---
apiVersion: v1
kind: Pod
metadata:
  annotations:
    description: LinuxBridge installs 'bridge' CNI on cluster nodes, so it can be
      later used to attach Pods/VMs to Linux bridges
    k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.129.1.166/23","fd02:0:0:2::536/64"],"mac_address":"0a:58:0a:81:01:a6","gateway_ips":["10.129.0.1","fd02:0:0:2::1"],"routes":[{"dest":"10.128.0.0/14","nextHop":"10.129.0.1"},{"dest":"172.30.0.0/16","nextHop":"10.129.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.129.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.129.0.1"},{"dest":"fd02::/48","nextHop":"fd02:0:0:2::1"},{"dest":"fd03::/112","nextHop":"fd02:0:0:2::1"},{"dest":"fd69::5/128","nextHop":"fd02:0:0:2::1"},{"dest":"fd98::/64","nextHop":"fd02:0:0:2::1"}],"role":"primary"}}'
    k8s.v1.cni.cncf.io/network-status: |-
      [{
          "name": "ovn-kubernetes",
          "interface": "eth0",
          "ips": [
              "10.129.1.166",
              "fd02:0:0:2::536"
          ],
          "mac": "0a:58:0a:81:01:a6",
          "default": true,
          "dns": {}
      }]
    openshift.io/required-scc: linux-bridge
    openshift.io/scc: linux-bridge
  creationTimestamp: "2025-10-29T11:53:22Z"
  generateName: kube-cni-linux-bridge-plugin-
  labels:
    app: cni-plugins
    app.kubernetes.io/component: network
    app.kubernetes.io/managed-by: cnao-operator
    app.kubernetes.io/part-of: hyperconverged-cluster
    app.kubernetes.io/version: 4.19.11
    controller-revision-hash: 77dd7b6fc9
    name: kube-cni-linux-bridge-plugin
    pod-template-generation: "1"
    prometheus.cnao.io: "true"
    tier: node
  managedFields:
  - apiVersion: v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          f:k8s.ovn.org/pod-networks: {}
    manager: cnvqe-072.lab.eng.tlv2.redhat.com
    operation: Update
    subresource: status
    time: "2025-10-29T11:53:22Z"
  - apiVersion: v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .: {}
          f:description: {}
          f:openshift.io/required-scc: {}
        f:generateName: {}
        f:labels:
          .: {}
          f:app: {}
          f:app.kubernetes.io/component: {}
          f:app.kubernetes.io/managed-by: {}
          f:app.kubernetes.io/part-of: {}
          f:app.kubernetes.io/version: {}
          f:controller-revision-hash: {}
          f:name: {}
          f:pod-template-generation: {}
          f:prometheus.cnao.io: {}
          f:tier: {}
        f:ownerReferences:
          .: {}
          k:{"uid":"f34668c2-2665-403d-9bab-65a7edc1f3b7"}: {}
      f:spec:
        f:affinity:
          .: {}
          f:nodeAffinity:
            .: {}
            f:requiredDuringSchedulingIgnoredDuringExecution: {}
        f:containers:
          k:{"name":"cni-plugins"}:
            .: {}
            f:command: {}
            f:image: {}
            f:imagePullPolicy: {}
            f:name: {}
            f:resources:
              .: {}
              f:requests:
                .: {}
                f:cpu: {}
                f:memory: {}
            f:securityContext:
              .: {}
              f:privileged: {}
            f:terminationMessagePath: {}
            f:terminationMessagePolicy: {}
            f:volumeMounts:
              .: {}
              k:{"mountPath":"/opt/cni/bin"}:
                .: {}
                f:mountPath: {}
                f:name: {}
        f:dnsPolicy: {}
        f:enableServiceLinks: {}
        f:nodeSelector: {}
        f:priorityClassName: {}
        f:restartPolicy: {}
        f:schedulerName: {}
        f:securityContext: {}
        f:serviceAccount: {}
        f:serviceAccountName: {}
        f:terminationGracePeriodSeconds: {}
        f:tolerations: {}
        f:volumes:
          .: {}
          k:{"name":"cnibin"}:
            .: {}
            f:hostPath:
              .: {}
              f:path: {}
              f:type: {}
            f:name: {}
    manager: kube-controller-manager
    operation: Update
    time: "2025-10-29T11:53:22Z"
  - apiVersion: v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          f:k8s.v1.cni.cncf.io/network-status: {}
    manager: multus-daemon
    operation: Update
    subresource: status
    time: "2025-10-29T11:53:24Z"
  - apiVersion: v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"ContainersReady"}:
            .: {}
            f:lastProbeTime: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"Initialized"}:
            .: {}
            f:lastProbeTime: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"PodReadyToStartContainers"}:
            .: {}
            f:lastProbeTime: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"Ready"}:
            .: {}
            f:lastProbeTime: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
        f:containerStatuses: {}
        f:hostIP: {}
        f:hostIPs: {}
        f:phase: {}
        f:podIP: {}
        f:podIPs:
          .: {}
          k:{"ip":"10.129.1.166"}:
            .: {}
            f:ip: {}
          k:{"ip":"fd02:0:0:2::536"}:
            .: {}
            f:ip: {}
        f:startTime: {}
    manager: kubelet
    operation: Update
    subresource: status
    time: "2025-10-29T11:53:25Z"
  name: kube-cni-linux-bridge-plugin-fttx5
  namespace: openshift-cnv
  ownerReferences:
  - apiVersion: apps/v1
    blockOwnerDeletion: true
    controller: true
    kind: DaemonSet
    name: kube-cni-linux-bridge-plugin
    uid: f34668c2-2665-403d-9bab-65a7edc1f3b7
  resourceVersion: "2144882"
  uid: b4485304-47fe-4c94-b2fe-5cdecb8f61e1
spec:
  affinity:
    nodeAffinity:
      requiredDuringSchedulingIgnoredDuringExecution:
        nodeSelectorTerms:
        - matchFields:
          - key: metadata.name
            operator: In
            values:
            - cnvqe-072.lab.eng.tlv2.redhat.com
  containers:
  - command:
    - /bin/bash
    - -ce
    - |
      cni_mount_dir=/opt/cni/bin
      host_dir=/var/lib/cni/bin
      components=("bridge" "tuning")
      for component in "${components[@]}"; do
        if find "${cni_mount_dir}/${component}" &>/dev/null && ! test -L "${cni_mount_dir}/${component}"; then
          echo "${component} binary found, creating symbolic link ${cni_mount_dir}/cnv-${component}"
          ln -sf "${host_dir}/${component}" "${cni_mount_dir}/cnv-${component}"
        else
          echo "installing cnv-${component}, and creating symbolic link ${cni_mount_dir}/${component}"

          sourcebinpath="/usr/src/github.com/containernetworking/plugins/bin"
          cp --remove-destination "${sourcebinpath}/${component}" "${cni_mount_dir}/cnv-${component}"

          printf -v component_checksum "%s" "$(<${sourcebinpath}/${component}.checksum)"
          printf "%s %s" "${component_checksum% *}" "${cni_mount_dir}/cnv-${component}" | sha256sum --check

          ln -sf "${host_dir}/cnv-${component}" "${cni_mount_dir}/${component}"
        fi
      done
      echo 'Entering sleep... (success)'
      sleep infinity
    image: registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:525da14df7c1b163463b1d86e3121d1c8da3ae9b7b2d8eb7def8fd07992083f0
    imagePullPolicy: IfNotPresent
    name: cni-plugins
    resources:
      requests:
        cpu: 10m
        memory: 15Mi
    securityContext:
      privileged: true
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: FallbackToLogsOnError
    volumeMounts:
    - mountPath: /opt/cni/bin
      name: cnibin
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-mxt2x
      readOnly: true
  dnsPolicy: ClusterFirst
  enableServiceLinks: true
  nodeName: cnvqe-072.lab.eng.tlv2.redhat.com
  nodeSelector:
    kubernetes.io/os: linux
  preemptionPolicy: PreemptLowerPriority
  priority: 2000000000
  priorityClassName: system-cluster-critical
  restartPolicy: Always
  schedulerName: default-scheduler
  securityContext: {}
  serviceAccount: linux-bridge
  serviceAccountName: linux-bridge
  terminationGracePeriodSeconds: 30
  tolerations:
  - effect: NoSchedule
    key: node.kubernetes.io/unschedulable
    operator: Exists
  - effect: NoExecute
    key: node.kubernetes.io/not-ready
    operator: Exists
  - effect: NoExecute
    key: node.kubernetes.io/unreachable
    operator: Exists
  - effect: NoSchedule
    key: node.kubernetes.io/disk-pressure
    operator: Exists
  - effect: NoSchedule
    key: node.kubernetes.io/memory-pressure
    operator: Exists
  - effect: NoSchedule
    key: node.kubernetes.io/pid-pressure
    operator: Exists
  volumes:
  - hostPath:
      path: /var/lib/cni/bin
      type: ""
    name: cnibin
  - name: kube-api-access-mxt2x
    projected:
      defaultMode: 420
      sources:
      - serviceAccountToken:
          expirationSeconds: 3607
          path: token
      - configMap:
          items:
          - key: ca.crt
            path: ca.crt
          name: kube-root-ca.crt
      - downwardAPI:
          items:
          - fieldRef:
              apiVersion: v1
              fieldPath: metadata.namespace
            path: namespace
      - configMap:
          items:
          - key: service-ca.crt
            path: service-ca.crt
          name: openshift-service-ca.crt
status:
  conditions:
  - lastProbeTime: null
    lastTransitionTime: "2025-10-29T11:53:25Z"
    status: "True"
    type: PodReadyToStartContainers
  - lastProbeTime: null
    lastTransitionTime: "2025-10-29T11:53:22Z"
    status: "True"
    type: Initialized
  - lastProbeTime: null
    lastTransitionTime: "2025-10-29T11:53:25Z"
    status: "True"
    type: Ready
  - lastProbeTime: null
    lastTransitionTime: "2025-10-29T11:53:25Z"
    status: "True"
    type: ContainersReady
  - lastProbeTime: null
    lastTransitionTime: "2025-10-29T11:53:22Z"
    status: "True"
    type: PodScheduled
  containerStatuses:
  - containerID: cri-o://9f7454181392bbaadb0f3e045427ea94341c46cf07d22df300f5ff1540f946a5
    image: registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:525da14df7c1b163463b1d86e3121d1c8da3ae9b7b2d8eb7def8fd07992083f0
    imageID: registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:525da14df7c1b163463b1d86e3121d1c8da3ae9b7b2d8eb7def8fd07992083f0
    lastState: {}
    name: cni-plugins
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2025-10-29T11:53:25Z"
    volumeMounts:
    - mountPath: /opt/cni/bin
      name: cnibin
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-mxt2x
      readOnly: true
      recursiveReadOnly: Disabled
  hostIP: 10.46.248.134
  hostIPs:
  - ip: 10.46.248.134
  - ip: 2620:52:0:2ef8::86
  phase: Running
  podIP: 10.129.1.166
  podIPs:
  - ip: 10.129.1.166
  - ip: fd02:0:0:2::536
  qosClass: Burstable
  startTime: "2025-10-29T11:53:22Z"
