---
apiVersion: v1
items:
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      kubernetes.io/config.hash: 2702f4854d464c021023747e05c8e98a
      kubernetes.io/config.mirror: 2702f4854d464c021023747e05c8e98a
      kubernetes.io/config.seen: "2025-10-27T11:48:58.825448413Z"
      kubernetes.io/config.source: file
      openshift.io/required-scc: privileged
      openshift.io/scc: privileged
      target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
    creationTimestamp: "2025-10-27T11:49:18Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/config.hash: {}
            f:kubernetes.io/config.mirror: {}
            f:kubernetes.io/config.seen: {}
            f:kubernetes.io/config.source: {}
            f:openshift.io/required-scc: {}
            f:target.workload.openshift.io/management: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"37549cd0-66c4-482a-a2e8-bebff241e79b"}: {}
        f:spec:
          f:containers:
            k:{"name":"kube-rbac-proxy-crio"}:
              .: {}
              f:args: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":9637,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:privileged: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/kubernetes"}:
                  .: {}
                  f:mountPath: {}
                  f:mountPropagation: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/var/lib/kubelet"}:
                  .: {}
                  f:mountPath: {}
                  f:mountPropagation: {}
                  f:name: {}
                  f:readOnly: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:initContainers:
            .: {}
            k:{"name":"setup"}:
              .: {}
              f:args: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:privileged: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/var"}:
                  .: {}
                  f:mountPath: {}
                  f:mountPropagation: {}
                  f:name: {}
          f:nodeName: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"etc-kube"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"var-lib-kubelet"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
      manager: kubelet
      operation: Update
      time: "2025-10-27T11:49:18Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            .: {}
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:initContainerStatuses: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.46.248.41"}:
              .: {}
              f:ip: {}
            k:{"ip":"2620:52:0:2ef8::29"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2025-10-27T12:27:18Z"
    name: kube-rbac-proxy-crio-cnvqe-070.lab.eng.tlv2.redhat.com
    namespace: openshift-machine-config-operator
    ownerReferences:
    - apiVersion: v1
      controller: true
      kind: Node
      name: cnvqe-070.lab.eng.tlv2.redhat.com
      uid: 37549cd0-66c4-482a-a2e8-bebff241e79b
    resourceVersion: "42435"
    uid: 9b574f85-ee9d-469f-9510-722a6eb7d8fb
  spec:
    containers:
    - args:
      - --secure-listen-address=:9637
      - --config-file=/etc/kubernetes/crio-metrics-proxy.cfg
      - --client-ca-file=/etc/kubernetes/kubelet-ca.crt
      - --logtostderr=true
      - --kubeconfig=/var/lib/kubelet/kubeconfig
      - --tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
      - --tls-min-version=VersionTLS12
      - --upstream=http://127.0.0.1:9537
      - --tls-cert-file=/var/lib/kubelet/pki/kubelet-server-current.pem
      - --tls-private-key-file=/var/lib/kubelet/pki/kubelet-server-current.pem
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imagePullPolicy: IfNotPresent
      name: kube-rbac-proxy-crio
      ports:
      - containerPort: 9637
        hostPort: 9637
        protocol: TCP
      resources:
        requests:
          cpu: 20m
          memory: 50Mi
      securityContext:
        privileged: true
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/kubernetes
        mountPropagation: HostToContainer
        name: etc-kube
        readOnly: true
      - mountPath: /var/lib/kubelet
        mountPropagation: HostToContainer
        name: var-lib-kubelet
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    hostNetwork: true
    initContainers:
    - args:
      - |
        echo -n "Waiting for kubelet key and certificate to be available"
        while [ -n "$(test -e /var/lib/kubelet/pki/kubelet-server-current.pem)" ] ; do
          echo -n "."
          sleep 1
          (( tries += 1 ))
          if [[ "${tries}" -gt 10 ]]; then
            echo "Timed out waiting for kubelet key and cert."
            exit 1
          fi
        done
      command:
      - /bin/bash
      - -ec
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imagePullPolicy: IfNotPresent
      name: setup
      resources:
        requests:
          cpu: 5m
          memory: 50Mi
      securityContext:
        privileged: true
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /var
        mountPropagation: HostToContainer
        name: var-lib-kubelet
    nodeName: cnvqe-070.lab.eng.tlv2.redhat.com
    preemptionPolicy: PreemptLowerPriority
    priority: 2000000000
    priorityClassName: system-cluster-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext: {}
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoExecute
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - hostPath:
        path: /etc/kubernetes
        type: ""
      name: etc-kube
    - hostPath:
        path: /var/lib/kubelet
        type: ""
      name: var-lib-kubelet
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:14Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:14Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:18Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:18Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:10Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://d580126bc85e0d573008226a4b3a3d386cf30fd3a3768546243043a52ec07f43
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      lastState: {}
      name: kube-rbac-proxy-crio
      ready: true
      restartCount: 4
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:27:17Z"
      volumeMounts:
      - mountPath: /etc/kubernetes
        name: etc-kube
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/lib/kubelet
        name: var-lib-kubelet
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.46.248.41
    hostIPs:
    - ip: 10.46.248.41
    - ip: 2620:52:0:2ef8::29
    initContainerStatuses:
    - containerID: cri-o://1e1ba0115dbb76a7707b59e630c68830a59719c804d1c32c4d8a0ea1da4a217d
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      lastState: {}
      name: setup
      ready: true
      restartCount: 1
      started: false
      state:
        terminated:
          containerID: cri-o://1e1ba0115dbb76a7707b59e630c68830a59719c804d1c32c4d8a0ea1da4a217d
          exitCode: 0
          finishedAt: "2025-10-27T12:27:12Z"
          reason: Completed
          startedAt: "2025-10-27T12:27:12Z"
      volumeMounts:
      - mountPath: /var
        name: var-lib-kubelet
    phase: Running
    podIP: 10.46.248.41
    podIPs:
    - ip: 10.46.248.41
    - ip: 2620:52:0:2ef8::29
    qosClass: Burstable
    startTime: "2025-10-27T12:27:10Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      kubernetes.io/config.hash: 02decf6e008259a13fd52ac3c8f97e2e
      kubernetes.io/config.mirror: 02decf6e008259a13fd52ac3c8f97e2e
      kubernetes.io/config.seen: "2025-10-27T11:27:31.776944458Z"
      kubernetes.io/config.source: file
      openshift.io/required-scc: privileged
      openshift.io/scc: privileged
      target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
    creationTimestamp: "2025-10-27T11:27:41Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/config.hash: {}
            f:kubernetes.io/config.mirror: {}
            f:kubernetes.io/config.seen: {}
            f:kubernetes.io/config.source: {}
            f:openshift.io/required-scc: {}
            f:target.workload.openshift.io/management: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"57bb5833-a74c-4057-baf2-c85959c41eff"}: {}
        f:spec:
          f:containers:
            k:{"name":"kube-rbac-proxy-crio"}:
              .: {}
              f:args: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":9637,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:privileged: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/kubernetes"}:
                  .: {}
                  f:mountPath: {}
                  f:mountPropagation: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/var/lib/kubelet"}:
                  .: {}
                  f:mountPath: {}
                  f:mountPropagation: {}
                  f:name: {}
                  f:readOnly: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:initContainers:
            .: {}
            k:{"name":"setup"}:
              .: {}
              f:args: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:privileged: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/var"}:
                  .: {}
                  f:mountPath: {}
                  f:mountPropagation: {}
                  f:name: {}
          f:nodeName: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"etc-kube"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"var-lib-kubelet"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
      manager: kubelet
      operation: Update
      time: "2025-10-27T11:27:41Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            .: {}
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:initContainerStatuses: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.46.248.42"}:
              .: {}
              f:ip: {}
            k:{"ip":"2620:52:0:2ef8::2a"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2025-10-27T12:17:15Z"
    name: kube-rbac-proxy-crio-cnvqe-071.lab.eng.tlv2.redhat.com
    namespace: openshift-machine-config-operator
    ownerReferences:
    - apiVersion: v1
      controller: true
      kind: Node
      name: cnvqe-071.lab.eng.tlv2.redhat.com
      uid: 57bb5833-a74c-4057-baf2-c85959c41eff
    resourceVersion: "37289"
    uid: 07da3581-d810-4588-9e63-fb6bf1bed6de
  spec:
    containers:
    - args:
      - --secure-listen-address=:9637
      - --config-file=/etc/kubernetes/crio-metrics-proxy.cfg
      - --client-ca-file=/etc/kubernetes/kubelet-ca.crt
      - --logtostderr=true
      - --kubeconfig=/var/lib/kubelet/kubeconfig
      - --tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
      - --tls-min-version=VersionTLS12
      - --upstream=http://127.0.0.1:9537
      - --tls-cert-file=/var/lib/kubelet/pki/kubelet-server-current.pem
      - --tls-private-key-file=/var/lib/kubelet/pki/kubelet-server-current.pem
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imagePullPolicy: IfNotPresent
      name: kube-rbac-proxy-crio
      ports:
      - containerPort: 9637
        hostPort: 9637
        protocol: TCP
      resources:
        requests:
          cpu: 20m
          memory: 50Mi
      securityContext:
        privileged: true
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/kubernetes
        mountPropagation: HostToContainer
        name: etc-kube
        readOnly: true
      - mountPath: /var/lib/kubelet
        mountPropagation: HostToContainer
        name: var-lib-kubelet
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    hostNetwork: true
    initContainers:
    - args:
      - |
        echo -n "Waiting for kubelet key and certificate to be available"
        while [ -n "$(test -e /var/lib/kubelet/pki/kubelet-server-current.pem)" ] ; do
          echo -n "."
          sleep 1
          (( tries += 1 ))
          if [[ "${tries}" -gt 10 ]]; then
            echo "Timed out waiting for kubelet key and cert."
            exit 1
          fi
        done
      command:
      - /bin/bash
      - -ec
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imagePullPolicy: IfNotPresent
      name: setup
      resources:
        requests:
          cpu: 5m
          memory: 50Mi
      securityContext:
        privileged: true
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /var
        mountPropagation: HostToContainer
        name: var-lib-kubelet
    nodeName: cnvqe-071.lab.eng.tlv2.redhat.com
    preemptionPolicy: PreemptLowerPriority
    priority: 2000000000
    priorityClassName: system-cluster-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext: {}
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoExecute
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - hostPath:
        path: /etc/kubernetes
        type: ""
      name: etc-kube
    - hostPath:
        path: /var/lib/kubelet
        type: ""
      name: var-lib-kubelet
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:17:11Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:17:11Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:17:15Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:17:15Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:17:07Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://f9d943dce09f08b51567e0657ee9c7af19a4a68fb3a79866d7ccae0ed88b540a
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      lastState: {}
      name: kube-rbac-proxy-crio
      ready: true
      restartCount: 4
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:17:14Z"
      volumeMounts:
      - mountPath: /etc/kubernetes
        name: etc-kube
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/lib/kubelet
        name: var-lib-kubelet
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.46.248.42
    hostIPs:
    - ip: 10.46.248.42
    - ip: 2620:52:0:2ef8::2a
    initContainerStatuses:
    - containerID: cri-o://c0d000766a0bd7e67ca210e234b6bf74b47ec002b8f8c19010e27bef55dd99d3
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      lastState: {}
      name: setup
      ready: true
      restartCount: 1
      started: false
      state:
        terminated:
          containerID: cri-o://c0d000766a0bd7e67ca210e234b6bf74b47ec002b8f8c19010e27bef55dd99d3
          exitCode: 0
          finishedAt: "2025-10-27T12:17:09Z"
          reason: Completed
          startedAt: "2025-10-27T12:17:09Z"
      volumeMounts:
      - mountPath: /var
        name: var-lib-kubelet
    phase: Running
    podIP: 10.46.248.42
    podIPs:
    - ip: 10.46.248.42
    - ip: 2620:52:0:2ef8::2a
    qosClass: Burstable
    startTime: "2025-10-27T12:17:07Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      kubernetes.io/config.hash: 8ea55eb87eba1943ce9382ec346d6748
      kubernetes.io/config.mirror: 8ea55eb87eba1943ce9382ec346d6748
      kubernetes.io/config.seen: "2025-10-27T11:27:53.299135070Z"
      kubernetes.io/config.source: file
      openshift.io/required-scc: privileged
      openshift.io/scc: privileged
      target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
    creationTimestamp: "2025-10-27T11:27:57Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:kubernetes.io/config.hash: {}
            f:kubernetes.io/config.mirror: {}
            f:kubernetes.io/config.seen: {}
            f:kubernetes.io/config.source: {}
            f:openshift.io/required-scc: {}
            f:target.workload.openshift.io/management: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"a9fb40ce-a7c8-4ab3-8b5b-81265dd585ae"}: {}
        f:spec:
          f:containers:
            k:{"name":"kube-rbac-proxy-crio"}:
              .: {}
              f:args: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":9637,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:privileged: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/kubernetes"}:
                  .: {}
                  f:mountPath: {}
                  f:mountPropagation: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/var/lib/kubelet"}:
                  .: {}
                  f:mountPath: {}
                  f:mountPropagation: {}
                  f:name: {}
                  f:readOnly: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:initContainers:
            .: {}
            k:{"name":"setup"}:
              .: {}
              f:args: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:privileged: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/var"}:
                  .: {}
                  f:mountPath: {}
                  f:mountPropagation: {}
                  f:name: {}
          f:nodeName: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"etc-kube"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"var-lib-kubelet"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
      manager: kubelet
      operation: Update
      time: "2025-10-27T11:27:57Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            .: {}
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodScheduled"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:initContainerStatuses: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.46.248.134"}:
              .: {}
              f:ip: {}
            k:{"ip":"2620:52:0:2ef8::86"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2025-10-27T12:37:17Z"
    name: kube-rbac-proxy-crio-cnvqe-072.lab.eng.tlv2.redhat.com
    namespace: openshift-machine-config-operator
    ownerReferences:
    - apiVersion: v1
      controller: true
      kind: Node
      name: cnvqe-072.lab.eng.tlv2.redhat.com
      uid: a9fb40ce-a7c8-4ab3-8b5b-81265dd585ae
    resourceVersion: "48462"
    uid: 7edea67f-2912-4a1e-bfff-e0f74c0f8a49
  spec:
    containers:
    - args:
      - --secure-listen-address=:9637
      - --config-file=/etc/kubernetes/crio-metrics-proxy.cfg
      - --client-ca-file=/etc/kubernetes/kubelet-ca.crt
      - --logtostderr=true
      - --kubeconfig=/var/lib/kubelet/kubeconfig
      - --tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
      - --tls-min-version=VersionTLS12
      - --upstream=http://127.0.0.1:9537
      - --tls-cert-file=/var/lib/kubelet/pki/kubelet-server-current.pem
      - --tls-private-key-file=/var/lib/kubelet/pki/kubelet-server-current.pem
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imagePullPolicy: IfNotPresent
      name: kube-rbac-proxy-crio
      ports:
      - containerPort: 9637
        hostPort: 9637
        protocol: TCP
      resources:
        requests:
          cpu: 20m
          memory: 50Mi
      securityContext:
        privileged: true
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/kubernetes
        mountPropagation: HostToContainer
        name: etc-kube
        readOnly: true
      - mountPath: /var/lib/kubelet
        mountPropagation: HostToContainer
        name: var-lib-kubelet
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    hostNetwork: true
    initContainers:
    - args:
      - |
        echo -n "Waiting for kubelet key and certificate to be available"
        while [ -n "$(test -e /var/lib/kubelet/pki/kubelet-server-current.pem)" ] ; do
          echo -n "."
          sleep 1
          (( tries += 1 ))
          if [[ "${tries}" -gt 10 ]]; then
            echo "Timed out waiting for kubelet key and cert."
            exit 1
          fi
        done
      command:
      - /bin/bash
      - -ec
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imagePullPolicy: IfNotPresent
      name: setup
      resources:
        requests:
          cpu: 5m
          memory: 50Mi
      securityContext:
        privileged: true
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /var
        mountPropagation: HostToContainer
        name: var-lib-kubelet
    nodeName: cnvqe-072.lab.eng.tlv2.redhat.com
    preemptionPolicy: PreemptLowerPriority
    priority: 2000000000
    priorityClassName: system-cluster-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext: {}
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoExecute
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - hostPath:
        path: /etc/kubernetes
        type: ""
      name: etc-kube
    - hostPath:
        path: /var/lib/kubelet
        type: ""
      name: var-lib-kubelet
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:37:14Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:37:14Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:37:17Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:37:17Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:37:12Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://fcd2a3a6e1d779046c6d9b53f94bf59e4719a5e4a13e19d24c0c1ce91c15880c
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      lastState: {}
      name: kube-rbac-proxy-crio
      ready: true
      restartCount: 3
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:37:16Z"
      volumeMounts:
      - mountPath: /etc/kubernetes
        name: etc-kube
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/lib/kubelet
        name: var-lib-kubelet
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.46.248.134
    hostIPs:
    - ip: 10.46.248.134
    - ip: 2620:52:0:2ef8::86
    initContainerStatuses:
    - containerID: cri-o://ef60b72621954a76e1f2ccb1f778e070ce7542483ba59635c3a6af67bf92a287
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      lastState: {}
      name: setup
      ready: true
      restartCount: 1
      started: false
      state:
        terminated:
          containerID: cri-o://ef60b72621954a76e1f2ccb1f778e070ce7542483ba59635c3a6af67bf92a287
          exitCode: 0
          finishedAt: "2025-10-27T12:37:13Z"
          reason: Completed
          startedAt: "2025-10-27T12:37:13Z"
      volumeMounts:
      - mountPath: /var
        name: var-lib-kubelet
    phase: Running
    podIP: 10.46.248.134
    podIPs:
    - ip: 10.46.248.134
    - ip: 2620:52:0:2ef8::86
    qosClass: Burstable
    startTime: "2025-10-27T12:37:12Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.128.0.35/23","fd02:0:0:1::23/64"],"mac_address":"0a:58:0a:80:00:23","gateway_ips":["10.128.0.1","fd02:0:0:1::1"],"routes":[{"dest":"10.128.0.0/14","nextHop":"10.128.0.1"},{"dest":"172.30.0.0/16","nextHop":"10.128.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.128.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.128.0.1"},{"dest":"fd02::/48","nextHop":"fd02:0:0:1::1"},{"dest":"fd03::/112","nextHop":"fd02:0:0:1::1"},{"dest":"fd69::5/128","nextHop":"fd02:0:0:1::1"},{"dest":"fd98::/64","nextHop":"fd02:0:0:1::1"}],"role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.128.0.35",
                "fd02:0:0:1::23"
            ],
            "mac": "0a:58:0a:80:00:23",
            "default": true,
            "dns": {}
        }]
      openshift.io/required-scc: restricted-v2
      openshift.io/scc: restricted-v2
      seccomp.security.alpha.kubernetes.io/pod: runtime/default
    creationTimestamp: "2025-10-27T12:17:49Z"
    generateName: machine-config-controller-5754f59656-
    labels:
      k8s-app: machine-config-controller
      pod-template-hash: 5754f59656
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.ovn.org/pod-networks: {}
      manager: cnvqe-071.lab.eng.tlv2.redhat.com
      operation: Update
      subresource: status
      time: "2025-10-27T12:17:49Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:openshift.io/required-scc: {}
            f:target.workload.openshift.io/management: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:k8s-app: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"1db99c27-4995-4326-bcb4-311167557090"}: {}
        f:spec:
          f:containers:
            k:{"name":"kube-rbac-proxy"}:
              .: {}
              f:args: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":9001,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/kube-rbac-proxy"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/tls/private"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
            k:{"name":"machine-config-controller"}:
              .: {}
              f:args: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"mcc-auth-proxy-config"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
              f:name: {}
            k:{"name":"proxy-tls"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2025-10-27T12:17:49Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2025-10-27T12:17:51Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.128.0.35"}:
              .: {}
              f:ip: {}
            k:{"ip":"fd02:0:0:1::23"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2025-10-27T12:17:53Z"
    name: machine-config-controller-5754f59656-sbhhs
    namespace: openshift-machine-config-operator
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: machine-config-controller-5754f59656
      uid: 1db99c27-4995-4326-bcb4-311167557090
    resourceVersion: "38953"
    uid: a774e263-dbc0-4d93-9e20-31b42377ac5d
  spec:
    containers:
    - args:
      - start
      - --resourcelock-namespace=openshift-machine-config-operator
      - --v=2
      - --payload-version=4.19.17
      command:
      - /usr/bin/machine-config-controller
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cfabc9238540d5bddc9eb17db81bfc5aabf0fbdfe9958689269f3381100b8615
      imagePullPolicy: IfNotPresent
      name: machine-config-controller
      resources:
        requests:
          cpu: 20m
          memory: 50Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        runAsNonRoot: true
        runAsUser: 1000300000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-bwbwv
        readOnly: true
    - args:
      - --secure-listen-address=0.0.0.0:9001
      - --config-file=/etc/kube-rbac-proxy/config-file.yaml
      - --tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
      - --tls-min-version=VersionTLS12
      - --upstream=http://127.0.0.1:8797
      - --logtostderr=true
      - --tls-cert-file=/etc/tls/private/tls.crt
      - --tls-private-key-file=/etc/tls/private/tls.key
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imagePullPolicy: IfNotPresent
      name: kube-rbac-proxy
      ports:
      - containerPort: 9001
        name: metrics
        protocol: TCP
      resources:
        requests:
          cpu: 20m
          memory: 50Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        runAsNonRoot: true
        runAsUser: 1000300000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/tls/private
        name: proxy-tls
      - mountPath: /etc/kube-rbac-proxy
        name: mcc-auth-proxy-config
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-bwbwv
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    nodeName: cnvqe-071.lab.eng.tlv2.redhat.com
    nodeSelector:
      node-role.kubernetes.io/master: ""
    preemptionPolicy: PreemptLowerPriority
    priority: 2000000000
    priorityClassName: system-cluster-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1000300000
      seLinuxOptions:
        level: s0:c17,c14
      seccompProfile:
        type: RuntimeDefault
    serviceAccount: machine-config-controller
    serviceAccountName: machine-config-controller
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoSchedule
      key: node-role.kubernetes.io/master
      operator: Exists
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 120
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
      tolerationSeconds: 120
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - name: proxy-tls
      secret:
        defaultMode: 420
        secretName: mcc-proxy-tls
    - configMap:
        defaultMode: 420
        name: kube-rbac-proxy
      name: mcc-auth-proxy-config
    - name: kube-api-access-bwbwv
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:17:53Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:17:49Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:17:53Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:17:53Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:17:49Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://d480b520dfd1cf5f629b76d043a544f2b32663b96ca1fb986c4624f9bfdbdcdc
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      lastState: {}
      name: kube-rbac-proxy
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:17:52Z"
      volumeMounts:
      - mountPath: /etc/tls/private
        name: proxy-tls
      - mountPath: /etc/kube-rbac-proxy
        name: mcc-auth-proxy-config
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-bwbwv
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://508bfbe811876d621a432bef30ad511902a8295463b73c3461ed3c9fd35cc82a
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cfabc9238540d5bddc9eb17db81bfc5aabf0fbdfe9958689269f3381100b8615
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cfabc9238540d5bddc9eb17db81bfc5aabf0fbdfe9958689269f3381100b8615
      lastState: {}
      name: machine-config-controller
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:17:51Z"
      volumeMounts:
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-bwbwv
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.46.248.42
    hostIPs:
    - ip: 10.46.248.42
    - ip: 2620:52:0:2ef8::2a
    phase: Running
    podIP: 10.128.0.35
    podIPs:
    - ip: 10.128.0.35
    - ip: fd02:0:0:1::23
    qosClass: Burstable
    startTime: "2025-10-27T12:17:49Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      openshift.io/required-scc: privileged
      openshift.io/scc: privileged
    creationTimestamp: "2025-10-27T11:31:38Z"
    generateName: machine-config-daemon-
    labels:
      controller-revision-hash: 7656b48479
      k8s-app: machine-config-daemon
      pod-template-generation: "1"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:openshift.io/required-scc: {}
            f:target.workload.openshift.io/management: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:controller-revision-hash: {}
            f:k8s-app: {}
            f:pod-template-generation: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"676b4372-07df-4e11-a123-0040b94d464c"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
          f:containers:
            k:{"name":"kube-rbac-proxy"}:
              .: {}
              f:args: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":9001,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/kube-rbac-proxy"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/tls/private"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
            k:{"name":"machine-config-daemon"}:
              .: {}
              f:args: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"NODE_NAME"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":8798,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:privileged: {}
                f:readOnlyRootFilesystem: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/rootfs"}:
                  .: {}
                  f:mountPath: {}
                  f:mountPropagation: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:hostPID: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"mcd-auth-proxy-config"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
              f:name: {}
            k:{"name":"proxy-tls"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"rootfs"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2025-10-27T11:31:38Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.46.248.42"}:
              .: {}
              f:ip: {}
            k:{"ip":"2620:52:0:2ef8::2a"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2025-10-27T12:17:15Z"
    name: machine-config-daemon-ddtkd
    namespace: openshift-machine-config-operator
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: DaemonSet
      name: machine-config-daemon
      uid: 676b4372-07df-4e11-a123-0040b94d464c
    resourceVersion: "37281"
    uid: cab4cb60-0af7-441a-bb59-66c979b53e02
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchFields:
            - key: metadata.name
              operator: In
              values:
              - cnvqe-071.lab.eng.tlv2.redhat.com
    containers:
    - args:
      - start
      - --payload-version=4.19.17
      command:
      - /usr/bin/machine-config-daemon
      env:
      - name: NODE_NAME
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: spec.nodeName
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cfabc9238540d5bddc9eb17db81bfc5aabf0fbdfe9958689269f3381100b8615
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 3
        httpGet:
          host: 127.0.0.1
          path: /health
          port: 8798
          scheme: HTTP
        initialDelaySeconds: 120
        periodSeconds: 30
        successThreshold: 1
        timeoutSeconds: 1
      name: machine-config-daemon
      ports:
      - containerPort: 8798
        hostPort: 8798
        name: health
        protocol: TCP
      resources:
        requests:
          cpu: 20m
          memory: 50Mi
      securityContext:
        privileged: true
        readOnlyRootFilesystem: false
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /rootfs
        mountPropagation: HostToContainer
        name: rootfs
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-fqx28
        readOnly: true
    - args:
      - --secure-listen-address=0.0.0.0:9001
      - --config-file=/etc/kube-rbac-proxy/config-file.yaml
      - --tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
      - --tls-min-version=VersionTLS12
      - --upstream=http://127.0.0.1:8797
      - --logtostderr=true
      - --tls-cert-file=/etc/tls/private/tls.crt
      - --tls-private-key-file=/etc/tls/private/tls.key
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imagePullPolicy: IfNotPresent
      name: kube-rbac-proxy
      ports:
      - containerPort: 9001
        hostPort: 9001
        name: metrics
        protocol: TCP
      resources:
        requests:
          cpu: 20m
          memory: 50Mi
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/tls/private
        name: proxy-tls
      - mountPath: /etc/kube-rbac-proxy
        name: mcd-auth-proxy-config
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-fqx28
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    hostNetwork: true
    hostPID: true
    nodeName: cnvqe-071.lab.eng.tlv2.redhat.com
    nodeSelector:
      kubernetes.io/os: linux
    preemptionPolicy: PreemptLowerPriority
    priority: 2000001000
    priorityClassName: system-node-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext: {}
    serviceAccount: machine-config-daemon
    serviceAccountName: machine-config-daemon
    terminationGracePeriodSeconds: 600
    tolerations:
    - operator: Exists
    volumes:
    - hostPath:
        path: /
        type: ""
      name: rootfs
    - name: proxy-tls
      secret:
        defaultMode: 420
        secretName: proxy-tls
    - configMap:
        defaultMode: 420
        name: kube-rbac-proxy
      name: mcd-auth-proxy-config
    - name: kube-api-access-fqx28
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:17:15Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T11:31:38Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:17:15Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:17:15Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T11:31:38Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://79a85ca061f9e6abf7ae6e59c85d3f33844a70ec11c4e11c54d787f4d9bd7736
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      lastState: {}
      name: kube-rbac-proxy
      ready: true
      restartCount: 1
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:17:15Z"
      volumeMounts:
      - mountPath: /etc/tls/private
        name: proxy-tls
      - mountPath: /etc/kube-rbac-proxy
        name: mcd-auth-proxy-config
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-fqx28
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://70df2042c5d2c21ba97edeb22fad6a515302b7be74a1f5a65bd5b8e62624bc18
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cfabc9238540d5bddc9eb17db81bfc5aabf0fbdfe9958689269f3381100b8615
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cfabc9238540d5bddc9eb17db81bfc5aabf0fbdfe9958689269f3381100b8615
      lastState: {}
      name: machine-config-daemon
      ready: true
      restartCount: 2
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:17:12Z"
      volumeMounts:
      - mountPath: /rootfs
        name: rootfs
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-fqx28
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.46.248.42
    hostIPs:
    - ip: 10.46.248.42
    - ip: 2620:52:0:2ef8::2a
    phase: Running
    podIP: 10.46.248.42
    podIPs:
    - ip: 10.46.248.42
    - ip: 2620:52:0:2ef8::2a
    qosClass: Burstable
    startTime: "2025-10-27T11:31:38Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      openshift.io/required-scc: privileged
      openshift.io/scc: privileged
    creationTimestamp: "2025-10-27T11:31:38Z"
    generateName: machine-config-daemon-
    labels:
      controller-revision-hash: 7656b48479
      k8s-app: machine-config-daemon
      pod-template-generation: "1"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:openshift.io/required-scc: {}
            f:target.workload.openshift.io/management: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:controller-revision-hash: {}
            f:k8s-app: {}
            f:pod-template-generation: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"676b4372-07df-4e11-a123-0040b94d464c"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
          f:containers:
            k:{"name":"kube-rbac-proxy"}:
              .: {}
              f:args: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":9001,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/kube-rbac-proxy"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/tls/private"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
            k:{"name":"machine-config-daemon"}:
              .: {}
              f:args: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"NODE_NAME"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":8798,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:privileged: {}
                f:readOnlyRootFilesystem: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/rootfs"}:
                  .: {}
                  f:mountPath: {}
                  f:mountPropagation: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:hostPID: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"mcd-auth-proxy-config"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
              f:name: {}
            k:{"name":"proxy-tls"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"rootfs"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2025-10-27T11:31:38Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.46.248.134"}:
              .: {}
              f:ip: {}
            k:{"ip":"2620:52:0:2ef8::86"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2025-10-27T12:37:21Z"
    name: machine-config-daemon-pmfq5
    namespace: openshift-machine-config-operator
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: DaemonSet
      name: machine-config-daemon
      uid: 676b4372-07df-4e11-a123-0040b94d464c
    resourceVersion: "48553"
    uid: ce77c234-51d2-48f5-893a-3593b2f1a146
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchFields:
            - key: metadata.name
              operator: In
              values:
              - cnvqe-072.lab.eng.tlv2.redhat.com
    containers:
    - args:
      - start
      - --payload-version=4.19.17
      command:
      - /usr/bin/machine-config-daemon
      env:
      - name: NODE_NAME
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: spec.nodeName
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cfabc9238540d5bddc9eb17db81bfc5aabf0fbdfe9958689269f3381100b8615
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 3
        httpGet:
          host: 127.0.0.1
          path: /health
          port: 8798
          scheme: HTTP
        initialDelaySeconds: 120
        periodSeconds: 30
        successThreshold: 1
        timeoutSeconds: 1
      name: machine-config-daemon
      ports:
      - containerPort: 8798
        hostPort: 8798
        name: health
        protocol: TCP
      resources:
        requests:
          cpu: 20m
          memory: 50Mi
      securityContext:
        privileged: true
        readOnlyRootFilesystem: false
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /rootfs
        mountPropagation: HostToContainer
        name: rootfs
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-78fsr
        readOnly: true
    - args:
      - --secure-listen-address=0.0.0.0:9001
      - --config-file=/etc/kube-rbac-proxy/config-file.yaml
      - --tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
      - --tls-min-version=VersionTLS12
      - --upstream=http://127.0.0.1:8797
      - --logtostderr=true
      - --tls-cert-file=/etc/tls/private/tls.crt
      - --tls-private-key-file=/etc/tls/private/tls.key
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imagePullPolicy: IfNotPresent
      name: kube-rbac-proxy
      ports:
      - containerPort: 9001
        hostPort: 9001
        name: metrics
        protocol: TCP
      resources:
        requests:
          cpu: 20m
          memory: 50Mi
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/tls/private
        name: proxy-tls
      - mountPath: /etc/kube-rbac-proxy
        name: mcd-auth-proxy-config
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-78fsr
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    hostNetwork: true
    hostPID: true
    nodeName: cnvqe-072.lab.eng.tlv2.redhat.com
    nodeSelector:
      kubernetes.io/os: linux
    preemptionPolicy: PreemptLowerPriority
    priority: 2000001000
    priorityClassName: system-node-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext: {}
    serviceAccount: machine-config-daemon
    serviceAccountName: machine-config-daemon
    terminationGracePeriodSeconds: 600
    tolerations:
    - operator: Exists
    volumes:
    - hostPath:
        path: /
        type: ""
      name: rootfs
    - name: proxy-tls
      secret:
        defaultMode: 420
        secretName: proxy-tls
    - configMap:
        defaultMode: 420
        name: kube-rbac-proxy
      name: mcd-auth-proxy-config
    - name: kube-api-access-78fsr
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:37:21Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T11:31:38Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:37:21Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:37:21Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T11:31:38Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://fb48fceaef7a0572b1133452760e9f1acda19b3e6b6cf7d9763cf59aeff1e3bb
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      lastState: {}
      name: kube-rbac-proxy
      ready: true
      restartCount: 1
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:37:19Z"
      volumeMounts:
      - mountPath: /etc/tls/private
        name: proxy-tls
      - mountPath: /etc/kube-rbac-proxy
        name: mcd-auth-proxy-config
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-78fsr
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://10b4d948c37c9117c0a441544ee784d0ebe486bdc1a45bd564f1a5fcfe68bd84
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cfabc9238540d5bddc9eb17db81bfc5aabf0fbdfe9958689269f3381100b8615
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cfabc9238540d5bddc9eb17db81bfc5aabf0fbdfe9958689269f3381100b8615
      lastState: {}
      name: machine-config-daemon
      ready: true
      restartCount: 1
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:37:15Z"
      volumeMounts:
      - mountPath: /rootfs
        name: rootfs
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-78fsr
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.46.248.134
    hostIPs:
    - ip: 10.46.248.134
    - ip: 2620:52:0:2ef8::86
    phase: Running
    podIP: 10.46.248.134
    podIPs:
    - ip: 10.46.248.134
    - ip: 2620:52:0:2ef8::86
    qosClass: Burstable
    startTime: "2025-10-27T11:31:38Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      openshift.io/required-scc: privileged
      openshift.io/scc: privileged
    creationTimestamp: "2025-10-27T11:49:11Z"
    generateName: machine-config-daemon-
    labels:
      controller-revision-hash: 7656b48479
      k8s-app: machine-config-daemon
      pod-template-generation: "1"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:openshift.io/required-scc: {}
            f:target.workload.openshift.io/management: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:controller-revision-hash: {}
            f:k8s-app: {}
            f:pod-template-generation: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"676b4372-07df-4e11-a123-0040b94d464c"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
          f:containers:
            k:{"name":"kube-rbac-proxy"}:
              .: {}
              f:args: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":9001,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/kube-rbac-proxy"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/tls/private"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
            k:{"name":"machine-config-daemon"}:
              .: {}
              f:args: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"NODE_NAME"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":8798,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:privileged: {}
                f:readOnlyRootFilesystem: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/rootfs"}:
                  .: {}
                  f:mountPath: {}
                  f:mountPropagation: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:hostPID: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"mcd-auth-proxy-config"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
              f:name: {}
            k:{"name":"proxy-tls"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"rootfs"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2025-10-27T11:49:11Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.46.248.41"}:
              .: {}
              f:ip: {}
            k:{"ip":"2620:52:0:2ef8::29"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2025-10-27T12:27:19Z"
    name: machine-config-daemon-pnfdm
    namespace: openshift-machine-config-operator
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: DaemonSet
      name: machine-config-daemon
      uid: 676b4372-07df-4e11-a123-0040b94d464c
    resourceVersion: "42493"
    uid: 462f5696-4048-4b66-a8a8-caaa634988ed
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchFields:
            - key: metadata.name
              operator: In
              values:
              - cnvqe-070.lab.eng.tlv2.redhat.com
    containers:
    - args:
      - start
      - --payload-version=4.19.17
      command:
      - /usr/bin/machine-config-daemon
      env:
      - name: NODE_NAME
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: spec.nodeName
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cfabc9238540d5bddc9eb17db81bfc5aabf0fbdfe9958689269f3381100b8615
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 3
        httpGet:
          host: 127.0.0.1
          path: /health
          port: 8798
          scheme: HTTP
        initialDelaySeconds: 120
        periodSeconds: 30
        successThreshold: 1
        timeoutSeconds: 1
      name: machine-config-daemon
      ports:
      - containerPort: 8798
        hostPort: 8798
        name: health
        protocol: TCP
      resources:
        requests:
          cpu: 20m
          memory: 50Mi
      securityContext:
        privileged: true
        readOnlyRootFilesystem: false
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /rootfs
        mountPropagation: HostToContainer
        name: rootfs
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-wgmrb
        readOnly: true
    - args:
      - --secure-listen-address=0.0.0.0:9001
      - --config-file=/etc/kube-rbac-proxy/config-file.yaml
      - --tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
      - --tls-min-version=VersionTLS12
      - --upstream=http://127.0.0.1:8797
      - --logtostderr=true
      - --tls-cert-file=/etc/tls/private/tls.crt
      - --tls-private-key-file=/etc/tls/private/tls.key
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imagePullPolicy: IfNotPresent
      name: kube-rbac-proxy
      ports:
      - containerPort: 9001
        hostPort: 9001
        name: metrics
        protocol: TCP
      resources:
        requests:
          cpu: 20m
          memory: 50Mi
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/tls/private
        name: proxy-tls
      - mountPath: /etc/kube-rbac-proxy
        name: mcd-auth-proxy-config
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-wgmrb
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    hostNetwork: true
    hostPID: true
    imagePullSecrets:
    - name: machine-config-daemon-dockercfg-stnss
    nodeName: cnvqe-070.lab.eng.tlv2.redhat.com
    nodeSelector:
      kubernetes.io/os: linux
    preemptionPolicy: PreemptLowerPriority
    priority: 2000001000
    priorityClassName: system-node-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext: {}
    serviceAccount: machine-config-daemon
    serviceAccountName: machine-config-daemon
    terminationGracePeriodSeconds: 600
    tolerations:
    - operator: Exists
    volumes:
    - hostPath:
        path: /
        type: ""
      name: rootfs
    - name: proxy-tls
      secret:
        defaultMode: 420
        secretName: proxy-tls
    - configMap:
        defaultMode: 420
        name: kube-rbac-proxy
      name: mcd-auth-proxy-config
    - name: kube-api-access-wgmrb
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:19Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T11:49:11Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:19Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:19Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T11:49:11Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://abc59b19dea74cbd92896f9962554eda3ba2839f168d4bd89a4612d301f0e16e
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      lastState: {}
      name: kube-rbac-proxy
      ready: true
      restartCount: 1
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:27:18Z"
      volumeMounts:
      - mountPath: /etc/tls/private
        name: proxy-tls
      - mountPath: /etc/kube-rbac-proxy
        name: mcd-auth-proxy-config
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-wgmrb
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://f0657dc68765a0007088cb2d3ccbce78d669b817b4edec8eb22db1ef0d5aaceb
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cfabc9238540d5bddc9eb17db81bfc5aabf0fbdfe9958689269f3381100b8615
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cfabc9238540d5bddc9eb17db81bfc5aabf0fbdfe9958689269f3381100b8615
      lastState: {}
      name: machine-config-daemon
      ready: true
      restartCount: 1
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:27:15Z"
      volumeMounts:
      - mountPath: /rootfs
        name: rootfs
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-wgmrb
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.46.248.41
    hostIPs:
    - ip: 10.46.248.41
    - ip: 2620:52:0:2ef8::29
    phase: Running
    podIP: 10.46.248.41
    podIPs:
    - ip: 10.46.248.41
    - ip: 2620:52:0:2ef8::29
    qosClass: Burstable
    startTime: "2025-10-27T11:49:11Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.130.0.55/23","fd02:0:0:3::37/64"],"mac_address":"0a:58:0a:82:00:37","gateway_ips":["10.130.0.1","fd02:0:0:3::1"],"routes":[{"dest":"10.128.0.0/14","nextHop":"10.130.0.1"},{"dest":"172.30.0.0/16","nextHop":"10.130.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.130.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.130.0.1"},{"dest":"fd02::/48","nextHop":"fd02:0:0:3::1"},{"dest":"fd03::/112","nextHop":"fd02:0:0:3::1"},{"dest":"fd69::5/128","nextHop":"fd02:0:0:3::1"},{"dest":"fd98::/64","nextHop":"fd02:0:0:3::1"}],"role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.130.0.55",
                "fd02:0:0:3::37"
            ],
            "mac": "0a:58:0a:82:00:37",
            "default": true,
            "dns": {}
        }]
      openshift.io/required-scc: anyuid
      openshift.io/scc: anyuid
    creationTimestamp: "2025-10-27T12:28:00Z"
    generateName: machine-config-operator-749d655674-
    labels:
      k8s-app: machine-config-operator
      pod-template-hash: 749d655674
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.ovn.org/pod-networks: {}
      manager: cnvqe-070.lab.eng.tlv2.redhat.com
      operation: Update
      subresource: status
      time: "2025-10-27T12:28:00Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:openshift.io/required-scc: {}
            f:target.workload.openshift.io/management: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:k8s-app: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"3a26c1db-84da-4b1d-8c4c-83422f06716a"}: {}
        f:spec:
          f:containers:
            k:{"name":"kube-rbac-proxy"}:
              .: {}
              f:args: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":9001,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/kube-rbac-proxy"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/tls/private"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
            k:{"name":"machine-config-operator"}:
              .: {}
              f:args: {}
              f:env:
                .: {}
                k:{"name":"RELEASE_VERSION"}:
                  .: {}
                  f:name: {}
                  f:value: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/mco/images"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext:
            .: {}
            f:runAsNonRoot: {}
            f:runAsUser: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"auth-proxy-config"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
              f:name: {}
            k:{"name":"images"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
              f:name: {}
            k:{"name":"proxy-tls"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2025-10-27T12:28:00Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2025-10-27T12:28:04Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.130.0.55"}:
              .: {}
              f:ip: {}
            k:{"ip":"fd02:0:0:3::37"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2025-10-27T12:28:07Z"
    name: machine-config-operator-749d655674-pxt4f
    namespace: openshift-machine-config-operator
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: machine-config-operator-749d655674
      uid: 3a26c1db-84da-4b1d-8c4c-83422f06716a
    resourceVersion: "45498"
    uid: 8eef7c61-5aa2-4447-a1f3-099f224fdd9b
  spec:
    containers:
    - args:
      - start
      - --images-json=/etc/mco/images/images.json
      - --payload-version=4.19.17
      - --operator-image=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cfabc9238540d5bddc9eb17db81bfc5aabf0fbdfe9958689269f3381100b8615
      env:
      - name: RELEASE_VERSION
        value: 4.19.17
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cfabc9238540d5bddc9eb17db81bfc5aabf0fbdfe9958689269f3381100b8615
      imagePullPolicy: IfNotPresent
      name: machine-config-operator
      resources:
        requests:
          cpu: 20m
          memory: 50Mi
      securityContext:
        capabilities:
          drop:
          - MKNOD
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/mco/images
        name: images
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-kkbtk
        readOnly: true
    - args:
      - --secure-listen-address=0.0.0.0:9001
      - --config-file=/etc/kube-rbac-proxy/config-file.yaml
      - --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
      - --upstream=http://127.0.0.1:8797
      - --logtostderr=true
      - --tls-cert-file=/etc/tls/private/tls.crt
      - --tls-private-key-file=/etc/tls/private/tls.key
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imagePullPolicy: IfNotPresent
      name: kube-rbac-proxy
      ports:
      - containerPort: 9001
        name: metrics
        protocol: TCP
      resources:
        requests:
          cpu: 20m
          memory: 50Mi
      securityContext:
        capabilities:
          drop:
          - MKNOD
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/tls/private
        name: proxy-tls
      - mountPath: /etc/kube-rbac-proxy
        name: auth-proxy-config
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-kkbtk
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    nodeName: cnvqe-070.lab.eng.tlv2.redhat.com
    nodeSelector:
      node-role.kubernetes.io/master: ""
    preemptionPolicy: PreemptLowerPriority
    priority: 2000000000
    priorityClassName: system-cluster-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      runAsNonRoot: true
      runAsUser: 65534
      seLinuxOptions:
        level: s0:c17,c14
    serviceAccount: machine-config-operator
    serviceAccountName: machine-config-operator
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoSchedule
      key: node-role.kubernetes.io/master
      operator: Exists
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 120
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
      tolerationSeconds: 120
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - configMap:
        defaultMode: 420
        name: machine-config-operator-images
      name: images
    - name: proxy-tls
      secret:
        defaultMode: 420
        secretName: mco-proxy-tls
    - configMap:
        defaultMode: 420
        name: kube-rbac-proxy
      name: auth-proxy-config
    - name: kube-api-access-kkbtk
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:28:07Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:28:00Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:28:07Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:28:07Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:28:00Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://e3a2c2d268b5419969d7a3fb28a22338b31efbb73c6e392521cd1f49b03bc0c9
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bded7d9e3f796c4a84b78302430d3dd93ddce089074cb8fc044c0e17f0442c00
      lastState: {}
      name: kube-rbac-proxy
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:28:07Z"
      volumeMounts:
      - mountPath: /etc/tls/private
        name: proxy-tls
      - mountPath: /etc/kube-rbac-proxy
        name: auth-proxy-config
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-kkbtk
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://a4ca791f33ca891782fed8589ee73e75a31d93078bb5cef7dd6bd189272487b4
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cfabc9238540d5bddc9eb17db81bfc5aabf0fbdfe9958689269f3381100b8615
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cfabc9238540d5bddc9eb17db81bfc5aabf0fbdfe9958689269f3381100b8615
      lastState: {}
      name: machine-config-operator
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:28:06Z"
      volumeMounts:
      - mountPath: /etc/mco/images
        name: images
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-kkbtk
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.46.248.41
    hostIPs:
    - ip: 10.46.248.41
    - ip: 2620:52:0:2ef8::29
    phase: Running
    podIP: 10.130.0.55
    podIPs:
    - ip: 10.130.0.55
    - ip: fd02:0:0:3::37
    qosClass: Burstable
    startTime: "2025-10-27T12:28:00Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      openshift.io/required-scc: hostnetwork
      openshift.io/scc: hostnetwork
    creationTimestamp: "2025-10-27T11:49:43Z"
    generateName: machine-config-server-
    labels:
      controller-revision-hash: 5c6b596d97
      k8s-app: machine-config-server
      pod-template-generation: "1"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:openshift.io/required-scc: {}
            f:target.workload.openshift.io/management: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:controller-revision-hash: {}
            f:k8s-app: {}
            f:pod-template-generation: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"dfe45405-5850-44f2-a332-1359ad998baf"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
          f:containers:
            k:{"name":"machine-config-server"}:
              .: {}
              f:args: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/mcs/bootstrap-token"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/ssl/mcs"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"certs"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"node-bootstrap-token"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2025-10-27T11:49:43Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.46.248.41"}:
              .: {}
              f:ip: {}
            k:{"ip":"2620:52:0:2ef8::29"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2025-10-27T12:27:16Z"
    name: machine-config-server-9svdm
    namespace: openshift-machine-config-operator
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: DaemonSet
      name: machine-config-server
      uid: dfe45405-5850-44f2-a332-1359ad998baf
    resourceVersion: "42383"
    uid: 0f8beb8e-3125-4ad5-ad1b-b98b70a59b1b
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchFields:
            - key: metadata.name
              operator: In
              values:
              - cnvqe-070.lab.eng.tlv2.redhat.com
    containers:
    - args:
      - start
      - --apiserver-url=https://api-int.bm12b-tlv2.abi.cnv-qe.rhood.us:6443
      - --payload-version=4.19.17
      - --tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
      - --tls-min-version=VersionTLS12
      command:
      - /usr/bin/machine-config-server
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cfabc9238540d5bddc9eb17db81bfc5aabf0fbdfe9958689269f3381100b8615
      imagePullPolicy: IfNotPresent
      name: machine-config-server
      resources:
        requests:
          cpu: 20m
          memory: 50Mi
      securityContext:
        capabilities:
          drop:
          - KILL
          - MKNOD
          - SETGID
          - SETUID
        runAsNonRoot: true
        runAsUser: 1000300000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/ssl/mcs
        name: certs
      - mountPath: /etc/mcs/bootstrap-token
        name: node-bootstrap-token
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-hnb2g
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    hostNetwork: true
    nodeName: cnvqe-070.lab.eng.tlv2.redhat.com
    nodeSelector:
      node-role.kubernetes.io/master: ""
    preemptionPolicy: PreemptLowerPriority
    priority: 2000000000
    priorityClassName: system-cluster-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1000300000
      seLinuxOptions:
        level: s0:c17,c14
      supplementalGroups:
      - 1000300000
    serviceAccount: machine-config-server
    serviceAccountName: machine-config-server
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoSchedule
      key: node-role.kubernetes.io/master
      operator: Exists
    - effect: NoSchedule
      key: node-role.kubernetes.io/etcd
      operator: Exists
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/disk-pressure
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/pid-pressure
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/unschedulable
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/network-unavailable
      operator: Exists
    volumes:
    - name: node-bootstrap-token
      secret:
        defaultMode: 420
        secretName: node-bootstrapper-token
    - name: certs
      secret:
        defaultMode: 420
        secretName: machine-config-server-tls
    - name: kube-api-access-hnb2g
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:16Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T11:49:43Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:16Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:27:16Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T11:49:43Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://86cfdb1c88aa96aa7bdf391d66c19d8878ae46a206982a164eaf1d14979dd03b
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cfabc9238540d5bddc9eb17db81bfc5aabf0fbdfe9958689269f3381100b8615
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cfabc9238540d5bddc9eb17db81bfc5aabf0fbdfe9958689269f3381100b8615
      lastState: {}
      name: machine-config-server
      ready: true
      restartCount: 1
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:27:15Z"
      volumeMounts:
      - mountPath: /etc/ssl/mcs
        name: certs
      - mountPath: /etc/mcs/bootstrap-token
        name: node-bootstrap-token
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-hnb2g
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.46.248.41
    hostIPs:
    - ip: 10.46.248.41
    - ip: 2620:52:0:2ef8::29
    phase: Running
    podIP: 10.46.248.41
    podIPs:
    - ip: 10.46.248.41
    - ip: 2620:52:0:2ef8::29
    qosClass: Burstable
    startTime: "2025-10-27T11:49:43Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      openshift.io/required-scc: hostnetwork
      openshift.io/scc: hostnetwork
    creationTimestamp: "2025-10-27T11:32:00Z"
    generateName: machine-config-server-
    labels:
      controller-revision-hash: 5c6b596d97
      k8s-app: machine-config-server
      pod-template-generation: "1"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:openshift.io/required-scc: {}
            f:target.workload.openshift.io/management: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:controller-revision-hash: {}
            f:k8s-app: {}
            f:pod-template-generation: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"dfe45405-5850-44f2-a332-1359ad998baf"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
          f:containers:
            k:{"name":"machine-config-server"}:
              .: {}
              f:args: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/mcs/bootstrap-token"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/ssl/mcs"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"certs"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"node-bootstrap-token"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2025-10-27T11:32:00Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.46.248.134"}:
              .: {}
              f:ip: {}
            k:{"ip":"2620:52:0:2ef8::86"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2025-10-27T12:37:16Z"
    name: machine-config-server-9svmd
    namespace: openshift-machine-config-operator
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: DaemonSet
      name: machine-config-server
      uid: dfe45405-5850-44f2-a332-1359ad998baf
    resourceVersion: "48416"
    uid: ad8ac006-d5a4-4e34-afa3-35fe937cdd63
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchFields:
            - key: metadata.name
              operator: In
              values:
              - cnvqe-072.lab.eng.tlv2.redhat.com
    containers:
    - args:
      - start
      - --apiserver-url=https://api-int.bm12b-tlv2.abi.cnv-qe.rhood.us:6443
      - --payload-version=4.19.17
      - --tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
      - --tls-min-version=VersionTLS12
      command:
      - /usr/bin/machine-config-server
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cfabc9238540d5bddc9eb17db81bfc5aabf0fbdfe9958689269f3381100b8615
      imagePullPolicy: IfNotPresent
      name: machine-config-server
      resources:
        requests:
          cpu: 20m
          memory: 50Mi
      securityContext:
        capabilities:
          drop:
          - KILL
          - MKNOD
          - SETGID
          - SETUID
        runAsNonRoot: true
        runAsUser: 1000300000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/ssl/mcs
        name: certs
      - mountPath: /etc/mcs/bootstrap-token
        name: node-bootstrap-token
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-l69z9
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    hostNetwork: true
    nodeName: cnvqe-072.lab.eng.tlv2.redhat.com
    nodeSelector:
      node-role.kubernetes.io/master: ""
    preemptionPolicy: PreemptLowerPriority
    priority: 2000000000
    priorityClassName: system-cluster-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1000300000
      seLinuxOptions:
        level: s0:c17,c14
      supplementalGroups:
      - 1000300000
    serviceAccount: machine-config-server
    serviceAccountName: machine-config-server
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoSchedule
      key: node-role.kubernetes.io/master
      operator: Exists
    - effect: NoSchedule
      key: node-role.kubernetes.io/etcd
      operator: Exists
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/disk-pressure
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/pid-pressure
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/unschedulable
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/network-unavailable
      operator: Exists
    volumes:
    - name: node-bootstrap-token
      secret:
        defaultMode: 420
        secretName: node-bootstrapper-token
    - name: certs
      secret:
        defaultMode: 420
        secretName: machine-config-server-tls
    - name: kube-api-access-l69z9
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:37:16Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T11:32:00Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:37:16Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:37:16Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T11:32:00Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://d3ef717cf6c6235723ea7720797ca40f5cd5dd5bf1bf08da02a4070706aa7fef
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cfabc9238540d5bddc9eb17db81bfc5aabf0fbdfe9958689269f3381100b8615
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cfabc9238540d5bddc9eb17db81bfc5aabf0fbdfe9958689269f3381100b8615
      lastState: {}
      name: machine-config-server
      ready: true
      restartCount: 1
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:37:16Z"
      volumeMounts:
      - mountPath: /etc/ssl/mcs
        name: certs
      - mountPath: /etc/mcs/bootstrap-token
        name: node-bootstrap-token
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-l69z9
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.46.248.134
    hostIPs:
    - ip: 10.46.248.134
    - ip: 2620:52:0:2ef8::86
    phase: Running
    podIP: 10.46.248.134
    podIPs:
    - ip: 10.46.248.134
    - ip: 2620:52:0:2ef8::86
    qosClass: Burstable
    startTime: "2025-10-27T11:32:00Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      openshift.io/required-scc: hostnetwork
      openshift.io/scc: hostnetwork
    creationTimestamp: "2025-10-27T11:32:00Z"
    generateName: machine-config-server-
    labels:
      controller-revision-hash: 5c6b596d97
      k8s-app: machine-config-server
      pod-template-generation: "1"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:openshift.io/required-scc: {}
            f:target.workload.openshift.io/management: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:controller-revision-hash: {}
            f:k8s-app: {}
            f:pod-template-generation: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"dfe45405-5850-44f2-a332-1359ad998baf"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
          f:containers:
            k:{"name":"machine-config-server"}:
              .: {}
              f:args: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/mcs/bootstrap-token"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/ssl/mcs"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"certs"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"node-bootstrap-token"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2025-10-27T11:32:00Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.46.248.42"}:
              .: {}
              f:ip: {}
            k:{"ip":"2620:52:0:2ef8::2a"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2025-10-27T12:17:11Z"
    name: machine-config-server-rl2x4
    namespace: openshift-machine-config-operator
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: DaemonSet
      name: machine-config-server
      uid: dfe45405-5850-44f2-a332-1359ad998baf
    resourceVersion: "37131"
    uid: e5686c39-a342-4595-9607-62a6e34e46bf
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchFields:
            - key: metadata.name
              operator: In
              values:
              - cnvqe-071.lab.eng.tlv2.redhat.com
    containers:
    - args:
      - start
      - --apiserver-url=https://api-int.bm12b-tlv2.abi.cnv-qe.rhood.us:6443
      - --payload-version=4.19.17
      - --tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
      - --tls-min-version=VersionTLS12
      command:
      - /usr/bin/machine-config-server
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cfabc9238540d5bddc9eb17db81bfc5aabf0fbdfe9958689269f3381100b8615
      imagePullPolicy: IfNotPresent
      name: machine-config-server
      resources:
        requests:
          cpu: 20m
          memory: 50Mi
      securityContext:
        capabilities:
          drop:
          - KILL
          - MKNOD
          - SETGID
          - SETUID
        runAsNonRoot: true
        runAsUser: 1000300000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/ssl/mcs
        name: certs
      - mountPath: /etc/mcs/bootstrap-token
        name: node-bootstrap-token
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-847ws
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    hostNetwork: true
    nodeName: cnvqe-071.lab.eng.tlv2.redhat.com
    nodeSelector:
      node-role.kubernetes.io/master: ""
    preemptionPolicy: PreemptLowerPriority
    priority: 2000000000
    priorityClassName: system-cluster-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1000300000
      seLinuxOptions:
        level: s0:c17,c14
      supplementalGroups:
      - 1000300000
    serviceAccount: machine-config-server
    serviceAccountName: machine-config-server
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoSchedule
      key: node-role.kubernetes.io/master
      operator: Exists
    - effect: NoSchedule
      key: node-role.kubernetes.io/etcd
      operator: Exists
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/disk-pressure
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/pid-pressure
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/unschedulable
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/network-unavailable
      operator: Exists
    volumes:
    - name: node-bootstrap-token
      secret:
        defaultMode: 420
        secretName: node-bootstrapper-token
    - name: certs
      secret:
        defaultMode: 420
        secretName: machine-config-server-tls
    - name: kube-api-access-847ws
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:17:11Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T11:32:00Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:17:11Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T12:17:11Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2025-10-27T11:32:00Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://fecae8b730dcbdda0c8530319646984019b7f2f8483f3f829657a5a3e1d67b03
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cfabc9238540d5bddc9eb17db81bfc5aabf0fbdfe9958689269f3381100b8615
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cfabc9238540d5bddc9eb17db81bfc5aabf0fbdfe9958689269f3381100b8615
      lastState: {}
      name: machine-config-server
      ready: true
      restartCount: 1
      started: true
      state:
        running:
          startedAt: "2025-10-27T12:17:10Z"
      volumeMounts:
      - mountPath: /etc/ssl/mcs
        name: certs
      - mountPath: /etc/mcs/bootstrap-token
        name: node-bootstrap-token
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-847ws
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 10.46.248.42
    hostIPs:
    - ip: 10.46.248.42
    - ip: 2620:52:0:2ef8::2a
    phase: Running
    podIP: 10.46.248.42
    podIPs:
    - ip: 10.46.248.42
    - ip: 2620:52:0:2ef8::2a
    qosClass: Burstable
    startTime: "2025-10-27T11:32:00Z"
kind: PodList
metadata:
  resourceVersion: "2220266"
