apiVersion: v1
items:
- apiVersion: policy.open-cluster-management.io/v1
  kind: Policy
  metadata:
    annotations:
      argocd.argoproj.io/compare-options: IgnoreExtraneous
      kubectl.kubernetes.io/last-applied-configuration: |
        {"apiVersion":"policy.open-cluster-management.io/v1","kind":"Policy","metadata":{"annotations":{"policy.open-cluster-management.io/categories":"CM Configuration Management","policy.open-cluster-management.io/controls":"CM-2 Baseline Configuration","policy.open-cluster-management.io/standards":"NIST SP 800-53","ran.openshift.io/ztp-deploy-wave":"1"},"labels":{"app.kubernetes.io/instance":"policy-common-and-group"},"name":"common-config-policy","namespace":"ztp-common"},"spec":{"disabled":false,"policy-templates":[{"objectDefinition":{"apiVersion":"policy.open-cluster-management.io/v1","kind":"ConfigurationPolicy","metadata":{"name":"common-config-policy-config"},"spec":{"evaluationInterval":{"compliant":"10m","noncompliant":"10s"},"namespaceselector":{"exclude":["kube-*"],"include":["*"]},"object-templates":[{"complianceType":"musthave","objectDefinition":{"apiVersion":"v1","data":{"config.yaml":"grafana:\n  enabled: false\nalertmanagerMain:\n  enabled: false\nprometheusK8s:\n   retention: 24h\n"},"kind":"ConfigMap","metadata":{"name":"cluster-monitoring-config","namespace":"openshift-monitoring"}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"config.openshift.io/v1","kind":"OperatorHub","metadata":{"name":"cluster"},"spec":{"disableAllDefaultSources":true}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1alpha1","kind":"CatalogSource","metadata":{"annotations":{"scale-test-label-1":"{{hub fromConfigMap \"\" \"common-template-map\" \"key3\" hub}}","scale-test-label-2":"{{hub fromConfigMap \"\" \"common-template-map\" \"key4\" hub}}","target.workload.openshift.io/management":"{\"effect\": \"PreferredDuringScheduling\"}"},"name":"rh-du-operators0","namespace":"openshift-marketplace"},"spec":{"displayName":"disconnected-redhat-operators","image":"e27-h01-000-r650.rdu2.scalelab.redhat.com:5000/olm-mirror/redhat-operator-index:v4.13","publisher":"Red Hat","sourceType":"grpc","updateStrategy":{"registryPoll":{"interval":"1h"}}},"status":{"connectionState":{"lastObservedState":"READY"}}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operator.openshift.io/v1alpha1","kind":"ImageContentSourcePolicy","metadata":{"name":"disconnected-internal-icsp"},"spec":{"repositoryDigestMirrors":[{"mirrors":["e27-h01-000-r650.rdu2.scalelab.redhat.com:5000"],"source":"registry.redhat.io"}]}}},{"complianceType":"mustnothave","objectDefinition":{"apiVersion":"operators.coreos.com/v1alpha1","kind":"CatalogSource","metadata":{"annotations":{"target.workload.openshift.io/management":"{\"effect\": \"PreferredDuringScheduling\"}"},"name":"rh-du-operators","namespace":"openshift-marketplace"},"spec":{"displayName":"default-cat-source","publisher":"Red Hat","sourceType":"grpc","updateStrategy":{"registryPoll":{"interval":"1h"}}}}}],"remediationAction":"inform","severity":"low"}}}],"remediationAction":"inform"}}
      policy.open-cluster-management.io/categories: CM Configuration Management
      policy.open-cluster-management.io/controls: CM-2 Baseline Configuration
      policy.open-cluster-management.io/standards: NIST SP 800-53
      ran.openshift.io/ztp-deploy-wave: "1"
    creationTimestamp: "2023-09-01T21:16:28Z"
    generation: 2
    labels:
      app.kubernetes.io/instance: policy-common-and-group
      policy.open-cluster-management.io/cluster-name: vm01725
      policy.open-cluster-management.io/cluster-namespace: vm01725
      policy.open-cluster-management.io/root-policy: ztp-common.common-config-policy
    name: ztp-common.common-config-policy
    namespace: vm01725
    resourceVersion: "29967738"
    uid: 9ffb6356-8be3-4209-90d9-ba830b76ae71
  spec:
    disabled: false
    policy-templates:
    - objectDefinition:
        apiVersion: policy.open-cluster-management.io/v1
        kind: ConfigurationPolicy
        metadata:
          name: common-config-policy-config
        spec:
          evaluationInterval:
            compliant: 10m
            noncompliant: 10s
          namespaceselector:
            exclude:
            - kube-*
            include:
            - '*'
          object-templates:
          - complianceType: musthave
            objectDefinition:
              apiVersion: v1
              data:
                config.yaml: |
                  grafana:
                    enabled: false
                  alertmanagerMain:
                    enabled: false
                  prometheusK8s:
                     retention: 24h
              kind: ConfigMap
              metadata:
                name: cluster-monitoring-config
                namespace: openshift-monitoring
          - complianceType: musthave
            objectDefinition:
              apiVersion: config.openshift.io/v1
              kind: OperatorHub
              metadata:
                name: cluster
              spec:
                disableAllDefaultSources: true
          - complianceType: musthave
            objectDefinition:
              apiVersion: operators.coreos.com/v1alpha1
              kind: CatalogSource
              metadata:
                annotations:
                  scale-test-label-1: value3
                  scale-test-label-2: value4
                  target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
                name: rh-du-operators0
                namespace: openshift-marketplace
              spec:
                displayName: disconnected-redhat-operators
                image: e27-h01-000-r650.rdu2.scalelab.redhat.com:5000/olm-mirror/redhat-operator-index:v4.13
                publisher: Red Hat
                sourceType: grpc
                updateStrategy:
                  registryPoll:
                    interval: 1h
              status:
                connectionState:
                  lastObservedState: READY
          - complianceType: musthave
            objectDefinition:
              apiVersion: operator.openshift.io/v1alpha1
              kind: ImageContentSourcePolicy
              metadata:
                name: disconnected-internal-icsp
              spec:
                repositoryDigestMirrors:
                - mirrors:
                  - e27-h01-000-r650.rdu2.scalelab.redhat.com:5000
                  source: registry.redhat.io
          - complianceType: mustnothave
            objectDefinition:
              apiVersion: operators.coreos.com/v1alpha1
              kind: CatalogSource
              metadata:
                annotations:
                  target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
                name: rh-du-operators
                namespace: openshift-marketplace
              spec:
                displayName: default-cat-source
                publisher: Red Hat
                sourceType: grpc
                updateStrategy:
                  registryPoll:
                    interval: 1h
          remediationAction: inform
          severity: low
    remediationAction: inform
  status:
    compliant: Compliant
    details:
    - compliant: Compliant
      history:
      - eventName: ztp-common.common-config-policy.17822c7ce44af3c2
        lastTimestamp: "2023-09-06T01:55:24Z"
        message: Compliant; notification - configmaps [cluster-monitoring-config]
          found as specified in namespace openshift-monitoring; notification - operatorhubs
          [cluster] found as specified; notification - catalogsources [rh-du-operators0]
          found as specified in namespace openshift-marketplace; notification - imagecontentsourcepolicies
          [disconnected-internal-icsp] found as specified; notification - catalogsources
          [rh-du-operators] missing as expected in namespace openshift-marketplace
      - eventName: ztp-common.common-config-policy.17822c78aac9e0bb
        lastTimestamp: "2023-09-06T01:55:06Z"
        message: NonCompliant; notification - configmaps [cluster-monitoring-config]
          found as specified in namespace openshift-monitoring; notification - operatorhubs
          [cluster] found as specified; violation - catalogsources [rh-du-operators0]
          found but not as specified in namespace openshift-marketplace; notification
          - imagecontentsourcepolicies [disconnected-internal-icsp] found as specified;
          notification - catalogsources [rh-du-operators] missing as expected in namespace
          openshift-marketplace
      - eventName: ztp-common.common-config-policy.17820041d7e37c6c
        lastTimestamp: "2023-09-05T12:24:52Z"
        message: NonCompliant; notification - configmaps [cluster-monitoring-config]
          found as specified in namespace openshift-monitoring; notification - operatorhubs
          [cluster] found as specified; violation - catalogsources [rh-du-operators0]
          not found in namespace openshift-marketplace; notification - imagecontentsourcepolicies
          [disconnected-internal-icsp] found as specified; violation - catalogsources
          [rh-du-operators] found in namespace openshift-marketplace
      - eventName: ztp-common.common-config-policy.1780e6f461acad08
        lastTimestamp: "2023-09-01T22:29:57Z"
        message: Compliant; notification - configmaps [cluster-monitoring-config]
          found as specified in namespace openshift-monitoring; notification - operatorhubs
          [cluster] found as specified; notification - catalogsources [rh-du-operators]
          found as specified in namespace openshift-marketplace; notification - imagecontentsourcepolicies
          [disconnected-internal-icsp] found as specified
      - eventName: ztp-common.common-config-policy.1780e6f3217b5bb6
        lastTimestamp: "2023-09-01T22:29:51Z"
        message: Compliant; notification - configmaps [cluster-monitoring-config]
          found as specified in namespace openshift-monitoring; notification - operatorhubs
          [cluster] found as specified; notification - catalogsources [rh-du-operators]
          found as specified in namespace openshift-marketplace; notification - imagecontentsourcepolicies
          [disconnected-internal-icsp] found as specified
      - eventName: ztp-common.common-config-policy.1780e6e25cb3a1e8
        lastTimestamp: "2023-09-01T22:28:39Z"
        message: NonCompliant; notification - configmaps [cluster-monitoring-config]
          found as specified in namespace openshift-monitoring; notification - operatorhubs
          [cluster] found as specified; violation - catalogsources [rh-du-operators]
          found but not as specified in namespace openshift-marketplace; notification
          - imagecontentsourcepolicies [disconnected-internal-icsp] found as specified
      templateMeta:
        creationTimestamp: null
        name: common-config-policy-config
- apiVersion: policy.open-cluster-management.io/v1
  kind: Policy
  metadata:
    annotations:
      argocd.argoproj.io/compare-options: IgnoreExtraneous
      kubectl.kubernetes.io/last-applied-configuration: |
        {"apiVersion":"policy.open-cluster-management.io/v1","kind":"Policy","metadata":{"annotations":{"policy.open-cluster-management.io/categories":"CM Configuration Management","policy.open-cluster-management.io/controls":"CM-2 Baseline Configuration","policy.open-cluster-management.io/standards":"NIST SP 800-53","ran.openshift.io/ztp-deploy-wave":"2"},"labels":{"app.kubernetes.io/instance":"policy-common-and-group"},"name":"common-subscriptions-policy","namespace":"ztp-common"},"spec":{"disabled":false,"policy-templates":[{"objectDefinition":{"apiVersion":"policy.open-cluster-management.io/v1","kind":"ConfigurationPolicy","metadata":{"name":"common-subscriptions-policy-config"},"spec":{"evaluationInterval":{"compliant":"10m","noncompliant":"10s"},"namespaceselector":{"exclude":["kube-*"],"include":["*"]},"object-templates":[{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1alpha1","kind":"Subscription","metadata":{"annotations":{"scale-test-label-1":"{{hub fromConfigMap \"\" \"common-template-map\" \"key1\" hub}}","scale-test-label-2":"{{hub fromConfigMap \"\" \"common-template-map\" \"key2\" hub}}"},"name":"sriov-network-operator-subscription","namespace":"openshift-sriov-network-operator"},"spec":{"channel":"stable","installPlanApproval":"Manual","name":"sriov-network-operator","source":"rh-du-operators0","sourceNamespace":"openshift-marketplace"},"status":{"state":"AtLatestKnown"}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"v1","kind":"Namespace","metadata":{"annotations":{"workload.openshift.io/allowed":"management"},"name":"openshift-sriov-network-operator"}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1","kind":"OperatorGroup","metadata":{"name":"sriov-network-operators","namespace":"openshift-sriov-network-operator"},"spec":{"targetNamespaces":["openshift-sriov-network-operator"]}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1","kind":"Operator","metadata":{"name":"sriov-network-operator.openshift-sriov-network-operator"},"status":{"components":{"refs":[{"conditions":[{"status":"False","type":"CatalogSourcesUnhealthy"}],"kind":"Subscription","namespace":"openshift-sriov-network-operator"},{"conditions":[{"status":"True","type":"Installed"}],"kind":"InstallPlan","namespace":"openshift-sriov-network-operator"},{"conditions":[{"reason":"InstallSucceeded","status":"True","type":"Succeeded"}],"kind":"ClusterServiceVersion","namespace":"openshift-sriov-network-operator"}]}}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1alpha1","kind":"Subscription","metadata":{"annotations":{"scale-test-label-1":"{{hub fromConfigMap \"\" \"common-template-map\" \"key3\" hub}}","scale-test-label-2":"{{hub fromConfigMap \"\" \"common-template-map\" \"key4\" hub}}"},"name":"ptp-operator-subscription","namespace":"openshift-ptp"},"spec":{"channel":"stable","installPlanApproval":"Manual","name":"ptp-operator","source":"rh-du-operators0","sourceNamespace":"openshift-marketplace"},"status":{"state":"AtLatestKnown"}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"v1","kind":"Namespace","metadata":{"annotations":{"workload.openshift.io/allowed":"management"},"labels":{"openshift.io/cluster-monitoring":"true"},"name":"openshift-ptp"}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1","kind":"OperatorGroup","metadata":{"name":"ptp-operators","namespace":"openshift-ptp"},"spec":{"targetNamespaces":["openshift-ptp"]}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1","kind":"Operator","metadata":{"name":"ptp-operator.openshift-ptp"},"status":{"components":{"refs":[{"conditions":[{"status":"False","type":"CatalogSourcesUnhealthy"}],"kind":"Subscription","namespace":"openshift-ptp"},{"conditions":[{"status":"True","type":"Installed"}],"kind":"InstallPlan","namespace":"openshift-ptp"},{"conditions":[{"reason":"InstallSucceeded","status":"True","type":"Succeeded"}],"kind":"ClusterServiceVersion","namespace":"openshift-ptp"}]}}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"v1","kind":"Namespace","metadata":{"annotations":{"workload.openshift.io/allowed":"management"},"name":"openshift-logging"}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1","kind":"OperatorGroup","metadata":{"name":"cluster-logging","namespace":"openshift-logging"},"spec":{"targetNamespaces":["openshift-logging"]}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1alpha1","kind":"Subscription","metadata":{"annotations":{"scale-test-label-1":"{{hub fromConfigMap \"\" \"common-template-map\" \"key3\" hub}}","scale-test-label-2":"{{hub fromConfigMap \"\" \"common-template-map\" \"key4\" hub}}"},"name":"cluster-logging","namespace":"openshift-logging"},"spec":{"channel":"stable","installPlanApproval":"Manual","name":"cluster-logging","source":"rh-du-operators0","sourceNamespace":"openshift-marketplace"},"status":{"state":"AtLatestKnown"}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1","kind":"Operator","metadata":{"name":"cluster-logging.openshift-logging"},"status":{"components":{"refs":[{"conditions":[{"status":"False","type":"CatalogSourcesUnhealthy"}],"kind":"Subscription","namespace":"openshift-logging"},{"conditions":[{"status":"True","type":"Installed"}],"kind":"InstallPlan","namespace":"openshift-logging"},{"conditions":[{"reason":"InstallSucceeded","status":"True","type":"Succeeded"}],"kind":"ClusterServiceVersion","namespace":"openshift-logging"}]}}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"v1","kind":"Namespace","metadata":{"annotations":{"workload.openshift.io/allowed":"management"},"name":"openshift-local-storage"}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1","kind":"OperatorGroup","metadata":{"name":"openshift-local-storage","namespace":"openshift-local-storage"},"spec":{"targetNamespaces":["openshift-local-storage"]}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1alpha1","kind":"Subscription","metadata":{"annotations":{"scale-test-label-1":"{{hub fromConfigMap \"\" \"common-template-map\" \"key1\" hub}}","scale-test-label-2":"{{hub fromConfigMap \"\" \"common-template-map\" \"key2\" hub}}"},"name":"local-storage-operator","namespace":"openshift-local-storage"},"spec":{"channel":"stable","installPlanApproval":"Manual","name":"local-storage-operator","source":"rh-du-operators0","sourceNamespace":"openshift-marketplace"},"status":{"state":"AtLatestKnown"}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operators.coreos.com/v1","kind":"Operator","metadata":{"name":"local-storage-operator.openshift-local-storage"},"status":{"components":{"refs":[{"conditions":[{"status":"False","type":"CatalogSourcesUnhealthy"}],"kind":"Subscription","namespace":"openshift-local-storage"},{"conditions":[{"status":"True","type":"Installed"}],"kind":"InstallPlan","namespace":"openshift-local-storage"},{"conditions":[{"reason":"InstallSucceeded","status":"True","type":"Succeeded"}],"kind":"ClusterServiceVersion","namespace":"openshift-local-storage"}]}}}}],"remediationAction":"inform","severity":"low"}}}],"remediationAction":"inform"}}
      policy.open-cluster-management.io/categories: CM Configuration Management
      policy.open-cluster-management.io/controls: CM-2 Baseline Configuration
      policy.open-cluster-management.io/standards: NIST SP 800-53
      ran.openshift.io/ztp-deploy-wave: "2"
    creationTimestamp: "2023-09-01T21:16:25Z"
    generation: 2
    labels:
      app.kubernetes.io/instance: policy-common-and-group
      policy.open-cluster-management.io/cluster-name: vm01725
      policy.open-cluster-management.io/cluster-namespace: vm01725
      policy.open-cluster-management.io/root-policy: ztp-common.common-subscriptions-policy
    name: ztp-common.common-subscriptions-policy
    namespace: vm01725
    resourceVersion: "30068241"
    uid: 07e62660-8bba-4435-9c39-ad94ce5ca29a
  spec:
    disabled: false
    policy-templates:
    - objectDefinition:
        apiVersion: policy.open-cluster-management.io/v1
        kind: ConfigurationPolicy
        metadata:
          name: common-subscriptions-policy-config
        spec:
          evaluationInterval:
            compliant: 10m
            noncompliant: 10s
          namespaceselector:
            exclude:
            - kube-*
            include:
            - '*'
          object-templates:
          - complianceType: musthave
            objectDefinition:
              apiVersion: operators.coreos.com/v1alpha1
              kind: Subscription
              metadata:
                annotations:
                  scale-test-label-1: value1
                  scale-test-label-2: value2
                name: sriov-network-operator-subscription
                namespace: openshift-sriov-network-operator
              spec:
                channel: stable
                installPlanApproval: Manual
                name: sriov-network-operator
                source: rh-du-operators0
                sourceNamespace: openshift-marketplace
              status:
                state: AtLatestKnown
          - complianceType: musthave
            objectDefinition:
              apiVersion: v1
              kind: Namespace
              metadata:
                annotations:
                  workload.openshift.io/allowed: management
                name: openshift-sriov-network-operator
          - complianceType: musthave
            objectDefinition:
              apiVersion: operators.coreos.com/v1
              kind: OperatorGroup
              metadata:
                name: sriov-network-operators
                namespace: openshift-sriov-network-operator
              spec:
                targetNamespaces:
                - openshift-sriov-network-operator
          - complianceType: musthave
            objectDefinition:
              apiVersion: operators.coreos.com/v1
              kind: Operator
              metadata:
                name: sriov-network-operator.openshift-sriov-network-operator
              status:
                components:
                  refs:
                  - conditions:
                    - status: "False"
                      type: CatalogSourcesUnhealthy
                    kind: Subscription
                    namespace: openshift-sriov-network-operator
                  - conditions:
                    - status: "True"
                      type: Installed
                    kind: InstallPlan
                    namespace: openshift-sriov-network-operator
                  - conditions:
                    - reason: InstallSucceeded
                      status: "True"
                      type: Succeeded
                    kind: ClusterServiceVersion
                    namespace: openshift-sriov-network-operator
          - complianceType: musthave
            objectDefinition:
              apiVersion: operators.coreos.com/v1alpha1
              kind: Subscription
              metadata:
                annotations:
                  scale-test-label-1: value3
                  scale-test-label-2: value4
                name: ptp-operator-subscription
                namespace: openshift-ptp
              spec:
                channel: stable
                installPlanApproval: Manual
                name: ptp-operator
                source: rh-du-operators0
                sourceNamespace: openshift-marketplace
              status:
                state: AtLatestKnown
          - complianceType: musthave
            objectDefinition:
              apiVersion: v1
              kind: Namespace
              metadata:
                annotations:
                  workload.openshift.io/allowed: management
                labels:
                  openshift.io/cluster-monitoring: "true"
                name: openshift-ptp
          - complianceType: musthave
            objectDefinition:
              apiVersion: operators.coreos.com/v1
              kind: OperatorGroup
              metadata:
                name: ptp-operators
                namespace: openshift-ptp
              spec:
                targetNamespaces:
                - openshift-ptp
          - complianceType: musthave
            objectDefinition:
              apiVersion: operators.coreos.com/v1
              kind: Operator
              metadata:
                name: ptp-operator.openshift-ptp
              status:
                components:
                  refs:
                  - conditions:
                    - status: "False"
                      type: CatalogSourcesUnhealthy
                    kind: Subscription
                    namespace: openshift-ptp
                  - conditions:
                    - status: "True"
                      type: Installed
                    kind: InstallPlan
                    namespace: openshift-ptp
                  - conditions:
                    - reason: InstallSucceeded
                      status: "True"
                      type: Succeeded
                    kind: ClusterServiceVersion
                    namespace: openshift-ptp
          - complianceType: musthave
            objectDefinition:
              apiVersion: v1
              kind: Namespace
              metadata:
                annotations:
                  workload.openshift.io/allowed: management
                name: openshift-logging
          - complianceType: musthave
            objectDefinition:
              apiVersion: operators.coreos.com/v1
              kind: OperatorGroup
              metadata:
                name: cluster-logging
                namespace: openshift-logging
              spec:
                targetNamespaces:
                - openshift-logging
          - complianceType: musthave
            objectDefinition:
              apiVersion: operators.coreos.com/v1alpha1
              kind: Subscription
              metadata:
                annotations:
                  scale-test-label-1: value3
                  scale-test-label-2: value4
                name: cluster-logging
                namespace: openshift-logging
              spec:
                channel: stable
                installPlanApproval: Manual
                name: cluster-logging
                source: rh-du-operators0
                sourceNamespace: openshift-marketplace
              status:
                state: AtLatestKnown
          - complianceType: musthave
            objectDefinition:
              apiVersion: operators.coreos.com/v1
              kind: Operator
              metadata:
                name: cluster-logging.openshift-logging
              status:
                components:
                  refs:
                  - conditions:
                    - status: "False"
                      type: CatalogSourcesUnhealthy
                    kind: Subscription
                    namespace: openshift-logging
                  - conditions:
                    - status: "True"
                      type: Installed
                    kind: InstallPlan
                    namespace: openshift-logging
                  - conditions:
                    - reason: InstallSucceeded
                      status: "True"
                      type: Succeeded
                    kind: ClusterServiceVersion
                    namespace: openshift-logging
          - complianceType: musthave
            objectDefinition:
              apiVersion: v1
              kind: Namespace
              metadata:
                annotations:
                  workload.openshift.io/allowed: management
                name: openshift-local-storage
          - complianceType: musthave
            objectDefinition:
              apiVersion: operators.coreos.com/v1
              kind: OperatorGroup
              metadata:
                name: openshift-local-storage
                namespace: openshift-local-storage
              spec:
                targetNamespaces:
                - openshift-local-storage
          - complianceType: musthave
            objectDefinition:
              apiVersion: operators.coreos.com/v1alpha1
              kind: Subscription
              metadata:
                annotations:
                  scale-test-label-1: value1
                  scale-test-label-2: value2
                name: local-storage-operator
                namespace: openshift-local-storage
              spec:
                channel: stable
                installPlanApproval: Manual
                name: local-storage-operator
                source: rh-du-operators0
                sourceNamespace: openshift-marketplace
              status:
                state: AtLatestKnown
          - complianceType: musthave
            objectDefinition:
              apiVersion: operators.coreos.com/v1
              kind: Operator
              metadata:
                name: local-storage-operator.openshift-local-storage
              status:
                components:
                  refs:
                  - conditions:
                    - status: "False"
                      type: CatalogSourcesUnhealthy
                    kind: Subscription
                    namespace: openshift-local-storage
                  - conditions:
                    - status: "True"
                      type: Installed
                    kind: InstallPlan
                    namespace: openshift-local-storage
                  - conditions:
                    - reason: InstallSucceeded
                      status: "True"
                      type: Succeeded
                    kind: ClusterServiceVersion
                    namespace: openshift-local-storage
          remediationAction: inform
          severity: low
    remediationAction: inform
  status:
    compliant: NonCompliant
    details:
    - compliant: NonCompliant
      history:
      - eventName: ztp-common.common-subscriptions-policy.17822d307aec7a3c
        lastTimestamp: "2023-09-06T02:08:16Z"
        message: NonCompliant; violation - subscriptions [sriov-network-operator-subscription]
          found but not as specified in namespace openshift-sriov-network-operator;
          notification - namespaces [openshift-sriov-network-operator] found as specified;
          notification - operatorgroups [sriov-network-operators] found as specified
          in namespace openshift-sriov-network-operator; violation - operators [sriov-network-operator.openshift-sriov-network-operator]
          found but not as specified; violation - subscriptions [ptp-operator-subscription]
          found but not as specified in namespace openshift-ptp; notification - namespaces
          [openshift-ptp] found as specified; notification - operatorgroups [ptp-operators]
          found as specified in namespace openshift-ptp; violation - operators [ptp-operator.openshift-ptp]
          found but not as specified; notification - namespaces [openshift-logging]
          found as specified; notification - operatorgroups [cluster-logging] found
          as specified in namespace openshift-logging; notification - subscriptions
          [cluster-logging] found as specified in namespace openshift-logging; notification
          - operators [cluster-logging.openshift-logging] found as specified; notification
          - namespaces [openshift-local-storage] found as specified; notification
          - operatorgroups [openshift-local-storage] found as specified in namespace
          openshift-local-storage; violation - subscriptions [local-storage-operator]
          found but not as specified in namespace openshift-local-storage; violation
          - operators [local-storage-operator.openshift-local-storage] found but not
          as specified
      - eventName: ztp-common.common-subscriptions-policy.17822ca1d4f15355
        lastTimestamp: "2023-09-06T01:58:03Z"
        message: Compliant; notification - subscriptions [sriov-network-operator-subscription]
          found as specified in namespace openshift-sriov-network-operator; notification
          - namespaces [openshift-sriov-network-operator] found as specified; notification
          - operatorgroups [sriov-network-operators] found as specified in namespace
          openshift-sriov-network-operator; notification - operators [sriov-network-operator.openshift-sriov-network-operator]
          found as specified; notification - subscriptions [ptp-operator-subscription]
          found as specified in namespace openshift-ptp; notification - namespaces
          [openshift-ptp] found as specified; notification - operatorgroups [ptp-operators]
          found as specified in namespace openshift-ptp; notification - operators
          [ptp-operator.openshift-ptp] found as specified; notification - namespaces
          [openshift-logging] found as specified; notification - operatorgroups [cluster-logging]
          found as specified in namespace openshift-logging; notification - subscriptions
          [cluster-logging] found as specified in namespace openshift-logging; notification
          - operators [cluster-logging.openshift-logging] found as specified; notification
          - namespaces [openshift-local-storage] found as specified; notification
          - operatorgroups [openshift-local-storage] found as specified in namespace
          openshift-local-storage; notification - subscriptions [local-storage-operator]
          found as specified in namespace openshift-local-storage; notification -
          operators [local-storage-operator.openshift-local-storage] found as specified
      - eventName: ztp-common.common-subscriptions-policy.1782005f4786228a
        lastTimestamp: "2023-09-05T12:26:59Z"
        message: NonCompliant; violation - subscriptions [sriov-network-operator-subscription]
          found but not as specified in namespace openshift-sriov-network-operator;
          notification - namespaces [openshift-sriov-network-operator] found as specified;
          notification - operatorgroups [sriov-network-operators] found as specified
          in namespace openshift-sriov-network-operator; notification - operators
          [sriov-network-operator.openshift-sriov-network-operator] found as specified;
          violation - subscriptions [ptp-operator-subscription] found but not as specified
          in namespace openshift-ptp; notification - namespaces [openshift-ptp] found
          as specified; notification - operatorgroups [ptp-operators] found as specified
          in namespace openshift-ptp; notification - operators [ptp-operator.openshift-ptp]
          found as specified; notification - namespaces [openshift-logging] found
          as specified; notification - operatorgroups [cluster-logging] found as specified
          in namespace openshift-logging; violation - subscriptions [cluster-logging]
          found but not as specified in namespace openshift-logging; notification
          - operators [cluster-logging.openshift-logging] found as specified; notification
          - namespaces [openshift-local-storage] found as specified; notification
          - operatorgroups [openshift-local-storage] found as specified in namespace
          openshift-local-storage; violation - subscriptions [local-storage-operator]
          found but not as specified in namespace openshift-local-storage; notification
          - operators [local-storage-operator.openshift-local-storage] found as specified
      - eventName: ztp-common.common-subscriptions-policy.1780e77fc375f501
        lastTimestamp: "2023-09-01T22:39:55Z"
        message: Compliant; notification - subscriptions [sriov-network-operator-subscription]
          found as specified in namespace openshift-sriov-network-operator; notification
          - namespaces [openshift-sriov-network-operator] found as specified; notification
          - operatorgroups [sriov-network-operators] found as specified in namespace
          openshift-sriov-network-operator; notification - operators [sriov-network-operator.openshift-sriov-network-operator]
          found as specified; notification - subscriptions [ptp-operator-subscription]
          found as specified in namespace openshift-ptp; notification - namespaces
          [openshift-ptp] found as specified; notification - operatorgroups [ptp-operators]
          found as specified in namespace openshift-ptp; notification - operators
          [ptp-operator.openshift-ptp] found as specified; notification - namespaces
          [openshift-logging] found as specified; notification - operatorgroups [cluster-logging]
          found as specified in namespace openshift-logging; notification - subscriptions
          [cluster-logging] found as specified in namespace openshift-logging; notification
          - operators [cluster-logging.openshift-logging] found as specified; notification
          - namespaces [openshift-local-storage] found as specified; notification
          - operatorgroups [openshift-local-storage] found as specified in namespace
          openshift-local-storage; notification - subscriptions [local-storage-operator]
          found as specified in namespace openshift-local-storage; notification -
          operators [local-storage-operator.openshift-local-storage] found as specified
      - eventName: ztp-common.common-subscriptions-policy.1780e77b878361ea
        lastTimestamp: "2023-09-01T22:39:37Z"
        message: NonCompliant; notification - subscriptions [sriov-network-operator-subscription]
          found as specified in namespace openshift-sriov-network-operator; notification
          - namespaces [openshift-sriov-network-operator] found as specified; notification
          - operatorgroups [sriov-network-operators] found as specified in namespace
          openshift-sriov-network-operator; notification - operators [sriov-network-operator.openshift-sriov-network-operator]
          found as specified; notification - subscriptions [ptp-operator-subscription]
          found as specified in namespace openshift-ptp; notification - namespaces
          [openshift-ptp] found as specified; notification - operatorgroups [ptp-operators]
          found as specified in namespace openshift-ptp; notification - operators
          [ptp-operator.openshift-ptp] found as specified; notification - namespaces
          [openshift-logging] found as specified; notification - operatorgroups [cluster-logging]
          found as specified in namespace openshift-logging; notification - subscriptions
          [cluster-logging] found as specified in namespace openshift-logging; violation
          - operators [cluster-logging.openshift-logging] found but not as specified;
          notification - namespaces [openshift-local-storage] found as specified;
          notification - operatorgroups [openshift-local-storage] found as specified
          in namespace openshift-local-storage; notification - subscriptions [local-storage-operator]
          found as specified in namespace openshift-local-storage; notification -
          operators [local-storage-operator.openshift-local-storage] found as specified
      - eventName: ztp-common.common-subscriptions-policy.1780e7743b21ff0d
        lastTimestamp: "2023-09-01T22:39:06Z"
        message: NonCompliant; notification - subscriptions [sriov-network-operator-subscription]
          found as specified in namespace openshift-sriov-network-operator; notification
          - namespaces [openshift-sriov-network-operator] found as specified; notification
          - operatorgroups [sriov-network-operators] found as specified in namespace
          openshift-sriov-network-operator; notification - operators [sriov-network-operator.openshift-sriov-network-operator]
          found as specified; notification - subscriptions [ptp-operator-subscription]
          found as specified in namespace openshift-ptp; notification - namespaces
          [openshift-ptp] found as specified; notification - operatorgroups [ptp-operators]
          found as specified in namespace openshift-ptp; notification - operators
          [ptp-operator.openshift-ptp] found as specified; notification - namespaces
          [openshift-logging] found as specified; notification - operatorgroups [cluster-logging]
          found as specified in namespace openshift-logging; notification - subscriptions
          [cluster-logging] found as specified in namespace openshift-logging; violation
          - operators [cluster-logging.openshift-logging] found but not as specified;
          notification - namespaces [openshift-local-storage] found as specified;
          notification - operatorgroups [openshift-local-storage] found as specified
          in namespace openshift-local-storage; notification - subscriptions [local-storage-operator]
          found as specified in namespace openshift-local-storage; violation - operators
          [local-storage-operator.openshift-local-storage] found but not as specified
      - eventName: ztp-common.common-subscriptions-policy.1780e772eac06632
        lastTimestamp: "2023-09-01T22:39:00Z"
        message: NonCompliant; notification - subscriptions [sriov-network-operator-subscription]
          found as specified in namespace openshift-sriov-network-operator; notification
          - namespaces [openshift-sriov-network-operator] found as specified; notification
          - operatorgroups [sriov-network-operators] found as specified in namespace
          openshift-sriov-network-operator; notification - operators [sriov-network-operator.openshift-sriov-network-operator]
          found as specified; notification - subscriptions [ptp-operator-subscription]
          found as specified in namespace openshift-ptp; notification - namespaces
          [openshift-ptp] found as specified; notification - operatorgroups [ptp-operators]
          found as specified in namespace openshift-ptp; notification - operators
          [ptp-operator.openshift-ptp] found as specified; notification - namespaces
          [openshift-logging] found as specified; notification - operatorgroups [cluster-logging]
          found as specified in namespace openshift-logging; notification - subscriptions
          [cluster-logging] found as specified in namespace openshift-logging; violation
          - operators [cluster-logging.openshift-logging] found but not as specified;
          notification - namespaces [openshift-local-storage] found as specified;
          notification - operatorgroups [openshift-local-storage] found as specified
          in namespace openshift-local-storage; violation - subscriptions [local-storage-operator]
          found but not as specified in namespace openshift-local-storage; violation
          - operators [local-storage-operator.openshift-local-storage] found but not
          as specified
      - eventName: ztp-common.common-subscriptions-policy.1780e73a0879822f
        lastTimestamp: "2023-09-01T22:34:56Z"
        message: NonCompliant; notification - subscriptions [sriov-network-operator-subscription]
          found as specified in namespace openshift-sriov-network-operator; notification
          - namespaces [openshift-sriov-network-operator] found as specified; notification
          - operatorgroups [sriov-network-operators] found as specified in namespace
          openshift-sriov-network-operator; notification - operators [sriov-network-operator.openshift-sriov-network-operator]
          found as specified; notification - subscriptions [ptp-operator-subscription]
          found as specified in namespace openshift-ptp; notification - namespaces
          [openshift-ptp] found as specified; notification - operatorgroups [ptp-operators]
          found as specified in namespace openshift-ptp; notification - operators
          [ptp-operator.openshift-ptp] found as specified; notification - namespaces
          [openshift-logging] found as specified; notification - operatorgroups [cluster-logging]
          found as specified in namespace openshift-logging; violation - subscriptions
          [cluster-logging] found but not as specified in namespace openshift-logging;
          violation - operators [cluster-logging.openshift-logging] found but not
          as specified; notification - namespaces [openshift-local-storage] found
          as specified; notification - operatorgroups [openshift-local-storage] found
          as specified in namespace openshift-local-storage; violation - subscriptions
          [local-storage-operator] found but not as specified in namespace openshift-local-storage;
          violation - operators [local-storage-operator.openshift-local-storage] found
          but not as specified
      - eventName: ztp-common.common-subscriptions-policy.1780e735948ae182
        lastTimestamp: "2023-09-01T22:34:37Z"
        message: NonCompliant; notification - subscriptions [sriov-network-operator-subscription]
          found as specified in namespace openshift-sriov-network-operator; notification
          - namespaces [openshift-sriov-network-operator] found as specified; notification
          - operatorgroups [sriov-network-operators] found as specified in namespace
          openshift-sriov-network-operator; violation - operators [sriov-network-operator.openshift-sriov-network-operator]
          found but not as specified; notification - subscriptions [ptp-operator-subscription]
          found as specified in namespace openshift-ptp; notification - namespaces
          [openshift-ptp] found as specified; notification - operatorgroups [ptp-operators]
          found as specified in namespace openshift-ptp; notification - operators
          [ptp-operator.openshift-ptp] found as specified; notification - namespaces
          [openshift-logging] found as specified; notification - operatorgroups [cluster-logging]
          found as specified in namespace openshift-logging; violation - subscriptions
          [cluster-logging] found but not as specified in namespace openshift-logging;
          violation - operators [cluster-logging.openshift-logging] found but not
          as specified; notification - namespaces [openshift-local-storage] found
          as specified; notification - operatorgroups [openshift-local-storage] found
          as specified in namespace openshift-local-storage; violation - subscriptions
          [local-storage-operator] found but not as specified in namespace openshift-local-storage;
          violation - operators [local-storage-operator.openshift-local-storage] found
          but not as specified
      - eventName: ztp-common.common-subscriptions-policy.1780e73075cc0620
        lastTimestamp: "2023-09-01T22:34:15Z"
        message: NonCompliant; notification - subscriptions [sriov-network-operator-subscription]
          found as specified in namespace openshift-sriov-network-operator; notification
          - namespaces [openshift-sriov-network-operator] found as specified; notification
          - operatorgroups [sriov-network-operators] found as specified in namespace
          openshift-sriov-network-operator; violation - operators [sriov-network-operator.openshift-sriov-network-operator]
          found but not as specified; notification - subscriptions [ptp-operator-subscription]
          found as specified in namespace openshift-ptp; notification - namespaces
          [openshift-ptp] found as specified; notification - operatorgroups [ptp-operators]
          found as specified in namespace openshift-ptp; violation - operators [ptp-operator.openshift-ptp]
          found but not as specified; notification - namespaces [openshift-logging]
          found as specified; notification - operatorgroups [cluster-logging] found
          as specified in namespace openshift-logging; violation - subscriptions [cluster-logging]
          found but not as specified in namespace openshift-logging; violation - operators
          [cluster-logging.openshift-logging] found but not as specified; notification
          - namespaces [openshift-local-storage] found as specified; notification
          - operatorgroups [openshift-local-storage] found as specified in namespace
          openshift-local-storage; violation - subscriptions [local-storage-operator]
          found but not as specified in namespace openshift-local-storage; violation
          - operators [local-storage-operator.openshift-local-storage] found but not
          as specified
      templateMeta:
        creationTimestamp: null
        name: common-subscriptions-policy-config
- apiVersion: policy.open-cluster-management.io/v1
  kind: Policy
  metadata:
    annotations:
      argocd.argoproj.io/compare-options: IgnoreExtraneous
      kubectl.kubernetes.io/last-applied-configuration: |
        {"apiVersion":"policy.open-cluster-management.io/v1","kind":"Policy","metadata":{"annotations":{"policy.open-cluster-management.io/categories":"CM Configuration Management","policy.open-cluster-management.io/controls":"CM-2 Baseline Configuration","policy.open-cluster-management.io/standards":"NIST SP 800-53","ran.openshift.io/ztp-deploy-wave":"100"},"labels":{"app.kubernetes.io/instance":"policy-common-and-group"},"name":"du-upgrade-platform-upgrade","namespace":"ztp-group-du-sno"},"spec":{"disabled":false,"policy-templates":[{"objectDefinition":{"apiVersion":"policy.open-cluster-management.io/v1","kind":"ConfigurationPolicy","metadata":{"name":"du-upgrade-platform-upgrade-config"},"spec":{"evaluationInterval":{"compliant":"10m","noncompliant":"10s"},"namespaceselector":{"exclude":["kube-*"],"include":["*"]},"object-templates":[{"complianceType":"musthave","objectDefinition":{"apiVersion":"config.openshift.io/v1","kind":"ClusterVersion","metadata":{"name":"version"},"spec":{"channel":"fast-4.13","desiredUpdate":{"version":"4.13.9"},"upstream":"http://e27-h01-000-r650.rdu2.scalelab.redhat.com:8081/upgrade/upgrade-graph_fast-4.13"},"status":{"history":[{"state":"Completed","version":"4.13.9"}]}}}],"remediationAction":"inform","severity":"low"}}}],"remediationAction":"inform"}}
      policy.open-cluster-management.io/categories: CM Configuration Management
      policy.open-cluster-management.io/controls: CM-2 Baseline Configuration
      policy.open-cluster-management.io/standards: NIST SP 800-53
      ran.openshift.io/ztp-deploy-wave: "100"
    creationTimestamp: "2023-09-05T12:27:42Z"
    generation: 1
    labels:
      app.kubernetes.io/instance: policy-common-and-group
      policy.open-cluster-management.io/cluster-name: vm01725
      policy.open-cluster-management.io/cluster-namespace: vm01725
      policy.open-cluster-management.io/root-policy: ztp-group-du-sno.du-upgrade-platform-upgrade
    name: ztp-group-du-sno.du-upgrade-platform-upgrade
    namespace: vm01725
    resourceVersion: "29934375"
    uid: 2fa21f8a-5da4-49cd-941f-629d6ef59bcc
  spec:
    disabled: false
    policy-templates:
    - objectDefinition:
        apiVersion: policy.open-cluster-management.io/v1
        kind: ConfigurationPolicy
        metadata:
          name: du-upgrade-platform-upgrade-config
        spec:
          evaluationInterval:
            compliant: 10m
            noncompliant: 10s
          namespaceselector:
            exclude:
            - kube-*
            include:
            - '*'
          object-templates:
          - complianceType: musthave
            objectDefinition:
              apiVersion: config.openshift.io/v1
              kind: ClusterVersion
              metadata:
                name: version
              spec:
                channel: fast-4.13
                desiredUpdate:
                  version: 4.13.9
                upstream: http://e27-h01-000-r650.rdu2.scalelab.redhat.com:8081/upgrade/upgrade-graph_fast-4.13
              status:
                history:
                - state: Completed
                  version: 4.13.9
          remediationAction: inform
          severity: low
    remediationAction: inform
  status:
    compliant: Compliant
    details:
    - compliant: Compliant
      history:
      - eventName: ztp-group-du-sno.du-upgrade-platform-upgrade.17822c43b7da775d
        lastTimestamp: "2023-09-06T01:51:19Z"
        message: Compliant; notification - clusterversions [version] found as specified
      - eventName: ztp-group-du-sno.du-upgrade-platform-upgrade.17820069d6f60a5c
        lastTimestamp: "2023-09-05T12:27:44Z"
        message: NonCompliant; violation - clusterversions [version] found but not
          as specified
      templateMeta:
        creationTimestamp: null
        name: du-upgrade-platform-upgrade-config
- apiVersion: policy.open-cluster-management.io/v1
  kind: Policy
  metadata:
    annotations:
      argocd.argoproj.io/compare-options: IgnoreExtraneous
      kubectl.kubernetes.io/last-applied-configuration: |
        {"apiVersion":"policy.open-cluster-management.io/v1","kind":"Policy","metadata":{"annotations":{"policy.open-cluster-management.io/categories":"CM Configuration Management","policy.open-cluster-management.io/controls":"CM-2 Baseline Configuration","policy.open-cluster-management.io/standards":"NIST SP 800-53","ran.openshift.io/ztp-deploy-wave":"1"},"labels":{"app.kubernetes.io/instance":"policy-common-and-group"},"name":"du-upgrade-platform-upgrade-prep","namespace":"ztp-group-du-sno"},"spec":{"disabled":false,"policy-templates":[{"objectDefinition":{"apiVersion":"policy.open-cluster-management.io/v1","kind":"ConfigurationPolicy","metadata":{"name":"du-upgrade-platform-upgrade-prep-config"},"spec":{"evaluationInterval":{"compliant":"10m","noncompliant":"10s"},"namespaceselector":{"exclude":["kube-*"],"include":["*"]},"object-templates":[{"complianceType":"musthave","objectDefinition":{"apiVersion":"v1","binaryData":{"sha256-a266d3d65c433b460cdef7ab5d6531580f5391adbe85d9c475208a56452e4c0b":"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"},"kind":"ConfigMap","metadata":{"labels":{"release.openshift.io/verification-signatures":""},"name":"release-image-signature","namespace":"openshift-config-managed"}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"v1","data":{"ack-4.11-kube-1.25-api-removals-in-4.12":"true","ack-4.12-kube-1.26-api-removals-in-4.13":"true"},"kind":"ConfigMap","metadata":{"name":"admin-acks","namespace":"openshift-config"}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operator.openshift.io/v1alpha1","kind":"ImageContentSourcePolicy","metadata":{"name":"disconnected-internal-icsp-for-ocp"},"spec":{"repositoryDigestMirrors":[{"mirrors":["e27-h01-000-r650.rdu2.scalelab.redhat.com:5000/ocp4/openshift4"],"source":"quay.io/openshift-release-dev/ocp-release"},{"mirrors":["e27-h01-000-r650.rdu2.scalelab.redhat.com:5000/ocp4/openshift4"],"source":"quay.io/openshift-release-dev/ocp-v4.0-art-dev"}]}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"config.openshift.io/v1","kind":"ClusterVersion","metadata":{"name":"version"},"spec":{"channel":"fast-4.13","upstream":"http://e27-h01-000-r650.rdu2.scalelab.redhat.com:8081/upgrade/upgrade-graph_fast-4.13"}}}],"remediationAction":"inform","severity":"low"}}}],"remediationAction":"inform"}}
      policy.open-cluster-management.io/categories: CM Configuration Management
      policy.open-cluster-management.io/controls: CM-2 Baseline Configuration
      policy.open-cluster-management.io/standards: NIST SP 800-53
      ran.openshift.io/ztp-deploy-wave: "1"
    creationTimestamp: "2023-09-05T12:27:37Z"
    generation: 1
    labels:
      app.kubernetes.io/instance: policy-common-and-group
      policy.open-cluster-management.io/cluster-name: vm01725
      policy.open-cluster-management.io/cluster-namespace: vm01725
      policy.open-cluster-management.io/root-policy: ztp-group-du-sno.du-upgrade-platform-upgrade-prep
    name: ztp-group-du-sno.du-upgrade-platform-upgrade-prep
    namespace: vm01725
    resourceVersion: "29364119"
    uid: c52a8a2a-8c84-4051-9f4a-84a7a73367cd
  spec:
    disabled: false
    policy-templates:
    - objectDefinition:
        apiVersion: policy.open-cluster-management.io/v1
        kind: ConfigurationPolicy
        metadata:
          name: du-upgrade-platform-upgrade-prep-config
        spec:
          evaluationInterval:
            compliant: 10m
            noncompliant: 10s
          namespaceselector:
            exclude:
            - kube-*
            include:
            - '*'
          object-templates:
          - complianceType: musthave
            objectDefinition:
              apiVersion: v1
              binaryData:
                sha256-a266d3d65c433b460cdef7ab5d6531580f5391adbe85d9c475208a56452e4c0b: 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
              kind: ConfigMap
              metadata:
                labels:
                  release.openshift.io/verification-signatures: ""
                name: release-image-signature
                namespace: openshift-config-managed
          - complianceType: musthave
            objectDefinition:
              apiVersion: v1
              data:
                ack-4.11-kube-1.25-api-removals-in-4.12: "true"
                ack-4.12-kube-1.26-api-removals-in-4.13: "true"
              kind: ConfigMap
              metadata:
                name: admin-acks
                namespace: openshift-config
          - complianceType: musthave
            objectDefinition:
              apiVersion: operator.openshift.io/v1alpha1
              kind: ImageContentSourcePolicy
              metadata:
                name: disconnected-internal-icsp-for-ocp
              spec:
                repositoryDigestMirrors:
                - mirrors:
                  - e27-h01-000-r650.rdu2.scalelab.redhat.com:5000/ocp4/openshift4
                  source: quay.io/openshift-release-dev/ocp-release
                - mirrors:
                  - e27-h01-000-r650.rdu2.scalelab.redhat.com:5000/ocp4/openshift4
                  source: quay.io/openshift-release-dev/ocp-v4.0-art-dev
          - complianceType: musthave
            objectDefinition:
              apiVersion: config.openshift.io/v1
              kind: ClusterVersion
              metadata:
                name: version
              spec:
                channel: fast-4.13
                upstream: http://e27-h01-000-r650.rdu2.scalelab.redhat.com:8081/upgrade/upgrade-graph_fast-4.13
          remediationAction: inform
          severity: low
    remediationAction: inform
  status:
    compliant: Compliant
    details:
    - compliant: Compliant
      history:
      - eventName: ztp-group-du-sno.du-upgrade-platform-upgrade-prep.178228098066e88b
        lastTimestamp: "2023-09-06T00:33:51Z"
        message: Compliant; notification - configmaps [release-image-signature] found
          as specified in namespace openshift-config-managed; notification - configmaps
          [admin-acks] found as specified in namespace openshift-config; notification
          - imagecontentsourcepolicies [disconnected-internal-icsp-for-ocp] found
          as specified; notification - clusterversions [version] found as specified
      - eventName: ztp-group-du-sno.du-upgrade-platform-upgrade-prep.17820069d5c1ca90
        lastTimestamp: "2023-09-05T12:27:44Z"
        message: NonCompliant; violation - configmaps [release-image-signature] not
          found in namespace openshift-config-managed; violation - configmaps [admin-acks]
          found but not as specified in namespace openshift-config; violation - imagecontentsourcepolicies
          [disconnected-internal-icsp-for-ocp] not found; violation - clusterversions
          [version] found but not as specified
      templateMeta:
        creationTimestamp: null
        name: du-upgrade-platform-upgrade-prep-config
- apiVersion: policy.open-cluster-management.io/v1
  kind: Policy
  metadata:
    annotations:
      argocd.argoproj.io/compare-options: IgnoreExtraneous
      kubectl.kubernetes.io/last-applied-configuration: |
        {"apiVersion":"policy.open-cluster-management.io/v1","kind":"Policy","metadata":{"annotations":{"policy.open-cluster-management.io/categories":"CM Configuration Management","policy.open-cluster-management.io/controls":"CM-2 Baseline Configuration","policy.open-cluster-management.io/standards":"NIST SP 800-53","ran.openshift.io/ztp-deploy-wave":"10"},"labels":{"app.kubernetes.io/instance":"policy-common-and-group"},"name":"group-du-sno-config-log-policy","namespace":"ztp-group"},"spec":{"disabled":false,"policy-templates":[{"objectDefinition":{"apiVersion":"policy.open-cluster-management.io/v1","kind":"ConfigurationPolicy","metadata":{"name":"group-du-sno-config-log-policy-config"},"spec":{"evaluationInterval":{"compliant":"10m","noncompliant":"10s"},"namespaceselector":{"exclude":["kube-*"],"include":["*"]},"object-templates":[{"complianceType":"musthave","objectDefinition":{"apiVersion":"logging.openshift.io/v1","kind":"ClusterLogForwarder","metadata":{"annotations":{"scale-test-label-1":"{{hub fromConfigMap \"\" \"group-template-map\" \"key1\" hub}}","scale-test-label-2":"{{hub fromConfigMap \"\" \"group-template-map\" \"key2\" hub}}"},"name":"instance","namespace":"openshift-logging"},"spec":{"inputs":[{"infrastructure":{},"name":"infra-logs"}],"outputs":[{"name":"kafka-open","type":"kafka","url":"tcp://10.46.55.190:9092/test"}],"pipelines":[{"inputRefs":["audit"],"name":"audit-logs","outputRefs":["kafka-open"]},{"inputRefs":["infrastructure"],"name":"infrastructure-logs","outputRefs":["kafka-open"]}]}}}],"remediationAction":"inform","severity":"low"}}}],"remediationAction":"inform"}}
      policy.open-cluster-management.io/categories: CM Configuration Management
      policy.open-cluster-management.io/controls: CM-2 Baseline Configuration
      policy.open-cluster-management.io/standards: NIST SP 800-53
      ran.openshift.io/ztp-deploy-wave: "10"
    creationTimestamp: "2023-09-01T21:16:04Z"
    generation: 1
    labels:
      app.kubernetes.io/instance: policy-common-and-group
      policy.open-cluster-management.io/cluster-name: vm01725
      policy.open-cluster-management.io/cluster-namespace: vm01725
      policy.open-cluster-management.io/root-policy: ztp-group.group-du-sno-config-log-policy
    name: ztp-group.group-du-sno-config-log-policy
    namespace: vm01725
    resourceVersion: "577564"
    uid: 0b6a988a-64ad-4b83-94e0-54355eb92505
  spec:
    disabled: false
    policy-templates:
    - objectDefinition:
        apiVersion: policy.open-cluster-management.io/v1
        kind: ConfigurationPolicy
        metadata:
          name: group-du-sno-config-log-policy-config
        spec:
          evaluationInterval:
            compliant: 10m
            noncompliant: 10s
          namespaceselector:
            exclude:
            - kube-*
            include:
            - '*'
          object-templates:
          - complianceType: musthave
            objectDefinition:
              apiVersion: logging.openshift.io/v1
              kind: ClusterLogForwarder
              metadata:
                annotations:
                  scale-test-label-1: group-value1
                  scale-test-label-2: group-value2
                name: instance
                namespace: openshift-logging
              spec:
                inputs:
                - infrastructure: {}
                  name: infra-logs
                outputs:
                - name: kafka-open
                  type: kafka
                  url: tcp://10.46.55.190:9092/test
                pipelines:
                - inputRefs:
                  - audit
                  name: audit-logs
                  outputRefs:
                  - kafka-open
                - inputRefs:
                  - infrastructure
                  name: infrastructure-logs
                  outputRefs:
                  - kafka-open
          remediationAction: inform
          severity: low
    remediationAction: inform
  status:
    compliant: Compliant
    details:
    - compliant: Compliant
      history:
      - eventName: ztp-group.group-du-sno-config-log-policy.1780e7861372cd63
        lastTimestamp: "2023-09-01T22:40:22Z"
        message: Compliant; notification - clusterlogforwarders [instance] found as
          specified in namespace openshift-logging
      - eventName: ztp-group.group-du-sno-config-log-policy.1780e7752cc11024
        lastTimestamp: "2023-09-01T22:39:10Z"
        message: NonCompliant; violation - clusterlogforwarders [instance] not found
          in namespace openshift-logging
      - eventName: ztp-group.group-du-sno-config-log-policy.1780e6e11c92119c
        lastTimestamp: "2023-09-01T22:28:34Z"
        message: NonCompliant; violation - couldn't find mapping resource with kind
          ClusterLogForwarder, please check if you have CRD deployed
      templateMeta:
        creationTimestamp: null
        name: group-du-sno-config-log-policy-config
- apiVersion: policy.open-cluster-management.io/v1
  kind: Policy
  metadata:
    annotations:
      argocd.argoproj.io/compare-options: IgnoreExtraneous
      kubectl.kubernetes.io/last-applied-configuration: |
        {"apiVersion":"policy.open-cluster-management.io/v1","kind":"Policy","metadata":{"annotations":{"policy.open-cluster-management.io/categories":"CM Configuration Management","policy.open-cluster-management.io/controls":"CM-2 Baseline Configuration","policy.open-cluster-management.io/standards":"NIST SP 800-53","ran.openshift.io/ztp-deploy-wave":"10"},"labels":{"app.kubernetes.io/instance":"policy-common-and-group"},"name":"group-du-sno-config-policy","namespace":"ztp-group"},"spec":{"disabled":false,"policy-templates":[{"objectDefinition":{"apiVersion":"policy.open-cluster-management.io/v1","kind":"ConfigurationPolicy","metadata":{"name":"group-du-sno-config-policy-config"},"spec":{"evaluationInterval":{"compliant":"10m","noncompliant":"10s"},"namespaceselector":{"exclude":["kube-*"],"include":["*"]},"object-templates":[{"complianceType":"musthave","objectDefinition":{"apiVersion":"operator.openshift.io/v1","kind":"Console","metadata":{"annotations":{"include.release.openshift.io/ibm-cloud-managed":"false","include.release.openshift.io/self-managed-high-availability":"false","include.release.openshift.io/single-node-developer":"false","release.openshift.io/create-only":"true","scale-test-label-1":"{{hub fromConfigMap \"\" \"group-template-map\" \"key1\" hub}}","scale-test-label-2":"{{hub fromConfigMap \"\" \"group-template-map\" \"key2\" hub}}"},"name":"cluster"},"spec":{"logLevel":"Normal","managementState":"Removed","operatorLogLevel":"Normal"}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"logging.openshift.io/v1","kind":"ClusterLogging","metadata":{"annotations":{"scale-test-label-1":"{{hub fromConfigMap \"\" \"group-template-map\" \"key1\" hub}}","scale-test-label-2":"{{hub fromConfigMap \"\" \"group-template-map\" \"key2\" hub}}"},"name":"instance","namespace":"openshift-logging"},"spec":{"collection":{"logs":{"fluentd":{},"type":"fluentd"}},"curation":{"curator":{"schedule":"30 3 * * *"},"type":"curator"},"managementState":"Managed"}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"ptp.openshift.io/v1","kind":"PtpConfig","metadata":{"annotations":{"scale-test-label-1":"{{hub fromConfigMap \"\" \"group-template-map\" \"key1\" hub}}","scale-test-label-2":"{{hub fromConfigMap \"\" \"group-template-map\" \"key2\" hub}}"},"name":"du-ptp-slave","namespace":"openshift-ptp"},"spec":{"profile":[{"interface":"ens5f0","name":"slave","phc2sysOpts":"-a -r -n 24","ptp4lConf":"[global]\n#\n# Default Data Set\n#\ntwoStepFlag 1\nslaveOnly 1\npriority1 128\npriority2 128\ndomainNumber 24\n#utc_offset 37\nclockClass 255\nclockAccuracy 0xFE\noffsetScaledLogVariance 0xFFFF\nfree_running 0\nfreq_est_interval 1\ndscp_event 0\ndscp_general 0\ndataset_comparison G.8275.x\nG.8275.defaultDS.localPriority 128\n#\n# Port Data Set\n#\nlogAnnounceInterval -3\nlogSyncInterval -4\nlogMinDelayReqInterval -4\nlogMinPdelayReqInterval -4\nannounceReceiptTimeout 3\nsyncReceiptTimeout 0\ndelayAsymmetry 0\nfault_reset_interval -4\nneighborPropDelayThresh 20000000\nmasterOnly 0\nG.8275.portDS.localPriority 128\n#\n# Run time options\n#\nassume_two_step 0\nlogging_level 6\npath_trace_enabled 0\nfollow_up_info 0\nhybrid_e2e 0\ninhibit_multicast_service 0\nnet_sync_monitor 0\ntc_spanning_tree 0\ntx_timestamp_timeout 50\nunicast_listen 0\nunicast_master_table 0\nunicast_req_duration 3600\nuse_syslog 1\nverbose 0\nsummary_interval 0\nkernel_leap 1\ncheck_fup_sync 0\nclock_class_threshold 7\n#\n# Servo Options\n#\npi_proportional_const 0.0\npi_integral_const 0.0\npi_proportional_scale 0.0\npi_proportional_exponent -0.3\npi_proportional_norm_max 0.7\npi_integral_scale 0.0\npi_integral_exponent 0.4\npi_integral_norm_max 0.3\nstep_threshold 2.0\nfirst_step_threshold 0.00002\nmax_frequency 900000000\nclock_servo pi\nsanity_freq_limit 200000000\nntpshm_segment 0\n#\n# Transport options\n#\ntransportSpecific 0x0\nptp_dst_mac 01:1B:19:00:00:00\np2p_dst_mac 01:80:C2:00:00:0E\nudp_ttl 1\nudp6_scope 0x0E\nuds_address /var/run/ptp4l\n#\n# Default interface options\n#\nclock_type OC\nnetwork_transport L2\ndelay_mechanism E2E\ntime_stamping hardware\ntsproc_mode filter\ndelay_filter moving_median\ndelay_filter_length 10\negressLatency 0\ningressLatency 0\nboundary_clock_jbod 0\n#\n# Clock description\n#\nproductDescription ;;\nrevisionData ;;\nmanufacturerIdentity 00:00:00\nuserDescription ;\ntimeSource 0xA0\n","ptp4lOpts":"-2 -s --summary_interval 0","ptpSchedulingPolicy":"SCHED_FIFO","ptpSchedulingPriority":10}],"recommend":[{"match":[{"nodeLabel":"node-role.kubernetes.io/master"}],"priority":4,"profile":"slave"}]}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"sriovnetwork.openshift.io/v1","kind":"SriovOperatorConfig","metadata":{"annotations":{"scale-test-label-1":"{{hub fromConfigMap \"\" \"group-template-map\" \"key1\" hub}}","scale-test-label-2":"{{hub fromConfigMap \"\" \"group-template-map\" \"key2\" hub}}"},"name":"default","namespace":"openshift-sriov-network-operator"},"spec":{"configDaemonNodeSelector":{"node-role.kubernetes.io/master":""},"disableDrain":true,"enableInjector":true,"enableOperatorWebhook":true}}},{"complianceType":"musthave","objectDefinition":{"apiVersion":"operator.openshift.io/v1","kind":"Network","metadata":{"annotations":{"scale-test-label-1":"{{hub fromConfigMap \"\" \"group-template-map\" \"key1\" hub}}","scale-test-label-2":"{{hub fromConfigMap \"\" \"group-template-map\" \"key2\" hub}}"},"name":"cluster"},"spec":{"disableNetworkDiagnostics":true}}}],"remediationAction":"inform","severity":"low"}}}],"remediationAction":"inform"}}
      policy.open-cluster-management.io/categories: CM Configuration Management
      policy.open-cluster-management.io/controls: CM-2 Baseline Configuration
      policy.open-cluster-management.io/standards: NIST SP 800-53
      ran.openshift.io/ztp-deploy-wave: "10"
    creationTimestamp: "2023-09-01T21:16:46Z"
    generation: 1
    labels:
      app.kubernetes.io/instance: policy-common-and-group
      policy.open-cluster-management.io/cluster-name: vm01725
      policy.open-cluster-management.io/cluster-namespace: vm01725
      policy.open-cluster-management.io/root-policy: ztp-group.group-du-sno-config-policy
    name: ztp-group.group-du-sno-config-policy
    namespace: vm01725
    resourceVersion: "622953"
    uid: ebd312af-f2f8-473e-9a64-f96c0123f5c7
  spec:
    disabled: false
    policy-templates:
    - objectDefinition:
        apiVersion: policy.open-cluster-management.io/v1
        kind: ConfigurationPolicy
        metadata:
          name: group-du-sno-config-policy-config
        spec:
          evaluationInterval:
            compliant: 10m
            noncompliant: 10s
          namespaceselector:
            exclude:
            - kube-*
            include:
            - '*'
          object-templates:
          - complianceType: musthave
            objectDefinition:
              apiVersion: operator.openshift.io/v1
              kind: Console
              metadata:
                annotations:
                  include.release.openshift.io/ibm-cloud-managed: "false"
                  include.release.openshift.io/self-managed-high-availability: "false"
                  include.release.openshift.io/single-node-developer: "false"
                  release.openshift.io/create-only: "true"
                  scale-test-label-1: group-value1
                  scale-test-label-2: group-value2
                name: cluster
              spec:
                logLevel: Normal
                managementState: Removed
                operatorLogLevel: Normal
          - complianceType: musthave
            objectDefinition:
              apiVersion: logging.openshift.io/v1
              kind: ClusterLogging
              metadata:
                annotations:
                  scale-test-label-1: group-value1
                  scale-test-label-2: group-value2
                name: instance
                namespace: openshift-logging
              spec:
                collection:
                  logs:
                    fluentd: {}
                    type: fluentd
                curation:
                  curator:
                    schedule: 30 3 * * *
                  type: curator
                managementState: Managed
          - complianceType: musthave
            objectDefinition:
              apiVersion: ptp.openshift.io/v1
              kind: PtpConfig
              metadata:
                annotations:
                  scale-test-label-1: group-value1
                  scale-test-label-2: group-value2
                name: du-ptp-slave
                namespace: openshift-ptp
              spec:
                profile:
                - interface: ens5f0
                  name: slave
                  phc2sysOpts: -a -r -n 24
                  ptp4lConf: |
                    [global]
                    #
                    # Default Data Set
                    #
                    twoStepFlag 1
                    slaveOnly 1
                    priority1 128
                    priority2 128
                    domainNumber 24
                    #utc_offset 37
                    clockClass 255
                    clockAccuracy 0xFE
                    offsetScaledLogVariance 0xFFFF
                    free_running 0
                    freq_est_interval 1
                    dscp_event 0
                    dscp_general 0
                    dataset_comparison G.8275.x
                    G.8275.defaultDS.localPriority 128
                    #
                    # Port Data Set
                    #
                    logAnnounceInterval -3
                    logSyncInterval -4
                    logMinDelayReqInterval -4
                    logMinPdelayReqInterval -4
                    announceReceiptTimeout 3
                    syncReceiptTimeout 0
                    delayAsymmetry 0
                    fault_reset_interval -4
                    neighborPropDelayThresh 20000000
                    masterOnly 0
                    G.8275.portDS.localPriority 128
                    #
                    # Run time options
                    #
                    assume_two_step 0
                    logging_level 6
                    path_trace_enabled 0
                    follow_up_info 0
                    hybrid_e2e 0
                    inhibit_multicast_service 0
                    net_sync_monitor 0
                    tc_spanning_tree 0
                    tx_timestamp_timeout 50
                    unicast_listen 0
                    unicast_master_table 0
                    unicast_req_duration 3600
                    use_syslog 1
                    verbose 0
                    summary_interval 0
                    kernel_leap 1
                    check_fup_sync 0
                    clock_class_threshold 7
                    #
                    # Servo Options
                    #
                    pi_proportional_const 0.0
                    pi_integral_const 0.0
                    pi_proportional_scale 0.0
                    pi_proportional_exponent -0.3
                    pi_proportional_norm_max 0.7
                    pi_integral_scale 0.0
                    pi_integral_exponent 0.4
                    pi_integral_norm_max 0.3
                    step_threshold 2.0
                    first_step_threshold 0.00002
                    max_frequency 900000000
                    clock_servo pi
                    sanity_freq_limit 200000000
                    ntpshm_segment 0
                    #
                    # Transport options
                    #
                    transportSpecific 0x0
                    ptp_dst_mac 01:1B:19:00:00:00
                    p2p_dst_mac 01:80:C2:00:00:0E
                    udp_ttl 1
                    udp6_scope 0x0E
                    uds_address /var/run/ptp4l
                    #
                    # Default interface options
                    #
                    clock_type OC
                    network_transport L2
                    delay_mechanism E2E
                    time_stamping hardware
                    tsproc_mode filter
                    delay_filter moving_median
                    delay_filter_length 10
                    egressLatency 0
                    ingressLatency 0
                    boundary_clock_jbod 0
                    #
                    # Clock description
                    #
                    productDescription ;;
                    revisionData ;;
                    manufacturerIdentity 00:00:00
                    userDescription ;
                    timeSource 0xA0
                  ptp4lOpts: -2 -s --summary_interval 0
                  ptpSchedulingPolicy: SCHED_FIFO
                  ptpSchedulingPriority: 10
                recommend:
                - match:
                  - nodeLabel: node-role.kubernetes.io/master
                  priority: 4
                  profile: slave
          - complianceType: musthave
            objectDefinition:
              apiVersion: sriovnetwork.openshift.io/v1
              kind: SriovOperatorConfig
              metadata:
                annotations:
                  scale-test-label-1: group-value1
                  scale-test-label-2: group-value2
                name: default
                namespace: openshift-sriov-network-operator
              spec:
                configDaemonNodeSelector:
                  node-role.kubernetes.io/master: ""
                disableDrain: true
                enableInjector: true
                enableOperatorWebhook: true
          - complianceType: musthave
            objectDefinition:
              apiVersion: operator.openshift.io/v1
              kind: Network
              metadata:
                annotations:
                  scale-test-label-1: group-value1
                  scale-test-label-2: group-value2
                name: cluster
              spec:
                disableNetworkDiagnostics: true
          remediationAction: inform
          severity: low
    remediationAction: inform
  status:
    compliant: Compliant
    details:
    - compliant: Compliant
      history:
      - eventName: ztp-group.group-du-sno-config-policy.1780e7cd890675ac
        lastTimestamp: "2023-09-01T22:45:29Z"
        message: Compliant; notification - consoles [cluster] found as specified;
          notification - clusterloggings [instance] found as specified in namespace
          openshift-logging; notification - ptpconfigs [du-ptp-slave] found as specified
          in namespace openshift-ptp; notification - sriovoperatorconfigs [default]
          found as specified in namespace openshift-sriov-network-operator; notification
          - networks [cluster] found as specified
      - eventName: ztp-group.group-du-sno-config-policy.1780e7752f07cbe2
        lastTimestamp: "2023-09-01T22:39:10Z"
        message: NonCompliant; violation - consoles [cluster] found but not as specified;
          violation - clusterloggings [instance] not found in namespace openshift-logging;
          violation - ptpconfigs [du-ptp-slave] not found in namespace openshift-ptp;
          violation - sriovoperatorconfigs [default] found but not as specified in
          namespace openshift-sriov-network-operator; violation - networks [cluster]
          found but not as specified
      - eventName: ztp-group.group-du-sno-config-policy.1780e738bb916ee4
        lastTimestamp: "2023-09-01T22:34:50Z"
        message: NonCompliant; violation - consoles [cluster] found but not as specified;
          violation - couldn't find mapping resource with kind ClusterLogging, please
          check if you have CRD deployed; violation - ptpconfigs [du-ptp-slave] not
          found in namespace openshift-ptp; violation - sriovoperatorconfigs [default]
          found but not as specified in namespace openshift-sriov-network-operator;
          violation - networks [cluster] found but not as specified
      - eventName: ztp-group.group-du-sno-config-policy.1780e731b8fee6e0
        lastTimestamp: "2023-09-01T22:34:20Z"
        message: NonCompliant; violation - consoles [cluster] found but not as specified;
          violation - couldn't find mapping resource with kind ClusterLogging, please
          check if you have CRD deployed; violation - ptpconfigs [du-ptp-slave] not
          found in namespace openshift-ptp; violation - sriovoperatorconfigs [default]
          not found in namespace openshift-sriov-network-operator; violation - networks
          [cluster] found but not as specified
      - eventName: ztp-group.group-du-sno-config-policy.1780e72f2a9750e3
        lastTimestamp: "2023-09-01T22:34:09Z"
        message: NonCompliant; violation - consoles [cluster] found but not as specified;
          violation - couldn't find mapping resource with kind ClusterLogging, please
          check if you have CRD deployed; violation - ptpconfigs [du-ptp-slave] not
          found in namespace openshift-ptp; violation - sriovoperatorconfigs [default]
          not found in namespace openshift-sriov-network-operator; violation - networks
          [cluster] found but not as specified
      - eventName: ztp-group.group-du-sno-config-policy.1780e6eb1c5f18e7
        lastTimestamp: "2023-09-01T22:29:17Z"
        message: NonCompliant; violation - consoles [cluster] found but not as specified;
          violation - couldn't find mapping resource with kind ClusterLogging, please
          check if you have CRD deployed; violation - couldn't find mapping resource
          with kind PtpConfig, please check if you have CRD deployed; violation -
          couldn't find mapping resource with kind SriovOperatorConfig, please check
          if you have CRD deployed; violation - networks [cluster] found but not as
          specified
      - eventName: ztp-group.group-du-sno-config-policy.1780e6e61cb33f22
        lastTimestamp: "2023-09-01T22:28:55Z"
        message: NonCompliant; violation - consoles [cluster] found but not as specified;
          violation - couldn't find mapping resource with kind ClusterLogging, please
          check if you have CRD deployed; violation - couldn't find mapping resource
          with kind PtpConfig, please check if you have CRD deployed; violation -
          couldn't find mapping resource with kind SriovOperatorConfig, please check
          if you have CRD deployed; violation - networks [cluster] found but not as
          specified
      templateMeta:
        creationTimestamp: null
        name: group-du-sno-config-policy-config
- apiVersion: policy.open-cluster-management.io/v1
  kind: Policy
  metadata:
    annotations:
      argocd.argoproj.io/compare-options: IgnoreExtraneous
      kubectl.kubernetes.io/last-applied-configuration: |
        {"apiVersion":"policy.open-cluster-management.io/v1","kind":"Policy","metadata":{"annotations":{"policy.open-cluster-management.io/categories":"CM Configuration Management","policy.open-cluster-management.io/controls":"CM-2 Baseline Configuration","policy.open-cluster-management.io/standards":"NIST SP 800-53","ran.openshift.io/ztp-deploy-wave":"10"},"labels":{"app.kubernetes.io/instance":"policy-common-and-group"},"name":"group-du-sno-config-storage-policy","namespace":"ztp-group"},"spec":{"disabled":false,"policy-templates":[{"objectDefinition":{"apiVersion":"policy.open-cluster-management.io/v1","kind":"ConfigurationPolicy","metadata":{"name":"group-du-sno-config-storage-policy-config"},"spec":{"evaluationInterval":{"compliant":"10m","noncompliant":"10s"},"namespaceselector":{"exclude":["kube-*"],"include":["*"]},"object-templates":[{"complianceType":"musthave","objectDefinition":{"apiVersion":"local.storage.openshift.io/v1","kind":"LocalVolume","metadata":{"annotations":{"scale-test-label-1":"{{hub fromConfigMap \"\" \"group-template-map\" \"key1\" hub}}","scale-test-label-2":"{{hub fromConfigMap \"\" \"group-template-map\" \"key2\" hub}}"},"name":"local-disks","namespace":"openshift-local-storage"},"spec":{"logLevel":"Normal","managementState":"Managed","storageClassDevices":[{"devicePaths":["/dev/sdb1"],"fsType":"xfs","storageClassName":"example-storage-class-1","volumeMode":"Filesystem"},{"devicePaths":["/dev/sdb2"],"fsType":"xfs","storageClassName":"example-storage-class-2","volumeMode":"Filesystem"}]}}}],"remediationAction":"inform","severity":"low"}}}],"remediationAction":"inform"}}
      policy.open-cluster-management.io/categories: CM Configuration Management
      policy.open-cluster-management.io/controls: CM-2 Baseline Configuration
      policy.open-cluster-management.io/standards: NIST SP 800-53
      ran.openshift.io/ztp-deploy-wave: "10"
    creationTimestamp: "2023-09-01T21:16:09Z"
    generation: 1
    labels:
      app.kubernetes.io/instance: policy-common-and-group
      policy.open-cluster-management.io/cluster-name: vm01725
      policy.open-cluster-management.io/cluster-namespace: vm01725
      policy.open-cluster-management.io/root-policy: ztp-group.group-du-sno-config-storage-policy
    name: ztp-group.group-du-sno-config-storage-policy
    namespace: vm01725
    resourceVersion: "654271"
    uid: e7019cee-6150-4fe3-babf-dfdaa83e0d3d
  spec:
    disabled: false
    policy-templates:
    - objectDefinition:
        apiVersion: policy.open-cluster-management.io/v1
        kind: ConfigurationPolicy
        metadata:
          name: group-du-sno-config-storage-policy-config
        spec:
          evaluationInterval:
            compliant: 10m
            noncompliant: 10s
          namespaceselector:
            exclude:
            - kube-*
            include:
            - '*'
          object-templates:
          - complianceType: musthave
            objectDefinition:
              apiVersion: local.storage.openshift.io/v1
              kind: LocalVolume
              metadata:
                annotations:
                  scale-test-label-1: group-value1
                  scale-test-label-2: group-value2
                name: local-disks
                namespace: openshift-local-storage
              spec:
                logLevel: Normal
                managementState: Managed
                storageClassDevices:
                - devicePaths:
                  - /dev/sdb1
                  fsType: xfs
                  storageClassName: example-storage-class-1
                  volumeMode: Filesystem
                - devicePaths:
                  - /dev/sdb2
                  fsType: xfs
                  storageClassName: example-storage-class-2
                  volumeMode: Filesystem
          remediationAction: inform
          severity: low
    remediationAction: inform
  status:
    compliant: Compliant
    details:
    - compliant: Compliant
      history:
      - eventName: ztp-group.group-du-sno-config-storage-policy.1780e812d3e20081
        lastTimestamp: "2023-09-01T22:50:27Z"
        message: Compliant; notification - localvolumes [local-disks] found as specified
          in namespace openshift-local-storage
      - eventName: ztp-group.group-du-sno-config-storage-policy.1780e7743866da29
        lastTimestamp: "2023-09-01T22:39:06Z"
        message: NonCompliant; violation - localvolumes [local-disks] not found in
          namespace openshift-local-storage
      - eventName: ztp-group.group-du-sno-config-storage-policy.1780e6e25c7bd535
        lastTimestamp: "2023-09-01T22:28:39Z"
        message: NonCompliant; violation - couldn't find mapping resource with kind
          LocalVolume, please check if you have CRD deployed
      templateMeta:
        creationTimestamp: null
        name: group-du-sno-config-storage-policy-config
kind: List
metadata:
  resourceVersion: ""
