{ "apiVersion": "v1", "items": [ { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-04-02T23:57:20Z", "generation": 1, "name": "global-pull-secret-syncer", "namespace": "kube-system", "resourceVersion": "20765", "uid": "fe8ac5a1-94ef-4668-a483-1dc2b4498bd0" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "name": "global-pull-secret-syncer" } }, "template": { "metadata": { "labels": { "hypershift.openshift.io/globalps-config-hash": "1cead869", "name": "global-pull-secret-syncer" } }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "sync-global-pullsecret" ], "command": [ "/usr/bin/control-plane-operator" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:90ee81dd95523a0fa12250ac7e7ee77aa32690129b3fe881d548dedd117ac97b", "imagePullPolicy": "IfNotPresent", "name": "global-pull-secret-syncer", "resources": { "requests": { "cpu": "5m", "memory": "35Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet", "name": "kubelet-config" }, { "mountPath": "/var/run/dbus", "name": "dbus" }, { "mountPath": "/etc/original-pull-secret", "name": "original-pull-secret", "readOnly": true } ] } ], "dnsPolicy": "Default", "nodeSelector": { "hypershift.openshift.io/nodepool-globalps-enabled": "true" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet", "type": "Directory" }, "name": "kubelet-config" }, { "hostPath": { "path": "/var/run/dbus", "type": "Directory" }, "name": "dbus" }, { "name": "original-pull-secret", "secret": { "defaultMode": 420, "secretName": "original-pull-secret" } } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": 1 }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-04-02T23:57:20Z", "generation": 1, "labels": { "hypershift.openshift.io/managed": "true" }, "name": "konnectivity-agent", "namespace": "kube-system", "resourceVersion": "10411", "uid": "0b9a3452-25db-4a04-b462-9c9d44d8fd57" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "konnectivity-agent" } }, "template": { "metadata": { "annotations": { "hypershift.openshift.io/release-image": "quay.io/openshift-release-dev/ocp-release@sha256:c781dbeb8ddfbc3c5715f4dd6e10578b4dab144aa8a4b3e5072f55c26f9a029c" }, "labels": { "app": "konnectivity-agent" } }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "--logtostderr=true", "--ca-cert", "/etc/konnectivity/ca/ca.crt", "--agent-cert", "/etc/konnectivity/agent/tls.crt", "--agent-key", "/etc/konnectivity/agent/tls.key", "--proxy-server-host", "konnectivity-server.apps.kx-f1cb2dbfda.hypershift.local", "--proxy-server-port", "443", "--health-server-host", "127.0.0.1", "--health-server-port", "2041", "--agent-identifiers=default-route=true", "--keepalive-time", "30s", "--probe-interval", "5s", "--sync-interval", "5s", "--sync-interval-cap", "30s", "--v", "3" ], "command": [ "/usr/bin/proxy-agent" ], "env": [ { "name": "HTTP_PROXY" }, { "name": "HTTPS_PROXY" }, { "name": "NO_PROXY" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:66b139150b1301de11cce183fad7312ac7e993fe5bb58f7a1b1ead3a5048b30a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 6, "httpGet": { "host": "127.0.0.1", "path": "healthz", "port": 2041, "scheme": "HTTP" }, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "konnectivity-agent", "readinessProbe": { "failureThreshold": 1, "httpGet": { "host": "127.0.0.1", "path": "readyz", "port": 2041, "scheme": "HTTP" }, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "40m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "startupProbe": { "failureThreshold": 60, "httpGet": { "host": "127.0.0.1", "path": "healthz", "port": 2041, "scheme": "HTTP" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 5 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/konnectivity/agent", "name": "agent-certs" }, { "mountPath": "/etc/konnectivity/ca", "name": "konnectivity-ca" } ] } ], "dnsPolicy": "Default", "hostNetwork": true, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsUser": 1000 }, "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "name": "agent-certs", "secret": { "defaultMode": 416, "secretName": "konnectivity-agent" } }, { "configMap": { "defaultMode": 416, "name": "konnectivity-ca-bundle" }, "name": "konnectivity-ca" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "config.openshift.io/inject-proxy-cabundle": "csi-driver", "deprecated.daemonset.template.generation": "1", "operator.openshift.io/spec-hash": "474f2e29bbf89a19c3b813b60bf3d360ee27b306efda502cada7afd6719d0620", "storage.openshift.io/stable-generation": "1" }, "creationTimestamp": "2026-04-02T23:57:20Z", "generation": 1, "name": "aws-ebs-csi-driver-node", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "10332", "uid": "a4b8b887-13b9-4e30-b116-351efb80113d" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "aws-ebs-csi-driver-node" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "openshift.io/required-scc": "privileged", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app": "aws-ebs-csi-driver-node" } }, "spec": { "containers": [ { "args": [ "node", "--endpoint=$(CSI_ENDPOINT)", "--logtostderr", "--v=2", "--reserved-volume-attachments=1" ], "env": [ { "name": "CSI_ENDPOINT", "value": "unix:/csi/csi.sock" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1f9378e183eb5d9d50f57e8a03ae1428bdfed1fbf2ce985d6ac59560f9c7e81c", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "host": "127.0.0.1", "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "csi-driver", "ports": [ { "containerPort": 10300, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet", "mountPropagation": "Bidirectional", "name": "kubelet-dir" }, { "mountPath": "/csi", "name": "socket-dir" }, { "mountPath": "/dev", "name": "device-dir" }, { "mountPath": "/etc/selinux", "name": "etc-selinux" }, { "mountPath": "/sys/fs", "name": "sys-fs" } ] }, { "args": [ "--csi-address=/csi/csi.sock", "--kubelet-registration-path=/var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock", "--http-endpoint=127.0.0.1:10309", "--v=2" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:326a8b5302b495cb059364ab96dfdd38425252613cfa3abb7e1dacaecda4fb1e", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "/bin/sh", "-c", "rm -rf /registration/ebs.csi.aws.com-reg.sock /csi/csi.sock" ] } } }, "livenessProbe": { "failureThreshold": 5, "httpGet": { "host": "127.0.0.1", "path": "/healthz", "port": "rhealthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "csi-node-driver-registrar", "ports": [ { "containerPort": 10309, "name": "rhealthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/csi", "name": "socket-dir" }, { "mountPath": "/registration", "name": "registration-dir" } ] }, { "args": [ "--csi-address=/csi/csi.sock", "--http-endpoint=127.0.0.1:10300", "--v=2", "--probe-timeout=3s" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c84b4d64ac7bc98b36b8157c582baf5605f0dbb6160f6273a435d3158fd2ace1", "imagePullPolicy": "IfNotPresent", "name": "csi-liveness-probe", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/csi", "name": "socket-dir" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "aws-ebs-csi-driver-node-sa", "serviceAccountName": "aws-ebs-csi-driver-node-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet", "type": "Directory" }, "name": "kubelet-dir" }, { "hostPath": { "path": "/var/lib/kubelet/plugins/ebs.csi.aws.com/", "type": "DirectoryOrCreate" }, "name": "socket-dir" }, { "hostPath": { "path": "/var/lib/kubelet/plugins_registry/", "type": "Directory" }, "name": "registration-dir" }, { "hostPath": { "path": "/dev", "type": "Directory" }, "name": "device-dir" }, { "hostPath": { "path": "/etc/selinux", "type": "DirectoryOrCreate" }, "name": "etc-selinux" }, { "hostPath": { "path": "/sys/fs", "type": "Directory" }, "name": "sys-fs" }, { "name": "metrics-serving-cert", "secret": { "defaultMode": 420, "secretName": "aws-ebs-csi-driver-node-metrics-serving-cert" } } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-04-02T23:57:34Z", "generation": 1, "labels": { "openshift-app": "tuned" }, "name": "tuned", "namespace": "openshift-cluster-node-tuning-operator", "ownerReferences": [ { "apiVersion": "tuned.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Tuned", "name": "default", "uid": "9a7e143f-eb88-4c1a-9874-bf171f68cace" } ], "resourceVersion": "10371", "uid": "1ee41d07-8f58-473f-97d5-1c78db31d647" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "openshift-app": "tuned" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "name": "tuned", "openshift-app": "tuned" } }, "spec": { "containers": [ { "command": [ "/usr/bin/cluster-node-tuning-operator", "ocp-tuned", "--in-cluster", "-v=0" ], "env": [ { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "OCP_NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "RESYNC_PERIOD", "value": "600" }, { "name": "RELEASE_VERSION", "value": "4.21.7" }, { "name": "CLUSTER_NODE_TUNED_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:17eab4abb2d95e2fe5dead3b0ccd144401f0f4467fc5f1dec8e19d5cb9bfd315" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:17eab4abb2d95e2fe5dead3b0ccd144401f0f4467fc5f1dec8e19d5cb9bfd315", "imagePullPolicy": "IfNotPresent", "name": "tuned", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/modprobe.d", "mountPropagation": "HostToContainer", "name": "etc-modprobe-d" }, { "mountPath": "/etc/sysconfig", "mountPropagation": "HostToContainer", "name": "etc-sysconfig" }, { "mountPath": "/etc/kubernetes", "mountPropagation": "HostToContainer", "name": "etc-kubernetes", "readOnly": true }, { "mountPath": "/etc/sysctl.d", "mountPropagation": "HostToContainer", "name": "etc-sysctl-d", "readOnly": true }, { "mountPath": "/etc/sysctl.conf", "mountPropagation": "HostToContainer", "name": "etc-sysctl-conf", "readOnly": true }, { "mountPath": "/etc/systemd", "mountPropagation": "HostToContainer", "name": "etc-systemd" }, { "mountPath": "/etc/tuned", "name": "etc-tuned" }, { "mountPath": "/run", "mountPropagation": "HostToContainer", "name": "run" }, { "mountPath": "/sys", "mountPropagation": "HostToContainer", "name": "sys" }, { "mountPath": "/tmp", "name": "tmp" }, { "mountPath": "/lib/modules", "mountPropagation": "HostToContainer", "name": "lib-modules", "readOnly": true }, { "mountPath": "/var/lib/kubelet", "mountPropagation": "HostToContainer", "name": "var-lib-kubelet", "readOnly": true }, { "mountPath": "/host", "mountPropagation": "HostToContainer", "name": "host" } ] } ], "dnsPolicy": "ClusterFirst", "hostIPC": true, "hostNetwork": true, "hostPID": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "tuned", "serviceAccountName": "tuned", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/modprobe.d", "type": "Directory" }, "name": "etc-modprobe-d" }, { "hostPath": { "path": "/etc/sysconfig", "type": "Directory" }, "name": "etc-sysconfig" }, { "hostPath": { "path": "/etc/kubernetes", "type": "Directory" }, "name": "etc-kubernetes" }, { "hostPath": { "path": "/etc/sysctl.d", "type": "Directory" }, "name": "etc-sysctl-d" }, { "hostPath": { "path": "/etc/sysctl.conf", "type": "File" }, "name": "etc-sysctl-conf" }, { "hostPath": { "path": "/etc/systemd", "type": "Directory" }, "name": "etc-systemd" }, { "hostPath": { "path": "/run", "type": "Directory" }, "name": "run" }, { "hostPath": { "path": "/sys", "type": "Directory" }, "name": "sys" }, { "hostPath": { "path": "/lib/modules", "type": "Directory" }, "name": "lib-modules" }, { "hostPath": { "path": "/var/lib/kubelet", "type": "Directory" }, "name": "var-lib-kubelet" }, { "hostPath": { "path": "/", "type": "Directory" }, "name": "host" }, { "emptyDir": { "medium": "Memory" }, "name": "etc-tuned" }, { "emptyDir": { "medium": "Memory" }, "name": "tmp" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-04-02T23:57:26Z", "generation": 1, "labels": { "dns.operator.openshift.io/owning-dns": "default" }, "name": "dns-default", "namespace": "openshift-dns", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "controller": true, "kind": "DNS", "name": "default", "uid": "477ea210-49ba-4ad5-bd03-e9806d8a5e17" } ], "resourceVersion": "12343", "uid": "69f84e2b-639f-4dc3-956c-7d3a7310dae1" }, "spec": { "minReadySeconds": 9, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "dns.operator.openshift.io/daemonset-dns": "default" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "true", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "dns.operator.openshift.io/daemonset-dns": "default" } }, "spec": { "containers": [ { "args": [ "-conf", "/etc/coredns/Corefile" ], "command": [ "coredns" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2f4b0241dc0818547ffbaf42f8f17cac3ea8cde598a6c0bd3896872f53f7a3ff", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/health", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "dns", "ports": [ { "containerPort": 5353, "name": "dns", "protocol": "UDP" }, { "containerPort": 5353, "name": "dns-tcp", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": 8181, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 3, "successThreshold": 1, "timeoutSeconds": 3 }, "resources": { "requests": { "cpu": "50m", "memory": "70Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/coredns", "name": "config-volume", "readOnly": true }, { "mountPath": "/tmp", "name": "tmp-dir" } ] }, { "args": [ "--logtostderr", "--secure-listen-address=:9154", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", "--upstream=http://127.0.0.1:9153/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e251b56f79899ba2f5ece5dc68375ebba0157b35541861a0c8e31bc21d6adc52", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9154, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "40Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-tls", "readOnly": true }, { "mountPath": "/tmp", "name": "tmp-dir" } ] } ], "dnsPolicy": "Default", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "dns", "serviceAccountName": "dns", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "Corefile", "path": "Corefile" } ], "name": "dns-default" }, "name": "config-volume" }, { "name": "metrics-tls", "secret": { "defaultMode": 420, "secretName": "dns-default-metrics-tls" } }, { "emptyDir": {}, "name": "tmp-dir" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": "10%", "maxUnavailable": 0 }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-04-02T23:57:27Z", "generation": 1, "name": "node-resolver", "namespace": "openshift-dns", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "controller": true, "kind": "DNS", "name": "default", "uid": "477ea210-49ba-4ad5-bd03-e9806d8a5e17" } ], "resourceVersion": "10392", "uid": "efa39031-b0b7-4300-a516-ecb694111bba" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "dns.operator.openshift.io/daemonset-node-resolver": "" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "dns.operator.openshift.io/daemonset-node-resolver": "" } }, "spec": { "containers": [ { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -uo pipefail\n\ntrap 'jobs -p | xargs kill || true; wait; exit 0' TERM\n\nOPENSHIFT_MARKER=\"openshift-generated-node-resolver\"\nHOSTS_FILE=\"/etc/hosts\"\nTEMP_FILE=\"/tmp/hosts.tmp\"\n\nIFS=', ' read -r -a services \u003c\u003c\u003c \"${SERVICES}\"\n\n# Make a temporary file with the old hosts file's attributes.\nif ! cp -f --attributes-only \"${HOSTS_FILE}\" \"${TEMP_FILE}\"; then\n echo \"Failed to preserve hosts file. Exiting.\"\n exit 1\nfi\n\nwhile true; do\n declare -A svc_ips\n for svc in \"${services[@]}\"; do\n # Fetch service IP from cluster dns if present. We make several tries\n # to do it: IPv4, IPv6, IPv4 over TCP and IPv6 over TCP. The two last ones\n # are for deployments with Kuryr on older OpenStack (OSP13) - those do not\n # support UDP loadbalancers and require reaching DNS through TCP.\n cmds=('dig -t A @\"${NAMESERVER}\" +short \"${svc}.${CLUSTER_DOMAIN}\"|grep -v \"^;\"'\n 'dig -t AAAA @\"${NAMESERVER}\" +short \"${svc}.${CLUSTER_DOMAIN}\"|grep -v \"^;\"'\n 'dig -t A +tcp +retry=0 @\"${NAMESERVER}\" +short \"${svc}.${CLUSTER_DOMAIN}\"|grep -v \"^;\"'\n 'dig -t AAAA +tcp +retry=0 @\"${NAMESERVER}\" +short \"${svc}.${CLUSTER_DOMAIN}\"|grep -v \"^;\"')\n for i in ${!cmds[*]}\n do\n ips=($(eval \"${cmds[i]}\"))\n if [[ \"$?\" -eq 0 \u0026\u0026 \"${#ips[@]}\" -ne 0 ]]; then\n svc_ips[\"${svc}\"]=\"${ips[@]}\"\n break\n fi\n done\n done\n\n # Update /etc/hosts only if we get valid service IPs\n # We will not update /etc/hosts when there is coredns service outage or api unavailability\n # Stale entries could exist in /etc/hosts if the service is deleted\n if [[ -n \"${svc_ips[*]-}\" ]]; then\n # Build a new hosts file from /etc/hosts with our custom entries filtered out\n if ! sed --silent \"/# ${OPENSHIFT_MARKER}/d; w ${TEMP_FILE}\" \"${HOSTS_FILE}\"; then\n # Only continue rebuilding the hosts entries if its original content is preserved\n sleep 60 \u0026 wait\n continue\n fi\n\n # Append resolver entries for services\n rc=0\n for svc in \"${!svc_ips[@]}\"; do\n for ip in ${svc_ips[${svc}]}; do\n echo \"${ip} ${svc} ${svc}.${CLUSTER_DOMAIN} # ${OPENSHIFT_MARKER}\" \u003e\u003e \"${TEMP_FILE}\" || rc=$?\n done\n done\n if [[ $rc -ne 0 ]]; then\n sleep 60 \u0026 wait\n continue\n fi\n\n\n # TODO: Update /etc/hosts atomically to avoid any inconsistent behavior\n # Replace /etc/hosts with our modified version if needed\n cmp \"${TEMP_FILE}\" \"${HOSTS_FILE}\" || cp -f \"${TEMP_FILE}\" \"${HOSTS_FILE}\"\n # TEMP_FILE is not removed to avoid file create/delete and attributes copy churn\n fi\n sleep 60 \u0026 wait\n unset svc_ips\ndone\n" ], "env": [ { "name": "SERVICES", "value": "image-registry.openshift-image-registry.svc" }, { "name": "NAMESERVER", "value": "172.30.0.10" }, { "name": "CLUSTER_DOMAIN", "value": "cluster.local" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c6f9f9f726be814274f19e66bd04d069236460a312faa274eebe757d33f889c", "imagePullPolicy": "IfNotPresent", "name": "dns-node-resolver", "resources": { "requests": { "cpu": "5m", "memory": "21Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/hosts", "name": "hosts-file" }, { "mountPath": "/tmp", "name": "tmp-dir" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "node-resolver", "serviceAccountName": "node-resolver", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/hosts", "type": "File" }, "name": "hosts-file" }, { "emptyDir": {}, "name": "tmp-dir" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "33%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "operator.openshift.io/spec-hash": "6db6e740acba092a08cb21f88d879c57daeef77311e5ba1564633fe5ab06a0ba" }, "creationTimestamp": "2026-04-02T23:57:24Z", "generation": 1, "name": "node-ca", "namespace": "openshift-image-registry", "resourceVersion": "10414", "uid": "d3760619-f541-4ffc-8e1b-f546f7483c20" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "name": "node-ca" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "name": "node-ca" } }, "spec": { "containers": [ { "command": [ "/bin/sh", "-c", "trap 'jobs -p | xargs -r kill; echo shutting down node-ca; exit 0' TERM\nwhile [ true ];\ndo\n for f in $(ls /tmp/serviceca); do\n echo $f\n ca_file_path=\"/tmp/serviceca/${f}\"\n f=$(echo $f | sed -r 's/(.*)\\.\\./\\1:/')\n reg_dir_path=\"/etc/docker/certs.d/${f}\"\n if [ -e \"${reg_dir_path}\" ]; then\n cp -u $ca_file_path $reg_dir_path/ca.crt\n else\n mkdir $reg_dir_path\n cp $ca_file_path $reg_dir_path/ca.crt\n fi\n done\n for d in $(ls /etc/docker/certs.d); do\n echo $d\n dp=$(echo $d | sed -r 's/(.*):/\\1\\.\\./')\n reg_conf_path=\"/tmp/serviceca/${dp}\"\n if [ ! -e \"${reg_conf_path}\" ]; then\n rm -rf /etc/docker/certs.d/$d\n fi\n done\n sleep 60 \u0026 wait ${!}\ndone\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8d824fc165afff23fffc5b291acfa0c1a98f01a96f86ad547eadaa7c98efd35f", "imagePullPolicy": "IfNotPresent", "name": "node-ca", "resources": { "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": true, "runAsGroup": 0, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp/serviceca", "name": "serviceca" }, { "mountPath": "/etc/docker/certs.d", "name": "host" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "node-ca", "serviceAccountName": "node-ca", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/docker/certs.d", "type": "" }, "name": "host" }, { "configMap": { "defaultMode": 420, "name": "image-registry-certificates" }, "name": "serviceca" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-04-02T23:57:24Z", "generation": 1, "labels": { "ingress.openshift.io/canary": "canary_controller" }, "name": "ingress-canary", "namespace": "openshift-ingress-canary", "resourceVersion": "10923", "uid": "d9f9161c-189c-4d76-b390-c1f2ad3392c4" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "ingresscanary.operator.openshift.io/daemonset-ingresscanary": "canary_controller" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "ingresscanary.operator.openshift.io/daemonset-ingresscanary": "canary_controller" } }, "spec": { "containers": [ { "command": [ "ingress-operator", "serve-healthcheck" ], "env": [ { "name": "TLS_CERT", "value": "/etc/tls-cert/tls.crt" }, { "name": "TLS_KEY", "value": "/etc/tls-cert/tls.key" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1647489821e206e3ac1d3f1fbecdff3621ef87a7064f492906334c16f072a3e3", "imagePullPolicy": "IfNotPresent", "name": "serve-healthcheck-canary", "ports": [ { "containerPort": 8443, "protocol": "TCP" }, { "containerPort": 8888, "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls-cert", "name": "cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "node-role.kubernetes.io/infra", "operator": "Exists" } ], "volumes": [ { "name": "cert", "secret": { "defaultMode": 272, "secretName": "canary-serving-cert" } } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "deprecated.daemonset.template.generation": "1", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-03T00:03:50Z", "generation": 1, "labels": { "app.kubernetes.io/name": "insights-runtime-extractor" }, "name": "insights-runtime-extractor", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "e92c4254-be22-48ba-9486-d3ee30a02563" } ], "resourceVersion": "10994", "uid": "0e2aa86b-3f8f-4770-8030-f7e29e2e75ef" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/name": "insights-runtime-extractor" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "extractor", "openshift.io/required-scc": "insights-runtime-extractor-scc", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app.kubernetes.io/name": "insights-runtime-extractor" } }, "spec": { "containers": [ { "args": [ "--secure-listen-address=:8443", "--upstream=http://127.0.0.1:8000", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e251b56f79899ba2f5ece5dc68375ebba0157b35541861a0c8e31bc21d6adc52", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "insights-runtime-extractor-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "kube-rbac-proxy-cm" } ] }, { "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e56ae80d1ee80001d74e77cc8e562fe5d6ce211b44b3312343e2ed4ecfb8ab3f", "imagePullPolicy": "Always", "name": "exporter", "resources": { "requests": { "cpu": "10m", "memory": "200Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/data", "name": "data-volume" } ] }, { "env": [ { "name": "CONTAINER_RUNTIME_ENDPOINT", "value": "unix:///crio.sock" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:11b1019f1ef459a09826a731547c78028048bf66d9d35d3fadf20efa387c176c", "imagePullPolicy": "Always", "livenessProbe": { "exec": { "command": [ "crictl", "--timeout", "10s", "info" ] }, "failureThreshold": 3, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "extractor", "resources": { "requests": { "cpu": "10m", "memory": "200Mi" } }, "securityContext": { "capabilities": { "add": [ "CAP_SYS_ADMIN" ], "drop": [ "ALL" ] }, "privileged": true, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/crio.sock", "name": "crio-socket" }, { "mountPath": "/data", "name": "data-volume" } ] } ], "dnsPolicy": "ClusterFirst", "hostPID": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "insights-runtime-extractor-sa", "serviceAccountName": "insights-runtime-extractor-sa", "terminationGracePeriodSeconds": 30, "volumes": [ { "hostPath": { "path": "/run/crio/crio.sock", "type": "Socket" }, "name": "crio-socket" }, { "emptyDir": {}, "name": "data-volume" }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "kube-rbac-proxy-cm" }, { "name": "insights-runtime-extractor-tls", "secret": { "defaultMode": 420, "secretName": "insights-runtime-extractor-tls" } } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "33%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-04-03T00:04:32Z", "generation": 1, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "node-exporter", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "1.10.2" }, "name": "node-exporter", "namespace": "openshift-monitoring", "resourceVersion": "12459", "uid": "ae11bf9d-ef86-4947-8926-183523f68b1c" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/name": "node-exporter", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "kubectl.kubernetes.io/default-container": "node-exporter", "openshift.io/required-scc": "node-exporter", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "node-exporter", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "1.10.2" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--web.listen-address=127.0.0.1:9101", "--path.sysfs=/host/sys", "--path.rootfs=/host/root", "--path.procfs=/host/root/proc", "--path.udev.data=/host/root/run/udev/data", "--no-collector.wifi", "--collector.filesystem.mount-points-exclude=^/(dev|proc|sys|run/k3s/containerd/.+|var/lib/docker/.+|var/lib/kubelet/pods/.+)($|/)", "--collector.netclass.ignored-devices=^(veth.*|[a-f0-9]{15}|enP.*|ovn-k8s-mp[0-9]*|br-ex|br-int|br-ext|br[0-9]*|tun[0-9]*|cali[a-f0-9]*)$", "--collector.netdev.device-exclude=^(veth.*|[a-f0-9]{15}|enP.*|ovn-k8s-mp[0-9]*|br-ex|br-int|br-ext|br[0-9]*|tun[0-9]*|cali[a-f0-9]*)$", "--collector.cpu.info", "--collector.textfile.directory=/var/node_exporter/textfile", "--no-collector.btrfs", "--runtime.gomaxprocs=0", "--no-collector.cpufreq", "--no-collector.tcpstat", "--collector.netdev", "--collector.netclass", "--collector.netclass.netlink", "--no-collector.buddyinfo", "--no-collector.mountstats", "--no-collector.ksmd", "--no-collector.processes", "--no-collector.systemd" ], "command": [ "/bin/sh", "-c", "export GOMAXPROCS=4\n# We don't take CPU affinity into account as the container doesn't have integer CPU requests.\n# In case of error, fallback to the default value.\nNUM_CPUS=$(grep -c '^processor' \"/proc/cpuinfo\" 2\u003e/dev/null || echo \"0\")\nif [ \"$NUM_CPUS\" -lt \"$GOMAXPROCS\" ]; then\n export GOMAXPROCS=\"$NUM_CPUS\"\nfi\necho \"ts=$(date --iso-8601=seconds) num_cpus=$NUM_CPUS gomaxprocs=$GOMAXPROCS\"\nexec /bin/node_exporter \"$0\" \"$@\"\n" ], "env": [ { "name": "DBUS_SYSTEM_BUS_ADDRESS", "value": "unix:path=/host/root/var/run/dbus/system_bus_socket" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2113fd46aa3b497a315f73e215a7c26f8f2930b5e5b64f74eee88a83db412df1", "imagePullPolicy": "IfNotPresent", "name": "node-exporter", "resources": { "requests": { "cpu": "8m", "memory": "32Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/host/sys", "mountPropagation": "HostToContainer", "name": "sys", "readOnly": true }, { "mountPath": "/host/root", "mountPropagation": "HostToContainer", "name": "root", "readOnly": true }, { "mountPath": "/var/node_exporter/textfile", "name": "node-exporter-textfile", "readOnly": true }, { "mountPath": "/var/node_exporter/accelerators_collector_config", "name": "node-exporter-accelerators-collector-config", "readOnly": true } ], "workingDir": "/var/node_exporter/textfile" }, { "args": [ "--secure-listen-address=[$(IP)]:9100", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:9101/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "env": [ { "name": "IP", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "status.podIP" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e251b56f79899ba2f5ece5dc68375ebba0157b35541861a0c8e31bc21d6adc52", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9100, "hostPort": 9100, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "node-exporter-tls" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca" }, { "mountPath": "/etc/kube-rbac-policy", "name": "node-exporter-kube-rbac-proxy-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "hostPID": true, "initContainers": [ { "command": [ "/bin/sh", "-c", "[[ ! -d /node_exporter/collectors/init ]] || find /node_exporter/collectors/init -perm /111 -type f -exec {} \\;" ], "env": [ { "name": "TMPDIR", "value": "/tmp" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2113fd46aa3b497a315f73e215a7c26f8f2930b5e5b64f74eee88a83db412df1", "imagePullPolicy": "IfNotPresent", "name": "init-textfile", "resources": { "requests": { "cpu": "1m", "memory": "1Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/node_exporter/textfile", "name": "node-exporter-textfile" }, { "mountPath": "/var/log/wtmp", "name": "node-exporter-wtmp", "readOnly": true } ], "workingDir": "/var/node_exporter/textfile" } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "node-exporter", "serviceAccountName": "node-exporter", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/sys", "type": "" }, "name": "sys" }, { "hostPath": { "path": "/", "type": "" }, "name": "root" }, { "emptyDir": {}, "name": "node-exporter-textfile" }, { "name": "node-exporter-tls", "secret": { "defaultMode": 420, "secretName": "node-exporter-tls" } }, { "hostPath": { "path": "/var/log/wtmp", "type": "File" }, "name": "node-exporter-wtmp" }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "name": "node-exporter-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "node-exporter-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "config.yaml", "path": "config.yaml" } ], "name": "node-exporter-accelerators-collector-config" }, "name": "node-exporter-accelerators-collector-config" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "kubernetes.io/description": "This daemon set launches the Multus networking component on each node.\n", "release.openshift.io/version": "4.21.7" }, "creationTimestamp": "2026-04-02T23:57:37Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "2peb42nlhreqhm7gegjie4h8sih13gfv" }, "name": "multus", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "8864a1d9-fa43-4383-aef8-18383e284ace" } ], "resourceVersion": "10370", "uid": "3201a2e9-cc2a-4358-b7bc-51f420a70572" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "multus" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app": "multus", "component": "network", "openshift.io/component": "network", "type": "infra" } }, "spec": { "containers": [ { "args": [ "MULTUS_DAEMON_OPT=\"\"\n/entrypoint/cnibincopy.sh; exec /usr/src/multus-cni/bin/multus-daemon $MULTUS_DAEMON_OPT\n" ], "command": [ "/bin/bash", "-ec", "--" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/usr/src/multus-cni/rhel8/bin/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/usr/src/multus-cni/rhel9/bin/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/usr/src/multus-cni/bin/" }, { "name": "KUBERNETES_SERVICE_PORT", "value": "443" }, { "name": "KUBERNETES_SERVICE_HOST", "value": "api.kx-f1cb2dbfda.hypershift.local" }, { "name": "MULTUS_NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "K8S_NODE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d848a704d00962d119017a322bba7e97421e75ece9a3ce79162e0627935d2e4c", "imagePullPolicy": "IfNotPresent", "name": "kube-multus", "resources": { "requests": { "cpu": "10m", "memory": "65Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/etc/os-release", "name": "os-release" }, { "mountPath": "/host/etc/cni/net.d", "name": "system-cni-dir" }, { "mountPath": "/host/run/multus/cni/net.d", "name": "multus-cni-dir" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/run/multus", "mountPropagation": "HostToContainer", "name": "multus-socket-dir-parent" }, { "mountPath": "/run/k8s.cni.cncf.io", "name": "host-run-k8s-cni-cncf-io" }, { "mountPath": "/run/netns", "mountPropagation": "HostToContainer", "name": "host-run-netns" }, { "mountPath": "/var/lib/cni/bin", "name": "host-var-lib-cni-bin" }, { "mountPath": "/var/lib/cni/multus", "name": "host-var-lib-cni-multus" }, { "mountPath": "/var/lib/kubelet", "mountPropagation": "HostToContainer", "name": "host-var-lib-kubelet" }, { "mountPath": "/hostroot", "mountPropagation": "HostToContainer", "name": "hostroot" }, { "mountPath": "/etc/cni/multus/net.d", "name": "multus-conf-dir" }, { "mountPath": "/etc/cni/net.d/multus.d", "name": "multus-daemon-config", "readOnly": true }, { "mountPath": "/etc/cni/multus/certs", "name": "host-run-multus-certs" }, { "mountPath": "/etc/kubernetes", "name": "etc-kubernetes" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "hostPID": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/kubernetes/cni/net.d", "type": "Directory" }, "name": "system-cni-dir" }, { "hostPath": { "path": "/var/run/multus/cni/net.d", "type": "Directory" }, "name": "multus-cni-dir" }, { "hostPath": { "path": "/var/lib/cni/bin", "type": "Directory" }, "name": "cnibin" }, { "hostPath": { "path": "/etc/os-release", "type": "File" }, "name": "os-release" }, { "configMap": { "defaultMode": 484, "name": "cni-copy-resources" }, "name": "cni-binary-copy" }, { "hostPath": { "path": "/run/multus", "type": "DirectoryOrCreate" }, "name": "multus-socket-dir-parent" }, { "hostPath": { "path": "/run/k8s.cni.cncf.io", "type": "" }, "name": "host-run-k8s-cni-cncf-io" }, { "hostPath": { "path": "/run/netns/", "type": "" }, "name": "host-run-netns" }, { "hostPath": { "path": "/var/lib/cni/bin", "type": "" }, "name": "host-var-lib-cni-bin" }, { "hostPath": { "path": "/var/lib/cni/multus", "type": "" }, "name": "host-var-lib-cni-multus" }, { "hostPath": { "path": "/var/lib/kubelet", "type": "" }, "name": "host-var-lib-kubelet" }, { "hostPath": { "path": "/", "type": "" }, "name": "hostroot" }, { "hostPath": { "path": "/etc/cni/multus/net.d", "type": "" }, "name": "multus-conf-dir" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "daemon-config.json", "path": "daemon-config.json" } ], "name": "multus-daemon-config" }, "name": "multus-daemon-config" }, { "hostPath": { "path": "/etc/cni/multus/certs", "type": "" }, "name": "host-run-multus-certs" }, { "hostPath": { "path": "/etc/kubernetes", "type": "" }, "name": "etc-kubernetes" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "kubernetes.io/description": "This daemon installs and configures auxiliary CNI plugins on each node.\n", "release.openshift.io/version": "4.21.7" }, "creationTimestamp": "2026-04-02T23:57:37Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "2peb42nlhreqhm7gegjie4h8sih13gfv" }, "name": "multus-additional-cni-plugins", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "8864a1d9-fa43-4383-aef8-18383e284ace" } ], "resourceVersion": "10534", "uid": "c4cdac44-9f3c-40ea-9b24-16148f8e1ef7" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "multus-additional-cni-plugins" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app": "multus-additional-cni-plugins", "component": "network", "openshift.io/component": "network", "type": "infra" } }, "spec": { "containers": [ { "args": [ "trap : TERM INT; sleep infinity \u0026 wait\n" ], "command": [ "/bin/bash", "-ec", "--" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d848a704d00962d119017a322bba7e97421e75ece9a3ce79162e0627935d2e4c", "imagePullPolicy": "IfNotPresent", "name": "kube-multus-additional-cni-plugins", "resources": { "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "initContainers": [ { "command": [ "/entrypoint/cnibincopy.sh" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/usr/src/egress-router-cni/rhel8/bin/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/usr/src/egress-router-cni/rhel9/bin/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/usr/src/egress-router-cni/bin/" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0644c26b6a8f4aa4435145653370dd3f8438c6e299523ff8570eb2858ac65d09", "imagePullPolicy": "IfNotPresent", "name": "egress-router-binary-copy", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/os-release", "name": "os-release", "readOnly": true } ] }, { "command": [ "/bin/bash", "-c", "/entrypoint/cnibincopy.sh \u0026\u0026 cp -n /sysctls/allowlist.conf /host/etc/cni/tuning/" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/usr/src/plugins/rhel8/bin/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/usr/src/plugins/rhel9/bin/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/usr/src/plugins/bin/" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9fed4b776332f3e8ce9c8454beabcb0c940b0e09c0c973eeafcf653b27a79043", "imagePullPolicy": "IfNotPresent", "name": "cni-plugins", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/os-release", "name": "os-release", "readOnly": true }, { "mountPath": "/host/etc/cni/tuning/", "name": "tuning-conf-dir" }, { "mountPath": "/sysctls", "name": "cni-sysctl-allowlist" } ] }, { "command": [ "/entrypoint/cnibincopy.sh" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/bondcni/rhel8/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/bondcni/rhel9/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/bondcni/rhel9/" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6dfe7064a0426d0c75613602b935652f4c7a6f8aed62c63e8ed1a8bad80ea94c", "imagePullPolicy": "IfNotPresent", "name": "bond-cni-plugin", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/os-release", "name": "os-release", "readOnly": true } ] }, { "command": [ "/entrypoint/cnibincopy.sh" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/usr/src/route-override/rhel8/bin/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/usr/src/route-override/rhel9/bin/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/usr/src/route-override/bin/" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5589d0d744b2f935e7f1bb3e094e813685092910a00e1853891b31fe9e330d23", "imagePullPolicy": "IfNotPresent", "name": "routeoverride-cni", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/os-release", "name": "os-release", "readOnly": true } ] }, { "command": [ "/entrypoint/cnibincopy.sh" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/usr/src/whereabouts/rhel8/bin/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/usr/src/whereabouts/rhel9/bin/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/usr/src/whereabouts/bin/" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d3f704ef5d26f879256ea0687dfb2374356e3279ea6fb1cafa7dee815cd5bf3c", "imagePullPolicy": "IfNotPresent", "name": "whereabouts-cni-bincopy", "resources": { "requests": { "cpu": "10m", "memory": "10Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/os-release", "name": "os-release", "readOnly": true } ] }, { "command": [ "/bin/sh", "-c", "#!/bin/sh\n\nset -u -e\n\nCNI_BIN_DIR=${CNI_BIN_DIR:-\"/host/opt/cni/bin/\"}\nWHEREABOUTS_KUBECONFIG_FILE_HOST=${WHEREABOUTS_KUBECONFIG_FILE_HOST:-\"/etc/cni/net.d/whereabouts.d/whereabouts.kubeconfig\"}\nCNI_CONF_DIR=${CNI_CONF_DIR:-\"/host/etc/kubernetes/cni/net.d\"}\nWHEREABOUTS_RECONCILER_CRON=${WHEREABOUTS_RECONCILER_CRON:-30 4 * * *}\n\n# Make a whereabouts.d directory (for our kubeconfig)\n\nmkdir -p $CNI_CONF_DIR/whereabouts.d\nWHEREABOUTS_KUBECONFIG=$CNI_CONF_DIR/whereabouts.d/whereabouts.kubeconfig\nWHEREABOUTS_CONF_FILE=$CNI_CONF_DIR/whereabouts.d/whereabouts.conf\nWHEREABOUTS_KUBECONFIG_LITERAL=$(echo \"$WHEREABOUTS_KUBECONFIG\" | sed -e s'|/host||')\n\n# Write the nodename to the whereabouts.d directory for standardized hostname reference across cloud providers\necho $NODENAME \u003e $CNI_CONF_DIR/whereabouts.d/nodename\n\nSERVICE_ACCOUNT_PATH=/var/run/secrets/kubernetes.io/serviceaccount\nKUBE_CA_FILE=${KUBE_CA_FILE:-$SERVICE_ACCOUNT_PATH/ca.crt}\nSERVICE_ACCOUNT_TOKEN=$(cat $SERVICE_ACCOUNT_PATH/token)\nSERVICE_ACCOUNT_TOKEN_PATH=$SERVICE_ACCOUNT_PATH/token\nSKIP_TLS_VERIFY=${SKIP_TLS_VERIFY:-false}\n\n\nfunction log()\n{\n echo \"$(date -Iseconds) ${1}\"\n}\n\nfunction error()\n{\n log \"ERR: {$1}\"\n}\n\nfunction warn()\n{\n log \"WARN: {$1}\"\n}\n\n\nfunction generateKubeConfig {\n# Check if we're running as a k8s pod.\nif [ -f \"$SERVICE_ACCOUNT_PATH/token\" ]; then\n # We're running as a k8d pod - expect some variables.\n if [ -z ${KUBERNETES_SERVICE_HOST} ]; then\n error \"KUBERNETES_SERVICE_HOST not set\"; exit 1;\n fi\n if [ -z ${KUBERNETES_SERVICE_PORT} ]; then\n error \"KUBERNETES_SERVICE_PORT not set\"; exit 1;\n fi\n\n if [ \"$SKIP_TLS_VERIFY\" == \"true\" ]; then\n TLS_CFG=\"insecure-skip-tls-verify: true\"\n elif [ -f \"$KUBE_CA_FILE\" ]; then\n TLS_CFG=\"certificate-authority-data: $(cat $KUBE_CA_FILE | base64 | tr -d '\\n')\"\n fi\n\n # Kubernetes service address must be wrapped if it is IPv6 address\n KUBERNETES_SERVICE_HOST_WRAP=$KUBERNETES_SERVICE_HOST\n if [ \"$KUBERNETES_SERVICE_HOST_WRAP\" != \"${KUBERNETES_SERVICE_HOST_WRAP#*:[0-9a-fA-F]}\" ]; then\n KUBERNETES_SERVICE_HOST_WRAP=\\[$KUBERNETES_SERVICE_HOST_WRAP\\]\n fi\n\n # Write a kubeconfig file for the CNI plugin. Do this\n # to skip TLS verification for now. We should eventually support\n # writing more complete kubeconfig files. This is only used\n # if the provided CNI network config references it.\n touch $WHEREABOUTS_KUBECONFIG\n chmod ${KUBECONFIG_MODE:-600} $WHEREABOUTS_KUBECONFIG\n cat \u003e $WHEREABOUTS_KUBECONFIG \u003c\u003cEOF\n# Kubeconfig file for the Whereabouts CNI plugin.\napiVersion: v1\nkind: Config\nclusters:\n- name: local\n cluster:\n server: ${KUBERNETES_SERVICE_PROTOCOL:-https}://${KUBERNETES_SERVICE_HOST_WRAP}:${KUBERNETES_SERVICE_PORT}\n $TLS_CFG\nusers:\n- name: whereabouts\n user:\n token: \"${SERVICE_ACCOUNT_TOKEN}\"\ncontexts:\n- name: whereabouts-context\n context:\n cluster: local\n user: whereabouts\n namespace: ${WHEREABOUTS_NAMESPACE}\ncurrent-context: whereabouts-context\nEOF\n\n# Copy the config from ConfigMap to the desired directory\ncp /etc/whereabouts/config/whereabouts.conf $WHEREABOUTS_CONF_FILE\nchmod 600 $WHEREABOUTS_CONF_FILE\n\nelse\n warn \"Doesn't look like we're running in a kubernetes environment (no serviceaccount token)\"\nfi\n\n}\n\nfunction generateWhereaboutsConf {\n\n touch $WHEREABOUTS_CONF_FILE\n chmod ${KUBECONFIG_MODE:-600} $WHEREABOUTS_CONF_FILE\n cat \u003e $WHEREABOUTS_CONF_FILE \u003c\u003cEOF\n{\n \"datastore\": \"kubernetes\",\n \"kubernetes\": {\n \"kubeconfig\": \"${WHEREABOUTS_KUBECONFIG_LITERAL}\"\n },\n \"reconciler_cron_expression\": \"${WHEREABOUTS_RECONCILER_CRON}\"\n}\nEOF\n\n}\n\ngenerateKubeConfig\n# ------------------ end Generate a \"kube-config\"\n\n# ----------------- Generate a whereabouts conf\n# removed because we have the configmap\n#generateWhereaboutsConf\n# ---------------- End generate a whereabouts conf\n\n\n# copy whereabouts to the cni bin dir\n# SKIPPED DUE TO FIPS COPY.\n# cp -f /whereabouts $CNI_BIN_DIR\n\n# ---------------------- end generate a \"kube-config\".\n\n# Unless told otherwise, sleep forever.\n# This prevents Kubernetes from restarting the pod repeatedly.\nshould_sleep=${SLEEP:-\"true\"}\necho \"Done configuring CNI. Sleep=$should_sleep\"\nwhile [ \"$should_sleep\" == \"true\" ]; do\n sleep 1000000000000\ndone\n" ], "env": [ { "name": "NODENAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "KUBERNETES_SERVICE_PORT", "value": "443" }, { "name": "KUBERNETES_SERVICE_HOST", "value": "api.kx-f1cb2dbfda.hypershift.local" }, { "name": "CNI_BIN_DIR", "value": "/host/opt/cni/bin/" }, { "name": "CNI_CONF_DIR", "value": "/host/etc/cni/net.d" }, { "name": "SLEEP", "value": "false" }, { "name": "WHEREABOUTS_NAMESPACE", "value": "openshift-multus" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d3f704ef5d26f879256ea0687dfb2374356e3279ea6fb1cafa7dee815cd5bf3c", "imagePullPolicy": "IfNotPresent", "name": "whereabouts-cni", "resources": { "requests": { "cpu": "10m", "memory": "10Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/cni/net.d", "name": "system-cni-dir" }, { "mountPath": "/etc/whereabouts/config", "name": "whereabouts-flatfile-configmap" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "multus-ancillary-tools", "serviceAccountName": "multus-ancillary-tools", "terminationGracePeriodSeconds": 10, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/kubernetes/cni/net.d", "type": "" }, "name": "system-cni-dir" }, { "hostPath": { "path": "/var/run/multus/cni/net.d", "type": "" }, "name": "multus-cni-dir" }, { "hostPath": { "path": "/var/lib/cni/bin", "type": "" }, "name": "cnibin" }, { "hostPath": { "path": "/etc/os-release", "type": "File" }, "name": "os-release" }, { "configMap": { "defaultMode": 484, "name": "cni-copy-resources" }, "name": "cni-binary-copy" }, { "hostPath": { "path": "/etc/cni/tuning/", "type": "DirectoryOrCreate" }, "name": "tuning-conf-dir" }, { "configMap": { "defaultMode": 484, "name": "default-cni-sysctl-allowlist" }, "name": "cni-sysctl-allowlist" }, { "configMap": { "defaultMode": 420, "name": "whereabouts-flatfile-config" }, "name": "whereabouts-flatfile-configmap" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "kubernetes.io/description": "This daemonset launches the network metrics daemon on each node\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.21.7" }, "creationTimestamp": "2026-04-02T23:57:38Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "2peb42nlhreqhm7gegjie4h8sih13gfv" }, "name": "network-metrics-daemon", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "8864a1d9-fa43-4383-aef8-18383e284ace" } ], "resourceVersion": "12560", "uid": "f9449d39-85e9-47f6-8828-ec397707108a" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "network-metrics-daemon" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app": "network-metrics-daemon", "component": "network", "openshift.io/component": "network", "type": "infra" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "network.operator.openshift.io/dpu-host", "operator": "DoesNotExist" }, { "key": "network.operator.openshift.io/dpu", "operator": "DoesNotExist" } ] } ] } } }, "containers": [ { "args": [ "--node-name", "$(NODE_NAME)" ], "command": [ "/usr/bin/network-metrics" ], "env": [ { "name": "NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e468e359bdc654b85aa2e26fe6d9ff065bc85650d57be4cfd6879d5666cd08cd", "imagePullPolicy": "IfNotPresent", "name": "network-metrics-daemon", "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--logtostderr", "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "--upstream=http://127.0.0.1:9091/", "--tls-private-key-file=/etc/metrics/tls.key", "--tls-cert-file=/etc/metrics/tls.crt" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e251b56f79899ba2f5ece5dc68375ebba0157b35541861a0c8e31bc21d6adc52", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/metrics", "name": "metrics-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "metrics-daemon-sa", "serviceAccountName": "metrics-daemon-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "name": "metrics-certs", "secret": { "defaultMode": 420, "secretName": "metrics-daemon-secret" } } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "33%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "kubernetes.io/description": "This daemonset deploys the network-check-target pods that run\na dummy app to be checked by network-check-source pod\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.21.7" }, "creationTimestamp": "2026-04-02T23:57:51Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "" }, "name": "network-check-target", "namespace": "openshift-network-diagnostics", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "8864a1d9-fa43-4383-aef8-18383e284ace" } ], "resourceVersion": "13111", "uid": "dcadf780-e505-449d-8b42-8fc2391f79e7" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "network-check-target" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app": "network-check-target", "kubernetes.io/os": "linux" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "network.operator.openshift.io/dpu-host", "operator": "DoesNotExist" }, { "key": "network.operator.openshift.io/dpu", "operator": "DoesNotExist" } ] } ] } } }, "containers": [ { "command": [ "cluster-network-check-target" ], "env": [ { "name": "K8S_NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9ac7550a7edd59fdbc0e5b3d336defbd6fe0510087272b78d364a4580fd3d020", "imagePullPolicy": "IfNotPresent", "name": "network-check-target-container", "ports": [ { "containerPort": 8080, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "10m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "default", "serviceAccountName": "default", "terminationGracePeriodSeconds": 10, "tolerations": [ { "operator": "Exists" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "kubernetes.io/description": "This daemon set runs the iptables-alerter on each node\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.21.7" }, "creationTimestamp": "2026-04-02T23:57:54Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "2peb42nlhreqhm7gegjie4h8sih13gfv" }, "name": "iptables-alerter", "namespace": "openshift-network-operator", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "8864a1d9-fa43-4383-aef8-18383e284ace" } ], "resourceVersion": "10429", "uid": "6a8fc2e3-c8ad-410d-9c52-7699024d8edf" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "iptables-alerter" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app": "iptables-alerter", "component": "network", "openshift.io/component": "network", "type": "infra" } }, "spec": { "containers": [ { "command": [ "/iptables-alerter/iptables-alerter.sh" ], "env": [ { "name": "CONTAINER_RUNTIME_ENDPOINT", "value": "unix:///run/crio/crio.sock" }, { "name": "ALERTER_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c6f9f9f726be814274f19e66bd04d069236460a312faa274eebe757d33f889c", "imagePullPolicy": "IfNotPresent", "name": "iptables-alerter", "resources": { "limits": { "cpu": "10m" }, "requests": { "cpu": "10m", "memory": "65Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/iptables-alerter", "name": "iptables-alerter-script" }, { "mountPath": "/host", "mountPropagation": "HostToContainer", "name": "host-slash", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "hostPID": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "iptables-alerter", "serviceAccountName": "iptables-alerter", "terminationGracePeriodSeconds": 10, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 484, "name": "iptables-alerter-script" }, "name": "iptables-alerter-script" }, { "hostPath": { "path": "/", "type": "" }, "name": "host-slash" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "2", "kubernetes.io/description": "This daemonset launches the ovn-kubernetes per node networking components.\n", "networkoperator.openshift.io/cluster-network-cidr": "10.128.0.0/14", "networkoperator.openshift.io/default-masquerade-network-cidrs": "169.254.0.0/17,fd69::/112", "networkoperator.openshift.io/hybrid-overlay-status": "disabled", "networkoperator.openshift.io/ip-family-mode": "single-stack", "release.openshift.io/version": "4.21.7" }, "creationTimestamp": "2026-04-02T23:57:48Z", "generation": 2, "labels": { "networkoperator.openshift.io/generates-operator-status": "2peb42nlhreqhm7gegjie4h8sih13gfv" }, "name": "ovnkube-node", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "8864a1d9-fa43-4383-aef8-18383e284ace" } ], "resourceVersion": "12484", "uid": "70a024dd-3777-4656-b551-41acac1483dc" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "ovnkube-node" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "network.operator.openshift.io/ovnkube-script-lib-hash": "11d92769086fd839cc9b4bde0d3e89fc1bbf151d", "networkoperator.openshift.io/cluster-network-cidr": "10.128.0.0/14", "networkoperator.openshift.io/hybrid-overlay-status": "disabled", "networkoperator.openshift.io/ip-family-mode": "single-stack", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app": "ovnkube-node", "component": "network", "kubernetes.io/os": "linux", "openshift.io/component": "network", "ovn-db-pod": "true", "type": "infra" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "network.operator.openshift.io/dpu-host", "operator": "DoesNotExist" }, { "key": "network.operator.openshift.io/smart-nic", "operator": "DoesNotExist" }, { "key": "network.operator.openshift.io/dpu", "operator": "DoesNotExist" } ] } ] } } }, "containers": [ { "command": [ "/bin/bash", "-c", "set -e\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nstart-ovn-controller ${OVN_LOG_LEVEL}\n" ], "env": [ { "name": "OVN_LOG_LEVEL", "value": "info" }, { "name": "K8S_NODE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:543891894646911f3714c3ebb7dd08f28cb0f0ea0d51045d058f7d2e9d475481", "imagePullPolicy": "IfNotPresent", "name": "ovn-controller", "resources": { "requests": { "cpu": "10m", "memory": "300Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/run/openvswitch", "name": "run-openvswitch" }, { "mountPath": "/run/ovn/", "name": "run-ovn" }, { "mountPath": "/etc/openvswitch", "name": "etc-openvswitch" }, { "mountPath": "/etc/ovn/", "name": "etc-openvswitch" }, { "mountPath": "/var/lib/openvswitch", "name": "var-lib-openvswitch" }, { "mountPath": "/env", "name": "env-overrides" }, { "mountPath": "/var/log/ovn/", "name": "node-log" }, { "mountPath": "/dev/log", "name": "log-socket" } ] }, { "command": [ "/bin/bash", "-c", "set -euo pipefail\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nstart-audit-log-rotation\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:543891894646911f3714c3ebb7dd08f28cb0f0ea0d51045d058f7d2e9d475481", "imagePullPolicy": "IfNotPresent", "name": "ovn-acl-logging", "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/var/log/ovn/", "name": "node-log" }, { "mountPath": "/run/ovn/", "name": "run-ovn" } ] }, { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -euo pipefail\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nstart-rbac-proxy-node ovn-node-metrics 9103 29103 /etc/pki/tls/metrics-cert/tls.key /etc/pki/tls/metrics-cert/tls.crt\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e251b56f79899ba2f5ece5dc68375ebba0157b35541861a0c8e31bc21d6adc52", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-node", "ports": [ { "containerPort": 9103, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/etc/pki/tls/metrics-cert", "name": "ovn-node-metrics-cert", "readOnly": true } ] }, { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -euo pipefail\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nstart-rbac-proxy-node ovn-metrics 9105 29105 /etc/pki/tls/metrics-cert/tls.key /etc/pki/tls/metrics-cert/tls.crt\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e251b56f79899ba2f5ece5dc68375ebba0157b35541861a0c8e31bc21d6adc52", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-ovn-metrics", "ports": [ { "containerPort": 9105, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/etc/pki/tls/metrics-cert", "name": "ovn-node-metrics-cert", "readOnly": true } ] }, { "command": [ "/bin/bash", "-c", "set -xem\nif [[ -f /env/_master ]]; then\n set -o allexport\n source /env/_master\n set +o allexport\nfi\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\n\ntrap quit-ovn-northd TERM INT\nstart-ovn-northd \"${OVN_LOG_LEVEL}\"\n" ], "env": [ { "name": "OVN_LOG_LEVEL", "value": "info" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:543891894646911f3714c3ebb7dd08f28cb0f0ea0d51045d058f7d2e9d475481", "imagePullPolicy": "IfNotPresent", "name": "northd", "resources": { "requests": { "cpu": "10m", "memory": "300Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/etc/ovn", "name": "etc-openvswitch" }, { "mountPath": "/var/log/ovn", "name": "node-log" }, { "mountPath": "/run/ovn/", "name": "run-ovn" }, { "mountPath": "/env", "name": "env-overrides" } ] }, { "command": [ "/bin/bash", "-c", "set -xem\nif [[ -f /env/_master ]]; then\n set -o allexport\n source /env/_master\n set +o allexport\nfi\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\n\ntrap quit-nbdb TERM INT\nstart-nbdb ${OVN_LOG_LEVEL}\n" ], "env": [ { "name": "OVN_LOG_LEVEL", "value": "info" }, { "name": "K8S_NODE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:543891894646911f3714c3ebb7dd08f28cb0f0ea0d51045d058f7d2e9d475481", "imagePullPolicy": "IfNotPresent", "lifecycle": { "postStart": { "exec": { "command": [ "/bin/bash", "-c", "set -x\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nnbdb-post-start 5000\n" ] } } }, "name": "nbdb", "readinessProbe": { "exec": { "command": [ "/bin/bash", "-c", "set -xeo pipefail\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\novndb-readiness-probe \"nb\"\n" ] }, "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "10m", "memory": "300Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/etc/ovn/", "name": "etc-openvswitch" }, { "mountPath": "/var/log/ovn", "name": "node-log" }, { "mountPath": "/run/ovn/", "name": "run-ovn" }, { "mountPath": "/env", "name": "env-overrides" } ] }, { "command": [ "/bin/bash", "-c", "set -xem\nif [[ -f /env/_master ]]; then\n set -o allexport\n source /env/_master\n set +o allexport\nfi\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\n\ntrap quit-sbdb TERM INT\nstart-sbdb ${OVN_LOG_LEVEL}\n" ], "env": [ { "name": "OVN_LOG_LEVEL", "value": "info" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:543891894646911f3714c3ebb7dd08f28cb0f0ea0d51045d058f7d2e9d475481", "imagePullPolicy": "IfNotPresent", "lifecycle": { "postStart": { "exec": { "command": [ "/bin/bash", "-c", "set -x\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nsbdb-post-start\n" ] } } }, "name": "sbdb", "readinessProbe": { "exec": { "command": [ "/bin/bash", "-c", "set -xeo pipefail\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\novndb-readiness-probe \"sb\"\n" ] }, "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "10m", "memory": "300Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/etc/ovn/", "name": "etc-openvswitch" }, { "mountPath": "/run/ovn/", "name": "run-ovn" }, { "mountPath": "/var/log/ovn", "name": "node-log" }, { "mountPath": "/env", "name": "env-overrides" } ] }, { "command": [ "/bin/bash", "-c", "set -xe\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nstart-ovnkube-node ${OVN_KUBE_LOG_LEVEL} 29103 29105\n" ], "env": [ { "name": "KUBERNETES_SERVICE_PORT", "value": "443" }, { "name": "KUBERNETES_SERVICE_HOST", "value": "api.kx-f1cb2dbfda.hypershift.local" }, { "name": "OVN_CONTROLLER_INACTIVITY_PROBE", "value": "180000" }, { "name": "OVN_KUBE_LOG_LEVEL", "value": "4" }, { "name": "OVN_NODE_MODE", "value": "full" }, { "name": "K8S_NODE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:543891894646911f3714c3ebb7dd08f28cb0f0ea0d51045d058f7d2e9d475481", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "rm", "-f", "/etc/cni/net.d/10-ovn-kubernetes.conf" ] } } }, "name": "ovnkube-controller", "ports": [ { "containerPort": 29105, "name": "ovnmetrics-port", "protocol": "TCP" } ], "readinessProbe": { "exec": { "command": [ "test", "-f", "/etc/cni/net.d/10-ovn-kubernetes.conf" ] }, "failureThreshold": 3, "initialDelaySeconds": 5, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "600Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/var/lib/kubelet", "mountPropagation": "HostToContainer", "name": "host-kubelet", "readOnly": true }, { "mountPath": "/etc/systemd/system", "name": "systemd-units", "readOnly": true }, { "mountPath": "/host", "mountPropagation": "HostToContainer", "name": "host-slash", "readOnly": true }, { "mountPath": "/run/ovn-kubernetes/", "name": "host-run-ovn-kubernetes" }, { "mountPath": "/run/netns", "mountPropagation": "HostToContainer", "name": "host-run-netns", "readOnly": true }, { "mountPath": "/run/systemd/private", "mountPropagation": "HostToContainer", "name": "run-systemd", "readOnly": true, "subPath": "private" }, { "mountPath": "/cni-bin-dir", "name": "host-cni-bin" }, { "mountPath": "/etc/cni/net.d", "name": "host-cni-netd" }, { "mountPath": "/var/lib/cni/networks/ovn-k8s-cni-overlay", "name": "host-var-lib-cni-networks-ovn-kubernetes" }, { "mountPath": "/run/openvswitch", "name": "run-openvswitch" }, { "mountPath": "/var/log/ovnkube/", "name": "etc-openvswitch" }, { "mountPath": "/run/ovn/", "name": "run-ovn" }, { "mountPath": "/etc/openvswitch", "name": "etc-openvswitch" }, { "mountPath": "/etc/ovn/", "name": "etc-openvswitch" }, { "mountPath": "/var/lib/openvswitch", "name": "var-lib-openvswitch" }, { "mountPath": "/run/ovnkube-config/", "name": "ovnkube-config" }, { "mountPath": "/env", "name": "env-overrides" } ] } ], "dnsPolicy": "Default", "hostNetwork": true, "hostPID": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "ovn-kubernetes-node", "serviceAccountName": "ovn-kubernetes-node", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet", "type": "" }, "name": "host-kubelet" }, { "hostPath": { "path": "/etc/systemd/system", "type": "" }, "name": "systemd-units" }, { "hostPath": { "path": "/", "type": "" }, "name": "host-slash" }, { "hostPath": { "path": "/run/netns", "type": "" }, "name": "host-run-netns" }, { "hostPath": { "path": "/run/systemd", "type": "" }, "name": "run-systemd" }, { "hostPath": { "path": "/var/lib/openvswitch/data", "type": "" }, "name": "var-lib-openvswitch" }, { "hostPath": { "path": "/var/lib/ovn-ic/etc", "type": "" }, "name": "etc-openvswitch" }, { "hostPath": { "path": "/var/run/openvswitch", "type": "" }, "name": "run-openvswitch" }, { "hostPath": { "path": "/var/run/ovn-ic", "type": "" }, "name": "run-ovn" }, { "hostPath": { "path": "/var/log/ovn", "type": "" }, "name": "node-log" }, { "hostPath": { "path": "/dev/log", "type": "" }, "name": "log-socket" }, { "hostPath": { "path": "/run/ovn-kubernetes", "type": "" }, "name": "host-run-ovn-kubernetes" }, { "hostPath": { "path": "/var/lib/cni/bin", "type": "" }, "name": "host-cni-bin" }, { "hostPath": { "path": "/var/run/multus/cni/net.d", "type": "" }, "name": "host-cni-netd" }, { "hostPath": { "path": "/var/lib/cni/networks/ovn-k8s-cni-overlay", "type": "" }, "name": "host-var-lib-cni-networks-ovn-kubernetes" }, { "configMap": { "defaultMode": 420, "name": "ovnkube-config" }, "name": "ovnkube-config" }, { "configMap": { "defaultMode": 420, "name": "env-overrides", "optional": true }, "name": "env-overrides" }, { "name": "ovn-node-metrics-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "ovn-node-metrics-cert" } }, { "configMap": { "defaultMode": 484, "name": "ovnkube-script-lib" }, "name": "ovnkube-script-lib" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 2, "updatedNumberScheduled": 3 } } ], "kind": "List", "metadata": { "resourceVersion": "" } }