---
apiVersion: operator.openshift.io/v1
kind: Authentication
metadata:
  annotations:
    include.release.openshift.io/self-managed-high-availability: "true"
    include.release.openshift.io/single-node-developer: "true"
    release.openshift.io/create-only: "true"
  creationTimestamp: "2025-10-27T11:18:22Z"
  generation: 12
  managedFields:
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"WebhookAuthenticatorCertApprover_OpenShiftAuthenticatorDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: WebhookAuthenticatorCertApprover_OpenShiftAuthenticator-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-10-27T11:30:55Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"ManagementStateDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: authentication-ManagementState
    operation: Apply
    subresource: status
    time: "2025-10-27T11:30:55Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"UnsupportedConfigOverridesUpgradeable"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: openshift-authentication-UnsupportedConfigOverrides
    operation: Apply
    subresource: status
    time: "2025-10-27T11:30:55Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"OAuthAPIServerConfigObservationDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: oauth-apiserver-ConfigObserver
    operation: Apply
    subresource: status
    time: "2025-10-27T11:30:57Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"Encrypted"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: openshift-oauth-apiserver-EncryptionCondition
    operation: Apply
    subresource: status
    time: "2025-10-27T11:31:00Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"EncryptionKeyControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: openshift-oauth-apiserver-EncryptionKey
    operation: Apply
    subresource: status
    time: "2025-10-27T11:31:00Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"EncryptionMigrationControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"EncryptionMigrationControllerProgressing"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: openshift-oauth-apiserver-EncryptionMigration
    operation: Apply
    subresource: status
    time: "2025-10-27T11:31:00Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"EncryptionPruneControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: openshift-oauth-apiserver-EncryptionPrune
    operation: Apply
    subresource: status
    time: "2025-10-27T11:31:00Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"EncryptionStateControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: openshift-oauth-apiserver-EncryptionState
    operation: Apply
    subresource: status
    time: "2025-10-27T11:31:00Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"ResourceSyncControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: oauth-server-ResourceSync
    operation: Apply
    subresource: status
    time: "2025-10-27T11:31:02Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"AuditPolicyDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: oauth-apiserver-AuditPolicy
    operation: Apply
    subresource: status
    time: "2025-10-27T11:31:03Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"RouterCertsDomainValidationControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: RouterCertsDomainValidationController-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-10-27T11:31:04Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"AuthenticatorCertKeyProgressing"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: openshift-authentication-WebhookAuthenticator
    operation: Apply
    subresource: status
    time: "2025-10-27T11:31:08Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"APIServerStaticResourcesDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: APIServerStaticResources-StaticResources
    operation: Apply
    subresource: status
    time: "2025-10-27T11:31:13Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"RevisionControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: RevisionController-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-10-27T11:31:13Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:latestAvailableRevision: {}
    manager: oauth-apiserver-RevisionController
    operation: Apply
    subresource: status
    time: "2025-10-27T11:31:13Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"OAuthServiceDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"SystemServiceCAConfigDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: openshift-authentication-ServiceCA
    operation: Apply
    subresource: status
    time: "2025-10-27T11:31:26Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"OpenshiftAuthenticationStaticResourcesDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: OpenshiftAuthenticationStaticResources-StaticResources
    operation: Apply
    subresource: status
    time: "2025-10-27T11:31:29Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"OAuthServerConfigObservationDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: oauth-server-ConfigObserver
    operation: Apply
    subresource: status
    time: "2025-10-27T11:31:53Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"RouterCertsDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: openshift-authentication-RouterCertsDomainValidation
    operation: Apply
    subresource: status
    time: "2025-10-27T11:31:53Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"ReadyIngressNodesAvailable"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: openshift-authentication-IngressNodesAvailable
    operation: Apply
    subresource: status
    time: "2025-10-27T11:31:56Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"WebhookAuthenticatorControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: WebhookAuthenticatorController-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-10-27T11:32:28Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"APIServicesAvailable"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"APIServicesDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: openshift-apiserver-APIService
    operation: Apply
    subresource: status
    time: "2025-10-27T11:40:02Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"ProxyConfigControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: ProxyConfigController-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-10-27T11:40:40Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"AuthConfigDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"IngressConfigDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"OAuthSystemMetadataDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: openshift-authentication-Metadata
    operation: Apply
    subresource: status
    time: "2025-10-27T11:40:40Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"CustomRouteControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: CustomRouteController-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-10-27T11:40:41Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"OAuthClientsControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: OAuthClientsController-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-10-27T11:40:41Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"OAuthConfigDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"OAuthConfigIngressDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"OAuthConfigRouteDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"OAuthConfigServiceDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"OAuthSessionSecretDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: openshift-authentication-PayloadConfig
    operation: Apply
    subresource: status
    time: "2025-10-27T11:40:52Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"OAuthServerServiceEndpointAccessibleControllerAvailable"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: OAuthServerService-EndpointAccessible
    operation: Apply
    subresource: status
    time: "2025-10-27T11:41:04Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"OAuthServerServiceEndpointAccessibleControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: OAuthServerServiceEndpointAccessibleController-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-10-27T11:41:04Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"OAuthServerServiceEndpointsEndpointAccessibleControllerAvailable"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: OAuthServerServiceEndpoints-EndpointAccessible
    operation: Apply
    subresource: status
    time: "2025-10-27T11:41:29Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"OAuthServerServiceEndpointsEndpointAccessibleControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: OAuthServerServiceEndpointsEndpointAccessibleController-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-10-27T11:41:30Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"OAuthServerRouteEndpointAccessibleControllerAvailable"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: OAuthServerRoute-EndpointAccessible
    operation: Apply
    subresource: status
    time: "2025-10-27T11:41:32Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"OAuthServerRouteEndpointAccessibleControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: OAuthServerRouteEndpointAccessibleController-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-10-27T11:41:32Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"IngressStateEndpointsDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"IngressStatePodsDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: openshift-authentication-IngressState
    operation: Apply
    subresource: status
    time: "2025-10-27T11:41:32Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"WellKnownReadyControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: WellKnownReadyController-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-10-27T11:50:47Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"WellKnownAvailable"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"WellKnownReadyControllerProgressing"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: openshift-authentication-WellKnownReady
    operation: Apply
    subresource: status
    time: "2025-10-27T11:50:47Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"APIServerDeploymentAvailable"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"APIServerDeploymentDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"APIServerDeploymentProgressing"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"APIServerWorkloadDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
        f:generations:
          k:{"group":"apps","name":"apiserver","namespace":"openshift-oauth-apiserver","resource":"deployments"}:
            .: {}
            f:group: {}
            f:lastGeneration: {}
            f:name: {}
            f:namespace: {}
            f:resource: {}
    manager: OAuthAPIServerController-Workload
    operation: Apply
    subresource: status
    time: "2025-10-27T12:37:49Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"OAuthServerDeploymentAvailable"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"OAuthServerDeploymentDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"OAuthServerDeploymentProgressing"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"OAuthServerWorkloadDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
        f:generations:
          k:{"group":"apps","name":"oauth-openshift","namespace":"openshift-authentication","resource":"deployments"}:
            .: {}
            f:group: {}
            f:lastGeneration: {}
            f:name: {}
            f:namespace: {}
            f:resource: {}
    manager: OAuthServer-Workload
    operation: Apply
    subresource: status
    time: "2025-10-29T12:21:28Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .: {}
          f:include.release.openshift.io/self-managed-high-availability: {}
          f:include.release.openshift.io/single-node-developer: {}
          f:release.openshift.io/create-only: {}
        f:ownerReferences:
          .: {}
          k:{"uid":"d36bdf59-d268-4238-afb0-5e0b21cca1a4"}: {}
      f:spec:
        .: {}
        f:logLevel: {}
        f:managementState: {}
        f:operatorLogLevel: {}
    manager: cluster-version-operator
    operation: Update
    time: "2025-10-27T11:18:22Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:spec:
        f:observedConfig:
          .: {}
          f:oauthAPIServer:
            .: {}
            f:apiServerArguments:
              .: {}
              f:api-audiences: {}
              f:cors-allowed-origins: {}
              f:etcd-servers: {}
              f:tls-cipher-suites: {}
              f:tls-min-version: {}
          f:oauthServer:
            .: {}
            f:corsAllowedOrigins: {}
            f:oauthConfig:
              .: {}
              f:assetPublicURL: {}
              f:identityProviders: {}
              f:loginURL: {}
              f:templates:
                .: {}
                f:error: {}
                f:login: {}
                f:providerSelection: {}
              f:tokenConfig:
                .: {}
                f:accessTokenMaxAgeSeconds: {}
                f:authorizeTokenMaxAgeSeconds: {}
            f:serverArguments:
              .: {}
              f:audit-log-format: {}
              f:audit-log-maxbackup: {}
              f:audit-log-maxsize: {}
              f:audit-log-path: {}
              f:audit-policy-file: {}
            f:servingInfo:
              .: {}
              f:cipherSuites: {}
              f:minTLSVersion: {}
              f:namedCertificates: {}
            f:volumesToMount:
              .: {}
              f:identityProviders: {}
        f:unsupportedConfigOverrides: {}
    manager: authentication-operator
    operation: Update
    time: "2025-10-29T12:19:40Z"
  name: cluster
  ownerReferences:
  - apiVersion: config.openshift.io/v1
    kind: ClusterVersion
    name: version
    uid: d36bdf59-d268-4238-afb0-5e0b21cca1a4
  resourceVersion: "2170900"
  uid: 66d3dd45-0b9b-4875-9ce2-222dffe6a85d
spec:
  logLevel: Normal
  managementState: Managed
  observedConfig:
    oauthAPIServer:
      apiServerArguments:
        api-audiences:
        - https://kubernetes.default.svc
        cors-allowed-origins:
        - //127\.0\.0\.1(:|$)
        - //localhost(:|$)
        etcd-servers:
        - https://10.46.248.134:2379
        - https://10.46.248.41:2379
        - https://10.46.248.42:2379
        tls-cipher-suites:
        - TLS_AES_128_GCM_SHA256
        - TLS_AES_256_GCM_SHA384
        - TLS_CHACHA20_POLY1305_SHA256
        - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
        - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
        - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
        - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
        - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
        - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
        tls-min-version: VersionTLS12
    oauthServer:
      corsAllowedOrigins:
      - //127\.0\.0\.1(:|$)
      - //localhost(:|$)
      oauthConfig:
        assetPublicURL: https://console-openshift-console.apps.bm12b-tlv2.abi.cnv-qe.rhood.us
        identityProviders:
        - challenge: true
          login: true
          mappingMethod: claim
          name: htpasswd_provider
          provider:
            apiVersion: osin.config.openshift.io/v1
            file: /var/config/user/idp/0/secret/v4-0-config-user-idp-0-file-data/htpasswd
            kind: HTPasswdPasswordIdentityProvider
        loginURL: https://api.bm12b-tlv2.abi.cnv-qe.rhood.us:6443
        templates:
          error: /var/config/system/secrets/v4-0-config-system-ocp-branding-template/errors.html
          login: /var/config/system/secrets/v4-0-config-system-ocp-branding-template/login.html
          providerSelection: /var/config/system/secrets/v4-0-config-system-ocp-branding-template/providers.html
        tokenConfig:
          accessTokenMaxAgeSeconds: 604800
          authorizeTokenMaxAgeSeconds: 300
      serverArguments:
        audit-log-format:
        - json
        audit-log-maxbackup:
        - "10"
        audit-log-maxsize:
        - "100"
        audit-log-path:
        - /var/log/oauth-server/audit.log
        audit-policy-file:
        - /var/run/configmaps/audit/audit.yaml
      servingInfo:
        cipherSuites:
        - TLS_AES_128_GCM_SHA256
        - TLS_AES_256_GCM_SHA384
        - TLS_CHACHA20_POLY1305_SHA256
        - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
        - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
        - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
        - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
        - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
        - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
        minTLSVersion: VersionTLS12
        namedCertificates:
        - certFile: /var/config/system/secrets/v4-0-config-system-router-certs/apps.bm12b-tlv2.abi.cnv-qe.rhood.us
          keyFile: /var/config/system/secrets/v4-0-config-system-router-certs/apps.bm12b-tlv2.abi.cnv-qe.rhood.us
          names:
          - '*.apps.bm12b-tlv2.abi.cnv-qe.rhood.us'
      volumesToMount:
        identityProviders: '{"v4-0-config-user-idp-0-file-data":{"name":"htpass-secret-for-cnv-tests","mountPath":"/var/config/user/idp/0/secret/v4-0-config-user-idp-0-file-data","key":"htpasswd","type":"secret"}}'
  operatorLogLevel: Normal
  unsupportedConfigOverrides: null
status:
  conditions:
  - lastTransitionTime: "2025-10-27T11:30:55Z"
    status: "False"
    type: ManagementStateDegraded
  - lastTransitionTime: "2025-10-27T11:31:56Z"
    message: ""
    reason: ""
    status: "True"
    type: ReadyIngressNodesAvailable
  - lastTransitionTime: "2025-10-27T11:30:55Z"
    reason: NoUnsupportedConfigOverrides
    status: "True"
    type: UnsupportedConfigOverridesUpgradeable
  - lastTransitionTime: "2025-10-27T11:30:55Z"
    reason: AsExpected
    status: "False"
    type: WebhookAuthenticatorCertApprover_OpenShiftAuthenticatorDegraded
  - lastTransitionTime: "2025-10-27T11:31:13Z"
    reason: AsExpected
    status: "False"
    type: RevisionControllerDegraded
  - lastTransitionTime: "2025-10-27T11:41:04Z"
    reason: AsExpected
    status: "True"
    type: OAuthServerServiceEndpointAccessibleControllerAvailable
  - lastTransitionTime: "2025-10-27T11:41:04Z"
    reason: AsExpected
    status: "False"
    type: OAuthServerServiceEndpointAccessibleControllerDegraded
  - lastTransitionTime: "2025-10-27T11:30:57Z"
    status: "False"
    type: OAuthAPIServerConfigObservationDegraded
  - lastTransitionTime: "2025-10-27T11:41:29Z"
    reason: AsExpected
    status: "True"
    type: OAuthServerServiceEndpointsEndpointAccessibleControllerAvailable
  - lastTransitionTime: "2025-10-27T11:41:30Z"
    reason: AsExpected
    status: "False"
    type: OAuthServerServiceEndpointsEndpointAccessibleControllerDegraded
  - lastTransitionTime: "2025-10-27T11:31:35Z"
    reason: AsExpected
    status: "True"
    type: APIServerDeploymentAvailable
  - lastTransitionTime: "2025-10-27T12:37:49Z"
    reason: AsExpected
    status: "False"
    type: APIServerDeploymentDegraded
  - lastTransitionTime: "2025-10-27T11:54:33Z"
    reason: AsExpected
    status: "False"
    type: APIServerDeploymentProgressing
  - lastTransitionTime: "2025-10-27T11:31:20Z"
    status: "False"
    type: APIServerWorkloadDegraded
  - lastTransitionTime: "2025-10-27T11:31:24Z"
    message: ""
    reason: ""
    status: "False"
    type: OAuthServiceDegraded
  - lastTransitionTime: "2025-10-27T11:31:26Z"
    message: ""
    reason: ""
    status: "False"
    type: SystemServiceCAConfigDegraded
  - lastTransitionTime: "2025-10-27T11:40:02Z"
    status: "True"
    type: APIServicesAvailable
  - lastTransitionTime: "2025-10-27T11:30:59Z"
    status: "False"
    type: APIServicesDegraded
  - lastTransitionTime: "2025-10-27T11:32:28Z"
    reason: AsExpected
    status: "False"
    type: WebhookAuthenticatorControllerDegraded
  - lastTransitionTime: "2025-10-27T11:31:00Z"
    status: "False"
    type: EncryptionPruneControllerDegraded
  - lastTransitionTime: "2025-10-27T11:31:00Z"
    status: "False"
    type: EncryptionMigrationControllerDegraded
  - lastTransitionTime: "2025-10-27T11:31:00Z"
    status: "False"
    type: EncryptionMigrationControllerProgressing
  - lastTransitionTime: "2025-10-27T11:31:00Z"
    status: "False"
    type: Encrypted
  - lastTransitionTime: "2025-10-27T11:31:00Z"
    status: "False"
    type: EncryptionKeyControllerDegraded
  - lastTransitionTime: "2025-10-27T11:31:00Z"
    status: "False"
    type: EncryptionStateControllerDegraded
  - lastTransitionTime: "2025-10-27T11:31:53Z"
    status: "False"
    type: OAuthServerConfigObservationDegraded
  - lastTransitionTime: "2025-10-27T11:41:32Z"
    message: ""
    reason: ""
    status: "False"
    type: IngressStateEndpointsDegraded
  - lastTransitionTime: "2025-10-27T11:31:01Z"
    message: ""
    reason: ""
    status: "False"
    type: IngressStatePodsDegraded
  - lastTransitionTime: "2025-10-27T11:31:02Z"
    status: "False"
    type: ResourceSyncControllerDegraded
  - lastTransitionTime: "2025-10-27T11:31:03Z"
    status: "False"
    type: AuditPolicyDegraded
  - lastTransitionTime: "2025-10-27T11:31:53Z"
    message: ""
    reason: AsExpected
    status: "False"
    type: RouterCertsDegraded
  - lastTransitionTime: "2025-10-27T11:31:04Z"
    reason: AsExpected
    status: "False"
    type: RouterCertsDomainValidationControllerDegraded
  - lastTransitionTime: "2025-10-27T11:31:08Z"
    message: All is well
    reason: AsExpected
    status: "False"
    type: AuthenticatorCertKeyProgressing
  - lastTransitionTime: "2025-10-27T11:31:13Z"
    message: ""
    reason: AsExpected
    status: "False"
    type: APIServerStaticResourcesDegraded
  - lastTransitionTime: "2025-10-27T11:31:29Z"
    message: ""
    reason: AsExpected
    status: "False"
    type: OpenshiftAuthenticationStaticResourcesDegraded
  - lastTransitionTime: "2025-10-27T11:50:47Z"
    reason: AsExpected
    status: "True"
    type: WellKnownAvailable
  - lastTransitionTime: "2025-10-27T11:50:47Z"
    status: "False"
    type: WellKnownReadyControllerProgressing
  - lastTransitionTime: "2025-10-27T11:41:32Z"
    reason: AsExpected
    status: "True"
    type: OAuthServerRouteEndpointAccessibleControllerAvailable
  - lastTransitionTime: "2025-10-27T11:49:15Z"
    reason: AsExpected
    status: "True"
    type: OAuthServerDeploymentAvailable
  - lastTransitionTime: "2025-10-27T12:37:47Z"
    reason: AsExpected
    status: "False"
    type: OAuthServerDeploymentDegraded
  - lastTransitionTime: "2025-10-29T12:21:28Z"
    reason: AsExpected
    status: "False"
    type: OAuthServerDeploymentProgressing
  - lastTransitionTime: "2025-10-27T11:49:15Z"
    status: "False"
    type: OAuthServerWorkloadDegraded
  - lastTransitionTime: "2025-10-27T11:40:40Z"
    reason: AsExpected
    status: "False"
    type: ProxyConfigControllerDegraded
  - lastTransitionTime: "2025-10-27T11:40:41Z"
    reason: AsExpected
    status: "False"
    type: OAuthClientsControllerDegraded
  - lastTransitionTime: "2025-10-27T11:41:32Z"
    reason: AsExpected
    status: "False"
    type: OAuthServerRouteEndpointAccessibleControllerDegraded
  - lastTransitionTime: "2025-10-27T11:40:40Z"
    message: ""
    reason: ""
    status: "False"
    type: AuthConfigDegraded
  - lastTransitionTime: "2025-10-27T11:40:40Z"
    message: ""
    reason: ""
    status: "False"
    type: IngressConfigDegraded
  - lastTransitionTime: "2025-10-27T11:40:40Z"
    message: ""
    reason: ""
    status: "False"
    type: OAuthSystemMetadataDegraded
  - lastTransitionTime: "2025-10-27T11:40:40Z"
    reason: AsExpected
    status: "False"
    type: CustomRouteControllerDegraded
  - lastTransitionTime: "2025-10-27T11:50:47Z"
    reason: AsExpected
    status: "False"
    type: WellKnownReadyControllerDegraded
  - lastTransitionTime: "2025-10-27T11:40:52Z"
    message: ""
    reason: ""
    status: "False"
    type: OAuthConfigDegraded
  - lastTransitionTime: "2025-10-27T11:40:52Z"
    message: ""
    reason: ""
    status: "False"
    type: OAuthConfigIngressDegraded
  - lastTransitionTime: "2025-10-27T11:40:52Z"
    message: ""
    reason: ""
    status: "False"
    type: OAuthConfigRouteDegraded
  - lastTransitionTime: "2025-10-27T11:40:52Z"
    message: ""
    reason: ""
    status: "False"
    type: OAuthConfigServiceDegraded
  - lastTransitionTime: "2025-10-27T11:40:52Z"
    message: ""
    reason: ""
    status: "False"
    type: OAuthSessionSecretDegraded
  generations:
  - group: apps
    lastGeneration: 6
    name: apiserver
    namespace: openshift-oauth-apiserver
    resource: deployments
  - group: apps
    lastGeneration: 7
    name: oauth-openshift
    namespace: openshift-authentication
    resource: deployments
  latestAvailableRevision: 1
