---
apiVersion: operator.openshift.io/v1
kind: KubeAPIServer
metadata:
  annotations:
    include.release.openshift.io/ibm-cloud-managed: "true"
    include.release.openshift.io/self-managed-high-availability: "true"
    include.release.openshift.io/single-node-developer: "true"
    release.openshift.io/create-only: "true"
  creationTimestamp: "2025-12-03T19:49:45Z"
  generation: 4
  managedFields:
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"UnsupportedConfigOverridesUpgradeable"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-kube-apiserver-operator-UnsupportedConfigOverrides
    operation: Apply
    subresource: status
    time: "2025-12-03T19:55:21Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"NodeControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
        f:nodeStatuses:
          k:{"nodeName":"master-0"}:
            .: {}
            f:nodeName: {}
    manager: kube-apiserver-Node
    operation: Apply
    subresource: status
    time: "2025-12-03T19:55:21Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"GuardControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: GuardController-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-12-03T19:55:22Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"StartupMonitorPodContainerExcessiveRestartsDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"StartupMonitorPodDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: kube-apiserver-StartupMonitorPodCondition
    operation: Apply
    subresource: status
    time: "2025-12-03T19:55:22Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"StaticPodFallbackRevisionDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: kube-apiserver-StaticPodStateFallback
    operation: Apply
    subresource: status
    time: "2025-12-03T19:55:22Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"MissingStaticPodControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: MissingStaticPodController-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-12-03T19:55:23Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"WorkerLatencyProfileDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: WorkerLatencyProfile-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-12-03T19:55:23Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"WorkerLatencyProfileComplete"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"WorkerLatencyProfileProgressing"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: kube-apiserver-LatencyProfile
    operation: Apply
    subresource: status
    time: "2025-12-03T19:55:23Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"Encrypted"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: openshift-kube-apiserver-EncryptionCondition
    operation: Apply
    subresource: status
    time: "2025-12-03T19:55:23Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"EncryptionKeyControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: openshift-kube-apiserver-EncryptionKey
    operation: Apply
    subresource: status
    time: "2025-12-03T19:55:23Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"EncryptionPruneControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: openshift-kube-apiserver-EncryptionPrune
    operation: Apply
    subresource: status
    time: "2025-12-03T19:55:23Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"EncryptionStateControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: openshift-kube-apiserver-EncryptionState
    operation: Apply
    subresource: status
    time: "2025-12-03T19:55:23Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"EncryptionMigrationControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"EncryptionMigrationControllerProgressing"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: openshift-kube-apiserver-EncryptionMigration
    operation: Apply
    subresource: status
    time: "2025-12-03T19:55:24Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"InstallerPodContainerWaitingDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"InstallerPodNetworkingDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"InstallerPodPendingDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: kube-apiserver-InstallerState
    operation: Apply
    subresource: status
    time: "2025-12-03T19:55:25Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"StaticPodsDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: kube-apiserver-StaticPodState
    operation: Apply
    subresource: status
    time: "2025-12-03T19:55:26Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"BackingResourceControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: BackingResourceController-StaticResources
    operation: Apply
    subresource: status
    time: "2025-12-03T19:55:28Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"AuditPolicyDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: kube-apiserver-AuditPolicy
    operation: Apply
    subresource: status
    time: "2025-12-03T19:55:29Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"ResourceSyncControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: kube-apiserver-ResourceSync
    operation: Apply
    subresource: status
    time: "2025-12-03T19:55:33Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"ConfigObservationDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: kube-apiserver-ConfigObserver
    operation: Apply
    subresource: status
    time: "2025-12-03T19:55:46Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"NodeKubeconfigControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: NodeKubeconfigController-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-12-03T19:55:56Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"RevisionControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: RevisionController-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-12-03T19:56:06Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"KubeAPIServerStaticResourcesDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: KubeAPIServerStaticResources-StaticResources
    operation: Apply
    subresource: status
    time: "2025-12-03T20:09:44Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:latestAvailableRevision: {}
    manager: kube-apiserver-RevisionController
    operation: Apply
    subresource: status
    time: "2025-12-03T20:14:45Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"InstallerControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"NodeInstallerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"NodeInstallerProgressing"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"StaticPodsAvailable"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:status: {}
            f:type: {}
        f:nodeStatuses:
          k:{"nodeName":"master-0"}:
            .: {}
            f:currentRevision: {}
            f:lastFailedCount: {}
            f:lastFailedReason: {}
            f:lastFailedRevision: {}
            f:lastFailedRevisionErrors: {}
            f:lastFailedTime: {}
            f:nodeName: {}
    manager: kube-apiserver-Installer
    operation: Apply
    subresource: status
    time: "2025-12-03T20:17:57Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .: {}
          f:include.release.openshift.io/ibm-cloud-managed: {}
          f:include.release.openshift.io/self-managed-high-availability: {}
          f:include.release.openshift.io/single-node-developer: {}
          f:release.openshift.io/create-only: {}
        f:ownerReferences:
          .: {}
          k:{"uid":"fd5cd85f-713e-43c7-a87a-162bb6d2c143"}: {}
      f:spec:
        .: {}
        f:logLevel: {}
        f:managementState: {}
        f:operatorLogLevel: {}
    manager: cluster-version-operator
    operation: Update
    time: "2025-12-03T19:49:45Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:spec:
        f:observedConfig:
          .: {}
          f:admission:
            .: {}
            f:pluginConfig:
              .: {}
              f:PodSecurity:
                .: {}
                f:configuration:
                  .: {}
                  f:defaults:
                    .: {}
                    f:audit: {}
                    f:audit-version: {}
                    f:enforce: {}
                    f:enforce-version: {}
                    f:warn: {}
                    f:warn-version: {}
              f:network.openshift.io/ExternalIPRanger:
                .: {}
                f:configuration:
                  .: {}
                  f:allowIngressIP: {}
                  f:apiVersion: {}
                  f:kind: {}
              f:network.openshift.io/RestrictedEndpointsAdmission:
                .: {}
                f:configuration:
                  .: {}
                  f:apiVersion: {}
                  f:kind: {}
                  f:restrictedCIDRs: {}
          f:apiServerArguments:
            .: {}
            f:api-audiences: {}
            f:authentication-token-webhook-config-file: {}
            f:authentication-token-webhook-version: {}
            f:etcd-servers: {}
            f:feature-gates: {}
            f:goaway-chance: {}
            f:runtime-config: {}
            f:send-retry-after-while-not-ready-once: {}
            f:service-account-issuer: {}
            f:service-account-jwks-uri: {}
            f:shutdown-delay-duration: {}
          f:authConfig:
            .: {}
            f:oauthMetadataFile: {}
          f:corsAllowedOrigins: {}
          f:gracefulTerminationDuration: {}
          f:servicesSubnet: {}
          f:servingInfo:
            .: {}
            f:bindAddress: {}
            f:bindNetwork: {}
            f:cipherSuites: {}
            f:minTLSVersion: {}
            f:namedCertificates: {}
        f:unsupportedConfigOverrides: {}
    manager: cluster-kube-apiserver-operator
    operation: Update
    time: "2025-12-03T20:14:28Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        .: {}
        f:conditions:
          .: {}
          k:{"type":"CRDConversionWebhookConfigurationError"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"CertRotation_AggregatorProxyClientCert_Degraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"CertRotation_CheckEndpointsClient_Degraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"CertRotation_ControlPlaneNodeAdminClient_Degraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"CertRotation_ExternalLoadBalancerServing_Degraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"CertRotation_InternalLoadBalancerServing_Degraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"CertRotation_KubeAPIServerToKubeletClientCert_Degraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"CertRotation_KubeControllerManagerClient_Degraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"CertRotation_KubeSchedulerClient_Degraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"CertRotation_LocalhostRecoveryServing_Degraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"CertRotation_LocalhostServing_Degraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"CertRotation_NodeSystemAdminClient_Degraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"CertRotation_ServiceNetworkServing_Degraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"CertRotationTimeUpgradeable"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"KubeletMinorVersionUpgradeable"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"MutatingAdmissionWebhookConfigurationError"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"PodSecurityCustomerEvaluationConditionsDetected"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"PodSecurityDisabledSyncerEvaluationConditionsDetected"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"PodSecurityOpenshiftEvaluationConditionsDetected"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"PodSecurityRunLevelZeroEvaluationConditionsDetected"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"TargetConfigControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"ValidatingAdmissionWebhookConfigurationError"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"VirtualResourceAdmissionError"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
        f:nodeStatuses:
          k:{"nodeName":"master-0"}:
            f:currentRevision: {}
        f:readyReplicas: {}
        f:serviceAccountIssuers: {}
    manager: cluster-kube-apiserver-operator
    operation: Update
    subresource: status
    time: "2025-12-03T20:27:00Z"
  name: cluster
  ownerReferences:
  - apiVersion: config.openshift.io/v1
    kind: ClusterVersion
    name: version
    uid: fd5cd85f-713e-43c7-a87a-162bb6d2c143
  resourceVersion: "26017"
  uid: e57e0f44-3119-481b-8cbc-abb9a81b99b3
spec:
  logLevel: Normal
  managementState: Managed
  observedConfig:
    admission:
      pluginConfig:
        PodSecurity:
          configuration:
            defaults:
              audit: restricted
              audit-version: latest
              enforce: privileged
              enforce-version: latest
              warn: restricted
              warn-version: latest
        network.openshift.io/ExternalIPRanger:
          configuration:
            allowIngressIP: false
            apiVersion: network.openshift.io/v1
            kind: ExternalIPRangerAdmissionConfig
        network.openshift.io/RestrictedEndpointsAdmission:
          configuration:
            apiVersion: network.openshift.io/v1
            kind: RestrictedEndpointsAdmissionConfig
            restrictedCIDRs:
            - 10.128.0.0/16
            - 172.30.0.0/16
    apiServerArguments:
      api-audiences:
      - https://kubernetes.default.svc
      authentication-token-webhook-config-file:
      - /etc/kubernetes/static-pod-resources/secrets/webhook-authenticator/kubeConfig
      authentication-token-webhook-version:
      - v1
      etcd-servers:
      - https://192.168.32.10:2379
      - https://localhost:2379
      feature-gates:
      - AWSEFSDriverVolumeMetrics=true
      - AdminNetworkPolicy=true
      - AlibabaPlatform=true
      - AzureWorkloadIdentity=true
      - BareMetalLoadBalancer=true
      - BuildCSIVolumes=true
      - ChunkSizeMiB=true
      - CloudDualStackNodeIPs=true
      - DisableKubeletCloudCredentialProviders=true
      - GCPLabelsTags=true
      - HardwareSpeed=true
      - IngressControllerLBSubnetsAWS=true
      - KMSv1=true
      - ManagedBootImages=true
      - ManagedBootImagesAWS=true
      - MultiArchInstallAWS=true
      - MultiArchInstallGCP=true
      - NetworkDiagnosticsConfig=true
      - NetworkLiveMigration=true
      - NetworkSegmentation=true
      - NewOLM=true
      - NodeDisruptionPolicy=true
      - OnClusterBuild=true
      - PersistentIPsForVirtualization=true
      - PrivateHostedZoneAWS=true
      - SetEIPForNLBIngressController=true
      - VSphereControlPlaneMachineSet=true
      - VSphereDriverConfiguration=true
      - VSphereMultiVCenters=true
      - VSphereStaticIPs=true
      - ValidatingAdmissionPolicy=true
      - AWSClusterHostedDNS=false
      - AdditionalRoutingCapabilities=false
      - AutomatedEtcdBackup=false
      - BootcNodeManagement=false
      - CSIDriverSharedResource=false
      - ClusterAPIInstall=false
      - ClusterAPIInstallIBMCloud=false
      - ClusterMonitoringConfig=false
      - ConsolePluginContentSecurityPolicy=false
      - DNSNameResolver=false
      - DynamicResourceAllocation=false
      - EtcdBackendQuota=false
      - EventedPLEG=false
      - Example=false
      - ExternalOIDC=false
      - ExternalOIDCWithUIDAndExtraClaimMappings=false
      - GCPClusterHostedDNS=false
      - GatewayAPI=false
      - ImageStreamImportMode=false
      - IngressControllerDynamicConfigurationManager=false
      - InsightsConfig=false
      - InsightsConfigAPI=false
      - InsightsOnDemandDataGather=false
      - InsightsRuntimeExtractor=false
      - MachineAPIMigration=false
      - MachineAPIOperatorDisableMachineHealthCheckController=false
      - MachineAPIProviderOpenStack=false
      - MachineConfigNodes=false
      - MaxUnavailableStatefulSet=false
      - MetricsCollectionProfiles=false
      - MinimumKubeletVersion=false
      - MixedCPUsAllocation=false
      - MultiArchInstallAzure=false
      - NodeSwap=false
      - NutanixMultiSubnets=false
      - OVNObservability=false
      - OpenShiftPodSecurityAdmission=false
      - PinnedImages=false
      - PlatformOperators=false
      - ProcMountType=false
      - RouteAdvertisements=false
      - RouteExternalCertificate=false
      - ServiceAccountTokenNodeBinding=false
      - SignatureStores=false
      - SigstoreImageVerification=false
      - StreamingCollectionEncodingToJSON=false
      - StreamingCollectionEncodingToProtobuf=false
      - TranslateStreamCloseWebsocketRequests=false
      - UpgradeStatus=false
      - UserNamespacesPodSecurityStandards=false
      - UserNamespacesSupport=false
      - VSphereMultiNetworks=false
      - VolumeAttributesClass=false
      - VolumeGroupSnapshot=false
      goaway-chance:
      - "0"
      runtime-config:
      - admissionregistration.k8s.io/v1beta1=true
      send-retry-after-while-not-ready-once:
      - "true"
      service-account-issuer:
      - https://kubernetes.default.svc
      service-account-jwks-uri:
      - https://api.sno.openstack.lab:6443/openid/v1/jwks
      shutdown-delay-duration:
      - 0s
    authConfig:
      oauthMetadataFile: /etc/kubernetes/static-pod-resources/configmaps/oauth-metadata/oauthMetadata
    corsAllowedOrigins:
    - //127\.0\.0\.1(:|$)
    - //localhost(:|$)
    gracefulTerminationDuration: "15"
    servicesSubnet: 172.30.0.0/16
    servingInfo:
      bindAddress: 0.0.0.0:6443
      bindNetwork: tcp4
      cipherSuites:
      - TLS_AES_128_GCM_SHA256
      - TLS_AES_256_GCM_SHA384
      - TLS_CHACHA20_POLY1305_SHA256
      - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
      - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
      - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
      - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
      - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
      - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
      minTLSVersion: VersionTLS12
      namedCertificates:
      - certFile: /etc/kubernetes/static-pod-certs/secrets/localhost-serving-cert-certkey/tls.crt
        keyFile: /etc/kubernetes/static-pod-certs/secrets/localhost-serving-cert-certkey/tls.key
      - certFile: /etc/kubernetes/static-pod-certs/secrets/service-network-serving-certkey/tls.crt
        keyFile: /etc/kubernetes/static-pod-certs/secrets/service-network-serving-certkey/tls.key
      - certFile: /etc/kubernetes/static-pod-certs/secrets/external-loadbalancer-serving-certkey/tls.crt
        keyFile: /etc/kubernetes/static-pod-certs/secrets/external-loadbalancer-serving-certkey/tls.key
      - certFile: /etc/kubernetes/static-pod-certs/secrets/internal-loadbalancer-serving-certkey/tls.crt
        keyFile: /etc/kubernetes/static-pod-certs/secrets/internal-loadbalancer-serving-certkey/tls.key
      - certFile: /etc/kubernetes/static-pod-resources/secrets/localhost-recovery-serving-certkey/tls.crt
        keyFile: /etc/kubernetes/static-pod-resources/secrets/localhost-recovery-serving-certkey/tls.key
  operatorLogLevel: Normal
  unsupportedConfigOverrides: null
status:
  conditions:
  - lastTransitionTime: "2025-12-03T19:55:21Z"
    message: Kubelet and API server minor versions are synced.
    reason: KubeletMinorVersionsSynced
    status: "True"
    type: KubeletMinorVersionUpgradeable
  - lastTransitionTime: "2025-12-03T19:55:21Z"
    reason: ExpectedReason
    status: "False"
    type: PodSecurityCustomerEvaluationConditionsDetected
  - lastTransitionTime: "2025-12-03T19:55:21Z"
    reason: ExpectedReason
    status: "False"
    type: PodSecurityOpenshiftEvaluationConditionsDetected
  - lastTransitionTime: "2025-12-03T19:55:21Z"
    reason: ExpectedReason
    status: "False"
    type: PodSecurityRunLevelZeroEvaluationConditionsDetected
  - lastTransitionTime: "2025-12-03T19:55:21Z"
    reason: ExpectedReason
    status: "False"
    type: PodSecurityDisabledSyncerEvaluationConditionsDetected
  - lastTransitionTime: "2025-12-03T19:55:21Z"
    reason: NoUnsupportedConfigOverrides
    status: "True"
    type: UnsupportedConfigOverridesUpgradeable
  - lastTransitionTime: "2025-12-03T19:55:21Z"
    message: All master nodes are ready
    reason: MasterNodesReady
    status: "False"
    type: NodeControllerDegraded
  - lastTransitionTime: "2025-12-03T19:55:21Z"
    reason: DefaultCertRotationBase
    status: "True"
    type: CertRotationTimeUpgradeable
  - lastTransitionTime: "2025-12-03T19:55:22Z"
    status: "False"
    type: StaticPodFallbackRevisionDegraded
  - lastTransitionTime: "2025-12-03T19:55:22Z"
    status: "False"
    type: StartupMonitorPodContainerExcessiveRestartsDegraded
  - lastTransitionTime: "2025-12-03T19:55:22Z"
    status: "False"
    type: StartupMonitorPodDegraded
  - lastTransitionTime: "2025-12-03T19:55:22Z"
    reason: AsExpected
    status: "False"
    type: GuardControllerDegraded
  - lastTransitionTime: "2025-12-03T19:55:23Z"
    reason: AsExpected
    status: "False"
    type: MissingStaticPodControllerDegraded
  - lastTransitionTime: "2025-12-03T19:55:23Z"
    message: latency profile not set on cluster
    reason: ProfileEmpty
    status: "True"
    type: WorkerLatencyProfileComplete
  - lastTransitionTime: "2025-12-03T19:55:23Z"
    reason: ProfileEmpty
    status: "False"
    type: WorkerLatencyProfileProgressing
  - lastTransitionTime: "2025-12-03T19:55:23Z"
    reason: AsExpected
    status: "False"
    type: WorkerLatencyProfileDegraded
  - lastTransitionTime: "2025-12-03T19:55:23Z"
    status: "False"
    type: Encrypted
  - lastTransitionTime: "2025-12-03T19:55:23Z"
    status: "False"
    type: EncryptionKeyControllerDegraded
  - lastTransitionTime: "2025-12-03T19:55:23Z"
    status: "False"
    type: EncryptionStateControllerDegraded
  - lastTransitionTime: "2025-12-03T19:55:56Z"
    reason: AsExpected
    status: "False"
    type: NodeKubeconfigControllerDegraded
  - lastTransitionTime: "2025-12-03T19:56:08Z"
    status: "False"
    type: InstallerControllerDegraded
  - lastTransitionTime: "2025-12-03T20:10:22Z"
    status: "False"
    type: NodeInstallerDegraded
  - lastTransitionTime: "2025-12-03T20:17:57Z"
    message: 1 node is at revision 4
    reason: AllNodesAtLatestRevision
    status: "False"
    type: NodeInstallerProgressing
  - lastTransitionTime: "2025-12-03T20:10:22Z"
    message: 1 nodes are active; 1 node is at revision 4
    status: "True"
    type: StaticPodsAvailable
  - lastTransitionTime: "2025-12-03T19:55:23Z"
    status: "False"
    type: EncryptionPruneControllerDegraded
  - lastTransitionTime: "2025-12-03T19:56:06Z"
    reason: AsExpected
    status: "False"
    type: RevisionControllerDegraded
  - lastTransitionTime: "2025-12-03T19:55:23Z"
    status: "False"
    type: EncryptionMigrationControllerDegraded
  - lastTransitionTime: "2025-12-03T19:55:23Z"
    status: "False"
    type: EncryptionMigrationControllerProgressing
  - lastTransitionTime: "2025-12-03T19:55:24Z"
    status: "False"
    type: CertRotation_KubeSchedulerClient_Degraded
  - lastTransitionTime: "2025-12-03T19:55:25Z"
    status: "False"
    type: InstallerPodContainerWaitingDegraded
  - lastTransitionTime: "2025-12-03T19:55:25Z"
    status: "False"
    type: InstallerPodNetworkingDegraded
  - lastTransitionTime: "2025-12-03T19:55:25Z"
    status: "False"
    type: InstallerPodPendingDegraded
  - lastTransitionTime: "2025-12-03T19:55:25Z"
    status: "False"
    type: StaticPodsDegraded
  - lastTransitionTime: "2025-12-03T19:55:26Z"
    status: "False"
    type: CertRotation_CheckEndpointsClient_Degraded
  - lastTransitionTime: "2025-12-03T20:27:00Z"
    status: "False"
    type: MutatingAdmissionWebhookConfigurationError
  - lastTransitionTime: "2025-12-03T20:25:03Z"
    status: "False"
    type: ValidatingAdmissionWebhookConfigurationError
  - lastTransitionTime: "2025-12-03T20:21:42Z"
    status: "False"
    type: CRDConversionWebhookConfigurationError
  - lastTransitionTime: "2025-12-03T19:55:27Z"
    status: "False"
    type: VirtualResourceAdmissionError
  - lastTransitionTime: "2025-12-03T19:55:44Z"
    status: "False"
    type: CertRotation_InternalLoadBalancerServing_Degraded
  - lastTransitionTime: "2025-12-03T19:55:28Z"
    reason: AsExpected
    status: "False"
    type: BackingResourceControllerDegraded
  - lastTransitionTime: "2025-12-03T19:55:29Z"
    status: "False"
    type: AuditPolicyDegraded
  - lastTransitionTime: "2025-12-03T19:55:30Z"
    status: "False"
    type: CertRotation_LocalhostServing_Degraded
  - lastTransitionTime: "2025-12-03T19:55:32Z"
    status: "False"
    type: CertRotation_ExternalLoadBalancerServing_Degraded
  - lastTransitionTime: "2025-12-03T19:55:33Z"
    status: "False"
    type: CertRotation_KubeControllerManagerClient_Degraded
  - lastTransitionTime: "2025-12-03T19:55:33Z"
    status: "False"
    type: ResourceSyncControllerDegraded
  - lastTransitionTime: "2025-12-03T19:55:33Z"
    status: "False"
    type: CertRotation_ServiceNetworkServing_Degraded
  - lastTransitionTime: "2025-12-03T19:55:36Z"
    status: "False"
    type: CertRotation_LocalhostRecoveryServing_Degraded
  - lastTransitionTime: "2025-12-03T19:55:38Z"
    status: "False"
    type: CertRotation_KubeAPIServerToKubeletClientCert_Degraded
  - lastTransitionTime: "2025-12-03T19:55:40Z"
    status: "False"
    type: CertRotation_ControlPlaneNodeAdminClient_Degraded
  - lastTransitionTime: "2025-12-03T19:55:41Z"
    status: "False"
    type: CertRotation_NodeSystemAdminClient_Degraded
  - lastTransitionTime: "2025-12-03T19:55:43Z"
    status: "False"
    type: CertRotation_AggregatorProxyClientCert_Degraded
  - lastTransitionTime: "2025-12-03T20:09:44Z"
    reason: AsExpected
    status: "False"
    type: KubeAPIServerStaticResourcesDegraded
  - lastTransitionTime: "2025-12-03T19:55:46Z"
    status: "False"
    type: ConfigObservationDegraded
  - lastTransitionTime: "2025-12-03T20:18:01Z"
    status: "False"
    type: TargetConfigControllerDegraded
  latestAvailableRevision: 4
  nodeStatuses:
  - currentRevision: 4
    lastFailedCount: 1
    lastFailedReason: InstallerFailed
    lastFailedRevision: 1
    lastFailedRevisionErrors:
    - |
      installer:  canceled (Client.Timeout exceeded while awaiting headers)
      I1203 19:57:52.736653       1 copy.go:52] Failed to get config map openshift-kube-apiserver/kube-apiserver-pod-1: the server was unable to return a response in the time allotted, but may still be processing the request (get configmaps kube-apiserver-pod-1)
      I1203 19:58:07.003452       1 copy.go:52] Failed to get config map openshift-kube-apiserver/kube-apiserver-pod-1: Get "https://172.30.0.1:443/api/v1/namespaces/openshift-kube-apiserver/configmaps/kube-apiserver-pod-1?timeout=14s": net/http: request canceled (Client.Timeout exceeded while awaiting headers)
      W1203 19:58:21.005083       1 recorder.go:219] Error creating event &Event{ObjectMeta:{installer-1-master-0.187dccdef758704f.5cfc7532  openshift-kube-apiserver    0 0001-01-01 00:00:00 +0000 UTC <nil> <nil> map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Pod,Namespace:openshift-kube-apiserver,Name:installer-1-master-0,UID:186cc14f-5f58-43ca-8ffa-db07606ff0f7,APIVersion:v1,ResourceVersion:,FieldPath:,},Reason:StaticPodInstallerFailed,Message:Installing revision 1: Get "https://172.30.0.1:443/api/v1/namespaces/openshift-kube-apiserver/configmaps/kube-apiserver-pod-1?timeout=14s": net/http: request canceled (Client.Timeout exceeded while awaiting headers),Source:EventSource{Component:static-pod-installer,Host:,},FirstTimestamp:2025-12-03 19:58:07.003676751 +0000 UTC m=+89.227570650,LastTimestamp:2025-12-03 19:58:07.003676751 +0000 UTC m=+89.227570650,Count:1,Type:Warning,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:,ReportingInstance:,}: Post "https://172.30.0.1:443/api/v1/namespaces/openshift-kube-apiserver/events?timeout=14s": net/http: request canceled (Client.Timeout exceeded while awaiting headers)
      F1203 19:58:21.005300       1 cmd.go:109] failed to copy: Get "https://172.30.0.1:443/api/v1/namespaces/openshift-kube-apiserver/configmaps/kube-apiserver-pod-1?timeout=14s": net/http: request canceled (Client.Timeout exceeded while awaiting headers)
    lastFailedTime: "2025-12-03T20:08:25Z"
    nodeName: master-0
  readyReplicas: 0
  serviceAccountIssuers:
  - name: https://kubernetes.default.svc