---
apiVersion: v1
items:
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      networkoperator.openshift.io/cluster-network-cidr: 10.128.0.0/16
      networkoperator.openshift.io/hybrid-overlay-status: disabled
      networkoperator.openshift.io/ip-family-mode: single-stack
    creationTimestamp: "2025-12-04T00:29:15Z"
    generateName: ovnkube-control-plane-f9f7f4946-
    labels:
      app: ovnkube-control-plane
      component: network
      kubernetes.io/os: linux
      openshift.io/component: network
      pod-template-hash: f9f7f4946
      type: infra
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:networkoperator.openshift.io/cluster-network-cidr: {}
            f:networkoperator.openshift.io/hybrid-overlay-status: {}
            f:networkoperator.openshift.io/ip-family-mode: {}
            f:target.workload.openshift.io/management: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:app: {}
            f:component: {}
            f:kubernetes.io/os: {}
            f:openshift.io/component: {}
            f:pod-template-hash: {}
            f:type: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"7cee0d7b-a75d-4ef2-8d87-e58d78bbeb04"}: {}
        f:spec:
          f:containers:
            k:{"name":"kube-rbac-proxy"}:
              .: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":9108,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/pki/tls/metrics-cert"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
            k:{"name":"ovnkube-cluster-manager"}:
              .: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"K8S_NODE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"OVN_KUBE_LOG_LEVEL"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"POD_NAME"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":29108,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/env"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/run/ovnkube-config/"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"env-overrides"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
                f:optional: {}
              f:name: {}
            k:{"name":"ovn-control-plane-metrics-cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:optional: {}
                f:secretName: {}
            k:{"name":"ovnkube-config"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
              f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2025-12-04T00:29:15Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"192.168.32.10"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2025-12-04T00:45:00Z"
    name: ovnkube-control-plane-f9f7f4946-kwdfc
    namespace: openshift-ovn-kubernetes
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: ovnkube-control-plane-f9f7f4946
      uid: 7cee0d7b-a75d-4ef2-8d87-e58d78bbeb04
    resourceVersion: "11898"
    uid: 2ad96246-c53a-4016-b67d-5e9d66f40d5b
  spec:
    containers:
    - command:
      - /bin/bash
      - -c
      - |
        #!/bin/bash
        set -euo pipefail
        TLS_PK=/etc/pki/tls/metrics-cert/tls.key
        TLS_CERT=/etc/pki/tls/metrics-cert/tls.crt
        # As the secret mount is optional we must wait for the files to be present.
        # The service is created in monitor.yaml and this is created in sdn.yaml.
        TS=$(date +%s)
        WARN_TS=$(( ${TS} + $(( 20 * 60)) ))
        HAS_LOGGED_INFO=0

        log_missing_certs(){
            CUR_TS=$(date +%s)
            if [[ "${CUR_TS}" -gt "WARN_TS"  ]]; then
              echo $(date -Iseconds) WARN: ovn-control-plane-metrics-cert not mounted after 20 minutes.
            elif [[ "${HAS_LOGGED_INFO}" -eq 0 ]] ; then
              echo $(date -Iseconds) INFO: ovn-control-plane-metrics-cert not mounted. Waiting 20 minutes.
              HAS_LOGGED_INFO=1
            fi
        }
        while [[ ! -f "${TLS_PK}" ||  ! -f "${TLS_CERT}" ]] ; do
          log_missing_certs
          sleep 5
        done

        echo $(date -Iseconds) INFO: ovn-control-plane-metrics-certs mounted, starting kube-rbac-proxy
        exec /usr/bin/kube-rbac-proxy \
          --logtostderr \
          --secure-listen-address=:9108 \
          --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 \
          --upstream=http://127.0.0.1:29108/ \
          --tls-private-key-file=${TLS_PK} \
          --tls-cert-file=${TLS_CERT}
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b03d2897e7cc0e8d0c306acb68ca3d9396d502882c14942faadfdb16bc40e17d
      imagePullPolicy: IfNotPresent
      name: kube-rbac-proxy
      ports:
      - containerPort: 9108
        hostPort: 9108
        name: https
        protocol: TCP
      resources:
        requests:
          cpu: 10m
          memory: 20Mi
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/pki/tls/metrics-cert
        name: ovn-control-plane-metrics-cert
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-kpp6c
        readOnly: true
    - command:
      - /bin/bash
      - -c
      - |
        set -xe
        if [[ -f "/env/_master" ]]; then
          set -o allexport
          source "/env/_master"
          set +o allexport
        fi

        ovn_v4_join_subnet_opt=
        if [[ "" != "" ]]; then
          ovn_v4_join_subnet_opt="--gateway-v4-join-subnet "
        fi
        ovn_v6_join_subnet_opt=
        if [[ "" != "" ]]; then
          ovn_v6_join_subnet_opt="--gateway-v6-join-subnet "
        fi

        ovn_v4_transit_switch_subnet_opt=
        if [[ "" != "" ]]; then
          ovn_v4_transit_switch_subnet_opt="--cluster-manager-v4-transit-switch-subnet "
        fi
        ovn_v6_transit_switch_subnet_opt=
        if [[ "" != "" ]]; then
          ovn_v6_transit_switch_subnet_opt="--cluster-manager-v6-transit-switch-subnet "
        fi

        dns_name_resolver_enabled_flag=
        if [[ "false" == "true" ]]; then
          dns_name_resolver_enabled_flag="--enable-dns-name-resolver"
        fi

        persistent_ips_enabled_flag=
        if [[ "true" == "true" ]]; then
          persistent_ips_enabled_flag="--enable-persistent-ips"
        fi

        # This is needed so that converting clusters from GA to TP
        # will rollout control plane pods as well
        network_segmentation_enabled_flag=
        multi_network_enabled_flag=
        if [[ "true" == "true" ]]; then
          multi_network_enabled_flag="--enable-multi-network"
          network_segmentation_enabled_flag="--enable-network-segmentation"
        fi

        route_advertisements_enable_flag=
        if [[ "false" == "true" ]]; then
          route_advertisements_enable_flag="--enable-route-advertisements"
        fi

        echo "I$(date "+%m%d %H:%M:%S.%N") - ovnkube-control-plane - start ovnkube --init-cluster-manager ${K8S_NODE}"
        exec /usr/bin/ovnkube \
          --enable-interconnect \
          --init-cluster-manager "${K8S_NODE}" \
          --config-file=/run/ovnkube-config/ovnkube.conf \
          --loglevel "${OVN_KUBE_LOG_LEVEL}" \
          --metrics-bind-address "127.0.0.1:29108" \
          --metrics-enable-pprof \
          --metrics-enable-config-duration \
          ${ovn_v4_join_subnet_opt} \
          ${ovn_v6_join_subnet_opt} \
          ${ovn_v4_transit_switch_subnet_opt} \
          ${ovn_v6_transit_switch_subnet_opt} \
          ${dns_name_resolver_enabled_flag} \
          ${persistent_ips_enabled_flag} \
          ${multi_network_enabled_flag} \
          ${network_segmentation_enabled_flag} \
          ${route_advertisements_enable_flag}
      env:
      - name: OVN_KUBE_LOG_LEVEL
        value: "4"
      - name: K8S_NODE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: spec.nodeName
      - name: POD_NAME
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.name
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a17e9d83aeb6de5f0851aaacd1a9ebddbc8a4ac3ece2e4af8670aa0c33b8fc9c
      imagePullPolicy: IfNotPresent
      name: ovnkube-cluster-manager
      ports:
      - containerPort: 29108
        hostPort: 29108
        name: metrics-port
        protocol: TCP
      resources:
        requests:
          cpu: 10m
          memory: 300Mi
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /run/ovnkube-config/
        name: ovnkube-config
      - mountPath: /env
        name: env-overrides
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-kpp6c
        readOnly: true
    dnsPolicy: Default
    enableServiceLinks: true
    hostNetwork: true
    nodeName: master-0
    nodeSelector:
      kubernetes.io/os: linux
      node-role.kubernetes.io/master: ""
    preemptionPolicy: PreemptLowerPriority
    priority: 2000000000
    priorityClassName: system-cluster-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext: {}
    serviceAccount: ovn-kubernetes-control-plane
    serviceAccountName: ovn-kubernetes-control-plane
    terminationGracePeriodSeconds: 30
    tolerations:
    - key: node-role.kubernetes.io/master
      operator: Exists
    - key: node.kubernetes.io/not-ready
      operator: Exists
    - key: node.kubernetes.io/unreachable
      operator: Exists
    - key: node.kubernetes.io/network-unavailable
      operator: Exists
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - configMap:
        defaultMode: 420
        name: ovnkube-config
      name: ovnkube-config
    - configMap:
        defaultMode: 420
        name: env-overrides
        optional: true
      name: env-overrides
    - name: ovn-control-plane-metrics-cert
      secret:
        defaultMode: 420
        optional: true
        secretName: ovn-control-plane-metrics-cert
    - name: kube-api-access-kpp6c
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2025-12-04T00:29:34Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2025-12-04T00:29:15Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2025-12-04T00:43:21Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2025-12-04T00:43:21Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2025-12-04T00:29:15Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://eeb4ca21443df786926f97a2c63bc3a11f4fae4ea56ba3e5061345e37c60fb37
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b03d2897e7cc0e8d0c306acb68ca3d9396d502882c14942faadfdb16bc40e17d
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b03d2897e7cc0e8d0c306acb68ca3d9396d502882c14942faadfdb16bc40e17d
      lastState: {}
      name: kube-rbac-proxy
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-12-04T00:29:16Z"
      volumeMounts:
      - mountPath: /etc/pki/tls/metrics-cert
        name: ovn-control-plane-metrics-cert
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-kpp6c
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://723c7f1daf8d51652c3b09e030a2d9ea33a9ea631eead19a76ebe1c537610a7a
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a17e9d83aeb6de5f0851aaacd1a9ebddbc8a4ac3ece2e4af8670aa0c33b8fc9c
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a17e9d83aeb6de5f0851aaacd1a9ebddbc8a4ac3ece2e4af8670aa0c33b8fc9c
      lastState:
        terminated:
          containerID: cri-o://8e1dd1a3bf326b95f76f31f2c263921fd333cc92fd34b2ff2d20c784a7327b3f
          exitCode: 0
          finishedAt: "2025-12-04T00:43:09Z"
          reason: Completed
          startedAt: "2025-12-04T00:34:36Z"
      name: ovnkube-cluster-manager
      ready: true
      restartCount: 2
      started: true
      state:
        running:
          startedAt: "2025-12-04T00:43:21Z"
      volumeMounts:
      - mountPath: /run/ovnkube-config/
        name: ovnkube-config
      - mountPath: /env
        name: env-overrides
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-kpp6c
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 192.168.32.10
    hostIPs:
    - ip: 192.168.32.10
    phase: Running
    podIP: 192.168.32.10
    podIPs:
    - ip: 192.168.32.10
    qosClass: Burstable
    startTime: "2025-12-04T00:29:15Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      cluster-autoscaler.kubernetes.io/enable-ds-eviction: "false"
      network.operator.openshift.io/ovnkube-script-lib-hash: aacf157d288458d0defb9eb76f6a4d6edb1801eb
      networkoperator.openshift.io/cluster-network-cidr: 10.128.0.0/16
      networkoperator.openshift.io/hybrid-overlay-status: disabled
      networkoperator.openshift.io/ip-family-mode: single-stack
    creationTimestamp: "2025-12-04T00:29:46Z"
    generateName: ovnkube-node-
    labels:
      app: ovnkube-node
      component: network
      controller-revision-hash: 66d44c49c9
      kubernetes.io/os: linux
      openshift.io/component: network
      ovn-db-pod: "true"
      pod-template-generation: "2"
      type: infra
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:cluster-autoscaler.kubernetes.io/enable-ds-eviction: {}
            f:network.operator.openshift.io/ovnkube-script-lib-hash: {}
            f:networkoperator.openshift.io/cluster-network-cidr: {}
            f:networkoperator.openshift.io/hybrid-overlay-status: {}
            f:networkoperator.openshift.io/ip-family-mode: {}
            f:target.workload.openshift.io/management: {}
          f:generateName: {}
          f:labels:
            .: {}
            f:app: {}
            f:component: {}
            f:controller-revision-hash: {}
            f:kubernetes.io/os: {}
            f:openshift.io/component: {}
            f:ovn-db-pod: {}
            f:pod-template-generation: {}
            f:type: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"ed0a6efc-974a-4dd1-a8b7-ac118d6c2ebd"}: {}
        f:spec:
          f:affinity:
            .: {}
            f:nodeAffinity:
              .: {}
              f:requiredDuringSchedulingIgnoredDuringExecution: {}
          f:containers:
            k:{"name":"kube-rbac-proxy-node"}:
              .: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":9103,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/pki/tls/metrics-cert"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/ovnkube-lib"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
            k:{"name":"kube-rbac-proxy-ovn-metrics"}:
              .: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":9105,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/pki/tls/metrics-cert"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/ovnkube-lib"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
            k:{"name":"nbdb"}:
              .: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"K8S_NODE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"OVN_LOG_LEVEL"}:
                  .: {}
                  f:name: {}
                  f:value: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:lifecycle:
                .: {}
                f:postStart:
                  .: {}
                  f:exec:
                    .: {}
                    f:command: {}
              f:name: {}
              f:readinessProbe:
                .: {}
                f:exec:
                  .: {}
                  f:command: {}
                f:failureThreshold: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/env"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/ovn/"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/ovnkube-lib"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/run/ovn/"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/var/log/ovn"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
            k:{"name":"northd"}:
              .: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"OVN_LOG_LEVEL"}:
                  .: {}
                  f:name: {}
                  f:value: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/env"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/ovn"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/ovnkube-lib"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/run/ovn/"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/var/log/ovn"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
            k:{"name":"ovn-acl-logging"}:
              .: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/ovnkube-lib"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/run/ovn/"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/var/log/ovn/"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
            k:{"name":"ovn-controller"}:
              .: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"K8S_NODE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"OVN_LOG_LEVEL"}:
                  .: {}
                  f:name: {}
                  f:value: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:privileged: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/dev/log"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/env"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/openvswitch"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/ovn/"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/ovnkube-lib"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/run/openvswitch"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/run/ovn/"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/var/lib/openvswitch"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/var/log/ovn/"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
            k:{"name":"ovnkube-controller"}:
              .: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"K8S_NODE"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
                k:{"name":"KUBERNETES_SERVICE_HOST"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"KUBERNETES_SERVICE_PORT"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"OVN_CONTROLLER_INACTIVITY_PROBE"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"OVN_KUBE_LOG_LEVEL"}:
                  .: {}
                  f:name: {}
                  f:value: {}
                k:{"name":"POD_NAME"}:
                  .: {}
                  f:name: {}
                  f:valueFrom:
                    .: {}
                    f:fieldRef: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:lifecycle:
                .: {}
                f:preStop:
                  .: {}
                  f:exec:
                    .: {}
                    f:command: {}
              f:name: {}
              f:ports:
                .: {}
                k:{"containerPort":29105,"protocol":"TCP"}:
                  .: {}
                  f:containerPort: {}
                  f:hostPort: {}
                  f:name: {}
                  f:protocol: {}
              f:readinessProbe:
                .: {}
                f:exec:
                  .: {}
                  f:command: {}
                f:failureThreshold: {}
                f:initialDelaySeconds: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:securityContext:
                .: {}
                f:privileged: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/cni-bin-dir"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/env"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/cni/net.d"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/openvswitch"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/ovn/"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/systemd/system"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/host"}:
                  .: {}
                  f:mountPath: {}
                  f:mountPropagation: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/ovnkube-lib"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/run/netns"}:
                  .: {}
                  f:mountPath: {}
                  f:mountPropagation: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/run/openvswitch"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/run/ovn-kubernetes/"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/run/ovn/"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/run/ovnkube-config/"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/run/systemd/private"}:
                  .: {}
                  f:mountPath: {}
                  f:mountPropagation: {}
                  f:name: {}
                  f:readOnly: {}
                  f:subPath: {}
                k:{"mountPath":"/var/lib/cni/networks/ovn-k8s-cni-overlay"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/var/lib/kubelet"}:
                  .: {}
                  f:mountPath: {}
                  f:mountPropagation: {}
                  f:name: {}
                  f:readOnly: {}
                k:{"mountPath":"/var/lib/openvswitch"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/var/log/ovnkube/"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
            k:{"name":"sbdb"}:
              .: {}
              f:command: {}
              f:env:
                .: {}
                k:{"name":"OVN_LOG_LEVEL"}:
                  .: {}
                  f:name: {}
                  f:value: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:lifecycle:
                .: {}
                f:postStart:
                  .: {}
                  f:exec:
                    .: {}
                    f:command: {}
              f:name: {}
              f:readinessProbe:
                .: {}
                f:exec:
                  .: {}
                  f:command: {}
                f:failureThreshold: {}
                f:periodSeconds: {}
                f:successThreshold: {}
                f:timeoutSeconds: {}
              f:resources:
                .: {}
                f:requests:
                  .: {}
                  f:cpu: {}
                  f:memory: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/env"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/etc/ovn/"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/ovnkube-lib"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/run/ovn/"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
                k:{"mountPath":"/var/log/ovn"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:dnsPolicy: {}
          f:enableServiceLinks: {}
          f:hostNetwork: {}
          f:hostPID: {}
          f:initContainers:
            .: {}
            k:{"name":"kubecfg-setup"}:
              .: {}
              f:command: {}
              f:image: {}
              f:imagePullPolicy: {}
              f:name: {}
              f:resources: {}
              f:terminationMessagePath: {}
              f:terminationMessagePolicy: {}
              f:volumeMounts:
                .: {}
                k:{"mountPath":"/etc/ovn/"}:
                  .: {}
                  f:mountPath: {}
                  f:name: {}
          f:nodeSelector: {}
          f:priorityClassName: {}
          f:restartPolicy: {}
          f:schedulerName: {}
          f:securityContext: {}
          f:serviceAccount: {}
          f:serviceAccountName: {}
          f:terminationGracePeriodSeconds: {}
          f:tolerations: {}
          f:volumes:
            .: {}
            k:{"name":"env-overrides"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
                f:optional: {}
              f:name: {}
            k:{"name":"etc-openvswitch"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"host-cni-bin"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"host-cni-netd"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"host-kubelet"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"host-run-netns"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"host-run-ovn-kubernetes"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"host-slash"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"host-var-lib-cni-networks-ovn-kubernetes"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"log-socket"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"node-log"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"ovn-node-metrics-cert"}:
              .: {}
              f:name: {}
              f:secret:
                .: {}
                f:defaultMode: {}
                f:optional: {}
                f:secretName: {}
            k:{"name":"ovnkube-config"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
              f:name: {}
            k:{"name":"ovnkube-script-lib"}:
              .: {}
              f:configMap:
                .: {}
                f:defaultMode: {}
                f:name: {}
              f:name: {}
            k:{"name":"run-openvswitch"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"run-ovn"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"run-systemd"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"systemd-units"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
            k:{"name":"var-lib-openvswitch"}:
              .: {}
              f:hostPath:
                .: {}
                f:path: {}
                f:type: {}
              f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2025-12-04T00:29:46Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:conditions:
            k:{"type":"ContainersReady"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Initialized"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"PodReadyToStartContainers"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
            k:{"type":"Ready"}:
              .: {}
              f:lastProbeTime: {}
              f:lastTransitionTime: {}
              f:status: {}
              f:type: {}
          f:containerStatuses: {}
          f:hostIP: {}
          f:hostIPs: {}
          f:initContainerStatuses: {}
          f:phase: {}
          f:podIP: {}
          f:podIPs:
            .: {}
            k:{"ip":"192.168.32.10"}:
              .: {}
              f:ip: {}
          f:startTime: {}
      manager: kubelet
      operation: Update
      subresource: status
      time: "2025-12-04T00:47:22Z"
    name: ovnkube-node-kgflj
    namespace: openshift-ovn-kubernetes
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: DaemonSet
      name: ovnkube-node
      uid: ed0a6efc-974a-4dd1-a8b7-ac118d6c2ebd
    resourceVersion: "13197"
    uid: 68cb9838-2d09-46ab-8e2d-08d5868056fc
  spec:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
          - matchFields:
            - key: metadata.name
              operator: In
              values:
              - master-0
    containers:
    - command:
      - /bin/bash
      - -c
      - |
        set -e
        . /ovnkube-lib/ovnkube-lib.sh || exit 1
        start-ovn-controller ${OVN_LOG_LEVEL}
      env:
      - name: OVN_LOG_LEVEL
        value: info
      - name: K8S_NODE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: spec.nodeName
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a17e9d83aeb6de5f0851aaacd1a9ebddbc8a4ac3ece2e4af8670aa0c33b8fc9c
      imagePullPolicy: IfNotPresent
      name: ovn-controller
      resources:
        requests:
          cpu: 10m
          memory: 300Mi
      securityContext:
        privileged: true
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /ovnkube-lib
        name: ovnkube-script-lib
      - mountPath: /run/openvswitch
        name: run-openvswitch
      - mountPath: /run/ovn/
        name: run-ovn
      - mountPath: /etc/openvswitch
        name: etc-openvswitch
      - mountPath: /etc/ovn/
        name: etc-openvswitch
      - mountPath: /var/lib/openvswitch
        name: var-lib-openvswitch
      - mountPath: /env
        name: env-overrides
      - mountPath: /var/log/ovn/
        name: node-log
      - mountPath: /dev/log
        name: log-socket
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-pgmcr
        readOnly: true
    - command:
      - /bin/bash
      - -c
      - |
        set -euo pipefail
        . /ovnkube-lib/ovnkube-lib.sh || exit 1
        start-audit-log-rotation
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a17e9d83aeb6de5f0851aaacd1a9ebddbc8a4ac3ece2e4af8670aa0c33b8fc9c
      imagePullPolicy: IfNotPresent
      name: ovn-acl-logging
      resources:
        requests:
          cpu: 10m
          memory: 20Mi
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /ovnkube-lib
        name: ovnkube-script-lib
      - mountPath: /var/log/ovn/
        name: node-log
      - mountPath: /run/ovn/
        name: run-ovn
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-pgmcr
        readOnly: true
    - command:
      - /bin/bash
      - -c
      - |
        #!/bin/bash
        set -euo pipefail
        . /ovnkube-lib/ovnkube-lib.sh || exit 1
        start-rbac-proxy-node ovn-node-metrics 9103 29103 /etc/pki/tls/metrics-cert/tls.key /etc/pki/tls/metrics-cert/tls.crt
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b03d2897e7cc0e8d0c306acb68ca3d9396d502882c14942faadfdb16bc40e17d
      imagePullPolicy: IfNotPresent
      name: kube-rbac-proxy-node
      ports:
      - containerPort: 9103
        hostPort: 9103
        name: https
        protocol: TCP
      resources:
        requests:
          cpu: 10m
          memory: 20Mi
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /ovnkube-lib
        name: ovnkube-script-lib
      - mountPath: /etc/pki/tls/metrics-cert
        name: ovn-node-metrics-cert
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-pgmcr
        readOnly: true
    - command:
      - /bin/bash
      - -c
      - |
        #!/bin/bash
        set -euo pipefail
        . /ovnkube-lib/ovnkube-lib.sh || exit 1
        start-rbac-proxy-node ovn-metrics 9105 29105 /etc/pki/tls/metrics-cert/tls.key /etc/pki/tls/metrics-cert/tls.crt
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b03d2897e7cc0e8d0c306acb68ca3d9396d502882c14942faadfdb16bc40e17d
      imagePullPolicy: IfNotPresent
      name: kube-rbac-proxy-ovn-metrics
      ports:
      - containerPort: 9105
        hostPort: 9105
        name: https
        protocol: TCP
      resources:
        requests:
          cpu: 10m
          memory: 20Mi
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /ovnkube-lib
        name: ovnkube-script-lib
      - mountPath: /etc/pki/tls/metrics-cert
        name: ovn-node-metrics-cert
        readOnly: true
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-pgmcr
        readOnly: true
    - command:
      - /bin/bash
      - -c
      - |
        set -xem
        if [[ -f /env/_master ]]; then
          set -o allexport
          source /env/_master
          set +o allexport
        fi
        . /ovnkube-lib/ovnkube-lib.sh || exit 1

        trap quit-ovn-northd TERM INT
        start-ovn-northd "${OVN_LOG_LEVEL}"
      env:
      - name: OVN_LOG_LEVEL
        value: info
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a17e9d83aeb6de5f0851aaacd1a9ebddbc8a4ac3ece2e4af8670aa0c33b8fc9c
      imagePullPolicy: IfNotPresent
      name: northd
      resources:
        requests:
          cpu: 10m
          memory: 70Mi
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /ovnkube-lib
        name: ovnkube-script-lib
      - mountPath: /etc/ovn
        name: etc-openvswitch
      - mountPath: /var/log/ovn
        name: node-log
      - mountPath: /run/ovn/
        name: run-ovn
      - mountPath: /env
        name: env-overrides
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-pgmcr
        readOnly: true
    - command:
      - /bin/bash
      - -c
      - |
        set -xem
        if [[ -f /env/_master ]]; then
          set -o allexport
          source /env/_master
          set +o allexport
        fi
        . /ovnkube-lib/ovnkube-lib.sh || exit 1

        trap quit-nbdb TERM INT
        start-nbdb ${OVN_LOG_LEVEL}
      env:
      - name: OVN_LOG_LEVEL
        value: info
      - name: K8S_NODE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: spec.nodeName
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a17e9d83aeb6de5f0851aaacd1a9ebddbc8a4ac3ece2e4af8670aa0c33b8fc9c
      imagePullPolicy: IfNotPresent
      lifecycle:
        postStart:
          exec:
            command:
            - /bin/bash
            - -c
            - |
              set -x
              . /ovnkube-lib/ovnkube-lib.sh || exit 1
              nbdb-post-start 10000
      name: nbdb
      readinessProbe:
        exec:
          command:
          - /bin/bash
          - -c
          - |
            set -xeo pipefail
            . /ovnkube-lib/ovnkube-lib.sh || exit 1
            ovndb-readiness-probe "nb"
        failureThreshold: 3
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 5
      resources:
        requests:
          cpu: 10m
          memory: 300Mi
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /ovnkube-lib
        name: ovnkube-script-lib
      - mountPath: /etc/ovn/
        name: etc-openvswitch
      - mountPath: /var/log/ovn
        name: node-log
      - mountPath: /run/ovn/
        name: run-ovn
      - mountPath: /env
        name: env-overrides
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-pgmcr
        readOnly: true
    - command:
      - /bin/bash
      - -c
      - |
        set -xem
        if [[ -f /env/_master ]]; then
          set -o allexport
          source /env/_master
          set +o allexport
        fi
        . /ovnkube-lib/ovnkube-lib.sh || exit 1

        trap quit-sbdb TERM INT
        start-sbdb ${OVN_LOG_LEVEL}
      env:
      - name: OVN_LOG_LEVEL
        value: info
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a17e9d83aeb6de5f0851aaacd1a9ebddbc8a4ac3ece2e4af8670aa0c33b8fc9c
      imagePullPolicy: IfNotPresent
      lifecycle:
        postStart:
          exec:
            command:
            - /bin/bash
            - -c
            - |
              set -x
              . /ovnkube-lib/ovnkube-lib.sh || exit 1
              sbdb-post-start
      name: sbdb
      readinessProbe:
        exec:
          command:
          - /bin/bash
          - -c
          - |
            set -xeo pipefail
            . /ovnkube-lib/ovnkube-lib.sh || exit 1
            ovndb-readiness-probe "sb"
        failureThreshold: 3
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 5
      resources:
        requests:
          cpu: 10m
          memory: 300Mi
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /ovnkube-lib
        name: ovnkube-script-lib
      - mountPath: /etc/ovn/
        name: etc-openvswitch
      - mountPath: /run/ovn/
        name: run-ovn
      - mountPath: /var/log/ovn
        name: node-log
      - mountPath: /env
        name: env-overrides
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-pgmcr
        readOnly: true
    - command:
      - /bin/bash
      - -c
      - |
        set -xe
        . /ovnkube-lib/ovnkube-lib.sh || exit 1
        start-ovnkube-node ${OVN_KUBE_LOG_LEVEL} 29103 29105
      env:
      - name: KUBERNETES_SERVICE_PORT
        value: "6443"
      - name: KUBERNETES_SERVICE_HOST
        value: api-int.sno.openstack.lab
      - name: OVN_CONTROLLER_INACTIVITY_PROBE
        value: "180000"
      - name: OVN_KUBE_LOG_LEVEL
        value: "4"
      - name: K8S_NODE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: spec.nodeName
      - name: POD_NAME
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.name
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a17e9d83aeb6de5f0851aaacd1a9ebddbc8a4ac3ece2e4af8670aa0c33b8fc9c
      imagePullPolicy: IfNotPresent
      lifecycle:
        preStop:
          exec:
            command:
            - rm
            - -f
            - /etc/cni/net.d/10-ovn-kubernetes.conf
      name: ovnkube-controller
      ports:
      - containerPort: 29105
        hostPort: 29105
        name: ovnmetrics-port
        protocol: TCP
      readinessProbe:
        exec:
          command:
          - /bin/bash
          - -c
          - |
            #!/bin/bash
            test -f /etc/cni/net.d/10-ovn-kubernetes.conf
        failureThreshold: 3
        initialDelaySeconds: 5
        periodSeconds: 30
        successThreshold: 1
        timeoutSeconds: 1
      resources:
        requests:
          cpu: 10m
          memory: 600Mi
      securityContext:
        privileged: true
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /ovnkube-lib
        name: ovnkube-script-lib
      - mountPath: /var/lib/kubelet
        mountPropagation: HostToContainer
        name: host-kubelet
        readOnly: true
      - mountPath: /etc/systemd/system
        name: systemd-units
        readOnly: true
      - mountPath: /host
        mountPropagation: HostToContainer
        name: host-slash
        readOnly: true
      - mountPath: /run/ovn-kubernetes/
        name: host-run-ovn-kubernetes
      - mountPath: /run/netns
        mountPropagation: HostToContainer
        name: host-run-netns
        readOnly: true
      - mountPath: /run/systemd/private
        mountPropagation: HostToContainer
        name: run-systemd
        readOnly: true
        subPath: private
      - mountPath: /cni-bin-dir
        name: host-cni-bin
      - mountPath: /etc/cni/net.d
        name: host-cni-netd
      - mountPath: /var/lib/cni/networks/ovn-k8s-cni-overlay
        name: host-var-lib-cni-networks-ovn-kubernetes
      - mountPath: /run/openvswitch
        name: run-openvswitch
      - mountPath: /var/log/ovnkube/
        name: etc-openvswitch
      - mountPath: /run/ovn/
        name: run-ovn
      - mountPath: /etc/openvswitch
        name: etc-openvswitch
      - mountPath: /etc/ovn/
        name: etc-openvswitch
      - mountPath: /var/lib/openvswitch
        name: var-lib-openvswitch
      - mountPath: /run/ovnkube-config/
        name: ovnkube-config
      - mountPath: /env
        name: env-overrides
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-pgmcr
        readOnly: true
    dnsPolicy: Default
    enableServiceLinks: true
    hostNetwork: true
    hostPID: true
    initContainers:
    - command:
      - /bin/bash
      - -c
      - |
        cat << EOF > /etc/ovn/kubeconfig
        apiVersion: v1
        clusters:
          - cluster:
              certificate-authority: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
              server: https://api-int.sno.openstack.lab:6443
            name: default-cluster
        contexts:
          - context:
              cluster: default-cluster
              namespace: default
              user: default-auth
            name: default-context
        current-context: default-context
        kind: Config
        preferences: {}
        users:
          - name: default-auth
            user:
              client-certificate: /etc/ovn/ovnkube-node-certs/ovnkube-client-current.pem
              client-key: /etc/ovn/ovnkube-node-certs/ovnkube-client-current.pem
        EOF
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a17e9d83aeb6de5f0851aaacd1a9ebddbc8a4ac3ece2e4af8670aa0c33b8fc9c
      imagePullPolicy: IfNotPresent
      name: kubecfg-setup
      resources: {}
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: FallbackToLogsOnError
      volumeMounts:
      - mountPath: /etc/ovn/
        name: etc-openvswitch
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-pgmcr
        readOnly: true
    nodeName: master-0
    nodeSelector:
      kubernetes.io/os: linux
    preemptionPolicy: PreemptLowerPriority
    priority: 2000001000
    priorityClassName: system-node-critical
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext: {}
    serviceAccount: ovn-kubernetes-node
    serviceAccountName: ovn-kubernetes-node
    terminationGracePeriodSeconds: 30
    tolerations:
    - operator: Exists
    volumes:
    - hostPath:
        path: /var/lib/kubelet
        type: ""
      name: host-kubelet
    - hostPath:
        path: /etc/systemd/system
        type: ""
      name: systemd-units
    - hostPath:
        path: /
        type: ""
      name: host-slash
    - hostPath:
        path: /run/netns
        type: ""
      name: host-run-netns
    - hostPath:
        path: /run/systemd
        type: ""
      name: run-systemd
    - hostPath:
        path: /var/lib/openvswitch/data
        type: ""
      name: var-lib-openvswitch
    - hostPath:
        path: /var/lib/ovn-ic/etc
        type: ""
      name: etc-openvswitch
    - hostPath:
        path: /var/run/openvswitch
        type: ""
      name: run-openvswitch
    - hostPath:
        path: /var/run/ovn-ic
        type: ""
      name: run-ovn
    - hostPath:
        path: /var/log/ovn
        type: ""
      name: node-log
    - hostPath:
        path: /dev/log
        type: ""
      name: log-socket
    - hostPath:
        path: /run/ovn-kubernetes
        type: ""
      name: host-run-ovn-kubernetes
    - hostPath:
        path: /var/lib/cni/bin
        type: ""
      name: host-cni-bin
    - hostPath:
        path: /var/run/multus/cni/net.d
        type: ""
      name: host-cni-netd
    - hostPath:
        path: /var/lib/cni/networks/ovn-k8s-cni-overlay
        type: ""
      name: host-var-lib-cni-networks-ovn-kubernetes
    - configMap:
        defaultMode: 420
        name: ovnkube-config
      name: ovnkube-config
    - configMap:
        defaultMode: 420
        name: env-overrides
        optional: true
      name: env-overrides
    - name: ovn-node-metrics-cert
      secret:
        defaultMode: 420
        optional: true
        secretName: ovn-node-metrics-cert
    - configMap:
        defaultMode: 484
        name: ovnkube-script-lib
      name: ovnkube-script-lib
    - name: kube-api-access-pgmcr
      projected:
        defaultMode: 420
        sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            items:
            - key: ca.crt
              path: ca.crt
            name: kube-root-ca.crt
        - downwardAPI:
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
              path: namespace
        - configMap:
            items:
            - key: service-ca.crt
              path: service-ca.crt
            name: openshift-service-ca.crt
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2025-12-04T00:29:47Z"
      status: "True"
      type: PodReadyToStartContainers
    - lastProbeTime: null
      lastTransitionTime: "2025-12-04T00:29:47Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2025-12-04T00:47:22Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: "2025-12-04T00:47:22Z"
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2025-12-04T00:29:46Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: cri-o://67eaa89158bd8981039f406f9b055c599b3c4a0643e1d85da0bf24483baa2cdb
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b03d2897e7cc0e8d0c306acb68ca3d9396d502882c14942faadfdb16bc40e17d
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b03d2897e7cc0e8d0c306acb68ca3d9396d502882c14942faadfdb16bc40e17d
      lastState: {}
      name: kube-rbac-proxy-node
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-12-04T00:29:47Z"
      volumeMounts:
      - mountPath: /ovnkube-lib
        name: ovnkube-script-lib
      - mountPath: /etc/pki/tls/metrics-cert
        name: ovn-node-metrics-cert
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-pgmcr
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://9ab212f36f155f85d2d091a3f9a56c80b2279c0b758498911f23f9c4b08cc252
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b03d2897e7cc0e8d0c306acb68ca3d9396d502882c14942faadfdb16bc40e17d
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b03d2897e7cc0e8d0c306acb68ca3d9396d502882c14942faadfdb16bc40e17d
      lastState: {}
      name: kube-rbac-proxy-ovn-metrics
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-12-04T00:29:47Z"
      volumeMounts:
      - mountPath: /ovnkube-lib
        name: ovnkube-script-lib
      - mountPath: /etc/pki/tls/metrics-cert
        name: ovn-node-metrics-cert
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-pgmcr
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://db50e970d25eee596b04df4df6879a106c527cd83dc2f4f0d1707e6db1a9c62e
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a17e9d83aeb6de5f0851aaacd1a9ebddbc8a4ac3ece2e4af8670aa0c33b8fc9c
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a17e9d83aeb6de5f0851aaacd1a9ebddbc8a4ac3ece2e4af8670aa0c33b8fc9c
      lastState: {}
      name: nbdb
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-12-04T00:29:47Z"
      volumeMounts:
      - mountPath: /ovnkube-lib
        name: ovnkube-script-lib
      - mountPath: /etc/ovn/
        name: etc-openvswitch
      - mountPath: /var/log/ovn
        name: node-log
      - mountPath: /run/ovn/
        name: run-ovn
      - mountPath: /env
        name: env-overrides
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-pgmcr
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://93b49fdd7d525fef1f1a42c278ef9cd14eb3e469c98a2d1590dc4801d994b0ef
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a17e9d83aeb6de5f0851aaacd1a9ebddbc8a4ac3ece2e4af8670aa0c33b8fc9c
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a17e9d83aeb6de5f0851aaacd1a9ebddbc8a4ac3ece2e4af8670aa0c33b8fc9c
      lastState: {}
      name: northd
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-12-04T00:29:47Z"
      volumeMounts:
      - mountPath: /ovnkube-lib
        name: ovnkube-script-lib
      - mountPath: /etc/ovn
        name: etc-openvswitch
      - mountPath: /var/log/ovn
        name: node-log
      - mountPath: /run/ovn/
        name: run-ovn
      - mountPath: /env
        name: env-overrides
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-pgmcr
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://127c19e8b0523c93ccc20df2bc30a2586c85c1ee781159788c04a63ea0d3a516
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a17e9d83aeb6de5f0851aaacd1a9ebddbc8a4ac3ece2e4af8670aa0c33b8fc9c
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a17e9d83aeb6de5f0851aaacd1a9ebddbc8a4ac3ece2e4af8670aa0c33b8fc9c
      lastState: {}
      name: ovn-acl-logging
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-12-04T00:29:47Z"
      volumeMounts:
      - mountPath: /ovnkube-lib
        name: ovnkube-script-lib
      - mountPath: /var/log/ovn/
        name: node-log
      - mountPath: /run/ovn/
        name: run-ovn
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-pgmcr
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://2a323cea55cc2314032155911075ca41966948b5ff15b2c67d9367ff6415a31a
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a17e9d83aeb6de5f0851aaacd1a9ebddbc8a4ac3ece2e4af8670aa0c33b8fc9c
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a17e9d83aeb6de5f0851aaacd1a9ebddbc8a4ac3ece2e4af8670aa0c33b8fc9c
      lastState: {}
      name: ovn-controller
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-12-04T00:29:47Z"
      volumeMounts:
      - mountPath: /ovnkube-lib
        name: ovnkube-script-lib
      - mountPath: /run/openvswitch
        name: run-openvswitch
      - mountPath: /run/ovn/
        name: run-ovn
      - mountPath: /etc/openvswitch
        name: etc-openvswitch
      - mountPath: /etc/ovn/
        name: etc-openvswitch
      - mountPath: /var/lib/openvswitch
        name: var-lib-openvswitch
      - mountPath: /env
        name: env-overrides
      - mountPath: /var/log/ovn/
        name: node-log
      - mountPath: /dev/log
        name: log-socket
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-pgmcr
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://25b918d7e0ef146378dc1f73f7792845ddcda1e3dc0f2dff22b4a5248584cf77
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a17e9d83aeb6de5f0851aaacd1a9ebddbc8a4ac3ece2e4af8670aa0c33b8fc9c
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a17e9d83aeb6de5f0851aaacd1a9ebddbc8a4ac3ece2e4af8670aa0c33b8fc9c
      lastState: {}
      name: ovnkube-controller
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-12-04T00:29:52Z"
      volumeMounts:
      - mountPath: /ovnkube-lib
        name: ovnkube-script-lib
      - mountPath: /var/lib/kubelet
        name: host-kubelet
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /etc/systemd/system
        name: systemd-units
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /host
        name: host-slash
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /run/ovn-kubernetes/
        name: host-run-ovn-kubernetes
      - mountPath: /run/netns
        name: host-run-netns
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /run/systemd/private
        name: run-systemd
        readOnly: true
        recursiveReadOnly: Disabled
      - mountPath: /cni-bin-dir
        name: host-cni-bin
      - mountPath: /etc/cni/net.d
        name: host-cni-netd
      - mountPath: /var/lib/cni/networks/ovn-k8s-cni-overlay
        name: host-var-lib-cni-networks-ovn-kubernetes
      - mountPath: /run/openvswitch
        name: run-openvswitch
      - mountPath: /var/log/ovnkube/
        name: etc-openvswitch
      - mountPath: /run/ovn/
        name: run-ovn
      - mountPath: /etc/openvswitch
        name: etc-openvswitch
      - mountPath: /etc/ovn/
        name: etc-openvswitch
      - mountPath: /var/lib/openvswitch
        name: var-lib-openvswitch
      - mountPath: /run/ovnkube-config/
        name: ovnkube-config
      - mountPath: /env
        name: env-overrides
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-pgmcr
        readOnly: true
        recursiveReadOnly: Disabled
    - containerID: cri-o://f7b0dc67459fe85c5df274f7b55a6669e1ed5259473d8be31868ebb077f53662
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a17e9d83aeb6de5f0851aaacd1a9ebddbc8a4ac3ece2e4af8670aa0c33b8fc9c
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a17e9d83aeb6de5f0851aaacd1a9ebddbc8a4ac3ece2e4af8670aa0c33b8fc9c
      lastState: {}
      name: sbdb
      ready: true
      restartCount: 0
      started: true
      state:
        running:
          startedAt: "2025-12-04T00:29:50Z"
      volumeMounts:
      - mountPath: /ovnkube-lib
        name: ovnkube-script-lib
      - mountPath: /etc/ovn/
        name: etc-openvswitch
      - mountPath: /run/ovn/
        name: run-ovn
      - mountPath: /var/log/ovn
        name: node-log
      - mountPath: /env
        name: env-overrides
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-pgmcr
        readOnly: true
        recursiveReadOnly: Disabled
    hostIP: 192.168.32.10
    hostIPs:
    - ip: 192.168.32.10
    initContainerStatuses:
    - containerID: cri-o://c9521e4b338a729f24968935eb69431972eafc3079f28819c337f948d3e9346b
      image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a17e9d83aeb6de5f0851aaacd1a9ebddbc8a4ac3ece2e4af8670aa0c33b8fc9c
      imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a17e9d83aeb6de5f0851aaacd1a9ebddbc8a4ac3ece2e4af8670aa0c33b8fc9c
      lastState: {}
      name: kubecfg-setup
      ready: true
      restartCount: 0
      started: false
      state:
        terminated:
          containerID: cri-o://c9521e4b338a729f24968935eb69431972eafc3079f28819c337f948d3e9346b
          exitCode: 0
          finishedAt: "2025-12-04T00:29:46Z"
          reason: Completed
          startedAt: "2025-12-04T00:29:46Z"
      volumeMounts:
      - mountPath: /etc/ovn/
        name: etc-openvswitch
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: kube-api-access-pgmcr
        readOnly: true
        recursiveReadOnly: Disabled
    phase: Running
    podIP: 192.168.32.10
    podIPs:
    - ip: 192.168.32.10
    qosClass: Burstable
    startTime: "2025-12-04T00:29:46Z"
kind: PodList
metadata:
  resourceVersion: "47316"