---
apiVersion: v1
kind: Pod
metadata:
  annotations:
    openshift.io/required-scc: hostnetwork
    openshift.io/scc: hostnetwork
  creationTimestamp: "2025-12-03T21:50:25Z"
  generateName: router-default-54f97f57-
  labels:
    ingresscontroller.operator.openshift.io/deployment-ingresscontroller: default
    ingresscontroller.operator.openshift.io/hash: 657bcb54fb
    pod-template-hash: 54f97f57
  managedFields:
  - apiVersion: v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .: {}
          f:openshift.io/required-scc: {}
          f:target.workload.openshift.io/management: {}
        f:generateName: {}
        f:labels:
          .: {}
          f:ingresscontroller.operator.openshift.io/deployment-ingresscontroller: {}
          f:ingresscontroller.operator.openshift.io/hash: {}
          f:pod-template-hash: {}
        f:ownerReferences:
          .: {}
          k:{"uid":"47600431-3316-40f8-b607-3d951fa3d996"}: {}
      f:spec:
        f:containers:
          k:{"name":"router"}:
            .: {}
            f:env:
              .: {}
              k:{"name":"DEFAULT_CERTIFICATE_DIR"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"DEFAULT_DESTINATION_CA_PATH"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"RELOAD_INTERVAL"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_ALLOW_WILDCARD_ROUTES"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_CANONICAL_HOSTNAME"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_CIPHERS"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_CIPHERSUITES"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_DISABLE_HTTP2"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_DISABLE_NAMESPACE_OWNERSHIP_CHECK"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_DOMAIN"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_IDLE_CLOSE_ON_RESPONSE"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_LOAD_BALANCE_ALGORITHM"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_METRICS_TLS_CERT_FILE"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_METRICS_TLS_KEY_FILE"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_METRICS_TYPE"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_SERVICE_HTTP_PORT"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_SERVICE_HTTPS_PORT"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_SERVICE_NAME"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_SERVICE_NAMESPACE"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_SET_FORWARDED_HEADERS"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_TCP_BALANCE_SCHEME"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_THREADS"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"SSL_MIN_VERSION"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"STATS_PASSWORD_FILE"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"STATS_PORT"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"STATS_USERNAME_FILE"}:
                .: {}
                f:name: {}
                f:value: {}
            f:image: {}
            f:imagePullPolicy: {}
            f:livenessProbe:
              .: {}
              f:failureThreshold: {}
              f:httpGet:
                .: {}
                f:host: {}
                f:path: {}
                f:port: {}
                f:scheme: {}
              f:periodSeconds: {}
              f:successThreshold: {}
              f:terminationGracePeriodSeconds: {}
              f:timeoutSeconds: {}
            f:name: {}
            f:ports:
              .: {}
              k:{"containerPort":80,"protocol":"TCP"}:
                .: {}
                f:containerPort: {}
                f:hostPort: {}
                f:name: {}
                f:protocol: {}
              k:{"containerPort":443,"protocol":"TCP"}:
                .: {}
                f:containerPort: {}
                f:hostPort: {}
                f:name: {}
                f:protocol: {}
              k:{"containerPort":1936,"protocol":"TCP"}:
                .: {}
                f:containerPort: {}
                f:hostPort: {}
                f:name: {}
                f:protocol: {}
            f:readinessProbe:
              .: {}
              f:failureThreshold: {}
              f:httpGet:
                .: {}
                f:host: {}
                f:path: {}
                f:port: {}
                f:scheme: {}
              f:periodSeconds: {}
              f:successThreshold: {}
              f:timeoutSeconds: {}
            f:resources:
              .: {}
              f:requests:
                .: {}
                f:cpu: {}
                f:memory: {}
            f:securityContext:
              .: {}
              f:allowPrivilegeEscalation: {}
              f:readOnlyRootFilesystem: {}
            f:startupProbe:
              .: {}
              f:failureThreshold: {}
              f:httpGet:
                .: {}
                f:host: {}
                f:path: {}
                f:port: {}
                f:scheme: {}
              f:periodSeconds: {}
              f:successThreshold: {}
              f:timeoutSeconds: {}
            f:terminationMessagePath: {}
            f:terminationMessagePolicy: {}
            f:volumeMounts:
              .: {}
              k:{"mountPath":"/etc/pki/tls/metrics-certs"}:
                .: {}
                f:mountPath: {}
                f:name: {}
                f:readOnly: {}
              k:{"mountPath":"/etc/pki/tls/private"}:
                .: {}
                f:mountPath: {}
                f:name: {}
                f:readOnly: {}
              k:{"mountPath":"/var/lib/haproxy/conf/metrics-auth"}:
                .: {}
                f:mountPath: {}
                f:name: {}
                f:readOnly: {}
              k:{"mountPath":"/var/run/configmaps/service-ca"}:
                .: {}
                f:mountPath: {}
                f:name: {}
                f:readOnly: {}
        f:dnsPolicy: {}
        f:enableServiceLinks: {}
        f:hostNetwork: {}
        f:nodeSelector: {}
        f:priorityClassName: {}
        f:restartPolicy: {}
        f:schedulerName: {}
        f:securityContext: {}
        f:serviceAccount: {}
        f:serviceAccountName: {}
        f:terminationGracePeriodSeconds: {}
        f:tolerations: {}
        f:topologySpreadConstraints:
          .: {}
          k:{"topologyKey":"topology.kubernetes.io/zone","whenUnsatisfiable":"ScheduleAnyway"}:
            .: {}
            f:labelSelector: {}
            f:maxSkew: {}
            f:topologyKey: {}
            f:whenUnsatisfiable: {}
        f:volumes:
          .: {}
          k:{"name":"default-certificate"}:
            .: {}
            f:name: {}
            f:secret:
              .: {}
              f:defaultMode: {}
              f:secretName: {}
          k:{"name":"metrics-certs"}:
            .: {}
            f:name: {}
            f:secret:
              .: {}
              f:defaultMode: {}
              f:secretName: {}
          k:{"name":"service-ca-bundle"}:
            .: {}
            f:configMap:
              .: {}
              f:defaultMode: {}
              f:items: {}
              f:name: {}
              f:optional: {}
            f:name: {}
          k:{"name":"stats-auth"}:
            .: {}
            f:name: {}
            f:secret:
              .: {}
              f:defaultMode: {}
              f:secretName: {}
    manager: kube-controller-manager
    operation: Update
    time: "2025-12-03T21:50:25Z"
  - apiVersion: v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"PodScheduled"}:
            .: {}
            f:lastProbeTime: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: kube-scheduler
    operation: Update
    subresource: status
    time: "2025-12-03T21:50:25Z"
  - apiVersion: v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"ContainersReady"}:
            .: {}
            f:lastProbeTime: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"Initialized"}:
            .: {}
            f:lastProbeTime: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"PodReadyToStartContainers"}:
            .: {}
            f:lastProbeTime: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"Ready"}:
            .: {}
            f:lastProbeTime: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
        f:containerStatuses: {}
        f:hostIP: {}
        f:hostIPs: {}
        f:phase: {}
        f:podIP: {}
        f:podIPs:
          .: {}
          k:{"ip":"192.168.32.10"}:
            .: {}
            f:ip: {}
        f:startTime: {}
    manager: kubelet
    operation: Update
    subresource: status
    time: "2025-12-03T22:11:02Z"
  name: router-default-54f97f57-xq6ch
  namespace: openshift-ingress
  ownerReferences:
  - apiVersion: apps/v1
    blockOwnerDeletion: true
    controller: true
    kind: ReplicaSet
    name: router-default-54f97f57
    uid: 47600431-3316-40f8-b607-3d951fa3d996
  resourceVersion: "14793"
  uid: 698e6d87-1a58-493c-8b69-d22c89d26ac5
spec:
  containers:
  - env:
    - name: DEFAULT_CERTIFICATE_DIR
      value: /etc/pki/tls/private
    - name: DEFAULT_DESTINATION_CA_PATH
      value: /var/run/configmaps/service-ca/service-ca.crt
    - name: RELOAD_INTERVAL
      value: 5s
    - name: ROUTER_ALLOW_WILDCARD_ROUTES
      value: "false"
    - name: ROUTER_CANONICAL_HOSTNAME
      value: router-default.apps.sno.openstack.lab
    - name: ROUTER_CIPHERS
      value: ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384
    - name: ROUTER_CIPHERSUITES
      value: TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256
    - name: ROUTER_DISABLE_HTTP2
      value: "true"
    - name: ROUTER_DISABLE_NAMESPACE_OWNERSHIP_CHECK
      value: "false"
    - name: ROUTER_DOMAIN
      value: apps.sno.openstack.lab
    - name: ROUTER_IDLE_CLOSE_ON_RESPONSE
      value: "true"
    - name: ROUTER_LOAD_BALANCE_ALGORITHM
      value: random
    - name: ROUTER_METRICS_TLS_CERT_FILE
      value: /etc/pki/tls/metrics-certs/tls.crt
    - name: ROUTER_METRICS_TLS_KEY_FILE
      value: /etc/pki/tls/metrics-certs/tls.key
    - name: ROUTER_METRICS_TYPE
      value: haproxy
    - name: ROUTER_SERVICE_HTTPS_PORT
      value: "443"
    - name: ROUTER_SERVICE_HTTP_PORT
      value: "80"
    - name: ROUTER_SERVICE_NAME
      value: default
    - name: ROUTER_SERVICE_NAMESPACE
      value: openshift-ingress
    - name: ROUTER_SET_FORWARDED_HEADERS
      value: append
    - name: ROUTER_TCP_BALANCE_SCHEME
      value: source
    - name: ROUTER_THREADS
      value: "4"
    - name: SSL_MIN_VERSION
      value: TLSv1.2
    - name: STATS_PASSWORD_FILE
      value: /var/lib/haproxy/conf/metrics-auth/statsPassword
    - name: STATS_PORT
      value: "1936"
    - name: STATS_USERNAME_FILE
      value: /var/lib/haproxy/conf/metrics-auth/statsUsername
    image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3ed4dc45b0e0d6229620e2ac6a53ecd180cad44a11daf9f0170d94b4acd35ded
    imagePullPolicy: IfNotPresent
    livenessProbe:
      failureThreshold: 3
      httpGet:
        host: localhost
        path: /healthz
        port: 1936
        scheme: HTTP
      periodSeconds: 10
      successThreshold: 1
      terminationGracePeriodSeconds: 10
      timeoutSeconds: 1
    name: router
    ports:
    - containerPort: 80
      hostPort: 80
      name: http
      protocol: TCP
    - containerPort: 443
      hostPort: 443
      name: https
      protocol: TCP
    - containerPort: 1936
      hostPort: 1936
      name: metrics
      protocol: TCP
    readinessProbe:
      failureThreshold: 3
      httpGet:
        host: localhost
        path: /healthz/ready
        port: 1936
        scheme: HTTP
      periodSeconds: 10
      successThreshold: 1
      timeoutSeconds: 1
    resources:
      requests:
        cpu: 100m
        memory: 256Mi
    securityContext:
      allowPrivilegeEscalation: true
      capabilities:
        drop:
        - KILL
        - MKNOD
        - SETGID
        - SETUID
      readOnlyRootFilesystem: false
      runAsNonRoot: true
      runAsUser: 1000660000
    startupProbe:
      failureThreshold: 120
      httpGet:
        host: localhost
        path: /healthz/ready
        port: 1936
        scheme: HTTP
      periodSeconds: 1
      successThreshold: 1
      timeoutSeconds: 1
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: FallbackToLogsOnError
    volumeMounts:
    - mountPath: /etc/pki/tls/private
      name: default-certificate
      readOnly: true
    - mountPath: /var/run/configmaps/service-ca
      name: service-ca-bundle
      readOnly: true
    - mountPath: /var/lib/haproxy/conf/metrics-auth
      name: stats-auth
      readOnly: true
    - mountPath: /etc/pki/tls/metrics-certs
      name: metrics-certs
      readOnly: true
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-97kqz
      readOnly: true
  dnsPolicy: ClusterFirstWithHostNet
  enableServiceLinks: true
  hostNetwork: true
  nodeName: master-0
  nodeSelector:
    kubernetes.io/os: linux
    node-role.kubernetes.io/master: ""
  preemptionPolicy: PreemptLowerPriority
  priority: 2000000000
  priorityClassName: system-cluster-critical
  restartPolicy: Always
  schedulerName: default-scheduler
  securityContext:
    fsGroup: 1000660000
    seLinuxOptions:
      level: s0:c26,c5
    supplementalGroups:
    - 1000660000
  serviceAccount: router
  serviceAccountName: router
  terminationGracePeriodSeconds: 3600
  tolerations:
  - effect: NoExecute
    key: kubernetes.io/e2e-evict-taint-key
    operator: Equal
    value: evictTaintVal
  - effect: NoExecute
    key: node.kubernetes.io/not-ready
    operator: Exists
    tolerationSeconds: 300
  - effect: NoExecute
    key: node.kubernetes.io/unreachable
    operator: Exists
    tolerationSeconds: 300
  - effect: NoSchedule
    key: node.kubernetes.io/memory-pressure
    operator: Exists
  topologySpreadConstraints:
  - labelSelector:
      matchExpressions:
      - key: ingresscontroller.operator.openshift.io/hash
        operator: In
        values:
        - 657bcb54fb
    maxSkew: 1
    topologyKey: topology.kubernetes.io/zone
    whenUnsatisfiable: ScheduleAnyway
  volumes:
  - name: default-certificate
    secret:
      defaultMode: 420
      secretName: router-certs-default
  - configMap:
      defaultMode: 420
      items:
      - key: service-ca.crt
        path: service-ca.crt
      name: service-ca-bundle
      optional: false
    name: service-ca-bundle
  - name: stats-auth
    secret:
      defaultMode: 420
      secretName: router-stats-default
  - name: metrics-certs
    secret:
      defaultMode: 420
      secretName: router-metrics-certs-default
  - name: kube-api-access-97kqz
    projected:
      defaultMode: 420
      sources:
      - serviceAccountToken:
          expirationSeconds: 3607
          path: token
      - configMap:
          items:
          - key: ca.crt
            path: ca.crt
          name: kube-root-ca.crt
      - downwardAPI:
          items:
          - fieldRef:
              apiVersion: v1
              fieldPath: metadata.namespace
            path: namespace
      - configMap:
          items:
          - key: service-ca.crt
            path: service-ca.crt
          name: openshift-service-ca.crt
status:
  conditions:
  - lastProbeTime: null
    lastTransitionTime: "2025-12-03T21:55:58Z"
    status: "True"
    type: PodReadyToStartContainers
  - lastProbeTime: null
    lastTransitionTime: "2025-12-03T21:55:54Z"
    status: "True"
    type: Initialized
  - lastProbeTime: null
    lastTransitionTime: "2025-12-03T22:11:02Z"
    status: "True"
    type: Ready
  - lastProbeTime: null
    lastTransitionTime: "2025-12-03T22:11:02Z"
    status: "True"
    type: ContainersReady
  - lastProbeTime: null
    lastTransitionTime: "2025-12-03T21:55:54Z"
    status: "True"
    type: PodScheduled
  containerStatuses:
  - containerID: cri-o://7519b630b49d0e71a1321981181a030a9b593519d5516a9945f43cf1f405f9ca
    image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3ed4dc45b0e0d6229620e2ac6a53ecd180cad44a11daf9f0170d94b4acd35ded
    imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3ed4dc45b0e0d6229620e2ac6a53ecd180cad44a11daf9f0170d94b4acd35ded
    lastState:
      terminated:
        containerID: cri-o://cfa4dcf215847e24aecbc2956ffb90a60bdcdbbe3d57e1f15a1b92587d1579de
        exitCode: 0
        finishedAt: "2025-12-03T22:09:49Z"
        reason: Completed
        startedAt: "2025-12-03T22:07:04Z"
    name: router
    ready: true
    restartCount: 5
    started: true
    state:
      running:
        startedAt: "2025-12-03T22:09:50Z"
    volumeMounts:
    - mountPath: /etc/pki/tls/private
      name: default-certificate
      readOnly: true
      recursiveReadOnly: Disabled
    - mountPath: /var/run/configmaps/service-ca
      name: service-ca-bundle
      readOnly: true
      recursiveReadOnly: Disabled
    - mountPath: /var/lib/haproxy/conf/metrics-auth
      name: stats-auth
      readOnly: true
      recursiveReadOnly: Disabled
    - mountPath: /etc/pki/tls/metrics-certs
      name: metrics-certs
      readOnly: true
      recursiveReadOnly: Disabled
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-97kqz
      readOnly: true
      recursiveReadOnly: Disabled
  hostIP: 192.168.32.10
  hostIPs:
  - ip: 192.168.32.10
  phase: Running
  podIP: 192.168.32.10
  podIPs:
  - ip: 192.168.32.10
  qosClass: Burstable
  startTime: "2025-12-03T21:55:54Z"