apiVersion: apps/v1 kind: ReplicaSet metadata: annotations: deployment.kubernetes.io/desired-replicas: "1" deployment.kubernetes.io/max-replicas: "1" deployment.kubernetes.io/revision: "1" creationTimestamp: "2025-10-11T10:48:56Z" generation: 1 labels: app: kubernetes-nmstate component: kubernetes-nmstate-webhook name: nmstate-webhook pod-template-hash: 6cdbc54649 name: nmstate-webhook-6cdbc54649 namespace: openshift-nmstate ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: Deployment name: nmstate-webhook uid: 51fa0204-eddd-4bce-96e2-037afe4e9cb3 resourceVersion: "30006" uid: f238b886-7471-4b57-abf9-6594d90403a7 spec: replicas: 1 selector: matchLabels: name: nmstate-webhook pod-template-hash: 6cdbc54649 template: metadata: annotations: description: kubernetes-nmstate-webhook resets NNCP status creationTimestamp: null labels: app: kubernetes-nmstate component: kubernetes-nmstate-webhook name: nmstate-webhook pod-template-hash: 6cdbc54649 spec: affinity: nodeAffinity: preferredDuringSchedulingIgnoredDuringExecution: - preference: matchExpressions: - key: node-role.kubernetes.io/control-plane operator: Exists weight: 10 - preference: matchExpressions: - key: node-role.kubernetes.io/master operator: Exists weight: 1 containers: - args: - --zap-time-encoding=iso8601 command: - manager env: - name: WATCH_NAMESPACE - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: POD_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: RUN_WEBHOOK_SERVER - name: OPERATOR_NAME value: nmstate - name: ENABLE_PROFILER value: "False" - name: PROFILER_PORT value: "6060" image: registry.redhat.io/openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:71241e7c8aa7f5e68444557713066cc5e3975159fe44c6da8adef05831396412 imagePullPolicy: Always name: nmstate-webhook ports: - containerPort: 9443 name: webhook-server protocol: TCP readinessProbe: failureThreshold: 3 httpGet: httpHeaders: - name: Content-Type value: application/json path: /readyz port: webhook-server scheme: HTTPS initialDelaySeconds: 10 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: requests: cpu: 30m memory: 20Mi terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /tmp/k8s-webhook-server/serving-certs/ name: tls-key-pair readOnly: true dnsPolicy: ClusterFirst nodeSelector: kubernetes.io/arch: amd64 priorityClassName: system-cluster-critical restartPolicy: Always schedulerName: default-scheduler securityContext: {} serviceAccount: nmstate-handler serviceAccountName: nmstate-handler terminationGracePeriodSeconds: 30 tolerations: - effect: NoSchedule key: node-role.kubernetes.io/master operator: Exists - effect: NoSchedule key: node-role.kubernetes.io/control-plane operator: Exists topologySpreadConstraints: - labelSelector: matchLabels: component: kubernetes-nmstate-webhook maxSkew: 1 topologyKey: kubernetes.io/hostname whenUnsatisfiable: DoNotSchedule volumes: - name: tls-key-pair secret: defaultMode: 420 secretName: openshift-nmstate-webhook status: availableReplicas: 1 fullyLabeledReplicas: 1 observedGeneration: 1 readyReplicas: 1 replicas: 1