---
apiVersion: operator.openshift.io/v1
kind: Authentication
metadata:
  annotations:
    include.release.openshift.io/self-managed-high-availability: "true"
    include.release.openshift.io/single-node-developer: "true"
    release.openshift.io/create-only: "true"
  creationTimestamp: "2025-10-11T10:25:26Z"
  generation: 9
  managedFields:
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"WebhookAuthenticatorCertApprover_OpenShiftAuthenticatorDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: WebhookAuthenticatorCertApprover_OpenShiftAuthenticator-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-10-11T10:28:18Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"ManagementStateDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: authentication-ManagementState
    operation: Apply
    subresource: status
    time: "2025-10-11T10:28:18Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"UnsupportedConfigOverridesUpgradeable"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: openshift-authentication-UnsupportedConfigOverrides
    operation: Apply
    subresource: status
    time: "2025-10-11T10:28:18Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"Encrypted"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: openshift-oauth-apiserver-EncryptionCondition
    operation: Apply
    subresource: status
    time: "2025-10-11T10:28:19Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"EncryptionKeyControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: openshift-oauth-apiserver-EncryptionKey
    operation: Apply
    subresource: status
    time: "2025-10-11T10:28:19Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"EncryptionMigrationControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"EncryptionMigrationControllerProgressing"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: openshift-oauth-apiserver-EncryptionMigration
    operation: Apply
    subresource: status
    time: "2025-10-11T10:28:19Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"EncryptionPruneControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: openshift-oauth-apiserver-EncryptionPrune
    operation: Apply
    subresource: status
    time: "2025-10-11T10:28:19Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"EncryptionStateControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: openshift-oauth-apiserver-EncryptionState
    operation: Apply
    subresource: status
    time: "2025-10-11T10:28:19Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"ResourceSyncControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: oauth-server-ResourceSync
    operation: Apply
    subresource: status
    time: "2025-10-11T10:28:25Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"RouterCertsDomainValidationControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: RouterCertsDomainValidationController-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-10-11T10:28:27Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"AuditPolicyDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: oauth-apiserver-AuditPolicy
    operation: Apply
    subresource: status
    time: "2025-10-11T10:28:27Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"AuthenticatorCertKeyProgressing"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: openshift-authentication-WebhookAuthenticator
    operation: Apply
    subresource: status
    time: "2025-10-11T10:28:32Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"APIServerStaticResourcesDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: APIServerStaticResources-StaticResources
    operation: Apply
    subresource: status
    time: "2025-10-11T10:28:37Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"RevisionControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
        f:latestAvailableRevision: {}
    manager: oauth-apiserver-RevisionController
    operation: Apply
    subresource: status
    time: "2025-10-11T10:28:37Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"OAuthServiceDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"SystemServiceCAConfigDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: openshift-authentication-ServiceCA
    operation: Apply
    subresource: status
    time: "2025-10-11T10:28:49Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"OpenshiftAuthenticationStaticResourcesDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: OpenshiftAuthenticationStaticResources-StaticResources
    operation: Apply
    subresource: status
    time: "2025-10-11T10:28:51Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"OAuthServerConfigObservationDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: oauth-server-ConfigObserver
    operation: Apply
    subresource: status
    time: "2025-10-11T10:28:52Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"RouterCertsDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: openshift-authentication-RouterCertsDomainValidation
    operation: Apply
    subresource: status
    time: "2025-10-11T10:28:52Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"ReadyIngressNodesAvailable"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: openshift-authentication-IngressNodesAvailable
    operation: Apply
    subresource: status
    time: "2025-10-11T10:29:25Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"WebhookAuthenticatorControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: WebhookAuthenticatorController-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-10-11T10:29:46Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"APIServicesAvailable"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"APIServicesDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: openshift-apiserver-APIService
    operation: Apply
    subresource: status
    time: "2025-10-11T10:35:41Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"ProxyConfigControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: ProxyConfigController-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-10-11T10:36:55Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"AuthConfigDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"IngressConfigDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"OAuthSystemMetadataDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: openshift-authentication-Metadata
    operation: Apply
    subresource: status
    time: "2025-10-11T10:37:07Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"OAuthConfigDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"OAuthConfigIngressDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"OAuthConfigRouteDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"OAuthConfigServiceDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"OAuthSessionSecretDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: openshift-authentication-PayloadConfig
    operation: Apply
    subresource: status
    time: "2025-10-11T10:37:08Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"CustomRouteControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: CustomRouteController-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-10-11T10:37:35Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"OAuthClientsControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: OAuthClientsController-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-10-11T10:37:37Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"OAuthAPIServerConfigObservationDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: oauth-apiserver-ConfigObserver
    operation: Apply
    subresource: status
    time: "2025-10-11T10:37:38Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"OAuthServerRouteEndpointAccessibleControllerAvailable"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: OAuthServerRoute-EndpointAccessible
    operation: Apply
    subresource: status
    time: "2025-10-11T10:37:42Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"OAuthServerRouteEndpointAccessibleControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: OAuthServerRouteEndpointAccessibleController-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-10-11T10:37:42Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"OAuthServerServiceEndpointAccessibleControllerAvailable"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: OAuthServerService-EndpointAccessible
    operation: Apply
    subresource: status
    time: "2025-10-11T10:37:42Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"OAuthServerServiceEndpointAccessibleControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: OAuthServerServiceEndpointAccessibleController-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-10-11T10:37:42Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"OAuthServerServiceEndpointsEndpointAccessibleControllerAvailable"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: OAuthServerServiceEndpoints-EndpointAccessible
    operation: Apply
    subresource: status
    time: "2025-10-11T10:37:42Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"OAuthServerServiceEndpointsEndpointAccessibleControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: OAuthServerServiceEndpointsEndpointAccessibleController-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-10-11T10:37:42Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"IngressStateEndpointsDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"IngressStatePodsDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: openshift-authentication-IngressState
    operation: Apply
    subresource: status
    time: "2025-10-11T10:37:46Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"OAuthServerDeploymentAvailable"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"OAuthServerDeploymentDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"OAuthServerDeploymentProgressing"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"OAuthServerWorkloadDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
        f:generations:
          k:{"group":"apps","name":"oauth-openshift","namespace":"openshift-authentication","resource":"deployments"}:
            .: {}
            f:group: {}
            f:lastGeneration: {}
            f:name: {}
            f:namespace: {}
            f:resource: {}
    manager: OAuthServer-Workload
    operation: Apply
    subresource: status
    time: "2025-10-11T10:40:05Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"APIServerDeploymentAvailable"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"APIServerDeploymentDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"APIServerDeploymentProgressing"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"APIServerWorkloadDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
        f:generations:
          k:{"group":"apps","name":"apiserver","namespace":"openshift-oauth-apiserver","resource":"deployments"}:
            .: {}
            f:group: {}
            f:lastGeneration: {}
            f:name: {}
            f:namespace: {}
            f:resource: {}
    manager: OAuthAPIServerController-Workload
    operation: Apply
    subresource: status
    time: "2025-10-11T10:45:08Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"WellKnownReadyControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: WellKnownReadyController-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-10-11T10:46:13Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"WellKnownAvailable"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"WellKnownReadyControllerProgressing"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: openshift-authentication-WellKnownReady
    operation: Apply
    subresource: status
    time: "2025-10-11T10:46:13Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .: {}
          f:include.release.openshift.io/self-managed-high-availability: {}
          f:include.release.openshift.io/single-node-developer: {}
          f:release.openshift.io/create-only: {}
        f:ownerReferences:
          .: {}
          k:{"uid":"d5f199fe-acec-4610-b505-6d5fa3929e77"}: {}
      f:spec:
        .: {}
        f:logLevel: {}
        f:managementState: {}
        f:operatorLogLevel: {}
    manager: cluster-version-operator
    operation: Update
    time: "2025-10-11T10:25:26Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:spec:
        f:observedConfig:
          .: {}
          f:oauthAPIServer:
            .: {}
            f:apiServerArguments:
              .: {}
              f:api-audiences: {}
              f:cors-allowed-origins: {}
              f:etcd-servers: {}
              f:tls-cipher-suites: {}
              f:tls-min-version: {}
          f:oauthServer:
            .: {}
            f:corsAllowedOrigins: {}
            f:oauthConfig:
              .: {}
              f:assetPublicURL: {}
              f:loginURL: {}
              f:templates:
                .: {}
                f:error: {}
                f:login: {}
                f:providerSelection: {}
              f:tokenConfig:
                .: {}
                f:accessTokenMaxAgeSeconds: {}
                f:authorizeTokenMaxAgeSeconds: {}
            f:serverArguments:
              .: {}
              f:audit-log-format: {}
              f:audit-log-maxbackup: {}
              f:audit-log-maxsize: {}
              f:audit-log-path: {}
              f:audit-policy-file: {}
            f:servingInfo:
              .: {}
              f:cipherSuites: {}
              f:minTLSVersion: {}
              f:namedCertificates: {}
            f:volumesToMount:
              .: {}
              f:identityProviders: {}
        f:unsupportedConfigOverrides: {}
    manager: authentication-operator
    operation: Update
    time: "2025-10-11T10:41:41Z"
  name: cluster
  ownerReferences:
  - apiVersion: config.openshift.io/v1
    kind: ClusterVersion
    name: version
    uid: d5f199fe-acec-4610-b505-6d5fa3929e77
  resourceVersion: "24268"
  uid: 74703fcf-f0e8-488e-9261-18d91eb8536c
spec:
  logLevel: Normal
  managementState: Managed
  observedConfig:
    oauthAPIServer:
      apiServerArguments:
        api-audiences:
        - https://kubernetes.default.svc
        cors-allowed-origins:
        - //127\.0\.0\.1(:|$)
        - //localhost(:|$)
        etcd-servers:
        - https://192.168.34.10:2379
        - https://192.168.34.11:2379
        - https://192.168.34.12:2379
        tls-cipher-suites:
        - TLS_AES_128_GCM_SHA256
        - TLS_AES_256_GCM_SHA384
        - TLS_CHACHA20_POLY1305_SHA256
        - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
        - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
        - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
        - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
        - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
        - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
        tls-min-version: VersionTLS12
    oauthServer:
      corsAllowedOrigins:
      - //127\.0\.0\.1(:|$)
      - //localhost(:|$)
      oauthConfig:
        assetPublicURL: https://console-openshift-console.apps.ocp.openstack.lab
        loginURL: https://api.ocp.openstack.lab:6443
        templates:
          error: /var/config/system/secrets/v4-0-config-system-ocp-branding-template/errors.html
          login: /var/config/system/secrets/v4-0-config-system-ocp-branding-template/login.html
          providerSelection: /var/config/system/secrets/v4-0-config-system-ocp-branding-template/providers.html
        tokenConfig:
          accessTokenMaxAgeSeconds: 86400
          authorizeTokenMaxAgeSeconds: 300
      serverArguments:
        audit-log-format:
        - json
        audit-log-maxbackup:
        - "10"
        audit-log-maxsize:
        - "100"
        audit-log-path:
        - /var/log/oauth-server/audit.log
        audit-policy-file:
        - /var/run/configmaps/audit/audit.yaml
      servingInfo:
        cipherSuites:
        - TLS_AES_128_GCM_SHA256
        - TLS_AES_256_GCM_SHA384
        - TLS_CHACHA20_POLY1305_SHA256
        - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
        - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
        - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
        - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
        - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
        - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
        minTLSVersion: VersionTLS12
        namedCertificates:
        - certFile: /var/config/system/secrets/v4-0-config-system-router-certs/apps.ocp.openstack.lab
          keyFile: /var/config/system/secrets/v4-0-config-system-router-certs/apps.ocp.openstack.lab
          names:
          - '*.apps.ocp.openstack.lab'
      volumesToMount:
        identityProviders: '{}'
  operatorLogLevel: Normal
  unsupportedConfigOverrides: null
status:
  conditions:
  - lastTransitionTime: "2025-10-11T10:28:18Z"
    status: "False"
    type: ManagementStateDegraded
  - lastTransitionTime: "2025-10-11T10:28:18Z"
    reason: NoUnsupportedConfigOverrides
    status: "True"
    type: UnsupportedConfigOverridesUpgradeable
  - lastTransitionTime: "2025-10-11T10:28:37Z"
    status: "False"
    type: RevisionControllerDegraded
  - lastTransitionTime: "2025-10-11T10:28:18Z"
    reason: AsExpected
    status: "False"
    type: WebhookAuthenticatorCertApprover_OpenShiftAuthenticatorDegraded
  - lastTransitionTime: "2025-10-11T10:28:19Z"
    status: "False"
    type: EncryptionStateControllerDegraded
  - lastTransitionTime: "2025-10-11T10:28:19Z"
    status: "False"
    type: EncryptionMigrationControllerDegraded
  - lastTransitionTime: "2025-10-11T10:28:19Z"
    status: "False"
    type: EncryptionMigrationControllerProgressing
  - lastTransitionTime: "2025-10-11T10:28:19Z"
    status: "False"
    type: EncryptionPruneControllerDegraded
  - lastTransitionTime: "2025-10-11T10:29:25Z"
    message: ""
    reason: ""
    status: "True"
    type: ReadyIngressNodesAvailable
  - lastTransitionTime: "2025-10-11T10:28:19Z"
    status: "False"
    type: Encrypted
  - lastTransitionTime: "2025-10-11T10:28:19Z"
    status: "False"
    type: EncryptionKeyControllerDegraded
  - lastTransitionTime: "2025-10-11T10:29:46Z"
    reason: AsExpected
    status: "False"
    type: WebhookAuthenticatorControllerDegraded
  - lastTransitionTime: "2025-10-11T10:35:41Z"
    status: "True"
    type: APIServicesAvailable
  - lastTransitionTime: "2025-10-11T10:28:19Z"
    status: "False"
    type: APIServicesDegraded
  - lastTransitionTime: "2025-10-11T10:28:53Z"
    reason: AsExpected
    status: "True"
    type: APIServerDeploymentAvailable
  - lastTransitionTime: "2025-10-11T10:37:47Z"
    reason: AsExpected
    status: "False"
    type: APIServerDeploymentDegraded
  - lastTransitionTime: "2025-10-11T10:45:08Z"
    reason: AsExpected
    status: "False"
    type: APIServerDeploymentProgressing
  - lastTransitionTime: "2025-10-11T10:28:43Z"
    status: "False"
    type: APIServerWorkloadDegraded
  - lastTransitionTime: "2025-10-11T10:37:42Z"
    reason: AsExpected
    status: "True"
    type: OAuthServerServiceEndpointsEndpointAccessibleControllerAvailable
  - lastTransitionTime: "2025-10-11T10:37:42Z"
    reason: AsExpected
    status: "False"
    type: OAuthServerServiceEndpointsEndpointAccessibleControllerDegraded
  - lastTransitionTime: "2025-10-11T10:28:52Z"
    status: "False"
    type: OAuthServerConfigObservationDegraded
  - lastTransitionTime: "2025-10-11T10:37:38Z"
    status: "False"
    type: OAuthAPIServerConfigObservationDegraded
  - lastTransitionTime: "2025-10-11T10:28:47Z"
    message: ""
    reason: ""
    status: "False"
    type: OAuthServiceDegraded
  - lastTransitionTime: "2025-10-11T10:28:49Z"
    message: ""
    reason: ""
    status: "False"
    type: SystemServiceCAConfigDegraded
  - lastTransitionTime: "2025-10-11T10:37:42Z"
    reason: AsExpected
    status: "True"
    type: OAuthServerServiceEndpointAccessibleControllerAvailable
  - lastTransitionTime: "2025-10-11T10:37:42Z"
    reason: AsExpected
    status: "False"
    type: OAuthServerServiceEndpointAccessibleControllerDegraded
  - lastTransitionTime: "2025-10-11T10:28:25Z"
    status: "False"
    type: ResourceSyncControllerDegraded
  - lastTransitionTime: "2025-10-11T10:37:46Z"
    message: ""
    reason: ""
    status: "False"
    type: IngressStateEndpointsDegraded
  - lastTransitionTime: "2025-10-11T10:28:25Z"
    message: ""
    reason: ""
    status: "False"
    type: IngressStatePodsDegraded
  - lastTransitionTime: "2025-10-11T10:28:27Z"
    status: "False"
    type: AuditPolicyDegraded
  - lastTransitionTime: "2025-10-11T10:28:52Z"
    message: ""
    reason: AsExpected
    status: "False"
    type: RouterCertsDegraded
  - lastTransitionTime: "2025-10-11T10:28:27Z"
    reason: AsExpected
    status: "False"
    type: RouterCertsDomainValidationControllerDegraded
  - lastTransitionTime: "2025-10-11T10:28:32Z"
    message: All is well
    reason: AsExpected
    status: "False"
    type: AuthenticatorCertKeyProgressing
  - lastTransitionTime: "2025-10-11T10:28:37Z"
    message: ""
    reason: AsExpected
    status: "False"
    type: APIServerStaticResourcesDegraded
  - lastTransitionTime: "2025-10-11T10:28:51Z"
    message: ""
    reason: AsExpected
    status: "False"
    type: OpenshiftAuthenticationStaticResourcesDegraded
  - lastTransitionTime: "2025-10-11T10:46:13Z"
    reason: AsExpected
    status: "True"
    type: WellKnownAvailable
  - lastTransitionTime: "2025-10-11T10:46:13Z"
    status: "False"
    type: WellKnownReadyControllerProgressing
  - lastTransitionTime: "2025-10-11T10:36:55Z"
    reason: AsExpected
    status: "False"
    type: ProxyConfigControllerDegraded
  - lastTransitionTime: "2025-10-11T10:37:43Z"
    reason: AsExpected
    status: "True"
    type: OAuthServerDeploymentAvailable
  - lastTransitionTime: "2025-10-11T10:40:05Z"
    reason: AsExpected
    status: "False"
    type: OAuthServerDeploymentDegraded
  - lastTransitionTime: "2025-10-11T10:38:57Z"
    reason: AsExpected
    status: "False"
    type: OAuthServerDeploymentProgressing
  - lastTransitionTime: "2025-10-11T10:37:37Z"
    status: "False"
    type: OAuthServerWorkloadDegraded
  - lastTransitionTime: "2025-10-11T10:37:07Z"
    message: ""
    reason: ""
    status: "False"
    type: AuthConfigDegraded
  - lastTransitionTime: "2025-10-11T10:37:07Z"
    message: ""
    reason: ""
    status: "False"
    type: IngressConfigDegraded
  - lastTransitionTime: "2025-10-11T10:37:07Z"
    message: ""
    reason: ""
    status: "False"
    type: OAuthSystemMetadataDegraded
  - lastTransitionTime: "2025-10-11T10:46:13Z"
    reason: AsExpected
    status: "False"
    type: WellKnownReadyControllerDegraded
  - lastTransitionTime: "2025-10-11T10:37:42Z"
    reason: AsExpected
    status: "True"
    type: OAuthServerRouteEndpointAccessibleControllerAvailable
  - lastTransitionTime: "2025-10-11T10:37:35Z"
    reason: AsExpected
    status: "False"
    type: CustomRouteControllerDegraded
  - lastTransitionTime: "2025-10-11T10:37:08Z"
    message: ""
    reason: ""
    status: "False"
    type: OAuthConfigDegraded
  - lastTransitionTime: "2025-10-11T10:37:08Z"
    message: ""
    reason: ""
    status: "False"
    type: OAuthConfigIngressDegraded
  - lastTransitionTime: "2025-10-11T10:37:08Z"
    message: ""
    reason: ""
    status: "False"
    type: OAuthConfigRouteDegraded
  - lastTransitionTime: "2025-10-11T10:37:08Z"
    message: ""
    reason: ""
    status: "False"
    type: OAuthConfigServiceDegraded
  - lastTransitionTime: "2025-10-11T10:37:08Z"
    message: ""
    reason: ""
    status: "False"
    type: OAuthSessionSecretDegraded
  - lastTransitionTime: "2025-10-11T10:37:42Z"
    reason: AsExpected
    status: "False"
    type: OAuthServerRouteEndpointAccessibleControllerDegraded
  - lastTransitionTime: "2025-10-11T10:37:37Z"
    reason: AsExpected
    status: "False"
    type: OAuthClientsControllerDegraded
  generations:
  - group: apps
    lastGeneration: 6
    name: apiserver
    namespace: openshift-oauth-apiserver
    resource: deployments
  - group: apps
    lastGeneration: 4
    name: oauth-openshift
    namespace: openshift-authentication
    resource: deployments
  latestAvailableRevision: 1