---
apiVersion: v1
items:
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.128.0.29/23","fd02:0:0:1::1d/64"],"mac_address":"0a:58:0a:80:00:1d","gateway_ips":["10.128.0.1","fd02:0:0:1::1"],"routes":[{"dest":"10.128.0.0/14","nextHop":"10.128.0.1"},{"dest":"172.30.0.0/16","nextHop":"10.128.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.128.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.128.0.1"},{"dest":"fd02::/48","nextHop":"fd02:0:0:1::1"},{"dest":"fd03::/112","nextHop":"fd02:0:0:1::1"},{"dest":"fd69::5/128","nextHop":"fd02:0:0:1::1"},{"dest":"fd98::/64","nextHop":"fd02:0:0:1::1"}],"role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.128.0.29",
                "fd02:0:0:1::1d"
            ],
            "mac": "0a:58:0a:80:00:1d",
            "default": true,
            "dns": {}
        }]
      kubectl.kubernetes.io/default-container: cluster-autoscaler-operator
      openshift.io/required-scc: restricted-v2
      openshift.io/scc: restricted-v2
      seccomp.security.alpha.kubernetes.io/pod: runtime/default
    creationTimestamp: "2025-10-27T12:17:48Z"
    generateName: cluster-autoscaler-operator-7796d4cb86-
    labels:
      k8s-app: cluster-autoscaler-operator
      pod-template-hash: 7796d4cb86
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.ovn.org/pod-networks: {}
      manager: cnvqe-071.lab.eng.tlv2.redhat.com
      operation: Update
      subresource: status
      time: "2025-10-27T12:17:48Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:kubectl.kubernetes.io/default-container: {}
            f:openshift.io/required-scc: {}
            f:target.workload.openshift.io/management: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:k8s-app: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"5bb7dbb3-d245-45cd-a3e3-83297ba544a9"}: {}
        f:spec:
          f:containers:
            k:{"name":"cluster-autoscaler-operator"}:
              .: {}
              f:args: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"CLUSTER_AUTOSCALER_IMAGE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"CLUSTER_AUTOSCALER_NAMESPACE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"LEADER_ELECTION_NAMESPACE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"METRICS_PORT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"RELEASE_VERSION"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"WATCH_NAMESPACE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"WEBHOOKS_CERT_DIR"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"WEBHOOKS_PORT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":8443,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/cluster-autoscaler-operator/tls"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
            k:{"name":"kube-rbac-proxy"}:
              .: {}
              f:args: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":9192,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/kube-rbac-proxy"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/etc/tls/private"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"auth-proxy-config"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
              f:name: {}
            k:{"name":"cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:items: {}
                f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2025-10-27T12:17:48Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2025-10-27T12:17:50Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.128.0.29"}:
              .: {}
              f:ip: {}
            k:{"ip":"fd02:0:0:1::1d"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2025-10-27T12:17:52Z"
    name: cluster-autoscaler-operator-7796d4cb86-pxjtv
    namespace: openshift-machine-api
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: cluster-autoscaler-operator-7796d4cb86
      uid: 5bb7dbb3-d245-45cd-a3e3-83297ba544a9
    resourceVersion: "38909"
    uid: e3d8c5ed-5a27-4772-b302-fe6d333f2672
  spec:
    containers:
    - args:
      - --secure-listen-address=0.0.0.0:9192
      - --upstream=http://127.0.0.1:9191/
      - --tls-cert-file=/etc/tls/private/tls.crt
      - --tls-private-key-file=/etc/tls/private/tls.key
      - --config-file=/etc/kube-rbac-proxy/config-file.yaml
      - --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
      - --logtostderr=true
      - --v=3
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imagePullPolicy: IfNotPresent
      name: kube-rbac-proxy
      ports:
      - containerPort: 9192
        name: metrics
        protocol: TCP
      resources:
        requests:
          cpu: 10m
          memory: 20Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        runAsNonRoot: true
        runAsUser: 1000490000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/kube-rbac-proxy
        name: auth-proxy-config
        readOnly: true
      - mountPath: /etc/tls/private
        name: cert
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-xj6xp
        readOnly: true
    - args:
      - -alsologtostderr
      command:
      - cluster-autoscaler-operator
      env:
      - name: RELEASE_VERSION
        value: 4.19.17
      - name: WATCH_NAMESPACE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
      - name: CLUSTER_AUTOSCALER_NAMESPACE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
      - name: LEADER_ELECTION_NAMESPACE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
      - name: CLUSTER_AUTOSCALER_IMAGE
        value: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1f8b04ed4c869cb15570be71a87e1e8d8feba95fd7e73ba3e2aa01a816369e27
      - name: WEBHOOKS_CERT_DIR
        value: /etc/cluster-autoscaler-operator/tls
      - name: WEBHOOKS_PORT
        value: "8443"
      - name: METRICS_PORT
        value: "9191"
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:20c8ec537e3c281a7d2ee9d3a5c6237e26b7601372e9a6007f136d9cb7abab01
      imagePullPolicy: IfNotPresent
      name: cluster-autoscaler-operator
      ports:
      - containerPort: 8443
        protocol: TCP
      resources:
        requests:
          cpu: 20m
          memory: 50Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        runAsNonRoot: true
        runAsUser: 1000490000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/cluster-autoscaler-operator/tls
        name: cert
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-xj6xp
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    nodeName: cnvqe-071.lab.eng.tlv2.redhat.com
    nodeSelector:
      node-role.kubernetes.io/master: ""
    preemptionPolicy: PreemptLowerPriority
    priority: 2000001000
    priorityClassName: system-node-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1000490000
      seLinuxOptions:
        level: s0:c22,c14
      seccompProfile:
        type: RuntimeDefault
    serviceAccount: cluster-autoscaler-operator
    serviceAccountName: cluster-autoscaler-operator
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoSchedule
      key: node-role.kubernetes.io/master
      operator: Exists
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
      tolerationSeconds: 300
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 300
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - name: cert
      secret:
        defaultMode: 420
        items:
        - key: tls.crt
          path: tls.crt
        - key: tls.key
          path: tls.key
        secretName: cluster-autoscaler-operator-cert
    - configMap:
        defaultMode: 420
        name: kube-rbac-proxy-cluster-autoscaler-operator
      name: auth-proxy-config
    - name: kube-api-access-xj6xp
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:17:51Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:17:48Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:17:51Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:17:51Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:17:48Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://63196f560fdc9a9198b47e192edb6a1f88afc438adc9eaa76cd368c4914f2666
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:20c8ec537e3c281a7d2ee9d3a5c6237e26b7601372e9a6007f136d9cb7abab01
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:20c8ec537e3c281a7d2ee9d3a5c6237e26b7601372e9a6007f136d9cb7abab01
      lastState: {}
      name: cluster-autoscaler-operator
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:17:51Z"
      volumeMounts:
      - mountPath: /etc/cluster-autoscaler-operator/tls
        name: cert
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-xj6xp
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://c052960ee2f7e6dce07b7e1e53567b2ae626ecd8f14d458f671bfd512602dbc4
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      lastState: {}
      name: kube-rbac-proxy
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:17:50Z"
      volumeMounts:
      - mountPath: /etc/kube-rbac-proxy
        name: auth-proxy-config
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /etc/tls/private
        name: cert
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-xj6xp
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.46.248.42
    hostIPs:
    - ip: 10.46.248.42
    - ip: 2620:52:0:2ef8::2a
    phase: Running
    podIP: 10.128.0.29
    podIPs:
    - ip: 10.128.0.29
    - ip: fd02:0:0:1::1d
    qosClass: Burstable
    startTime: "2025-10-27T12:17:48Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      capability.openshift.io/name: baremetal
      include.release.openshift.io/self-managed-high-availability: "true"
      include.release.openshift.io/single-node-developer: "true"
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.130.0.51/23","fd02:0:0:3::33/64"],"mac_address":"0a:58:0a:82:00:33","gateway_ips":["10.130.0.1","fd02:0:0:3::1"],"routes":[{"dest":"10.128.0.0/14","nextHop":"10.130.0.1"},{"dest":"172.30.0.0/16","nextHop":"10.130.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.130.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.130.0.1"},{"dest":"fd02::/48","nextHop":"fd02:0:0:3::1"},{"dest":"fd03::/112","nextHop":"fd02:0:0:3::1"},{"dest":"fd69::5/128","nextHop":"fd02:0:0:3::1"},{"dest":"fd98::/64","nextHop":"fd02:0:0:3::1"}],"role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.130.0.51",
                "fd02:0:0:3::33"
            ],
            "mac": "0a:58:0a:82:00:33",
            "default": true,
            "dns": {}
        }]
      openshift.io/required-scc: anyuid
      openshift.io/scc: anyuid
    creationTimestamp: "2025-10-27T12:27:58Z"
    generateName: cluster-baremetal-operator-d647bd6d7-
    labels:
      k8s-app: cluster-baremetal-operator
      pod-template-hash: d647bd6d7
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.ovn.org/pod-networks: {}
      manager: cnvqe-070.lab.eng.tlv2.redhat.com
      operation: Update
      subresource: status
      time: "2025-10-27T12:27:58Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:capability.openshift.io/name: {}
            f:include.release.openshift.io/self-managed-high-availability: {}
            f:include.release.openshift.io/single-node-developer: {}
            f:openshift.io/required-scc: {}
            f:target.workload.openshift.io/management: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:k8s-app: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"5daa1cce-be30-4064-addb-ae07620b0d9a"}: {}
        f:spec:
          f:containers:
            k:{"name":"baremetal-kube-rbac-proxy"}:
              .: {}
              f:args: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":8443,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/baremetal-kube-rbac-proxy"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/tls/private"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
            k:{"name":"cluster-baremetal-operator"}:
              .: {}
              f:args: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"COMPONENT_NAMESPACE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"METRICS_PORT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"RELEASE_VERSION"}:
                  .: {}
                  f:name: {}
                  f:value: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":9443,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/cluster-baremetal-operator/images"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/etc/cluster-baremetal-operator/tls"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext:
            .: {}
            f:runAsNonRoot: {}
            f:runAsUser: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"cluster-baremetal-operator-tls"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"config"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
              f:name: {}
            k:{"name":"images"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
              f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2025-10-27T12:27:58Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2025-10-27T12:28:04Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.130.0.51"}:
              .: {}
              f:ip: {}
            k:{"ip":"fd02:0:0:3::33"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2025-10-27T12:28:14Z"
    name: cluster-baremetal-operator-d647bd6d7-8vsjk
    namespace: openshift-machine-api
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: cluster-baremetal-operator-d647bd6d7
      uid: 5daa1cce-be30-4064-addb-ae07620b0d9a
    resourceVersion: "45743"
    uid: 5118628c-6e7e-41d2-a689-f972f1bc72b3
  spec:
    containers:
    - args:
      - --enable-leader-election
      command:
      - /usr/bin/cluster-baremetal-operator
      env:
      - name: RELEASE_VERSION
        value: 4.19.17
      - name: COMPONENT_NAMESPACE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
      - name: METRICS_PORT
        value: "8080"
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8dc1975366a8d360de18996975c4582f17d638c524ca00496b82a3d339bd4a76
      imagePullPolicy: IfNotPresent
      name: cluster-baremetal-operator
      ports:
      - containerPort: 9443
        name: webhook-server
        protocol: TCP
      resources:
        requests:
          cpu: 10m
          memory: 50Mi
      securityContext:
        capabilities:
          drop:
          - MKNOD
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/cluster-baremetal-operator/tls
        name: cert
        readOnly: true
      - mountPath: /etc/cluster-baremetal-operator/images
        name: images
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-pcctt
        readOnly: true
    - args:
      - --secure-listen-address=0.0.0.0:8443
      - --upstream=http://localhost:8080/
      - --tls-cert-file=/etc/tls/private/tls.crt
      - --tls-private-key-file=/etc/tls/private/tls.key
      - --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
      - --config-file=/etc/baremetal-kube-rbac-proxy/config-file.yaml
      - --logtostderr=true
      - --v=10
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imagePullPolicy: IfNotPresent
      name: baremetal-kube-rbac-proxy
      ports:
      - containerPort: 8443
        name: https
        protocol: TCP
      resources:
        requests:
          cpu: 10m
          memory: 20Mi
      securityContext:
        capabilities:
          drop:
          - MKNOD
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/baremetal-kube-rbac-proxy
        name: config
      - mountPath: /etc/tls/private
        name: cluster-baremetal-operator-tls
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-pcctt
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    nodeName: cnvqe-070.lab.eng.tlv2.redhat.com
    nodeSelector:
      node-role.kubernetes.io/master: ""
    preemptionPolicy: PreemptLowerPriority
    priority: 2000001000
    priorityClassName: system-node-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      runAsNonRoot: true
      runAsUser: 65534
      seLinuxOptions:
        level: s0:c22,c14
    serviceAccount: cluster-baremetal-operator
    serviceAccountName: cluster-baremetal-operator
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoSchedule
      key: node-role.kubernetes.io/master
      operator: Exists
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 120
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
      tolerationSeconds: 120
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - name: cert
      secret:
        defaultMode: 420
        secretName: cluster-baremetal-webhook-server-cert
    - configMap:
        defaultMode: 420
        name: baremetal-kube-rbac-proxy
      name: config
    - name: cluster-baremetal-operator-tls
      secret:
        defaultMode: 420
        secretName: cluster-baremetal-operator-tls
    - configMap:
        defaultMode: 420
        name: cluster-baremetal-operator-images
      name: images
    - name: kube-api-access-pcctt
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:28:14Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:58Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:28:14Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:28:14Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:58Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://c62ecb2ae0ce73baeb31d7cb5611bacf52b933243a7b2b7d7a914e757714b461
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      lastState: {}
      name: baremetal-kube-rbac-proxy
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:28:14Z"
      volumeMounts:
      - mountPath: /etc/baremetal-kube-rbac-proxy
        name: config
      - mountPath: /etc/tls/private
        name: cluster-baremetal-operator-tls
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-pcctt
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://0615b91d520cd1a79f9f5961ebf4cb19719b8c1a6da53fe41f72e5e9924a274e
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8dc1975366a8d360de18996975c4582f17d638c524ca00496b82a3d339bd4a76
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8dc1975366a8d360de18996975c4582f17d638c524ca00496b82a3d339bd4a76
      lastState: {}
      name: cluster-baremetal-operator
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:28:13Z"
      volumeMounts:
      - mountPath: /etc/cluster-baremetal-operator/tls
        name: cert
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /etc/cluster-baremetal-operator/images
        name: images
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-pcctt
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.46.248.41
    hostIPs:
    - ip: 10.46.248.41
    - ip: 2620:52:0:2ef8::29
    phase: Running
    podIP: 10.130.0.51
    podIPs:
    - ip: 10.130.0.51
    - ip: fd02:0:0:3::33
    qosClass: Burstable
    startTime: "2025-10-27T12:27:58Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.130.0.33/23","fd02:0:0:3::21/64"],"mac_address":"0a:58:0a:82:00:21","gateway_ips":["10.130.0.1","fd02:0:0:3::1"],"routes":[{"dest":"10.128.0.0/14","nextHop":"10.130.0.1"},{"dest":"172.30.0.0/16","nextHop":"10.130.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.130.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.130.0.1"},{"dest":"fd02::/48","nextHop":"fd02:0:0:3::1"},{"dest":"fd03::/112","nextHop":"fd02:0:0:3::1"},{"dest":"fd69::5/128","nextHop":"fd02:0:0:3::1"},{"dest":"fd98::/64","nextHop":"fd02:0:0:3::1"}],"role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.130.0.33",
                "fd02:0:0:3::21"
            ],
            "mac": "0a:58:0a:82:00:21",
            "default": true,
            "dns": {}
        }]
      openshift.io/required-scc: restricted-v2
      openshift.io/scc: restricted-v2
      seccomp.security.alpha.kubernetes.io/pod: runtime/default
    creationTimestamp: "2025-10-27T12:27:51Z"
    generateName: control-plane-machine-set-operator-667d679d89-
    labels:
      k8s-app: control-plane-machine-set-operator
      pod-template-hash: 667d679d89
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.ovn.org/pod-networks: {}
      manager: cnvqe-070.lab.eng.tlv2.redhat.com
      operation: Update
      subresource: status
      time: "2025-10-27T12:27:51Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:openshift.io/required-scc: {}
            f:target.workload.openshift.io/management: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:k8s-app: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"be371bd4-a93e-46f6-9ffb-c54b36289467"}: {}
        f:spec:
          f:containers:
            k:{"name":"control-plane-machine-set-operator"}:
              .: {}
              f:args: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"COMPONENT_NAMESPACE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"RELEASE_VERSION"}:
                  .: {}
                  f:name: {}
                  f:value: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":9443,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/tmp/k8s-webhook-server/serving-certs"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"control-plane-machine-set-operator-tls"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2025-10-27T12:27:51Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2025-10-27T12:27:53Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.130.0.33"}:
              .: {}
              f:ip: {}
            k:{"ip":"fd02:0:0:3::21"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2025-10-27T12:27:58Z"
    name: control-plane-machine-set-operator-667d679d89-kw7jt
    namespace: openshift-machine-api
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: control-plane-machine-set-operator-667d679d89
      uid: be371bd4-a93e-46f6-9ffb-c54b36289467
    resourceVersion: "44705"
    uid: 504ca068-1032-49fe-a84e-a7f79388650c
  spec:
    containers:
    - args:
      - -v=2
      - --leader-elect=true
      - --leader-elect-lease-duration=137s
      - --leader-elect-renew-deadline=107s
      - --leader-elect-retry-period=26s
      - --leader-elect-resource-namespace=openshift-machine-api
      command:
      - /manager
      env:
      - name: RELEASE_VERSION
        value: 4.19.17
      - name: COMPONENT_NAMESPACE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7bf641e605d2fdd40e96d2bec7e5a3f7295057932c64f30e6e19f9471e7f166b
      imagePullPolicy: IfNotPresent
      name: control-plane-machine-set-operator
      ports:
      - containerPort: 9443
        name: https
        protocol: TCP
      resources:
        requests:
          cpu: 10m
          memory: 50Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        runAsNonRoot: true
        runAsUser: 1000490000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /tmp/k8s-webhook-server/serving-certs
        name: control-plane-machine-set-operator-tls
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-dr7n7
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    nodeName: cnvqe-070.lab.eng.tlv2.redhat.com
    nodeSelector:
      node-role.kubernetes.io/master: ""
    preemptionPolicy: PreemptLowerPriority
    priority: 2000000000
    priorityClassName: system-cluster-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1000490000
      seLinuxOptions:
        level: s0:c22,c14
      seccompProfile:
        type: RuntimeDefault
    serviceAccount: control-plane-machine-set-operator
    serviceAccountName: control-plane-machine-set-operator
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoSchedule
      key: node-role.kubernetes.io/master
      operator: Exists
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
      tolerationSeconds: 300
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 300
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - name: control-plane-machine-set-operator-tls
      secret:
        defaultMode: 420
        secretName: control-plane-machine-set-operator-tls
    - name: kube-api-access-dr7n7
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:58Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:51Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:58Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:58Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:51Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://986608632c3fd328646d7b5968bb55f2b17b546f7f4b94c6b7133a5649eda074
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7bf641e605d2fdd40e96d2bec7e5a3f7295057932c64f30e6e19f9471e7f166b
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7bf641e605d2fdd40e96d2bec7e5a3f7295057932c64f30e6e19f9471e7f166b
      lastState: {}
      name: control-plane-machine-set-operator
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:27:57Z"
      volumeMounts:
      - mountPath: /tmp/k8s-webhook-server/serving-certs
        name: control-plane-machine-set-operator-tls
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-dr7n7
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.46.248.41
    hostIPs:
    - ip: 10.46.248.41
    - ip: 2620:52:0:2ef8::29
    phase: Running
    podIP: 10.130.0.33
    podIPs:
    - ip: 10.130.0.33
    - ip: fd02:0:0:3::21
    qosClass: Burstable
    startTime: "2025-10-27T12:27:51Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      openshift.io/scc: privileged
    creationTimestamp: "2025-10-27T12:27:51Z"
    generateName: ironic-proxy-
    labels:
      baremetal.openshift.io/cluster-baremetal-operator: ironic-proxy
      controller-revision-hash: 7c8768785c
      k8s-app: metal3
      pod-template-generation: "2"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:target.workload.openshift.io/management: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:baremetal.openshift.io/cluster-baremetal-operator: {}
            f:controller-revision-hash: {}
            f:k8s-app: {}
            f:pod-template-generation: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"0e28c35d-25f8-4fdf-bea2-40dbd8de627a"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
          f:containers:
            k:{"name":"ironic-proxy"}:
              .: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"IRONIC_PROXY_PORT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"IRONIC_UPSTREAM_IP"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"IRONIC_UPSTREAM_PORT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"PROVISIONING_IP"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":6385,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:capabilities:
                  .: {}
                  f:add: {}
                  f:drop: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/certs/ironic"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/etc/pki/ca-trust/extracted/pem"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext:
            .: {}
            f:runAsNonRoot: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"metal3-ironic-tls"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"trusted-ca"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:items: {}
                f:name: {}
                f:optional: {}
              f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2025-10-27T12:27:51Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.46.248.42"}:
              .: {}
              f:ip: {}
            k:{"ip":"2620:52:0:2ef8::2a"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2025-10-27T12:27:53Z"
    name: ironic-proxy-4jsps
    namespace: openshift-machine-api
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: DaemonSet
      name: ironic-proxy
      uid: 0e28c35d-25f8-4fdf-bea2-40dbd8de627a
    resourceVersion: "43998"
    uid: 109c0b90-5d92-454d-9d90-8b7e83992dff
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchFields:
            - key: metadata.name
              operator: In
              values:
              - cnvqe-071.lab.eng.tlv2.redhat.com
    containers:
    - command:
      - /bin/runironic-proxy
      env:
      - name: IRONIC_PROXY_PORT
        value: "6385"
      - name: IRONIC_UPSTREAM_IP
        value: 10.46.248.41
      - name: IRONIC_UPSTREAM_PORT
        value: "6388"
      - name: PROVISIONING_IP
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: status.hostIP
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6163f1e47d0faaa7b143a59df1b3b986dde2034460ca74b88b1e3a27776644d3
      imagePullPolicy: IfNotPresent
      name: ironic-proxy
      ports:
      - containerPort: 6385
        hostPort: 6385
        name: ironic-proxy
        protocol: TCP
      resources:
        requests:
          cpu: 5m
          memory: 50Mi
      securityContext:
        capabilities:
          add:
          - FOWNER
          drop:
          - ALL
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /certs/ironic
        name: metal3-ironic-tls
        readOnly: true
      - mountPath: /etc/pki/ca-trust/extracted/pem
        name: trusted-ca
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-qhms2
        readOnly: true
    dnsPolicy: ClusterFirstWithHostNet
    enableServiceLinks: true
    hostNetwork: true
    nodeName: cnvqe-071.lab.eng.tlv2.redhat.com
    nodeSelector:
      node-role.kubernetes.io/master: ""
    preemptionPolicy: PreemptLowerPriority
    priority: 2000001000
    priorityClassName: system-node-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      runAsNonRoot: false
    serviceAccount: cluster-baremetal-operator
    serviceAccountName: cluster-baremetal-operator
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoSchedule
      key: node-role.kubernetes.io/master
    - key: CriticalAddonsOnly
      operator: Exists
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/disk-pressure
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/pid-pressure
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/unschedulable
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/network-unavailable
      operator: Exists
    volumes:
    - name: metal3-ironic-tls
      secret:
        defaultMode: 420
        secretName: metal3-ironic-tls
    - configMap:
        defaultMode: 420
        items:
        - key: ca-bundle.crt
          path: tls-ca-bundle.pem
        name: cbo-trusted-ca
        optional: true
      name: trusted-ca
    - name: kube-api-access-qhms2
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:53Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:51Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:53Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:53Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:51Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://2d254537527ad416726a1483b4ed9c3514a7c61389e3678572b3f8e892f1946a
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6163f1e47d0faaa7b143a59df1b3b986dde2034460ca74b88b1e3a27776644d3
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6163f1e47d0faaa7b143a59df1b3b986dde2034460ca74b88b1e3a27776644d3
      lastState: {}
      name: ironic-proxy
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:27:52Z"
      volumeMounts:
      - mountPath: /certs/ironic
        name: metal3-ironic-tls
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /etc/pki/ca-trust/extracted/pem
        name: trusted-ca
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-qhms2
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.46.248.42
    hostIPs:
    - ip: 10.46.248.42
    - ip: 2620:52:0:2ef8::2a
    phase: Running
    podIP: 10.46.248.42
    podIPs:
    - ip: 10.46.248.42
    - ip: 2620:52:0:2ef8::2a
    qosClass: Burstable
    startTime: "2025-10-27T12:27:51Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      openshift.io/scc: privileged
    creationTimestamp: "2025-10-27T12:27:52Z"
    generateName: ironic-proxy-
    labels:
      baremetal.openshift.io/cluster-baremetal-operator: ironic-proxy
      controller-revision-hash: 7c8768785c
      k8s-app: metal3
      pod-template-generation: "2"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:target.workload.openshift.io/management: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:baremetal.openshift.io/cluster-baremetal-operator: {}
            f:controller-revision-hash: {}
            f:k8s-app: {}
            f:pod-template-generation: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"0e28c35d-25f8-4fdf-bea2-40dbd8de627a"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
          f:containers:
            k:{"name":"ironic-proxy"}:
              .: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"IRONIC_PROXY_PORT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"IRONIC_UPSTREAM_IP"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"IRONIC_UPSTREAM_PORT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"PROVISIONING_IP"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":6385,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:capabilities:
                  .: {}
                  f:add: {}
                  f:drop: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/certs/ironic"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/etc/pki/ca-trust/extracted/pem"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext:
            .: {}
            f:runAsNonRoot: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"metal3-ironic-tls"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"trusted-ca"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:items: {}
                f:name: {}
                f:optional: {}
              f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2025-10-27T12:27:52Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.46.248.134"}:
              .: {}
              f:ip: {}
            k:{"ip":"2620:52:0:2ef8::86"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2025-10-27T12:37:20Z"
    name: ironic-proxy-9fjlq
    namespace: openshift-machine-api
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: DaemonSet
      name: ironic-proxy
      uid: 0e28c35d-25f8-4fdf-bea2-40dbd8de627a
    resourceVersion: "48543"
    uid: 4dcfbc84-f398-49bc-be01-66040a62c0f9
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchFields:
            - key: metadata.name
              operator: In
              values:
              - cnvqe-072.lab.eng.tlv2.redhat.com
    containers:
    - command:
      - /bin/runironic-proxy
      env:
      - name: IRONIC_PROXY_PORT
        value: "6385"
      - name: IRONIC_UPSTREAM_IP
        value: 10.46.248.41
      - name: IRONIC_UPSTREAM_PORT
        value: "6388"
      - name: PROVISIONING_IP
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: status.hostIP
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6163f1e47d0faaa7b143a59df1b3b986dde2034460ca74b88b1e3a27776644d3
      imagePullPolicy: IfNotPresent
      name: ironic-proxy
      ports:
      - containerPort: 6385
        hostPort: 6385
        name: ironic-proxy
        protocol: TCP
      resources:
        requests:
          cpu: 5m
          memory: 50Mi
      securityContext:
        capabilities:
          add:
          - FOWNER
          drop:
          - ALL
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /certs/ironic
        name: metal3-ironic-tls
        readOnly: true
      - mountPath: /etc/pki/ca-trust/extracted/pem
        name: trusted-ca
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-jp4np
        readOnly: true
    dnsPolicy: ClusterFirstWithHostNet
    enableServiceLinks: true
    hostNetwork: true
    nodeName: cnvqe-072.lab.eng.tlv2.redhat.com
    nodeSelector:
      node-role.kubernetes.io/master: ""
    preemptionPolicy: PreemptLowerPriority
    priority: 2000001000
    priorityClassName: system-node-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      runAsNonRoot: false
    serviceAccount: cluster-baremetal-operator
    serviceAccountName: cluster-baremetal-operator
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoSchedule
      key: node-role.kubernetes.io/master
    - key: CriticalAddonsOnly
      operator: Exists
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/disk-pressure
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/pid-pressure
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/unschedulable
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/network-unavailable
      operator: Exists
    volumes:
    - name: metal3-ironic-tls
      secret:
        defaultMode: 420
        secretName: metal3-ironic-tls
    - configMap:
        defaultMode: 420
        items:
        - key: ca-bundle.crt
          path: tls-ca-bundle.pem
        name: cbo-trusted-ca
        optional: true
      name: trusted-ca
    - name: kube-api-access-jp4np
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:37:20Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:52Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:37:20Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:37:20Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:52Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://63006b0d26b85b4795d353c4f551f6e6434e37166a4e12f4c735f180691f69a9
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6163f1e47d0faaa7b143a59df1b3b986dde2034460ca74b88b1e3a27776644d3
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6163f1e47d0faaa7b143a59df1b3b986dde2034460ca74b88b1e3a27776644d3
      lastState: {}
      name: ironic-proxy
      ready: true
      restartCount: 1
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:37:19Z"
      volumeMounts:
      - mountPath: /certs/ironic
        name: metal3-ironic-tls
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /etc/pki/ca-trust/extracted/pem
        name: trusted-ca
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-jp4np
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.46.248.134
    hostIPs:
    - ip: 10.46.248.134
    - ip: 2620:52:0:2ef8::86
    phase: Running
    podIP: 10.46.248.134
    podIPs:
    - ip: 10.46.248.134
    - ip: 2620:52:0:2ef8::86
    qosClass: Burstable
    startTime: "2025-10-27T12:27:52Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      openshift.io/scc: privileged
    creationTimestamp: "2025-10-27T12:27:51Z"
    generateName: ironic-proxy-
    labels:
      baremetal.openshift.io/cluster-baremetal-operator: ironic-proxy
      controller-revision-hash: 7c8768785c
      k8s-app: metal3
      pod-template-generation: "2"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:target.workload.openshift.io/management: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:baremetal.openshift.io/cluster-baremetal-operator: {}
            f:controller-revision-hash: {}
            f:k8s-app: {}
            f:pod-template-generation: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"0e28c35d-25f8-4fdf-bea2-40dbd8de627a"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
          f:containers:
            k:{"name":"ironic-proxy"}:
              .: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"IRONIC_PROXY_PORT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"IRONIC_UPSTREAM_IP"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"IRONIC_UPSTREAM_PORT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"PROVISIONING_IP"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":6385,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:capabilities:
                  .: {}
                  f:add: {}
                  f:drop: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/certs/ironic"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/etc/pki/ca-trust/extracted/pem"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext:
            .: {}
            f:runAsNonRoot: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"metal3-ironic-tls"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"trusted-ca"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:items: {}
                f:name: {}
                f:optional: {}
              f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2025-10-27T12:27:51Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.46.248.41"}:
              .: {}
              f:ip: {}
            k:{"ip":"2620:52:0:2ef8::29"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2025-10-27T12:27:52Z"
    name: ironic-proxy-lrtfc
    namespace: openshift-machine-api
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: DaemonSet
      name: ironic-proxy
      uid: 0e28c35d-25f8-4fdf-bea2-40dbd8de627a
    resourceVersion: "43940"
    uid: 51903703-01fa-4b3a-802e-bcef03664200
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchFields:
            - key: metadata.name
              operator: In
              values:
              - cnvqe-070.lab.eng.tlv2.redhat.com
    containers:
    - command:
      - /bin/runironic-proxy
      env:
      - name: IRONIC_PROXY_PORT
        value: "6385"
      - name: IRONIC_UPSTREAM_IP
        value: 10.46.248.41
      - name: IRONIC_UPSTREAM_PORT
        value: "6388"
      - name: PROVISIONING_IP
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: status.hostIP
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6163f1e47d0faaa7b143a59df1b3b986dde2034460ca74b88b1e3a27776644d3
      imagePullPolicy: IfNotPresent
      name: ironic-proxy
      ports:
      - containerPort: 6385
        hostPort: 6385
        name: ironic-proxy
        protocol: TCP
      resources:
        requests:
          cpu: 5m
          memory: 50Mi
      securityContext:
        capabilities:
          add:
          - FOWNER
          drop:
          - ALL
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /certs/ironic
        name: metal3-ironic-tls
        readOnly: true
      - mountPath: /etc/pki/ca-trust/extracted/pem
        name: trusted-ca
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-gphbm
        readOnly: true
    dnsPolicy: ClusterFirstWithHostNet
    enableServiceLinks: true
    hostNetwork: true
    nodeName: cnvqe-070.lab.eng.tlv2.redhat.com
    nodeSelector:
      node-role.kubernetes.io/master: ""
    preemptionPolicy: PreemptLowerPriority
    priority: 2000001000
    priorityClassName: system-node-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      runAsNonRoot: false
    serviceAccount: cluster-baremetal-operator
    serviceAccountName: cluster-baremetal-operator
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoSchedule
      key: node-role.kubernetes.io/master
    - key: CriticalAddonsOnly
      operator: Exists
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/disk-pressure
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/pid-pressure
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/unschedulable
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/network-unavailable
      operator: Exists
    volumes:
    - name: metal3-ironic-tls
      secret:
        defaultMode: 420
        secretName: metal3-ironic-tls
    - configMap:
        defaultMode: 420
        items:
        - key: ca-bundle.crt
          path: tls-ca-bundle.pem
        name: cbo-trusted-ca
        optional: true
      name: trusted-ca
    - name: kube-api-access-gphbm
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:52Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:51Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:52Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:52Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:51Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://9f8307da3748faa1685d3c644c83d3fb7b4d0b4330b63e7f414a15722be57fc0
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6163f1e47d0faaa7b143a59df1b3b986dde2034460ca74b88b1e3a27776644d3
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6163f1e47d0faaa7b143a59df1b3b986dde2034460ca74b88b1e3a27776644d3
      lastState: {}
      name: ironic-proxy
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:27:52Z"
      volumeMounts:
      - mountPath: /certs/ironic
        name: metal3-ironic-tls
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /etc/pki/ca-trust/extracted/pem
        name: trusted-ca
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-gphbm
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.46.248.41
    hostIPs:
    - ip: 10.46.248.41
    - ip: 2620:52:0:2ef8::29
    phase: Running
    podIP: 10.46.248.41
    podIPs:
    - ip: 10.46.248.41
    - ip: 2620:52:0:2ef8::29
    qosClass: Burstable
    startTime: "2025-10-27T12:27:51Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.128.0.52/23","fd02:0:0:1::34/64"],"mac_address":"0a:58:0a:80:00:34","gateway_ips":["10.128.0.1","fd02:0:0:1::1"],"routes":[{"dest":"10.128.0.0/14","nextHop":"10.128.0.1"},{"dest":"172.30.0.0/16","nextHop":"10.128.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.128.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.128.0.1"},{"dest":"fd02::/48","nextHop":"fd02:0:0:1::1"},{"dest":"fd03::/112","nextHop":"fd02:0:0:1::1"},{"dest":"fd69::5/128","nextHop":"fd02:0:0:1::1"},{"dest":"fd98::/64","nextHop":"fd02:0:0:1::1"}],"role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.128.0.52",
                "fd02:0:0:1::34"
            ],
            "mac": "0a:58:0a:80:00:34",
            "default": true,
            "dns": {}
        }]
      openshift.io/scc: restricted-v2
      operator.openshift.io/dep-openshift-machine-api.mao-trusted-ca.configmap: ElMHxA==
      seccomp.security.alpha.kubernetes.io/pod: runtime/default
    creationTimestamp: "2025-10-27T12:27:51Z"
    generateName: machine-api-controllers-856cb9f9c8-
    labels:
      api: clusterapi
      k8s-app: controller
      pod-template-hash: 856cb9f9c8
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.ovn.org/pod-networks: {}
      manager: cnvqe-071.lab.eng.tlv2.redhat.com
      operation: Update
      subresource: status
      time: "2025-10-27T12:27:51Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:operator.openshift.io/dep-openshift-machine-api.mao-trusted-ca.configmap: {}
            f:target.workload.openshift.io/management: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:api: {}
            f:k8s-app: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"03e65a8d-7bbf-4e63-b368-132feab0e6d5"}: {}
        f:spec:
          f:containers:
            k:{"name":"kube-rbac-proxy-machine-mtrc"}:
              .: {}
              f:args: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":8441,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/kube-rbac-proxy"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/tls/private"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
            k:{"name":"kube-rbac-proxy-machineset-mtrc"}:
              .: {}
              f:args: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":8442,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/kube-rbac-proxy"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/tls/private"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
            k:{"name":"kube-rbac-proxy-mhc-mtrc"}:
              .: {}
              f:args: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":8444,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/kube-rbac-proxy"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/tls/private"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
            k:{"name":"machine-controller"}:
              .: {}
              f:args: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"NODE_NAME"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"RELEASE_VERSION"}:
                  .: {}
                  f:name: {}
                  f:value: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":8440,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
                k:{"containerPort":9440,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:readinessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/machine-api-operator/tls"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/etc/pki/ca-trust/extracted/pem"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/var/run/secrets/openshift/serviceaccount"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
            k:{"name":"machine-healthcheck-controller"}:
              .: {}
              f:args: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":9442,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:readinessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
            k:{"name":"machineset-controller"}:
              .: {}
              f:args: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":8443,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
                k:{"containerPort":9441,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:readinessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:startupProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/machine-api-operator/tls"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
            k:{"name":"nodelink-controller"}:
              .: {}
              f:args: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"bound-sa-token"}:
              .: {}
              f:name: {}
              f:projected:
                .: {}
                f:defaultMode: {}
                f:sources: {}
            k:{"name":"config"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
              f:name: {}
            k:{"name":"machine-api-controllers-tls"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"machine-webhook-cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:items: {}
                f:secretName: {}
            k:{"name":"machineset-webhook-cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:items: {}
                f:secretName: {}
            k:{"name":"trusted-ca"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:items: {}
                f:name: {}
                f:optional: {}
              f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2025-10-27T12:27:51Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2025-10-27T12:27:53Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.128.0.52"}:
              .: {}
              f:ip: {}
            k:{"ip":"fd02:0:0:1::34"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2025-10-27T12:28:02Z"
    name: machine-api-controllers-856cb9f9c8-lld8k
    namespace: openshift-machine-api
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: machine-api-controllers-856cb9f9c8
      uid: 03e65a8d-7bbf-4e63-b368-132feab0e6d5
    resourceVersion: "45186"
    uid: 9948239a-7727-4d78-a3a1-0e2cc2bc7ef0
  spec:
    containers:
    - args:
      - --logtostderr=true
      - --v=3
      - --leader-elect=true
      - --leader-elect-lease-duration=120s
      - --namespace=openshift-machine-api
      - --feature-gates=AzureWorkloadIdentity=true,GCPLabelsTags=true,MachineAPIMigration=false,VSphereHostVMGroupZonal=false,VSphereMultiDisk=false
      command:
      - /machineset-controller
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4e402d5cb3fde916896fc4035dc49f4059f2f755b174288ffce59d6d3a470577
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 3
        httpGet:
          path: /healthz
          port: healthz
          scheme: HTTP
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 5
      name: machineset-controller
      ports:
      - containerPort: 8443
        name: webhook-server
        protocol: TCP
      - containerPort: 9441
        name: healthz
        protocol: TCP
      readinessProbe:
        failureThreshold: 3
        httpGet:
          path: /readyz
          port: healthz
          scheme: HTTP
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 5
      resources:
        requests:
          cpu: 10m
          memory: 20Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        runAsNonRoot: true
        runAsUser: 1000490000
      startupProbe:
        failureThreshold: 30
        httpGet:
          path: /readyz
          port: healthz
          scheme: HTTP
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 10
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/machine-api-operator/tls
        name: machineset-webhook-cert
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-4c95s
        readOnly: true
    - args:
      - --logtostderr=true
      - --v=3
      - --leader-elect=true
      - --leader-elect-lease-duration=120s
      - --namespace=openshift-machine-api
      - --feature-gates=AzureWorkloadIdentity=true,GCPLabelsTags=true,MachineAPIMigration=false,VSphereHostVMGroupZonal=false,VSphereMultiDisk=false
      command:
      - /machine-controller-manager
      env:
      - name: NODE_NAME
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: spec.nodeName
      - name: RELEASE_VERSION
        value: 4.19.17
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e56fb770426a3ad789908a88a25c9791cb9974df47757174bd8d52bd55eb9c68
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 3
        httpGet:
          path: /readyz
          port: healthz
          scheme: HTTP
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 1
      name: machine-controller
      ports:
      - containerPort: 8440
        name: machine-webhook
        protocol: TCP
      - containerPort: 9440
        name: healthz
        protocol: TCP
      readinessProbe:
        failureThreshold: 3
        httpGet:
          path: /healthz
          port: healthz
          scheme: HTTP
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 1
      resources:
        requests:
          cpu: 10m
          memory: 20Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        runAsNonRoot: true
        runAsUser: 1000490000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/pki/ca-trust/extracted/pem
        name: trusted-ca
        readOnly: true
      - mountPath: /var/run/secrets/openshift/serviceaccount
        name: bound-sa-token
        readOnly: true
      - mountPath: /etc/machine-api-operator/tls
        name: machine-webhook-cert
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-4c95s
        readOnly: true
    - args:
      - --logtostderr=true
      - --v=3
      - --leader-elect=true
      - --leader-elect-lease-duration=120s
      - --namespace=openshift-machine-api
      command:
      - /nodelink-controller
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4e402d5cb3fde916896fc4035dc49f4059f2f755b174288ffce59d6d3a470577
      imagePullPolicy: IfNotPresent
      name: nodelink-controller
      resources:
        requests:
          cpu: 10m
          memory: 20Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        runAsNonRoot: true
        runAsUser: 1000490000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-4c95s
        readOnly: true
    - args:
      - --logtostderr=true
      - --v=3
      - --leader-elect=true
      - --leader-elect-lease-duration=120s
      - --namespace=openshift-machine-api
      command:
      - /machine-healthcheck
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4e402d5cb3fde916896fc4035dc49f4059f2f755b174288ffce59d6d3a470577
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 3
        httpGet:
          path: /readyz
          port: healthz
          scheme: HTTP
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 1
      name: machine-healthcheck-controller
      ports:
      - containerPort: 9442
        name: healthz
        protocol: TCP
      readinessProbe:
        failureThreshold: 3
        httpGet:
          path: /healthz
          port: healthz
          scheme: HTTP
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 1
      resources:
        requests:
          cpu: 10m
          memory: 20Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        runAsNonRoot: true
        runAsUser: 1000490000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-4c95s
        readOnly: true
    - args:
      - --secure-listen-address=0.0.0.0:8442
      - --upstream=http://localhost:8082
      - --config-file=/etc/kube-rbac-proxy/config-file.yaml
      - --tls-cert-file=/etc/tls/private/tls.crt
      - --tls-private-key-file=/etc/tls/private/tls.key
      - --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
      - --logtostderr=true
      - --v=3
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imagePullPolicy: IfNotPresent
      name: kube-rbac-proxy-machineset-mtrc
      ports:
      - containerPort: 8442
        name: machineset-mtrc
        protocol: TCP
      resources:
        requests:
          cpu: 10m
          memory: 20Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        runAsNonRoot: true
        runAsUser: 1000490000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/kube-rbac-proxy
        name: config
      - mountPath: /etc/tls/private
        name: machine-api-controllers-tls
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-4c95s
        readOnly: true
    - args:
      - --secure-listen-address=0.0.0.0:8441
      - --upstream=http://localhost:8081
      - --config-file=/etc/kube-rbac-proxy/config-file.yaml
      - --tls-cert-file=/etc/tls/private/tls.crt
      - --tls-private-key-file=/etc/tls/private/tls.key
      - --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
      - --logtostderr=true
      - --v=3
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imagePullPolicy: IfNotPresent
      name: kube-rbac-proxy-machine-mtrc
      ports:
      - containerPort: 8441
        name: machine-mtrc
        protocol: TCP
      resources:
        requests:
          cpu: 10m
          memory: 20Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        runAsNonRoot: true
        runAsUser: 1000490000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/kube-rbac-proxy
        name: config
      - mountPath: /etc/tls/private
        name: machine-api-controllers-tls
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-4c95s
        readOnly: true
    - args:
      - --secure-listen-address=0.0.0.0:8444
      - --upstream=http://localhost:8083
      - --config-file=/etc/kube-rbac-proxy/config-file.yaml
      - --tls-cert-file=/etc/tls/private/tls.crt
      - --tls-private-key-file=/etc/tls/private/tls.key
      - --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
      - --logtostderr=true
      - --v=3
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imagePullPolicy: IfNotPresent
      name: kube-rbac-proxy-mhc-mtrc
      ports:
      - containerPort: 8444
        name: mhc-mtrc
        protocol: TCP
      resources:
        requests:
          cpu: 10m
          memory: 20Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        runAsNonRoot: true
        runAsUser: 1000490000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/kube-rbac-proxy
        name: config
      - mountPath: /etc/tls/private
        name: machine-api-controllers-tls
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-4c95s
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    nodeName: cnvqe-071.lab.eng.tlv2.redhat.com
    nodeSelector:
      node-role.kubernetes.io/master: ""
    preemptionPolicy: PreemptLowerPriority
    priority: 2000001000
    priorityClassName: system-node-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1000490000
      seLinuxOptions:
        level: s0:c22,c14
      seccompProfile:
        type: RuntimeDefault
    serviceAccount: machine-api-controllers
    serviceAccountName: machine-api-controllers
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoSchedule
      key: node-role.kubernetes.io/master
    - key: CriticalAddonsOnly
      operator: Exists
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
      tolerationSeconds: 120
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 120
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - name: machineset-webhook-cert
      secret:
        defaultMode: 420
        items:
        - key: tls.crt
          path: tls.crt
        - key: tls.key
          path: tls.key
        secretName: machine-api-operator-webhook-cert
    - name: machine-webhook-cert
      secret:
        defaultMode: 420
        items:
        - key: tls.crt
          path: tls.crt
        - key: tls.key
          path: tls.key
        secretName: machine-api-operator-machine-webhook-cert
    - name: bound-sa-token
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            audience: openshift
            expirationSeconds: 3600
            path: token
    - configMap:
        defaultMode: 420
        name: kube-rbac-proxy
      name: config
    - name: machine-api-controllers-tls
      secret:
        defaultMode: 420
        secretName: machine-api-controllers-tls
    - configMap:
        defaultMode: 420
        items:
        - key: ca-bundle.crt
          path: tls-ca-bundle.pem
        name: mao-trusted-ca
        optional: true
      name: trusted-ca
    - name: kube-api-access-4c95s
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:56Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:51Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:28:02Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:28:02Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:51Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://1e9b5e030964bc4ef919c1f1fb692d1107fa69815925efadafb9c61770ff072c
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      lastState: {}
      name: kube-rbac-proxy-machine-mtrc
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:27:55Z"
      volumeMounts:
      - mountPath: /etc/kube-rbac-proxy
        name: config
      - mountPath: /etc/tls/private
        name: machine-api-controllers-tls
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-4c95s
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://af2cebc3c6ebf5accfeaaa79ca319625cb4957cdf472abea12211b7ea0fb39ff
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      lastState: {}
      name: kube-rbac-proxy-machineset-mtrc
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:27:55Z"
      volumeMounts:
      - mountPath: /etc/kube-rbac-proxy
        name: config
      - mountPath: /etc/tls/private
        name: machine-api-controllers-tls
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-4c95s
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://5e007b35f751150e74dad17edd63007017af919b9f30eb94d0ec871b9aaa1fc8
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      lastState: {}
      name: kube-rbac-proxy-mhc-mtrc
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:27:55Z"
      volumeMounts:
      - mountPath: /etc/kube-rbac-proxy
        name: config
      - mountPath: /etc/tls/private
        name: machine-api-controllers-tls
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-4c95s
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://e08bf688d6c1c42b9070ba2cdc2dbf9ca4bb23b5498397057d8cb648226ded92
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e56fb770426a3ad789908a88a25c9791cb9974df47757174bd8d52bd55eb9c68
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e56fb770426a3ad789908a88a25c9791cb9974df47757174bd8d52bd55eb9c68
      lastState: {}
      name: machine-controller
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:27:54Z"
      volumeMounts:
      - mountPath: /etc/pki/ca-trust/extracted/pem
        name: trusted-ca
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/openshift/serviceaccount
        name: bound-sa-token
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /etc/machine-api-operator/tls
        name: machine-webhook-cert
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-4c95s
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://e2c698b177b7ff6351aa338f6b077f6a2e09f3f1496af6c1a18531fb9ee24772
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4e402d5cb3fde916896fc4035dc49f4059f2f755b174288ffce59d6d3a470577
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4e402d5cb3fde916896fc4035dc49f4059f2f755b174288ffce59d6d3a470577
      lastState: {}
      name: machine-healthcheck-controller
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:27:54Z"
      volumeMounts:
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-4c95s
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://4383629eec144d8b7add52feb58be19fa96e8be291c2f54f965b3c2137f50268
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4e402d5cb3fde916896fc4035dc49f4059f2f755b174288ffce59d6d3a470577
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4e402d5cb3fde916896fc4035dc49f4059f2f755b174288ffce59d6d3a470577
      lastState: {}
      name: machineset-controller
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:27:53Z"
      volumeMounts:
      - mountPath: /etc/machine-api-operator/tls
        name: machineset-webhook-cert
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-4c95s
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://ecf09e82d3cd762ab8ed226493452aa4a0e59a240fa47ae347906d9e17957a24
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4e402d5cb3fde916896fc4035dc49f4059f2f755b174288ffce59d6d3a470577
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4e402d5cb3fde916896fc4035dc49f4059f2f755b174288ffce59d6d3a470577
      lastState: {}
      name: nodelink-controller
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:27:54Z"
      volumeMounts:
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-4c95s
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.46.248.42
    hostIPs:
    - ip: 10.46.248.42
    - ip: 2620:52:0:2ef8::2a
    phase: Running
    podIP: 10.128.0.52
    podIPs:
    - ip: 10.128.0.52
    - ip: fd02:0:0:1::34
    qosClass: Burstable
    startTime: "2025-10-27T12:27:51Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      capability.openshift.io/name: MachineAPI
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.128.0.54/23","fd02:0:0:1::36/64"],"mac_address":"0a:58:0a:80:00:36","gateway_ips":["10.128.0.1","fd02:0:0:1::1"],"routes":[{"dest":"10.128.0.0/14","nextHop":"10.128.0.1"},{"dest":"172.30.0.0/16","nextHop":"10.128.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.128.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.128.0.1"},{"dest":"fd02::/48","nextHop":"fd02:0:0:1::1"},{"dest":"fd03::/112","nextHop":"fd02:0:0:1::1"},{"dest":"fd69::5/128","nextHop":"fd02:0:0:1::1"},{"dest":"fd98::/64","nextHop":"fd02:0:0:1::1"}],"role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.128.0.54",
                "fd02:0:0:1::36"
            ],
            "mac": "0a:58:0a:80:00:36",
            "default": true,
            "dns": {}
        }]
      kubectl.kubernetes.io/default-container: machine-api-operator
      openshift.io/required-scc: restricted-v2
      openshift.io/scc: restricted-v2
      seccomp.security.alpha.kubernetes.io/pod: runtime/default
    creationTimestamp: "2025-10-27T12:27:53Z"
    generateName: machine-api-operator-7dc7fbbd88-
    labels:
      k8s-app: machine-api-operator
      pod-template-hash: 7dc7fbbd88
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.ovn.org/pod-networks: {}
      manager: cnvqe-071.lab.eng.tlv2.redhat.com
      operation: Update
      subresource: status
      time: "2025-10-27T12:27:53Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:capability.openshift.io/name: {}
            f:kubectl.kubernetes.io/default-container: {}
            f:openshift.io/required-scc: {}
            f:target.workload.openshift.io/management: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:k8s-app: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"d9df63ed-3922-4a0b-bc5f-c1568cfdae8d"}: {}
        f:spec:
          f:containers:
            k:{"name":"kube-rbac-proxy"}:
              .: {}
              f:args: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":8443,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/kube-rbac-proxy"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/tls/private"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
            k:{"name":"machine-api-operator"}:
              .: {}
              f:args: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"COMPONENT_NAMESPACE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"METRICS_PORT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"POD_NAME"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"RELEASE_VERSION"}:
                  .: {}
                  f:name: {}
                  f:value: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/machine-api-operator-config/images"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"config"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
              f:name: {}
            k:{"name":"images"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
              f:name: {}
            k:{"name":"machine-api-operator-tls"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2025-10-27T12:27:53Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2025-10-27T12:27:56Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.128.0.54"}:
              .: {}
              f:ip: {}
            k:{"ip":"fd02:0:0:1::36"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2025-10-27T12:27:57Z"
    name: machine-api-operator-7dc7fbbd88-4tlwt
    namespace: openshift-machine-api
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: machine-api-operator-7dc7fbbd88
      uid: d9df63ed-3922-4a0b-bc5f-c1568cfdae8d
    resourceVersion: "44531"
    uid: 37556e49-f21f-459a-bd0c-5148d37856b9
  spec:
    containers:
    - args:
      - --secure-listen-address=0.0.0.0:8443
      - --upstream=http://localhost:8080/
      - --tls-cert-file=/etc/tls/private/tls.crt
      - --tls-private-key-file=/etc/tls/private/tls.key
      - --config-file=/etc/kube-rbac-proxy/config-file.yaml
      - --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
      - --logtostderr=true
      - --v=3
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imagePullPolicy: IfNotPresent
      name: kube-rbac-proxy
      ports:
      - containerPort: 8443
        name: https
        protocol: TCP
      resources:
        requests:
          cpu: 10m
          memory: 20Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        runAsNonRoot: true
        runAsUser: 1000490000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/kube-rbac-proxy
        name: config
      - mountPath: /etc/tls/private
        name: machine-api-operator-tls
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-qjdmm
        readOnly: true
    - args:
      - start
      - --images-json=/etc/machine-api-operator-config/images/images.json
      - --alsologtostderr
      - --v=3
      command:
      - /machine-api-operator
      env:
      - name: RELEASE_VERSION
        value: 4.19.17
      - name: COMPONENT_NAMESPACE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
      - name: POD_NAME
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.name
      - name: METRICS_PORT
        value: "8080"
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4e402d5cb3fde916896fc4035dc49f4059f2f755b174288ffce59d6d3a470577
      imagePullPolicy: IfNotPresent
      name: machine-api-operator
      resources:
        requests:
          cpu: 10m
          memory: 50Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        runAsNonRoot: true
        runAsUser: 1000490000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/machine-api-operator-config/images
        name: images
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-qjdmm
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    nodeName: cnvqe-071.lab.eng.tlv2.redhat.com
    nodeSelector:
      node-role.kubernetes.io/master: ""
    preemptionPolicy: PreemptLowerPriority
    priority: 2000001000
    priorityClassName: system-node-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1000490000
      seLinuxOptions:
        level: s0:c22,c14
      seccompProfile:
        type: RuntimeDefault
    serviceAccount: machine-api-operator
    serviceAccountName: machine-api-operator
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoSchedule
      key: node-role.kubernetes.io/master
      operator: Exists
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 120
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
      tolerationSeconds: 120
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - configMap:
        defaultMode: 420
        name: kube-rbac-proxy
      name: config
    - configMap:
        defaultMode: 420
        name: machine-api-operator-images
      name: images
    - name: machine-api-operator-tls
      secret:
        defaultMode: 420
        secretName: machine-api-operator-tls
    - name: kube-api-access-qjdmm
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:57Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:53Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:57Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:57Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:53Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://9cc18a520bc09ff11562b3ae1da98576938ba7017fdf9692f6edd8e8488df037
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      lastState: {}
      name: kube-rbac-proxy
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:27:56Z"
      volumeMounts:
      - mountPath: /etc/kube-rbac-proxy
        name: config
      - mountPath: /etc/tls/private
        name: machine-api-operator-tls
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-qjdmm
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://af2ee004e207e0a76cfee84c30b136ca5a2ba1e6c890e85640e7b8e22aeb4666
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4e402d5cb3fde916896fc4035dc49f4059f2f755b174288ffce59d6d3a470577
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4e402d5cb3fde916896fc4035dc49f4059f2f755b174288ffce59d6d3a470577
      lastState: {}
      name: machine-api-operator
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:27:56Z"
      volumeMounts:
      - mountPath: /etc/machine-api-operator-config/images
        name: images
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-qjdmm
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.46.248.42
    hostIPs:
    - ip: 10.46.248.42
    - ip: 2620:52:0:2ef8::2a
    phase: Running
    podIP: 10.128.0.54
    podIPs:
    - ip: 10.128.0.54
    - ip: fd02:0:0:1::36
    qosClass: Burstable
    startTime: "2025-10-27T12:27:53Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      openshift.io/scc: privileged
    creationTimestamp: "2025-10-27T12:27:50Z"
    generateName: metal3-669484b778-
    labels:
      baremetal.openshift.io/cluster-baremetal-operator: metal3-state
      k8s-app: metal3
      pod-template-hash: 669484b778
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:target.workload.openshift.io/management: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:baremetal.openshift.io/cluster-baremetal-operator: {}
            f:k8s-app: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"f9f1f6b9-3f67-4575-8109-f0f95d53e398"}: {}
        f:spec:
          f:containers:
            k:{"name":"metal3-httpd"}:
              .: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"HTTP_PORT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"IRONIC_LISTEN_PORT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"IRONIC_PRIVATE_PORT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"IRONIC_RAMDISK_SSH_KEY"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"IRONIC_REVERSE_PROXY_SETUP"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"PROVISIONING_INTERFACE"}:
                  .: {}
                  f:name: {}
                k:{"name":"PROVISIONING_IP"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"PROVISIONING_MACS"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"VMEDIA_TLS_PORT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":6180,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
                k:{"containerPort":6183,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
                k:{"containerPort":6388,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:capabilities:
                  .: {}
                  f:drop: {}
                f:privileged: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/auth/ironic"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/certs/ironic"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/certs/vmedia"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/etc/pki/ca-trust/extracted/pem"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/shared"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/shared/html/images"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
            k:{"name":"metal3-ironic"}:
              .: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"HTTP_PORT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"IRONIC_EXTERNAL_IP"}:
                  .: {}
                  f:name: {}
                k:{"name":"IRONIC_INSECURE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"IRONIC_KERNEL_PARAMS"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"IRONIC_PRIVATE_PORT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"IRONIC_RAMDISK_SSH_KEY"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"IRONIC_REVERSE_PROXY_SETUP"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"PROVISIONING_INTERFACE"}:
                  .: {}
                  f:name: {}
                k:{"name":"PROVISIONING_IP"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"PROVISIONING_MACS"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"VMEDIA_TLS_PORT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:capabilities:
                  .: {}
                  f:drop: {}
                f:privileged: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/certs/ironic"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/certs/vmedia"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/etc/pki/ca-trust/extracted/pem"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/shared"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/shared/html/images"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
            k:{"name":"metal3-ramdisk-logs"}:
              .: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:capabilities:
                  .: {}
                  f:add: {}
                  f:drop: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/pki/ca-trust/extracted/pem"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/shared"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:initContainers:
            .: {}
            k:{"name":"machine-os-images"}:
              .: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"IP_OPTIONS"}:
                  .: {}
                  f:name: {}
                  f:value: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:capabilities:
                  .: {}
                  f:drop: {}
                f:privileged: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/pki/ca-trust/extracted/pem"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/shared/html/images"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext:
            .: {}
            f:runAsNonRoot: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"metal3-ironic-basic-auth"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:items: {}
                f:secretName: {}
            k:{"name":"metal3-ironic-tls"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"metal3-shared"}:
              .: {}
              f:emptyDir: {}
              f:name: {}
            k:{"name":"metal3-shared-image-cache"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"metal3-vmedia-tls"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"trusted-ca"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:items: {}
                f:name: {}
                f:optional: {}
              f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2025-10-27T12:27:50Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:initContainerStatuses: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.46.248.41"}:
              .: {}
              f:ip: {}
            k:{"ip":"2620:52:0:2ef8::29"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2025-10-27T12:28:16Z"
    name: metal3-669484b778-s2h4n
    namespace: openshift-machine-api
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: metal3-669484b778
      uid: f9f1f6b9-3f67-4575-8109-f0f95d53e398
    resourceVersion: "45810"
    uid: 84a208c0-5c95-406c-b67a-124041ce870f
  spec:
    containers:
    - command:
      - /bin/runhttpd
      env:
      - name: HTTP_PORT
        value: "6180"
      - name: PROVISIONING_IP
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: status.hostIP
      - name: PROVISIONING_INTERFACE
      - name: IRONIC_RAMDISK_SSH_KEY
        value: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCj47ubVnxR16JU7ZfDli3N5QVBAwJBRh2xMryyjk5dtfugo5JIPGB2cyXTqEDdzuRmI+Vkb/A5duJyBRlA+9RndGGmhhMnj8and3wu5/cEb7DkF6ZJ25QV4LQx3K/i57LStUHXRTvruHOZ2nCuVXWqi7wSvz5YcvEv7O8pNF5uGmqHlShBdxQxcjurXACZ1YY0YDJDr3AJai1KF9zehVJODuSbrnOYpThVWGjFuFAnNxbtuZ8EOSougN2aYTf2qr/KFGDHtewIkzZmP6cjzKO5bN3pVbXxmb2Gces/BYHntY4MXBTUqwsmsCRC5SAz14bEP/vsLtrNhjq9vCS+BjMT
          Ansible
      - name: PROVISIONING_MACS
        value: 24:6e:96:a0:07:34,78:AC:44:5E:6C:CC,78:AC:44:5E:9B:0E
      - name: VMEDIA_TLS_PORT
        value: "6183"
      - name: IRONIC_REVERSE_PROXY_SETUP
        value: "true"
      - name: IRONIC_PRIVATE_PORT
        value: unix
      - name: IRONIC_LISTEN_PORT
        value: "6388"
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6163f1e47d0faaa7b143a59df1b3b986dde2034460ca74b88b1e3a27776644d3
      imagePullPolicy: IfNotPresent
      name: metal3-httpd
      ports:
      - containerPort: 6388
        hostPort: 6388
        name: ironic
        protocol: TCP
      - containerPort: 6180
        hostPort: 6180
        name: http
        protocol: TCP
      - containerPort: 6183
        hostPort: 6183
        name: vmedia-https
        protocol: TCP
      resources:
        requests:
          cpu: 5m
          memory: 50Mi
      securityContext:
        capabilities:
          drop:
          - ALL
        privileged: true
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /shared
        name: metal3-shared
      - mountPath: /auth/ironic
        name: metal3-ironic-basic-auth
        readOnly: true
      - mountPath: /shared/html/images
        name: metal3-shared-image-cache
      - mountPath: /certs/ironic
        name: metal3-ironic-tls
        readOnly: true
      - mountPath: /certs/vmedia
        name: metal3-vmedia-tls
        readOnly: true
      - mountPath: /etc/pki/ca-trust/extracted/pem
        name: trusted-ca
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-m8gvn
        readOnly: true
    - command:
      - /bin/runironic
      env:
      - name: IRONIC_INSECURE
        value: "true"
      - name: IRONIC_KERNEL_PARAMS
        value: rd.net.timeout.carrier=30 ip=dhcp,dhcp6
      - name: IRONIC_REVERSE_PROXY_SETUP
        value: "true"
      - name: IRONIC_PRIVATE_PORT
        value: unix
      - name: HTTP_PORT
        value: "6180"
      - name: PROVISIONING_IP
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: status.hostIP
      - name: PROVISIONING_INTERFACE
      - name: IRONIC_RAMDISK_SSH_KEY
        value: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCj47ubVnxR16JU7ZfDli3N5QVBAwJBRh2xMryyjk5dtfugo5JIPGB2cyXTqEDdzuRmI+Vkb/A5duJyBRlA+9RndGGmhhMnj8and3wu5/cEb7DkF6ZJ25QV4LQx3K/i57LStUHXRTvruHOZ2nCuVXWqi7wSvz5YcvEv7O8pNF5uGmqHlShBdxQxcjurXACZ1YY0YDJDr3AJai1KF9zehVJODuSbrnOYpThVWGjFuFAnNxbtuZ8EOSougN2aYTf2qr/KFGDHtewIkzZmP6cjzKO5bN3pVbXxmb2Gces/BYHntY4MXBTUqwsmsCRC5SAz14bEP/vsLtrNhjq9vCS+BjMT
          Ansible
      - name: IRONIC_EXTERNAL_IP
      - name: PROVISIONING_MACS
        value: 24:6e:96:a0:07:34,78:AC:44:5E:6C:CC,78:AC:44:5E:9B:0E
      - name: VMEDIA_TLS_PORT
        value: "6183"
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6163f1e47d0faaa7b143a59df1b3b986dde2034460ca74b88b1e3a27776644d3
      imagePullPolicy: IfNotPresent
      name: metal3-ironic
      resources:
        requests:
          cpu: 50m
          memory: 500Mi
      securityContext:
        capabilities:
          drop:
          - ALL
        privileged: true
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /shared
        name: metal3-shared
      - mountPath: /shared/html/images
        name: metal3-shared-image-cache
      - mountPath: /certs/ironic
        name: metal3-ironic-tls
        readOnly: true
      - mountPath: /certs/vmedia
        name: metal3-vmedia-tls
        readOnly: true
      - mountPath: /etc/pki/ca-trust/extracted/pem
        name: trusted-ca
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-m8gvn
        readOnly: true
    - command:
      - /bin/runlogwatch.sh
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6163f1e47d0faaa7b143a59df1b3b986dde2034460ca74b88b1e3a27776644d3
      imagePullPolicy: IfNotPresent
      name: metal3-ramdisk-logs
      resources:
        requests:
          cpu: 10m
          memory: 5Mi
      securityContext:
        capabilities:
          add:
          - CAP_DAC_OVERRIDE
          drop:
          - ALL
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /shared
        name: metal3-shared
      - mountPath: /etc/pki/ca-trust/extracted/pem
        name: trusted-ca
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-m8gvn
        readOnly: true
    dnsPolicy: ClusterFirstWithHostNet
    enableServiceLinks: true
    hostNetwork: true
    initContainers:
    - command:
      - /bin/copy-metal
      - --all
      - /shared/html/images
      env:
      - name: IP_OPTIONS
        value: ip=dhcp,dhcp6
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f2e33d65507b61131d7d560c682e6a9aa370dc2be04936d8db404753d1dc6297
      imagePullPolicy: IfNotPresent
      name: machine-os-images
      resources:
        requests:
          cpu: 5m
          memory: 50Mi
      securityContext:
        capabilities:
          drop:
          - ALL
        privileged: true
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /shared/html/images
        name: metal3-shared-image-cache
      - mountPath: /etc/pki/ca-trust/extracted/pem
        name: trusted-ca
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-m8gvn
        readOnly: true
    nodeName: cnvqe-070.lab.eng.tlv2.redhat.com
    nodeSelector:
      node-role.kubernetes.io/master: ""
    preemptionPolicy: PreemptLowerPriority
    priority: 2000001000
    priorityClassName: system-node-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      runAsNonRoot: false
    serviceAccount: cluster-baremetal-operator
    serviceAccountName: cluster-baremetal-operator
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoSchedule
      key: node-role.kubernetes.io/master
      operator: Exists
    - key: CriticalAddonsOnly
      operator: Exists
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
      tolerationSeconds: 120
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 120
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - emptyDir: {}
      name: metal3-shared
    - hostPath:
        path: /var/lib/metal3/images
        type: DirectoryOrCreate
      name: metal3-shared-image-cache
    - name: metal3-ironic-basic-auth
      secret:
        defaultMode: 420
        items:
        - key: username
          path: username
        - key: password
          path: password
        - key: htpasswd
          path: htpasswd
        secretName: metal3-ironic-password
    - name: cert
      secret:
        defaultMode: 420
        secretName: baremetal-operator-webhook-server-cert
    - configMap:
        defaultMode: 420
        items:
        - key: ca-bundle.crt
          path: tls-ca-bundle.pem
        name: cbo-trusted-ca
        optional: true
      name: trusted-ca
    - name: metal3-ironic-tls
      secret:
        defaultMode: 420
        secretName: metal3-ironic-tls
    - name: metal3-vmedia-tls
      secret:
        defaultMode: 420
        secretName: metal3-ironic-tls
    - name: kube-api-access-m8gvn
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:28:11Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:28:14Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:28:16Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:28:16Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:50Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://6cb36e952c2f971ee89f30908c5408360a3715bc25806b5183bfa1e404b0a32e
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6163f1e47d0faaa7b143a59df1b3b986dde2034460ca74b88b1e3a27776644d3
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6163f1e47d0faaa7b143a59df1b3b986dde2034460ca74b88b1e3a27776644d3
      lastState: {}
      name: metal3-httpd
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:28:15Z"
      volumeMounts:
      - mountPath: /shared
        name: metal3-shared
      - mountPath: /auth/ironic
        name: metal3-ironic-basic-auth
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /shared/html/images
        name: metal3-shared-image-cache
      - mountPath: /certs/ironic
        name: metal3-ironic-tls
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /certs/vmedia
        name: metal3-vmedia-tls
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /etc/pki/ca-trust/extracted/pem
        name: trusted-ca
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-m8gvn
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://0340403dd8a0afeb5b49e6c3469a19f8049624cc5d7dd6858e78caeb45c14b1b
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6163f1e47d0faaa7b143a59df1b3b986dde2034460ca74b88b1e3a27776644d3
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6163f1e47d0faaa7b143a59df1b3b986dde2034460ca74b88b1e3a27776644d3
      lastState: {}
      name: metal3-ironic
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:28:16Z"
      volumeMounts:
      - mountPath: /shared
        name: metal3-shared
      - mountPath: /shared/html/images
        name: metal3-shared-image-cache
      - mountPath: /certs/ironic
        name: metal3-ironic-tls
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /certs/vmedia
        name: metal3-vmedia-tls
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /etc/pki/ca-trust/extracted/pem
        name: trusted-ca
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-m8gvn
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://02cf6a35fb1b940647703e339bd5ec073b0a7bc3853389b3c343fe1b3e8754b0
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6163f1e47d0faaa7b143a59df1b3b986dde2034460ca74b88b1e3a27776644d3
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6163f1e47d0faaa7b143a59df1b3b986dde2034460ca74b88b1e3a27776644d3
      lastState: {}
      name: metal3-ramdisk-logs
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:28:16Z"
      volumeMounts:
      - mountPath: /shared
        name: metal3-shared
      - mountPath: /etc/pki/ca-trust/extracted/pem
        name: trusted-ca
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-m8gvn
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.46.248.41
    hostIPs:
    - ip: 10.46.248.41
    - ip: 2620:52:0:2ef8::29
    initContainerStatuses:
    - containerID: cri-o://3075d46613cbc56d11e4921cce2bc48c824155a7b0eb95fa0430e1a69427fc89
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f2e33d65507b61131d7d560c682e6a9aa370dc2be04936d8db404753d1dc6297
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f2e33d65507b61131d7d560c682e6a9aa370dc2be04936d8db404753d1dc6297
      lastState: {}
      name: machine-os-images
      ready: true
      restartCount: 1
      started: false
      state:
        terminated:
          containerID: cri-o://3075d46613cbc56d11e4921cce2bc48c824155a7b0eb95fa0430e1a69427fc89
          exitCode: 0
          finishedAt: "2025-10-27T12:28:13Z"
          reason: Completed
          startedAt: "2025-10-27T12:28:13Z"
      volumeMounts:
      - mountPath: /shared/html/images
        name: metal3-shared-image-cache
      - mountPath: /etc/pki/ca-trust/extracted/pem
        name: trusted-ca
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-m8gvn
        readOnly: true
        recursiveReadOnly: Disabled
    phase: Running
    podIP: 10.46.248.41
    podIPs:
    - ip: 10.46.248.41
    - ip: 2620:52:0:2ef8::29
    qosClass: Burstable
    startTime: "2025-10-27T12:27:50Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.130.0.41/23","fd02:0:0:3::29/64"],"mac_address":"0a:58:0a:82:00:29","gateway_ips":["10.130.0.1","fd02:0:0:3::1"],"routes":[{"dest":"10.128.0.0/14","nextHop":"10.130.0.1"},{"dest":"172.30.0.0/16","nextHop":"10.130.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.130.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.130.0.1"},{"dest":"fd02::/48","nextHop":"fd02:0:0:3::1"},{"dest":"fd03::/112","nextHop":"fd02:0:0:3::1"},{"dest":"fd69::5/128","nextHop":"fd02:0:0:3::1"},{"dest":"fd98::/64","nextHop":"fd02:0:0:3::1"}],"role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.130.0.41",
                "fd02:0:0:3::29"
            ],
            "mac": "0a:58:0a:82:00:29",
            "default": true,
            "dns": {}
        }]
      openshift.io/required-scc: hostnetwork-v2
      openshift.io/scc: hostnetwork-v2
      seccomp.security.alpha.kubernetes.io/pod: runtime/default
    creationTimestamp: "2025-10-27T12:27:54Z"
    generateName: metal3-baremetal-operator-59bdf79fbc-
    labels:
      baremetal.openshift.io/cluster-baremetal-operator: metal3-baremetal-operator
      baremetal.openshift.io/metal3-validating-webhook: metal3-validating-webhook
      k8s-app: metal3
      pod-template-hash: 59bdf79fbc
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.ovn.org/pod-networks: {}
      manager: cnvqe-070.lab.eng.tlv2.redhat.com
      operation: Update
      subresource: status
      time: "2025-10-27T12:27:54Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:openshift.io/required-scc: {}
            f:target.workload.openshift.io/management: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:baremetal.openshift.io/cluster-baremetal-operator: {}
            f:baremetal.openshift.io/metal3-validating-webhook: {}
            f:k8s-app: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"8b64063e-e7ea-4ce5-ac25-8430434a0589"}: {}
        f:spec:
          f:containers:
            k:{"name":"metal3-baremetal-operator"}:
              .: {}
              f:args: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"DEPLOY_KERNEL_URL"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"IRONIC_CACERT_FILE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"IRONIC_ENDPOINT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"IRONIC_EXTERNAL_IP"}:
                  .: {}
                  f:name: {}
                k:{"name":"IRONIC_EXTERNAL_URL_V6"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"IRONIC_INSECURE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"LIVE_ISO_FORCE_PERSISTENT_BOOT_DEVICE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"METAL3_AUTH_ROOT_DIR"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"OPERATOR_NAME"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"POD_NAME"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"POD_NAMESPACE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"WATCH_NAMESPACE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":9447,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/auth/ironic"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/certs/ironic"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/etc/pki/ca-trust/extracted/pem"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/tmp/k8s-webhook-server/serving-certs"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"metal3-ironic-basic-auth"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:items: {}
                f:secretName: {}
            k:{"name":"metal3-ironic-tls"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"trusted-ca"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:items: {}
                f:name: {}
                f:optional: {}
              f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2025-10-27T12:27:54Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2025-10-27T12:27:57Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.130.0.41"}:
              .: {}
              f:ip: {}
            k:{"ip":"fd02:0:0:3::29"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2025-10-27T12:27:59Z"
    name: metal3-baremetal-operator-59bdf79fbc-5pnkn
    namespace: openshift-machine-api
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: metal3-baremetal-operator-59bdf79fbc
      uid: 8b64063e-e7ea-4ce5-ac25-8430434a0589
    resourceVersion: "44871"
    uid: ca1bd36e-baea-4fcf-8bae-4859ff0094d4
  spec:
    containers:
    - args:
      - --health-addr
      - :9446
      - -build-preprov-image
      - -enable-leader-election
      - -lease-duration-seconds
      - "137"
      - -renew-deadline-seconds
      - "107"
      - -retry-period-seconds
      - "26"
      - --webhook-port
      - "9447"
      command:
      - /baremetal-operator
      env:
      - name: WATCH_NAMESPACE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
      - name: POD_NAMESPACE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
      - name: POD_NAME
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.name
      - name: OPERATOR_NAME
        value: baremetal-operator
      - name: IRONIC_CACERT_FILE
        value: /certs/ironic/tls.crt
      - name: IRONIC_INSECURE
        value: "true"
      - name: DEPLOY_KERNEL_URL
        value: file:///shared/html/images/ironic-python-agent.kernel
      - name: IRONIC_ENDPOINT
        value: https://metal3-state.openshift-machine-api.svc.cluster.local:6388/v1/
      - name: LIVE_ISO_FORCE_PERSISTENT_BOOT_DEVICE
        value: Never
      - name: METAL3_AUTH_ROOT_DIR
        value: /auth
      - name: IRONIC_EXTERNAL_IP
      - name: IRONIC_EXTERNAL_URL_V6
        value: https://[2620:52:0:2ef8::29]:6183
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b3d47c3c3b125db6b4bcf88d3a1f41b4d1a08bf6d5095519c0550f01d9f4f58b
      imagePullPolicy: IfNotPresent
      name: metal3-baremetal-operator
      ports:
      - containerPort: 9447
        name: webhook-server
        protocol: TCP
      resources:
        requests:
          cpu: 20m
          memory: 50Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        runAsNonRoot: true
        runAsUser: 1000490000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /auth/ironic
        name: metal3-ironic-basic-auth
        readOnly: true
      - mountPath: /certs/ironic
        name: metal3-ironic-tls
        readOnly: true
      - mountPath: /tmp/k8s-webhook-server/serving-certs
        name: cert
        readOnly: true
      - mountPath: /etc/pki/ca-trust/extracted/pem
        name: trusted-ca
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-85f4h
        readOnly: true
    dnsPolicy: ClusterFirstWithHostNet
    enableServiceLinks: true
    nodeName: cnvqe-070.lab.eng.tlv2.redhat.com
    nodeSelector:
      node-role.kubernetes.io/master: ""
    preemptionPolicy: PreemptLowerPriority
    priority: 2000001000
    priorityClassName: system-node-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1000490000
      seLinuxOptions:
        level: s0:c22,c14
      seccompProfile:
        type: RuntimeDefault
      supplementalGroups:
      - 1000490000
    serviceAccount: cluster-baremetal-operator
    serviceAccountName: cluster-baremetal-operator
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoSchedule
      key: node-role.kubernetes.io/master
      operator: Exists
    - key: CriticalAddonsOnly
      operator: Exists
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
      tolerationSeconds: 120
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 120
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - configMap:
        defaultMode: 420
        items:
        - key: ca-bundle.crt
          path: tls-ca-bundle.pem
        name: cbo-trusted-ca
        optional: true
      name: trusted-ca
    - name: cert
      secret:
        defaultMode: 420
        secretName: baremetal-operator-webhook-server-cert
    - name: metal3-ironic-basic-auth
      secret:
        defaultMode: 420
        items:
        - key: username
          path: username
        - key: password
          path: password
        secretName: metal3-ironic-password
    - name: metal3-ironic-tls
      secret:
        defaultMode: 420
        secretName: metal3-ironic-tls
    - name: kube-api-access-85f4h
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:59Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:54Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:59Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:59Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:54Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://4f20c8a3e447542b17f8ea856ffc13e37bdcffecc3b3477d40bc96e1085c12eb
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b3d47c3c3b125db6b4bcf88d3a1f41b4d1a08bf6d5095519c0550f01d9f4f58b
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b3d47c3c3b125db6b4bcf88d3a1f41b4d1a08bf6d5095519c0550f01d9f4f58b
      lastState: {}
      name: metal3-baremetal-operator
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:27:58Z"
      volumeMounts:
      - mountPath: /auth/ironic
        name: metal3-ironic-basic-auth
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /certs/ironic
        name: metal3-ironic-tls
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /tmp/k8s-webhook-server/serving-certs
        name: cert
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /etc/pki/ca-trust/extracted/pem
        name: trusted-ca
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-85f4h
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.46.248.41
    hostIPs:
    - ip: 10.46.248.41
    - ip: 2620:52:0:2ef8::29
    phase: Running
    podIP: 10.130.0.41
    podIPs:
    - ip: 10.130.0.41
    - ip: fd02:0:0:3::29
    qosClass: Burstable
    startTime: "2025-10-27T12:27:54Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.130.0.34/23","fd02:0:0:3::22/64"],"mac_address":"0a:58:0a:82:00:22","gateway_ips":["10.130.0.1","fd02:0:0:3::1"],"routes":[{"dest":"10.128.0.0/14","nextHop":"10.130.0.1"},{"dest":"172.30.0.0/16","nextHop":"10.130.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.130.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.130.0.1"},{"dest":"fd02::/48","nextHop":"fd02:0:0:3::1"},{"dest":"fd03::/112","nextHop":"fd02:0:0:3::1"},{"dest":"fd69::5/128","nextHop":"fd02:0:0:3::1"},{"dest":"fd98::/64","nextHop":"fd02:0:0:3::1"}],"role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.130.0.34",
                "fd02:0:0:3::22"
            ],
            "mac": "0a:58:0a:82:00:22",
            "default": true,
            "dns": {}
        }]
      openshift.io/scc: insights-runtime-extractor-scc
      seccomp.security.alpha.kubernetes.io/pod: runtime/default
    creationTimestamp: "2025-10-27T12:27:51Z"
    generateName: metal3-image-customization-6f4d65c98f-
    labels:
      baremetal.openshift.io/cluster-baremetal-operator: metal3-image-customization-service
      k8s-app: metal3
      pod-template-hash: 6f4d65c98f
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.ovn.org/pod-networks: {}
      manager: cnvqe-070.lab.eng.tlv2.redhat.com
      operation: Update
      subresource: status
      time: "2025-10-27T12:27:51Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:target.workload.openshift.io/management: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:baremetal.openshift.io/cluster-baremetal-operator: {}
            f:k8s-app: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"a8fc7fd6-6c7b-43fc-aff9-154b2123a377"}: {}
        f:spec:
          f:containers:
            k:{"name":"machine-image-customization-controller"}:
              .: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"ADDITIONAL_NTP_SERVERS"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"CA_BUNDLE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"DEPLOY_INITRD"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"DEPLOY_ISO"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"IP_OPTIONS"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"IRONIC_AGENT_IMAGE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"IRONIC_BASE_URL"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"IRONIC_RAMDISK_SSH_KEY"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"NO_PROXY"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"REGISTRIES_CONF_PATH"}:
                  .: {}
                  f:name: {}
                  f:value: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":8084,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:capabilities:
                  .: {}
                  f:drop: {}
                f:privileged: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/containers/registries.conf"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/pki/ca-trust/source/anchors/openshift-config-user-ca-bundle.crt"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/run/secrets/pull-secret"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                  f:subPath: {}
                k:{"mountPath":"/shared/html/images"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:initContainers:
            .: {}
            k:{"name":"machine-os-images"}:
              .: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"IP_OPTIONS"}:
                  .: {}
                  f:name: {}
                  f:value: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:capabilities:
                  .: {}
                  f:drop: {}
                f:privileged: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/pki/ca-trust/extracted/pem"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/shared/html/images"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"ironic-agent-pull-secret"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:items: {}
                f:secretName: {}
            k:{"name":"metal3-image-customization-volume"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"metal3-shared-image-cache"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"trusted-ca"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:items: {}
                f:name: {}
                f:optional: {}
              f:name: {}
            k:{"name":"user-ca-bundle"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2025-10-27T12:27:51Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2025-10-27T12:27:56Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:initContainerStatuses: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.130.0.34"}:
              .: {}
              f:ip: {}
            k:{"ip":"fd02:0:0:3::22"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2025-10-27T12:28:18Z"
    name: metal3-image-customization-6f4d65c98f-b5kzt
    namespace: openshift-machine-api
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: metal3-image-customization-6f4d65c98f
      uid: a8fc7fd6-6c7b-43fc-aff9-154b2123a377
    resourceVersion: "45852"
    uid: 336cf651-5e55-4e81-b5d9-18e6977a5ac0
  spec:
    containers:
    - command:
      - /machine-image-customization-controller
      - -images-bind-addr
      - :8084
      - -images-publish-addr
      - http://metal3-image-customization-service.openshift-machine-api.svc.cluster.local/
      env:
      - name: NO_PROXY
        value: ',10.46.255.225,2620:52:0:2ef8::225'
      - name: DEPLOY_ISO
        value: /shared/html/images/ironic-python-agent.iso
      - name: DEPLOY_INITRD
        value: /shared/html/images/ironic-python-agent.initramfs
      - name: IRONIC_BASE_URL
        value: https://10.46.255.225:6385,https://[2620:52:0:2ef8::225]:6385
      - name: IRONIC_AGENT_IMAGE
        value: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8d123266293d8ca6198b3df2a18c9dcdb55c2da809b843bbc5eb78e0fa22879b
      - name: REGISTRIES_CONF_PATH
        value: /etc/containers/registries.conf
      - name: IP_OPTIONS
        value: ip=dhcp,dhcp6
      - name: ADDITIONAL_NTP_SERVERS
        value: clock.redhat.com
      - name: CA_BUNDLE
        value: /etc/pki/ca-trust/source/anchors/openshift-config-user-ca-bundle.crt
      - name: IRONIC_RAMDISK_SSH_KEY
        value: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCj47ubVnxR16JU7ZfDli3N5QVBAwJBRh2xMryyjk5dtfugo5JIPGB2cyXTqEDdzuRmI+Vkb/A5duJyBRlA+9RndGGmhhMnj8and3wu5/cEb7DkF6ZJ25QV4LQx3K/i57LStUHXRTvruHOZ2nCuVXWqi7wSvz5YcvEv7O8pNF5uGmqHlShBdxQxcjurXACZ1YY0YDJDr3AJai1KF9zehVJODuSbrnOYpThVWGjFuFAnNxbtuZ8EOSougN2aYTf2qr/KFGDHtewIkzZmP6cjzKO5bN3pVbXxmb2Gces/BYHntY4MXBTUqwsmsCRC5SAz14bEP/vsLtrNhjq9vCS+BjMT
          Ansible
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:34bf7515908c92875809fb4c092d4bc29490235ae6da3ba7e66a5aa039632079
      imagePullPolicy: IfNotPresent
      name: machine-image-customization-controller
      ports:
      - containerPort: 8084
        name: http
        protocol: TCP
      resources:
        requests:
          cpu: 5m
          memory: 50Mi
      securityContext:
        capabilities:
          drop:
          - ALL
        privileged: true
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/containers/registries.conf
        name: metal3-image-customization-volume
      - mountPath: /shared/html/images
        name: metal3-shared-image-cache
      - mountPath: /run/secrets/pull-secret
        name: ironic-agent-pull-secret
        readOnly: true
        subPath: pull-secret
      - mountPath: /etc/pki/ca-trust/source/anchors/openshift-config-user-ca-bundle.crt
        name: user-ca-bundle
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-zh7n9
        readOnly: true
    dnsPolicy: ClusterFirstWithHostNet
    enableServiceLinks: true
    initContainers:
    - command:
      - /bin/copy-metal
      - --all
      - /shared/html/images
      env:
      - name: IP_OPTIONS
        value: ip=dhcp,dhcp6
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f2e33d65507b61131d7d560c682e6a9aa370dc2be04936d8db404753d1dc6297
      imagePullPolicy: IfNotPresent
      name: machine-os-images
      resources:
        requests:
          cpu: 5m
          memory: 50Mi
      securityContext:
        capabilities:
          drop:
          - ALL
        privileged: true
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /shared/html/images
        name: metal3-shared-image-cache
      - mountPath: /etc/pki/ca-trust/extracted/pem
        name: trusted-ca
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-zh7n9
        readOnly: true
    nodeName: cnvqe-070.lab.eng.tlv2.redhat.com
    nodeSelector:
      node-role.kubernetes.io/master: ""
    preemptionPolicy: PreemptLowerPriority
    priority: 2000001000
    priorityClassName: system-node-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      seccompProfile:
        type: RuntimeDefault
    serviceAccount: cluster-baremetal-operator
    serviceAccountName: cluster-baremetal-operator
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoSchedule
      key: node-role.kubernetes.io/master
      operator: Exists
    - key: CriticalAddonsOnly
      operator: Exists
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
      tolerationSeconds: 120
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 120
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - hostPath:
        path: /etc/containers/registries.conf
        type: FileOrCreate
      name: metal3-image-customization-volume
    - hostPath:
        path: /var/lib/metal3/images
        type: DirectoryOrCreate
      name: metal3-shared-image-cache
    - configMap:
        defaultMode: 420
        items:
        - key: ca-bundle.crt
          path: tls-ca-bundle.pem
        name: cbo-trusted-ca
        optional: true
      name: trusted-ca
    - name: ironic-agent-pull-secret
      secret:
        defaultMode: 420
        items:
        - key: .dockerconfigjson
          path: pull-secret
        secretName: pull-secret
    - hostPath:
        path: /etc/pki/ca-trust/source/anchors/openshift-config-user-ca-bundle.crt
        type: File
      name: user-ca-bundle
    - name: kube-api-access-zh7n9
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:28:11Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:28:12Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:28:18Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:28:18Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:51Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://ef0247d4c38c0a5b035944e13176ee1966ef83af811b5c6d5971fc140acc20a0
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:34bf7515908c92875809fb4c092d4bc29490235ae6da3ba7e66a5aa039632079
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:34bf7515908c92875809fb4c092d4bc29490235ae6da3ba7e66a5aa039632079
      lastState: {}
      name: machine-image-customization-controller
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:28:18Z"
      volumeMounts:
      - mountPath: /etc/containers/registries.conf
        name: metal3-image-customization-volume
      - mountPath: /shared/html/images
        name: metal3-shared-image-cache
      - mountPath: /run/secrets/pull-secret
        name: ironic-agent-pull-secret
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /etc/pki/ca-trust/source/anchors/openshift-config-user-ca-bundle.crt
        name: user-ca-bundle
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-zh7n9
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.46.248.41
    hostIPs:
    - ip: 10.46.248.41
    - ip: 2620:52:0:2ef8::29
    initContainerStatuses:
    - containerID: cri-o://613deb9bd217e086554853c3e47435494ed16871a6f65aefc63456731e5e503f
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f2e33d65507b61131d7d560c682e6a9aa370dc2be04936d8db404753d1dc6297
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f2e33d65507b61131d7d560c682e6a9aa370dc2be04936d8db404753d1dc6297
      lastState: {}
      name: machine-os-images
      ready: true
      restartCount: 0
      started: false
      state:
        terminated:
          containerID: cri-o://613deb9bd217e086554853c3e47435494ed16871a6f65aefc63456731e5e503f
          exitCode: 0
          finishedAt: "2025-10-27T12:28:12Z"
          reason: Completed
          startedAt: "2025-10-27T12:28:10Z"
      volumeMounts:
      - mountPath: /shared/html/images
        name: metal3-shared-image-cache
      - mountPath: /etc/pki/ca-trust/extracted/pem
        name: trusted-ca
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-zh7n9
        readOnly: true
        recursiveReadOnly: Disabled
    phase: Running
    podIP: 10.130.0.34
    podIPs:
    - ip: 10.130.0.34
    - ip: fd02:0:0:3::22
    qosClass: Burstable
    startTime: "2025-10-27T12:27:51Z"
kind: PodList
metadata:
  resourceVersion: "2219612"
