{ "apiVersion": "v1", "items": [ { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-03-31T03:42:32Z", "generation": 1, "name": "global-pull-secret-syncer", "namespace": "kube-system", "resourceVersion": "14504", "uid": "0366bd71-1507-47a3-8d6b-a199ba73cb4d" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "name": "global-pull-secret-syncer" } }, "template": { "metadata": { "labels": { "hypershift.openshift.io/globalps-config-hash": "1cead869", "name": "global-pull-secret-syncer" } }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "sync-global-pullsecret" ], "command": [ "/usr/bin/control-plane-operator" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:af3a4a739d80ee0b0d8a6c24b0dd9206d3e91907593da7cad54d881306b287ad", "imagePullPolicy": "IfNotPresent", "name": "global-pull-secret-syncer", "resources": { "requests": { "cpu": "5m", "memory": "35Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet", "name": "kubelet-config" }, { "mountPath": "/var/run/dbus", "name": "dbus" }, { "mountPath": "/etc/original-pull-secret", "name": "original-pull-secret", "readOnly": true } ] } ], "dnsPolicy": "Default", "nodeSelector": { "hypershift.openshift.io/nodepool-globalps-enabled": "true" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet", "type": "Directory" }, "name": "kubelet-config" }, { "hostPath": { "path": "/var/run/dbus", "type": "Directory" }, "name": "dbus" }, { "name": "original-pull-secret", "secret": { "defaultMode": 420, "secretName": "original-pull-secret" } } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": 1 }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-03-31T03:42:32Z", "generation": 1, "labels": { "hypershift.openshift.io/managed": "true" }, "name": "konnectivity-agent", "namespace": "kube-system", "resourceVersion": "8907", "uid": "9f8f7502-7732-49cb-bbe6-51071060d9c6" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "konnectivity-agent" } }, "template": { "metadata": { "annotations": { "hypershift.openshift.io/release-image": "quay.io/openshift-release-dev/ocp-release@sha256:995462cdf4c4036ff76e6ca73a69dc671bb017134c7486725d7da3cbe0330c5f" }, "labels": { "app": "konnectivity-agent" } }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "--logtostderr=true", "--ca-cert", "/etc/konnectivity/ca/ca.crt", "--agent-cert", "/etc/konnectivity/agent/tls.crt", "--agent-key", "/etc/konnectivity/agent/tls.key", "--proxy-server-host", "konnectivity-server.apps.kx-8259435a9f.hypershift.local", "--proxy-server-port", "443", "--health-server-host", "127.0.0.1", "--health-server-port", "2041", "--agent-identifiers=default-route=true", "--keepalive-time", "30s", "--probe-interval", "5s", "--sync-interval", "5s", "--sync-interval-cap", "30s", "--v", "3" ], "command": [ "/usr/bin/proxy-agent" ], "env": [ { "name": "HTTP_PROXY" }, { "name": "HTTPS_PROXY" }, { "name": "NO_PROXY" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f942448d1f3d05bd5534d16433e0961509c35ea1eab6d51c0d2a8b7e16b0ad29", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 6, "httpGet": { "host": "127.0.0.1", "path": "healthz", "port": 2041, "scheme": "HTTP" }, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "konnectivity-agent", "readinessProbe": { "failureThreshold": 1, "httpGet": { "host": "127.0.0.1", "path": "readyz", "port": 2041, "scheme": "HTTP" }, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "40m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "startupProbe": { "failureThreshold": 60, "httpGet": { "host": "127.0.0.1", "path": "healthz", "port": 2041, "scheme": "HTTP" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 5 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/konnectivity/agent", "name": "agent-certs" }, { "mountPath": "/etc/konnectivity/ca", "name": "konnectivity-ca" } ] } ], "dnsPolicy": "Default", "hostNetwork": true, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsUser": 1000 }, "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "name": "agent-certs", "secret": { "defaultMode": 416, "secretName": "konnectivity-agent" } }, { "configMap": { "defaultMode": 416, "name": "konnectivity-ca-bundle" }, "name": "konnectivity-ca" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "config.openshift.io/inject-proxy-cabundle": "csi-driver", "deprecated.daemonset.template.generation": "1", "operator.openshift.io/spec-hash": "dcca42f76136ef1342d7b5b6265e8908d7e89cff7ba3e5faf322e10f7731723d", "storage.openshift.io/stable-generation": "1" }, "creationTimestamp": "2026-03-31T03:42:56Z", "generation": 1, "name": "aws-ebs-csi-driver-node", "namespace": "openshift-cluster-csi-drivers", "resourceVersion": "8826", "uid": "c8330c1f-6a95-4e96-a989-fb65c65bcd31" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "aws-ebs-csi-driver-node" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "openshift.io/required-scc": "privileged", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app": "aws-ebs-csi-driver-node" } }, "spec": { "containers": [ { "args": [ "node", "--endpoint=$(CSI_ENDPOINT)", "--logtostderr", "--v=2", "--reserved-volume-attachments=1" ], "env": [ { "name": "CSI_ENDPOINT", "value": "unix:/csi/csi.sock" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a9ba9a4e3738eafa7fca3a909efd0f1a071233f9414f0a2e1196270f0a68dc", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "host": "127.0.0.1", "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "csi-driver", "ports": [ { "containerPort": 10300, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet", "mountPropagation": "Bidirectional", "name": "kubelet-dir" }, { "mountPath": "/csi", "name": "socket-dir" }, { "mountPath": "/dev", "name": "device-dir" }, { "mountPath": "/etc/selinux", "name": "etc-selinux" }, { "mountPath": "/sys/fs", "name": "sys-fs" } ] }, { "args": [ "--csi-address=/csi/csi.sock", "--kubelet-registration-path=/var/lib/kubelet/plugins/ebs.csi.aws.com/csi.sock", "--http-endpoint=127.0.0.1:10309", "--v=2" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:87de118dc29ca1b47d4768ec5ed4441bc1dada3fb2a78d53b1833249baa86dd4", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "/bin/sh", "-c", "rm -rf /registration/ebs.csi.aws.com-reg.sock /csi/csi.sock" ] } } }, "livenessProbe": { "failureThreshold": 5, "httpGet": { "host": "127.0.0.1", "path": "/healthz", "port": "rhealthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "csi-node-driver-registrar", "ports": [ { "containerPort": 10309, "name": "rhealthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/csi", "name": "socket-dir" }, { "mountPath": "/registration", "name": "registration-dir" } ] }, { "args": [ "--csi-address=/csi/csi.sock", "--http-endpoint=127.0.0.1:10300", "--v=2", "--probe-timeout=3s" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:aa65d1c7fb8805b767fc4878faea280472f372010efadc66e5641a2e634a80c0", "imagePullPolicy": "IfNotPresent", "name": "csi-liveness-probe", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/csi", "name": "socket-dir" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "aws-ebs-csi-driver-node-sa", "serviceAccountName": "aws-ebs-csi-driver-node-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet", "type": "Directory" }, "name": "kubelet-dir" }, { "hostPath": { "path": "/var/lib/kubelet/plugins/ebs.csi.aws.com/", "type": "DirectoryOrCreate" }, "name": "socket-dir" }, { "hostPath": { "path": "/var/lib/kubelet/plugins_registry/", "type": "Directory" }, "name": "registration-dir" }, { "hostPath": { "path": "/dev", "type": "Directory" }, "name": "device-dir" }, { "hostPath": { "path": "/etc/selinux", "type": "DirectoryOrCreate" }, "name": "etc-selinux" }, { "hostPath": { "path": "/sys/fs", "type": "Directory" }, "name": "sys-fs" }, { "name": "metrics-serving-cert", "secret": { "defaultMode": 420, "secretName": "aws-ebs-csi-driver-node-metrics-serving-cert" } } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-03-31T03:43:01Z", "generation": 1, "labels": { "openshift-app": "tuned" }, "name": "tuned", "namespace": "openshift-cluster-node-tuning-operator", "ownerReferences": [ { "apiVersion": "tuned.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Tuned", "name": "default", "uid": "7d914d06-bb5f-4216-b118-40f2ee71fc60" } ], "resourceVersion": "8716", "uid": "4f23f853-75fa-4a5c-85e2-f654dfca006a" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "openshift-app": "tuned" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "name": "tuned", "openshift-app": "tuned" } }, "spec": { "containers": [ { "command": [ "/usr/bin/cluster-node-tuning-operator", "ocp-tuned", "--in-cluster", "-v=0" ], "env": [ { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "OCP_NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "RESYNC_PERIOD", "value": "600" }, { "name": "RELEASE_VERSION", "value": "4.21.6" }, { "name": "CLUSTER_NODE_TUNED_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6ea0f19030ffc52a290e6eeb812ef2426c48a2f1083b1e415e0667998cbb7bf2" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6ea0f19030ffc52a290e6eeb812ef2426c48a2f1083b1e415e0667998cbb7bf2", "imagePullPolicy": "IfNotPresent", "name": "tuned", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/modprobe.d", "mountPropagation": "HostToContainer", "name": "etc-modprobe-d" }, { "mountPath": "/etc/sysconfig", "mountPropagation": "HostToContainer", "name": "etc-sysconfig" }, { "mountPath": "/etc/kubernetes", "mountPropagation": "HostToContainer", "name": "etc-kubernetes", "readOnly": true }, { "mountPath": "/etc/sysctl.d", "mountPropagation": "HostToContainer", "name": "etc-sysctl-d", "readOnly": true }, { "mountPath": "/etc/sysctl.conf", "mountPropagation": "HostToContainer", "name": "etc-sysctl-conf", "readOnly": true }, { "mountPath": "/etc/systemd", "mountPropagation": "HostToContainer", "name": "etc-systemd" }, { "mountPath": "/etc/tuned", "name": "etc-tuned" }, { "mountPath": "/run", "mountPropagation": "HostToContainer", "name": "run" }, { "mountPath": "/sys", "mountPropagation": "HostToContainer", "name": "sys" }, { "mountPath": "/tmp", "name": "tmp" }, { "mountPath": "/lib/modules", "mountPropagation": "HostToContainer", "name": "lib-modules", "readOnly": true }, { "mountPath": "/var/lib/kubelet", "mountPropagation": "HostToContainer", "name": "var-lib-kubelet", "readOnly": true }, { "mountPath": "/host", "mountPropagation": "HostToContainer", "name": "host" } ] } ], "dnsPolicy": "ClusterFirst", "hostIPC": true, "hostNetwork": true, "hostPID": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "tuned", "serviceAccountName": "tuned", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/modprobe.d", "type": "Directory" }, "name": "etc-modprobe-d" }, { "hostPath": { "path": "/etc/sysconfig", "type": "Directory" }, "name": "etc-sysconfig" }, { "hostPath": { "path": "/etc/kubernetes", "type": "Directory" }, "name": "etc-kubernetes" }, { "hostPath": { "path": "/etc/sysctl.d", "type": "Directory" }, "name": "etc-sysctl-d" }, { "hostPath": { "path": "/etc/sysctl.conf", "type": "File" }, "name": "etc-sysctl-conf" }, { "hostPath": { "path": "/etc/systemd", "type": "Directory" }, "name": "etc-systemd" }, { "hostPath": { "path": "/run", "type": "Directory" }, "name": "run" }, { "hostPath": { "path": "/sys", "type": "Directory" }, "name": "sys" }, { "hostPath": { "path": "/lib/modules", "type": "Directory" }, "name": "lib-modules" }, { "hostPath": { "path": "/var/lib/kubelet", "type": "Directory" }, "name": "var-lib-kubelet" }, { "hostPath": { "path": "/", "type": "Directory" }, "name": "host" }, { "emptyDir": { "medium": "Memory" }, "name": "etc-tuned" }, { "emptyDir": { "medium": "Memory" }, "name": "tmp" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-03-31T03:42:30Z", "generation": 1, "labels": { "dns.operator.openshift.io/owning-dns": "default" }, "name": "dns-default", "namespace": "openshift-dns", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "controller": true, "kind": "DNS", "name": "default", "uid": "a605c807-da33-4931-a9b9-bdf898e27d73" } ], "resourceVersion": "14151", "uid": "ba241206-a068-41cd-8a12-83ccece1994f" }, "spec": { "minReadySeconds": 9, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "dns.operator.openshift.io/daemonset-dns": "default" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "true", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "dns.operator.openshift.io/daemonset-dns": "default" } }, "spec": { "containers": [ { "args": [ "-conf", "/etc/coredns/Corefile" ], "command": [ "coredns" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:83344c7d1374cbc2607b4fcb837f094c035b32daf24f8b3ccba2c8df409a6d3c", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/health", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "dns", "ports": [ { "containerPort": 5353, "name": "dns", "protocol": "UDP" }, { "containerPort": 5353, "name": "dns-tcp", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": 8181, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 3, "successThreshold": 1, "timeoutSeconds": 3 }, "resources": { "requests": { "cpu": "50m", "memory": "70Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/coredns", "name": "config-volume", "readOnly": true }, { "mountPath": "/tmp", "name": "tmp-dir" } ] }, { "args": [ "--logtostderr", "--secure-listen-address=:9154", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", "--upstream=http://127.0.0.1:9153/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1e6d59867cbd750672bc9ccfb9c69c3d198174cd43dd6d71a0da358b4b766473", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9154, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "40Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-tls", "readOnly": true }, { "mountPath": "/tmp", "name": "tmp-dir" } ] } ], "dnsPolicy": "Default", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "dns", "serviceAccountName": "dns", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "Corefile", "path": "Corefile" } ], "name": "dns-default" }, "name": "config-volume" }, { "name": "metrics-tls", "secret": { "defaultMode": 420, "secretName": "dns-default-metrics-tls" } }, { "emptyDir": {}, "name": "tmp-dir" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": "10%", "maxUnavailable": 0 }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-03-31T03:42:31Z", "generation": 1, "name": "node-resolver", "namespace": "openshift-dns", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "controller": true, "kind": "DNS", "name": "default", "uid": "a605c807-da33-4931-a9b9-bdf898e27d73" } ], "resourceVersion": "8776", "uid": "ebee0e12-fdbd-4121-b412-2dec1aa3ad10" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "dns.operator.openshift.io/daemonset-node-resolver": "" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "dns.operator.openshift.io/daemonset-node-resolver": "" } }, "spec": { "containers": [ { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -uo pipefail\n\ntrap 'jobs -p | xargs kill || true; wait; exit 0' TERM\n\nOPENSHIFT_MARKER=\"openshift-generated-node-resolver\"\nHOSTS_FILE=\"/etc/hosts\"\nTEMP_FILE=\"/tmp/hosts.tmp\"\n\nIFS=', ' read -r -a services \u003c\u003c\u003c \"${SERVICES}\"\n\n# Make a temporary file with the old hosts file's attributes.\nif ! cp -f --attributes-only \"${HOSTS_FILE}\" \"${TEMP_FILE}\"; then\n echo \"Failed to preserve hosts file. Exiting.\"\n exit 1\nfi\n\nwhile true; do\n declare -A svc_ips\n for svc in \"${services[@]}\"; do\n # Fetch service IP from cluster dns if present. We make several tries\n # to do it: IPv4, IPv6, IPv4 over TCP and IPv6 over TCP. The two last ones\n # are for deployments with Kuryr on older OpenStack (OSP13) - those do not\n # support UDP loadbalancers and require reaching DNS through TCP.\n cmds=('dig -t A @\"${NAMESERVER}\" +short \"${svc}.${CLUSTER_DOMAIN}\"|grep -v \"^;\"'\n 'dig -t AAAA @\"${NAMESERVER}\" +short \"${svc}.${CLUSTER_DOMAIN}\"|grep -v \"^;\"'\n 'dig -t A +tcp +retry=0 @\"${NAMESERVER}\" +short \"${svc}.${CLUSTER_DOMAIN}\"|grep -v \"^;\"'\n 'dig -t AAAA +tcp +retry=0 @\"${NAMESERVER}\" +short \"${svc}.${CLUSTER_DOMAIN}\"|grep -v \"^;\"')\n for i in ${!cmds[*]}\n do\n ips=($(eval \"${cmds[i]}\"))\n if [[ \"$?\" -eq 0 \u0026\u0026 \"${#ips[@]}\" -ne 0 ]]; then\n svc_ips[\"${svc}\"]=\"${ips[@]}\"\n break\n fi\n done\n done\n\n # Update /etc/hosts only if we get valid service IPs\n # We will not update /etc/hosts when there is coredns service outage or api unavailability\n # Stale entries could exist in /etc/hosts if the service is deleted\n if [[ -n \"${svc_ips[*]-}\" ]]; then\n # Build a new hosts file from /etc/hosts with our custom entries filtered out\n if ! sed --silent \"/# ${OPENSHIFT_MARKER}/d; w ${TEMP_FILE}\" \"${HOSTS_FILE}\"; then\n # Only continue rebuilding the hosts entries if its original content is preserved\n sleep 60 \u0026 wait\n continue\n fi\n\n # Append resolver entries for services\n rc=0\n for svc in \"${!svc_ips[@]}\"; do\n for ip in ${svc_ips[${svc}]}; do\n echo \"${ip} ${svc} ${svc}.${CLUSTER_DOMAIN} # ${OPENSHIFT_MARKER}\" \u003e\u003e \"${TEMP_FILE}\" || rc=$?\n done\n done\n if [[ $rc -ne 0 ]]; then\n sleep 60 \u0026 wait\n continue\n fi\n\n\n # TODO: Update /etc/hosts atomically to avoid any inconsistent behavior\n # Replace /etc/hosts with our modified version if needed\n cmp \"${TEMP_FILE}\" \"${HOSTS_FILE}\" || cp -f \"${TEMP_FILE}\" \"${HOSTS_FILE}\"\n # TEMP_FILE is not removed to avoid file create/delete and attributes copy churn\n fi\n sleep 60 \u0026 wait\n unset svc_ips\ndone\n" ], "env": [ { "name": "SERVICES", "value": "image-registry.openshift-image-registry.svc" }, { "name": "NAMESERVER", "value": "172.30.0.10" }, { "name": "CLUSTER_DOMAIN", "value": "cluster.local" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bc7e9750e4647b2ccd9a7c1c0f4cc35f640b36d8ab9d3fa789eb2764afce3d7a", "imagePullPolicy": "IfNotPresent", "name": "dns-node-resolver", "resources": { "requests": { "cpu": "5m", "memory": "21Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/hosts", "name": "hosts-file" }, { "mountPath": "/tmp", "name": "tmp-dir" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "node-resolver", "serviceAccountName": "node-resolver", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/hosts", "type": "File" }, "name": "hosts-file" }, { "emptyDir": {}, "name": "tmp-dir" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "33%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "operator.openshift.io/spec-hash": "1bd8bc17372fbb580eb7e7c8b87a472092615c945625ba7b7ca6588c2f4806fc" }, "creationTimestamp": "2026-03-31T03:42:35Z", "generation": 1, "name": "node-ca", "namespace": "openshift-image-registry", "resourceVersion": "8712", "uid": "12311fad-d335-46cc-a5ef-c5b9e6fbaf08" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "name": "node-ca" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "name": "node-ca" } }, "spec": { "containers": [ { "command": [ "/bin/sh", "-c", "trap 'jobs -p | xargs -r kill; echo shutting down node-ca; exit 0' TERM\nwhile [ true ];\ndo\n for f in $(ls /tmp/serviceca); do\n echo $f\n ca_file_path=\"/tmp/serviceca/${f}\"\n f=$(echo $f | sed -r 's/(.*)\\.\\./\\1:/')\n reg_dir_path=\"/etc/docker/certs.d/${f}\"\n if [ -e \"${reg_dir_path}\" ]; then\n cp -u $ca_file_path $reg_dir_path/ca.crt\n else\n mkdir $reg_dir_path\n cp $ca_file_path $reg_dir_path/ca.crt\n fi\n done\n for d in $(ls /etc/docker/certs.d); do\n echo $d\n dp=$(echo $d | sed -r 's/(.*):/\\1\\.\\./')\n reg_conf_path=\"/tmp/serviceca/${dp}\"\n if [ ! -e \"${reg_conf_path}\" ]; then\n rm -rf /etc/docker/certs.d/$d\n fi\n done\n sleep 60 \u0026 wait ${!}\ndone\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a20df9dd8819885aa431022c6f5e80b77b4431f268b719d71bec26f10521da0e", "imagePullPolicy": "IfNotPresent", "name": "node-ca", "resources": { "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": true, "runAsGroup": 0, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp/serviceca", "name": "serviceca" }, { "mountPath": "/etc/docker/certs.d", "name": "host" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "node-ca", "serviceAccountName": "node-ca", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/docker/certs.d", "type": "" }, "name": "host" }, { "configMap": { "defaultMode": 420, "name": "image-registry-certificates" }, "name": "serviceca" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-03-31T03:42:56Z", "generation": 1, "labels": { "ingress.openshift.io/canary": "canary_controller" }, "name": "ingress-canary", "namespace": "openshift-ingress-canary", "resourceVersion": "9207", "uid": "d8695886-7649-4712-80ea-b7f0f1cc6c8a" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "ingresscanary.operator.openshift.io/daemonset-ingresscanary": "canary_controller" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "ingresscanary.operator.openshift.io/daemonset-ingresscanary": "canary_controller" } }, "spec": { "containers": [ { "command": [ "ingress-operator", "serve-healthcheck" ], "env": [ { "name": "TLS_CERT", "value": "/etc/tls-cert/tls.crt" }, { "name": "TLS_KEY", "value": "/etc/tls-cert/tls.key" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5b51a4d9d3b7ecad110fb6eb00f71e9e9b854067d79b220df397a58d9fa50eb0", "imagePullPolicy": "IfNotPresent", "name": "serve-healthcheck-canary", "ports": [ { "containerPort": 8443, "protocol": "TCP" }, { "containerPort": 8888, "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls-cert", "name": "cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "node-role.kubernetes.io/infra", "operator": "Exists" } ], "volumes": [ { "name": "cert", "secret": { "defaultMode": 272, "secretName": "canary-serving-cert" } } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "deprecated.daemonset.template.generation": "1", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-03-31T03:51:19Z", "generation": 1, "labels": { "app.kubernetes.io/name": "insights-runtime-extractor" }, "name": "insights-runtime-extractor", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "00bebf5e-c872-4799-85d3-daaa191320ba" } ], "resourceVersion": "11264", "uid": "383b4086-0b72-4453-b016-085b117c2476" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/name": "insights-runtime-extractor" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "extractor", "openshift.io/required-scc": "insights-runtime-extractor-scc", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app.kubernetes.io/name": "insights-runtime-extractor" } }, "spec": { "containers": [ { "args": [ "--secure-listen-address=:8443", "--upstream=http://127.0.0.1:8000", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1e6d59867cbd750672bc9ccfb9c69c3d198174cd43dd6d71a0da358b4b766473", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "insights-runtime-extractor-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "kube-rbac-proxy-cm" } ] }, { "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0e5fa2595714628c16cf590efd28715bde790d2dc6b3a793b2a38dfb3ffb591a", "imagePullPolicy": "Always", "name": "exporter", "resources": { "requests": { "cpu": "10m", "memory": "200Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/data", "name": "data-volume" } ] }, { "env": [ { "name": "CONTAINER_RUNTIME_ENDPOINT", "value": "unix:///crio.sock" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3b9f60077c475f2baad0dd51ffc9d469f3a9b54c474bb86a35f93cb9b8fdc734", "imagePullPolicy": "Always", "livenessProbe": { "exec": { "command": [ "crictl", "--timeout", "10s", "info" ] }, "failureThreshold": 3, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "extractor", "resources": { "requests": { "cpu": "10m", "memory": "200Mi" } }, "securityContext": { "capabilities": { "add": [ "CAP_SYS_ADMIN" ], "drop": [ "ALL" ] }, "privileged": true, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/crio.sock", "name": "crio-socket" }, { "mountPath": "/data", "name": "data-volume" } ] } ], "dnsPolicy": "ClusterFirst", "hostPID": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "insights-runtime-extractor-sa", "serviceAccountName": "insights-runtime-extractor-sa", "terminationGracePeriodSeconds": 30, "volumes": [ { "hostPath": { "path": "/run/crio/crio.sock", "type": "Socket" }, "name": "crio-socket" }, { "emptyDir": {}, "name": "data-volume" }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "kube-rbac-proxy-cm" }, { "name": "insights-runtime-extractor-tls", "secret": { "defaultMode": 420, "secretName": "insights-runtime-extractor-tls" } } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "33%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1" }, "creationTimestamp": "2026-03-31T03:51:39Z", "generation": 1, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "node-exporter", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "1.10.2" }, "name": "node-exporter", "namespace": "openshift-monitoring", "resourceVersion": "12661", "uid": "f275ec6c-635c-43d1-9e76-4a6b4c50e40b" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/name": "node-exporter", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "kubectl.kubernetes.io/default-container": "node-exporter", "openshift.io/required-scc": "node-exporter", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "node-exporter", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "1.10.2" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--web.listen-address=127.0.0.1:9101", "--path.sysfs=/host/sys", "--path.rootfs=/host/root", "--path.procfs=/host/root/proc", "--path.udev.data=/host/root/run/udev/data", "--no-collector.wifi", "--collector.filesystem.mount-points-exclude=^/(dev|proc|sys|run/k3s/containerd/.+|var/lib/docker/.+|var/lib/kubelet/pods/.+)($|/)", "--collector.netclass.ignored-devices=^(veth.*|[a-f0-9]{15}|enP.*|ovn-k8s-mp[0-9]*|br-ex|br-int|br-ext|br[0-9]*|tun[0-9]*|cali[a-f0-9]*)$", "--collector.netdev.device-exclude=^(veth.*|[a-f0-9]{15}|enP.*|ovn-k8s-mp[0-9]*|br-ex|br-int|br-ext|br[0-9]*|tun[0-9]*|cali[a-f0-9]*)$", "--collector.cpu.info", "--collector.textfile.directory=/var/node_exporter/textfile", "--no-collector.btrfs", "--runtime.gomaxprocs=0", "--no-collector.cpufreq", "--no-collector.tcpstat", "--collector.netdev", "--collector.netclass", "--collector.netclass.netlink", "--no-collector.buddyinfo", "--no-collector.mountstats", "--no-collector.ksmd", "--no-collector.processes", "--no-collector.systemd" ], "command": [ "/bin/sh", "-c", "export GOMAXPROCS=4\n# We don't take CPU affinity into account as the container doesn't have integer CPU requests.\n# In case of error, fallback to the default value.\nNUM_CPUS=$(grep -c '^processor' \"/proc/cpuinfo\" 2\u003e/dev/null || echo \"0\")\nif [ \"$NUM_CPUS\" -lt \"$GOMAXPROCS\" ]; then\n export GOMAXPROCS=\"$NUM_CPUS\"\nfi\necho \"ts=$(date --iso-8601=seconds) num_cpus=$NUM_CPUS gomaxprocs=$GOMAXPROCS\"\nexec /bin/node_exporter \"$0\" \"$@\"\n" ], "env": [ { "name": "DBUS_SYSTEM_BUS_ADDRESS", "value": "unix:path=/host/root/var/run/dbus/system_bus_socket" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:dadfaf3cceca2867f77c40b373b6fc80e34b4ba2cb1f05e7178a0cc79eac2d9d", "imagePullPolicy": "IfNotPresent", "name": "node-exporter", "resources": { "requests": { "cpu": "8m", "memory": "32Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/host/sys", "mountPropagation": "HostToContainer", "name": "sys", "readOnly": true }, { "mountPath": "/host/root", "mountPropagation": "HostToContainer", "name": "root", "readOnly": true }, { "mountPath": "/var/node_exporter/textfile", "name": "node-exporter-textfile", "readOnly": true }, { "mountPath": "/var/node_exporter/accelerators_collector_config", "name": "node-exporter-accelerators-collector-config", "readOnly": true } ], "workingDir": "/var/node_exporter/textfile" }, { "args": [ "--secure-listen-address=[$(IP)]:9100", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:9101/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "env": [ { "name": "IP", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "status.podIP" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1e6d59867cbd750672bc9ccfb9c69c3d198174cd43dd6d71a0da358b4b766473", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9100, "hostPort": 9100, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "node-exporter-tls" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca" }, { "mountPath": "/etc/kube-rbac-policy", "name": "node-exporter-kube-rbac-proxy-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "hostPID": true, "initContainers": [ { "command": [ "/bin/sh", "-c", "[[ ! -d /node_exporter/collectors/init ]] || find /node_exporter/collectors/init -perm /111 -type f -exec {} \\;" ], "env": [ { "name": "TMPDIR", "value": "/tmp" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:dadfaf3cceca2867f77c40b373b6fc80e34b4ba2cb1f05e7178a0cc79eac2d9d", "imagePullPolicy": "IfNotPresent", "name": "init-textfile", "resources": { "requests": { "cpu": "1m", "memory": "1Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/node_exporter/textfile", "name": "node-exporter-textfile" }, { "mountPath": "/var/log/wtmp", "name": "node-exporter-wtmp", "readOnly": true } ], "workingDir": "/var/node_exporter/textfile" } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "node-exporter", "serviceAccountName": "node-exporter", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/sys", "type": "" }, "name": "sys" }, { "hostPath": { "path": "/", "type": "" }, "name": "root" }, { "emptyDir": {}, "name": "node-exporter-textfile" }, { "name": "node-exporter-tls", "secret": { "defaultMode": 420, "secretName": "node-exporter-tls" } }, { "hostPath": { "path": "/var/log/wtmp", "type": "File" }, "name": "node-exporter-wtmp" }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "name": "node-exporter-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "node-exporter-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "config.yaml", "path": "config.yaml" } ], "name": "node-exporter-accelerators-collector-config" }, "name": "node-exporter-accelerators-collector-config" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "kubernetes.io/description": "This daemon set launches the Multus networking component on each node.\n", "release.openshift.io/version": "4.21.6" }, "creationTimestamp": "2026-03-31T03:43:06Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "2pcf4qvmb8c8ij76t9r5ocbboorpi5e4" }, "name": "multus", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "1e256cd9-e6ec-46da-8fc2-3b0d3f35b8ac" } ], "resourceVersion": "8720", "uid": "f425d494-9d33-4673-99be-282064e3a7cc" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "multus" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app": "multus", "component": "network", "openshift.io/component": "network", "type": "infra" } }, "spec": { "containers": [ { "args": [ "MULTUS_DAEMON_OPT=\"\"\n/entrypoint/cnibincopy.sh; exec /usr/src/multus-cni/bin/multus-daemon $MULTUS_DAEMON_OPT\n" ], "command": [ "/bin/bash", "-ec", "--" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/usr/src/multus-cni/rhel8/bin/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/usr/src/multus-cni/rhel9/bin/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/usr/src/multus-cni/bin/" }, { "name": "KUBERNETES_SERVICE_PORT", "value": "443" }, { "name": "KUBERNETES_SERVICE_HOST", "value": "api.kx-8259435a9f.hypershift.local" }, { "name": "MULTUS_NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "K8S_NODE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:89c8b051a435031bdcc24715379e0003cb67001076c4134f82ad0dae5cef3704", "imagePullPolicy": "IfNotPresent", "name": "kube-multus", "resources": { "requests": { "cpu": "10m", "memory": "65Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/etc/os-release", "name": "os-release" }, { "mountPath": "/host/etc/cni/net.d", "name": "system-cni-dir" }, { "mountPath": "/host/run/multus/cni/net.d", "name": "multus-cni-dir" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/run/multus", "mountPropagation": "HostToContainer", "name": "multus-socket-dir-parent" }, { "mountPath": "/run/k8s.cni.cncf.io", "name": "host-run-k8s-cni-cncf-io" }, { "mountPath": "/run/netns", "mountPropagation": "HostToContainer", "name": "host-run-netns" }, { "mountPath": "/var/lib/cni/bin", "name": "host-var-lib-cni-bin" }, { "mountPath": "/var/lib/cni/multus", "name": "host-var-lib-cni-multus" }, { "mountPath": "/var/lib/kubelet", "mountPropagation": "HostToContainer", "name": "host-var-lib-kubelet" }, { "mountPath": "/hostroot", "mountPropagation": "HostToContainer", "name": "hostroot" }, { "mountPath": "/etc/cni/multus/net.d", "name": "multus-conf-dir" }, { "mountPath": "/etc/cni/net.d/multus.d", "name": "multus-daemon-config", "readOnly": true }, { "mountPath": "/etc/cni/multus/certs", "name": "host-run-multus-certs" }, { "mountPath": "/etc/kubernetes", "name": "etc-kubernetes" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "hostPID": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/kubernetes/cni/net.d", "type": "Directory" }, "name": "system-cni-dir" }, { "hostPath": { "path": "/var/run/multus/cni/net.d", "type": "Directory" }, "name": "multus-cni-dir" }, { "hostPath": { "path": "/var/lib/cni/bin", "type": "Directory" }, "name": "cnibin" }, { "hostPath": { "path": "/etc/os-release", "type": "File" }, "name": "os-release" }, { "configMap": { "defaultMode": 484, "name": "cni-copy-resources" }, "name": "cni-binary-copy" }, { "hostPath": { "path": "/run/multus", "type": "DirectoryOrCreate" }, "name": "multus-socket-dir-parent" }, { "hostPath": { "path": "/run/k8s.cni.cncf.io", "type": "" }, "name": "host-run-k8s-cni-cncf-io" }, { "hostPath": { "path": "/run/netns/", "type": "" }, "name": "host-run-netns" }, { "hostPath": { "path": "/var/lib/cni/bin", "type": "" }, "name": "host-var-lib-cni-bin" }, { "hostPath": { "path": "/var/lib/cni/multus", "type": "" }, "name": "host-var-lib-cni-multus" }, { "hostPath": { "path": "/var/lib/kubelet", "type": "" }, "name": "host-var-lib-kubelet" }, { "hostPath": { "path": "/", "type": "" }, "name": "hostroot" }, { "hostPath": { "path": "/etc/cni/multus/net.d", "type": "" }, "name": "multus-conf-dir" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "daemon-config.json", "path": "daemon-config.json" } ], "name": "multus-daemon-config" }, "name": "multus-daemon-config" }, { "hostPath": { "path": "/etc/cni/multus/certs", "type": "" }, "name": "host-run-multus-certs" }, { "hostPath": { "path": "/etc/kubernetes", "type": "" }, "name": "etc-kubernetes" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "kubernetes.io/description": "This daemon installs and configures auxiliary CNI plugins on each node.\n", "release.openshift.io/version": "4.21.6" }, "creationTimestamp": "2026-03-31T03:43:06Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "2pcf4qvmb8c8ij76t9r5ocbboorpi5e4" }, "name": "multus-additional-cni-plugins", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "1e256cd9-e6ec-46da-8fc2-3b0d3f35b8ac" } ], "resourceVersion": "9209", "uid": "4aac61c9-b7a1-4b29-83d9-faa907f0f1fb" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "multus-additional-cni-plugins" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app": "multus-additional-cni-plugins", "component": "network", "openshift.io/component": "network", "type": "infra" } }, "spec": { "containers": [ { "args": [ "trap : TERM INT; sleep infinity \u0026 wait\n" ], "command": [ "/bin/bash", "-ec", "--" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:89c8b051a435031bdcc24715379e0003cb67001076c4134f82ad0dae5cef3704", "imagePullPolicy": "IfNotPresent", "name": "kube-multus-additional-cni-plugins", "resources": { "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "initContainers": [ { "command": [ "/entrypoint/cnibincopy.sh" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/usr/src/egress-router-cni/rhel8/bin/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/usr/src/egress-router-cni/rhel9/bin/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/usr/src/egress-router-cni/bin/" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a6b085cdad58db8529d99c22ec1ec79fe09ab00ab1c92ee38b29e7875dc0533c", "imagePullPolicy": "IfNotPresent", "name": "egress-router-binary-copy", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/os-release", "name": "os-release", "readOnly": true } ] }, { "command": [ "/bin/bash", "-c", "/entrypoint/cnibincopy.sh \u0026\u0026 cp -n /sysctls/allowlist.conf /host/etc/cni/tuning/" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/usr/src/plugins/rhel8/bin/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/usr/src/plugins/rhel9/bin/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/usr/src/plugins/bin/" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:464c7d227e1c80e413d87d99fdf42fc80d76b3bc8f9281a23b7d59b3b4ea2372", "imagePullPolicy": "IfNotPresent", "name": "cni-plugins", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/os-release", "name": "os-release", "readOnly": true }, { "mountPath": "/host/etc/cni/tuning/", "name": "tuning-conf-dir" }, { "mountPath": "/sysctls", "name": "cni-sysctl-allowlist" } ] }, { "command": [ "/entrypoint/cnibincopy.sh" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/bondcni/rhel8/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/bondcni/rhel9/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/bondcni/rhel9/" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2e3661304917ce7f3be49974faacc60c24cbe2833d7b50c8c205c2f3f2467950", "imagePullPolicy": "IfNotPresent", "name": "bond-cni-plugin", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/os-release", "name": "os-release", "readOnly": true } ] }, { "command": [ "/entrypoint/cnibincopy.sh" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/usr/src/route-override/rhel8/bin/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/usr/src/route-override/rhel9/bin/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/usr/src/route-override/bin/" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d6c8c086bd9f73d1cc4a362ce6253914d4f4d8ce009b68aec42db9ff3a6aad36", "imagePullPolicy": "IfNotPresent", "name": "routeoverride-cni", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/os-release", "name": "os-release", "readOnly": true } ] }, { "command": [ "/entrypoint/cnibincopy.sh" ], "env": [ { "name": "RHEL8_SOURCE_DIRECTORY", "value": "/usr/src/whereabouts/rhel8/bin/" }, { "name": "RHEL9_SOURCE_DIRECTORY", "value": "/usr/src/whereabouts/rhel9/bin/" }, { "name": "DEFAULT_SOURCE_DIRECTORY", "value": "/usr/src/whereabouts/bin/" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:31e175b644c6627779ca6b9f48d9426760dd449788ad671dd0277cce8fb822e8", "imagePullPolicy": "IfNotPresent", "name": "whereabouts-cni-bincopy", "resources": { "requests": { "cpu": "10m", "memory": "10Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/entrypoint", "name": "cni-binary-copy" }, { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/os-release", "name": "os-release", "readOnly": true } ] }, { "command": [ "/bin/sh", "-c", "#!/bin/sh\n\nset -u -e\n\nCNI_BIN_DIR=${CNI_BIN_DIR:-\"/host/opt/cni/bin/\"}\nWHEREABOUTS_KUBECONFIG_FILE_HOST=${WHEREABOUTS_KUBECONFIG_FILE_HOST:-\"/etc/cni/net.d/whereabouts.d/whereabouts.kubeconfig\"}\nCNI_CONF_DIR=${CNI_CONF_DIR:-\"/host/etc/kubernetes/cni/net.d\"}\nWHEREABOUTS_RECONCILER_CRON=${WHEREABOUTS_RECONCILER_CRON:-30 4 * * *}\n\n# Make a whereabouts.d directory (for our kubeconfig)\n\nmkdir -p $CNI_CONF_DIR/whereabouts.d\nWHEREABOUTS_KUBECONFIG=$CNI_CONF_DIR/whereabouts.d/whereabouts.kubeconfig\nWHEREABOUTS_CONF_FILE=$CNI_CONF_DIR/whereabouts.d/whereabouts.conf\nWHEREABOUTS_KUBECONFIG_LITERAL=$(echo \"$WHEREABOUTS_KUBECONFIG\" | sed -e s'|/host||')\n\n# Write the nodename to the whereabouts.d directory for standardized hostname reference across cloud providers\necho $NODENAME \u003e $CNI_CONF_DIR/whereabouts.d/nodename\n\nSERVICE_ACCOUNT_PATH=/var/run/secrets/kubernetes.io/serviceaccount\nKUBE_CA_FILE=${KUBE_CA_FILE:-$SERVICE_ACCOUNT_PATH/ca.crt}\nSERVICE_ACCOUNT_TOKEN=$(cat $SERVICE_ACCOUNT_PATH/token)\nSERVICE_ACCOUNT_TOKEN_PATH=$SERVICE_ACCOUNT_PATH/token\nSKIP_TLS_VERIFY=${SKIP_TLS_VERIFY:-false}\n\n\nfunction log()\n{\n echo \"$(date -Iseconds) ${1}\"\n}\n\nfunction error()\n{\n log \"ERR: {$1}\"\n}\n\nfunction warn()\n{\n log \"WARN: {$1}\"\n}\n\n\nfunction generateKubeConfig {\n# Check if we're running as a k8s pod.\nif [ -f \"$SERVICE_ACCOUNT_PATH/token\" ]; then\n # We're running as a k8d pod - expect some variables.\n if [ -z ${KUBERNETES_SERVICE_HOST} ]; then\n error \"KUBERNETES_SERVICE_HOST not set\"; exit 1;\n fi\n if [ -z ${KUBERNETES_SERVICE_PORT} ]; then\n error \"KUBERNETES_SERVICE_PORT not set\"; exit 1;\n fi\n\n if [ \"$SKIP_TLS_VERIFY\" == \"true\" ]; then\n TLS_CFG=\"insecure-skip-tls-verify: true\"\n elif [ -f \"$KUBE_CA_FILE\" ]; then\n TLS_CFG=\"certificate-authority-data: $(cat $KUBE_CA_FILE | base64 | tr -d '\\n')\"\n fi\n\n # Kubernetes service address must be wrapped if it is IPv6 address\n KUBERNETES_SERVICE_HOST_WRAP=$KUBERNETES_SERVICE_HOST\n if [ \"$KUBERNETES_SERVICE_HOST_WRAP\" != \"${KUBERNETES_SERVICE_HOST_WRAP#*:[0-9a-fA-F]}\" ]; then\n KUBERNETES_SERVICE_HOST_WRAP=\\[$KUBERNETES_SERVICE_HOST_WRAP\\]\n fi\n\n # Write a kubeconfig file for the CNI plugin. Do this\n # to skip TLS verification for now. We should eventually support\n # writing more complete kubeconfig files. This is only used\n # if the provided CNI network config references it.\n touch $WHEREABOUTS_KUBECONFIG\n chmod ${KUBECONFIG_MODE:-600} $WHEREABOUTS_KUBECONFIG\n cat \u003e $WHEREABOUTS_KUBECONFIG \u003c\u003cEOF\n# Kubeconfig file for the Whereabouts CNI plugin.\napiVersion: v1\nkind: Config\nclusters:\n- name: local\n cluster:\n server: ${KUBERNETES_SERVICE_PROTOCOL:-https}://${KUBERNETES_SERVICE_HOST_WRAP}:${KUBERNETES_SERVICE_PORT}\n $TLS_CFG\nusers:\n- name: whereabouts\n user:\n token: \"${SERVICE_ACCOUNT_TOKEN}\"\ncontexts:\n- name: whereabouts-context\n context:\n cluster: local\n user: whereabouts\n namespace: ${WHEREABOUTS_NAMESPACE}\ncurrent-context: whereabouts-context\nEOF\n\n# Copy the config from ConfigMap to the desired directory\ncp /etc/whereabouts/config/whereabouts.conf $WHEREABOUTS_CONF_FILE\nchmod 600 $WHEREABOUTS_CONF_FILE\n\nelse\n warn \"Doesn't look like we're running in a kubernetes environment (no serviceaccount token)\"\nfi\n\n}\n\nfunction generateWhereaboutsConf {\n\n touch $WHEREABOUTS_CONF_FILE\n chmod ${KUBECONFIG_MODE:-600} $WHEREABOUTS_CONF_FILE\n cat \u003e $WHEREABOUTS_CONF_FILE \u003c\u003cEOF\n{\n \"datastore\": \"kubernetes\",\n \"kubernetes\": {\n \"kubeconfig\": \"${WHEREABOUTS_KUBECONFIG_LITERAL}\"\n },\n \"reconciler_cron_expression\": \"${WHEREABOUTS_RECONCILER_CRON}\"\n}\nEOF\n\n}\n\ngenerateKubeConfig\n# ------------------ end Generate a \"kube-config\"\n\n# ----------------- Generate a whereabouts conf\n# removed because we have the configmap\n#generateWhereaboutsConf\n# ---------------- End generate a whereabouts conf\n\n\n# copy whereabouts to the cni bin dir\n# SKIPPED DUE TO FIPS COPY.\n# cp -f /whereabouts $CNI_BIN_DIR\n\n# ---------------------- end generate a \"kube-config\".\n\n# Unless told otherwise, sleep forever.\n# This prevents Kubernetes from restarting the pod repeatedly.\nshould_sleep=${SLEEP:-\"true\"}\necho \"Done configuring CNI. Sleep=$should_sleep\"\nwhile [ \"$should_sleep\" == \"true\" ]; do\n sleep 1000000000000\ndone\n" ], "env": [ { "name": "NODENAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "KUBERNETES_SERVICE_PORT", "value": "443" }, { "name": "KUBERNETES_SERVICE_HOST", "value": "api.kx-8259435a9f.hypershift.local" }, { "name": "CNI_BIN_DIR", "value": "/host/opt/cni/bin/" }, { "name": "CNI_CONF_DIR", "value": "/host/etc/cni/net.d" }, { "name": "SLEEP", "value": "false" }, { "name": "WHEREABOUTS_NAMESPACE", "value": "openshift-multus" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:31e175b644c6627779ca6b9f48d9426760dd449788ad671dd0277cce8fb822e8", "imagePullPolicy": "IfNotPresent", "name": "whereabouts-cni", "resources": { "requests": { "cpu": "10m", "memory": "10Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/host/opt/cni/bin", "name": "cnibin" }, { "mountPath": "/host/etc/cni/net.d", "name": "system-cni-dir" }, { "mountPath": "/etc/whereabouts/config", "name": "whereabouts-flatfile-configmap" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "multus-ancillary-tools", "serviceAccountName": "multus-ancillary-tools", "terminationGracePeriodSeconds": 10, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/kubernetes/cni/net.d", "type": "" }, "name": "system-cni-dir" }, { "hostPath": { "path": "/var/run/multus/cni/net.d", "type": "" }, "name": "multus-cni-dir" }, { "hostPath": { "path": "/var/lib/cni/bin", "type": "" }, "name": "cnibin" }, { "hostPath": { "path": "/etc/os-release", "type": "File" }, "name": "os-release" }, { "configMap": { "defaultMode": 484, "name": "cni-copy-resources" }, "name": "cni-binary-copy" }, { "hostPath": { "path": "/etc/cni/tuning/", "type": "DirectoryOrCreate" }, "name": "tuning-conf-dir" }, { "configMap": { "defaultMode": 484, "name": "default-cni-sysctl-allowlist" }, "name": "cni-sysctl-allowlist" }, { "configMap": { "defaultMode": 420, "name": "whereabouts-flatfile-config" }, "name": "whereabouts-flatfile-configmap" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "kubernetes.io/description": "This daemonset launches the network metrics daemon on each node\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.21.6" }, "creationTimestamp": "2026-03-31T03:43:07Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "2pcf4qvmb8c8ij76t9r5ocbboorpi5e4" }, "name": "network-metrics-daemon", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "1e256cd9-e6ec-46da-8fc2-3b0d3f35b8ac" } ], "resourceVersion": "13503", "uid": "0c2c9bc2-e177-4ee9-ad99-fcf3a3507c3f" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "network-metrics-daemon" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app": "network-metrics-daemon", "component": "network", "openshift.io/component": "network", "type": "infra" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "network.operator.openshift.io/dpu-host", "operator": "DoesNotExist" }, { "key": "network.operator.openshift.io/dpu", "operator": "DoesNotExist" } ] } ] } } }, "containers": [ { "args": [ "--node-name", "$(NODE_NAME)" ], "command": [ "/usr/bin/network-metrics" ], "env": [ { "name": "NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cfcb0bd30c537e677ac6856c36c0c923b415f24d944c7aa1386489f511f6491d", "imagePullPolicy": "IfNotPresent", "name": "network-metrics-daemon", "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--logtostderr", "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "--upstream=http://127.0.0.1:9091/", "--tls-private-key-file=/etc/metrics/tls.key", "--tls-cert-file=/etc/metrics/tls.crt" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1e6d59867cbd750672bc9ccfb9c69c3d198174cd43dd6d71a0da358b4b766473", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/metrics", "name": "metrics-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "metrics-daemon-sa", "serviceAccountName": "metrics-daemon-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "name": "metrics-certs", "secret": { "defaultMode": 420, "secretName": "metrics-daemon-secret" } } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "33%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "kubernetes.io/description": "This daemonset deploys the network-check-target pods that run\na dummy app to be checked by network-check-source pod\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.21.6" }, "creationTimestamp": "2026-03-31T03:43:20Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "" }, "name": "network-check-target", "namespace": "openshift-network-diagnostics", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "1e256cd9-e6ec-46da-8fc2-3b0d3f35b8ac" } ], "resourceVersion": "9533", "uid": "e90f3668-c4db-41f8-8188-b8e5ff14a650" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "network-check-target" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app": "network-check-target", "kubernetes.io/os": "linux" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "network.operator.openshift.io/dpu-host", "operator": "DoesNotExist" }, { "key": "network.operator.openshift.io/dpu", "operator": "DoesNotExist" } ] } ] } } }, "containers": [ { "command": [ "cluster-network-check-target" ], "env": [ { "name": "K8S_NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2ade6dfb5406ef3a4264dea95d455298f54e8ef4d458d9ee3e94c33d48676a9b", "imagePullPolicy": "IfNotPresent", "name": "network-check-target-container", "ports": [ { "containerPort": 8080, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "10m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "default", "serviceAccountName": "default", "terminationGracePeriodSeconds": 10, "tolerations": [ { "operator": "Exists" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "1", "kubernetes.io/description": "This daemon set runs the iptables-alerter on each node\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.21.6" }, "creationTimestamp": "2026-03-31T03:43:23Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "2pcf4qvmb8c8ij76t9r5ocbboorpi5e4" }, "name": "iptables-alerter", "namespace": "openshift-network-operator", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "1e256cd9-e6ec-46da-8fc2-3b0d3f35b8ac" } ], "resourceVersion": "8796", "uid": "d0b199ad-4341-4d10-9b74-a72146d6ea0c" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "iptables-alerter" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app": "iptables-alerter", "component": "network", "openshift.io/component": "network", "type": "infra" } }, "spec": { "containers": [ { "command": [ "/iptables-alerter/iptables-alerter.sh" ], "env": [ { "name": "CONTAINER_RUNTIME_ENDPOINT", "value": "unix:///run/crio/crio.sock" }, { "name": "ALERTER_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bc7e9750e4647b2ccd9a7c1c0f4cc35f640b36d8ab9d3fa789eb2764afce3d7a", "imagePullPolicy": "IfNotPresent", "name": "iptables-alerter", "resources": { "limits": { "cpu": "10m" }, "requests": { "cpu": "10m", "memory": "65Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/iptables-alerter", "name": "iptables-alerter-script" }, { "mountPath": "/host", "mountPropagation": "HostToContainer", "name": "host-slash", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "hostPID": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "iptables-alerter", "serviceAccountName": "iptables-alerter", "terminationGracePeriodSeconds": 10, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 484, "name": "iptables-alerter-script" }, "name": "iptables-alerter-script" }, { "hostPath": { "path": "/", "type": "" }, "name": "host-slash" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 1, "updatedNumberScheduled": 3 } }, { "apiVersion": "apps/v1", "kind": "DaemonSet", "metadata": { "annotations": { "deprecated.daemonset.template.generation": "2", "kubernetes.io/description": "This daemonset launches the ovn-kubernetes per node networking components.\n", "networkoperator.openshift.io/cluster-network-cidr": "10.128.0.0/14", "networkoperator.openshift.io/default-masquerade-network-cidrs": "169.254.0.0/17,fd69::/112", "networkoperator.openshift.io/hybrid-overlay-status": "disabled", "networkoperator.openshift.io/ip-family-mode": "single-stack", "release.openshift.io/version": "4.21.6" }, "creationTimestamp": "2026-03-31T03:43:17Z", "generation": 2, "labels": { "networkoperator.openshift.io/generates-operator-status": "2pcf4qvmb8c8ij76t9r5ocbboorpi5e4" }, "name": "ovnkube-node", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "1e256cd9-e6ec-46da-8fc2-3b0d3f35b8ac" } ], "resourceVersion": "9154", "uid": "7407eb8a-f49a-473e-8d20-aaba6ec15eb4" }, "spec": { "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "ovnkube-node" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/enable-ds-eviction": "false", "network.operator.openshift.io/ovnkube-script-lib-hash": "d52ad4bbd1618117a787ea9c68bc346485feeb84", "networkoperator.openshift.io/cluster-network-cidr": "10.128.0.0/14", "networkoperator.openshift.io/hybrid-overlay-status": "disabled", "networkoperator.openshift.io/ip-family-mode": "single-stack", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app": "ovnkube-node", "component": "network", "kubernetes.io/os": "linux", "openshift.io/component": "network", "ovn-db-pod": "true", "type": "infra" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "network.operator.openshift.io/dpu-host", "operator": "DoesNotExist" }, { "key": "network.operator.openshift.io/smart-nic", "operator": "DoesNotExist" }, { "key": "network.operator.openshift.io/dpu", "operator": "DoesNotExist" } ] } ] } } }, "containers": [ { "command": [ "/bin/bash", "-c", "set -e\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nstart-ovn-controller ${OVN_LOG_LEVEL}\n" ], "env": [ { "name": "OVN_LOG_LEVEL", "value": "info" }, { "name": "K8S_NODE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1ab5375f4de81dcf4e990e316124f3d9614ee588bc55342fe94b544602883afa", "imagePullPolicy": "IfNotPresent", "name": "ovn-controller", "resources": { "requests": { "cpu": "10m", "memory": "300Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/run/openvswitch", "name": "run-openvswitch" }, { "mountPath": "/run/ovn/", "name": "run-ovn" }, { "mountPath": "/etc/openvswitch", "name": "etc-openvswitch" }, { "mountPath": "/etc/ovn/", "name": "etc-openvswitch" }, { "mountPath": "/var/lib/openvswitch", "name": "var-lib-openvswitch" }, { "mountPath": "/env", "name": "env-overrides" }, { "mountPath": "/var/log/ovn/", "name": "node-log" }, { "mountPath": "/dev/log", "name": "log-socket" } ] }, { "command": [ "/bin/bash", "-c", "set -euo pipefail\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nstart-audit-log-rotation\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1ab5375f4de81dcf4e990e316124f3d9614ee588bc55342fe94b544602883afa", "imagePullPolicy": "IfNotPresent", "name": "ovn-acl-logging", "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/var/log/ovn/", "name": "node-log" }, { "mountPath": "/run/ovn/", "name": "run-ovn" } ] }, { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -euo pipefail\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nstart-rbac-proxy-node ovn-node-metrics 9103 29103 /etc/pki/tls/metrics-cert/tls.key /etc/pki/tls/metrics-cert/tls.crt\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1e6d59867cbd750672bc9ccfb9c69c3d198174cd43dd6d71a0da358b4b766473", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-node", "ports": [ { "containerPort": 9103, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/etc/pki/tls/metrics-cert", "name": "ovn-node-metrics-cert", "readOnly": true } ] }, { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -euo pipefail\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nstart-rbac-proxy-node ovn-metrics 9105 29105 /etc/pki/tls/metrics-cert/tls.key /etc/pki/tls/metrics-cert/tls.crt\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1e6d59867cbd750672bc9ccfb9c69c3d198174cd43dd6d71a0da358b4b766473", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-ovn-metrics", "ports": [ { "containerPort": 9105, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/etc/pki/tls/metrics-cert", "name": "ovn-node-metrics-cert", "readOnly": true } ] }, { "command": [ "/bin/bash", "-c", "set -xem\nif [[ -f /env/_master ]]; then\n set -o allexport\n source /env/_master\n set +o allexport\nfi\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\n\ntrap quit-ovn-northd TERM INT\nstart-ovn-northd \"${OVN_LOG_LEVEL}\"\n" ], "env": [ { "name": "OVN_LOG_LEVEL", "value": "info" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1ab5375f4de81dcf4e990e316124f3d9614ee588bc55342fe94b544602883afa", "imagePullPolicy": "IfNotPresent", "name": "northd", "resources": { "requests": { "cpu": "10m", "memory": "300Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/etc/ovn", "name": "etc-openvswitch" }, { "mountPath": "/var/log/ovn", "name": "node-log" }, { "mountPath": "/run/ovn/", "name": "run-ovn" }, { "mountPath": "/env", "name": "env-overrides" } ] }, { "command": [ "/bin/bash", "-c", "set -xem\nif [[ -f /env/_master ]]; then\n set -o allexport\n source /env/_master\n set +o allexport\nfi\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\n\ntrap quit-nbdb TERM INT\nstart-nbdb ${OVN_LOG_LEVEL}\n" ], "env": [ { "name": "OVN_LOG_LEVEL", "value": "info" }, { "name": "K8S_NODE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1ab5375f4de81dcf4e990e316124f3d9614ee588bc55342fe94b544602883afa", "imagePullPolicy": "IfNotPresent", "lifecycle": { "postStart": { "exec": { "command": [ "/bin/bash", "-c", "set -x\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nnbdb-post-start 5000\n" ] } } }, "name": "nbdb", "readinessProbe": { "exec": { "command": [ "/bin/bash", "-c", "set -xeo pipefail\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\novndb-readiness-probe \"nb\"\n" ] }, "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "10m", "memory": "300Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/etc/ovn/", "name": "etc-openvswitch" }, { "mountPath": "/var/log/ovn", "name": "node-log" }, { "mountPath": "/run/ovn/", "name": "run-ovn" }, { "mountPath": "/env", "name": "env-overrides" } ] }, { "command": [ "/bin/bash", "-c", "set -xem\nif [[ -f /env/_master ]]; then\n set -o allexport\n source /env/_master\n set +o allexport\nfi\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\n\ntrap quit-sbdb TERM INT\nstart-sbdb ${OVN_LOG_LEVEL}\n" ], "env": [ { "name": "OVN_LOG_LEVEL", "value": "info" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1ab5375f4de81dcf4e990e316124f3d9614ee588bc55342fe94b544602883afa", "imagePullPolicy": "IfNotPresent", "lifecycle": { "postStart": { "exec": { "command": [ "/bin/bash", "-c", "set -x\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nsbdb-post-start\n" ] } } }, "name": "sbdb", "readinessProbe": { "exec": { "command": [ "/bin/bash", "-c", "set -xeo pipefail\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\novndb-readiness-probe \"sb\"\n" ] }, "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "10m", "memory": "300Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/etc/ovn/", "name": "etc-openvswitch" }, { "mountPath": "/run/ovn/", "name": "run-ovn" }, { "mountPath": "/var/log/ovn", "name": "node-log" }, { "mountPath": "/env", "name": "env-overrides" } ] }, { "command": [ "/bin/bash", "-c", "set -xe\n. /ovnkube-lib/ovnkube-lib.sh || exit 1\nstart-ovnkube-node ${OVN_KUBE_LOG_LEVEL} 29103 29105\n" ], "env": [ { "name": "KUBERNETES_SERVICE_PORT", "value": "443" }, { "name": "KUBERNETES_SERVICE_HOST", "value": "api.kx-8259435a9f.hypershift.local" }, { "name": "OVN_CONTROLLER_INACTIVITY_PROBE", "value": "180000" }, { "name": "OVN_KUBE_LOG_LEVEL", "value": "4" }, { "name": "OVN_NODE_MODE", "value": "full" }, { "name": "K8S_NODE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1ab5375f4de81dcf4e990e316124f3d9614ee588bc55342fe94b544602883afa", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "rm", "-f", "/etc/cni/net.d/10-ovn-kubernetes.conf" ] } } }, "name": "ovnkube-controller", "ports": [ { "containerPort": 29105, "name": "ovnmetrics-port", "protocol": "TCP" } ], "readinessProbe": { "exec": { "command": [ "test", "-f", "/etc/cni/net.d/10-ovn-kubernetes.conf" ] }, "failureThreshold": 3, "initialDelaySeconds": 5, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "600Mi" } }, "securityContext": { "privileged": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/ovnkube-lib", "name": "ovnkube-script-lib" }, { "mountPath": "/var/lib/kubelet", "mountPropagation": "HostToContainer", "name": "host-kubelet", "readOnly": true }, { "mountPath": "/etc/systemd/system", "name": "systemd-units", "readOnly": true }, { "mountPath": "/host", "mountPropagation": "HostToContainer", "name": "host-slash", "readOnly": true }, { "mountPath": "/run/ovn-kubernetes/", "name": "host-run-ovn-kubernetes" }, { "mountPath": "/run/netns", "mountPropagation": "HostToContainer", "name": "host-run-netns", "readOnly": true }, { "mountPath": "/run/systemd/private", "mountPropagation": "HostToContainer", "name": "run-systemd", "readOnly": true, "subPath": "private" }, { "mountPath": "/cni-bin-dir", "name": "host-cni-bin" }, { "mountPath": "/etc/cni/net.d", "name": "host-cni-netd" }, { "mountPath": "/var/lib/cni/networks/ovn-k8s-cni-overlay", "name": "host-var-lib-cni-networks-ovn-kubernetes" }, { "mountPath": "/run/openvswitch", "name": "run-openvswitch" }, { "mountPath": "/var/log/ovnkube/", "name": "etc-openvswitch" }, { "mountPath": "/run/ovn/", "name": "run-ovn" }, { "mountPath": "/etc/openvswitch", "name": "etc-openvswitch" }, { "mountPath": "/etc/ovn/", "name": "etc-openvswitch" }, { "mountPath": "/var/lib/openvswitch", "name": "var-lib-openvswitch" }, { "mountPath": "/run/ovnkube-config/", "name": "ovnkube-config" }, { "mountPath": "/env", "name": "env-overrides" } ] } ], "dnsPolicy": "Default", "hostNetwork": true, "hostPID": true, "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "ovn-kubernetes-node", "serviceAccountName": "ovn-kubernetes-node", "terminationGracePeriodSeconds": 30, "tolerations": [ { "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet", "type": "" }, "name": "host-kubelet" }, { "hostPath": { "path": "/etc/systemd/system", "type": "" }, "name": "systemd-units" }, { "hostPath": { "path": "/", "type": "" }, "name": "host-slash" }, { "hostPath": { "path": "/run/netns", "type": "" }, "name": "host-run-netns" }, { "hostPath": { "path": "/run/systemd", "type": "" }, "name": "run-systemd" }, { "hostPath": { "path": "/var/lib/openvswitch/data", "type": "" }, "name": "var-lib-openvswitch" }, { "hostPath": { "path": "/var/lib/ovn-ic/etc", "type": "" }, "name": "etc-openvswitch" }, { "hostPath": { "path": "/var/run/openvswitch", "type": "" }, "name": "run-openvswitch" }, { "hostPath": { "path": "/var/run/ovn-ic", "type": "" }, "name": "run-ovn" }, { "hostPath": { "path": "/var/log/ovn", "type": "" }, "name": "node-log" }, { "hostPath": { "path": "/dev/log", "type": "" }, "name": "log-socket" }, { "hostPath": { "path": "/run/ovn-kubernetes", "type": "" }, "name": "host-run-ovn-kubernetes" }, { "hostPath": { "path": "/var/lib/cni/bin", "type": "" }, "name": "host-cni-bin" }, { "hostPath": { "path": "/var/run/multus/cni/net.d", "type": "" }, "name": "host-cni-netd" }, { "hostPath": { "path": "/var/lib/cni/networks/ovn-k8s-cni-overlay", "type": "" }, "name": "host-var-lib-cni-networks-ovn-kubernetes" }, { "configMap": { "defaultMode": 420, "name": "ovnkube-config" }, "name": "ovnkube-config" }, { "configMap": { "defaultMode": 420, "name": "env-overrides", "optional": true }, "name": "env-overrides" }, { "name": "ovn-node-metrics-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "ovn-node-metrics-cert" } }, { "configMap": { "defaultMode": 484, "name": "ovnkube-script-lib" }, "name": "ovnkube-script-lib" } ] } }, "updateStrategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": "10%" }, "type": "RollingUpdate" } }, "status": { "currentNumberScheduled": 3, "desiredNumberScheduled": 3, "numberAvailable": 3, "numberMisscheduled": 0, "numberReady": 3, "observedGeneration": 2, "updatedNumberScheduled": 3 } } ], "kind": "List", "metadata": { "resourceVersion": "" } }