apiVersion: apps/v1
kind: Deployment
metadata:
  annotations:
    deployment.kubernetes.io/revision: "3"
  creationTimestamp: "2022-10-26T18:22:32Z"
  generation: 4
  labels:
    control-plane: controller-manager
    olm.deployment-spec-hash: 7dbd996db6
    olm.owner: sandboxed-containers-operator.v1.3.1
    olm.owner.kind: ClusterServiceVersion
    olm.owner.namespace: openshift-sandboxed-containers-operator
    operators.coreos.com/sandboxed-containers-operator.openshift-sandboxed-containers-op: ""
  name: controller-manager
  namespace: openshift-sandboxed-containers-operator
  ownerReferences:
  - apiVersion: operators.coreos.com/v1alpha1
    blockOwnerDeletion: false
    controller: false
    kind: ClusterServiceVersion
    name: sandboxed-containers-operator.v1.3.1
    uid: 0618bc1e-1ea8-4e64-b58a-897d32d2ef16
  resourceVersion: "98176"
  uid: 309c17b4-ca83-4ca3-b8ba-1734b09045a5
spec:
  progressDeadlineSeconds: 600
  replicas: 1
  revisionHistoryLimit: 1
  selector:
    matchLabels:
      control-plane: controller-manager
  strategy:
    rollingUpdate:
      maxSurge: 0
      maxUnavailable: 1
    type: RollingUpdate
  template:
    metadata:
      annotations:
        alm-examples: |-
          [
            {
              "apiVersion": "kataconfiguration.openshift.io/v1",
              "kind": "KataConfig",
              "metadata": {
                "name": "example-kataconfig"
              }
            }
          ]
        capabilities: Seamless Upgrades
        olm.operatorGroup: openshift-sandboxed-containers-operator-9rcmx
        olm.operatorNamespace: openshift-sandboxed-containers-operator
        olm.skipRange: '>=1.1.0 <1.3.1'
        olm.targetNamespaces: openshift-sandboxed-containers-operator
        olmcahash: 7fb2e240665e91b741059cd806cc270be05bf393446508376e08774d97c56354
        operatorframework.io/properties: '{"properties":[{"type":"olm.gvk","value":{"group":"kataconfiguration.openshift.io","kind":"KataConfig","version":"v1"}},{"type":"olm.package","value":{"packageName":"sandboxed-containers-operator","version":"1.3.1"}}]}'
        operatorframework.io/suggested-namespace: openshift-sandboxed-containers-operator
        operators.openshift.io/infrastructure-features: '["disconnected", "fips"]'
        operators.operatorframework.io/builder: operator-sdk-v1.19.0+git
        operators.operatorframework.io/project_layout: go.kubebuilder.io/v3
        repository: https://github.com/openshift/sandboxed-containers-operator
      creationTimestamp: null
      labels:
        control-plane: controller-manager
    spec:
      containers:
      - args:
        - --secure-listen-address=0.0.0.0:8443
        - --upstream=http://127.0.0.1:8080/
        - --logtostderr=true
        - --v=0
        env:
        - name: OPERATOR_CONDITION_NAME
          value: sandboxed-containers-operator.v1.3.1
        image: registry.redhat.io/openshift4/ose-kube-rbac-proxy@sha256:ef2c41fb899228a64cf2f61d7606a980a5f8fcae820da246d25c4f17faa0da3d
        imagePullPolicy: IfNotPresent
        name: kube-rbac-proxy
        ports:
        - containerPort: 8443
          name: https
          protocol: TCP
        resources:
          limits:
            cpu: 500m
            memory: 128Mi
          requests:
            cpu: 5m
            memory: 64Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
        volumeMounts:
        - mountPath: /apiserver.local.config/certificates
          name: apiservice-cert
        - mountPath: /tmp/k8s-webhook-server/serving-certs
          name: webhook-cert
      - args:
        - --metrics-bind-address=127.0.0.1:8080
        - --leader-elect
        command:
        - /manager
        env:
        - name: KATA_MONITOR_IMAGE
          value: quay.io/openshift_sandboxed_containers/openshift-sandboxed-containers-monitor:latest
        - name: OPERATOR_CONDITION_NAME
          value: sandboxed-containers-operator.v1.3.1
        image: registry.redhat.io/openshift-sandboxed-containers/osc-rhel8-operator@sha256:ee1186dfeb75e6229d5f17466d11c253cf3b48827070c97995fcbbf9c8478f0a
        imagePullPolicy: Always
        name: manager
        ports:
        - containerPort: 9443
          name: webhook-server
          protocol: TCP
        resources:
          limits:
            cpu: 200m
            memory: 100Mi
          requests:
            cpu: 100m
            memory: 40Mi
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
        volumeMounts:
        - mountPath: /tmp/k8s-webhook-server/serving-certs
          name: webhook-cert
        - mountPath: /apiserver.local.config/certificates
          name: apiservice-cert
      dnsPolicy: ClusterFirst
      restartPolicy: Always
      schedulerName: default-scheduler
      securityContext:
        runAsNonRoot: true
        seccompProfile:
          type: RuntimeDefault
      serviceAccount: default
      serviceAccountName: default
      terminationGracePeriodSeconds: 10
      tolerations:
      - effect: NoSchedule
        key: node-role.kubernetes.io/master
        operator: Exists
      - effect: NoExecute
        key: node.kubernetes.io/unreachable
        operator: Exists
        tolerationSeconds: 120
      - effect: NoExecute
        key: node.kubernetes.io/not-ready
        operator: Exists
        tolerationSeconds: 120
      - effect: NoSchedule
        key: node.kubernetes.io/memory-pressure
        operator: Exists
      volumes:
      - name: cert
        secret:
          defaultMode: 420
          secretName: webhook-server-cert
      - name: apiservice-cert
        secret:
          defaultMode: 420
          items:
          - key: tls.crt
            path: apiserver.crt
          - key: tls.key
            path: apiserver.key
          secretName: controller-manager-service-cert
      - name: webhook-cert
        secret:
          defaultMode: 420
          items:
          - key: tls.crt
            path: tls.crt
          - key: tls.key
            path: tls.key
          secretName: controller-manager-service-cert
status:
  conditions:
  - lastTransitionTime: "2022-10-26T18:22:37Z"
    lastUpdateTime: "2022-10-26T18:22:37Z"
    message: Deployment has minimum availability.
    reason: MinimumReplicasAvailable
    status: "True"
    type: Available
  - lastTransitionTime: "2022-10-26T18:49:19Z"
    lastUpdateTime: "2022-10-26T18:49:19Z"
    message: ReplicaSet "controller-manager-755fd4c97f" has timed out progressing.
    reason: ProgressDeadlineExceeded
    status: "False"
    type: Progressing
  observedGeneration: 4
  replicas: 1
  unavailableReplicas: 1
  updatedReplicas: 1
