---
apiVersion: v1
items:
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.128.0.100/23"],"mac_address":"0a:58:0a:80:00:64","gateway_ips":["10.128.0.1"],"routes":[{"dest":"10.128.0.0/16","nextHop":"10.128.0.1"},{"dest":"172.30.0.0/16","nextHop":"10.128.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.128.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.128.0.1"}],"ip_address":"10.128.0.100/23","gateway_ip":"10.128.0.1","role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.128.0.100"
            ],
            "mac": "0a:58:0a:80:00:64",
            "default": true,
            "dns": {}
        }]
      openshift.io/scc: restricted-v2
      seccomp.security.alpha.kubernetes.io/pod: runtime/default
    creationTimestamp: "2026-02-16T17:37:45Z"
    generateName: controller-69bbfbf88f-
    labels:
      app: metallb
      component: controller
      pod-template-hash: 69bbfbf88f
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:generateName: {}
          f:labels:
            .: {}
            f:app: {}
            f:component: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"e1a92c45-016d-411f-8473-db26be67a93a"}: {}
        f:spec:
          f:containers:
            k:{"name":"controller"}:
              .: {}
              f:args: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"METALLB_BGP_TYPE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"METALLB_DEPLOYMENT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"METALLB_ML_SECRET_NAME"}:
                  .: {}
                  f:name: {}
                  f:value: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":9443,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
                k:{"containerPort":29150,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:readinessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:resources: {}
              f:securityContext:
                .: {}
                f:allowPrivilegeEscalation: {}
                f:capabilities:
                  .: {}
                  f:drop: {}
                f:readOnlyRootFilesystem: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/tmp/k8s-webhook-server/serving-certs"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
            k:{"name":"kube-rbac-proxy"}:
              .: {}
              f:args: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":9120,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/metrics"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:nodeSelector: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext:
            .: {}
            f:runAsNonRoot: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:volumes:
            .: {}
            k:{"name":"cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"metrics-certs"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-02-16T17:37:45Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.ovn.org/pod-networks: {}
      manager: master-0
      operation: Update
      subresource: status
      time: "2026-02-16T17:37:45Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2026-02-16T17:37:46Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.128.0.100"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-02-16T17:38:05Z"
    name: controller-69bbfbf88f-th2nx
    namespace: metallb-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: controller-69bbfbf88f
      uid: e1a92c45-016d-411f-8473-db26be67a93a
    resourceVersion: "28732"
    uid: 514984df-7910-433f-ad1e-b5761b23473f
  spec:
    containers:
    - args:
      - --port=29150
      - --log-level=debug
      - --webhook-mode=disabled
      - --tls-min-version=VersionTLS12
      command:
      - /controller
      env:
      - name: METALLB_ML_SECRET_NAME
        value: metallb-memberlist
      - name: METALLB_DEPLOYMENT
        value: controller
      - name: METALLB_BGP_TYPE
        value: frr-k8s
      image: registry.redhat.io/openshift4/metallb-rhel9@sha256:5734cf213934e92a65bb43f1e280bfdfb5b614a7ef55fedf26acdbc5c020092e
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 3
        httpGet:
          path: /metrics
          port: monitoring
          scheme: HTTP
        initialDelaySeconds: 10
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 1
      name: controller
      ports:
      - containerPort: 29150
        name: monitoring
        protocol: TCP
      - containerPort: 9443
        name: webhook-server
        protocol: TCP
      readinessProbe:
        failureThreshold: 3
        httpGet:
          path: /metrics
          port: monitoring
          scheme: HTTP
        initialDelaySeconds: 10
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 1
      resources: {}
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        readOnlyRootFilesystem: true
        runAsUser: 1000770000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /tmp/k8s-webhook-server/serving-certs
        name: cert
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-x8xl8
        readOnly: true
    - args:
      - --logtostderr
      - --secure-listen-address=:9120
      - --upstream=http://127.0.0.1:29150/
      - --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
      - --tls-private-key-file=/etc/metrics/tls.key
      - --tls-cert-file=/etc/metrics/tls.crt
      image: registry.redhat.io/openshift4/ose-kube-rbac-proxy-rhel9@sha256:d887865ef3f02e69de8e9a95ec6504a29fcd3a32bef934d73b8f29684dbb9b95
      imagePullPolicy: IfNotPresent
      name: kube-rbac-proxy
      ports:
      - containerPort: 9120
        name: metricshttps
        protocol: TCP
      resources:
        requests:
          cpu: 10m
          memory: 20Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        runAsUser: 1000770000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/metrics
        name: metrics-certs
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-x8xl8
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    nodeName: master-0
    nodeSelector:
      kubernetes.io/os: linux
    preemptionPolicy: PreemptLowerPriority
    priority: 0
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1000770000
      runAsNonRoot: true
      seLinuxOptions:
        level: s0:c28,c7
      seccompProfile:
        type: RuntimeDefault
    serviceAccount: controller
    serviceAccountName: controller
    terminationGracePeriodSeconds: 0
    tolerations:
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
      tolerationSeconds: 300
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 300
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - name: cert
      secret:
        defaultMode: 420
        secretName: metallb-webhook-cert
    - name: metrics-certs
      secret:
        defaultMode: 420
        secretName: controller-certs-secret
    - name: kube-api-access-x8xl8
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:37:50Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:37:45Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:38:05Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:38:05Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:37:45Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://2843def630d9bac1414215132a53a29e729a57d5f2a8b7c0693c225089ea207b
      image: registry.redhat.io/openshift4/metallb-rhel9@sha256:5734cf213934e92a65bb43f1e280bfdfb5b614a7ef55fedf26acdbc5c020092e
      imageID: registry.redhat.io/openshift4/metallb-rhel9@sha256:5734cf213934e92a65bb43f1e280bfdfb5b614a7ef55fedf26acdbc5c020092e
      lastState: {}
      name: controller
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-02-16T17:37:46Z"
      volumeMounts:
      - mountPath: /tmp/k8s-webhook-server/serving-certs
        name: cert
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-x8xl8
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://5016818f44dc0f9ed2d29cd64a53f6b30fb1f5a2b906286d8dfc7f3f2a283853
      image: registry.redhat.io/openshift4/ose-kube-rbac-proxy-rhel9@sha256:d887865ef3f02e69de8e9a95ec6504a29fcd3a32bef934d73b8f29684dbb9b95
      imageID: registry.redhat.io/openshift4/ose-kube-rbac-proxy-rhel9@sha256:cb2014728aa54e620f65424402b14c5247016734a9a982c393dc011acb1a1f52
      lastState: {}
      name: kube-rbac-proxy
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-02-16T17:37:49Z"
      volumeMounts:
      - mountPath: /etc/metrics
        name: metrics-certs
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-x8xl8
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 192.168.32.10
    hostIPs:
    - ip: 192.168.32.10
    phase: Running
    podIP: 10.128.0.100
    podIPs:
    - ip: 10.128.0.100
    qosClass: Burstable
    startTime: "2026-02-16T17:37:45Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      openshift.io/scc: privileged
    creationTimestamp: "2026-02-16T17:37:45Z"
    generateName: frr-k8s-
    labels:
      app: frr-k8s
      component: frr-k8s
      controller-revision-hash: 544df6c665
      pod-template-generation: "1"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:generateName: {}
          f:labels:
            .: {}
            f:app: {}
            f:component: {}
            f:controller-revision-hash: {}
            f:pod-template-generation: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"1649930d-eb26-4ae0-98af-76e85d4081dc"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
          f:containers:
            k:{"name":"controller"}:
              .: {}
              f:args: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"FRR_CONFIG_FILE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"FRR_RELOADER_PID_FILE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"NAMESPACE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"NODE_NAME"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":7572,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
              f:readinessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:resources: {}
              f:securityContext:
                .: {}
                f:allowPrivilegeEscalation: {}
                f:capabilities:
                  .: {}
                  f:add: {}
                  f:drop: {}
                f:readOnlyRootFilesystem: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/frr_reloader"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
            k:{"name":"frr"}:
              .: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"TINI_SUBREAPER"}:
                  .: {}
                  f:name: {}
                  f:value: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:resources: {}
              f:securityContext:
                .: {}
                f:capabilities:
                  .: {}
                  f:add: {}
              f:startupProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/frr"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/var/run/frr"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
            k:{"name":"frr-metrics"}:
              .: {}
              f:args: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":7573,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/frr"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/frr_metrics"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/var/run/frr"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
            k:{"name":"kube-rbac-proxy"}:
              .: {}
              f:args: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":9140,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/metrics"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
            k:{"name":"kube-rbac-proxy-frr"}:
              .: {}
              f:args: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":9141,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/metrics"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
            k:{"name":"reloader"}:
              .: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/frr"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/frr_reloader"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/var/run/frr"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:initContainers:
            .: {}
            k:{"name":"cp-frr-files"}:
              .: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources: {}
              f:securityContext:
                .: {}
                f:runAsGroup: {}
                f:runAsUser: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/frr"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/tmp/frr"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
            k:{"name":"cp-metrics"}:
              .: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/frr_metrics"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
            k:{"name":"cp-reloader"}:
              .: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/frr_reloader"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:nodeSelector: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:shareProcessNamespace: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"frr-conf"}:
              .: {}
              f:emptyDir: {}
              f:name: {}
            k:{"name":"frr-sockets"}:
              .: {}
              f:emptyDir: {}
              f:name: {}
            k:{"name":"frr-startup"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
              f:name: {}
            k:{"name":"metrics"}:
              .: {}
              f:emptyDir: {}
              f:name: {}
            k:{"name":"metrics-certs"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"reloader"}:
              .: {}
              f:emptyDir: {}
              f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-02-16T17:37:45Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:initContainerStatuses: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"192.168.32.10"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-02-16T17:38:16Z"
    name: frr-k8s-tldzg
    namespace: metallb-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: DaemonSet
      name: frr-k8s
      uid: 1649930d-eb26-4ae0-98af-76e85d4081dc
    resourceVersion: "28830"
    uid: e6c3fe44-4380-4dbc-8e61-6f85a1820c82
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchFields:
            - key: metadata.name
              operator: In
              values:
              - master-0
    containers:
    - args:
      - --node-name=$(NODE_NAME)
      - --namespace=$(NAMESPACE)
      - --metrics-bind-address=127.0.0.1:7572
      - --log-level=debug
      command:
      - /frr-k8s
      env:
      - name: FRR_CONFIG_FILE
        value: /etc/frr_reloader/frr.conf
      - name: FRR_RELOADER_PID_FILE
        value: /etc/frr_reloader/reloader.pid
      - name: NODE_NAME
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: spec.nodeName
      - name: NAMESPACE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
      image: registry.redhat.io/openshift4/frr-rhel9@sha256:49bc23355dd52c33ffbef1ade12bdf026c3975fe17bd019cd0586ce5269f4d9c
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 3
        httpGet:
          host: 127.0.0.1
          path: /metrics
          port: monitoring
          scheme: HTTP
        initialDelaySeconds: 10
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 1
      name: controller
      ports:
      - containerPort: 7572
        hostPort: 7572
        name: monitoring
        protocol: TCP
      readinessProbe:
        failureThreshold: 3
        httpGet:
          host: 127.0.0.1
          path: /metrics
          port: monitoring
          scheme: HTTP
        initialDelaySeconds: 10
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 1
      resources: {}
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          add:
          - NET_RAW
          drop:
          - ALL
        readOnlyRootFilesystem: true
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /etc/frr_reloader
        name: reloader
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-wzsrw
        readOnly: true
    - command:
      - /bin/sh
      - -c
      - |
        /sbin/tini -- /usr/lib/frr/docker-start &
        attempts=0
        until [[ -f /etc/frr/frr.log || $attempts -eq 60 ]]; do
          sleep 1
          attempts=$(( $attempts + 1 ))
        done
        tail -f /etc/frr/frr.log
      env:
      - name: TINI_SUBREAPER
        value: "true"
      image: registry.redhat.io/openshift4/frr-rhel9@sha256:49bc23355dd52c33ffbef1ade12bdf026c3975fe17bd019cd0586ce5269f4d9c
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 3
        httpGet:
          host: 127.0.0.1
          path: /livez
          port: 7573
          scheme: HTTP
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 1
      name: frr
      resources: {}
      securityContext:
        capabilities:
          add:
          - NET_ADMIN
          - NET_RAW
          - SYS_ADMIN
          - NET_BIND_SERVICE
      startupProbe:
        failureThreshold: 30
        httpGet:
          host: 127.0.0.1
          path: /livez
          port: 7573
          scheme: HTTP
        periodSeconds: 5
        successThreshold: 1
        timeoutSeconds: 1
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /var/run/frr
        name: frr-sockets
      - mountPath: /etc/frr
        name: frr-conf
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-wzsrw
        readOnly: true
    - command:
      - /etc/frr_reloader/frr-reloader.sh
      image: registry.redhat.io/openshift4/frr-rhel9@sha256:49bc23355dd52c33ffbef1ade12bdf026c3975fe17bd019cd0586ce5269f4d9c
      imagePullPolicy: IfNotPresent
      name: reloader
      resources: {}
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /var/run/frr
        name: frr-sockets
      - mountPath: /etc/frr
        name: frr-conf
      - mountPath: /etc/frr_reloader
        name: reloader
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-wzsrw
        readOnly: true
    - args:
      - --metrics-port=7573
      - --metrics-bind-address=127.0.0.1
      command:
      - /etc/frr_metrics/frr-metrics
      image: registry.redhat.io/openshift4/frr-rhel9@sha256:49bc23355dd52c33ffbef1ade12bdf026c3975fe17bd019cd0586ce5269f4d9c
      imagePullPolicy: IfNotPresent
      name: frr-metrics
      ports:
      - containerPort: 7573
        hostPort: 7573
        name: monitoring
        protocol: TCP
      resources: {}
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /var/run/frr
        name: frr-sockets
      - mountPath: /etc/frr
        name: frr-conf
      - mountPath: /etc/frr_metrics
        name: metrics
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-wzsrw
        readOnly: true
    - args:
      - --logtostderr
      - --secure-listen-address=:9140
      - --upstream=http://127.0.0.1:7572/
      - --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
      - --tls-private-key-file=/etc/metrics/tls.key
      - --tls-cert-file=/etc/metrics/tls.crt
      image: registry.redhat.io/openshift4/ose-kube-rbac-proxy-rhel9@sha256:d887865ef3f02e69de8e9a95ec6504a29fcd3a32bef934d73b8f29684dbb9b95
      imagePullPolicy: IfNotPresent
      name: kube-rbac-proxy
      ports:
      - containerPort: 9140
        hostPort: 9140
        name: metricshttps
        protocol: TCP
      resources:
        requests:
          cpu: 10m
          memory: 20Mi
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/metrics
        name: metrics-certs
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-wzsrw
        readOnly: true
    - args:
      - --logtostderr
      - --secure-listen-address=:9141
      - --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
      - --upstream=http://127.0.0.1:7573/
      - --tls-private-key-file=/etc/metrics/tls.key
      - --tls-cert-file=/etc/metrics/tls.crt
      image: registry.redhat.io/openshift4/ose-kube-rbac-proxy-rhel9@sha256:d887865ef3f02e69de8e9a95ec6504a29fcd3a32bef934d73b8f29684dbb9b95
      imagePullPolicy: IfNotPresent
      name: kube-rbac-proxy-frr
      ports:
      - containerPort: 9141
        hostPort: 9141
        name: metricshttps
        protocol: TCP
      resources:
        requests:
          cpu: 10m
          memory: 20Mi
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/metrics
        name: metrics-certs
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-wzsrw
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    hostNetwork: true
    initContainers:
    - command:
      - /bin/sh
      - -c
      - cp -rLf /tmp/frr/* /etc/frr/
      image: registry.redhat.io/openshift4/frr-rhel9@sha256:49bc23355dd52c33ffbef1ade12bdf026c3975fe17bd019cd0586ce5269f4d9c
      imagePullPolicy: IfNotPresent
      name: cp-frr-files
      resources: {}
      securityContext:
        runAsGroup: 101
        runAsNonRoot: true
        runAsUser: 100
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /tmp/frr
        name: frr-startup
      - mountPath: /etc/frr
        name: frr-conf
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-wzsrw
        readOnly: true
    - command:
      - /bin/sh
      - -c
      - cp -f /frr-reloader.sh /etc/frr_reloader/
      image: registry.redhat.io/openshift4/frr-rhel9@sha256:49bc23355dd52c33ffbef1ade12bdf026c3975fe17bd019cd0586ce5269f4d9c
      imagePullPolicy: IfNotPresent
      name: cp-reloader
      resources: {}
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /etc/frr_reloader
        name: reloader
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-wzsrw
        readOnly: true
    - command:
      - /bin/sh
      - -c
      - cp -f /frr-metrics /etc/frr_metrics/
      image: registry.redhat.io/openshift4/frr-rhel9@sha256:49bc23355dd52c33ffbef1ade12bdf026c3975fe17bd019cd0586ce5269f4d9c
      imagePullPolicy: IfNotPresent
      name: cp-metrics
      resources: {}
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /etc/frr_metrics
        name: metrics
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-wzsrw
        readOnly: true
    nodeName: master-0
    nodeSelector:
      kubernetes.io/os: linux
      node-role.kubernetes.io/worker: ""
    preemptionPolicy: PreemptLowerPriority
    priority: 0
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext: {}
    serviceAccount: frr-k8s-daemon
    serviceAccountName: frr-k8s-daemon
    shareProcessNamespace: true
    terminationGracePeriodSeconds: 0
    tolerations:
    - effect: NoSchedule
      key: node-role.kubernetes.io/master
      operator: Exists
    - effect: NoSchedule
      key: node-role.kubernetes.io/control-plane
      operator: Exists
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/disk-pressure
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/pid-pressure
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/unschedulable
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/network-unavailable
      operator: Exists
    volumes:
    - emptyDir: {}
      name: frr-sockets
    - configMap:
        defaultMode: 420
        name: frr-startup
      name: frr-startup
    - emptyDir: {}
      name: frr-conf
    - emptyDir: {}
      name: reloader
    - emptyDir: {}
      name: metrics
    - name: metrics-certs
      secret:
        defaultMode: 420
        secretName: frr-k8s-certs-secret
    - name: kube-api-access-wzsrw
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:37:54Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:37:56Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:38:16Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:38:16Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:37:45Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://ba71ef1919b72ed417b09d2b22de4c51291120e0f9f67559bb97d38f14f83a2d
      image: registry.redhat.io/openshift4/frr-rhel9@sha256:49bc23355dd52c33ffbef1ade12bdf026c3975fe17bd019cd0586ce5269f4d9c
      imageID: registry.redhat.io/openshift4/frr-rhel9@sha256:0db75a631b1a51f2e6aa1cbf62770f4bd7604965ab1ddaddb07d18eb324d0acf
      lastState: {}
      name: controller
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-02-16T17:37:57Z"
      volumeMounts:
      - mountPath: /etc/frr_reloader
        name: reloader
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-wzsrw
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://479fb3de481ca62f56ef8e27571b0e6db57d8e71ac2e621d07aec78dfa21e4a5
      image: registry.redhat.io/openshift4/frr-rhel9@sha256:49bc23355dd52c33ffbef1ade12bdf026c3975fe17bd019cd0586ce5269f4d9c
      imageID: registry.redhat.io/openshift4/frr-rhel9@sha256:0db75a631b1a51f2e6aa1cbf62770f4bd7604965ab1ddaddb07d18eb324d0acf
      lastState: {}
      name: frr
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-02-16T17:37:57Z"
      volumeMounts:
      - mountPath: /var/run/frr
        name: frr-sockets
      - mountPath: /etc/frr
        name: frr-conf
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-wzsrw
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://aa524f007978f90ce3f623cc95cf39bae434999f5a9ef4ad82cd52a0f80f2326
      image: registry.redhat.io/openshift4/frr-rhel9@sha256:49bc23355dd52c33ffbef1ade12bdf026c3975fe17bd019cd0586ce5269f4d9c
      imageID: registry.redhat.io/openshift4/frr-rhel9@sha256:0db75a631b1a51f2e6aa1cbf62770f4bd7604965ab1ddaddb07d18eb324d0acf
      lastState: {}
      name: frr-metrics
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-02-16T17:37:57Z"
      volumeMounts:
      - mountPath: /var/run/frr
        name: frr-sockets
      - mountPath: /etc/frr
        name: frr-conf
      - mountPath: /etc/frr_metrics
        name: metrics
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-wzsrw
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://3c75da5f347b6ea2a3782a906786e26b19236889aba2d3093e243ad5d90db7b3
      image: registry.redhat.io/openshift4/ose-kube-rbac-proxy-rhel9@sha256:d887865ef3f02e69de8e9a95ec6504a29fcd3a32bef934d73b8f29684dbb9b95
      imageID: registry.redhat.io/openshift4/ose-kube-rbac-proxy-rhel9@sha256:cb2014728aa54e620f65424402b14c5247016734a9a982c393dc011acb1a1f52
      lastState: {}
      name: kube-rbac-proxy
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-02-16T17:37:57Z"
      volumeMounts:
      - mountPath: /etc/metrics
        name: metrics-certs
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-wzsrw
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://4cd220c2242773f8681ce817c68deca0c891b34ab8dd757038a58e3b86b4d513
      image: registry.redhat.io/openshift4/ose-kube-rbac-proxy-rhel9@sha256:d887865ef3f02e69de8e9a95ec6504a29fcd3a32bef934d73b8f29684dbb9b95
      imageID: registry.redhat.io/openshift4/ose-kube-rbac-proxy-rhel9@sha256:cb2014728aa54e620f65424402b14c5247016734a9a982c393dc011acb1a1f52
      lastState: {}
      name: kube-rbac-proxy-frr
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-02-16T17:37:57Z"
      volumeMounts:
      - mountPath: /etc/metrics
        name: metrics-certs
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-wzsrw
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://4ff4e68409dcd5cc133eebcfb2a9c89ab9d0005028adfb410f77f4b95ac831d3
      image: registry.redhat.io/openshift4/frr-rhel9@sha256:49bc23355dd52c33ffbef1ade12bdf026c3975fe17bd019cd0586ce5269f4d9c
      imageID: registry.redhat.io/openshift4/frr-rhel9@sha256:0db75a631b1a51f2e6aa1cbf62770f4bd7604965ab1ddaddb07d18eb324d0acf
      lastState: {}
      name: reloader
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-02-16T17:37:57Z"
      volumeMounts:
      - mountPath: /var/run/frr
        name: frr-sockets
      - mountPath: /etc/frr
        name: frr-conf
      - mountPath: /etc/frr_reloader
        name: reloader
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-wzsrw
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 192.168.32.10
    hostIPs:
    - ip: 192.168.32.10
    initContainerStatuses:
    - containerID: cri-o://09d7413649bc3b0eebc83e291b459bcf48827907e46044dec5169871fd46efd1
      image: registry.redhat.io/openshift4/frr-rhel9@sha256:49bc23355dd52c33ffbef1ade12bdf026c3975fe17bd019cd0586ce5269f4d9c
      imageID: registry.redhat.io/openshift4/frr-rhel9@sha256:0db75a631b1a51f2e6aa1cbf62770f4bd7604965ab1ddaddb07d18eb324d0acf
      lastState: {}
      name: cp-frr-files
      ready: true
      restartCount: 0
      started: false
      state:
        terminated:
          containerID: cri-o://09d7413649bc3b0eebc83e291b459bcf48827907e46044dec5169871fd46efd1
          exitCode: 0
          finishedAt: "2026-02-16T17:37:53Z"
          reason: Completed
          startedAt: "2026-02-16T17:37:53Z"
      volumeMounts:
      - mountPath: /tmp/frr
        name: frr-startup
      - mountPath: /etc/frr
        name: frr-conf
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-wzsrw
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://a44f4d59cc99902beba73f8d7883f4f61b67d662ec1f6791c34b5cd904a87845
      image: registry.redhat.io/openshift4/frr-rhel9@sha256:49bc23355dd52c33ffbef1ade12bdf026c3975fe17bd019cd0586ce5269f4d9c
      imageID: registry.redhat.io/openshift4/frr-rhel9@sha256:0db75a631b1a51f2e6aa1cbf62770f4bd7604965ab1ddaddb07d18eb324d0acf
      lastState: {}
      name: cp-reloader
      ready: true
      restartCount: 0
      started: false
      state:
        terminated:
          containerID: cri-o://a44f4d59cc99902beba73f8d7883f4f61b67d662ec1f6791c34b5cd904a87845
          exitCode: 0
          finishedAt: "2026-02-16T17:37:55Z"
          reason: Completed
          startedAt: "2026-02-16T17:37:55Z"
      volumeMounts:
      - mountPath: /etc/frr_reloader
        name: reloader
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-wzsrw
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://90ae0732c9169d0e69e036d650c1c6cca02bf24fa87fcecc89e5b27d3ffcbf5d
      image: registry.redhat.io/openshift4/frr-rhel9@sha256:49bc23355dd52c33ffbef1ade12bdf026c3975fe17bd019cd0586ce5269f4d9c
      imageID: registry.redhat.io/openshift4/frr-rhel9@sha256:0db75a631b1a51f2e6aa1cbf62770f4bd7604965ab1ddaddb07d18eb324d0acf
      lastState: {}
      name: cp-metrics
      ready: true
      restartCount: 0
      started: false
      state:
        terminated:
          containerID: cri-o://90ae0732c9169d0e69e036d650c1c6cca02bf24fa87fcecc89e5b27d3ffcbf5d
          exitCode: 0
          finishedAt: "2026-02-16T17:37:56Z"
          reason: Completed
          startedAt: "2026-02-16T17:37:56Z"
      volumeMounts:
      - mountPath: /etc/frr_metrics
        name: metrics
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-wzsrw
        readOnly: true
        recursiveReadOnly: Disabled
    phase: Running
    podIP: 192.168.32.10
    podIPs:
    - ip: 192.168.32.10
    qosClass: Burstable
    startTime: "2026-02-16T17:37:45Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.128.0.99/23"],"mac_address":"0a:58:0a:80:00:63","gateway_ips":["10.128.0.1"],"routes":[{"dest":"10.128.0.0/16","nextHop":"10.128.0.1"},{"dest":"172.30.0.0/16","nextHop":"10.128.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.128.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.128.0.1"}],"ip_address":"10.128.0.99/23","gateway_ip":"10.128.0.1","role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.128.0.99"
            ],
            "mac": "0a:58:0a:80:00:63",
            "default": true,
            "dns": {}
        }]
      kubectl.kubernetes.io/default-container: frr-k8s-webhook-server
      openshift.io/scc: restricted-v2
      seccomp.security.alpha.kubernetes.io/pod: runtime/default
    creationTimestamp: "2026-02-16T17:37:45Z"
    generateName: frr-k8s-webhook-server-78b44bf5bb-
    labels:
      component: frr-k8s-webhook-server
      pod-template-hash: 78b44bf5bb
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:kubectl.kubernetes.io/default-container: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:component: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"4ffc0e97-929a-4835-bfbf-a394f4d84fd1"}: {}
        f:spec:
          f:containers:
            k:{"name":"frr-k8s-webhook-server"}:
              .: {}
              f:args: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"NAMESPACE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":7572,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:readinessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:resources: {}
              f:securityContext:
                .: {}
                f:allowPrivilegeEscalation: {}
                f:capabilities:
                  .: {}
                  f:drop: {}
                f:readOnlyRootFilesystem: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/tmp/k8s-webhook-server/serving-certs"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext:
            .: {}
            f:runAsNonRoot: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-02-16T17:37:45Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.ovn.org/pod-networks: {}
      manager: master-0
      operation: Update
      subresource: status
      time: "2026-02-16T17:37:45Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2026-02-16T17:37:45Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.128.0.99"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-02-16T17:38:05Z"
    name: frr-k8s-webhook-server-78b44bf5bb-h9dfh
    namespace: metallb-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: frr-k8s-webhook-server-78b44bf5bb
      uid: 4ffc0e97-929a-4835-bfbf-a394f4d84fd1
    resourceVersion: "28727"
    uid: 532504ab-9d7a-4b85-8e34-b3d69ddb3931
  spec:
    containers:
    - args:
      - --log-level=debug
      - --webhook-mode=onlywebhook
      - --disable-cert-rotation=true
      - --namespace=$(NAMESPACE)
      - --metrics-bind-address=:7572
      command:
      - /frr-k8s
      env:
      - name: NAMESPACE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
      image: registry.redhat.io/openshift4/frr-rhel9@sha256:49bc23355dd52c33ffbef1ade12bdf026c3975fe17bd019cd0586ce5269f4d9c
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 3
        httpGet:
          path: /metrics
          port: monitoring
          scheme: HTTP
        initialDelaySeconds: 10
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 1
      name: frr-k8s-webhook-server
      ports:
      - containerPort: 7572
        name: monitoring
        protocol: TCP
      readinessProbe:
        failureThreshold: 3
        httpGet:
          path: /metrics
          port: monitoring
          scheme: HTTP
        initialDelaySeconds: 10
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 1
      resources: {}
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        readOnlyRootFilesystem: true
        runAsUser: 1000770000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /tmp/k8s-webhook-server/serving-certs
        name: cert
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-xq8w4
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    nodeName: master-0
    preemptionPolicy: PreemptLowerPriority
    priority: 0
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1000770000
      runAsNonRoot: true
      seLinuxOptions:
        level: s0:c28,c7
      seccompProfile:
        type: RuntimeDefault
    serviceAccount: frr-k8s-daemon
    serviceAccountName: frr-k8s-daemon
    terminationGracePeriodSeconds: 10
    tolerations:
    - effect: NoSchedule
      key: node-role.kubernetes.io/master
      operator: Exists
    - effect: NoSchedule
      key: node-role.kubernetes.io/control-plane
      operator: Exists
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
      tolerationSeconds: 300
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 300
    volumes:
    - name: cert
      secret:
        defaultMode: 420
        secretName: frr-k8s-webhook-server-cert
    - name: kube-api-access-xq8w4
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:37:54Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:37:45Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:38:05Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:38:05Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:37:45Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://7ba90acb78bfc6b577c841ae43241fc12753413f6f00da61ea0f4127fed5714b
      image: registry.redhat.io/openshift4/frr-rhel9@sha256:49bc23355dd52c33ffbef1ade12bdf026c3975fe17bd019cd0586ce5269f4d9c
      imageID: registry.redhat.io/openshift4/frr-rhel9@sha256:0db75a631b1a51f2e6aa1cbf62770f4bd7604965ab1ddaddb07d18eb324d0acf
      lastState: {}
      name: frr-k8s-webhook-server
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-02-16T17:37:53Z"
      volumeMounts:
      - mountPath: /tmp/k8s-webhook-server/serving-certs
        name: cert
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-xq8w4
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 192.168.32.10
    hostIPs:
    - ip: 192.168.32.10
    phase: Running
    podIP: 10.128.0.99
    podIPs:
    - ip: 10.128.0.99
    qosClass: BestEffort
    startTime: "2026-02-16T17:37:45Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      alm-examples: |-
        [
          {
            "apiVersion": "frrk8s.metallb.io/v1beta1",
            "kind": "FRRConfiguration",
            "metadata": {
              "name": "basic",
              "namespace": "frr-k8s-system"
            },
            "spec": {
              "bgp": {
                "routers": [
                  {
                    "asn": 64512,
                    "neighbors": [
                      {
                        "address": "172.30.0.3",
                        "asn": 64512,
                        "port": 180,
                        "toAdvertise": {
                          "allowed": {
                            "mode": "all"
                          }
                        },
                        "toReceive": {
                          "allowed": {
                            "mode": "all"
                          }
                        }
                      }
                    ]
                  }
                ]
              }
            }
          },
          {
            "apiVersion": "frrk8s.metallb.io/v1beta1",
            "kind": "FRRConfiguration",
            "metadata": {
              "name": "two-neighs",
              "namespace": "frr-k8s-system"
            },
            "spec": {
              "bgp": {
                "routers": [
                  {
                    "asn": 64512,
                    "neighbors": [
                      {
                        "address": "172.30.0.3",
                        "asn": 4200000000,
                        "ebgpMultiHop": true,
                        "port": 180,
                        "toAdvertise": {
                          "allowed": {
                            "mode": "all"
                          }
                        }
                      },
                      {
                        "address": "172.18.0.6",
                        "asn": 4200000000,
                        "port": 179,
                        "toAdvertise": {
                          "allowed": {
                            "prefixes": [
                              "192.168.2.0/24"
                            ]
                          }
                        }
                      }
                    ],
                    "prefixes": [
                      "192.168.2.0/24",
                      "192.169.2.0/24"
                    ]
                  }
                ]
              }
            }
          },
          {
            "apiVersion": "frrk8s.metallb.io/v1beta1",
            "kind": "FRRConfiguration",
            "metadata": {
              "name": "two-routers-vrf",
              "namespace": "frr-k8s-system"
            },
            "spec": {
              "bgp": {
                "routers": [
                  {
                    "asn": 64513,
                    "neighbors": [
                      {
                        "address": "172.32.0.3",
                        "asn": 4200000000,
                        "ebgpMultiHop": true,
                        "port": 180,
                        "toAdvertise": {
                          "allowed": {
                            "mode": "all"
                          }
                        }
                      }
                    ],
                    "prefixes": [
                      "192.168.2.0/24",
                      "192.169.2.0/24"
                    ]
                  },
                  {
                    "asn": 64515,
                    "neighbors": [
                      {
                        "address": "172.31.0.3",
                        "asn": 4200000000,
                        "port": 179,
                        "toAdvertise": {
                          "allowed": {
                            "mode": "all"
                          }
                        }
                      }
                    ],
                    "prefixes": [
                      "192.168.2.0/24",
                      "192.169.2.0/24"
                    ],
                    "vrf": "red"
                  }
                ]
              }
            }
          },
          {
            "apiVersion": "frrk8s.metallb.io/v1beta1",
            "kind": "FRRNodeState",
            "metadata": {
              "name": "frr-k8s-worker"
            },
            "status": {
              "lastConversionResult": "success",
              "lastReloadResult": "success",
              "runningConfig": "Building configuration...\n\nCurrent configuration:\n!\nfrr version 9.0.2_git\nfrr defaults traditional\nhostname frr-k8s-worker\nlog file /etc/frr/frr.log informational\nlog timestamp precision 3\nno ipv6 forwarding\nservice integrated-vtysh-config\n!\nip nht resolve-via-default\n!\nipv6 nht resolve-via-default\n!\nend\n"
            }
          },
          {
            "apiVersion": "metallb.io/v1beta1",
            "kind": "BFDProfile",
            "metadata": {
              "name": "bfd-profile-sample",
              "namespace": "metallb-system"
            },
            "spec": {
              "receiveInterval": 380,
              "transmitInterval": 270
            }
          },
          {
            "apiVersion": "metallb.io/v1beta1",
            "kind": "BGPAdvertisement",
            "metadata": {
              "name": "bgp-adv-sample1",
              "namespace": "metallb-system"
            },
            "spec": {
              "ipAddressPools": [
                "ip-addresspool-sample1"
              ],
              "peers": [
                "ebgp-single-hop0"
              ]
            }
          },
          {
            "apiVersion": "metallb.io/v1beta1",
            "kind": "BGPAdvertisement",
            "metadata": {
              "name": "bgp-adv-sample2",
              "namespace": "metallb-system"
            },
            "spec": {
              "ipAddressPoolSelectors": [
                {
                  "matchLabels": {
                    "test": "ipv6"
                  }
                },
                {
                  "matchLabels": {
                    "test": "ipv4"
                  }
                }
              ]
            }
          },
          {
            "apiVersion": "metallb.io/v1beta1",
            "kind": "BGPAdvertisement",
            "metadata": {
              "name": "bgp-adv-sample3",
              "namespace": "metallb-system"
            },
            "spec": {
              "aggregationLength": 32,
              "aggregationLengthV6": 128,
              "communities": [
                "65535:65282"
              ],
              "ipAddressPools": [
                "ip-addresspool-sample1"
              ],
              "localPref": 50
            }
          },
          {
            "apiVersion": "metallb.io/v1beta1",
            "kind": "BGPAdvertisement",
            "metadata": {
              "name": "bgp-adv-sample4",
              "namespace": "metallb-system"
            },
            "spec": {
              "aggregationLength": 32,
              "aggregationLengthV6": 128,
              "communities": [
                "NO_ADVERTISE"
              ],
              "ipAddressPools": [
                "ip-addresspool-sample1"
              ],
              "localPref": 50
            }
          },
          {
            "apiVersion": "metallb.io/v1beta1",
            "kind": "BGPAdvertisement",
            "metadata": {
              "name": "bgp-adv-sample5",
              "namespace": "metallb-system"
            },
            "spec": {
              "aggregationLength": 32,
              "aggregationLengthV6": 128,
              "ipAddressPools": [
                "ip-addresspool-sample1"
              ],
              "nodeSelectors": [
                {
                  "matchLabels": {
                    "kubernetes.io/hostname": "kind-control-plane"
                  }
                },
                {
                  "matchLabels": {
                    "kubernetes.io/hostname": "kind-worker"
                  }
                }
              ]
            }
          },
          {
            "apiVersion": "metallb.io/v1beta1",
            "kind": "BGPPeer",
            "metadata": {
              "name": "bgp-peer-beta1",
              "namespace": "metallb-system"
            },
            "spec": {
              "myASN": 64512,
              "peerASN": 64512,
              "peerAddress": "172.30.0.3"
            }
          },
          {
            "apiVersion": "metallb.io/v1beta1",
            "kind": "Community",
            "metadata": {
              "name": "community1",
              "namespace": "metallb-system"
            },
            "spec": {
              "communities": [
                {
                  "name": "NO_ADVERTISE",
                  "value": "65535:65282"
                }
              ]
            }
          },
          {
            "apiVersion": "metallb.io/v1beta1",
            "kind": "IPAddressPool",
            "metadata": {
              "name": "ip-addresspool-sample1",
              "namespace": "metallb-system"
            },
            "spec": {
              "addresses": [
                "192.168.10.0/24",
                "192.168.9.1-192.168.9.5",
                "fc00:f853:0ccd:e799::/124"
              ]
            }
          },
          {
            "apiVersion": "metallb.io/v1beta1",
            "kind": "IPAddressPool",
            "metadata": {
              "labels": {
                "test": "ipv4"
              },
              "name": "ip-addresspool-sample2",
              "namespace": "metallb-system"
            },
            "spec": {
              "addresses": [
                "172.20.0.100/24"
              ],
              "autoAssign": false
            }
          },
          {
            "apiVersion": "metallb.io/v1beta1",
            "kind": "IPAddressPool",
            "metadata": {
              "labels": {
                "test": "ipv6"
              },
              "name": "ip-addresspool-sample3",
              "namespace": "metallb-system"
            },
            "spec": {
              "addresses": [
                "2002:2:2::1-2002:2:2::100"
              ]
            }
          },
          {
            "apiVersion": "metallb.io/v1beta1",
            "kind": "L2Advertisement",
            "metadata": {
              "name": "l2-adv-sample1",
              "namespace": "metallb-system"
            },
            "spec": {
              "ipAddressPools": [
                "ip-addresspool-sample1"
              ]
            }
          },
          {
            "apiVersion": "metallb.io/v1beta1",
            "kind": "L2Advertisement",
            "metadata": {
              "name": "l2-adv-sample2",
              "namespace": "metallb-system"
            },
            "spec": {
              "nodeSelectors": [
                {
                  "matchLabels": {
                    "kubernetes.io/hostname": "kind-control-plane"
                  }
                }
              ]
            }
          },
          {
            "apiVersion": "metallb.io/v1beta1",
            "kind": "MetalLB",
            "metadata": {
              "name": "metallb",
              "namespace": "metallb-system"
            },
            "spec": {}
          },
          {
            "apiVersion": "metallb.io/v1beta2",
            "kind": "BGPPeer",
            "metadata": {
              "name": "bgp-peer-sample1",
              "namespace": "metallb-system"
            },
            "spec": {
              "myASN": 64512,
              "peerASN": 64512,
              "peerAddress": "172.30.0.3"
            }
          },
          {
            "apiVersion": "metallb.io/v1beta2",
            "kind": "BGPPeer",
            "metadata": {
              "name": "bgp-peer-sample2",
              "namespace": "metallb-system"
            },
            "spec": {
              "bfdProfile": "bfd-profile-sample",
              "myASN": 64512,
              "peerASN": 64512,
              "peerAddress": "172.30.0.3"
            }
          },
          {
            "apiVersion": "metallb.io/v1beta2",
            "kind": "BGPPeer",
            "metadata": {
              "name": "bgp-peer-sample3",
              "namespace": "metallb-system"
            },
            "spec": {
              "holdTime": "9m0s",
              "keepaliveTime": "0s",
              "myASN": 64512,
              "passwordSecret": {
                "name": "secretname",
                "namespace": "metallb-system"
              },
              "peerASN": 64512,
              "peerAddress": "172.30.0.3",
              "peerPort": 180
            }
          }
        ]
      capabilities: Basic Install
      categories: Networking
      certified: "false"
      containerImage: registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:6fd3e59fedf58b8842b17604b513ee43c81fcbc339b342383098ea81109a8854
      createdAt: "2023-06-06T15:25:00Z"
      description: An operator for deploying MetalLB on a kubernetes cluster.
      features.operators.openshift.io/disconnected: "true"
      features.operators.openshift.io/fips-compliant: "true"
      features.operators.openshift.io/proxy-aware: "false"
      features.operators.openshift.io/tls-profiles: "false"
      features.operators.openshift.io/token-auth-aws: "false"
      features.operators.openshift.io/token-auth-azure: "false"
      features.operators.openshift.io/token-auth-gcp: "false"
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.128.0.91/23"],"mac_address":"0a:58:0a:80:00:5b","gateway_ips":["10.128.0.1"],"routes":[{"dest":"10.128.0.0/16","nextHop":"10.128.0.1"},{"dest":"172.30.0.0/16","nextHop":"10.128.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.128.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.128.0.1"}],"ip_address":"10.128.0.91/23","gateway_ip":"10.128.0.1","role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.128.0.91"
            ],
            "mac": "0a:58:0a:80:00:5b",
            "default": true,
            "dns": {}
        }]
      olm.operatorGroup: metallb-operator
      olm.operatorNamespace: metallb-system
      olm.skipRange: '>=4.8.0 <4.18.0'
      olm.targetNamespaces: ""
      olmcahash: 8c946d4497b8adf83f45521c0994b0bcbfce84abefa2db1227a6fe20a3f3b635
      openshift.io/required-scc: restricted-v2
      openshift.io/scc: restricted-v2
      operatorframework.io/properties: '{"properties":[{"type":"olm.gvk","value":{"group":"frrk8s.metallb.io","kind":"FRRConfiguration","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"frrk8s.metallb.io","kind":"FRRNodeState","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"metallb.io","kind":"BFDProfile","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"metallb.io","kind":"BGPAdvertisement","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"metallb.io","kind":"BGPPeer","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"metallb.io","kind":"BGPPeer","version":"v1beta2"}},{"type":"olm.gvk","value":{"group":"metallb.io","kind":"Community","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"metallb.io","kind":"IPAddressPool","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"metallb.io","kind":"L2Advertisement","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"metallb.io","kind":"MetalLB","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"metallb.io","kind":"ServiceL2Status","version":"v1beta1"}},{"type":"olm.package","value":{"packageName":"metallb-operator","version":"4.18.0-202601302238"}}]}'
      operatorframework.io/suggested-namespace: metallb-system
      operators.openshift.io/valid-subscription: '["OpenShift Kubernetes Engine",
        "OpenShift Container Platform", "OpenShift Platform Plus"]'
      operators.operatorframework.io/builder: operator-sdk-v1.34.1
      operators.operatorframework.io/project_layout: go.kubebuilder.io/v4
      repository: https://github.com/openshift/metallb-operator
      seccomp.security.alpha.kubernetes.io/pod: runtime/default
      support: Red Hat
    creationTimestamp: "2026-02-16T17:36:55Z"
    generateName: metallb-operator-controller-manager-85cbb58865-
    labels:
      control-plane: controller-manager
      pod-template-hash: 85cbb58865
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:alm-examples: {}
            f:capabilities: {}
            f:categories: {}
            f:certified: {}
            f:containerImage: {}
            f:createdAt: {}
            f:description: {}
            f:features.operators.openshift.io/disconnected: {}
            f:features.operators.openshift.io/fips-compliant: {}
            f:features.operators.openshift.io/proxy-aware: {}
            f:features.operators.openshift.io/tls-profiles: {}
            f:features.operators.openshift.io/token-auth-aws: {}
            f:features.operators.openshift.io/token-auth-azure: {}
            f:features.operators.openshift.io/token-auth-gcp: {}
            f:olm.operatorGroup: {}
            f:olm.operatorNamespace: {}
            f:olm.skipRange: {}
            f:olm.targetNamespaces: {}
            f:olmcahash: {}
            f:openshift.io/required-scc: {}
            f:operatorframework.io/properties: {}
            f:operatorframework.io/suggested-namespace: {}
            f:operators.openshift.io/valid-subscription: {}
            f:operators.operatorframework.io/builder: {}
            f:operators.operatorframework.io/project_layout: {}
            f:repository: {}
            f:support: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:control-plane: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"16d13db2-1696-4cc1-b776-a5691cf9c732"}: {}
        f:spec:
          f:containers:
            k:{"name":"manager"}:
              .: {}
              f:args: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"CONTROLLER_IMAGE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"DEPLOY_KUBE_RBAC_PROXIES"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"DEPLOY_PODMONITORS"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"DEPLOY_SERVICEMONITORS"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"ENABLE_OPERATOR_WEBHOOK"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"ENABLE_WEBHOOK"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"FRR_HTTPS_METRICS_PORT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"FRR_IMAGE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"FRR_METRICS_PORT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"FRRK8S_IMAGE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"HTTPS_METRICS_PORT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"KUBE_RBAC_PROXY_IMAGE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"MEMBER_LIST_BIND_PORT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"METRICS_PORT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"OPERATOR_CONDITION_NAME"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"OPERATOR_NAMESPACE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"SPEAKER_IMAGE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":9443,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:readinessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/apiserver.local.config/certificates"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/tmp/k8s-webhook-server/serving-certs"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:volumes:
            .: {}
            k:{"name":"apiservice-cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:items: {}
                f:secretName: {}
            k:{"name":"cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"webhook-cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:items: {}
                f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-02-16T17:36:55Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.ovn.org/pod-networks: {}
      manager: master-0
      operation: Update
      subresource: status
      time: "2026-02-16T17:36:55Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2026-02-16T17:36:56Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.128.0.91"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-02-16T17:37:36Z"
    name: metallb-operator-controller-manager-85cbb58865-c6k59
    namespace: metallb-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: metallb-operator-controller-manager-85cbb58865
      uid: 16d13db2-1696-4cc1-b776-a5691cf9c732
    resourceVersion: "27942"
    uid: 06583659-0f37-4c29-9336-6cb46626bfd1
  spec:
    containers:
    - args:
      - --enable-leader-election
      - --disable-cert-rotation=true
      command:
      - /manager
      env:
      - name: SPEAKER_IMAGE
        value: registry.redhat.io/openshift4/metallb-rhel9@sha256:5734cf213934e92a65bb43f1e280bfdfb5b614a7ef55fedf26acdbc5c020092e
      - name: CONTROLLER_IMAGE
        value: registry.redhat.io/openshift4/metallb-rhel9@sha256:5734cf213934e92a65bb43f1e280bfdfb5b614a7ef55fedf26acdbc5c020092e
      - name: FRR_IMAGE
        value: registry.redhat.io/openshift4/frr-rhel9@sha256:49bc23355dd52c33ffbef1ade12bdf026c3975fe17bd019cd0586ce5269f4d9c
      - name: KUBE_RBAC_PROXY_IMAGE
        value: registry.redhat.io/openshift4/ose-kube-rbac-proxy-rhel9@sha256:d887865ef3f02e69de8e9a95ec6504a29fcd3a32bef934d73b8f29684dbb9b95
      - name: DEPLOY_KUBE_RBAC_PROXIES
        value: "true"
      - name: FRRK8S_IMAGE
        value: registry.redhat.io/openshift4/frr-rhel9@sha256:49bc23355dd52c33ffbef1ade12bdf026c3975fe17bd019cd0586ce5269f4d9c
      - name: OPERATOR_NAMESPACE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
      - name: DEPLOY_PODMONITORS
        value: "false"
      - name: DEPLOY_SERVICEMONITORS
        value: "true"
      - name: ENABLE_WEBHOOK
        value: "true"
      - name: ENABLE_OPERATOR_WEBHOOK
        value: "true"
      - name: METRICS_PORT
        value: "29150"
      - name: HTTPS_METRICS_PORT
        value: "9120"
      - name: FRR_METRICS_PORT
        value: "29151"
      - name: FRR_HTTPS_METRICS_PORT
        value: "9121"
      - name: MEMBER_LIST_BIND_PORT
        value: "9122"
      - name: OPERATOR_CONDITION_NAME
        value: metallb-operator.v4.18.0-202601302238
      image: registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:6fd3e59fedf58b8842b17604b513ee43c81fcbc339b342383098ea81109a8854
      imagePullPolicy: IfNotPresent
      name: manager
      ports:
      - containerPort: 9443
        name: webhook-server
        protocol: TCP
      readinessProbe:
        failureThreshold: 3
        httpGet:
          path: /readyz
          port: 8080
          scheme: HTTP
        initialDelaySeconds: 30
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 1
      resources:
        requests:
          cpu: 50m
          memory: 20Mi
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        runAsNonRoot: true
        runAsUser: 1000770000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /tmp/k8s-webhook-server/serving-certs
        name: webhook-cert
      - mountPath: /apiserver.local.config/certificates
        name: apiservice-cert
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-fbm56
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    nodeName: master-0
    preemptionPolicy: PreemptLowerPriority
    priority: 0
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1000770000
      seLinuxOptions:
        level: s0:c28,c7
      seccompProfile:
        type: RuntimeDefault
    serviceAccount: manager-account
    serviceAccountName: manager-account
    terminationGracePeriodSeconds: 10
    tolerations:
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
      tolerationSeconds: 300
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 300
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - name: cert
      secret:
        defaultMode: 420
        secretName: metallb-operator-webhook-server-cert
    - name: apiservice-cert
      secret:
        defaultMode: 420
        items:
        - key: tls.crt
          path: apiserver.crt
        - key: tls.key
          path: apiserver.key
        secretName: metallb-operator-controller-manager-service-cert
    - name: webhook-cert
      secret:
        defaultMode: 420
        items:
        - key: tls.crt
          path: tls.crt
        - key: tls.key
          path: tls.key
        secretName: metallb-operator-controller-manager-service-cert
    - name: kube-api-access-fbm56
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:37:04Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:36:55Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:37:36Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:37:36Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:36:55Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://6a5ce446debd5946fe6178b50f113cd0f41c0b3fa288937372270f29d9dceb70
      image: registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:6fd3e59fedf58b8842b17604b513ee43c81fcbc339b342383098ea81109a8854
      imageID: registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:6fd3e59fedf58b8842b17604b513ee43c81fcbc339b342383098ea81109a8854
      lastState: {}
      name: manager
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-02-16T17:37:04Z"
      volumeMounts:
      - mountPath: /tmp/k8s-webhook-server/serving-certs
        name: webhook-cert
      - mountPath: /apiserver.local.config/certificates
        name: apiservice-cert
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-fbm56
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 192.168.32.10
    hostIPs:
    - ip: 192.168.32.10
    phase: Running
    podIP: 10.128.0.91
    podIPs:
    - ip: 10.128.0.91
    qosClass: Burstable
    startTime: "2026-02-16T17:36:55Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      alm-examples: |-
        [
          {
            "apiVersion": "frrk8s.metallb.io/v1beta1",
            "kind": "FRRConfiguration",
            "metadata": {
              "name": "basic",
              "namespace": "frr-k8s-system"
            },
            "spec": {
              "bgp": {
                "routers": [
                  {
                    "asn": 64512,
                    "neighbors": [
                      {
                        "address": "172.30.0.3",
                        "asn": 64512,
                        "port": 180,
                        "toAdvertise": {
                          "allowed": {
                            "mode": "all"
                          }
                        },
                        "toReceive": {
                          "allowed": {
                            "mode": "all"
                          }
                        }
                      }
                    ]
                  }
                ]
              }
            }
          },
          {
            "apiVersion": "frrk8s.metallb.io/v1beta1",
            "kind": "FRRConfiguration",
            "metadata": {
              "name": "two-neighs",
              "namespace": "frr-k8s-system"
            },
            "spec": {
              "bgp": {
                "routers": [
                  {
                    "asn": 64512,
                    "neighbors": [
                      {
                        "address": "172.30.0.3",
                        "asn": 4200000000,
                        "ebgpMultiHop": true,
                        "port": 180,
                        "toAdvertise": {
                          "allowed": {
                            "mode": "all"
                          }
                        }
                      },
                      {
                        "address": "172.18.0.6",
                        "asn": 4200000000,
                        "port": 179,
                        "toAdvertise": {
                          "allowed": {
                            "prefixes": [
                              "192.168.2.0/24"
                            ]
                          }
                        }
                      }
                    ],
                    "prefixes": [
                      "192.168.2.0/24",
                      "192.169.2.0/24"
                    ]
                  }
                ]
              }
            }
          },
          {
            "apiVersion": "frrk8s.metallb.io/v1beta1",
            "kind": "FRRConfiguration",
            "metadata": {
              "name": "two-routers-vrf",
              "namespace": "frr-k8s-system"
            },
            "spec": {
              "bgp": {
                "routers": [
                  {
                    "asn": 64513,
                    "neighbors": [
                      {
                        "address": "172.32.0.3",
                        "asn": 4200000000,
                        "ebgpMultiHop": true,
                        "port": 180,
                        "toAdvertise": {
                          "allowed": {
                            "mode": "all"
                          }
                        }
                      }
                    ],
                    "prefixes": [
                      "192.168.2.0/24",
                      "192.169.2.0/24"
                    ]
                  },
                  {
                    "asn": 64515,
                    "neighbors": [
                      {
                        "address": "172.31.0.3",
                        "asn": 4200000000,
                        "port": 179,
                        "toAdvertise": {
                          "allowed": {
                            "mode": "all"
                          }
                        }
                      }
                    ],
                    "prefixes": [
                      "192.168.2.0/24",
                      "192.169.2.0/24"
                    ],
                    "vrf": "red"
                  }
                ]
              }
            }
          },
          {
            "apiVersion": "frrk8s.metallb.io/v1beta1",
            "kind": "FRRNodeState",
            "metadata": {
              "name": "frr-k8s-worker"
            },
            "status": {
              "lastConversionResult": "success",
              "lastReloadResult": "success",
              "runningConfig": "Building configuration...\n\nCurrent configuration:\n!\nfrr version 9.0.2_git\nfrr defaults traditional\nhostname frr-k8s-worker\nlog file /etc/frr/frr.log informational\nlog timestamp precision 3\nno ipv6 forwarding\nservice integrated-vtysh-config\n!\nip nht resolve-via-default\n!\nipv6 nht resolve-via-default\n!\nend\n"
            }
          },
          {
            "apiVersion": "metallb.io/v1beta1",
            "kind": "BFDProfile",
            "metadata": {
              "name": "bfd-profile-sample",
              "namespace": "metallb-system"
            },
            "spec": {
              "receiveInterval": 380,
              "transmitInterval": 270
            }
          },
          {
            "apiVersion": "metallb.io/v1beta1",
            "kind": "BGPAdvertisement",
            "metadata": {
              "name": "bgp-adv-sample1",
              "namespace": "metallb-system"
            },
            "spec": {
              "ipAddressPools": [
                "ip-addresspool-sample1"
              ],
              "peers": [
                "ebgp-single-hop0"
              ]
            }
          },
          {
            "apiVersion": "metallb.io/v1beta1",
            "kind": "BGPAdvertisement",
            "metadata": {
              "name": "bgp-adv-sample2",
              "namespace": "metallb-system"
            },
            "spec": {
              "ipAddressPoolSelectors": [
                {
                  "matchLabels": {
                    "test": "ipv6"
                  }
                },
                {
                  "matchLabels": {
                    "test": "ipv4"
                  }
                }
              ]
            }
          },
          {
            "apiVersion": "metallb.io/v1beta1",
            "kind": "BGPAdvertisement",
            "metadata": {
              "name": "bgp-adv-sample3",
              "namespace": "metallb-system"
            },
            "spec": {
              "aggregationLength": 32,
              "aggregationLengthV6": 128,
              "communities": [
                "65535:65282"
              ],
              "ipAddressPools": [
                "ip-addresspool-sample1"
              ],
              "localPref": 50
            }
          },
          {
            "apiVersion": "metallb.io/v1beta1",
            "kind": "BGPAdvertisement",
            "metadata": {
              "name": "bgp-adv-sample4",
              "namespace": "metallb-system"
            },
            "spec": {
              "aggregationLength": 32,
              "aggregationLengthV6": 128,
              "communities": [
                "NO_ADVERTISE"
              ],
              "ipAddressPools": [
                "ip-addresspool-sample1"
              ],
              "localPref": 50
            }
          },
          {
            "apiVersion": "metallb.io/v1beta1",
            "kind": "BGPAdvertisement",
            "metadata": {
              "name": "bgp-adv-sample5",
              "namespace": "metallb-system"
            },
            "spec": {
              "aggregationLength": 32,
              "aggregationLengthV6": 128,
              "ipAddressPools": [
                "ip-addresspool-sample1"
              ],
              "nodeSelectors": [
                {
                  "matchLabels": {
                    "kubernetes.io/hostname": "kind-control-plane"
                  }
                },
                {
                  "matchLabels": {
                    "kubernetes.io/hostname": "kind-worker"
                  }
                }
              ]
            }
          },
          {
            "apiVersion": "metallb.io/v1beta1",
            "kind": "BGPPeer",
            "metadata": {
              "name": "bgp-peer-beta1",
              "namespace": "metallb-system"
            },
            "spec": {
              "myASN": 64512,
              "peerASN": 64512,
              "peerAddress": "172.30.0.3"
            }
          },
          {
            "apiVersion": "metallb.io/v1beta1",
            "kind": "Community",
            "metadata": {
              "name": "community1",
              "namespace": "metallb-system"
            },
            "spec": {
              "communities": [
                {
                  "name": "NO_ADVERTISE",
                  "value": "65535:65282"
                }
              ]
            }
          },
          {
            "apiVersion": "metallb.io/v1beta1",
            "kind": "IPAddressPool",
            "metadata": {
              "name": "ip-addresspool-sample1",
              "namespace": "metallb-system"
            },
            "spec": {
              "addresses": [
                "192.168.10.0/24",
                "192.168.9.1-192.168.9.5",
                "fc00:f853:0ccd:e799::/124"
              ]
            }
          },
          {
            "apiVersion": "metallb.io/v1beta1",
            "kind": "IPAddressPool",
            "metadata": {
              "labels": {
                "test": "ipv4"
              },
              "name": "ip-addresspool-sample2",
              "namespace": "metallb-system"
            },
            "spec": {
              "addresses": [
                "172.20.0.100/24"
              ],
              "autoAssign": false
            }
          },
          {
            "apiVersion": "metallb.io/v1beta1",
            "kind": "IPAddressPool",
            "metadata": {
              "labels": {
                "test": "ipv6"
              },
              "name": "ip-addresspool-sample3",
              "namespace": "metallb-system"
            },
            "spec": {
              "addresses": [
                "2002:2:2::1-2002:2:2::100"
              ]
            }
          },
          {
            "apiVersion": "metallb.io/v1beta1",
            "kind": "L2Advertisement",
            "metadata": {
              "name": "l2-adv-sample1",
              "namespace": "metallb-system"
            },
            "spec": {
              "ipAddressPools": [
                "ip-addresspool-sample1"
              ]
            }
          },
          {
            "apiVersion": "metallb.io/v1beta1",
            "kind": "L2Advertisement",
            "metadata": {
              "name": "l2-adv-sample2",
              "namespace": "metallb-system"
            },
            "spec": {
              "nodeSelectors": [
                {
                  "matchLabels": {
                    "kubernetes.io/hostname": "kind-control-plane"
                  }
                }
              ]
            }
          },
          {
            "apiVersion": "metallb.io/v1beta1",
            "kind": "MetalLB",
            "metadata": {
              "name": "metallb",
              "namespace": "metallb-system"
            },
            "spec": {}
          },
          {
            "apiVersion": "metallb.io/v1beta2",
            "kind": "BGPPeer",
            "metadata": {
              "name": "bgp-peer-sample1",
              "namespace": "metallb-system"
            },
            "spec": {
              "myASN": 64512,
              "peerASN": 64512,
              "peerAddress": "172.30.0.3"
            }
          },
          {
            "apiVersion": "metallb.io/v1beta2",
            "kind": "BGPPeer",
            "metadata": {
              "name": "bgp-peer-sample2",
              "namespace": "metallb-system"
            },
            "spec": {
              "bfdProfile": "bfd-profile-sample",
              "myASN": 64512,
              "peerASN": 64512,
              "peerAddress": "172.30.0.3"
            }
          },
          {
            "apiVersion": "metallb.io/v1beta2",
            "kind": "BGPPeer",
            "metadata": {
              "name": "bgp-peer-sample3",
              "namespace": "metallb-system"
            },
            "spec": {
              "holdTime": "9m0s",
              "keepaliveTime": "0s",
              "myASN": 64512,
              "passwordSecret": {
                "name": "secretname",
                "namespace": "metallb-system"
              },
              "peerASN": 64512,
              "peerAddress": "172.30.0.3",
              "peerPort": 180
            }
          }
        ]
      capabilities: Basic Install
      categories: Networking
      certified: "false"
      containerImage: registry.redhat.io/openshift4/metallb-rhel9-operator@sha256:6fd3e59fedf58b8842b17604b513ee43c81fcbc339b342383098ea81109a8854
      createdAt: "2023-06-06T15:25:00Z"
      description: An operator for deploying MetalLB on a kubernetes cluster.
      features.operators.openshift.io/disconnected: "true"
      features.operators.openshift.io/fips-compliant: "true"
      features.operators.openshift.io/proxy-aware: "false"
      features.operators.openshift.io/tls-profiles: "false"
      features.operators.openshift.io/token-auth-aws: "false"
      features.operators.openshift.io/token-auth-azure: "false"
      features.operators.openshift.io/token-auth-gcp: "false"
      k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.128.0.92/23"],"mac_address":"0a:58:0a:80:00:5c","gateway_ips":["10.128.0.1"],"routes":[{"dest":"10.128.0.0/16","nextHop":"10.128.0.1"},{"dest":"172.30.0.0/16","nextHop":"10.128.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.128.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.128.0.1"}],"ip_address":"10.128.0.92/23","gateway_ip":"10.128.0.1","role":"primary"}}'
      k8s.v1.cni.cncf.io/network-status: |-
        [{
            "name": "ovn-kubernetes",
            "interface": "eth0",
            "ips": [
                "10.128.0.92"
            ],
            "mac": "0a:58:0a:80:00:5c",
            "default": true,
            "dns": {}
        }]
      olm.operatorGroup: metallb-operator
      olm.operatorNamespace: metallb-system
      olm.skipRange: '>=4.8.0 <4.18.0'
      olm.targetNamespaces: ""
      olmcahash: 8c946d4497b8adf83f45521c0994b0bcbfce84abefa2db1227a6fe20a3f3b635
      openshift.io/required-scc: restricted-v2
      openshift.io/scc: restricted-v2
      operatorframework.io/properties: '{"properties":[{"type":"olm.gvk","value":{"group":"frrk8s.metallb.io","kind":"FRRConfiguration","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"frrk8s.metallb.io","kind":"FRRNodeState","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"metallb.io","kind":"BFDProfile","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"metallb.io","kind":"BGPAdvertisement","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"metallb.io","kind":"BGPPeer","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"metallb.io","kind":"BGPPeer","version":"v1beta2"}},{"type":"olm.gvk","value":{"group":"metallb.io","kind":"Community","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"metallb.io","kind":"IPAddressPool","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"metallb.io","kind":"L2Advertisement","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"metallb.io","kind":"MetalLB","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"metallb.io","kind":"ServiceL2Status","version":"v1beta1"}},{"type":"olm.package","value":{"packageName":"metallb-operator","version":"4.18.0-202601302238"}}]}'
      operatorframework.io/suggested-namespace: metallb-system
      operators.openshift.io/valid-subscription: '["OpenShift Kubernetes Engine",
        "OpenShift Container Platform", "OpenShift Platform Plus"]'
      operators.operatorframework.io/builder: operator-sdk-v1.34.1
      operators.operatorframework.io/project_layout: go.kubebuilder.io/v4
      prometheus.io/port: "7472"
      prometheus.io/scrape: "true"
      repository: https://github.com/openshift/metallb-operator
      seccomp.security.alpha.kubernetes.io/pod: runtime/default
      support: Red Hat
    creationTimestamp: "2026-02-16T17:36:56Z"
    generateName: metallb-operator-webhook-server-674d8b687-
    labels:
      app: metallb
      component: webhook-server
      pod-template-hash: 674d8b687
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:alm-examples: {}
            f:capabilities: {}
            f:categories: {}
            f:certified: {}
            f:containerImage: {}
            f:createdAt: {}
            f:description: {}
            f:features.operators.openshift.io/disconnected: {}
            f:features.operators.openshift.io/fips-compliant: {}
            f:features.operators.openshift.io/proxy-aware: {}
            f:features.operators.openshift.io/tls-profiles: {}
            f:features.operators.openshift.io/token-auth-aws: {}
            f:features.operators.openshift.io/token-auth-azure: {}
            f:features.operators.openshift.io/token-auth-gcp: {}
            f:olm.operatorGroup: {}
            f:olm.operatorNamespace: {}
            f:olm.skipRange: {}
            f:olm.targetNamespaces: {}
            f:olmcahash: {}
            f:openshift.io/required-scc: {}
            f:operatorframework.io/properties: {}
            f:operatorframework.io/suggested-namespace: {}
            f:operators.openshift.io/valid-subscription: {}
            f:operators.operatorframework.io/builder: {}
            f:operators.operatorframework.io/project_layout: {}
            f:prometheus.io/port: {}
            f:prometheus.io/scrape: {}
            f:repository: {}
            f:support: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:app: {}
            f:component: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"35582cd8-30f1-4387-ac38-fff7bfa0cf10"}: {}
        f:spec:
          f:containers:
            k:{"name":"webhook-server"}:
              .: {}
              f:args: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"METALLB_BGP_TYPE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"OPERATOR_CONDITION_NAME"}:
                  .: {}
                  f:name: {}
                  f:value: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":7472,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
                k:{"containerPort":9443,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:name: {}
                  f:protocol: {}
              f:readinessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:resources: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/apiserver.local.config/certificates"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/tmp/k8s-webhook-server/serving-certs"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:nodeSelector: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:volumes:
            .: {}
            k:{"name":"apiservice-cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:items: {}
                f:secretName: {}
            k:{"name":"cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"webhook-cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:items: {}
                f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-02-16T17:36:56Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.ovn.org/pod-networks: {}
      manager: master-0
      operation: Update
      subresource: status
      time: "2026-02-16T17:36:56Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:k8s.v1.cni.cncf.io/network-status: {}
      manager: multus-daemon
      operation: Update
      subresource: status
      time: "2026-02-16T17:36:57Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"10.128.0.92"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-02-16T17:37:16Z"
    name: metallb-operator-webhook-server-674d8b687-qj4fp
    namespace: metallb-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: metallb-operator-webhook-server-674d8b687
      uid: 35582cd8-30f1-4387-ac38-fff7bfa0cf10
    resourceVersion: "27290"
    uid: 9cdd5392-44dd-46c2-8f1a-e63b7be5d0a5
  spec:
    containers:
    - args:
      - --disable-cert-rotation=true
      - --port=7472
      - --log-level=info
      - --webhook-mode=onlywebhook
      command:
      - /controller
      env:
      - name: METALLB_BGP_TYPE
        value: frr
      - name: OPERATOR_CONDITION_NAME
        value: metallb-operator.v4.18.0-202601302238
      image: registry.redhat.io/openshift4/metallb-rhel9@sha256:5734cf213934e92a65bb43f1e280bfdfb5b614a7ef55fedf26acdbc5c020092e
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 3
        httpGet:
          path: /metrics
          port: monitoring
          scheme: HTTP
        initialDelaySeconds: 10
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 1
      name: webhook-server
      ports:
      - containerPort: 7472
        name: monitoring
        protocol: TCP
      - containerPort: 9443
        name: webhook-server
        protocol: TCP
      readinessProbe:
        failureThreshold: 3
        httpGet:
          path: /metrics
          port: monitoring
          scheme: HTTP
        initialDelaySeconds: 10
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 1
      resources: {}
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        runAsNonRoot: true
        runAsUser: 1000770000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /tmp/k8s-webhook-server/serving-certs
        name: webhook-cert
      - mountPath: /apiserver.local.config/certificates
        name: apiservice-cert
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-bbwwx
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    nodeName: master-0
    nodeSelector:
      kubernetes.io/os: linux
    preemptionPolicy: PreemptLowerPriority
    priority: 0
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1000770000
      seLinuxOptions:
        level: s0:c28,c7
      seccompProfile:
        type: RuntimeDefault
    serviceAccount: controller
    serviceAccountName: controller
    terminationGracePeriodSeconds: 0
    tolerations:
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
      tolerationSeconds: 300
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 300
    volumes:
    - name: cert
      secret:
        defaultMode: 420
        secretName: metallb-webhook-cert
    - name: apiservice-cert
      secret:
        defaultMode: 420
        items:
        - key: tls.crt
          path: apiserver.crt
        - key: tls.key
          path: apiserver.key
        secretName: metallb-operator-webhook-server-service-cert
    - name: webhook-cert
      secret:
        defaultMode: 420
        items:
        - key: tls.crt
          path: tls.crt
        - key: tls.key
          path: tls.key
        secretName: metallb-operator-webhook-server-service-cert
    - name: kube-api-access-bbwwx
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:37:04Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:36:56Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:37:16Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:37:16Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:36:56Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://7104afa143e19c3473405fd120b5b5ad7ff037fcb55efca815c05594f3522715
      image: registry.redhat.io/openshift4/metallb-rhel9@sha256:5734cf213934e92a65bb43f1e280bfdfb5b614a7ef55fedf26acdbc5c020092e
      imageID: registry.redhat.io/openshift4/metallb-rhel9@sha256:5734cf213934e92a65bb43f1e280bfdfb5b614a7ef55fedf26acdbc5c020092e
      lastState: {}
      name: webhook-server
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-02-16T17:37:04Z"
      volumeMounts:
      - mountPath: /tmp/k8s-webhook-server/serving-certs
        name: webhook-cert
      - mountPath: /apiserver.local.config/certificates
        name: apiservice-cert
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-bbwwx
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 192.168.32.10
    hostIPs:
    - ip: 192.168.32.10
    phase: Running
    podIP: 10.128.0.92
    podIPs:
    - ip: 10.128.0.92
    qosClass: BestEffort
    startTime: "2026-02-16T17:36:56Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      openshift.io/scc: privileged
    creationTimestamp: "2026-02-16T17:37:45Z"
    generateName: speaker-
    labels:
      app: metallb
      component: speaker
      controller-revision-hash: ddf7db8cb
      pod-template-generation: "1"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:generateName: {}
          f:labels:
            .: {}
            f:app: {}
            f:component: {}
            f:controller-revision-hash: {}
            f:pod-template-generation: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"d2cd61e6-f29a-4252-a5e2-8433ee08e0b7"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
          f:containers:
            k:{"name":"kube-rbac-proxy"}:
              .: {}
              f:args: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":9120,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/metrics"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
            k:{"name":"speaker"}:
              .: {}
              f:args: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"METALLB_BGP_TYPE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"METALLB_HOST"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"METALLB_ML_BIND_ADDR"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"METALLB_ML_BIND_PORT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"METALLB_ML_LABELS"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"METALLB_ML_SECRET_KEY_PATH"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"METALLB_NODE_NAME"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"METALLB_POD_NAME"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:livenessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":9122,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
                k:{"containerPort":9122,"protocol":"UDP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
                k:{"containerPort":29150,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
              f:readinessProbe:
                .: {}
                f:failureThreshold: {}
                f:httpGet:
                  .: {}
                  f:host: {}
                  f:path: {}
                  f:port: {}
                  f:scheme: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:resources: {}
              f:securityContext:
                .: {}
                f:allowPrivilegeEscalation: {}
                f:capabilities:
                  .: {}
                  f:add: {}
                  f:drop: {}
                f:readOnlyRootFilesystem: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/metallb"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/ml_secret_key"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:nodeSelector: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"memberlist"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
            k:{"name":"metallb-excludel2"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
              f:name: {}
            k:{"name":"metrics-certs"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-02-16T17:37:45Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"192.168.32.10"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2026-02-16T17:38:07Z"
    name: speaker-fcwq4
    namespace: metallb-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: DaemonSet
      name: speaker
      uid: d2cd61e6-f29a-4252-a5e2-8433ee08e0b7
    resourceVersion: "28747"
    uid: 0cd1cce4-1306-4329-bf75-80e1b3667809
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchFields:
            - key: metadata.name
              operator: In
              values:
              - master-0
    containers:
    - args:
      - --port=29150
      - --log-level=debug
      - --host=localhost
      command:
      - /speaker
      env:
      - name: METALLB_NODE_NAME
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: spec.nodeName
      - name: METALLB_HOST
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: status.hostIP
      - name: METALLB_ML_BIND_ADDR
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: status.podIP
      - name: METALLB_ML_LABELS
        value: app=metallb,component=speaker
      - name: METALLB_ML_BIND_PORT
        value: "9122"
      - name: METALLB_ML_SECRET_KEY_PATH
        value: /etc/ml_secret_key
      - name: METALLB_BGP_TYPE
        value: frr-k8s
      - name: METALLB_POD_NAME
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.name
      image: registry.redhat.io/openshift4/metallb-rhel9@sha256:5734cf213934e92a65bb43f1e280bfdfb5b614a7ef55fedf26acdbc5c020092e
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 3
        httpGet:
          host: localhost
          path: /metrics
          port: monitoring
          scheme: HTTP
        initialDelaySeconds: 10
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 1
      name: speaker
      ports:
      - containerPort: 29150
        hostPort: 29150
        name: monitoring
        protocol: TCP
      - containerPort: 9122
        hostPort: 9122
        name: memberlist-tcp
        protocol: TCP
      - containerPort: 9122
        hostPort: 9122
        name: memberlist-udp
        protocol: UDP
      readinessProbe:
        failureThreshold: 3
        httpGet:
          host: localhost
          path: /metrics
          port: monitoring
          scheme: HTTP
        initialDelaySeconds: 10
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 1
      resources: {}
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          add:
          - NET_RAW
          drop:
          - ALL
        readOnlyRootFilesystem: true
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /etc/ml_secret_key
        name: memberlist
      - mountPath: /etc/metallb
        name: metallb-excludel2
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-mcvkp
        readOnly: true
    - args:
      - --logtostderr
      - --secure-listen-address=:9120
      - --upstream=http://localhost:29150/
      - --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
      - --tls-private-key-file=/etc/metrics/tls.key
      - --tls-cert-file=/etc/metrics/tls.crt
      image: registry.redhat.io/openshift4/ose-kube-rbac-proxy-rhel9@sha256:d887865ef3f02e69de8e9a95ec6504a29fcd3a32bef934d73b8f29684dbb9b95
      imagePullPolicy: IfNotPresent
      name: kube-rbac-proxy
      ports:
      - containerPort: 9120
        hostPort: 9120
        name: metricshttps
        protocol: TCP
      resources:
        requests:
          cpu: 10m
          memory: 20Mi
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/metrics
        name: metrics-certs
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-mcvkp
        readOnly: true
    dnsPolicy: ClusterFirst
    enableServiceLinks: true
    hostNetwork: true
    nodeName: master-0
    nodeSelector:
      kubernetes.io/os: linux
      node-role.kubernetes.io/worker: ""
    preemptionPolicy: PreemptLowerPriority
    priority: 0
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext: {}
    serviceAccount: speaker
    serviceAccountName: speaker
    terminationGracePeriodSeconds: 0
    tolerations:
    - effect: NoSchedule
      key: node-role.kubernetes.io/master
      operator: Exists
    - effect: NoSchedule
      key: node-role.kubernetes.io/control-plane
      operator: Exists
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/disk-pressure
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/pid-pressure
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/unschedulable
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/network-unavailable
      operator: Exists
    volumes:
    - name: metrics-certs
      secret:
        defaultMode: 420
        secretName: speaker-certs-secret
    - name: memberlist
      secret:
        defaultMode: 420
        secretName: metallb-memberlist
    - configMap:
        defaultMode: 256
        name: metallb-excludel2
      name: metallb-excludel2
    - name: kube-api-access-mcvkp
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:37:50Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:37:45Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:38:07Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:38:07Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2026-02-16T17:37:45Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://c3b2614eb12be02c187ad80d0c73e67c69165a38afde5fa4168b6b3aa1c59533
      image: registry.redhat.io/openshift4/ose-kube-rbac-proxy-rhel9@sha256:d887865ef3f02e69de8e9a95ec6504a29fcd3a32bef934d73b8f29684dbb9b95
      imageID: registry.redhat.io/openshift4/ose-kube-rbac-proxy-rhel9@sha256:cb2014728aa54e620f65424402b14c5247016734a9a982c393dc011acb1a1f52
      lastState: {}
      name: kube-rbac-proxy
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-02-16T17:37:50Z"
      volumeMounts:
      - mountPath: /etc/metrics
        name: metrics-certs
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-mcvkp
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://04e68c09e80c2aada3fd7a47848e6dfb01e9d103c64cb02fe20b3c14ae76f820
      image: registry.redhat.io/openshift4/metallb-rhel9@sha256:5734cf213934e92a65bb43f1e280bfdfb5b614a7ef55fedf26acdbc5c020092e
      imageID: registry.redhat.io/openshift4/metallb-rhel9@sha256:5734cf213934e92a65bb43f1e280bfdfb5b614a7ef55fedf26acdbc5c020092e
      lastState: {}
      name: speaker
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2026-02-16T17:37:48Z"
      volumeMounts:
      - mountPath: /etc/ml_secret_key
        name: memberlist
      - mountPath: /etc/metallb
        name: metallb-excludel2
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-mcvkp
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 192.168.32.10
    hostIPs:
    - ip: 192.168.32.10
    phase: Running
    podIP: 192.168.32.10
    podIPs:
    - ip: 192.168.32.10
    qosClass: Burstable
    startTime: "2026-02-16T17:37:45Z"
kind: PodList
metadata:
  resourceVersion: "60048"