---
apiVersion: v1
kind: Pod
metadata:
  annotations:
    kubernetes.io/config.hash: f022eff2d978fee6b366ac18a80aa53c
    kubernetes.io/config.mirror: f022eff2d978fee6b366ac18a80aa53c
    kubernetes.io/config.seen: "2025-10-14T13:06:11.380826185Z"
    kubernetes.io/config.source: file
    openshift.io/required-scc: privileged
    openshift.io/scc: privileged
    target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
  creationTimestamp: "2025-10-14T13:06:43Z"
  managedFields:
  - apiVersion: v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .: {}
          f:kubernetes.io/config.hash: {}
          f:kubernetes.io/config.mirror: {}
          f:kubernetes.io/config.seen: {}
          f:kubernetes.io/config.source: {}
          f:openshift.io/required-scc: {}
          f:target.workload.openshift.io/management: {}
        f:ownerReferences:
          .: {}
          k:{"uid":"cdb83465-49ab-4f29-b993-ec21f35e067e"}: {}
      f:spec:
        f:containers:
          k:{"name":"kube-rbac-proxy-crio"}:
            .: {}
            f:args: {}
            f:image: {}
            f:imagePullPolicy: {}
            f:name: {}
            f:ports:
              .: {}
              k:{"containerPort":9637,"protocol":"TCP"}:
                .: {}
                f:containerPort: {}
                f:hostPort: {}
                f:protocol: {}
            f:resources:
              .: {}
              f:requests:
                .: {}
                f:cpu: {}
                f:memory: {}
            f:securityContext:
              .: {}
              f:privileged: {}
            f:terminationMessagePath: {}
            f:terminationMessagePolicy: {}
            f:volumeMounts:
              .: {}
              k:{"mountPath":"/etc/kubernetes"}:
                .: {}
                f:mountPath: {}
                f:mountPropagation: {}
                f:name: {}
                f:readOnly: {}
              k:{"mountPath":"/var/lib/kubelet"}:
                .: {}
                f:mountPath: {}
                f:mountPropagation: {}
                f:name: {}
                f:readOnly: {}
        f:dnsPolicy: {}
        f:enableServiceLinks: {}
        f:hostNetwork: {}
        f:initContainers:
          .: {}
          k:{"name":"setup"}:
            .: {}
            f:args: {}
            f:command: {}
            f:image: {}
            f:imagePullPolicy: {}
            f:name: {}
            f:resources:
              .: {}
              f:requests:
                .: {}
                f:cpu: {}
                f:memory: {}
            f:securityContext:
              .: {}
              f:privileged: {}
            f:terminationMessagePath: {}
            f:terminationMessagePolicy: {}
            f:volumeMounts:
              .: {}
              k:{"mountPath":"/var"}:
                .: {}
                f:mountPath: {}
                f:mountPropagation: {}
                f:name: {}
        f:nodeName: {}
        f:priorityClassName: {}
        f:restartPolicy: {}
        f:schedulerName: {}
        f:securityContext: {}
        f:terminationGracePeriodSeconds: {}
        f:tolerations: {}
        f:volumes:
          .: {}
          k:{"name":"etc-kube"}:
            .: {}
            f:hostPath:
              .: {}
              f:path: {}
              f:type: {}
            f:name: {}
          k:{"name":"var-lib-kubelet"}:
            .: {}
            f:hostPath:
              .: {}
              f:path: {}
              f:type: {}
            f:name: {}
    manager: kubelet
    operation: Update
    time: "2025-10-14T13:06:43Z"
  - apiVersion: v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"ContainersReady"}:
            .: {}
            f:lastProbeTime: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"Initialized"}:
            .: {}
            f:lastProbeTime: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"PodReadyToStartContainers"}:
            .: {}
            f:lastProbeTime: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"PodScheduled"}:
            .: {}
            f:lastProbeTime: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"Ready"}:
            .: {}
            f:lastProbeTime: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
        f:containerStatuses: {}
        f:hostIP: {}
        f:hostIPs: {}
        f:initContainerStatuses: {}
        f:phase: {}
        f:podIP: {}
        f:podIPs:
          .: {}
          k:{"ip":"192.168.34.12"}:
            .: {}
            f:ip: {}
        f:startTime: {}
    manager: kubelet
    operation: Update
    subresource: status
    time: "2025-10-14T13:06:59Z"
  name: kube-rbac-proxy-crio-master-2
  namespace: openshift-machine-config-operator
  ownerReferences:
  - apiVersion: v1
    controller: true
    kind: Node
    name: master-2
    uid: cdb83465-49ab-4f29-b993-ec21f35e067e
  resourceVersion: "3300"
  uid: 75423ed0-1481-47bb-930f-03296e47cf03
spec:
  containers:
  - args:
    - --secure-listen-address=:9637
    - --config-file=/etc/kubernetes/crio-metrics-proxy.cfg
    - --client-ca-file=/etc/kubernetes/kubelet-ca.crt
    - --logtostderr=true
    - --kubeconfig=/var/lib/kubelet/kubeconfig
    - --tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
    - --tls-min-version=VersionTLS12
    - --upstream=http://127.0.0.1:9537
    - --tls-cert-file=/var/lib/kubelet/pki/kubelet-server-current.pem
    - --tls-private-key-file=/var/lib/kubelet/pki/kubelet-server-current.pem
    image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f22b65e5c744a32d3955dd7c36d809e3114a8aa501b44c00330dfda886c21169
    imagePullPolicy: IfNotPresent
    name: kube-rbac-proxy-crio
    ports:
    - containerPort: 9637
      hostPort: 9637
      protocol: TCP
    resources:
      requests:
        cpu: 20m
        memory: 50Mi
    securityContext:
      privileged: true
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: FallbackToLogsOnError
    volumeMounts:
    - mountPath: /etc/kubernetes
      mountPropagation: HostToContainer
      name: etc-kube
      readOnly: true
    - mountPath: /var/lib/kubelet
      mountPropagation: HostToContainer
      name: var-lib-kubelet
      readOnly: true
  dnsPolicy: ClusterFirst
  enableServiceLinks: true
  hostNetwork: true
  initContainers:
  - args:
    - |
      echo -n "Waiting for kubelet key and certificate to be available"
      while [ -n "$(test -e /var/lib/kubelet/pki/kubelet-server-current.pem)" ] ; do
        echo -n "."
        sleep 1
        (( tries += 1 ))
        if [[ "${tries}" -gt 10 ]]; then
          echo "Timed out waiting for kubelet key and cert."
          exit 1
        fi
      done
    command:
    - /bin/bash
    - -ec
    image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f22b65e5c744a32d3955dd7c36d809e3114a8aa501b44c00330dfda886c21169
    imagePullPolicy: IfNotPresent
    name: setup
    resources:
      requests:
        cpu: 5m
        memory: 50Mi
    securityContext:
      privileged: true
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: FallbackToLogsOnError
    volumeMounts:
    - mountPath: /var
      mountPropagation: HostToContainer
      name: var-lib-kubelet
  nodeName: master-2
  preemptionPolicy: PreemptLowerPriority
  priority: 2000000000
  priorityClassName: system-cluster-critical
  restartPolicy: Always
  schedulerName: default-scheduler
  securityContext: {}
  terminationGracePeriodSeconds: 30
  tolerations:
  - effect: NoExecute
    operator: Exists
  - effect: NoSchedule
    key: node.kubernetes.io/memory-pressure
    operator: Exists
  volumes:
  - hostPath:
      path: /etc/kubernetes
      type: ""
    name: etc-kube
  - hostPath:
      path: /var/lib/kubelet
      type: ""
    name: var-lib-kubelet
status:
  conditions:
  - lastProbeTime: null
    lastTransitionTime: "2025-10-14T13:06:15Z"
    status: "True"
    type: PodReadyToStartContainers
  - lastProbeTime: null
    lastTransitionTime: "2025-10-14T13:06:15Z"
    status: "True"
    type: Initialized
  - lastProbeTime: null
    lastTransitionTime: "2025-10-14T13:06:59Z"
    status: "True"
    type: Ready
  - lastProbeTime: null
    lastTransitionTime: "2025-10-14T13:06:59Z"
    status: "True"
    type: ContainersReady
  - lastProbeTime: null
    lastTransitionTime: "2025-10-14T13:06:11Z"
    status: "True"
    type: PodScheduled
  containerStatuses:
  - containerID: cri-o://0f9381cf8b3e1bdd572687ff62b6ce00cddd48fdf9f8b7c981285b21fd41f3a0
    image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f22b65e5c744a32d3955dd7c36d809e3114a8aa501b44c00330dfda886c21169
    imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f22b65e5c744a32d3955dd7c36d809e3114a8aa501b44c00330dfda886c21169
    lastState:
      terminated:
        containerID: cri-o://367f78b1ba05a1a5cac5a0f737b5e254b59c152b3ac8ca5d5714f3d50abacd10
        exitCode: 1
        finishedAt: "2025-10-14T13:06:30Z"
        message: "W1014 13:06:30.871108       1 deprecated.go:66] \n==== Removed Flag
          Warning ======================\n\nlogtostderr is removed in the k8s upstream
          and has no effect any more.\n\n===============================================\n\t\t\nI1014
          13:06:30.871351       1 kube-rbac-proxy.go:530] Reading config file: /etc/kubernetes/crio-metrics-proxy.cfg\nI1014
          13:06:30.875743       1 kube-rbac-proxy.go:233] Valid token audiences: \nI1014
          13:06:30.876179       1 dynamic_cafile_content.go:160] \"Starting controller\"
          name=\"client-ca::/etc/kubernetes/kubelet-ca.crt\"\nI1014 13:06:30.878340
          \      1 kube-rbac-proxy.go:347] Reading certificate files\nE1014 13:06:30.878478
          \      1 run.go:72] \"command failed\" err=\"failed to initialize certificate
          reloader: error loading certificates: error loading certificate: open /var/lib/kubelet/pki/kubelet-server-current.pem:
          no such file or directory\"\nI1014 13:06:30.878534       1 dynamic_cafile_content.go:174]
          \"Shutting down controller\" name=\"client-ca::/etc/kubernetes/kubelet-ca.crt\"\n"
        reason: Error
        startedAt: "2025-10-14T13:06:30Z"
    name: kube-rbac-proxy-crio
    ready: true
    restartCount: 3
    started: true
    state:
      running:
        startedAt: "2025-10-14T13:06:58Z"
    volumeMounts:
    - mountPath: /etc/kubernetes
      name: etc-kube
      readOnly: true
      recursiveReadOnly: Disabled
    - mountPath: /var/lib/kubelet
      name: var-lib-kubelet
      readOnly: true
      recursiveReadOnly: Disabled
  hostIP: 192.168.34.12
  hostIPs:
  - ip: 192.168.34.12
  initContainerStatuses:
  - containerID: cri-o://8c7b84cc6b70fe3b8aac7d625cab179d812c21968a9b55f5305f78245385bbf6
    image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f22b65e5c744a32d3955dd7c36d809e3114a8aa501b44c00330dfda886c21169
    imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f22b65e5c744a32d3955dd7c36d809e3114a8aa501b44c00330dfda886c21169
    lastState: {}
    name: setup
    ready: true
    restartCount: 0
    started: false
    state:
      terminated:
        containerID: cri-o://8c7b84cc6b70fe3b8aac7d625cab179d812c21968a9b55f5305f78245385bbf6
        exitCode: 0
        finishedAt: "2025-10-14T13:06:14Z"
        reason: Completed
        startedAt: "2025-10-14T13:06:14Z"
    volumeMounts:
    - mountPath: /var
      name: var-lib-kubelet
  phase: Running
  podIP: 192.168.34.12
  podIPs:
  - ip: 192.168.34.12
  qosClass: Burstable
  startTime: "2025-10-14T13:06:11Z"