--- apiVersion: operator.openshift.io/v1 kind: KubeControllerManager metadata: annotations: include.release.openshift.io/hypershift: "true" include.release.openshift.io/ibm-cloud-managed: "true" include.release.openshift.io/self-managed-high-availability: "true" include.release.openshift.io/single-node-developer: "true" release.openshift.io/create-only: "true" creationTimestamp: "2025-10-11T10:25:22Z" generation: 3 managedFields: - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"UnsupportedConfigOverridesUpgradeable"}: .: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} manager: kube-controller-manager-operator-UnsupportedConfigOverrides operation: Apply subresource: status time: "2025-10-11T10:28:18Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"WorkerLatencyProfileDegraded"}: .: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} manager: WorkerLatencyProfile-reportDegraded operation: Apply subresource: status time: "2025-10-11T10:28:19Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"WorkerLatencyProfileComplete"}: .: {} f:lastTransitionTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} k:{"type":"WorkerLatencyProfileProgressing"}: .: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} manager: kube-controller-manager-LatencyProfile operation: Apply subresource: status time: "2025-10-11T10:28:19Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"MissingStaticPodControllerDegraded"}: .: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} manager: MissingStaticPodController-reportDegraded operation: Apply subresource: status time: "2025-10-11T10:28:20Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"ConfigObservationDegraded"}: .: {} f:lastTransitionTime: {} f:status: {} f:type: {} manager: kube-controller-manager-ConfigObserver operation: Apply subresource: status time: "2025-10-11T10:28:20Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"InstallerPodContainerWaitingDegraded"}: .: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"InstallerPodNetworkingDegraded"}: .: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"InstallerPodPendingDegraded"}: .: {} f:lastTransitionTime: {} f:status: {} f:type: {} manager: kube-controller-manager-InstallerState operation: Apply subresource: status time: "2025-10-11T10:28:21Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"BackingResourceControllerDegraded"}: .: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} manager: BackingResourceController-StaticResources operation: Apply subresource: status time: "2025-10-11T10:28:22Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"ResourceSyncControllerDegraded"}: .: {} f:lastTransitionTime: {} f:status: {} f:type: {} manager: kube-controller-manager-ResourceSync operation: Apply subresource: status time: "2025-10-11T10:28:24Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"RevisionControllerDegraded"}: .: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} manager: RevisionController-reportDegraded operation: Apply subresource: status time: "2025-10-11T10:28:56Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"KubeControllerManagerStaticResourcesDegraded"}: .: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} manager: KubeControllerManagerStaticResources-StaticResources operation: Apply subresource: status time: "2025-10-11T10:37:44Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"NodeControllerDegraded"}: .: {} f:lastTransitionTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} f:nodeStatuses: k:{"nodeName":"master-0"}: .: {} f:nodeName: {} k:{"nodeName":"master-1"}: .: {} f:nodeName: {} k:{"nodeName":"master-2"}: .: {} f:nodeName: {} manager: kube-controller-manager-Node operation: Apply subresource: status time: "2025-10-11T10:39:52Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:latestAvailableRevision: {} manager: kube-controller-manager-RevisionController operation: Apply subresource: status time: "2025-10-11T10:40:56Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"GuardControllerDegraded"}: .: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} manager: GuardController-reportDegraded operation: Apply subresource: status time: "2025-10-11T10:42:50Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"StaticPodsDegraded"}: .: {} f:lastTransitionTime: {} f:status: {} f:type: {} manager: kube-controller-manager-StaticPodState operation: Apply subresource: status time: "2025-10-11T10:42:52Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"InstallerControllerDegraded"}: .: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"NodeInstallerDegraded"}: .: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"NodeInstallerProgressing"}: .: {} f:lastTransitionTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} k:{"type":"StaticPodsAvailable"}: .: {} f:lastTransitionTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} f:nodeStatuses: k:{"nodeName":"master-0"}: .: {} f:currentRevision: {} f:lastFailedCount: {} f:lastFailedReason: {} f:lastFailedRevision: {} f:lastFallbackCount: {} f:nodeName: {} f:targetRevision: {} k:{"nodeName":"master-1"}: .: {} f:currentRevision: {} f:lastFailedCount: {} f:lastFailedReason: {} f:lastFailedRevision: {} f:lastFailedRevisionErrors: {} f:lastFailedTime: {} f:lastFallbackCount: {} f:nodeName: {} f:targetRevision: {} k:{"nodeName":"master-2"}: .: {} f:currentRevision: {} f:lastFailedCount: {} f:lastFailedReason: {} f:lastFailedRevision: {} f:lastFallbackCount: {} f:nodeName: {} f:targetRevision: {} manager: kube-controller-manager-Installer operation: Apply subresource: status time: "2025-10-11T10:44:12Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:include.release.openshift.io/hypershift: {} f:include.release.openshift.io/ibm-cloud-managed: {} f:include.release.openshift.io/self-managed-high-availability: {} f:include.release.openshift.io/single-node-developer: {} f:release.openshift.io/create-only: {} f:ownerReferences: .: {} k:{"uid":"d5f199fe-acec-4610-b505-6d5fa3929e77"}: {} f:spec: .: {} f:logLevel: {} f:managementState: {} f:operatorLogLevel: {} f:useMoreSecureServiceCA: {} manager: cluster-version-operator operation: Update time: "2025-10-11T10:25:22Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:spec: f:observedConfig: .: {} f:extendedArguments: .: {} f:cluster-cidr: {} f:cluster-name: {} f:feature-gates: {} f:service-cluster-ip-range: {} f:featureGates: {} f:serviceServingCert: .: {} f:certFile: {} f:servingInfo: .: {} f:cipherSuites: {} f:minTLSVersion: {} f:unsupportedConfigOverrides: {} manager: cluster-kube-controller-manager-operator operation: Update time: "2025-10-11T10:28:25Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: .: {} f:conditions: .: {} k:{"type":"CertRotation_CSRSigningCert_Degraded"}: .: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"GarbageCollectorDegraded"}: .: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} k:{"type":"SATokenSignerDegraded"}: .: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"TargetConfigControllerDegraded"}: .: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"Upgradeable"}: .: {} f:lastTransitionTime: {} f:status: {} f:type: {} f:readyReplicas: {} manager: cluster-kube-controller-manager-operator operation: Update subresource: status time: "2025-10-11T10:41:19Z" name: cluster ownerReferences: - apiVersion: config.openshift.io/v1 kind: ClusterVersion name: version uid: d5f199fe-acec-4610-b505-6d5fa3929e77 resourceVersion: "23182" uid: 9b2823ba-9107-48b3-98fd-4f8938adf711 spec: logLevel: Normal managementState: Managed observedConfig: extendedArguments: cluster-cidr: - 10.128.0.0/14 cluster-name: - ocp-kwfcg feature-gates: - AWSEFSDriverVolumeMetrics=true - AdminNetworkPolicy=true - AlibabaPlatform=true - AzureWorkloadIdentity=true - BareMetalLoadBalancer=true - BuildCSIVolumes=true - ChunkSizeMiB=true - CloudDualStackNodeIPs=true - DisableKubeletCloudCredentialProviders=true - GCPLabelsTags=true - HardwareSpeed=true - IngressControllerLBSubnetsAWS=true - KMSv1=true - ManagedBootImages=true - ManagedBootImagesAWS=true - MultiArchInstallAWS=true - MultiArchInstallGCP=true - NetworkDiagnosticsConfig=true - NetworkLiveMigration=true - NetworkSegmentation=true - NewOLM=true - NodeDisruptionPolicy=true - OnClusterBuild=true - PersistentIPsForVirtualization=true - PrivateHostedZoneAWS=true - SetEIPForNLBIngressController=true - VSphereControlPlaneMachineSet=true - VSphereDriverConfiguration=true - VSphereMultiVCenters=true - VSphereStaticIPs=true - ValidatingAdmissionPolicy=true - AWSClusterHostedDNS=false - AdditionalRoutingCapabilities=false - AutomatedEtcdBackup=false - BootcNodeManagement=false - CSIDriverSharedResource=false - ClusterAPIInstall=false - ClusterAPIInstallIBMCloud=false - ClusterMonitoringConfig=false - ConsolePluginContentSecurityPolicy=false - DNSNameResolver=false - DynamicResourceAllocation=false - EtcdBackendQuota=false - EventedPLEG=false - Example=false - ExternalOIDC=false - ExternalOIDCWithUIDAndExtraClaimMappings=false - GCPClusterHostedDNS=false - GatewayAPI=false - ImageStreamImportMode=false - IngressControllerDynamicConfigurationManager=false - InsightsConfig=false - InsightsConfigAPI=false - InsightsOnDemandDataGather=false - InsightsRuntimeExtractor=false - MachineAPIMigration=false - MachineAPIOperatorDisableMachineHealthCheckController=false - MachineAPIProviderOpenStack=false - MachineConfigNodes=false - MaxUnavailableStatefulSet=false - MetricsCollectionProfiles=false - MinimumKubeletVersion=false - MixedCPUsAllocation=false - MultiArchInstallAzure=false - NodeSwap=false - NutanixMultiSubnets=false - OVNObservability=false - OpenShiftPodSecurityAdmission=false - PinnedImages=false - PlatformOperators=false - ProcMountType=false - RouteAdvertisements=false - RouteExternalCertificate=false - ServiceAccountTokenNodeBinding=false - SignatureStores=false - SigstoreImageVerification=false - TranslateStreamCloseWebsocketRequests=false - UpgradeStatus=false - UserNamespacesPodSecurityStandards=false - UserNamespacesSupport=false - VSphereMultiNetworks=false - VolumeAttributesClass=false - VolumeGroupSnapshot=false service-cluster-ip-range: - 172.30.0.0/16 featureGates: - AWSEFSDriverVolumeMetrics=true - AdminNetworkPolicy=true - AlibabaPlatform=true - AzureWorkloadIdentity=true - BareMetalLoadBalancer=true - BuildCSIVolumes=true - ChunkSizeMiB=true - CloudDualStackNodeIPs=true - DisableKubeletCloudCredentialProviders=true - GCPLabelsTags=true - HardwareSpeed=true - IngressControllerLBSubnetsAWS=true - KMSv1=true - ManagedBootImages=true - ManagedBootImagesAWS=true - MultiArchInstallAWS=true - MultiArchInstallGCP=true - NetworkDiagnosticsConfig=true - NetworkLiveMigration=true - NetworkSegmentation=true - NewOLM=true - NodeDisruptionPolicy=true - OnClusterBuild=true - PersistentIPsForVirtualization=true - PrivateHostedZoneAWS=true - SetEIPForNLBIngressController=true - VSphereControlPlaneMachineSet=true - VSphereDriverConfiguration=true - VSphereMultiVCenters=true - VSphereStaticIPs=true - ValidatingAdmissionPolicy=true - AWSClusterHostedDNS=false - AdditionalRoutingCapabilities=false - AutomatedEtcdBackup=false - BootcNodeManagement=false - CSIDriverSharedResource=false - ClusterAPIInstall=false - ClusterAPIInstallIBMCloud=false - ClusterMonitoringConfig=false - ConsolePluginContentSecurityPolicy=false - DNSNameResolver=false - DynamicResourceAllocation=false - EtcdBackendQuota=false - EventedPLEG=false - Example=false - ExternalOIDC=false - ExternalOIDCWithUIDAndExtraClaimMappings=false - GCPClusterHostedDNS=false - GatewayAPI=false - ImageStreamImportMode=false - IngressControllerDynamicConfigurationManager=false - InsightsConfig=false - InsightsConfigAPI=false - InsightsOnDemandDataGather=false - InsightsRuntimeExtractor=false - MachineAPIMigration=false - MachineAPIOperatorDisableMachineHealthCheckController=false - MachineAPIProviderOpenStack=false - MachineConfigNodes=false - MaxUnavailableStatefulSet=false - MetricsCollectionProfiles=false - MinimumKubeletVersion=false - MixedCPUsAllocation=false - MultiArchInstallAzure=false - NodeSwap=false - NutanixMultiSubnets=false - OVNObservability=false - OpenShiftPodSecurityAdmission=false - PinnedImages=false - PlatformOperators=false - ProcMountType=false - RouteAdvertisements=false - RouteExternalCertificate=false - ServiceAccountTokenNodeBinding=false - SignatureStores=false - SigstoreImageVerification=false - TranslateStreamCloseWebsocketRequests=false - UpgradeStatus=false - UserNamespacesPodSecurityStandards=false - UserNamespacesSupport=false - VSphereMultiNetworks=false - VolumeAttributesClass=false - VolumeGroupSnapshot=false serviceServingCert: certFile: /etc/kubernetes/static-pod-resources/configmaps/service-ca/ca-bundle.crt servingInfo: cipherSuites: - TLS_AES_128_GCM_SHA256 - TLS_AES_256_GCM_SHA384 - TLS_CHACHA20_POLY1305_SHA256 - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 minTLSVersion: VersionTLS12 operatorLogLevel: Normal unsupportedConfigOverrides: null useMoreSecureServiceCA: true status: conditions: - lastTransitionTime: "2025-10-11T10:29:20Z" reason: AsExpected status: "False" type: GarbageCollectorDegraded - lastTransitionTime: "2025-10-11T10:28:18Z" reason: NoUnsupportedConfigOverrides status: "True" type: UnsupportedConfigOverridesUpgradeable - lastTransitionTime: "2025-10-11T10:39:52Z" message: All master nodes are ready reason: MasterNodesReady status: "False" type: NodeControllerDegraded - lastTransitionTime: "2025-10-11T10:28:19Z" message: latency profile not set on cluster reason: ProfileEmpty status: "True" type: WorkerLatencyProfileComplete - lastTransitionTime: "2025-10-11T10:28:19Z" reason: ProfileEmpty status: "False" type: WorkerLatencyProfileProgressing - lastTransitionTime: "2025-10-11T10:28:56Z" reason: AsExpected status: "False" type: RevisionControllerDegraded - lastTransitionTime: "2025-10-11T10:28:19Z" reason: AsExpected status: "False" type: WorkerLatencyProfileDegraded - lastTransitionTime: "2025-10-11T10:28:19Z" status: "False" type: ConfigObservationDegraded - lastTransitionTime: "2025-10-11T10:28:20Z" reason: AsExpected status: "False" type: MissingStaticPodControllerDegraded - lastTransitionTime: "2025-10-11T10:28:57Z" status: "False" type: InstallerControllerDegraded - lastTransitionTime: "2025-10-11T10:30:56Z" status: "False" type: NodeInstallerDegraded - lastTransitionTime: "2025-10-11T10:44:12Z" message: 3 nodes are at revision 6 reason: AllNodesAtLatestRevision status: "False" type: NodeInstallerProgressing - lastTransitionTime: "2025-10-11T10:31:58Z" message: 3 nodes are active; 3 nodes are at revision 6 reason: "" status: "True" type: StaticPodsAvailable - lastTransitionTime: "2025-10-11T10:42:50Z" reason: AsExpected status: "False" type: GuardControllerDegraded - lastTransitionTime: "2025-10-11T10:28:21Z" status: "False" type: InstallerPodContainerWaitingDegraded - lastTransitionTime: "2025-10-11T10:28:21Z" status: "False" type: InstallerPodNetworkingDegraded - lastTransitionTime: "2025-10-11T10:28:21Z" status: "False" type: InstallerPodPendingDegraded - lastTransitionTime: "2025-10-11T10:28:22Z" status: "False" type: CertRotation_CSRSigningCert_Degraded - lastTransitionTime: "2025-10-11T10:28:22Z" reason: AsExpected status: "False" type: BackingResourceControllerDegraded - lastTransitionTime: "2025-10-11T10:42:52Z" status: "False" type: StaticPodsDegraded - lastTransitionTime: "2025-10-11T10:28:23Z" status: "False" type: ResourceSyncControllerDegraded - lastTransitionTime: "2025-10-11T10:28:24Z" status: "False" type: SATokenSignerDegraded - lastTransitionTime: "2025-10-11T10:37:44Z" reason: AsExpected status: "False" type: KubeControllerManagerStaticResourcesDegraded - lastTransitionTime: "2025-10-11T10:28:44Z" status: "True" type: Upgradeable - lastTransitionTime: "2025-10-11T10:37:44Z" status: "False" type: TargetConfigControllerDegraded latestAvailableRevision: 6 nodeStatuses: - currentRevision: 6 lastFailedCount: 0 lastFailedReason: "" lastFailedRevision: 0 lastFallbackCount: 0 nodeName: master-0 targetRevision: 0 - currentRevision: 6 lastFailedCount: 1 lastFailedReason: InstallerFailed lastFailedRevision: 3 lastFailedRevisionErrors: - | installer: 30:15.543642 1 cmd.go:629] Writing config file "/etc/kubernetes/static-pod-resources/kube-controller-manager-pod-3/configmaps/kube-controller-manager-pod/forceRedeploymentReason" ... I1011 10:30:15.543808 1 cmd.go:277] Creating directory "/etc/kubernetes/static-pod-resources/kube-controller-manager-pod-3/configmaps/recycler-config" ... I1011 10:30:15.543962 1 cmd.go:629] Writing config file "/etc/kubernetes/static-pod-resources/kube-controller-manager-pod-3/configmaps/recycler-config/recycler-pod.yaml" ... I1011 10:30:15.544143 1 cmd.go:277] Creating directory "/etc/kubernetes/static-pod-resources/kube-controller-manager-pod-3/configmaps/service-ca" ... I1011 10:30:15.544286 1 cmd.go:629] Writing config file "/etc/kubernetes/static-pod-resources/kube-controller-manager-pod-3/configmaps/service-ca/ca-bundle.crt" ... I1011 10:30:15.544547 1 cmd.go:277] Creating directory "/etc/kubernetes/static-pod-resources/kube-controller-manager-pod-3/configmaps/serviceaccount-ca" ... I1011 10:30:15.544675 1 cmd.go:629] Writing config file "/etc/kubernetes/static-pod-resources/kube-controller-manager-pod-3/configmaps/serviceaccount-ca/ca-bundle.crt" ... I1011 10:30:15.544857 1 cmd.go:221] Creating target resource directory "/etc/kubernetes/static-pod-resources/kube-controller-manager-certs" ... I1011 10:30:15.544962 1 cmd.go:229] Getting secrets ... I1011 10:30:15.738636 1 copy.go:32] Got secret openshift-kube-controller-manager/csr-signer I1011 10:30:15.938028 1 copy.go:32] Got secret openshift-kube-controller-manager/kube-controller-manager-client-cert-key I1011 10:30:15.938090 1 cmd.go:242] Getting config maps ... I1011 10:30:16.138883 1 copy.go:60] Got configMap openshift-kube-controller-manager/aggregator-client-ca I1011 10:30:16.337774 1 copy.go:52] Failed to get config map openshift-kube-controller-manager/client-ca: configmaps "client-ca" not found F1011 10:30:16.540543 1 cmd.go:109] failed to copy: configmaps "client-ca" not found lastFailedTime: "2025-10-11T10:30:18Z" lastFallbackCount: 0 nodeName: master-1 targetRevision: 0 - currentRevision: 6 lastFailedCount: 0 lastFailedReason: "" lastFailedRevision: 0 lastFallbackCount: 0 nodeName: master-2 targetRevision: 0 readyReplicas: 0