--- apiVersion: v1 items: - apiVersion: v1 kind: Pod metadata: annotations: kubectl.kubernetes.io/default-container: etcd kubernetes.io/config.hash: 4dd8b778e190b1975a0a8fad534da6dd kubernetes.io/config.mirror: 4dd8b778e190b1975a0a8fad534da6dd kubernetes.io/config.seen: "2025-12-03T14:17:04.267402714Z" kubernetes.io/config.source: file target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}' creationTimestamp: "2025-12-03T14:20:12Z" labels: app: etcd etcd: "true" k8s-app: etcd revision: "2" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:kubectl.kubernetes.io/default-container: {} f:kubernetes.io/config.hash: {} f:kubernetes.io/config.mirror: {} f:kubernetes.io/config.seen: {} f:kubernetes.io/config.source: {} f:target.workload.openshift.io/management: {} f:labels: .: {} f:app: {} f:etcd: {} f:k8s-app: {} f:revision: {} f:ownerReferences: .: {} k:{"uid":"bd7abe6d-36d2-4ce8-92a1-7fdd9966d574"}: {} f:spec: f:containers: k:{"name":"etcd"}: .: {} f:command: {} f:env: .: {} k:{"name":"ALL_ETCD_ENDPOINTS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_CIPHER_SUITES"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_DATA_DIR"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_ELECTION_TIMEOUT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_ENABLE_PPROF"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_MAX_LEARNERS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_WARNING_APPLY_DURATION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_WATCH_PROGRESS_NOTIFY_INTERVAL"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_HEARTBEAT_INTERVAL"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_IMAGE"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_INITIAL_CLUSTER_STATE"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_QUOTA_BACKEND_BYTES"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_SOCKET_REUSE_ADDRESS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_STATIC_POD_VERSION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_TLS_MIN_VERSION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_API"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_CACERT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_CERT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_ENDPOINTS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_KEY"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_ETCD_NAME"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_ETCD_URL_HOST"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_IP"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:livenessProbe: .: {} f:failureThreshold: {} f:httpGet: .: {} f:path: {} f:port: {} f:scheme: {} f:periodSeconds: {} f:successThreshold: {} f:timeoutSeconds: {} f:name: {} f:ports: .: {} k:{"containerPort":2379,"protocol":"TCP"}: .: {} f:containerPort: {} f:hostPort: {} f:name: {} f:protocol: {} k:{"containerPort":2380,"protocol":"TCP"}: .: {} f:containerPort: {} f:hostPort: {} f:name: {} f:protocol: {} k:{"containerPort":9978,"protocol":"TCP"}: .: {} f:containerPort: {} f:hostPort: {} f:name: {} f:protocol: {} f:readinessProbe: .: {} f:failureThreshold: {} f:httpGet: .: {} f:path: {} f:port: {} f:scheme: {} f:periodSeconds: {} f:successThreshold: {} f:timeoutSeconds: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:privileged: {} f:startupProbe: .: {} f:failureThreshold: {} f:httpGet: .: {} f:path: {} f:port: {} f:scheme: {} f:initialDelaySeconds: {} f:periodSeconds: {} f:successThreshold: {} f:timeoutSeconds: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/etc/kubernetes/manifests"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/etc/kubernetes/static-pod-certs"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/etc/kubernetes/static-pod-resources"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/var/lib/etcd/"}: .: {} f:mountPath: {} f:name: {} k:{"name":"etcd-metrics"}: .: {} f:command: {} f:env: .: {} k:{"name":"ALL_ETCD_ENDPOINTS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_CIPHER_SUITES"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_DATA_DIR"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_ELECTION_TIMEOUT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_ENABLE_PPROF"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_MAX_LEARNERS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_WARNING_APPLY_DURATION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_WATCH_PROGRESS_NOTIFY_INTERVAL"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_HEARTBEAT_INTERVAL"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_IMAGE"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_INITIAL_CLUSTER_STATE"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_QUOTA_BACKEND_BYTES"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_SOCKET_REUSE_ADDRESS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_STATIC_POD_VERSION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_TLS_MIN_VERSION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_API"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_CACERT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_CERT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_ENDPOINTS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_KEY"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_ETCD_NAME"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_ETCD_URL_HOST"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_IP"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:ports: .: {} k:{"containerPort":9979,"protocol":"TCP"}: .: {} f:containerPort: {} f:hostPort: {} f:name: {} f:protocol: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:privileged: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/etc/kubernetes/static-pod-certs"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/etc/kubernetes/static-pod-resources"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/var/lib/etcd/"}: .: {} f:mountPath: {} f:name: {} k:{"name":"etcd-readyz"}: .: {} f:command: {} f:env: .: {} k:{"name":"ALL_ETCD_ENDPOINTS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_CIPHER_SUITES"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_DATA_DIR"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_ELECTION_TIMEOUT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_ENABLE_PPROF"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_MAX_LEARNERS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_WARNING_APPLY_DURATION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_WATCH_PROGRESS_NOTIFY_INTERVAL"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_HEARTBEAT_INTERVAL"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_IMAGE"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_INITIAL_CLUSTER_STATE"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_QUOTA_BACKEND_BYTES"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_SOCKET_REUSE_ADDRESS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_TLS_MIN_VERSION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_API"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_CACERT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_CERT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_ENDPOINTS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_KEY"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_ETCD_NAME"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_ETCD_URL_HOST"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_IP"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:ports: .: {} k:{"containerPort":9980,"protocol":"TCP"}: .: {} f:containerPort: {} f:hostPort: {} f:name: {} f:protocol: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:privileged: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/etc/kubernetes/static-pod-certs"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/var/log/etcd/"}: .: {} f:mountPath: {} f:name: {} k:{"name":"etcd-rev"}: .: {} f:command: {} f:env: .: {} k:{"name":"ALL_ETCD_ENDPOINTS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_CIPHER_SUITES"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_DATA_DIR"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_ELECTION_TIMEOUT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_ENABLE_PPROF"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_MAX_LEARNERS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_WARNING_APPLY_DURATION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_WATCH_PROGRESS_NOTIFY_INTERVAL"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_HEARTBEAT_INTERVAL"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_IMAGE"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_INITIAL_CLUSTER_STATE"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_QUOTA_BACKEND_BYTES"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_SOCKET_REUSE_ADDRESS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_TLS_MIN_VERSION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_API"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_CACERT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_CERT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_ENDPOINTS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_KEY"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_ETCD_NAME"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_ETCD_URL_HOST"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_IP"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:privileged: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/etc/kubernetes/static-pod-certs"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/var/lib/etcd"}: .: {} f:mountPath: {} f:name: {} k:{"name":"etcdctl"}: .: {} f:command: {} f:env: .: {} k:{"name":"ALL_ETCD_ENDPOINTS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_CIPHER_SUITES"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_DATA_DIR"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_ELECTION_TIMEOUT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_ENABLE_PPROF"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_MAX_LEARNERS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_WARNING_APPLY_DURATION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_WATCH_PROGRESS_NOTIFY_INTERVAL"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_HEARTBEAT_INTERVAL"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_IMAGE"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_INITIAL_CLUSTER_STATE"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_QUOTA_BACKEND_BYTES"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_SOCKET_REUSE_ADDRESS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_STATIC_POD_VERSION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_TLS_MIN_VERSION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_API"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_CACERT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_CERT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_ENDPOINTS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_KEY"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_ETCD_NAME"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_ETCD_URL_HOST"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_IP"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/etc/kubernetes/manifests"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/etc/kubernetes/static-pod-certs"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/etc/kubernetes/static-pod-resources"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/var/lib/etcd/"}: .: {} f:mountPath: {} f:name: {} f:dnsPolicy: {} f:enableServiceLinks: {} f:hostNetwork: {} f:initContainers: .: {} k:{"name":"etcd-ensure-env-vars"}: .: {} f:command: {} f:env: .: {} k:{"name":"ALL_ETCD_ENDPOINTS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_CIPHER_SUITES"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_DATA_DIR"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_ELECTION_TIMEOUT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_ENABLE_PPROF"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_MAX_LEARNERS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_WARNING_APPLY_DURATION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_WATCH_PROGRESS_NOTIFY_INTERVAL"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_HEARTBEAT_INTERVAL"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_IMAGE"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_INITIAL_CLUSTER_STATE"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_QUOTA_BACKEND_BYTES"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_SOCKET_REUSE_ADDRESS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_TLS_MIN_VERSION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_API"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_CACERT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_CERT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_ENDPOINTS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_KEY"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_IP"}: .: {} f:name: {} f:valueFrom: .: {} f:fieldRef: {} k:{"name":"NODE_master_0_ETCD_NAME"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_ETCD_URL_HOST"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_IP"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:privileged: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} k:{"name":"etcd-resources-copy"}: .: {} f:command: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:privileged: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/etc/kubernetes/static-pod-certs"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/etc/kubernetes/static-pod-resources"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/usr/local/bin"}: .: {} f:mountPath: {} f:name: {} k:{"name":"setup"}: .: {} f:command: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:privileged: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/var/log/etcd"}: .: {} f:mountPath: {} f:name: {} f:nodeName: {} f:priorityClassName: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: {} f:terminationGracePeriodSeconds: {} f:tolerations: {} f:volumes: .: {} k:{"name":"cert-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"config-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"data-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"etcd-auto-backup-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"log-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"resource-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"static-pod-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"usr-local-bin"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} manager: kubelet operation: Update time: "2025-12-03T14:20:08Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"ContainersReady"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"Initialized"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"PodReadyToStartContainers"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"PodScheduled"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"Ready"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:status: {} f:type: {} f:containerStatuses: {} f:hostIP: {} f:hostIPs: {} f:initContainerStatuses: {} f:phase: {} f:podIP: {} f:podIPs: .: {} k:{"ip":"192.168.32.10"}: .: {} f:ip: {} f:startTime: {} manager: kubelet operation: Update subresource: status time: "2025-12-03T14:26:30Z" name: etcd-master-0 namespace: openshift-etcd ownerReferences: - apiVersion: v1 controller: true kind: Node name: master-0 uid: bd7abe6d-36d2-4ce8-92a1-7fdd9966d574 resourceVersion: "21079" uid: a561f6b2-988e-4e71-b615-4c1d7331d011 spec: containers: - command: - /bin/bash - -c - trap TERM INT; sleep infinity & wait env: - name: ALL_ETCD_ENDPOINTS value: https://192.168.32.10:2379 - name: ETCDCTL_API value: "3" - name: ETCDCTL_CACERT value: /etc/kubernetes/static-pod-certs/configmaps/etcd-all-bundles/server-ca-bundle.crt - name: ETCDCTL_CERT value: /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.crt - name: ETCDCTL_ENDPOINTS value: https://192.168.32.10:2379 - name: ETCDCTL_KEY value: /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.key - name: ETCD_CIPHER_SUITES value: TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 - name: ETCD_DATA_DIR value: /var/lib/etcd - name: ETCD_ELECTION_TIMEOUT value: "2500" - name: ETCD_ENABLE_PPROF value: "true" - name: ETCD_EXPERIMENTAL_MAX_LEARNERS value: "1" - name: ETCD_EXPERIMENTAL_WARNING_APPLY_DURATION value: 200ms - name: ETCD_EXPERIMENTAL_WATCH_PROGRESS_NOTIFY_INTERVAL value: 5s - name: ETCD_HEARTBEAT_INTERVAL value: "500" - name: ETCD_IMAGE value: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0c921698d30c8175da0c124f72748e93551d6903b0f34d26743b60cb12d25cb1 - name: ETCD_INITIAL_CLUSTER_STATE value: existing - name: ETCD_QUOTA_BACKEND_BYTES value: "8589934592" - name: ETCD_SOCKET_REUSE_ADDRESS value: "true" - name: ETCD_TLS_MIN_VERSION value: TLS1.2 - name: NODE_master_0_ETCD_NAME value: master-0 - name: NODE_master_0_ETCD_URL_HOST value: 192.168.32.10 - name: NODE_master_0_IP value: 192.168.32.10 - name: ETCD_STATIC_POD_VERSION value: "2" image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0c921698d30c8175da0c124f72748e93551d6903b0f34d26743b60cb12d25cb1 imagePullPolicy: IfNotPresent name: etcdctl resources: requests: cpu: 10m memory: 60Mi terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /etc/kubernetes/manifests name: static-pod-dir - mountPath: /etc/kubernetes/static-pod-resources name: resource-dir - mountPath: /etc/kubernetes/static-pod-certs name: cert-dir - mountPath: /var/lib/etcd/ name: data-dir - command: - /bin/sh - -c - | #!/bin/sh set -euo pipefail etcdctl member list || true # this has a non-zero return code if the command is non-zero. If you use an export first, it doesn't and you # will succeed when you should fail. ETCD_INITIAL_CLUSTER=$(discover-etcd-initial-cluster \ --cacert=/etc/kubernetes/static-pod-certs/configmaps/etcd-all-bundles/server-ca-bundle.crt \ --cert=/etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.crt \ --key=/etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.key \ --endpoints=${ALL_ETCD_ENDPOINTS} \ --data-dir=/var/lib/etcd \ --target-peer-url-host=${NODE_master_0_ETCD_URL_HOST} \ --target-name=master-0) export ETCD_INITIAL_CLUSTER # we cannot use the "normal" port conflict initcontainer because when we upgrade, the existing static pod will never yield, # so we do the detection in etcd container itself. echo -n "Waiting for ports 2379, 2380 and 9978 to be released." time while [ -n "$(ss -Htan '( sport = 2379 or sport = 2380 or sport = 9978 )')" ]; do echo -n "." sleep 1 done export ETCD_NAME=${NODE_master_0_ETCD_NAME} env | grep ETCD | grep -v NODE set -x # See https://etcd.io/docs/v3.4.0/tuning/ for why we use ionice exec nice -n -19 ionice -c2 -n0 etcd \ --logger=zap \ --log-level=info \ --experimental-initial-corrupt-check=true \ --snapshot-count=10000 \ --initial-advertise-peer-urls=https://${NODE_master_0_IP}:2380 \ --cert-file=/etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-serving-master-0.crt \ --key-file=/etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-serving-master-0.key \ --trusted-ca-file=/etc/kubernetes/static-pod-certs/configmaps/etcd-all-bundles/server-ca-bundle.crt \ --client-cert-auth=true \ --peer-cert-file=/etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.crt \ --peer-key-file=/etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.key \ --peer-trusted-ca-file=/etc/kubernetes/static-pod-certs/configmaps/etcd-all-bundles/server-ca-bundle.crt \ --peer-client-cert-auth=true \ --advertise-client-urls=https://${NODE_master_0_IP}:2379 \ --listen-client-urls=https://0.0.0.0:2379,unixs://${NODE_master_0_IP}:0 \ --listen-peer-urls=https://0.0.0.0:2380 \ --metrics=extensive \ --listen-metrics-urls=https://0.0.0.0:9978 || mv /etc/kubernetes/etcd-backup-dir/etcd-member.yaml /etc/kubernetes/manifests env: - name: ALL_ETCD_ENDPOINTS value: https://192.168.32.10:2379 - name: ETCDCTL_API value: "3" - name: ETCDCTL_CACERT value: /etc/kubernetes/static-pod-certs/configmaps/etcd-all-bundles/server-ca-bundle.crt - name: ETCDCTL_CERT value: /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.crt - name: ETCDCTL_ENDPOINTS value: https://192.168.32.10:2379 - name: ETCDCTL_KEY value: /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.key - name: ETCD_CIPHER_SUITES value: TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 - name: ETCD_DATA_DIR value: /var/lib/etcd - name: ETCD_ELECTION_TIMEOUT value: "2500" - name: ETCD_ENABLE_PPROF value: "true" - name: ETCD_EXPERIMENTAL_MAX_LEARNERS value: "1" - name: ETCD_EXPERIMENTAL_WARNING_APPLY_DURATION value: 200ms - name: ETCD_EXPERIMENTAL_WATCH_PROGRESS_NOTIFY_INTERVAL value: 5s - name: ETCD_HEARTBEAT_INTERVAL value: "500" - name: ETCD_IMAGE value: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0c921698d30c8175da0c124f72748e93551d6903b0f34d26743b60cb12d25cb1 - name: ETCD_INITIAL_CLUSTER_STATE value: existing - name: ETCD_QUOTA_BACKEND_BYTES value: "8589934592" - name: ETCD_SOCKET_REUSE_ADDRESS value: "true" - name: ETCD_TLS_MIN_VERSION value: TLS1.2 - name: NODE_master_0_ETCD_NAME value: master-0 - name: NODE_master_0_ETCD_URL_HOST value: 192.168.32.10 - name: NODE_master_0_IP value: 192.168.32.10 - name: ETCD_STATIC_POD_VERSION value: "2" image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0c921698d30c8175da0c124f72748e93551d6903b0f34d26743b60cb12d25cb1 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 httpGet: path: healthz port: 9980 scheme: HTTPS periodSeconds: 5 successThreshold: 1 timeoutSeconds: 30 name: etcd ports: - containerPort: 2379 hostPort: 2379 name: etcd protocol: TCP - containerPort: 2380 hostPort: 2380 name: etcd-peer protocol: TCP - containerPort: 9978 hostPort: 9978 name: etcd-metrics protocol: TCP readinessProbe: failureThreshold: 5 httpGet: path: readyz port: 9980 scheme: HTTPS periodSeconds: 5 successThreshold: 1 timeoutSeconds: 30 resources: requests: cpu: 300m memory: 600Mi securityContext: privileged: true startupProbe: failureThreshold: 18 httpGet: path: readyz port: 9980 scheme: HTTPS initialDelaySeconds: 10 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /etc/kubernetes/manifests name: static-pod-dir - mountPath: /etc/kubernetes/static-pod-resources name: resource-dir - mountPath: /etc/kubernetes/static-pod-certs name: cert-dir - mountPath: /var/lib/etcd/ name: data-dir - command: - /bin/sh - -c - | #!/bin/sh set -euo pipefail export ETCD_NAME=${NODE_master_0_ETCD_NAME} exec nice -n -18 etcd grpc-proxy start \ --endpoints https://${NODE_master_0_ETCD_URL_HOST}:9978 \ --metrics-addr https://0.0.0.0:9979 \ --listen-addr 127.0.0.1:9977 \ --advertise-client-url "" \ --key /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.key \ --key-file /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-serving-metrics-master-0.key \ --cert /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.crt \ --cert-file /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-serving-metrics-master-0.crt \ --cacert /etc/kubernetes/static-pod-certs/configmaps/etcd-all-bundles/server-ca-bundle.crt \ --trusted-ca-file /etc/kubernetes/static-pod-certs/configmaps/etcd-all-bundles/metrics-ca-bundle.crt \ --listen-cipher-suites TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 \ --tls-min-version $(ETCD_TLS_MIN_VERSION) env: - name: ALL_ETCD_ENDPOINTS value: https://192.168.32.10:2379 - name: ETCDCTL_API value: "3" - name: ETCDCTL_CACERT value: /etc/kubernetes/static-pod-certs/configmaps/etcd-all-bundles/server-ca-bundle.crt - name: ETCDCTL_CERT value: /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.crt - name: ETCDCTL_ENDPOINTS value: https://192.168.32.10:2379 - name: ETCDCTL_KEY value: /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.key - name: ETCD_CIPHER_SUITES value: TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 - name: ETCD_DATA_DIR value: /var/lib/etcd - name: ETCD_ELECTION_TIMEOUT value: "2500" - name: ETCD_ENABLE_PPROF value: "true" - name: ETCD_EXPERIMENTAL_MAX_LEARNERS value: "1" - name: ETCD_EXPERIMENTAL_WARNING_APPLY_DURATION value: 200ms - name: ETCD_EXPERIMENTAL_WATCH_PROGRESS_NOTIFY_INTERVAL value: 5s - name: ETCD_HEARTBEAT_INTERVAL value: "500" - name: ETCD_IMAGE value: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0c921698d30c8175da0c124f72748e93551d6903b0f34d26743b60cb12d25cb1 - name: ETCD_INITIAL_CLUSTER_STATE value: existing - name: ETCD_QUOTA_BACKEND_BYTES value: "8589934592" - name: ETCD_SOCKET_REUSE_ADDRESS value: "true" - name: ETCD_TLS_MIN_VERSION value: TLS1.2 - name: NODE_master_0_ETCD_NAME value: master-0 - name: NODE_master_0_ETCD_URL_HOST value: 192.168.32.10 - name: NODE_master_0_IP value: 192.168.32.10 - name: ETCD_STATIC_POD_VERSION value: "2" image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0c921698d30c8175da0c124f72748e93551d6903b0f34d26743b60cb12d25cb1 imagePullPolicy: IfNotPresent name: etcd-metrics ports: - containerPort: 9979 hostPort: 9979 name: proxy-metrics protocol: TCP resources: requests: cpu: 40m memory: 200Mi securityContext: privileged: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /etc/kubernetes/static-pod-resources name: resource-dir - mountPath: /etc/kubernetes/static-pod-certs name: cert-dir - mountPath: /var/lib/etcd/ name: data-dir - command: - /bin/sh - -c - | #!/bin/sh set -euo pipefail exec nice -n -18 cluster-etcd-operator readyz \ --target=https://localhost:2379 \ --listen-port=9980 \ --serving-cert-file=/etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-serving-master-0.crt \ --serving-key-file=/etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-serving-master-0.key \ --client-cert-file=$(ETCDCTL_CERT) \ --client-key-file=$(ETCDCTL_KEY) \ --client-cacert-file=$(ETCDCTL_CACERT) \ --listen-cipher-suites TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 \ --listen-tls-min-version=$(ETCD_TLS_MIN_VERSION) env: - name: ALL_ETCD_ENDPOINTS value: https://192.168.32.10:2379 - name: ETCDCTL_API value: "3" - name: ETCDCTL_CACERT value: /etc/kubernetes/static-pod-certs/configmaps/etcd-all-bundles/server-ca-bundle.crt - name: ETCDCTL_CERT value: /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.crt - name: ETCDCTL_ENDPOINTS value: https://192.168.32.10:2379 - name: ETCDCTL_KEY value: /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.key - name: ETCD_CIPHER_SUITES value: TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 - name: ETCD_DATA_DIR value: /var/lib/etcd - name: ETCD_ELECTION_TIMEOUT value: "2500" - name: ETCD_ENABLE_PPROF value: "true" - name: ETCD_EXPERIMENTAL_MAX_LEARNERS value: "1" - name: ETCD_EXPERIMENTAL_WARNING_APPLY_DURATION value: 200ms - name: ETCD_EXPERIMENTAL_WATCH_PROGRESS_NOTIFY_INTERVAL value: 5s - name: ETCD_HEARTBEAT_INTERVAL value: "500" - name: ETCD_IMAGE value: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0c921698d30c8175da0c124f72748e93551d6903b0f34d26743b60cb12d25cb1 - name: ETCD_INITIAL_CLUSTER_STATE value: existing - name: ETCD_QUOTA_BACKEND_BYTES value: "8589934592" - name: ETCD_SOCKET_REUSE_ADDRESS value: "true" - name: ETCD_TLS_MIN_VERSION value: TLS1.2 - name: NODE_master_0_ETCD_NAME value: master-0 - name: NODE_master_0_ETCD_URL_HOST value: 192.168.32.10 - name: NODE_master_0_IP value: 192.168.32.10 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca4933b9ba55069205ea53970128c4e8c4b46560ef721c8aaee00aaf736664b5 imagePullPolicy: IfNotPresent name: etcd-readyz ports: - containerPort: 9980 hostPort: 9980 name: readyz protocol: TCP resources: requests: cpu: 10m memory: 50Mi securityContext: privileged: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /var/log/etcd/ name: log-dir - mountPath: /etc/kubernetes/static-pod-certs name: cert-dir - command: - /bin/sh - -c - | #!/bin/sh set -euo pipefail cluster-etcd-operator rev \ --endpoints=$(ALL_ETCD_ENDPOINTS) \ --client-cert-file=$(ETCDCTL_CERT) \ --client-key-file=$(ETCDCTL_KEY) \ --client-cacert-file=$(ETCDCTL_CACERT) env: - name: ALL_ETCD_ENDPOINTS value: https://192.168.32.10:2379 - name: ETCDCTL_API value: "3" - name: ETCDCTL_CACERT value: /etc/kubernetes/static-pod-certs/configmaps/etcd-all-bundles/server-ca-bundle.crt - name: ETCDCTL_CERT value: /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.crt - name: ETCDCTL_ENDPOINTS value: https://192.168.32.10:2379 - name: ETCDCTL_KEY value: /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.key - name: ETCD_CIPHER_SUITES value: TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 - name: ETCD_DATA_DIR value: /var/lib/etcd - name: ETCD_ELECTION_TIMEOUT value: "2500" - name: ETCD_ENABLE_PPROF value: "true" - name: ETCD_EXPERIMENTAL_MAX_LEARNERS value: "1" - name: ETCD_EXPERIMENTAL_WARNING_APPLY_DURATION value: 200ms - name: ETCD_EXPERIMENTAL_WATCH_PROGRESS_NOTIFY_INTERVAL value: 5s - name: ETCD_HEARTBEAT_INTERVAL value: "500" - name: ETCD_IMAGE value: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0c921698d30c8175da0c124f72748e93551d6903b0f34d26743b60cb12d25cb1 - name: ETCD_INITIAL_CLUSTER_STATE value: existing - name: ETCD_QUOTA_BACKEND_BYTES value: "8589934592" - name: ETCD_SOCKET_REUSE_ADDRESS value: "true" - name: ETCD_TLS_MIN_VERSION value: TLS1.2 - name: NODE_master_0_ETCD_NAME value: master-0 - name: NODE_master_0_ETCD_URL_HOST value: 192.168.32.10 - name: NODE_master_0_IP value: 192.168.32.10 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca4933b9ba55069205ea53970128c4e8c4b46560ef721c8aaee00aaf736664b5 imagePullPolicy: IfNotPresent name: etcd-rev resources: requests: cpu: 10m memory: 50Mi securityContext: privileged: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /var/lib/etcd name: data-dir - mountPath: /etc/kubernetes/static-pod-certs name: cert-dir dnsPolicy: ClusterFirst enableServiceLinks: true hostNetwork: true initContainers: - command: - /bin/sh - -c - | #!/bin/sh echo -n "Fixing etcd log permissions." mkdir -p /var/log/etcd && chmod 0600 /var/log/etcd echo -n "Fixing etcd auto backup permissions." mkdir -p /var/lib/etcd-auto-backup && chmod 0600 /var/lib/etcd-auto-backup image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0c921698d30c8175da0c124f72748e93551d6903b0f34d26743b60cb12d25cb1 imagePullPolicy: IfNotPresent name: setup resources: requests: cpu: 5m memory: 50Mi securityContext: privileged: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /var/log/etcd name: log-dir - command: - /bin/sh - -c - | #!/bin/sh set -euo pipefail : "${NODE_master_0_ETCD_URL_HOST?not set}" : "${NODE_master_0_ETCD_NAME?not set}" : "${NODE_master_0_IP?not set}" # check for ipv4 addresses as well as ipv6 addresses with extra square brackets if [[ "${NODE_master_0_IP}" != "${NODE_IP}" && "${NODE_master_0_IP}" != "[${NODE_IP}]" ]]; then # echo the error message to stderr echo "Expected node IP to be ${NODE_IP} got ${NODE_master_0_IP}" >&2 exit 1 fi # check for ipv4 addresses as well as ipv6 addresses with extra square brackets if [[ "${NODE_master_0_ETCD_URL_HOST}" != "${NODE_IP}" && "${NODE_master_0_ETCD_URL_HOST}" != "[${NODE_IP}]" ]]; then # echo the error message to stderr echo "Expected etcd url host to be ${NODE_IP} got ${NODE_master_0_ETCD_URL_HOST}" >&2 exit 1 fi env: - name: ALL_ETCD_ENDPOINTS value: https://192.168.32.10:2379 - name: ETCDCTL_API value: "3" - name: ETCDCTL_CACERT value: /etc/kubernetes/static-pod-certs/configmaps/etcd-all-bundles/server-ca-bundle.crt - name: ETCDCTL_CERT value: /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.crt - name: ETCDCTL_ENDPOINTS value: https://192.168.32.10:2379 - name: ETCDCTL_KEY value: /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.key - name: ETCD_CIPHER_SUITES value: TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 - name: ETCD_DATA_DIR value: /var/lib/etcd - name: ETCD_ELECTION_TIMEOUT value: "2500" - name: ETCD_ENABLE_PPROF value: "true" - name: ETCD_EXPERIMENTAL_MAX_LEARNERS value: "1" - name: ETCD_EXPERIMENTAL_WARNING_APPLY_DURATION value: 200ms - name: ETCD_EXPERIMENTAL_WATCH_PROGRESS_NOTIFY_INTERVAL value: 5s - name: ETCD_HEARTBEAT_INTERVAL value: "500" - name: ETCD_IMAGE value: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0c921698d30c8175da0c124f72748e93551d6903b0f34d26743b60cb12d25cb1 - name: ETCD_INITIAL_CLUSTER_STATE value: existing - name: ETCD_QUOTA_BACKEND_BYTES value: "8589934592" - name: ETCD_SOCKET_REUSE_ADDRESS value: "true" - name: ETCD_TLS_MIN_VERSION value: TLS1.2 - name: NODE_master_0_ETCD_NAME value: master-0 - name: NODE_master_0_ETCD_URL_HOST value: 192.168.32.10 - name: NODE_master_0_IP value: 192.168.32.10 - name: NODE_IP valueFrom: fieldRef: apiVersion: v1 fieldPath: status.podIP image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0c921698d30c8175da0c124f72748e93551d6903b0f34d26743b60cb12d25cb1 imagePullPolicy: IfNotPresent name: etcd-ensure-env-vars resources: requests: cpu: 10m memory: 60Mi securityContext: privileged: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError - command: - /bin/sh - -c - | #!/bin/sh set -euo pipefail rm -f $(grep -l '^### Created by cluster-etcd-operator' /usr/local/bin/*) cp -p /etc/kubernetes/static-pod-certs/configmaps/etcd-scripts/*.sh /usr/local/bin image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0c921698d30c8175da0c124f72748e93551d6903b0f34d26743b60cb12d25cb1 imagePullPolicy: IfNotPresent name: etcd-resources-copy resources: requests: cpu: 10m memory: 60Mi securityContext: privileged: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /etc/kubernetes/static-pod-resources name: resource-dir - mountPath: /etc/kubernetes/static-pod-certs name: cert-dir - mountPath: /usr/local/bin name: usr-local-bin nodeName: master-0 preemptionPolicy: PreemptLowerPriority priority: 2000001000 priorityClassName: system-node-critical restartPolicy: Always schedulerName: default-scheduler securityContext: {} terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: - hostPath: path: /etc/kubernetes/manifests type: "" name: static-pod-dir - hostPath: path: /etc/kubernetes/static-pod-resources/etcd-pod-2 type: "" name: resource-dir - hostPath: path: /etc/kubernetes/static-pod-resources/etcd-certs type: "" name: cert-dir - hostPath: path: /var/lib/etcd type: "" name: data-dir - hostPath: path: /usr/local/bin type: "" name: usr-local-bin - hostPath: path: /var/log/etcd type: "" name: log-dir - hostPath: path: /etc/kubernetes type: "" name: config-dir - hostPath: path: /var/lib/etcd-auto-backup type: "" name: etcd-auto-backup-dir status: conditions: - lastProbeTime: null lastTransitionTime: "2025-12-03T14:26:08Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2025-12-03T14:26:08Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2025-12-03T14:26:11Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2025-12-03T14:26:11Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2025-12-03T14:26:08Z" status: "True" type: PodScheduled containerStatuses: - containerID: cri-o://d7424a3adff7dce95e229689db3a097554825a0a1b6fc1da3f511760d76ff1a4 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0c921698d30c8175da0c124f72748e93551d6903b0f34d26743b60cb12d25cb1 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0c921698d30c8175da0c124f72748e93551d6903b0f34d26743b60cb12d25cb1 lastState: {} name: etcd ready: true restartCount: 1 started: true state: running: startedAt: "2025-12-03T14:25:44Z" - containerID: cri-o://be55425be92502579ba54e0a7029374fa5869946a681a8d47fee9f3e2abb52ad image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0c921698d30c8175da0c124f72748e93551d6903b0f34d26743b60cb12d25cb1 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0c921698d30c8175da0c124f72748e93551d6903b0f34d26743b60cb12d25cb1 lastState: {} name: etcd-metrics ready: true restartCount: 1 started: true state: running: startedAt: "2025-12-03T14:25:44Z" - containerID: cri-o://e40eeccb22154afc36511e259a0bbd0340bbb8c152ccc392f07b9b63e9286432 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca4933b9ba55069205ea53970128c4e8c4b46560ef721c8aaee00aaf736664b5 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca4933b9ba55069205ea53970128c4e8c4b46560ef721c8aaee00aaf736664b5 lastState: {} name: etcd-readyz ready: true restartCount: 1 started: true state: running: startedAt: "2025-12-03T14:25:44Z" - containerID: cri-o://273350e7b0aeceae0168f90588eb07e0ee52a413f6434e0abfb74158cc482c9d image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca4933b9ba55069205ea53970128c4e8c4b46560ef721c8aaee00aaf736664b5 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca4933b9ba55069205ea53970128c4e8c4b46560ef721c8aaee00aaf736664b5 lastState: {} name: etcd-rev ready: true restartCount: 1 started: true state: running: startedAt: "2025-12-03T14:25:45Z" - containerID: cri-o://2eb83f75a316413d7cd4039c1ecf1652c36407775bf11a763ce99c299576a480 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0c921698d30c8175da0c124f72748e93551d6903b0f34d26743b60cb12d25cb1 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0c921698d30c8175da0c124f72748e93551d6903b0f34d26743b60cb12d25cb1 lastState: {} name: etcdctl ready: true restartCount: 2 started: true state: running: startedAt: "2025-12-03T14:25:44Z" hostIP: 192.168.32.10 hostIPs: - ip: 192.168.32.10 initContainerStatuses: - containerID: cri-o://dd09bbb6dabb6628edc9177b7dedd0208724a221e8229f867a98fb2ad0fb4bd0 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0c921698d30c8175da0c124f72748e93551d6903b0f34d26743b60cb12d25cb1 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0c921698d30c8175da0c124f72748e93551d6903b0f34d26743b60cb12d25cb1 lastState: {} name: setup ready: true restartCount: 1 started: false state: terminated: containerID: cri-o://dd09bbb6dabb6628edc9177b7dedd0208724a221e8229f867a98fb2ad0fb4bd0 exitCode: 0 finishedAt: "2025-12-03T14:25:41Z" reason: Completed startedAt: "2025-12-03T14:25:41Z" - containerID: cri-o://1c78909007996499471b7050ddc621df6e6e5371bac4e1a9e761d0aa25fda8a7 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0c921698d30c8175da0c124f72748e93551d6903b0f34d26743b60cb12d25cb1 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0c921698d30c8175da0c124f72748e93551d6903b0f34d26743b60cb12d25cb1 lastState: {} name: etcd-ensure-env-vars ready: true restartCount: 1 started: false state: terminated: containerID: cri-o://1c78909007996499471b7050ddc621df6e6e5371bac4e1a9e761d0aa25fda8a7 exitCode: 0 finishedAt: "2025-12-03T14:25:42Z" reason: Completed startedAt: "2025-12-03T14:25:42Z" - containerID: cri-o://2a7b80a876ff19badb393fe51e758bf7d41d437058e661f067ba45094dbb77bb image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0c921698d30c8175da0c124f72748e93551d6903b0f34d26743b60cb12d25cb1 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0c921698d30c8175da0c124f72748e93551d6903b0f34d26743b60cb12d25cb1 lastState: {} name: etcd-resources-copy ready: true restartCount: 1 started: false state: terminated: containerID: cri-o://2a7b80a876ff19badb393fe51e758bf7d41d437058e661f067ba45094dbb77bb exitCode: 0 finishedAt: "2025-12-03T14:25:43Z" reason: Completed startedAt: "2025-12-03T14:25:43Z" phase: Running podIP: 192.168.32.10 podIPs: - ip: 192.168.32.10 qosClass: Burstable startTime: "2025-12-03T14:26:08Z" - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.128.0.29/23"],"mac_address":"0a:58:0a:80:00:1d","gateway_ips":["10.128.0.1"],"routes":[{"dest":"10.128.0.0/16","nextHop":"10.128.0.1"},{"dest":"172.30.0.0/16","nextHop":"10.128.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.128.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.128.0.1"}],"ip_address":"10.128.0.29/23","gateway_ip":"10.128.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.128.0.29" ], "mac": "0a:58:0a:80:00:1d", "default": true, "dns": {} }] creationTimestamp: "2025-12-03T13:55:30Z" labels: app: installer managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: .: {} f:app: {} f:ownerReferences: .: {} k:{"uid":"a6935687-8413-43dd-8c8c-6737f71811ef"}: {} f:spec: f:automountServiceAccountToken: {} f:containers: k:{"name":"installer"}: .: {} f:args: {} f:command: {} f:env: .: {} k:{"name":"NODE_NAME"}: .: {} f:name: {} f:valueFrom: .: {} f:fieldRef: {} k:{"name":"POD_NAME"}: .: {} f:name: {} f:valueFrom: .: {} f:fieldRef: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:limits: .: {} f:cpu: {} f:memory: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:privileged: {} f:runAsUser: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/etc/kubernetes/"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/var/lock"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/var/run/secrets/kubernetes.io/serviceaccount"}: .: {} f:mountPath: {} f:name: {} f:readOnly: {} f:dnsPolicy: {} f:enableServiceLinks: {} f:nodeName: {} f:priorityClassName: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: .: {} f:runAsUser: {} f:serviceAccount: {} f:serviceAccountName: {} f:terminationGracePeriodSeconds: {} f:tolerations: {} f:volumes: .: {} k:{"name":"kube-api-access"}: .: {} f:name: {} f:projected: .: {} f:defaultMode: {} f:sources: {} k:{"name":"kubelet-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"var-lock"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} manager: cluster-etcd-operator operation: Update time: "2025-12-03T13:55:30Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:k8s.ovn.org/pod-networks: {} manager: master-0 operation: Update subresource: status time: "2025-12-03T13:55:30Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.v1.cni.cncf.io/network-status: {} manager: multus-daemon operation: Update subresource: status time: "2025-12-03T13:55:38Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"ContainersReady"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} k:{"type":"Initialized"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} k:{"type":"PodReadyToStartContainers"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"PodScheduled"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"Ready"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} f:containerStatuses: {} f:hostIP: {} f:hostIPs: {} f:phase: {} f:startTime: {} manager: kubelet operation: Update subresource: status time: "2025-12-03T13:57:28Z" name: installer-1-master-0 namespace: openshift-etcd ownerReferences: - apiVersion: v1 kind: ConfigMap name: revision-status-1 uid: a6935687-8413-43dd-8c8c-6737f71811ef resourceVersion: "10371" uid: 2cfe6ad9-3234-47eb-8512-87dd87f7b3a6 spec: automountServiceAccountToken: false containers: - args: - -v=2 - --revision=1 - --namespace=openshift-etcd - --pod=etcd-pod - --resource-dir=/etc/kubernetes/static-pod-resources - --pod-manifest-dir=/etc/kubernetes/manifests - --configmaps=etcd-pod - --configmaps=etcd-endpoints - --configmaps=etcd-all-bundles - --secrets=etcd-all-certs - --cert-dir=/etc/kubernetes/static-pod-resources/etcd-certs - --cert-configmaps=restore-etcd-pod - --cert-configmaps=etcd-scripts - --cert-configmaps=etcd-all-bundles - --cert-secrets=etcd-all-certs command: - cluster-etcd-operator - installer env: - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: NODE_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: spec.nodeName image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca4933b9ba55069205ea53970128c4e8c4b46560ef721c8aaee00aaf736664b5 imagePullPolicy: IfNotPresent name: installer resources: limits: cpu: 150m memory: 200M requests: cpu: 150m memory: 200M securityContext: privileged: true runAsUser: 0 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /etc/kubernetes/ name: kubelet-dir - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - mountPath: /var/lock name: var-lock dnsPolicy: ClusterFirst enableServiceLinks: true nodeName: master-0 preemptionPolicy: PreemptLowerPriority priority: 2000001000 priorityClassName: system-node-critical restartPolicy: Never schedulerName: default-scheduler securityContext: runAsUser: 0 serviceAccount: installer-sa serviceAccountName: installer-sa terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: - hostPath: path: /etc/kubernetes/ type: "" name: kubelet-dir - hostPath: path: /var/lock type: "" name: var-lock - name: kube-api-access projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3600 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2025-12-03T13:56:34Z" status: "False" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2025-12-03T13:55:30Z" reason: PodCompleted status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2025-12-03T13:56:32Z" reason: PodCompleted status: "False" type: Ready - lastProbeTime: null lastTransitionTime: "2025-12-03T13:56:32Z" reason: PodCompleted status: "False" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2025-12-03T13:55:30Z" status: "True" type: PodScheduled containerStatuses: - containerID: cri-o://8d134ccd313903414f3c87188621922dd3739a31023f139786ec39623a1f122e image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca4933b9ba55069205ea53970128c4e8c4b46560ef721c8aaee00aaf736664b5 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca4933b9ba55069205ea53970128c4e8c4b46560ef721c8aaee00aaf736664b5 lastState: {} name: installer ready: false restartCount: 0 started: false state: terminated: containerID: cri-o://8d134ccd313903414f3c87188621922dd3739a31023f139786ec39623a1f122e exitCode: 0 finishedAt: "2025-12-03T13:56:32Z" reason: Completed startedAt: "2025-12-03T13:55:46Z" volumeMounts: - mountPath: /etc/kubernetes/ name: kubelet-dir - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true recursiveReadOnly: Disabled - mountPath: /var/lock name: var-lock hostIP: 192.168.32.10 hostIPs: - ip: 192.168.32.10 phase: Succeeded qosClass: Guaranteed startTime: "2025-12-03T13:55:30Z" - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.128.0.44/23"],"mac_address":"0a:58:0a:80:00:2c","gateway_ips":["10.128.0.1"],"routes":[{"dest":"10.128.0.0/16","nextHop":"10.128.0.1"},{"dest":"172.30.0.0/16","nextHop":"10.128.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.128.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.128.0.1"}],"ip_address":"10.128.0.44/23","gateway_ip":"10.128.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.128.0.44" ], "mac": "0a:58:0a:80:00:2c", "default": true, "dns": {} }] creationTimestamp: "2025-12-03T14:14:47Z" labels: app: installer managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: .: {} f:app: {} f:ownerReferences: .: {} k:{"uid":"abf582e5-6d45-4859-92f8-ec9ea6382331"}: {} f:spec: f:automountServiceAccountToken: {} f:containers: k:{"name":"installer"}: .: {} f:args: {} f:command: {} f:env: .: {} k:{"name":"NODE_NAME"}: .: {} f:name: {} f:valueFrom: .: {} f:fieldRef: {} k:{"name":"POD_NAME"}: .: {} f:name: {} f:valueFrom: .: {} f:fieldRef: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:limits: .: {} f:cpu: {} f:memory: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:privileged: {} f:runAsUser: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/etc/kubernetes/"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/var/lock"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/var/run/secrets/kubernetes.io/serviceaccount"}: .: {} f:mountPath: {} f:name: {} f:readOnly: {} f:dnsPolicy: {} f:enableServiceLinks: {} f:nodeName: {} f:priorityClassName: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: .: {} f:runAsUser: {} f:serviceAccount: {} f:serviceAccountName: {} f:terminationGracePeriodSeconds: {} f:tolerations: {} f:volumes: .: {} k:{"name":"kube-api-access"}: .: {} f:name: {} f:projected: .: {} f:defaultMode: {} f:sources: {} k:{"name":"kubelet-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"var-lock"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} manager: cluster-etcd-operator operation: Update time: "2025-12-03T14:14:47Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:k8s.ovn.org/pod-networks: {} manager: master-0 operation: Update subresource: status time: "2025-12-03T14:14:47Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.v1.cni.cncf.io/network-status: {} manager: multus-daemon operation: Update subresource: status time: "2025-12-03T14:14:48Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"ContainersReady"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} k:{"type":"Initialized"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"PodReadyToStartContainers"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"PodScheduled"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"Ready"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} f:containerStatuses: {} f:hostIP: {} f:hostIPs: {} f:phase: {} f:startTime: {} manager: kubelet operation: Update subresource: status time: "2025-12-03T14:15:23Z" name: installer-2-master-0 namespace: openshift-etcd ownerReferences: - apiVersion: v1 kind: ConfigMap name: revision-status-2 uid: abf582e5-6d45-4859-92f8-ec9ea6382331 resourceVersion: "20935" uid: 3165c60b-3cd2-4bda-8c55-aecf00bef18d spec: automountServiceAccountToken: false containers: - args: - -v=2 - --revision=2 - --namespace=openshift-etcd - --pod=etcd-pod - --resource-dir=/etc/kubernetes/static-pod-resources - --pod-manifest-dir=/etc/kubernetes/manifests - --configmaps=etcd-pod - --configmaps=etcd-endpoints - --configmaps=etcd-all-bundles - --secrets=etcd-all-certs - --cert-dir=/etc/kubernetes/static-pod-resources/etcd-certs - --cert-configmaps=restore-etcd-pod - --cert-configmaps=etcd-scripts - --cert-configmaps=etcd-all-bundles - --cert-secrets=etcd-all-certs command: - cluster-etcd-operator - installer env: - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: NODE_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: spec.nodeName image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca4933b9ba55069205ea53970128c4e8c4b46560ef721c8aaee00aaf736664b5 imagePullPolicy: IfNotPresent name: installer resources: limits: cpu: 150m memory: 200M requests: cpu: 150m memory: 200M securityContext: privileged: true runAsUser: 0 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /etc/kubernetes/ name: kubelet-dir - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - mountPath: /var/lock name: var-lock dnsPolicy: ClusterFirst enableServiceLinks: true nodeName: master-0 preemptionPolicy: PreemptLowerPriority priority: 2000001000 priorityClassName: system-node-critical restartPolicy: Never schedulerName: default-scheduler securityContext: runAsUser: 0 serviceAccount: installer-sa serviceAccountName: installer-sa terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: - hostPath: path: /etc/kubernetes/ type: "" name: kubelet-dir - hostPath: path: /var/lock type: "" name: var-lock - name: kube-api-access projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3600 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2025-12-03T14:15:21Z" status: "False" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2025-12-03T14:14:47Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2025-12-03T14:15:20Z" reason: PodFailed status: "False" type: Ready - lastProbeTime: null lastTransitionTime: "2025-12-03T14:15:20Z" reason: PodFailed status: "False" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2025-12-03T14:14:47Z" status: "True" type: PodScheduled containerStatuses: - containerID: cri-o://b7775fb41fdb5fba5482582075e28a7ea5fd0a8cb1197413e24647825cdb3c60 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca4933b9ba55069205ea53970128c4e8c4b46560ef721c8aaee00aaf736664b5 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca4933b9ba55069205ea53970128c4e8c4b46560ef721c8aaee00aaf736664b5 lastState: {} name: installer ready: false restartCount: 0 started: false state: terminated: containerID: cri-o://b7775fb41fdb5fba5482582075e28a7ea5fd0a8cb1197413e24647825cdb3c60 exitCode: 1 finishedAt: "2025-12-03T14:15:19Z" message: | "", Namespace: (string) (len=14) "openshift-etcd", Clock: (clock.RealClock) { }, PodConfigMapNamePrefix: (string) (len=8) "etcd-pod", SecretNamePrefixes: ([]string) (len=1 cap=1) { (string) (len=14) "etcd-all-certs" }, OptionalSecretNamePrefixes: ([]string) , ConfigMapNamePrefixes: ([]string) (len=3 cap=4) { (string) (len=8) "etcd-pod", (string) (len=14) "etcd-endpoints", (string) (len=16) "etcd-all-bundles" }, OptionalConfigMapNamePrefixes: ([]string) , CertSecretNames: ([]string) (len=1 cap=1) { (string) (len=14) "etcd-all-certs" }, OptionalCertSecretNamePrefixes: ([]string) , CertConfigMapNamePrefixes: ([]string) (len=3 cap=4) { (string) (len=16) "restore-etcd-pod", (string) (len=12) "etcd-scripts", (string) (len=16) "etcd-all-bundles" }, OptionalCertConfigMapNamePrefixes: ([]string) , CertDir: (string) (len=47) "/etc/kubernetes/static-pod-resources/etcd-certs", ResourceDir: (string) (len=36) "/etc/kubernetes/static-pod-resources", PodManifestDir: (string) (len=25) "/etc/kubernetes/manifests", Timeout: (time.Duration) 2m0s, StaticPodManifestsLockFile: (string) "", PodMutationFns: ([]installerpod.PodMutationFunc) , KubeletVersion: (string) "" }) I1203 14:14:49.547412 1 cmd.go:413] Getting controller reference for node master-0 I1203 14:14:49.561840 1 cmd.go:426] Waiting for installer revisions to settle for node master-0 I1203 14:14:49.561924 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I1203 14:14:49.561938 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I1203 14:14:49.565381 1 cmd.go:518] Waiting additional period after revisions have settled for node master-0 I1203 14:15:19.565943 1 cmd.go:524] Getting installer pods for node master-0 F1203 14:15:19.567325 1 cmd.go:109] Get "https://172.30.0.1:443/api/v1/namespaces/openshift-etcd/pods?labelSelector=app%3Dinstaller": dial tcp 172.30.0.1:443: connect: connection refused reason: Error startedAt: "2025-12-03T14:14:48Z" volumeMounts: - mountPath: /etc/kubernetes/ name: kubelet-dir - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true recursiveReadOnly: Disabled - mountPath: /var/lock name: var-lock hostIP: 192.168.32.10 hostIPs: - ip: 192.168.32.10 phase: Failed qosClass: Guaranteed startTime: "2025-12-03T14:14:47Z" - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.128.0.48/23"],"mac_address":"0a:58:0a:80:00:30","gateway_ips":["10.128.0.1"],"routes":[{"dest":"10.128.0.0/16","nextHop":"10.128.0.1"},{"dest":"172.30.0.0/16","nextHop":"10.128.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.128.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.128.0.1"}],"ip_address":"10.128.0.48/23","gateway_ip":"10.128.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.128.0.48" ], "mac": "0a:58:0a:80:00:30", "default": true, "dns": {} }] creationTimestamp: "2025-12-03T14:16:31Z" labels: app: installer managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: .: {} f:app: {} f:ownerReferences: .: {} k:{"uid":"abf582e5-6d45-4859-92f8-ec9ea6382331"}: {} f:spec: f:automountServiceAccountToken: {} f:containers: k:{"name":"installer"}: .: {} f:args: {} f:command: {} f:env: .: {} k:{"name":"NODE_NAME"}: .: {} f:name: {} f:valueFrom: .: {} f:fieldRef: {} k:{"name":"POD_NAME"}: .: {} f:name: {} f:valueFrom: .: {} f:fieldRef: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:limits: .: {} f:cpu: {} f:memory: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:privileged: {} f:runAsUser: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/etc/kubernetes/"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/var/lock"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/var/run/secrets/kubernetes.io/serviceaccount"}: .: {} f:mountPath: {} f:name: {} f:readOnly: {} f:dnsPolicy: {} f:enableServiceLinks: {} f:nodeName: {} f:priorityClassName: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: .: {} f:runAsUser: {} f:serviceAccount: {} f:serviceAccountName: {} f:terminationGracePeriodSeconds: {} f:tolerations: {} f:volumes: .: {} k:{"name":"kube-api-access"}: .: {} f:name: {} f:projected: .: {} f:defaultMode: {} f:sources: {} k:{"name":"kubelet-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"var-lock"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} manager: cluster-etcd-operator operation: Update time: "2025-12-03T14:16:31Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:k8s.ovn.org/pod-networks: {} manager: master-0 operation: Update subresource: status time: "2025-12-03T14:16:31Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.v1.cni.cncf.io/network-status: {} manager: multus-daemon operation: Update subresource: status time: "2025-12-03T14:16:32Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"ContainersReady"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} k:{"type":"Initialized"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} k:{"type":"PodReadyToStartContainers"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"PodScheduled"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"Ready"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} f:containerStatuses: {} f:hostIP: {} f:hostIPs: {} f:phase: {} f:startTime: {} manager: kubelet operation: Update subresource: status time: "2025-12-03T14:20:09Z" name: installer-2-retry-1-master-0 namespace: openshift-etcd ownerReferences: - apiVersion: v1 kind: ConfigMap name: revision-status-2 uid: abf582e5-6d45-4859-92f8-ec9ea6382331 resourceVersion: "20313" uid: 3f539ea7-39a7-422f-82d9-7603eede84cf spec: automountServiceAccountToken: false containers: - args: - -v=2 - --revision=2 - --namespace=openshift-etcd - --pod=etcd-pod - --resource-dir=/etc/kubernetes/static-pod-resources - --pod-manifest-dir=/etc/kubernetes/manifests - --configmaps=etcd-pod - --configmaps=etcd-endpoints - --configmaps=etcd-all-bundles - --secrets=etcd-all-certs - --cert-dir=/etc/kubernetes/static-pod-resources/etcd-certs - --cert-configmaps=restore-etcd-pod - --cert-configmaps=etcd-scripts - --cert-configmaps=etcd-all-bundles - --cert-secrets=etcd-all-certs command: - cluster-etcd-operator - installer env: - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: NODE_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: spec.nodeName image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca4933b9ba55069205ea53970128c4e8c4b46560ef721c8aaee00aaf736664b5 imagePullPolicy: IfNotPresent name: installer resources: limits: cpu: 150m memory: 200M requests: cpu: 150m memory: 200M securityContext: privileged: true runAsUser: 0 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /etc/kubernetes/ name: kubelet-dir - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - mountPath: /var/lock name: var-lock dnsPolicy: ClusterFirst enableServiceLinks: true nodeName: master-0 preemptionPolicy: PreemptLowerPriority priority: 2000001000 priorityClassName: system-node-critical restartPolicy: Never schedulerName: default-scheduler securityContext: runAsUser: 0 serviceAccount: installer-sa serviceAccountName: installer-sa terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: - hostPath: path: /etc/kubernetes/ type: "" name: kubelet-dir - hostPath: path: /var/lock type: "" name: var-lock - name: kube-api-access projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3600 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2025-12-03T14:17:20Z" status: "False" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2025-12-03T14:16:31Z" reason: PodCompleted status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2025-12-03T14:17:18Z" reason: PodCompleted status: "False" type: Ready - lastProbeTime: null lastTransitionTime: "2025-12-03T14:17:18Z" reason: PodCompleted status: "False" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2025-12-03T14:16:31Z" status: "True" type: PodScheduled containerStatuses: - containerID: cri-o://8ae2b9b0e522977680f160dad0bb5c106f95425737d516a6cf52a119b3a021c3 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca4933b9ba55069205ea53970128c4e8c4b46560ef721c8aaee00aaf736664b5 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca4933b9ba55069205ea53970128c4e8c4b46560ef721c8aaee00aaf736664b5 lastState: {} name: installer ready: false restartCount: 0 started: false state: terminated: containerID: cri-o://8ae2b9b0e522977680f160dad0bb5c106f95425737d516a6cf52a119b3a021c3 exitCode: 0 finishedAt: "2025-12-03T14:17:18Z" reason: Completed startedAt: "2025-12-03T14:16:33Z" volumeMounts: - mountPath: /etc/kubernetes/ name: kubelet-dir - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true recursiveReadOnly: Disabled - mountPath: /var/lock name: var-lock hostIP: 192.168.32.10 hostIPs: - ip: 192.168.32.10 phase: Succeeded qosClass: Guaranteed startTime: "2025-12-03T14:16:31Z" kind: PodList metadata: resourceVersion: "34711"