5" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "6685b4cb5f" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "10827", "console.openshift.io/console-config-version": "12046", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6c6d412ccf0c3d6a14645a79df6c4658c0f8725d7954cb83c3d2f0116499345a", "console.openshift.io/infrastructure-config-version": "1452", "console.openshift.io/oauth-secret-version": "10832", "console.openshift.io/proxy-config-version": "1462", "console.openshift.io/service-ca-config-version": "11325", "console.openshift.io/trusted-ca-config-version": "11393", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app": "console", "component": "ui", "pod-template-hash": "6685b4cb5f" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6c6d412ccf0c3d6a14645a79df6c4658c0f8725d7954cb83c3d2f0116499345a", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "10827", "console.openshift.io/console-config-version": "11313", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6c6d412ccf0c3d6a14645a79df6c4658c0f8725d7954cb83c3d2f0116499345a", "console.openshift.io/infrastructure-config-version": "1452", "console.openshift.io/oauth-secret-version": "10832", "console.openshift.io/proxy-config-version": "1462", "console.openshift.io/service-ca-config-version": "11325", "console.openshift.io/trusted-ca-config-version": "11393", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "2", "operator.openshift.io/spec-hash": "ce0c24d5fb08f3934233b2e9b145ccb5ca8d9b827f22d4e59ff57d9b838ffeb5" }, "creationTimestamp": "2026-04-23T19:33:19Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "6d5b8d6f87" }, "name": "console-6d5b8d6f87", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "0116651a-f567-4e92-ad4b-5bfe7a3e4174" } ], "resourceVersion": "12524", "uid": "b12c3a8c-223a-4745-ad4c-8e7c2e0074c9" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "6d5b8d6f87" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "10827", "console.openshift.io/console-config-version": "11313", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6c6d412ccf0c3d6a14645a79df6c4658c0f8725d7954cb83c3d2f0116499345a", "console.openshift.io/infrastructure-config-version": "1452", "console.openshift.io/oauth-secret-version": "10832", "console.openshift.io/proxy-config-version": "1462", "console.openshift.io/service-ca-config-version": "11325", "console.openshift.io/trusted-ca-config-version": "11393", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app": "console", "component": "ui", "pod-template-hash": "6d5b8d6f87" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6c6d412ccf0c3d6a14645a79df6c4658c0f8725d7954cb83c3d2f0116499345a", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "10827", "console.openshift.io/console-config-version": "15528", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6c6d412ccf0c3d6a14645a79df6c4658c0f8725d7954cb83c3d2f0116499345a", "console.openshift.io/infrastructure-config-version": "1452", "console.openshift.io/oauth-secret-version": "10832", "console.openshift.io/proxy-config-version": "1462", "console.openshift.io/service-ca-config-version": "11325", "console.openshift.io/trusted-ca-config-version": "11393", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "6", "operator.openshift.io/spec-hash": "607fec12b0b81f0abb051f0c797fe1e7d26cb16330a9a235edfd7f69baba2e84" }, "creationTimestamp": "2026-04-23T19:38:54Z", "generation": 1, "labels": { "app": "console", "component": "ui", "pod-template-hash": "75fd4676b7" }, "name": "console-75fd4676b7", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "0116651a-f567-4e92-ad4b-5bfe7a3e4174" } ], "resourceVersion": "15788", "uid": "a9f99e2b-1595-4fa1-8c60-24aa47ed8078" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "75fd4676b7" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "10827", "console.openshift.io/console-config-version": "15528", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6c6d412ccf0c3d6a14645a79df6c4658c0f8725d7954cb83c3d2f0116499345a", "console.openshift.io/infrastructure-config-version": "1452", "console.openshift.io/oauth-secret-version": "10832", "console.openshift.io/proxy-config-version": "1462", "console.openshift.io/service-ca-config-version": "11325", "console.openshift.io/trusted-ca-config-version": "11393", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app": "console", "component": "ui", "pod-template-hash": "75fd4676b7" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6c6d412ccf0c3d6a14645a79df6c4658c0f8725d7954cb83c3d2f0116499345a", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "10827", "console.openshift.io/console-config-version": "11313", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6c6d412ccf0c3d6a14645a79df6c4658c0f8725d7954cb83c3d2f0116499345a", "console.openshift.io/infrastructure-config-version": "1452", "console.openshift.io/oauth-secret-version": "10832", "console.openshift.io/proxy-config-version": "1462", "console.openshift.io/service-ca-config-version": "11318", "console.openshift.io/trusted-ca-config-version": "11324", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "031ef446757dec9f08f365d481da18db963255ec2222f3c5137c950ad20f5912" }, "creationTimestamp": "2026-04-23T19:33:17Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "7bc8874b7d" }, "name": "console-7bc8874b7d", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "0116651a-f567-4e92-ad4b-5bfe7a3e4174" } ], "resourceVersion": "12096", "uid": "f9f0cb7f-daf5-4df1-9d25-feab5f8ed6e9" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "7bc8874b7d" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "10827", "console.openshift.io/console-config-version": "11313", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6c6d412ccf0c3d6a14645a79df6c4658c0f8725d7954cb83c3d2f0116499345a", "console.openshift.io/infrastructure-config-version": "1452", "console.openshift.io/oauth-secret-version": "10832", "console.openshift.io/proxy-config-version": "1462", "console.openshift.io/service-ca-config-version": "11318", "console.openshift.io/trusted-ca-config-version": "11324", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app": "console", "component": "ui", "pod-template-hash": "7bc8874b7d" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6c6d412ccf0c3d6a14645a79df6c4658c0f8725d7954cb83c3d2f0116499345a", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "10827", "console.openshift.io/console-config-version": "13238", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6c6d412ccf0c3d6a14645a79df6c4658c0f8725d7954cb83c3d2f0116499345a", "console.openshift.io/infrastructure-config-version": "1452", "console.openshift.io/oauth-secret-version": "10832", "console.openshift.io/proxy-config-version": "1462", "console.openshift.io/service-ca-config-version": "11325", "console.openshift.io/trusted-ca-config-version": "11393", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "5", "operator.openshift.io/spec-hash": "53d1b5d87e9efaa55a44d73dd45ca7b18a7bf312b1a66e18f60a11f88f4da248" }, "creationTimestamp": "2026-04-23T19:34:47Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "7bf7d4bd85" }, "name": "console-7bf7d4bd85", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "0116651a-f567-4e92-ad4b-5bfe7a3e4174" } ], "resourceVersion": "15644", "uid": "77a208a9-2838-4ac9-b009-16976a059f40" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "7bf7d4bd85" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "10827", "console.openshift.io/console-config-version": "13238", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6c6d412ccf0c3d6a14645a79df6c4658c0f8725d7954cb83c3d2f0116499345a", "console.openshift.io/infrastructure-config-version": "1452", "console.openshift.io/oauth-secret-version": "10832", "console.openshift.io/proxy-config-version": "1462", "console.openshift.io/service-ca-config-version": "11325", "console.openshift.io/trusted-ca-config-version": "11393", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app": "console", "component": "ui", "pod-template-hash": "7bf7d4bd85" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6c6d412ccf0c3d6a14645a79df6c4658c0f8725d7954cb83c3d2f0116499345a", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "185a3b66dae960130e34c2939d6c265c0e475d94afeeb90138eb4f5b8ace6ff4" }, "creationTimestamp": "2026-04-23T19:33:13Z", "generation": 1, "labels": { "app": "console", "component": "downloads", "pod-template-hash": "5c54f4944f" }, "name": "downloads-5c54f4944f", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "downloads", "uid": "4dc1cc66-87fc-47f1-a4c3-4affaef8d14f" } ], "resourceVersion": "12293", "uid": "c71394d5-ffaa-4e34-a523-669327cb0c9a" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "console", "component": "downloads", "pod-template-hash": "5c54f4944f" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app": "console", "component": "downloads", "pod-template-hash": "5c54f4944f" }, "name": "downloads" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "downloads" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "-c", "cat \u003c\u003cEOF \u003e/tmp/serve.py\nimport errno, http.server, os, re, signal, socket, sys, tarfile, tempfile, threading, time, zipfile\n\ndef shutdown_handler(signum, frame):\n print(\"Received signal {}, shutting down...\".format(signum), flush=True)\n os._exit(0)\nsignal.signal(signal.SIGTERM, shutdown_handler)\n\ndef write_index(path, message):\n with open(path, 'wb') as f:\n f.write('\\n'.join([\n '\u003c!doctype html\u003e',\n '\u003chtml lang=\"en\"\u003e',\n '\u003chead\u003e',\n ' \u003cmeta charset=\"utf-8\"\u003e',\n '\u003c/head\u003e',\n '\u003cbody\u003e',\n ' {}'.format(message),\n '\u003c/body\u003e',\n '\u003c/html\u003e',\n '',\n ]).encode('utf-8'))\n\n# Launch multiple listeners as threads\nclass Thread(threading.Thread):\n def __init__(self, i, socket):\n threading.Thread.__init__(self)\n self.i = i\n self.socket = socket\n self.daemon = True\n self.start()\n\n def run(self):\n server = http.server.SimpleHTTPRequestHandler\n server.server_version = \"OpenShift Downloads Server\"\n server.sys_version = \"\"\n httpd = http.server.HTTPServer(addr, server, False)\n\n # Prevent the HTTP server from re-binding every handler.\n # https://stackoverflow.com/questions/46210672/\n httpd.socket = self.socket\n httpd.server_bind = self.server_close = lambda self: None\n\n httpd.serve_forever()\n\nprint('Starting downloads server...', flush=True)\ntemp_dir = tempfile.mkdtemp()\nprint('Serving from: {}'.format(temp_dir), flush=True)\nos.chdir(temp_dir)\n\nprint('Creating arch directories...', flush=True)\nfor arch in ['amd64', 'arm64', 'ppc64le', 's390x']:\n os.mkdir(arch)\n\ncontent = ['\u003ca href=\"oc-license\"\u003elicense\u003c/a\u003e']\nprint('Creating license symlink...', flush=True)\nos.symlink('/usr/share/openshift/LICENSE', 'oc-license')\n\n# Function to create archives in background\ndef create_archives_async(arch, operating_system, path, basename, archive_path_root):\n try:\n print(' [Background] Creating archives for {} {}...'.format(arch, operating_system), flush=True)\n \n print(' [Background] Creating tar archive...', flush=True)\n with tarfile.open('{}.tar'.format(archive_path_root), 'w') as tar:\n tar.add(path, basename)\n \n print(' [Background] Creating zip archive...', flush=True)\n with zipfile.ZipFile('{}.zip'.format(archive_path_root), 'w') as zip:\n zip.write(path, basename)\n \n print(' [Background] Done with archives for {} {}'.format(arch, operating_system), flush=True)\n except Exception as e:\n print(' [Background] ERROR creating archives for {} {}: {}'.format(arch, operating_system, str(e)), flush=True)\n\nprint('Creating oc binary symlinks (archives will be created asynchronously)...', flush=True)\narchive_threads = []\n\nfor arch, operating_system, path in [\n ('amd64', 'linux', '/usr/share/openshift/linux_amd64/oc'),\n ('amd64', 'linux', '/usr/share/openshift/linux_amd64/oc.rhel8'),\n ('amd64', 'linux', '/usr/share/openshift/linux_amd64/oc.rhel9'),\n ('amd64', 'mac', '/usr/share/openshift/mac/oc'),\n ('amd64', 'windows', '/usr/share/openshift/windows/oc.exe'),\n ('arm64', 'linux', '/usr/share/openshift/linux_arm64/oc'),\n ('arm64', 'linux', '/usr/share/openshift/linux_arm64/oc.rhel8'),\n ('arm64', 'linux', '/usr/share/openshift/linux_arm64/oc.rhel9'),\n ('arm64', 'mac', '/usr/share/openshift/mac_arm64/oc'),\n ('ppc64le', 'linux', '/usr/share/openshift/linux_ppc64le/oc'),\n ('ppc64le', 'linux', '/usr/share/openshift/linux_ppc64le/oc.rhel8'),\n ('ppc64le', 'linux', '/usr/share/openshift/linux_ppc64le/oc.rhel9'),\n ('s390x', 'linux', '/usr/share/openshift/linux_s390x/oc'),\n ('s390x', 'linux', '/usr/share/openshift/linux_s390x/oc.rhel8'),\n ('s390x', 'linux', '/usr/share/openshift/linux_s390x/oc.rhel9'),\n ]:\n try:\n print(' Processing {} {} ({})...'.format(arch, operating_system, path), flush=True)\n \n # Check if source file exists\n if not os.path.exists(path):\n print(' WARNING: {} does not exist, skipping'.format(path), flush=True)\n continue\n \n file_size = os.path.getsize(path)\n print(' Source file size: {} MB'.format(file_size // (1024*1024)), flush=True)\n \n basename = os.path.basename(path)\n target_path = os.path.join(arch, operating_system, basename)\n \n print(' Creating directory...', flush=True)\n os.makedirs(os.path.join(arch, operating_system), exist_ok=True)\n \n print(' Creating symlink...', flush=True)\n os.symlink(path, target_path)\n \n # Only strip .exe extension, keep everything else (e.g., oc.rhel8 stays oc.rhel8)\n if basename.endswith('.exe'):\n base_root = basename[:-4]\n else:\n base_root = basename\n archive_path_root = os.path.join(arch, operating_system, base_root)\n \n # Start background thread to create archives\n archive_thread = threading.Thread(\n target=create_archives_async,\n args=(arch, operating_system, path, basename, archive_path_root),\n daemon=True\n )\n archive_thread.start()\n archive_threads.append(archive_thread)\n \n content.append(\n '\u003ca href=\"{0}\"\u003eoc ({1} {2})\u003c/a\u003e (\u003ca href=\"{3}.tar\"\u003etar\u003c/a\u003e \u003ca href=\"{3}.zip\"\u003ezip\u003c/a\u003e)'.format(\n target_path, arch, operating_system, archive_path_root\n )\n )\n print(' Done with {} {} (archives creating in background)'.format(arch, operating_system), flush=True)\n except Exception as e:\n print(' ERROR processing {} {}: {}'.format(arch, operating_system, str(e)), flush=True)\n\nprint('All symlinks created. {} background threads creating archives...'.format(len(archive_threads)), flush=True)\n\nfor root, directories, filenames in os.walk(temp_dir):\n root_link = os.path.relpath(temp_dir, os.path.join(root, 'child')).replace(os.path.sep, '/')\n for directory in directories:\n write_index(\n path=os.path.join(root, directory, 'index.html'),\n message='\u003cp\u003eDirectory listings are disabled. See \u003ca href=\"{}\"\u003ehere\u003c/a\u003e for available content.\u003c/p\u003e'.format(root_link),\n )\n\nwrite_index(\n path=os.path.join(temp_dir, 'index.html'),\n message='\\n'.join(\n ['\u003cp\u003e\u003cem\u003eNote: Archive files (.tar, .zip) are generated on server startup and may take a few moments to become available.\u003c/em\u003e\u003c/p\u003e'] +\n ['\u003cul\u003e'] +\n [' \u003cli\u003e{}\u003c/li\u003e'.format(entry) for entry in content] +\n ['\u003c/ul\u003e']\n ),\n)\n\n# Create socket\n# IPv6 should handle IPv4 passively so long as it is not bound to a\n# specific address or set to IPv6_ONLY\n# https://stackoverflow.com/questions/25817848/python-3-does-http-server-support-ipv6\ntry:\n addr = ('::', 8080)\n sock = socket.socket(socket.AF_INET6, socket.SOCK_STREAM)\nexcept socket.error as err:\n # errno.EAFNOSUPPORT is \"socket.error: [Errno 97] Address family not supported by protocol\"\n # When IPv6 is disabled, socket will bind using IPv4.\n if err.errno == errno.EAFNOSUPPORT:\n addr = ('', 8080)\n sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)\n else:\n raise \nsock.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)\nprint('Binding to {}...'.format(addr), flush=True)\nsock.bind(addr)\nsock.listen(5)\n\nprint('Starting 100 worker threads...', flush=True)\n[Thread(i, socket=sock) for i in range(100)]\nprint('Server ready on port 8080!', flush=True)\ntime.sleep(9e9)\nEOF\nexec python3 /tmp/serve.py\n" ], "command": [ "/bin/sh" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:23204877f166455ce8f9de9b91a467eeda576f172d5f96124a68aa986c4775d6", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "download-server", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 5, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-23T19:31:45Z", "generation": 1, "labels": { "app": "deployment-validation-operator", "name": "deployment-validation-operator", "pod-template-hash": "d466f869f" }, "name": "deployment-validation-operator-d466f869f", "namespace": "openshift-deployment-validation-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "deployment-validation-operator", "uid": "ad88f5a7-30ba-45d5-b244-9723d7f0bb2d" } ], "resourceVersion": "9856", "uid": "73c77205-a885-40d7-bd32-4a4cfc500282" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "deployment-validation-operator", "pod-template-hash": "d466f869f" } }, "template": { "metadata": { "annotations": { "capabilities": "Basic Install", "categories": "Application Runtime, Monitoring, Security", "certified": "false", "containerImage": "quay.io/app-sre/deployment-validation-operator:0.1.568-g6f8f204", "createdAt": "2026-03-10T08:28:54Z", "description": "The deployment validation operator", "olm.operatorGroup": "deployment-validation-operator-og", "olm.operatorNamespace": "openshift-deployment-validation-operator", "olm.targetNamespaces": "openshift-deployment-validation-operator", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.package\",\"value\":{\"packageName\":\"deployment-validation-operator\",\"version\":\"0.1.568-g6f8f204\"}}]}", "repository": "https://github.com/app-sre/deployment-validation-operator", "support": "Best Effort" }, "labels": { "app": "deployment-validation-operator", "name": "deployment-validation-operator", "pod-template-hash": "d466f869f" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "deployment-validation-operator" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "--config /config/deployment-validation-operator-config.yaml" ], "env": [ { "name": "WATCH_NAMESPACE" }, { "name": "OPERATOR_NAME", "value": "deployment-validation-operator" }, { "name": "NAMESPACE_IGNORE_PATTERN", "value": "^(openshift.*|kube-.*|default|dedicated-admin|redhat-.*|acm|addon-dba-operator|codeready-.*|prow)$" }, { "name": "RESOURCES_PER_LIST_QUERY", "value": "5" }, { "name": "VALIDATION_CHECK_INTERVAL", "value": "2m" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "OPERATOR_CONDITION_NAME", "value": "deployment-validation-operator.v0.1.568-g6f8f204" } ], "image": "quay.io/app-sre/deployment-validation-operator:0.1.568-g6f8f204", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "deployment-validation-operator", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "resources": { "limits": { "memory": "400Mi" }, "requests": { "cpu": "50m", "memory": "400Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/config", "name": "dvo-config" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/arch": "amd64" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "deployment-validation-operator", "serviceAccountName": "deployment-validation-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/infra", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "deployment-validation-operator-config", "optional": true }, "name": "dvo-config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "2", "imageregistry.operator.openshift.io/checksum": "sha256:fa5d4b73bfca46fd2e9a697bb2de82537850a7def42493dbffc68b5633dffd8c", "operator.openshift.io/spec-hash": "52149b3a54b7cf492b77ca9234edad83112b17496208f6cf850c019d96edaaac", "release.openshift.io/version": "4.21.9" }, "creationTimestamp": "2026-04-23T19:30:11Z", "generation": 4, "labels": { "docker-registry": "default", "pod-template-hash": "57ff957978" }, "name": "image-registry-57ff957978", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "image-registry", "uid": "d1ded39a-077b-48fa-a84a-8c476ee9614f" } ], "resourceVersion": "13738", "uid": "421693aa-9f9b-4995-85c6-5a93d9154644" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "docker-registry": "default", "pod-template-hash": "57ff957978" } }, "template": { "metadata": { "annotations": { "imageregistry.operator.openshift.io/dependencies-checksum": "sha256:7325e31ef5189a99d6730d9d67b9eefb32d54b578ee2756fad26384643456dbb", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "docker-registry": "default", "pod-template-hash": "57ff957978" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "namespaces": [ "openshift-image-registry" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/sh", "-c", "mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem \u0026\u0026 update-ca-trust extract --output /etc/pki/ca-trust/extracted/ \u0026\u0026 exec /usr/bin/dockerregistry" ], "env": [ { "name": "REGISTRY_STORAGE", "value": "s3" }, { "name": "REGISTRY_STORAGE_S3_BUCKET", "value": "2ps23krgrug0inkj9hc8sh6m5b2n43rp-image-registry-us-east-1-ikab" }, { "name": "REGISTRY_STORAGE_S3_REGION", "value": "us-east-1" }, { "name": "REGISTRY_STORAGE_S3_ENCRYPT", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_FORCEPATHSTYLE", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH", "value": "/var/run/secrets/cloud/credentials" }, { "name": "REGISTRY_STORAGE_S3_USEDUALSTACK", "value": "true" }, { "name": "REGISTRY_HTTP_ADDR", "value": ":5000" }, { "name": "REGISTRY_HTTP_NET", "value": "tcp" }, { "name": "REGISTRY_HTTP_SECRET", "value": "a3d0519303592b6457c18bbfcbe38f75038eff1f4df0be6d9f0967a788a7089dde42b2a6da5836d9564362d58aa9b6b2d3647fcea7207145029e916d46297202" }, { "name": "REGISTRY_LOG_LEVEL", "value": "info" }, { "name": "REGISTRY_OPENSHIFT_QUOTA_ENABLED", "value": "true" }, { "name": "REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR", "value": "inmemory" }, { "name": "REGISTRY_STORAGE_DELETE_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL", "value": "10s" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD", "value": "1" }, { "name": "REGISTRY_OPENSHIFT_METRICS_ENABLED", "value": "true" }, { "name": "REGISTRY_OPENSHIFT_SERVER_ADDR", "value": "image-registry.openshift-image-registry.svc:5000" }, { "name": "REGISTRY_HTTP_TLS_CERTIFICATE", "value": "/etc/secrets/tls.crt" }, { "name": "REGISTRY_HTTP_TLS_KEY", "value": "/etc/secrets/tls.key" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:90a8ffd9643ebb16a6a8c04bb38cf9ed58903e9d3bf836c68f399193db5edaf6", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "registry", "ports": [ { "containerPort": 5000, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/cloud", "name": "image-registry-private-configuration", "readOnly": true }, { "mountPath": "/etc/secrets", "name": "registry-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted", "name": "ca-trust-extracted" }, { "mountPath": "/etc/pki/ca-trust/source/anchors", "name": "registry-certificates" }, { "mountPath": "/usr/share/pki/ca-trust-source", "name": "trusted-ca" }, { "mountPath": "/var/lib/kubelet/", "name": "installation-pull-secrets" }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 1000290000, "fsGroupChangePolicy": "OnRootMismatch" }, "serviceAccount": "registry", "serviceAccountName": "registry", "terminationGracePeriodSeconds": 55, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "kubernetes.io/hostname", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "node-role.kubernetes.io/worker", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "DoNotSchedule" } ], "volumes": [ { "name": "image-registry-private-configuration", "secret": { "defaultMode": 420, "optional": false, "secretName": "image-registry-private-configuration" } }, { "name": "registry-tls", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "image-registry-tls" } } ] } }, { "emptyDir": {}, "name": "ca-trust-extracted" }, { "configMap": { "defaultMode": 420, "name": "image-registry-certificates" }, "name": "registry-certificates" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "anchors/ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "name": "installation-pull-secrets", "secret": { "defaultMode": 420, "items": [ { "key": ".dockerconfigjson", "path": "config.json" } ], "optional": true, "secretName": "installation-pull-secrets" } }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "3", "imageregistry.operator.openshift.io/checksum": "sha256:cb8480aa7ee533e63f09995c3a6278f817d29168c9a34250c8a37313762080e8", "operator.openshift.io/spec-hash": "18616133f82732e93cea271a820e9dd28dafab7eabe17e89343bc9604156566a", "release.openshift.io/version": "4.21.9" }, "creationTimestamp": "2026-04-23T19:33:13Z", "generation": 2, "labels": { "docker-registry": "default", "pod-template-hash": "7fb79b599b" }, "name": "image-registry-7fb79b599b", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "image-registry", "uid": "d1ded39a-077b-48fa-a84a-8c476ee9614f" } ], "resourceVersion": "14498", "uid": "240fecb0-a2a5-4501-b860-a5b178c36e94" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "docker-registry": "default", "pod-template-hash": "7fb79b599b" } }, "template": { "metadata": { "annotations": { "imageregistry.operator.openshift.io/dependencies-checksum": "sha256:86447b7dee2cd502118c323b2fdc34a2f26466da96132420870187699625264b", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "docker-registry": "default", "pod-template-hash": "7fb79b599b" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "namespaces": [ "openshift-image-registry" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/sh", "-c", "mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem \u0026\u0026 update-ca-trust extract --output /etc/pki/ca-trust/extracted/ \u0026\u0026 exec /usr/bin/dockerregistry" ], "env": [ { "name": "REGISTRY_STORAGE", "value": "s3" }, { "name": "REGISTRY_STORAGE_S3_BUCKET", "value": "2ps23krgrug0inkj9hc8sh6m5b2n43rp-image-registry-us-east-1-ikab" }, { "name": "REGISTRY_STORAGE_S3_REGION", "value": "us-east-1" }, { "name": "REGISTRY_STORAGE_S3_ENCRYPT", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_FORCEPATHSTYLE", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH", "value": "/var/run/secrets/cloud/credentials" }, { "name": "REGISTRY_STORAGE_S3_USEDUALSTACK", "value": "true" }, { "name": "REGISTRY_HTTP_ADDR", "value": ":5000" }, { "name": "REGISTRY_HTTP_NET", "value": "tcp" }, { "name": "REGISTRY_HTTP_SECRET", "value": "a3d0519303592b6457c18bbfcbe38f75038eff1f4df0be6d9f0967a788a7089dde42b2a6da5836d9564362d58aa9b6b2d3647fcea7207145029e916d46297202" }, { "name": "REGISTRY_LOG_LEVEL", "value": "info" }, { "name": "REGISTRY_OPENSHIFT_QUOTA_ENABLED", "value": "true" }, { "name": "REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR", "value": "inmemory" }, { "name": "REGISTRY_STORAGE_DELETE_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL", "value": "10s" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD", "value": "1" }, { "name": "REGISTRY_OPENSHIFT_METRICS_ENABLED", "value": "true" }, { "name": "REGISTRY_OPENSHIFT_SERVER_ADDR", "value": "image-registry.openshift-image-registry.svc:5000" }, { "name": "REGISTRY_HTTP_TLS_CERTIFICATE", "value": "/etc/secrets/tls.crt" }, { "name": "REGISTRY_HTTP_TLS_KEY", "value": "/etc/secrets/tls.key" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:90a8ffd9643ebb16a6a8c04bb38cf9ed58903e9d3bf836c68f399193db5edaf6", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "registry", "ports": [ { "containerPort": 5000, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/cloud", "name": "image-registry-private-configuration", "readOnly": true }, { "mountPath": "/etc/secrets", "name": "registry-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted", "name": "ca-trust-extracted" }, { "mountPath": "/etc/pki/ca-trust/source/anchors", "name": "registry-certificates" }, { "mountPath": "/usr/share/pki/ca-trust-source", "name": "trusted-ca" }, { "mountPath": "/var/lib/kubelet/", "name": "installation-pull-secrets" }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 1000290000, "fsGroupChangePolicy": "OnRootMismatch" }, "serviceAccount": "registry", "serviceAccountName": "registry", "terminationGracePeriodSeconds": 55, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "kubernetes.io/hostname", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "node-role.kubernetes.io/worker", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "DoNotSchedule" } ], "volumes": [ { "name": "image-registry-private-configuration", "secret": { "defaultMode": 420, "optional": false, "secretName": "image-registry-private-configuration" } }, { "name": "registry-tls", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "image-registry-tls" } } ] } }, { "emptyDir": {}, "name": "ca-trust-extracted" }, { "configMap": { "defaultMode": 420, "name": "image-registry-certificates" }, "name": "registry-certificates" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "anchors/ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "name": "installation-pull-secrets", "secret": { "defaultMode": 420, "items": [ { "key": ".dockerconfigjson", "path": "config.json" } ], "optional": true, "secretName": "installation-pull-secrets" } }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 2, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "imageregistry.operator.openshift.io/checksum": "sha256:ad98b512ece269f154992e76182449e75b00fe52c70c908c0df8bf8d332d6f33", "operator.openshift.io/spec-hash": "c8e6a03ce097a7913e9c4fb8053d21f6d1257a03c03af7664d2344a9f52a4634", "release.openshift.io/version": "4.21.9" }, "creationTimestamp": "2026-04-23T19:23:56Z", "generation": 3, "labels": { "docker-registry": "default", "pod-template-hash": "dbb9d5bb5" }, "name": "image-registry-dbb9d5bb5", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "image-registry", "uid": "d1ded39a-077b-48fa-a84a-8c476ee9614f" } ], "resourceVersion": "10960", "uid": "3b15710e-b642-499d-bab2-a934fc800aed" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "docker-registry": "default", "pod-template-hash": "dbb9d5bb5" } }, "template": { "metadata": { "annotations": { "imageregistry.operator.openshift.io/dependencies-checksum": "sha256:7325e31ef5189a99d6730d9d67b9eefb32d54b578ee2756fad26384643456dbb", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "docker-registry": "default", "pod-template-hash": "dbb9d5bb5" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "namespaces": [ "openshift-image-registry" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/sh", "-c", "mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem \u0026\u0026 update-ca-trust extract --output /etc/pki/ca-trust/extracted/ \u0026\u0026 exec /usr/bin/dockerregistry" ], "env": [ { "name": "REGISTRY_STORAGE", "value": "s3" }, { "name": "REGISTRY_STORAGE_S3_BUCKET", "value": "2ps23krgrug0inkj9hc8sh6m5b2n43rp-image-registry-us-east-1-ikab" }, { "name": "REGISTRY_STORAGE_S3_REGION", "value": "us-east-1" }, { "name": "REGISTRY_STORAGE_S3_ENCRYPT", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_FORCEPATHSTYLE", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH", "value": "/var/run/secrets/cloud/credentials" }, { "name": "REGISTRY_STORAGE_S3_USEDUALSTACK", "value": "true" }, { "name": "REGISTRY_HTTP_ADDR", "value": ":5000" }, { "name": "REGISTRY_HTTP_NET", "value": "tcp" }, { "name": "REGISTRY_HTTP_SECRET", "value": "a3d0519303592b6457c18bbfcbe38f75038eff1f4df0be6d9f0967a788a7089dde42b2a6da5836d9564362d58aa9b6b2d3647fcea7207145029e916d46297202" }, { "name": "REGISTRY_LOG_LEVEL", "value": "info" }, { "name": "REGISTRY_OPENSHIFT_QUOTA_ENABLED", "value": "true" }, { "name": "REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR", "value": "inmemory" }, { "name": "REGISTRY_STORAGE_DELETE_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL", "value": "10s" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD", "value": "1" }, { "name": "REGISTRY_OPENSHIFT_METRICS_ENABLED", "value": "true" }, { "name": "REGISTRY_OPENSHIFT_SERVER_ADDR", "value": "image-registry.openshift-image-registry.svc:5000" }, { "name": "REGISTRY_HTTP_TLS_CERTIFICATE", "value": "/etc/secrets/tls.crt" }, { "name": "REGISTRY_HTTP_TLS_KEY", "value": "/etc/secrets/tls.key" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:90a8ffd9643ebb16a6a8c04bb38cf9ed58903e9d3bf836c68f399193db5edaf6", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "registry", "ports": [ { "containerPort": 5000, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/cloud", "name": "image-registry-private-configuration", "readOnly": true }, { "mountPath": "/etc/secrets", "name": "registry-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted", "name": "ca-trust-extracted" }, { "mountPath": "/etc/pki/ca-trust/source/anchors", "name": "registry-certificates" }, { "mountPath": "/usr/share/pki/ca-trust-source", "name": "trusted-ca" }, { "mountPath": "/var/lib/kubelet/", "name": "installation-pull-secrets" }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 1000290000, "fsGroupChangePolicy": "OnRootMismatch" }, "serviceAccount": "registry", "serviceAccountName": "registry", "terminationGracePeriodSeconds": 55, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "kubernetes.io/hostname", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "node-role.kubernetes.io/worker", "whenUnsatisfiable": "DoNotSchedule" } ], "volumes": [ { "name": "image-registry-private-configuration", "secret": { "defaultMode": 420, "optional": false, "secretName": "image-registry-private-configuration" } }, { "name": "registry-tls", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "image-registry-tls" } } ] } }, { "emptyDir": {}, "name": "ca-trust-extracted" }, { "configMap": { "defaultMode": 420, "name": "image-registry-certificates" }, "name": "registry-certificates" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "anchors/ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "name": "installation-pull-secrets", "secret": { "defaultMode": 420, "items": [ { "key": ".dockerconfigjson", "path": "config.json" } ], "optional": true, "secretName": "installation-pull-secrets" } }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-04-23T19:26:51Z", "generation": 2, "labels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "ingresscontroller.operator.openshift.io/hash": "7c874877d8", "pod-template-hash": "5549b9c849" }, "name": "router-default-5549b9c849", "namespace": "openshift-ingress", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "router-default", "uid": "2c6dbd15-fd59-40ec-9c84-c1eac0b048fb" } ], "resourceVersion": "12619", "uid": "da66e452-4160-471e-88e7-662e9219c7ef" }, "spec": { "minReadySeconds": 30, "replicas": 2, "selector": { "matchLabels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "pod-template-hash": "5549b9c849" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "ingresscontroller.operator.openshift.io/hash": "7c874877d8", "pod-template-hash": "5549b9c849" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "node.openshift.io/remote-worker", "operator": "NotIn", "values": [ "" ] } ] } ] } }, "podAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/deployment-ingresscontroller", "operator": "In", "values": [ "default" ] }, { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "NotIn", "values": [ "7c874877d8" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] }, "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/deployment-ingresscontroller", "operator": "In", "values": [ "default" ] }, { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "In", "values": [ "7c874877d8" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "env": [ { "name": "DEFAULT_CERTIFICATE_DIR", "value": "/etc/pki/tls/private" }, { "name": "DEFAULT_DESTINATION_CA_PATH", "value": "/var/run/configmaps/service-ca/service-ca.crt" }, { "name": "RELOAD_INTERVAL", "value": "5s" }, { "name": "ROUTER_ALLOW_WILDCARD_ROUTES", "value": "false" }, { "name": "ROUTER_CANONICAL_HOSTNAME", "value": "router-default.apps.rosa.kx-350f7e2753.4my4.p3.openshiftapps.com" }, { "name": "ROUTER_CIPHERS", "value": "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384" }, { "name": "ROUTER_CIPHERSUITES", "value": "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256" }, { "name": "ROUTER_DISABLE_HTTP2", "value": "true" }, { "name": "ROUTER_DISABLE_NAMESPACE_OWNERSHIP_CHECK", "value": "false" }, { "name": "ROUTER_DOMAIN", "value": "apps.rosa.kx-350f7e2753.4my4.p3.openshiftapps.com" }, { "name": "ROUTER_ENABLE_EXTERNAL_CERTIFICATE", "value": "true" }, { "name": "ROUTER_LOAD_BALANCE_ALGORITHM", "value": "random" }, { "name": "ROUTER_METRICS_TLS_CERT_FILE", "value": "/etc/pki/tls/metrics-certs/tls.crt" }, { "name": "ROUTER_METRICS_TLS_KEY_FILE", "value": "/etc/pki/tls/metrics-certs/tls.key" }, { "name": "ROUTER_METRICS_TYPE", "value": "haproxy" }, { "name": "ROUTER_SERVICE_NAME", "value": "default" }, { "name": "ROUTER_SERVICE_NAMESPACE", "value": "openshift-ingress" }, { "name": "ROUTER_SET_FORWARDED_HEADERS", "value": "append" }, { "name": "ROUTER_TCP_BALANCE_SCHEME", "value": "source" }, { "name": "ROUTER_THREADS", "value": "4" }, { "name": "SSL_MIN_VERSION", "value": "TLSv1.2" }, { "name": "STATS_PASSWORD_FILE", "value": "/var/lib/haproxy/conf/metrics-auth/statsPassword" }, { "name": "STATS_PORT", "value": "1936" }, { "name": "STATS_USERNAME_FILE", "value": "/var/lib/haproxy/conf/metrics-auth/statsUsername" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e3732e356ae2324565c74cae57d5d016917314fa293ddaa3a68ee9ae030c6f07", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "terminationGracePeriodSeconds": 10, "timeoutSeconds": 1 }, "name": "router", "ports": [ { "containerPort": 80, "name": "http", "protocol": "TCP" }, { "containerPort": 443, "name": "https", "protocol": "TCP" }, { "containerPort": 1936, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/ready", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": true, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 120, "httpGet": { "path": "/healthz/ready", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 1, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/tls/private", "name": "default-certificate", "readOnly": true }, { "mountPath": "/var/run/configmaps/service-ca", "name": "service-ca-bundle", "readOnly": true }, { "mountPath": "/var/lib/haproxy/conf/metrics-auth", "name": "stats-auth", "readOnly": true }, { "mountPath": "/etc/pki/tls/metrics-certs", "name": "metrics-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/worker": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "router", "serviceAccountName": "router", "terminationGracePeriodSeconds": 3600, "tolerations": [ { "effect": "NoExecute", "key": "kubernetes.io/e2e-evict-taint-key", "operator": "Equal", "value": "evictTaintVal" } ], "topologySpreadConstraints": [ { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "In", "values": [ "7c874877d8" ] } ] }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "ScheduleAnyway" } ], "volumes": [ { "name": "default-certificate", "secret": { "defaultMode": 420, "secretName": "2ps23krgrug0inkj9hc8sh6m5b2n43rp-primary-cert-bundle-secret" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "service-ca-bundle", "optional": false }, "name": "service-ca-bundle" }, { "name": "stats-auth", "secret": { "defaultMode": 420, "secretName": "router-stats-default" } }, { "name": "metrics-certs", "secret": { "defaultMode": 420, "secretName": "router-metrics-certs-default" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 2, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-23T19:23:44Z", "generation": 3, "labels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "ingresscontroller.operator.openshift.io/hash": "7b48d884d4", "pod-template-hash": "dbcccc67f" }, "name": "router-default-dbcccc67f", "namespace": "openshift-ingress", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "router-default", "uid": "2c6dbd15-fd59-40ec-9c84-c1eac0b048fb" } ], "resourceVersion": "12634", "uid": "b84a2f86-d865-49ee-94b2-508e5133d971" }, "spec": { "minReadySeconds": 30, "replicas": 0, "selector": { "matchLabels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "pod-template-hash": "dbcccc67f" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "ingresscontroller.operator.openshift.io/hash": "7b48d884d4", "pod-template-hash": "dbcccc67f" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "node.openshift.io/remote-worker", "operator": "NotIn", "values": [ "" ] } ] } ] } }, "podAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/deployment-ingresscontroller", "operator": "In", "values": [ "default" ] }, { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "NotIn", "values": [ "7b48d884d4" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] }, "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/deployment-ingresscontroller", "operator": "In", "values": [ "default" ] }, { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "In", "values": [ "7b48d884d4" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "env": [ { "name": "DEFAULT_CERTIFICATE_DIR", "value": "/etc/pki/tls/private" }, { "name": "DEFAULT_DESTINATION_CA_PATH", "value": "/var/run/configmaps/service-ca/service-ca.crt" }, { "name": "RELOAD_INTERVAL", "value": "5s" }, { "name": "ROUTER_ALLOW_WILDCARD_ROUTES", "value": "false" }, { "name": "ROUTER_CANONICAL_HOSTNAME", "value": "router-default.apps.rosa.kx-350f7e2753.4my4.p3.openshiftapps.com" }, { "name": "ROUTER_CIPHERS", "value": "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384" }, { "name": "ROUTER_CIPHERSUITES", "value": "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256" }, { "name": "ROUTER_DISABLE_HTTP2", "value": "true" }, { "name": "ROUTER_DISABLE_NAMESPACE_OWNERSHIP_CHECK", "value": "false" }, { "name": "ROUTER_DOMAIN", "value": "apps.rosa.kx-350f7e2753.4my4.p3.openshiftapps.com" }, { "name": "ROUTER_ENABLE_EXTERNAL_CERTIFICATE", "value": "true" }, { "name": "ROUTER_LOAD_BALANCE_ALGORITHM", "value": "random" }, { "name": "ROUTER_METRICS_TLS_CERT_FILE", "value": "/etc/pki/tls/metrics-certs/tls.crt" }, { "name": "ROUTER_METRICS_TLS_KEY_FILE", "value": "/etc/pki/tls/metrics-certs/tls.key" }, { "name": "ROUTER_METRICS_TYPE", "value": "haproxy" }, { "name": "ROUTER_SERVICE_NAME", "value": "default" }, { "name": "ROUTER_SERVICE_NAMESPACE", "value": "openshift-ingress" }, { "name": "ROUTER_SET_FORWARDED_HEADERS", "value": "append" }, { "name": "ROUTER_TCP_BALANCE_SCHEME", "value": "source" }, { "name": "ROUTER_THREADS", "value": "4" }, { "name": "SSL_MIN_VERSION", "value": "TLSv1.2" }, { "name": "STATS_PASSWORD_FILE", "value": "/var/lib/haproxy/conf/metrics-auth/statsPassword" }, { "name": "STATS_PORT", "value": "1936" }, { "name": "STATS_USERNAME_FILE", "value": "/var/lib/haproxy/conf/metrics-auth/statsUsername" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e3732e356ae2324565c74cae57d5d016917314fa293ddaa3a68ee9ae030c6f07", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "terminationGracePeriodSeconds": 10, "timeoutSeconds": 1 }, "name": "router", "ports": [ { "containerPort": 80, "name": "http", "protocol": "TCP" }, { "containerPort": 443, "name": "https", "protocol": "TCP" }, { "containerPort": 1936, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/ready", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": true, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 120, "httpGet": { "path": "/healthz/ready", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 1, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/tls/private", "name": "default-certificate", "readOnly": true }, { "mountPath": "/var/run/configmaps/service-ca", "name": "service-ca-bundle", "readOnly": true }, { "mountPath": "/var/lib/haproxy/conf/metrics-auth", "name": "stats-auth", "readOnly": true }, { "mountPath": "/etc/pki/tls/metrics-certs", "name": "metrics-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/worker": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "router", "serviceAccountName": "router", "terminationGracePeriodSeconds": 3600, "tolerations": [ { "effect": "NoExecute", "key": "kubernetes.io/e2e-evict-taint-key", "operator": "Equal", "value": "evictTaintVal" } ], "topologySpreadConstraints": [ { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "In", "values": [ "7b48d884d4" ] } ] }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "ScheduleAnyway" } ], "volumes": [ { "name": "default-certificate", "secret": { "defaultMode": 420, "secretName": "default-ingress-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "service-ca-bundle", "optional": false }, "name": "service-ca-bundle" }, { "name": "stats-auth", "secret": { "defaultMode": 420, "secretName": "router-stats-default" } }, { "name": "metrics-certs", "secret": { "defaultMode": 420, "secretName": "router-metrics-certs-default" } } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "config.openshift.io/inject-proxy": "insights-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true" }, "creationTimestamp": "2026-04-23T19:23:44Z", "generation": 1, "labels": { "app": "insights-operator", "pod-template-hash": "6dbb575d6c" }, "name": "insights-operator-6dbb575d6c", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "insights-operator", "uid": "5ffc2afb-5616-4e70-a6ff-c3d4283112a0" } ], "resourceVersion": "12863", "uid": "d9187807-0895-4042-a066-0b8292d69055" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "insights-operator", "pod-template-hash": "6dbb575d6c" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app": "insights-operator", "pod-template-hash": "6dbb575d6c" } }, "spec": { "containers": [ { "args": [ "start", "--config=/etc/insights-operator/server.yaml" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "RELEASE_VERSION", "value": "4.21.9" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cc6751b59e51a14c8bd7370c2645f67946b4d29f7551b4d0c1cffa727a58332d", "imagePullPolicy": "IfNotPresent", "name": "insights-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "54Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp" }, { "mountPath": "/var/lib/insights-operator", "name": "snapshots" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/run/configmaps/service-ca-bundle", "name": "service-ca-bundle", "readOnly": true }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "operator", "serviceAccountName": "operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 900 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 900 } ], "volumes": [ { "emptyDir": {}, "name": "tmp" }, { "emptyDir": {}, "name": "snapshots" }, { "configMap": { "defaultMode": 420, "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "service-ca-bundle", "optional": true }, "name": "service-ca-bundle" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "openshift-insights-serving-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true" }, "creationTimestamp": "2026-04-23T19:23:51Z", "generation": 1, "labels": { "app": "kube-storage-version-migrator-operator", "pod-template-hash": "74478b59c6" }, "name": "kube-storage-version-migrator-operator-74478b59c6", "namespace": "openshift-kube-storage-version-migrator-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kube-storage-version-migrator-operator", "uid": "33cc8a90-bbec-4440-b641-689a2c36a4d2" } ], "resourceVersion": "12966", "uid": "39502e7c-b3b8-4996-bc71-0c2fefaee45f" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "kube-storage-version-migrator-operator", "pod-template-hash": "74478b59c6" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app": "kube-storage-version-migrator-operator", "pod-template-hash": "74478b59c6" }, "name": "kube-storage-version-migrator-operator" }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml" ], "command": [ "cluster-kube-storage-version-migrator-operator", "start" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:08c5a78c8a5af04c549e2273aaf4bb452a75bf038d68aa9d01bb2aff66c30e90" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:459a97d9dfc90b3b4a0e16f498dc89c4a432a309a7b62e6f4e6ab62d58369afb" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.21.9" }, { "name": "OPERAND_IMAGE_VERSION", "value": "4.21.9" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:459a97d9dfc90b3b4a0e16f498dc89c4a432a309a7b62e6f4e6ab62d58369afb", "imagePullPolicy": "IfNotPresent", "name": "kube-storage-version-migrator-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "kube-storage-version-migrator-operator", "serviceAccountName": "kube-storage-version-migrator-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "2ed5f04a52bd41fafe96cc231833425825b580bb9e0cc4aeaa478b464d093cfa" }, "creationTimestamp": "2026-04-23T19:32:48Z", "generation": 1, "labels": { "app": "migrator", "pod-template-hash": "846d9b8bdc" }, "name": "migrator-846d9b8bdc", "namespace": "openshift-kube-storage-version-migrator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "migrator", "uid": "0f5c3fd4-3cf3-49f5-b78e-daa88f8799ea" } ], "resourceVersion": "10490", "uid": "a408b149-892b-42c0-9b22-0ee0d4c7f60c" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "migrator", "pod-template-hash": "846d9b8bdc" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app": "migrator", "pod-template-hash": "846d9b8bdc" } }, "spec": { "containers": [ { "args": [ "trap 'echo \"Termination signal received, but ignored. Continuing...\"; sleep infinity' TERM\nmigrator \"$@\" \u0026 wait $!", "bash", "--alsologtostderr", "--v=2" ], "command": [ "/bin/bash", "-c" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:08c5a78c8a5af04c549e2273aaf4bb452a75bf038d68aa9d01bb2aff66c30e90", "imagePullPolicy": "IfNotPresent", "name": "migrator", "resources": { "requests": { "cpu": "10m", "memory": "200Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "trap 'echo \"Gracefully sleeping for 25s to let another pod start...\"; sleep 25; exit' EXIT\nwhile true; do echo \"Waiting for termination...\"; sleep 3600 \u0026 wait $!; done" ], "command": [ "/bin/bash", "-c" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:08c5a78c8a5af04c549e2273aaf4bb452a75bf038d68aa9d01bb2aff66c30e90", "imagePullPolicy": "IfNotPresent", "name": "graceful-termination", "resources": { "requests": { "cpu": "1m", "memory": "1Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "kube-storage-version-migrator-sa", "serviceAccountName": "kube-storage-version-migrator-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/ibm-cloud-managed": "true" }, "creationTimestamp": "2026-04-23T19:23:39Z", "generation": 1, "labels": { "app": "cluster-monitoring-operator", "app.kubernetes.io/name": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "557b74df6" }, "name": "cluster-monitoring-operator-557b74df6", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-monitoring-operator", "uid": "5dfd72b8-7c66-421b-8ba4-ac428ceb25c6" } ], "resourceVersion": "11309", "uid": "8b993193-8a04-445b-811b-719358350b55" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "cluster-monitoring-operator", "pod-template-hash": "557b74df6" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app": "cluster-monitoring-operator", "app.kubernetes.io/name": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "557b74df6" } }, "spec": { "containers": [ { "args": [ "-namespace=openshift-monitoring", "-namespace-user-workload=openshift-user-workload-monitoring", "-configmap=cluster-monitoring-config", "-release-version=$(RELEASE_VERSION)", "-v=2", "-cert-file=/etc/tls/private/tls.crt", "-key-file=/etc/tls/private/tls.key", "-images=prometheus-operator=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1eb6a6ee3c66ac15be6bc21bb6015c595c11c15b9dfd21bd9f5ce7f7b990ebaa", "-images=prometheus-config-reloader=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a53c639f63de8981aebdbd9f3aa0c2f43d4ec66f7624459ed6d6ee163db5a9c1", "-images=prometheus-operator-admission-webhook=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:572ebf7c7fab1a518582f3ca46c866730423cce6e8a19f614dc15fd61bf0c65a", "-images=configmap-reloader=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4247c2dbe4ab244ab18e3a41d33507a4581ba4c2853485c90d147febcece3a97", "-images=prometheus=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5dd9945374379a0e87d0dfecb1d0c7a5abb9116d11f6ebdc86c289bc1fca5a8a", "-images=alertmanager=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ee7e39992e07ae1dffedca242e40090227c901154c27c2c1a4dc48131fa2da58", "-images=node-exporter=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:17aefdc2f4752c23dc8f0947bb01fc34635822eeb18f2d8a5eddf8211b84d450", "-images=kube-state-metrics=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:53ff8efdd8f563421ebc1859ab021a3bbc1306f82d4ff5d9c21bc60ec5f57898", "-images=openshift-state-metrics=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:52db05084f2a2e7d7bf4040e4865df88ec4074efbbe59a78d861be2c5ab2aa40", "-images=kube-rbac-proxy=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d6fbe0075cbb12bfd287c973704fadf97154c7f73e370733d976a40835e9155a", "-images=telemeter-client=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1f118a4ec0b92cb88c8544ea31d2b9adfc7006eeddb7a8d260150ecbce4adb8c", "-images=prom-label-proxy=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:603cb4fd86828df9d4291e197dfd6a90668ca8ef40d38f527019faca29e32f1c", "-images=thanos=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9d6d63dce784df5863e6a0ba4c11317a26c9d756d4e62d47759c97190a71cce5", "-images=monitoring-plugin=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3380fecebaeee139c1607fbcd9346cebc92806679568e2244a8905ef0f52aad2", "-images=kube-metrics-server=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a9b7b76c25c282ba47196c038787a5fbd9e17b9bcc059901d66479ac68819beb" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.21.9" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4733236617781e3469ffffb15e4daaa1f14ea8e1c52b426a3787a4f1f2945424", "imagePullPolicy": "IfNotPresent", "name": "cluster-monitoring-operator", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "75Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "cluster-monitoring-operator-tls", "readOnly": true }, { "mountPath": "/etc/cluster-monitoring-operator/telemetry", "name": "telemetry-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cluster-monitoring-operator", "serviceAccountName": "cluster-monitoring-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node.kubernetes.io/memory-pressure", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "telemetry-config" }, "name": "telemetry-config" }, { "name": "cluster-monitoring-operator-tls", "secret": { "defaultMode": 420, "secretName": "cluster-monitoring-operator-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-23T19:33:27Z", "generation": 1, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "kube-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.17.0", "pod-template-hash": "6dfffbb599" }, "name": "kube-state-metrics-6dfffbb599", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kube-state-metrics", "uid": "c2bee2a0-7b24-4bb3-b181-10abc3fd71fb" } ], "resourceVersion": "12464", "uid": "358e6538-50aa-4b99-af2b-35a13778c579" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/name": "kube-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "6dfffbb599" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "kube-state-metrics", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "kube-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.17.0", "pod-template-hash": "6dfffbb599" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--host=127.0.0.1", "--port=8081", "--telemetry-host=127.0.0.1", "--telemetry-port=8082", "--custom-resource-state-config-file=/etc/kube-state-metrics/custom-resource-state-configmap.yaml", "--metric-denylist=\n^kube_secret_labels$,\n^kube_.+_annotations$,\n^kube_customresource_.+_annotations_info$,\n^kube_customresource_.+_labels_info$\n", "--metric-labels-allowlist=pods=[*],nodes=[*],namespaces=[*],persistentvolumes=[*],persistentvolumeclaims=[*],poddisruptionbudgets=[*]", "--metric-denylist=\n^kube_.+_created$,\n^kube_.+_metadata_resource_version$,\n^kube_replicaset_metadata_generation$,\n^kube_replicaset_status_observed_generation$,\n^kube_pod_restart_policy$,\n^kube_pod_init_container_status_terminated$,\n^kube_pod_init_container_status_running$,\n^kube_pod_container_status_terminated$,\n^kube_pod_container_status_running$,\n^kube_pod_completion_time$,\n^kube_pod_status_scheduled$\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:53ff8efdd8f563421ebc1859ab021a3bbc1306f82d4ff5d9c21bc60ec5f57898", "imagePullPolicy": "IfNotPresent", "name": "kube-state-metrics", "resources": { "requests": { "cpu": "2m", "memory": "80Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp", "name": "volume-directive-shadow" }, { "mountPath": "/etc/kube-state-metrics", "name": "kube-state-metrics-custom-resource-state-configmap", "readOnly": true } ] }, { "args": [ "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8081/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d6fbe0075cbb12bfd287c973704fadf97154c7f73e370733d976a40835e9155a", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-main", "ports": [ { "containerPort": 8443, "name": "https-main", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "kube-state-metrics-tls" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca" }, { "mountPath": "/etc/kube-rbac-policy", "name": "kube-state-metrics-kube-rbac-proxy-config", "readOnly": true } ] }, { "args": [ "--secure-listen-address=:9443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8082/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d6fbe0075cbb12bfd287c973704fadf97154c7f73e370733d976a40835e9155a", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-self", "ports": [ { "containerPort": 9443, "name": "https-self", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "kube-state-metrics-tls" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca" }, { "mountPath": "/etc/kube-rbac-policy", "name": "kube-state-metrics-kube-rbac-proxy-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kube-state-metrics", "serviceAccountName": "kube-state-metrics", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "volume-directive-shadow" }, { "name": "kube-state-metrics-tls", "secret": { "defaultMode": 420, "secretName": "kube-state-metrics-tls" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "name": "kube-state-metrics-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "kube-state-metrics-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "kube-state-metrics-custom-resource-state-configmap" }, "name": "kube-state-metrics-custom-resource-state-configmap" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-23T19:33:31Z", "generation": 1, "labels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "59f855df4c" }, "name": "metrics-server-59f855df4c", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "metrics-server", "uid": "adb68c85-df75-4466-a012-4d3181964121" } ], "resourceVersion": "12775", "uid": "270d5496-dea4-4b12-9ab7-baacb94079a7" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "59f855df4c" } }, "template": { "metadata": { "annotations": { "monitoring.openshift.io/kubelet-serving-ca-bundle-hash": "d7gcmsvmvu5c0", "monitoring.openshift.io/metrics-server-client-certs-hash": "fqioja3sdliaq", "monitoring.openshift.io/serving-ca-secret-hash": "bkptaeh3ck8u6", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "59f855df4c" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--secure-port=10250", "--kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname", "--kubelet-use-node-status-port", "--metric-resolution=15s", "--kubelet-certificate-authority=/etc/tls/kubelet-serving-ca-bundle/ca-bundle.crt", "--kubelet-client-certificate=/etc/tls/metrics-server-client-certs/tls.crt", "--kubelet-client-key=/etc/tls/metrics-server-client-certs/tls.key", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--shutdown-send-retry-after=true", "--shutdown-delay-duration=150s", "--disable-http2-serving=true", "--tls-min-version=VersionTLS12", "--client-ca-file=/etc/client-ca-bundle/client-ca-file", "--requestheader-client-ca-file=/etc/client-ca-bundle/requestheader-client-ca-file", "--requestheader-allowed-names=kube-apiserver-proxy,system:kube-apiserver-proxy,system:openshift-aggregator", "--requestheader-extra-headers-prefix=X-Remote-Extra-", "--requestheader-group-headers=X-Remote-Group", "--requestheader-username-headers=X-Remote-User", "--audit-policy-file=/etc/audit/metadata-profile.yaml", "--audit-log-path=/var/log/metrics-server/audit.log", "--audit-log-maxsize=100", "--audit-log-maxbackup=5", "--audit-log-compress=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a9b7b76c25c282ba47196c038787a5fbd9e17b9bcc059901d66479ac68819beb", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/livez", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "metrics-server", "ports": [ { "containerPort": 10250, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 6, "httpGet": { "path": "/readyz", "port": "https", "scheme": "HTTPS" }, "initialDelaySeconds": 20, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1m", "memory": "40Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-metrics-server-tls" }, { "mountPath": "/etc/tls/metrics-server-client-certs", "name": "secret-metrics-server-client-certs" }, { "mountPath": "/etc/tls/kubelet-serving-ca-bundle", "name": "configmap-kubelet-serving-ca-bundle" }, { "mountPath": "/etc/audit", "name": "metrics-server-audit-profiles", "readOnly": true }, { "mountPath": "/var/log/metrics-server", "name": "audit-log" }, { "mountPath": "/etc/client-ca-bundle", "name": "client-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "metrics-server", "serviceAccountName": "metrics-server", "terminationGracePeriodSeconds": 170, "volumes": [ { "name": "secret-metrics-server-client-certs", "secret": { "defaultMode": 420, "secretName": "metrics-server-client-certs" } }, { "name": "secret-metrics-server-tls", "secret": { "defaultMode": 420, "secretName": "metrics-server-tls" } }, { "configMap": { "defaultMode": 420, "name": "kubelet-serving-ca-bundle" }, "name": "configmap-kubelet-serving-ca-bundle" }, { "emptyDir": {}, "name": "audit-log" }, { "configMap": { "defaultMode": 420, "name": "metrics-server-audit-profiles" }, "name": "metrics-server-audit-profiles" }, { "name": "client-ca-bundle", "secret": { "defaultMode": 420, "secretName": "metrics-server-8i43ho7asrelm" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-23T19:33:31Z", "generation": 1, "labels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "5cbb48bf6b" }, "name": "monitoring-plugin-5cbb48bf6b", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "monitoring-plugin", "uid": "0bdc37f1-8af4-4c2e-aed9-8c8750164503" } ], "resourceVersion": "12440", "uid": "60769aee-4256-4c55-a6f7-39489bdfdc7e" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "5cbb48bf6b" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "5cbb48bf6b" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--config-path=/opt/app-root/web/dist", "--static-path=/opt/app-root/web/dist", "--cert=/var/cert/tls.crt", "--key=/var/cert/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12" ], "command": [ "/opt/app-root/plugin-backend" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3380fecebaeee139c1607fbcd9346cebc92806679568e2244a8905ef0f52aad2", "imagePullPolicy": "IfNotPresent", "name": "monitoring-plugin", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/cert", "name": "monitoring-plugin-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "monitoring-plugin", "serviceAccountName": "monitoring-plugin", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "monitoring-plugin-cert", "secret": { "defaultMode": 420, "secretName": "monitoring-plugin-cert" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-23T19:33:27Z", "generation": 1, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "openshift-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "b8587444b" }, "name": "openshift-state-metrics-b8587444b", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-state-metrics", "uid": "a2e10cd1-f892-47f0-8f2c-04b3a0849232" } ], "resourceVersion": "11991", "uid": "efaca672-eef9-48b1-ac25-af3bfcbd3724" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/name": "openshift-state-metrics", "pod-template-hash": "b8587444b" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "openshift-state-metrics", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "openshift-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "b8587444b" } }, "spec": { "containers": [ { "args": [ "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8081/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-policy/config.yaml", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d6fbe0075cbb12bfd287c973704fadf97154c7f73e370733d976a40835e9155a", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-main", "ports": [ { "containerPort": 8443, "name": "https-main", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "openshift-state-metrics-tls" }, { "mountPath": "/etc/kube-rbac-policy", "name": "openshift-state-metrics-kube-rbac-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] }, { "args": [ "--secure-listen-address=:9443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8082/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-policy/config.yaml", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d6fbe0075cbb12bfd287c973704fadf97154c7f73e370733d976a40835e9155a", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-self", "ports": [ { "containerPort": 9443, "name": "https-self", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "openshift-state-metrics-tls" }, { "mountPath": "/etc/kube-rbac-policy", "name": "openshift-state-metrics-kube-rbac-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] }, { "args": [ "--host=127.0.0.1", "--port=8081", "--telemetry-host=127.0.0.1", "--telemetry-port=8082" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:52db05084f2a2e7d7bf4040e4865df88ec4074efbbe59a78d861be2c5ab2aa40", "imagePullPolicy": "IfNotPresent", "name": "openshift-state-metrics", "resources": { "requests": { "cpu": "1m", "memory": "32Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-state-metrics", "serviceAccountName": "openshift-state-metrics", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "openshift-state-metrics-tls", "secret": { "defaultMode": 420, "secretName": "openshift-state-metrics-tls" } }, { "name": "openshift-state-metrics-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "openshift-state-metrics-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-23T19:33:20Z", "generation": 1, "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.87.0", "pod-template-hash": "76b589d668" }, "name": "prometheus-operator-76b589d668", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "prometheus-operator", "uid": "37f670ef-2a56-401c-8ced-1e272d8c0fc7" } ], "resourceVersion": "11577", "uid": "4f185a9e-3bd2-4648-bfb6-ec49f94f5002" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/name": "prometheus-operator", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "76b589d668" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "prometheus-operator", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.87.0", "pod-template-hash": "76b589d668" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--kubelet-service=kube-system/kubelet", "--prometheus-config-reloader=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a53c639f63de8981aebdbd9f3aa0c2f43d4ec66f7624459ed6d6ee163db5a9c1", "--kubelet-endpoints=true", "--kubelet-endpointslice=true", "--watch-referenced-objects-in-all-namespaces=true", "--prometheus-instance-namespaces=openshift-monitoring", "--thanos-ruler-instance-namespaces=openshift-monitoring", "--alertmanager-instance-namespaces=openshift-monitoring", "--config-reloader-cpu-limit=0", "--config-reloader-memory-limit=0", "--config-reloader-cpu-request=1m", "--config-reloader-memory-request=10Mi", "--web.listen-address=127.0.0.1:8080", "--controller-id=openshift-monitoring/prometheus-operator" ], "env": [ { "name": "GOGC", "value": "30" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1eb6a6ee3c66ac15be6bc21bb6015c595c11c15b9dfd21bd9f5ce7f7b990ebaa", "imagePullPolicy": "IfNotPresent", "name": "prometheus-operator", "resources": { "requests": { "cpu": "5m", "memory": "150Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://localhost:8080/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d6fbe0075cbb12bfd287c973704fadf97154c7f73e370733d976a40835e9155a", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "prometheus-operator-tls", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true }, { "mountPath": "/etc/kube-rbac-policy", "name": "prometheus-operator-kube-rbac-proxy-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "prometheus-operator", "serviceAccountName": "prometheus-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "prometheus-operator-tls", "secret": { "defaultMode": 420, "secretName": "prometheus-operator-tls" } }, { "name": "prometheus-operator-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "prometheus-operator-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-23T19:33:17Z", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.87.0", "pod-template-hash": "59b79769fb" }, "name": "prometheus-operator-admission-webhook-59b79769fb", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "prometheus-operator-admission-webhook", "uid": "d3f82412-e50e-4d7c-a373-e16d3fdb6e5e" } ], "resourceVersion": "11483", "uid": "bfca8fd7-bb0d-44e4-9dc9-32f1b87848b2" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "59b79769fb" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "prometheus-operator-admission-webhook", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.87.0", "pod-template-hash": "59b79769fb" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "automountServiceAccountToken": false, "containers": [ { "args": [ "--web.enable-tls=true", "--web.cert-file=/etc/tls/private/tls.crt", "--web.key-file=/etc/tls/private/tls.key", "--web.tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--web.tls-min-version=VersionTLS12", "--name-validation-scheme=utf8" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:572ebf7c7fab1a518582f3ca46c866730423cce6e8a19f614dc15fd61bf0c65a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "prometheus-operator-admission-webhook", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "5m", "memory": "30Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "tls-certificates", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "prometheus-operator-admission-webhook", "serviceAccountName": "prometheus-operator-admission-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls-certificates", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "prometheus-operator-admission-webhook-tls" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-23T19:33:32Z", "generation": 1, "labels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "telemeter-client", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "65dd4fdc69" }, "name": "telemeter-client-65dd4fdc69", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "telemeter-client", "uid": "d37458d5-f767-4c3e-b642-350c2aac0b6d" } ], "resourceVersion": "12449", "uid": "9268a541-e5a5-496b-b43a-9ed24b34c752" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/name": "telemeter-client", "pod-template-hash": "65dd4fdc69" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}", "telemeter-token-hash": "3gof03q7c3qkv" }, "labels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "telemeter-client", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "65dd4fdc69" } }, "spec": { "containers": [ { "command": [ "/usr/bin/telemeter-client", "--id=$(ID)", "--from=$(FROM)", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--from-ca-file=/etc/serving-certs-ca-bundle/service-ca.crt", "--from-token-file=/var/run/secrets/kubernetes.io/serviceaccount/token", "--to=$(TO)", "--to-token-file=/etc/telemeter/token", "--listen=localhost:8080", "--anonymize-salt-file=/etc/telemeter/salt", "--anonymize-labels=$(ANONYMIZE_LABELS)", "--match={__name__=~\"cluster:usage:.*\"}", "--match={__name__=\"count:up0\"}", "--match={__name__=\"count:up1\"}", "--match={__name__=\"cluster_version\"}", "--match={__name__=\"cluster_version_available_updates\"}", "--match={__name__=\"cluster_version_capability\"}", "--match={__name__=\"cluster_operator_up\"}", "--match={__name__=\"cluster_operator_conditions\"}", "--match={__name__=\"cluster_version_payload\"}", "--match={__name__=\"cluster_installer\"}", "--match={__name__=\"cluster_infrastructure_provider\"}", "--match={__name__=\"cluster_feature_set\"}", "--match={__name__=\"instance:etcd_object_counts:sum\"}", "--match={__name__=\"ALERTS\",alertstate=\"firing\",severity=~\"critical|warning|info|none\"}", "--match={__name__=\"code:apiserver_request_total:rate:sum\"}", "--match={__name__=\"cluster:capacity_cpu_cores:sum\"}", "--match={__name__=\"cluster:capacity_memory_bytes:sum\"}", "--match={__name__=\"cluster:cpu_usage_cores:sum\"}", "--match={__name__=\"cluster:memory_usage_bytes:sum\"}", "--match={__name__=\"openshift:cpu_usage_cores:sum\"}", "--match={__name__=\"openshift:memory_usage_bytes:sum\"}", "--match={__name__=\"workload:cpu_usage_cores:sum\"}", "--match={__name__=\"workload:memory_usage_bytes:sum\"}", "--match={__name__=\"cluster:virt_platform_nodes:sum\"}", "--match={__name__=\"cluster:node_instance_type_count:sum\"}", "--match={__name__=\"cnv:vmi_status_running:count\"}", "--match={__name__=\"cnv_abnormal\", reason=~\"memory_working_set_delta_from_request|memory_rss_delta_from_request\"}", "--match={__name__=\"cluster:vmi_request_cpu_cores:sum\"}", "--match={__name__=\"node_role_os_version_machine:cpu_capacity_cores:sum\"}", "--match={__name__=\"node_role_os_version_machine:cpu_capacity_sockets:sum\"}", "--match={__name__=\"subscription_sync_total\"}", "--match={__name__=\"olm_resolution_duration_seconds\"}", "--match={__name__=\"csv_succeeded\"}", "--match={__name__=\"csv_abnormal\"}", "--match={__name__=\"cluster:kube_persistentvolumeclaim_resource_requests_storage_bytes:provisioner:sum\"}", "--match={__name__=\"cluster:kubelet_volume_stats_used_bytes:provisioner:sum\"}", "--match={__name__=\"ceph_cluster_total_bytes\"}", "--match={__name__=\"ceph_cluster_total_used_raw_bytes\"}", "--match={__name__=\"ceph_health_status\"}", "--match={__name__=\"odf_system_raw_capacity_total_bytes\"}", "--match={__name__=\"odf_system_raw_capacity_used_bytes\"}", "--match={__name__=\"odf_system_health_status\"}", "--match={__name__=\"job:ceph_osd_metadata:count\"}", "--match={__name__=\"job:kube_pv:count\"}", "--match={__name__=\"job:odf_system_pvs:count\"}", "--match={__name__=\"job:ceph_pools_iops:total\"}", "--match={__name__=\"job:ceph_pools_iops_bytes:total\"}", "--match={__name__=\"job:ceph_versions_running:count\"}", "--match={__name__=\"job:noobaa_total_unhealthy_buckets:sum\"}", "--match={__name__=\"job:noobaa_bucket_count:sum\"}", "--match={__name__=\"job:noobaa_total_object_count:sum\"}", "--match={__name__=\"odf_system_bucket_count\", system_type=\"OCS\", system_vendor=\"Red Hat\"}", "--match={__name__=\"odf_system_objects_total\", system_type=\"OCS\", system_vendor=\"Red Hat\"}", "--match={__name__=\"noobaa_accounts_num\"}", "--match={__name__=\"noobaa_total_usage\"}", "--match={__name__=\"console_url\"}", "--match={__name__=\"cluster:console_auth_login_requests_total:sum\"}", "--match={__name__=\"cluster:console_auth_login_successes_total:sum\"}", "--match={__name__=\"cluster:console_auth_login_failures_total:sum\"}", "--match={__name__=\"cluster:console_auth_logout_requests_total:sum\"}", "--match={__name__=\"cluster:console_usage_users:max\"}", "--match={__name__=\"cluster:console_plugins_info:max\"}", "--match={__name__=\"cluster:console_customization_perspectives_info:max\"}", "--match={__name__=\"cluster:ovnkube_controller_egress_routing_via_host:max\"}", "--match={__name__=\"cluster:ovnkube_controller_admin_network_policies_db_objects:max\",table_name=~\"ACL|Address_Set\"}", "--match={__name__=\"cluster:ovnkube_controller_baseline_admin_network_policies_db_objects:max\",table_name=~\"ACL|Address_Set\"}", "--match={__name__=\"cluster:ovnkube_controller_admin_network_policies_rules:max\",direction=~\"Ingress|Egress\",action=~\"Pass|Allow|Deny\"}", "--match={__name__=\"cluster:ovnkube_controller_baseline_admin_network_policies_rules:max\",direction=~\"Ingress|Egress\",action=~\"Allow|Deny\"}", "--match={__name__=\"cluster:network_attachment_definition_instances:max\"}", "--match={__name__=\"cluster:network_attachment_definition_enabled_instance_up:max\"}", "--match={__name__=\"cluster:ingress_controller_aws_nlb_active:sum\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:min\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:max\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:avg\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:median\"}", "--match={__name__=\"cluster:openshift_route_info:tls_termination:sum\"}", "--match={__name__=\"openshift:gateway_api_usage:count\",gateway_class_type=~\"openshift|not-openshift\"}", "--match={__name__=\"insightsclient_request_send_total\"}", "--match={__name__=\"cam_app_workload_migrations\"}", "--match={__name__=\"cluster:apiserver_current_inflight_requests:sum:max_over_time:2m\"}", "--match={__name__=\"cluster:alertmanager_integrations:max\"}", "--match={__name__=\"cluster:telemetry_selected_series:count\"}", "--match={__name__=\"openshift:prometheus_tsdb_head_series:sum\"}", "--match={__name__=\"openshift:prometheus_tsdb_head_samples_appended_total:sum\"}", "--match={__name__=\"monitoring:container_memory_working_set_bytes:sum\"}", "--match={__name__=\"namespace_job:scrape_series_added:topk3_sum1h\"}", "--match={__name__=\"namespace_job:scrape_samples_post_metric_relabeling:topk3\"}", "--match={__name__=\"monitoring:haproxy_server_http_responses_total:sum\"}", "--match={__name__=\"profile:cluster_monitoring_operator_collection_profile:max\"}", "--match={__name__=\"vendor_model:node_accelerator_cards:sum\",vendor=~\"NVIDIA|AMD|GAUDI|INTEL|QUALCOMM|Marvell|Mellanox\"}", "--match={__name__=\"rhmi_status\"}", "--match={__name__=\"status:upgrading:version:rhoam_state:max\"}", "--match={__name__=\"state:rhoam_critical_alerts:max\"}", "--match={__name__=\"state:rhoam_warning_alerts:max\"}", "--match={__name__=\"rhoam_7d_slo_percentile:max\"}", "--match={__name__=\"rhoam_7d_slo_remaining_error_budget:max\"}", "--match={__name__=\"cluster_legacy_scheduler_policy\"}", "--match={__name__=\"cluster_master_schedulable\"}", "--match={__name__=\"che_workspace_status\"}", "--match={__name__=\"che_workspace_started_total\"}", "--match={__name__=\"che_workspace_failure_total\"}", "--match={__name__=\"che_workspace_start_time_seconds_sum\"}", "--match={__name__=\"che_workspace_start_time_seconds_count\"}", "--match={__name__=\"cco_credentials_mode\"}", "--match={__name__=\"cluster:kube_persistentvolume_plugin_type_counts:sum\"}", "--match={__name__=\"acm_managed_cluster_info\"}", "--match={__name__=\"acm_managed_cluster_worker_cores:max\"}", "--match={__name__=\"acm_console_page_count:sum\", page=~\"overview-classic|overview-fleet|search|search-details|clusters|application|governance\"}", "--match={__name__=\"cluster:vsphere_vcenter_info:sum\"}", "--match={__name__=\"cluster:vsphere_esxi_version_total:sum\"}", "--match={__name__=\"cluster:vsphere_node_hw_version_total:sum\"}", "--match={__name__=\"openshift:build_by_strategy:sum\"}", "--match={__name__=\"rhods_aggregate_availability\"}", "--match={__name__=\"rhods_total_users\"}", "--match={__name__=\"instance:etcd_disk_wal_fsync_duration_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"instance:etcd_mvcc_db_total_size_in_bytes:sum\"}", "--match={__name__=\"instance:etcd_network_peer_round_trip_time_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"instance:etcd_mvcc_db_total_size_in_use_in_bytes:sum\"}", "--match={__name__=\"instance:etcd_disk_backend_commit_duration_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"jaeger_operator_instances_storage_types\"}", "--match={__name__=\"jaeger_operator_instances_strategies\"}", "--match={__name__=\"jaeger_operator_instances_agent_strategies\"}", "--match={__name__=\"type:tempo_operator_tempostack_storage_backend:sum\",type=~\"azure|gcs|s3\"}", "--match={__name__=\"state:tempo_operator_tempostack_managed:sum\",state=~\"Managed|Unmanaged\"}", "--match={__name__=\"type:tempo_operator_tempostack_multi_tenancy:sum\",type=~\"static|openshift|disabled\"}", "--match={__name__=\"enabled:tempo_operator_tempostack_jaeger_ui:sum\",enabled=~\"true|false\"}", "--match={__name__=\"type:opentelemetry_collector_receivers:sum\",type=~\"jaeger|hostmetrics|opencensus|prometheus|zipkin|kafka|filelog|journald|k8sevents|kubeletstats|k8scluster|k8sobjects|otlp\"}", "--match={__name__=\"type:opentelemetry_collector_exporters:sum\",type=~\"debug|logging|otlp|otlphttp|prometheus|lokiexporter|kafka|awscloudwatchlogs|loadbalancing\"}", "--match={__name__=\"type:opentelemetry_collector_processors:sum\",type=~\"batch|memorylimiter|attributes|resource|span|k8sattributes|resourcedetection|filter|routing|cumulativetodelta|groupbyattrs\"}", "--match={__name__=\"type:opentelemetry_collector_extensions:sum\",type=~\"zpages|ballast|memorylimiter|jaegerremotesampling|healthcheck|pprof|oauth2clientauth|oidcauth|bearertokenauth|filestorage\"}", "--match={__name__=\"type:opentelemetry_collector_connectors:sum\",type=~\"spanmetrics|forward\"}", "--match={__name__=\"type:opentelemetry_collector_info:sum\",type=~\"deployment|daemonset|sidecar|statefulset\"}", "--match={__name__=\"appsvcs:cores_by_product:sum\"}", "--match={__name__=\"nto_custom_profiles:count\"}", "--match={__name__=\"openshift_csi_share_configmap\"}", "--match={__name__=\"openshift_csi_share_secret\"}", "--match={__name__=\"openshift_csi_share_mount_failures_total\"}", "--match={__name__=\"openshift_csi_share_mount_requests_total\"}", "--match={__name__=\"eo_es_storage_info\"}", "--match={__name__=\"eo_es_redundancy_policy_info\"}", "--match={__name__=\"eo_es_defined_delete_namespaces_total\"}", "--match={__name__=\"eo_es_misconfigured_memory_resources_info\"}", "--match={__name__=\"cluster:eo_es_data_nodes_total:max\"}", "--match={__name__=\"cluster:eo_es_documents_created_total:sum\"}", "--match={__name__=\"cluster:eo_es_documents_deleted_total:sum\"}", "--match={__name__=\"pod:eo_es_shards_total:max\"}", "--match={__name__=\"eo_es_cluster_management_state_info\"}", "--match={__name__=\"imageregistry:imagestreamtags_count:sum\"}", "--match={__name__=\"imageregistry:operations_count:sum\"}", "--match={__name__=\"log_logging_info\"}", "--match={__name__=\"log_collector_error_count_total\"}", "--match={__name__=\"log_forwarder_pipeline_info\"}", "--match={__name__=\"log_forwarder_input_info\"}", "--match={__name__=\"log_forwarder_output_info\"}", "--match={__name__=\"cluster:log_collected_bytes_total:sum\"}", "--match={__name__=\"cluster:log_logged_bytes_total:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_pipelines:sum\"}", "--match={__name__=\"openshift_logging:log_forwarders:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_input_type:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_output_type:sum\"}", "--match={__name__=\"openshift_logging:vector_component_received_bytes_total:rate5m\"}", "--match={__name__=\"cluster:kata_monitor_running_shim_count:sum\"}", "--match={__name__=\"platform:hypershift_hostedclusters:max\"}", "--match={__name__=\"platform:hypershift_nodepools:max\"}", "--match={__name__=\"cluster_name:hypershift_nodepools_size:sum\"}", "--match={__name__=\"cluster_name:hypershift_nodepools_available_replicas:sum\"}", "--match={__name__=\"namespace:noobaa_unhealthy_bucket_claims:max\"}", "--match={__name__=\"namespace:noobaa_buckets_claims:max\"}", "--match={__name__=\"namespace:noobaa_unhealthy_namespace_resources:max\"}", "--match={__name__=\"namespace:noobaa_namespace_resources:max\"}", "--match={__name__=\"namespace:noobaa_unhealthy_namespace_buckets:max\"}", "--match={__name__=\"namespace:noobaa_namespace_buckets:max\"}", "--match={__name__=\"namespace:noobaa_accounts:max\"}", "--match={__name__=\"namespace:noobaa_usage:max\"}", "--match={__name__=\"namespace:noobaa_system_health_status:max\"}", "--match={__name__=\"ocs_advanced_feature_usage\"}", "--match={__name__=\"os_image_url_override:sum\"}", "--match={__name__=\"cluster:mcd_nodes_with_unsupported_packages:count\"}", "--match={__name__=\"cluster:mcd_total_unsupported_packages:sum\"}", "--match={__name__=\"cluster:vsphere_topology_tags:max\"}", "--match={__name__=\"cluster:vsphere_infrastructure_failure_domains:max\"}", "--match={__name__=\"apiserver_list_watch_request_success_total:rate:sum\", verb=~\"LIST|WATCH\"}", "--match={__name__=\"rhacs:telemetry:rox_central_info\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_clusters\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_nodes\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_vcpus\"}", "--match={__name__=\"rhacs:telemetry:rox_sensor_info\"}", "--match={__name__=\"cluster:volume_manager_selinux_pod_context_mismatch_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volume_context_mismatch_warnings_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volume_context_mismatch_errors_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volumes_admitted_total\"}", "--match={__name__=\"ols:provider_model_configuration\"}", "--match={__name__=\"ols:rest_api_query_calls_total:2xx\"}", "--match={__name__=\"ols:rest_api_query_calls_total:4xx\"}", "--match={__name__=\"ols:rest_api_query_calls_total:5xx\"}", "--match={__name__=\"openshift:openshift_network_operator_ipsec_state:info\"}", "--match={__name__=\"cluster:health:group_severity:count\", severity=~\"critical|warning|info|none\"}", "--match={__name__=\"cluster:controlplane_topology:info\", mode=~\"HighlyAvailable|HighlyAvailableArbiter|SingleReplica|DualReplica|External\"}", "--match={__name__=\"cluster:infrastructure_topology:info\", mode=~\"HighlyAvailable|SingleReplica\"}", "--match={__name__=\"cluster:selinux_warning_controller_selinux_volume_conflict:count\"}", "--match={__name__=\"cluster:mtv_migrations_status_total:sum\", provider=~\"ova|vsphere|openstack|openshift|ovirt|awsec2\", target=~\"Local|Remote\", mode=~\"Cold|Warm|RCM\", status=~\"Succeeded|Failed|Canceled\"}", "--limit-bytes=5242880" ], "env": [ { "name": "ANONYMIZE_LABELS" }, { "name": "FROM", "value": "https://prometheus-k8s.openshift-monitoring.svc:9091" }, { "name": "ID", "value": "41dacb30-2965-4cf3-84c3-e11817523de2" }, { "name": "TO", "value": "https://infogw.api.openshift.com/" }, { "name": "HTTP_PROXY" }, { "name": "HTTPS_PROXY" }, { "name": "NO_PROXY" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1f118a4ec0b92cb88c8544ea31d2b9adfc7006eeddb7a8d260150ecbce4adb8c", "imagePullPolicy": "IfNotPresent", "name": "telemeter-client", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "40Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/serving-certs-ca-bundle", "name": "serving-certs-ca-bundle" }, { "mountPath": "/etc/telemeter", "name": "secret-telemeter-client" }, { "mountPath": "/etc/tls/private", "name": "federate-client-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem/", "name": "telemeter-trusted-ca-bundle", "readOnly": true } ] }, { "args": [ "--reload-url=http://localhost:8080/-/reload", "--watched-dir=/etc/serving-certs-ca-bundle" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a53c639f63de8981aebdbd9f3aa0c2f43d4ec66f7624459ed6d6ee163db5a9c1", "imagePullPolicy": "IfNotPresent", "name": "reload", "resources": { "requests": { "cpu": "1m", "memory": "10Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/serving-certs-ca-bundle", "name": "serving-certs-ca-bundle" } ] }, { "args": [ "--secure-listen-address=:8443", "--upstream=http://127.0.0.1:8080/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--config-file=/etc/kube-rbac-policy/config.yaml", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d6fbe0075cbb12bfd287c973704fadf97154c7f73e370733d976a40835e9155a", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "telemeter-client-tls" }, { "mountPath": "/etc/kube-rbac-policy", "name": "secret-telemeter-client-kube-rbac-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "telemeter-client", "serviceAccountName": "telemeter-client", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "telemeter-client-serving-certs-ca-bundle" }, "name": "serving-certs-ca-bundle" }, { "name": "secret-telemeter-client", "secret": { "defaultMode": 420, "secretName": "telemeter-client" } }, { "name": "telemeter-client-tls", "secret": { "defaultMode": 420, "secretName": "telemeter-client-tls" } }, { "name": "federate-client-tls", "secret": { "defaultMode": 420, "secretName": "federate-client-certs" } }, { "name": "secret-telemeter-client-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "telemeter-client-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "telemeter-trusted-ca-bundle-8i12ta5c71j38", "optional": true }, "name": "telemeter-trusted-ca-bundle" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-23T19:33:29Z", "generation": 1, "labels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.39.2", "pod-template-hash": "5db54ddc9" }, "name": "thanos-querier-5db54ddc9", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "thanos-querier", "uid": "e622d24f-7b5c-463f-bfb0-d8cb90d1bfb6" } ], "resourceVersion": "12658", "uid": "611bbcf0-8f5f-4059-be6c-e4a8a8942a50" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "5db54ddc9" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.39.2", "pod-template-hash": "5db54ddc9" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "query", "--grpc-address=127.0.0.1:10901", "--http-address=127.0.0.1:9090", "--log.format=logfmt", "--query.replica-label=prometheus_replica", "--query.replica-label=thanos_ruler_replica", "--endpoint=dnssrv+_grpc._tcp.prometheus-operated.openshift-monitoring.svc.cluster.local", "--query.auto-downsampling", "--store.sd-dns-resolver=miekgdns", "--grpc-client-tls-secure", "--grpc-client-tls-cert=/etc/tls/grpc/client.crt", "--grpc-client-tls-key=/etc/tls/grpc/client.key", "--grpc-client-tls-ca=/etc/tls/grpc/ca.crt", "--grpc-client-server-name=prometheus-grpc", "--web.disable-cors" ], "env": [ { "name": "HOST_IP_ADDRESS", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "status.hostIP" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9d6d63dce784df5863e6a0ba4c11317a26c9d756d4e62d47759c97190a71cce5", "imagePullPolicy": "IfNotPresent", "name": "thanos-query", "ports": [ { "containerPort": 9090, "name": "http", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "12Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/grpc", "name": "secret-grpc-tls" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9091", "--upstream=http://127.0.0.1:9090", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--ignore-paths=/-/healthy,/-/ready", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d6fbe0075cbb12bfd287c973704fadf97154c7f73e370733d976a40835e9155a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 4, "httpGet": { "path": "/-/healthy", "port": 9091, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "kube-rbac-proxy-web", "ports": [ { "containerPort": 9091, "name": "web", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 20, "httpGet": { "path": "/-/ready", "port": 9091, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy-web" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9092", "--upstream=http://127.0.0.1:9095", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--allow-paths=/api/v1/query,/api/v1/query_range,/api/v1/labels,/api/v1/label/*/values,/api/v1/series", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d6fbe0075cbb12bfd287c973704fadf97154c7f73e370733d976a40835e9155a", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9092, "name": "tenancy", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy" } ] }, { "args": [ "--insecure-listen-address=127.0.0.1:9095", "--upstream=http://127.0.0.1:9090", "--label=namespace", "--enable-label-apis", "--error-on-replace", "--rules-with-active-alerts", "--enable-label-matchers-for-rules-api" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:603cb4fd86828df9d4291e197dfd6a90668ca8ef40d38f527019faca29e32f1c", "imagePullPolicy": "IfNotPresent", "name": "prom-label-proxy", "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--secure-listen-address=0.0.0.0:9093", "--upstream=http://127.0.0.1:9095", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--allow-paths=/api/v1/rules,/api/v1/alerts", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d6fbe0075cbb12bfd287c973704fadf97154c7f73e370733d976a40835e9155a", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-rules", "ports": [ { "containerPort": 9093, "name": "tenancy-rules", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy-rules" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9094", "--upstream=http://127.0.0.1:9090", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--client-ca-file=/etc/tls/client/client-ca.crt", "--allow-paths=/metrics", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d6fbe0075cbb12bfd287c973704fadf97154c7f73e370733d976a40835e9155a", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-metrics", "ports": [ { "containerPort": 9094, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy-metrics" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "thanos-querier", "serviceAccountName": "thanos-querier", "terminationGracePeriodSeconds": 120, "volumes": [ { "name": "secret-thanos-querier-tls", "secret": { "defaultMode": 420, "secretName": "thanos-querier-tls" } }, { "name": "secret-thanos-querier-kube-rbac-proxy", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy" } }, { "name": "secret-thanos-querier-kube-rbac-proxy-web", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy-web" } }, { "name": "secret-thanos-querier-kube-rbac-proxy-rules", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy-rules" } }, { "name": "secret-thanos-querier-kube-rbac-proxy-metrics", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy-metrics" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "name": "secret-grpc-tls", "secret": { "defaultMode": 420, "secretName": "thanos-querier-grpc-tls-bfo0mujt7ka6t" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "kubernetes.io/description": "This deployment deploys the Networking console plugin pod which serves\nthe contents of the Networking section in OpenShift Console\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.21.9" }, "creationTimestamp": "2026-04-23T19:24:41Z", "generation": 1, "labels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator", "pod-template-hash": "7f449dfbfd" }, "name": "networking-console-plugin-7f449dfbfd", "namespace": "openshift-network-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "networking-console-plugin", "uid": "d8231383-59fc-44a4-aff2-45ff91cff5e3" } ], "resourceVersion": "11216", "uid": "0b527eaa-c08d-4bba-b12f-3133ef0ebeb5" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator", "pod-template-hash": "7f449dfbfd" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator", "pod-template-hash": "7f449dfbfd" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator" } }, "namespaces": [ "openshift-network-console" ], "topologyKey": "kubernetes.io/hostname" }, "weight": 90 } ] } }, "automountServiceAccountToken": false, "containers": [ { "command": [ "/bin/sh", "-c", "if echo \"$POD_IP\" | grep -qE '^([0-9]{1,3}\\.){3}[0-9]{1,3}$'; then\n LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME=\"9443\"\nelse\n LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME=\"[::]:9443\"\nfi\nsed \"s/LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME/$LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME/g\" /etc/nginx/nginx.conf \u003e /tmp/nginx.conf\nexec nginx -c /tmp/nginx.conf -g 'daemon off;'\n" ], "env": [ { "name": "POD_IP", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "status.podIP" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ce138e8cf5b96557b1864ef6f27c2608bdca59be2611804366cef7169c36291e", "imagePullPolicy": "IfNotPresent", "name": "networking-console-plugin", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/cert", "name": "networking-console-plugin-cert", "readOnly": true }, { "mountPath": "/etc/nginx/nginx.conf", "name": "nginx-conf", "readOnly": true, "subPath": "nginx.conf" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "networking-console-plugin" }, "name": "nginx-conf" }, { "name": "networking-console-plugin-cert", "secret": { "defaultMode": 420, "secretName": "networking-console-plugin-cert" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "kubernetes.io/description": "This deployment deploys the network-check-source pod that performs\npod network connectivity checks\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.21.9" }, "creationTimestamp": "2026-04-23T19:24:18Z", "generation": 1, "labels": { "app": "network-check-source", "kubernetes.io/os": "linux", "pod-template-hash": "84fd6d9d54" }, "name": "network-check-source-84fd6d9d54", "namespace": "openshift-network-diagnostics", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "network-check-source", "uid": "0e5e4b69-d0bf-49ea-8870-960a37fd8f32" } ], "resourceVersion": "10221", "uid": "13cc0f34-6d92-4df7-8aa8-f13371493f9c" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "network-check-source", "pod-template-hash": "84fd6d9d54" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app": "network-check-source", "kubernetes.io/os": "linux", "pod-template-hash": "84fd6d9d54" } }, "spec": { "containers": [ { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)" ], "command": [ "cluster-network-check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4b748615a43be416d52c33df03e2cdec89ededded1d6a2ade167c5a955d56e5f", "imagePullPolicy": "IfNotPresent", "name": "check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "40Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "network-diagnostics", "serviceAccountName": "network-diagnostics", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true" }, "creationTimestamp": "2026-04-23T19:24:18Z", "generation": 1, "labels": { "app": "service-ca-operator", "pod-template-hash": "bc9564db4" }, "name": "service-ca-operator-bc9564db4", "namespace": "openshift-service-ca-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "service-ca-operator", "uid": "ff6f8753-5e8b-4850-8340-37851586d797" } ], "resourceVersion": "12709", "uid": "52a56381-17d1-49f6-a455-b8c8e2dd65ea" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "service-ca-operator", "pod-template-hash": "bc9564db4" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app": "service-ca-operator", "pod-template-hash": "bc9564db4" }, "name": "service-ca-operator" }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/operator-config.yaml", "-v=2" ], "command": [ "service-ca-operator", "operator" ], "env": [ { "name": "CONTROLLER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7c18511170e7422ecc36751baa59da233063289cd05021a468bad66e6c0ed210" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.21.9" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7c18511170e7422ecc36751baa59da233063289cd05021a468bad66e6c0ed210", "imagePullPolicy": "IfNotPresent", "name": "service-ca-operator", "resources": { "requests": { "cpu": "10m", "memory": "80Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsGroup": 1001, "runAsNonRoot": true, "runAsUser": 1001, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "service-ca-operator", "serviceAccountName": "service-ca-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "service-ca-operator-config" }, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "135be948e3b0f3faee2fb4daa1f1da2738cf8ccbd0050b429fde150fb211e27a" }, "creationTimestamp": "2026-04-23T19:32:49Z", "generation": 1, "labels": { "app": "service-ca", "pod-template-hash": "d9cb48497", "service-ca": "true" }, "name": "service-ca-d9cb48497", "namespace": "openshift-service-ca", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "service-ca", "uid": "ee1cbb03-78b4-4a2c-b60d-ecdbb4c7eb30" } ], "resourceVersion": "10514", "uid": "c6ac9d64-54f5-4243-8857-725a625e8a43" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "service-ca", "pod-template-hash": "d9cb48497", "service-ca": "true" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app": "service-ca", "pod-template-hash": "d9cb48497", "service-ca": "true" }, "name": "service-ca" }, "spec": { "containers": [ { "args": [ "-v=2" ], "command": [ "service-ca-operator", "controller" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7c18511170e7422ecc36751baa59da233063289cd05021a468bad66e6c0ed210", "imagePullPolicy": "IfNotPresent", "name": "service-ca-controller", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "120Mi" } }, "securityContext": { "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/signing-key", "name": "signing-key" }, { "mountPath": "/var/run/configmaps/signing-cabundle", "name": "signing-cabundle" } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "service-ca", "serviceAccountName": "service-ca", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "signing-key", "secret": { "defaultMode": 420, "secretName": "signing-key" } }, { "configMap": { "defaultMode": 420, "name": "signing-cabundle" }, "name": "signing-cabundle" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } } ], "kind": "List", "metadata": { "resourceVersion": "" } }