apiVersion: v1
kind: Pod
metadata:
  annotations:
    alm-examples: |-
      [
        {
          "apiVersion": "kataconfiguration.openshift.io/v1",
          "kind": "KataConfig",
          "metadata": {
            "name": "example-kataconfig"
          }
        }
      ]
    capabilities: Seamless Upgrades
    k8s.v1.cni.cncf.io/network-status: |-
      [{
          "name": "openshift-sdn",
          "interface": "eth0",
          "ips": [
              "10.128.2.21"
          ],
          "default": true,
          "dns": {}
      }]
    k8s.v1.cni.cncf.io/networks-status: |-
      [{
          "name": "openshift-sdn",
          "interface": "eth0",
          "ips": [
              "10.128.2.21"
          ],
          "default": true,
          "dns": {}
      }]
    olm.operatorGroup: openshift-sandboxed-containers-operator-9rcmx
    olm.operatorNamespace: openshift-sandboxed-containers-operator
    olm.skipRange: '>=1.1.0 <1.3.1'
    olm.targetNamespaces: openshift-sandboxed-containers-operator
    olmcahash: 7fb2e240665e91b741059cd806cc270be05bf393446508376e08774d97c56354
    openshift.io/scc: anyuid
    operatorframework.io/properties: '{"properties":[{"type":"olm.gvk","value":{"group":"kataconfiguration.openshift.io","kind":"KataConfig","version":"v1"}},{"type":"olm.package","value":{"packageName":"sandboxed-containers-operator","version":"1.3.1"}}]}'
    operatorframework.io/suggested-namespace: openshift-sandboxed-containers-operator
    operators.openshift.io/infrastructure-features: '["disconnected", "fips"]'
    operators.operatorframework.io/builder: operator-sdk-v1.19.0+git
    operators.operatorframework.io/project_layout: go.kubebuilder.io/v3
    repository: https://github.com/openshift/sandboxed-containers-operator
    seccomp.security.alpha.kubernetes.io/pod: runtime/default
  creationTimestamp: "2022-10-26T18:39:18Z"
  generateName: controller-manager-755fd4c97f-
  labels:
    control-plane: controller-manager
    pod-template-hash: 755fd4c97f
  name: controller-manager-755fd4c97f-7w4f4
  namespace: openshift-sandboxed-containers-operator
  ownerReferences:
  - apiVersion: apps/v1
    blockOwnerDeletion: true
    controller: true
    kind: ReplicaSet
    name: controller-manager-755fd4c97f
    uid: 34b8a01f-8092-4d70-be7d-3f500467526a
  resourceVersion: "94788"
  uid: af350798-c741-42b2-8527-9e31da8cf28c
spec:
  containers:
  - args:
    - --secure-listen-address=0.0.0.0:8443
    - --upstream=http://127.0.0.1:8080/
    - --logtostderr=true
    - --v=0
    env:
    - name: OPERATOR_CONDITION_NAME
      value: sandboxed-containers-operator.v1.3.1
    image: registry.redhat.io/openshift4/ose-kube-rbac-proxy@sha256:ef2c41fb899228a64cf2f61d7606a980a5f8fcae820da246d25c4f17faa0da3d
    imagePullPolicy: IfNotPresent
    name: kube-rbac-proxy
    ports:
    - containerPort: 8443
      name: https
      protocol: TCP
    resources:
      limits:
        cpu: 500m
        memory: 128Mi
      requests:
        cpu: 5m
        memory: 64Mi
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
        - ALL
        - MKNOD
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /apiserver.local.config/certificates
      name: apiservice-cert
    - mountPath: /tmp/k8s-webhook-server/serving-certs
      name: webhook-cert
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-5xwj2
      readOnly: true
  - args:
    - --metrics-bind-address=127.0.0.1:8080
    - --leader-elect
    command:
    - /manager
    env:
    - name: KATA_MONITOR_IMAGE
      value: quay.io/openshift_sandboxed_containers/openshift-sandboxed-containers-monitor:latest
    - name: OPERATOR_CONDITION_NAME
      value: sandboxed-containers-operator.v1.3.1
    image: registry.redhat.io/openshift-sandboxed-containers/osc-rhel8-operator@sha256:ee1186dfeb75e6229d5f17466d11c253cf3b48827070c97995fcbbf9c8478f0a
    imagePullPolicy: Always
    name: manager
    ports:
    - containerPort: 9443
      name: webhook-server
      protocol: TCP
    resources:
      limits:
        cpu: 200m
        memory: 100Mi
      requests:
        cpu: 100m
        memory: 40Mi
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
        - ALL
        - MKNOD
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /tmp/k8s-webhook-server/serving-certs
      name: webhook-cert
    - mountPath: /apiserver.local.config/certificates
      name: apiservice-cert
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-5xwj2
      readOnly: true
  dnsPolicy: ClusterFirst
  enableServiceLinks: true
  imagePullSecrets:
  - name: default-dockercfg-w6m4j
  nodeName: tbuskey-221026-1-xxqxv-worker-c-bc4g9.c.openshift-qe.internal
  preemptionPolicy: PreemptLowerPriority
  priority: 0
  restartPolicy: Always
  schedulerName: default-scheduler
  securityContext:
    runAsNonRoot: true
    seLinuxOptions:
      level: s0:c26,c0
    seccompProfile:
      type: RuntimeDefault
  serviceAccount: default
  serviceAccountName: default
  terminationGracePeriodSeconds: 10
  tolerations:
  - effect: NoSchedule
    key: node-role.kubernetes.io/master
    operator: Exists
  - effect: NoExecute
    key: node.kubernetes.io/unreachable
    operator: Exists
    tolerationSeconds: 120
  - effect: NoExecute
    key: node.kubernetes.io/not-ready
    operator: Exists
    tolerationSeconds: 120
  - effect: NoSchedule
    key: node.kubernetes.io/memory-pressure
    operator: Exists
  volumes:
  - name: cert
    secret:
      defaultMode: 420
      secretName: webhook-server-cert
  - name: apiservice-cert
    secret:
      defaultMode: 420
      items:
      - key: tls.crt
        path: apiserver.crt
      - key: tls.key
        path: apiserver.key
      secretName: controller-manager-service-cert
  - name: webhook-cert
    secret:
      defaultMode: 420
      items:
      - key: tls.crt
        path: tls.crt
      - key: tls.key
        path: tls.key
      secretName: controller-manager-service-cert
  - name: kube-api-access-5xwj2
    projected:
      defaultMode: 420
      sources:
      - serviceAccountToken:
          expirationSeconds: 3607
          path: token
      - configMap:
          items:
          - key: ca.crt
            path: ca.crt
          name: kube-root-ca.crt
      - downwardAPI:
          items:
          - fieldRef:
              apiVersion: v1
              fieldPath: metadata.namespace
            path: namespace
      - configMap:
          items:
          - key: service-ca.crt
            path: service-ca.crt
          name: openshift-service-ca.crt
status:
  conditions:
  - lastProbeTime: null
    lastTransitionTime: "2022-10-26T18:39:18Z"
    status: "True"
    type: Initialized
  - lastProbeTime: null
    lastTransitionTime: "2022-10-26T18:39:18Z"
    message: 'containers with unready status: [manager]'
    reason: ContainersNotReady
    status: "False"
    type: Ready
  - lastProbeTime: null
    lastTransitionTime: "2022-10-26T18:39:18Z"
    message: 'containers with unready status: [manager]'
    reason: ContainersNotReady
    status: "False"
    type: ContainersReady
  - lastProbeTime: null
    lastTransitionTime: "2022-10-26T18:39:18Z"
    status: "True"
    type: PodScheduled
  containerStatuses:
  - containerID: cri-o://db8207f91453f8bd86c7b2acad2d94c617c65d1f2878fbf487eaecbf522ab644
    image: registry.redhat.io/openshift4/ose-kube-rbac-proxy@sha256:ef2c41fb899228a64cf2f61d7606a980a5f8fcae820da246d25c4f17faa0da3d
    imageID: registry.redhat.io/openshift4/ose-kube-rbac-proxy@sha256:9185a8d8bab28f84db59c75053dbc25cee79c8342990aaf32509a4b6389e9cc2
    lastState: {}
    name: kube-rbac-proxy
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2022-10-26T18:39:21Z"
  - image: registry.redhat.io/openshift-sandboxed-containers/osc-rhel8-operator@sha256:ee1186dfeb75e6229d5f17466d11c253cf3b48827070c97995fcbbf9c8478f0a
    imageID: ""
    lastState: {}
    name: manager
    ready: false
    restartCount: 0
    started: false
    state:
      waiting:
        message: 'container has runAsNonRoot and image has non-numeric user (nonroot),
          cannot verify user is non-root (pod: "controller-manager-755fd4c97f-7w4f4_openshift-sandboxed-containers-operator(af350798-c741-42b2-8527-9e31da8cf28c)",
          container: manager)'
        reason: CreateContainerConfigError
  hostIP: 10.0.128.4
  phase: Pending
  podIP: 10.128.2.21
  podIPs:
  - ip: 10.128.2.21
  qosClass: Burstable
  startTime: "2022-10-26T18:39:18Z"
