--- apiVersion: apps/v1 items: - apiVersion: apps/v1 kind: ReplicaSet metadata: annotations: deployment.kubernetes.io/desired-replicas: "1" deployment.kubernetes.io/max-replicas: "2" deployment.kubernetes.io/revision: "1" creationTimestamp: "2025-10-11T10:48:57Z" generation: 1 labels: app: nmstate-console-plugin pod-template-hash: 6b874cbd85 managedFields: - apiVersion: apps/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:deployment.kubernetes.io/desired-replicas: {} f:deployment.kubernetes.io/max-replicas: {} f:deployment.kubernetes.io/revision: {} f:labels: .: {} f:app: {} f:pod-template-hash: {} f:ownerReferences: .: {} k:{"uid":"ecb97488-eeba-4219-85fa-687d58dbff39"}: {} f:spec: f:replicas: {} f:selector: {} f:template: f:metadata: f:labels: .: {} f:app: {} f:pod-template-hash: {} f:spec: f:containers: k:{"name":"nmstate-console-plugin"}: .: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:ports: .: {} k:{"containerPort":9443,"protocol":"TCP"}: .: {} f:containerPort: {} f:protocol: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/etc/nginx/nginx.conf"}: .: {} f:mountPath: {} f:name: {} f:readOnly: {} f:subPath: {} k:{"mountPath":"/var/serving-cert"}: .: {} f:mountPath: {} f:name: {} f:readOnly: {} f:dnsPolicy: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: {} f:terminationGracePeriodSeconds: {} f:volumes: .: {} k:{"name":"nginx-conf"}: .: {} f:configMap: .: {} f:defaultMode: {} f:name: {} f:name: {} k:{"name":"plugin-serving-cert"}: .: {} f:name: {} f:secret: .: {} f:defaultMode: {} f:secretName: {} manager: kube-controller-manager operation: Update time: "2025-10-11T10:48:57Z" - apiVersion: apps/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:availableReplicas: {} f:fullyLabeledReplicas: {} f:observedGeneration: {} f:readyReplicas: {} f:replicas: {} manager: kube-controller-manager operation: Update subresource: status time: "2025-10-11T10:49:04Z" name: nmstate-console-plugin-6b874cbd85 namespace: openshift-nmstate ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: Deployment name: nmstate-console-plugin uid: ecb97488-eeba-4219-85fa-687d58dbff39 resourceVersion: "29763" uid: 8865ddc9-fbc6-4a41-bca2-85494d33a7a5 spec: replicas: 1 selector: matchLabels: app: nmstate-console-plugin pod-template-hash: 6b874cbd85 template: metadata: creationTimestamp: null labels: app: nmstate-console-plugin pod-template-hash: 6b874cbd85 spec: containers: - image: registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:98eacebec0d128e18d9109d3eadb5a1470ec990f11ad3e717a6638a8675d6e66 imagePullPolicy: Always name: nmstate-console-plugin ports: - containerPort: 9443 protocol: TCP resources: requests: cpu: 10m memory: 50Mi terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /var/serving-cert name: plugin-serving-cert readOnly: true - mountPath: /etc/nginx/nginx.conf name: nginx-conf readOnly: true subPath: nginx.conf dnsPolicy: ClusterFirst restartPolicy: Always schedulerName: default-scheduler securityContext: {} terminationGracePeriodSeconds: 30 volumes: - name: plugin-serving-cert secret: defaultMode: 420 secretName: plugin-serving-cert - configMap: defaultMode: 420 name: nginx-conf name: nginx-conf status: availableReplicas: 1 fullyLabeledReplicas: 1 observedGeneration: 1 readyReplicas: 1 replicas: 1 - apiVersion: apps/v1 kind: ReplicaSet metadata: annotations: deployment.kubernetes.io/desired-replicas: "1" deployment.kubernetes.io/max-replicas: "1" deployment.kubernetes.io/revision: "1" creationTimestamp: "2025-10-11T10:48:56Z" generation: 1 labels: app: kubernetes-nmstate component: kubernetes-nmstate-metrics name: nmstate-metrics pod-template-hash: fdff9cb8d prometheus.nmstate.io: "true" managedFields: - apiVersion: apps/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:deployment.kubernetes.io/desired-replicas: {} f:deployment.kubernetes.io/max-replicas: {} f:deployment.kubernetes.io/revision: {} f:labels: .: {} f:app: {} f:component: {} f:name: {} f:pod-template-hash: {} f:prometheus.nmstate.io: {} f:ownerReferences: .: {} k:{"uid":"bd0d4b48-37bf-4289-a4d9-0c20a15245d7"}: {} f:spec: f:replicas: {} f:selector: {} f:template: f:metadata: f:annotations: .: {} f:description: {} f:labels: .: {} f:app: {} f:component: {} f:name: {} f:pod-template-hash: {} f:prometheus.nmstate.io: {} f:spec: f:affinity: .: {} f:nodeAffinity: .: {} f:preferredDuringSchedulingIgnoredDuringExecution: {} f:containers: k:{"name":"kube-rbac-proxy"}: .: {} f:args: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:ports: .: {} k:{"containerPort":8443,"protocol":"TCP"}: .: {} f:containerPort: {} f:name: {} f:protocol: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:allowPrivilegeEscalation: {} f:capabilities: .: {} f:drop: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} k:{"name":"nmstate-metrics"}: .: {} f:args: {} f:command: {} f:env: .: {} k:{"name":"ENABLE_PROFILER"}: .: {} f:name: {} f:value: {} k:{"name":"OPERATOR_NAME"}: .: {} f:name: {} f:value: {} k:{"name":"POD_NAME"}: .: {} f:name: {} f:valueFrom: .: {} f:fieldRef: {} k:{"name":"POD_NAMESPACE"}: .: {} f:name: {} f:valueFrom: .: {} f:fieldRef: {} k:{"name":"PROFILER_PORT"}: .: {} f:name: {} f:value: {} k:{"name":"RUN_METRICS_MANAGER"}: .: {} f:name: {} k:{"name":"WATCH_NAMESPACE"}: .: {} f:name: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:dnsPolicy: {} f:nodeSelector: {} f:priorityClassName: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: {} f:serviceAccount: {} f:serviceAccountName: {} f:terminationGracePeriodSeconds: {} f:tolerations: {} f:topologySpreadConstraints: .: {} k:{"topologyKey":"kubernetes.io/hostname","whenUnsatisfiable":"DoNotSchedule"}: .: {} f:labelSelector: {} f:maxSkew: {} f:topologyKey: {} f:whenUnsatisfiable: {} manager: kube-controller-manager operation: Update time: "2025-10-11T10:48:56Z" - apiVersion: apps/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:availableReplicas: {} f:fullyLabeledReplicas: {} f:observedGeneration: {} f:readyReplicas: {} f:replicas: {} manager: kube-controller-manager operation: Update subresource: status time: "2025-10-11T10:49:02Z" name: nmstate-metrics-fdff9cb8d namespace: openshift-nmstate ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: Deployment name: nmstate-metrics uid: bd0d4b48-37bf-4289-a4d9-0c20a15245d7 resourceVersion: "29684" uid: 4cdf8079-9d22-465a-bab7-89668a9504bf spec: replicas: 1 selector: matchLabels: name: nmstate-metrics pod-template-hash: fdff9cb8d template: metadata: annotations: description: kubernetes-nmstate-metrics dump nmstate metrics creationTimestamp: null labels: app: kubernetes-nmstate component: kubernetes-nmstate-metrics name: nmstate-metrics pod-template-hash: fdff9cb8d prometheus.nmstate.io: "true" spec: affinity: nodeAffinity: preferredDuringSchedulingIgnoredDuringExecution: - preference: matchExpressions: - key: node-role.kubernetes.io/control-plane operator: Exists weight: 10 - preference: matchExpressions: - key: node-role.kubernetes.io/master operator: Exists weight: 1 containers: - args: - --zap-time-encoding=iso8601 command: - manager env: - name: WATCH_NAMESPACE - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: POD_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: RUN_METRICS_MANAGER - name: OPERATOR_NAME value: nmstate - name: ENABLE_PROFILER value: "False" - name: PROFILER_PORT value: "6060" image: registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:71241e7c8aa7f5e68444557713066cc5e3975159fe44c6da8adef05831396412 imagePullPolicy: Always name: nmstate-metrics resources: requests: cpu: 30m memory: 20Mi terminationMessagePath: /dev/termination-log terminationMessagePolicy: File - args: - --logtostderr - --secure-listen-address=:8443 - --upstream=http://127.0.0.1:8089 image: registry.redhat.io/openshift4/ose-kube-rbac-proxy-rhel9@sha256:784c4667a867abdbec6d31a4bbde52676a0f37f8e448eaae37568a46fcdeace7 imagePullPolicy: IfNotPresent name: kube-rbac-proxy ports: - containerPort: 8443 name: metrics protocol: TCP resources: requests: cpu: 10m memory: 20Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError dnsPolicy: ClusterFirst nodeSelector: kubernetes.io/arch: amd64 priorityClassName: system-cluster-critical restartPolicy: Always schedulerName: default-scheduler securityContext: {} serviceAccount: nmstate-handler serviceAccountName: nmstate-handler terminationGracePeriodSeconds: 30 tolerations: - effect: NoSchedule key: node-role.kubernetes.io/master operator: Exists - effect: NoSchedule key: node-role.kubernetes.io/control-plane operator: Exists topologySpreadConstraints: - labelSelector: matchLabels: component: kubernetes-nmstate-metrics maxSkew: 1 topologyKey: kubernetes.io/hostname whenUnsatisfiable: DoNotSchedule status: availableReplicas: 1 fullyLabeledReplicas: 1 observedGeneration: 1 readyReplicas: 1 replicas: 1 - apiVersion: apps/v1 kind: ReplicaSet metadata: annotations: deployment.kubernetes.io/desired-replicas: "1" deployment.kubernetes.io/max-replicas: "2" deployment.kubernetes.io/revision: "1" creationTimestamp: "2025-10-11T10:48:08Z" generation: 1 labels: app: kubernetes-nmstate-operator name: kubernetes-nmstate-operator pod-template-hash: 858ddd8f98 managedFields: - apiVersion: apps/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:deployment.kubernetes.io/desired-replicas: {} f:deployment.kubernetes.io/max-replicas: {} f:deployment.kubernetes.io/revision: {} f:labels: .: {} f:app: {} f:name: {} f:pod-template-hash: {} f:ownerReferences: .: {} k:{"uid":"4d90a3c9-a830-4211-a8a5-0dc560fb4fc7"}: {} f:spec: f:replicas: {} f:selector: {} f:template: f:metadata: f:annotations: .: {} f:alm-examples: {} f:capabilities: {} f:categories: {} f:certified: {} f:containerImage: {} f:createdAt: {} f:description: {} f:features.operators.openshift.io/disconnected: {} f:features.operators.openshift.io/fips-compliant: {} f:features.operators.openshift.io/proxy-aware: {} f:features.operators.openshift.io/tls-profiles: {} f:features.operators.openshift.io/token-auth-aws: {} f:features.operators.openshift.io/token-auth-azure: {} f:features.operators.openshift.io/token-auth-gcp: {} f:olm.operatorGroup: {} f:olm.operatorNamespace: {} f:olm.skipRange: {} f:olm.targetNamespaces: {} f:operatorframework.io/properties: {} f:operatorframework.io/suggested-namespace: {} f:operators.openshift.io/infrastructure-features: {} f:operators.openshift.io/valid-subscription: {} f:operators.operatorframework.io/builder: {} f:operators.operatorframework.io/project_layout: {} f:repository: {} f:support: {} f:labels: .: {} f:app: {} f:name: {} f:pod-template-hash: {} f:spec: f:affinity: .: {} f:nodeAffinity: .: {} f:preferredDuringSchedulingIgnoredDuringExecution: {} f:containers: k:{"name":"nmstate-operator"}: .: {} f:args: {} f:command: {} f:env: .: {} k:{"name":"ENABLE_PROFILER"}: .: {} f:name: {} f:value: {} k:{"name":"HANDLER_IMAGE"}: .: {} f:name: {} f:value: {} k:{"name":"HANDLER_IMAGE_PULL_POLICY"}: .: {} f:name: {} f:value: {} k:{"name":"HANDLER_NAMESPACE"}: .: {} f:name: {} f:value: {} k:{"name":"KUBE_RBAC_PROXY_IMAGE"}: .: {} f:name: {} f:value: {} k:{"name":"MONITORING_NAMESPACE"}: .: {} f:name: {} f:value: {} k:{"name":"OPERATOR_CONDITION_NAME"}: .: {} f:name: {} f:value: {} k:{"name":"OPERATOR_NAME"}: .: {} f:name: {} f:value: {} k:{"name":"PLUGIN_IMAGE"}: .: {} f:name: {} f:value: {} k:{"name":"PROFILER_PORT"}: .: {} f:name: {} f:value: {} k:{"name":"RUN_OPERATOR"}: .: {} f:name: {} k:{"name":"WATCH_NAMESPACE"}: .: {} f:name: {} f:valueFrom: .: {} f:fieldRef: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:allowPrivilegeEscalation: {} f:capabilities: .: {} f:drop: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:dnsPolicy: {} f:priorityClassName: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: .: {} f:runAsNonRoot: {} f:seccompProfile: .: {} f:type: {} f:serviceAccount: {} f:serviceAccountName: {} f:terminationGracePeriodSeconds: {} f:tolerations: {} manager: kube-controller-manager operation: Update time: "2025-10-11T10:48:08Z" - apiVersion: apps/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:availableReplicas: {} f:fullyLabeledReplicas: {} f:observedGeneration: {} f:readyReplicas: {} f:replicas: {} manager: kube-controller-manager operation: Update subresource: status time: "2025-10-11T10:48:11Z" name: nmstate-operator-858ddd8f98 namespace: openshift-nmstate ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: Deployment name: nmstate-operator uid: 4d90a3c9-a830-4211-a8a5-0dc560fb4fc7 resourceVersion: "27539" uid: ade0cc8b-e740-4bb0-b284-339b0b18321e spec: replicas: 1 selector: matchLabels: name: kubernetes-nmstate-operator pod-template-hash: 858ddd8f98 template: metadata: annotations: alm-examples: |- [ { "apiVersion": "nmstate.io/v1", "kind": "NMState", "metadata": { "name": "nmstate" }, "spec": {} } ] capabilities: Basic Install categories: OpenShift Optional certified: "false" containerImage: registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:4a7b1d0616659315824d4b04d8b3d0ba8c940d405803b7f89bacd0174b1e0d7f createdAt: "2022-02-21 08:46:16" description: | Kubernetes NMState is a declaritive means of configuring NetworkManager. features.operators.openshift.io/disconnected: "true" features.operators.openshift.io/fips-compliant: "true" features.operators.openshift.io/proxy-aware: "false" features.operators.openshift.io/tls-profiles: "false" features.operators.openshift.io/token-auth-aws: "false" features.operators.openshift.io/token-auth-azure: "false" features.operators.openshift.io/token-auth-gcp: "false" olm.operatorGroup: openshift-nmstate-tn6k8 olm.operatorNamespace: openshift-nmstate olm.skipRange: '>=4.3.0 <4.18.0' olm.targetNamespaces: openshift-nmstate operatorframework.io/properties: '{"properties":[{"type":"olm.gvk","value":{"group":"nmstate.io","kind":"NMState","version":"v1"}},{"type":"olm.gvk","value":{"group":"nmstate.io","kind":"NMState","version":"v1beta1"}},{"type":"olm.package","value":{"packageName":"kubernetes-nmstate-operator","version":"4.18.0-202509241752"}}]}' operatorframework.io/suggested-namespace: openshift-nmstate operators.openshift.io/infrastructure-features: '["disconnected"]' operators.openshift.io/valid-subscription: '["OpenShift Kubernetes Engine", "OpenShift Container Platform", "OpenShift Platform Plus"]' operators.operatorframework.io/builder: operator-sdk-v1.22.2 operators.operatorframework.io/project_layout: go.kubebuilder.io/v3 repository: https://github.com/openshift/kubernetes-nmstate support: Red Hat, Inc. creationTimestamp: null labels: app: kubernetes-nmstate-operator name: kubernetes-nmstate-operator pod-template-hash: 858ddd8f98 spec: affinity: nodeAffinity: preferredDuringSchedulingIgnoredDuringExecution: - preference: matchExpressions: - key: node-role.kubernetes.io/control-plane operator: Exists weight: 10 - preference: matchExpressions: - key: node-role.kubernetes.io/master operator: Exists weight: 1 containers: - args: - --zap-time-encoding=iso8601 command: - manager env: - name: WATCH_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['olm.targetNamespaces'] - name: OPERATOR_NAME value: kubernetes-nmstate-operator - name: ENABLE_PROFILER value: "False" - name: PROFILER_PORT value: "6060" - name: RUN_OPERATOR - name: HANDLER_IMAGE value: registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:71241e7c8aa7f5e68444557713066cc5e3975159fe44c6da8adef05831396412 - name: PLUGIN_IMAGE value: registry.redhat.io/openshift4/nmstate-console-plugin-rhel9@sha256:98eacebec0d128e18d9109d3eadb5a1470ec990f11ad3e717a6638a8675d6e66 - name: HANDLER_IMAGE_PULL_POLICY value: Always - name: HANDLER_NAMESPACE value: openshift-nmstate - name: MONITORING_NAMESPACE value: openshift-monitoring - name: KUBE_RBAC_PROXY_IMAGE value: registry.redhat.io/openshift4/ose-kube-rbac-proxy-rhel9@sha256:784c4667a867abdbec6d31a4bbde52676a0f37f8e448eaae37568a46fcdeace7 - name: OPERATOR_CONDITION_NAME value: kubernetes-nmstate-operator.4.18.0-202509241752 image: registry.redhat.io/openshift4/kubernetes-nmstate-rhel9-operator@sha256:4a7b1d0616659315824d4b04d8b3d0ba8c940d405803b7f89bacd0174b1e0d7f imagePullPolicy: Always name: nmstate-operator resources: requests: cpu: 60m memory: 30Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL terminationMessagePath: /dev/termination-log terminationMessagePolicy: File dnsPolicy: ClusterFirst priorityClassName: system-cluster-critical restartPolicy: Always schedulerName: default-scheduler securityContext: runAsNonRoot: true seccompProfile: type: RuntimeDefault serviceAccount: nmstate-operator serviceAccountName: nmstate-operator terminationGracePeriodSeconds: 30 tolerations: - effect: NoSchedule key: node-role.kubernetes.io/control-plane operator: Exists - effect: NoSchedule key: node-role.kubernetes.io/master operator: Exists status: availableReplicas: 1 fullyLabeledReplicas: 1 observedGeneration: 1 readyReplicas: 1 replicas: 1 - apiVersion: apps/v1 kind: ReplicaSet metadata: annotations: deployment.kubernetes.io/desired-replicas: "1" deployment.kubernetes.io/max-replicas: "1" deployment.kubernetes.io/revision: "1" creationTimestamp: "2025-10-11T10:48:56Z" generation: 1 labels: app: kubernetes-nmstate component: kubernetes-nmstate-webhook name: nmstate-webhook pod-template-hash: 6cdbc54649 managedFields: - apiVersion: apps/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:deployment.kubernetes.io/desired-replicas: {} f:deployment.kubernetes.io/max-replicas: {} f:deployment.kubernetes.io/revision: {} f:labels: .: {} f:app: {} f:component: {} f:name: {} f:pod-template-hash: {} f:ownerReferences: .: {} k:{"uid":"51fa0204-eddd-4bce-96e2-037afe4e9cb3"}: {} f:spec: f:replicas: {} f:selector: {} f:template: f:metadata: f:annotations: .: {} f:description: {} f:labels: .: {} f:app: {} f:component: {} f:name: {} f:pod-template-hash: {} f:spec: f:affinity: .: {} f:nodeAffinity: .: {} f:preferredDuringSchedulingIgnoredDuringExecution: {} f:containers: k:{"name":"nmstate-webhook"}: .: {} f:args: {} f:command: {} f:env: .: {} k:{"name":"ENABLE_PROFILER"}: .: {} f:name: {} f:value: {} k:{"name":"OPERATOR_NAME"}: .: {} f:name: {} f:value: {} k:{"name":"POD_NAME"}: .: {} f:name: {} f:valueFrom: .: {} f:fieldRef: {} k:{"name":"POD_NAMESPACE"}: .: {} f:name: {} f:valueFrom: .: {} f:fieldRef: {} k:{"name":"PROFILER_PORT"}: .: {} f:name: {} f:value: {} k:{"name":"RUN_WEBHOOK_SERVER"}: .: {} f:name: {} k:{"name":"WATCH_NAMESPACE"}: .: {} f:name: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:ports: .: {} k:{"containerPort":9443,"protocol":"TCP"}: .: {} f:containerPort: {} f:name: {} f:protocol: {} f:readinessProbe: .: {} f:failureThreshold: {} f:httpGet: .: {} f:httpHeaders: {} f:path: {} f:port: {} f:scheme: {} f:initialDelaySeconds: {} f:periodSeconds: {} f:successThreshold: {} f:timeoutSeconds: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/tmp/k8s-webhook-server/serving-certs/"}: .: {} f:mountPath: {} f:name: {} f:readOnly: {} f:dnsPolicy: {} f:nodeSelector: {} f:priorityClassName: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: {} f:serviceAccount: {} f:serviceAccountName: {} f:terminationGracePeriodSeconds: {} f:tolerations: {} f:topologySpreadConstraints: .: {} k:{"topologyKey":"kubernetes.io/hostname","whenUnsatisfiable":"DoNotSchedule"}: .: {} f:labelSelector: {} f:maxSkew: {} f:topologyKey: {} f:whenUnsatisfiable: {} f:volumes: .: {} k:{"name":"tls-key-pair"}: .: {} f:name: {} f:secret: .: {} f:defaultMode: {} f:secretName: {} manager: kube-controller-manager operation: Update time: "2025-10-11T10:48:56Z" - apiVersion: apps/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:availableReplicas: {} f:fullyLabeledReplicas: {} f:observedGeneration: {} f:readyReplicas: {} f:replicas: {} manager: kube-controller-manager operation: Update subresource: status time: "2025-10-11T10:49:17Z" name: nmstate-webhook-6cdbc54649 namespace: openshift-nmstate ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: Deployment name: nmstate-webhook uid: 51fa0204-eddd-4bce-96e2-037afe4e9cb3 resourceVersion: "30006" uid: f238b886-7471-4b57-abf9-6594d90403a7 spec: replicas: 1 selector: matchLabels: name: nmstate-webhook pod-template-hash: 6cdbc54649 template: metadata: annotations: description: kubernetes-nmstate-webhook resets NNCP status creationTimestamp: null labels: app: kubernetes-nmstate component: kubernetes-nmstate-webhook name: nmstate-webhook pod-template-hash: 6cdbc54649 spec: affinity: nodeAffinity: preferredDuringSchedulingIgnoredDuringExecution: - preference: matchExpressions: - key: node-role.kubernetes.io/control-plane operator: Exists weight: 10 - preference: matchExpressions: - key: node-role.kubernetes.io/master operator: Exists weight: 1 containers: - args: - --zap-time-encoding=iso8601 command: - manager env: - name: WATCH_NAMESPACE - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: POD_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: RUN_WEBHOOK_SERVER - name: OPERATOR_NAME value: nmstate - name: ENABLE_PROFILER value: "False" - name: PROFILER_PORT value: "6060" image: registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:71241e7c8aa7f5e68444557713066cc5e3975159fe44c6da8adef05831396412 imagePullPolicy: Always name: nmstate-webhook ports: - containerPort: 9443 name: webhook-server protocol: TCP readinessProbe: failureThreshold: 3 httpGet: httpHeaders: - name: Content-Type value: application/json path: /readyz port: webhook-server scheme: HTTPS initialDelaySeconds: 10 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: requests: cpu: 30m memory: 20Mi terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /tmp/k8s-webhook-server/serving-certs/ name: tls-key-pair readOnly: true dnsPolicy: ClusterFirst nodeSelector: kubernetes.io/arch: amd64 priorityClassName: system-cluster-critical restartPolicy: Always schedulerName: default-scheduler securityContext: {} serviceAccount: nmstate-handler serviceAccountName: nmstate-handler terminationGracePeriodSeconds: 30 tolerations: - effect: NoSchedule key: node-role.kubernetes.io/master operator: Exists - effect: NoSchedule key: node-role.kubernetes.io/control-plane operator: Exists topologySpreadConstraints: - labelSelector: matchLabels: component: kubernetes-nmstate-webhook maxSkew: 1 topologyKey: kubernetes.io/hostname whenUnsatisfiable: DoNotSchedule volumes: - name: tls-key-pair secret: defaultMode: 420 secretName: openshift-nmstate-webhook status: availableReplicas: 1 fullyLabeledReplicas: 1 observedGeneration: 1 readyReplicas: 1 replicas: 1 kind: ReplicaSetList metadata: resourceVersion: "64663"