---
apiVersion: operator.openshift.io/v1
kind: KubeAPIServer
metadata:
  annotations:
    include.release.openshift.io/ibm-cloud-managed: "true"
    include.release.openshift.io/self-managed-high-availability: "true"
    include.release.openshift.io/single-node-developer: "true"
    release.openshift.io/create-only: "true"
  creationTimestamp: "2025-12-05T12:26:17Z"
  generation: 4
  managedFields:
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"GuardControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: GuardController-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-12-05T12:31:36Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"StartupMonitorPodContainerExcessiveRestartsDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"StartupMonitorPodDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: kube-apiserver-StartupMonitorPodCondition
    operation: Apply
    subresource: status
    time: "2025-12-05T12:31:36Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"StaticPodFallbackRevisionDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: kube-apiserver-StaticPodStateFallback
    operation: Apply
    subresource: status
    time: "2025-12-05T12:31:36Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"UnsupportedConfigOverridesUpgradeable"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: cluster-kube-apiserver-operator-UnsupportedConfigOverrides
    operation: Apply
    subresource: status
    time: "2025-12-05T12:31:37Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"NodeControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
        f:nodeStatuses:
          k:{"nodeName":"master-0"}:
            .: {}
            f:nodeName: {}
    manager: kube-apiserver-Node
    operation: Apply
    subresource: status
    time: "2025-12-05T12:31:37Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"Encrypted"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: openshift-kube-apiserver-EncryptionCondition
    operation: Apply
    subresource: status
    time: "2025-12-05T12:31:37Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"EncryptionKeyControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: openshift-kube-apiserver-EncryptionKey
    operation: Apply
    subresource: status
    time: "2025-12-05T12:31:39Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"EncryptionMigrationControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"EncryptionMigrationControllerProgressing"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: openshift-kube-apiserver-EncryptionMigration
    operation: Apply
    subresource: status
    time: "2025-12-05T12:31:39Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"EncryptionPruneControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: openshift-kube-apiserver-EncryptionPrune
    operation: Apply
    subresource: status
    time: "2025-12-05T12:31:39Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"MissingStaticPodControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: MissingStaticPodController-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-12-05T12:31:40Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"WorkerLatencyProfileComplete"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"WorkerLatencyProfileProgressing"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: kube-apiserver-LatencyProfile
    operation: Apply
    subresource: status
    time: "2025-12-05T12:31:40Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"EncryptionStateControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: openshift-kube-apiserver-EncryptionState
    operation: Apply
    subresource: status
    time: "2025-12-05T12:31:40Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"InstallerPodContainerWaitingDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"InstallerPodNetworkingDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"InstallerPodPendingDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: kube-apiserver-InstallerState
    operation: Apply
    subresource: status
    time: "2025-12-05T12:31:41Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"WorkerLatencyProfileDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: WorkerLatencyProfile-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-12-05T12:31:42Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"AuditPolicyDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: kube-apiserver-AuditPolicy
    operation: Apply
    subresource: status
    time: "2025-12-05T12:31:48Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"ResourceSyncControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: kube-apiserver-ResourceSync
    operation: Apply
    subresource: status
    time: "2025-12-05T12:31:55Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"ConfigObservationDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: kube-apiserver-ConfigObserver
    operation: Apply
    subresource: status
    time: "2025-12-05T12:32:00Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"NodeKubeconfigControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: NodeKubeconfigController-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-12-05T12:32:13Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"RevisionControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: RevisionController-reportDegraded
    operation: Apply
    subresource: status
    time: "2025-12-05T12:32:40Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"BackingResourceControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: BackingResourceController-StaticResources
    operation: Apply
    subresource: status
    time: "2025-12-05T12:48:35Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"StaticPodsDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
    manager: kube-apiserver-StaticPodState
    operation: Apply
    subresource: status
    time: "2025-12-05T12:48:36Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:latestAvailableRevision: {}
    manager: kube-apiserver-RevisionController
    operation: Apply
    subresource: status
    time: "2025-12-05T12:51:20Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"InstallerControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"NodeInstallerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"NodeInstallerProgressing"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"StaticPodsAvailable"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:status: {}
            f:type: {}
        f:nodeStatuses:
          k:{"nodeName":"master-0"}:
            .: {}
            f:currentRevision: {}
            f:lastFailedCount: {}
            f:lastFailedReason: {}
            f:lastFailedRevision: {}
            f:lastFailedRevisionErrors: {}
            f:lastFailedTime: {}
            f:nodeName: {}
    manager: kube-apiserver-Installer
    operation: Apply
    subresource: status
    time: "2025-12-05T12:53:41Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"KubeAPIServerStaticResourcesDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: KubeAPIServerStaticResources-StaticResources
    operation: Apply
    subresource: status
    time: "2025-12-05T12:53:42Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .: {}
          f:include.release.openshift.io/ibm-cloud-managed: {}
          f:include.release.openshift.io/self-managed-high-availability: {}
          f:include.release.openshift.io/single-node-developer: {}
          f:release.openshift.io/create-only: {}
        f:ownerReferences:
          .: {}
          k:{"uid":"3e53dbaf-62d9-4a62-8112-0c194035adba"}: {}
      f:spec:
        .: {}
        f:logLevel: {}
        f:managementState: {}
        f:operatorLogLevel: {}
    manager: cluster-version-operator
    operation: Update
    time: "2025-12-05T12:26:17Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:spec:
        f:observedConfig:
          .: {}
          f:admission:
            .: {}
            f:pluginConfig:
              .: {}
              f:PodSecurity:
                .: {}
                f:configuration:
                  .: {}
                  f:defaults:
                    .: {}
                    f:audit: {}
                    f:audit-version: {}
                    f:enforce: {}
                    f:enforce-version: {}
                    f:warn: {}
                    f:warn-version: {}
              f:network.openshift.io/ExternalIPRanger:
                .: {}
                f:configuration:
                  .: {}
                  f:allowIngressIP: {}
                  f:apiVersion: {}
                  f:kind: {}
              f:network.openshift.io/RestrictedEndpointsAdmission:
                .: {}
                f:configuration:
                  .: {}
                  f:apiVersion: {}
                  f:kind: {}
                  f:restrictedCIDRs: {}
          f:apiServerArguments:
            .: {}
            f:api-audiences: {}
            f:authentication-token-webhook-config-file: {}
            f:authentication-token-webhook-version: {}
            f:etcd-servers: {}
            f:feature-gates: {}
            f:goaway-chance: {}
            f:runtime-config: {}
            f:send-retry-after-while-not-ready-once: {}
            f:service-account-issuer: {}
            f:service-account-jwks-uri: {}
            f:shutdown-delay-duration: {}
          f:authConfig:
            .: {}
            f:oauthMetadataFile: {}
          f:corsAllowedOrigins: {}
          f:gracefulTerminationDuration: {}
          f:servicesSubnet: {}
          f:servingInfo:
            .: {}
            f:bindAddress: {}
            f:bindNetwork: {}
            f:cipherSuites: {}
            f:minTLSVersion: {}
            f:namedCertificates: {}
        f:unsupportedConfigOverrides: {}
    manager: cluster-kube-apiserver-operator
    operation: Update
    time: "2025-12-05T12:50:29Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        .: {}
        f:conditions:
          .: {}
          k:{"type":"CRDConversionWebhookConfigurationError"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"CertRotation_AggregatorProxyClientCert_Degraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"CertRotation_CheckEndpointsClient_Degraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"CertRotation_ControlPlaneNodeAdminClient_Degraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"CertRotation_ExternalLoadBalancerServing_Degraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"CertRotation_InternalLoadBalancerServing_Degraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"CertRotation_KubeAPIServerToKubeletClientCert_Degraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"CertRotation_KubeControllerManagerClient_Degraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"CertRotation_KubeSchedulerClient_Degraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"CertRotation_LocalhostRecoveryServing_Degraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"CertRotation_LocalhostServing_Degraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"CertRotation_NodeSystemAdminClient_Degraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"CertRotation_ServiceNetworkServing_Degraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"CertRotationTimeUpgradeable"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"KubeletMinorVersionUpgradeable"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"MutatingAdmissionWebhookConfigurationError"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"PodSecurityCustomerEvaluationConditionsDetected"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"PodSecurityDisabledSyncerEvaluationConditionsDetected"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"PodSecurityOpenshiftEvaluationConditionsDetected"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"PodSecurityRunLevelZeroEvaluationConditionsDetected"}:
            .: {}
            f:lastTransitionTime: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"TargetConfigControllerDegraded"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"ValidatingAdmissionWebhookConfigurationError"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"VirtualResourceAdmissionError"}:
            .: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
        f:nodeStatuses:
          k:{"nodeName":"master-0"}:
            f:currentRevision: {}
        f:readyReplicas: {}
        f:serviceAccountIssuers: {}
    manager: cluster-kube-apiserver-operator
    operation: Update
    subresource: status
    time: "2025-12-05T13:34:50Z"
  name: cluster
  ownerReferences:
  - apiVersion: config.openshift.io/v1
    kind: ClusterVersion
    name: version
    uid: 3e53dbaf-62d9-4a62-8112-0c194035adba
  resourceVersion: "46693"
  uid: 5d169990-6e05-4671-b4b4-aa65f644e025
spec:
  logLevel: Normal
  managementState: Managed
  observedConfig:
    admission:
      pluginConfig:
        PodSecurity:
          configuration:
            defaults:
              audit: restricted
              audit-version: latest
              enforce: privileged
              enforce-version: latest
              warn: restricted
              warn-version: latest
        network.openshift.io/ExternalIPRanger:
          configuration:
            allowIngressIP: false
            apiVersion: network.openshift.io/v1
            kind: ExternalIPRangerAdmissionConfig
        network.openshift.io/RestrictedEndpointsAdmission:
          configuration:
            apiVersion: network.openshift.io/v1
            kind: RestrictedEndpointsAdmissionConfig
            restrictedCIDRs:
            - 10.128.0.0/16
            - 172.30.0.0/16
    apiServerArguments:
      api-audiences:
      - https://kubernetes.default.svc
      authentication-token-webhook-config-file:
      - /etc/kubernetes/static-pod-resources/secrets/webhook-authenticator/kubeConfig
      authentication-token-webhook-version:
      - v1
      etcd-servers:
      - https://192.168.32.10:2379
      - https://localhost:2379
      feature-gates:
      - AWSEFSDriverVolumeMetrics=true
      - AdminNetworkPolicy=true
      - AlibabaPlatform=true
      - AzureWorkloadIdentity=true
      - BareMetalLoadBalancer=true
      - BuildCSIVolumes=true
      - ChunkSizeMiB=true
      - CloudDualStackNodeIPs=true
      - DisableKubeletCloudCredentialProviders=true
      - GCPLabelsTags=true
      - HardwareSpeed=true
      - IngressControllerLBSubnetsAWS=true
      - KMSv1=true
      - ManagedBootImages=true
      - ManagedBootImagesAWS=true
      - MultiArchInstallAWS=true
      - MultiArchInstallGCP=true
      - NetworkDiagnosticsConfig=true
      - NetworkLiveMigration=true
      - NetworkSegmentation=true
      - NewOLM=true
      - NodeDisruptionPolicy=true
      - OnClusterBuild=true
      - PersistentIPsForVirtualization=true
      - PrivateHostedZoneAWS=true
      - SetEIPForNLBIngressController=true
      - VSphereControlPlaneMachineSet=true
      - VSphereDriverConfiguration=true
      - VSphereMultiVCenters=true
      - VSphereStaticIPs=true
      - ValidatingAdmissionPolicy=true
      - AWSClusterHostedDNS=false
      - AdditionalRoutingCapabilities=false
      - AutomatedEtcdBackup=false
      - BootcNodeManagement=false
      - CSIDriverSharedResource=false
      - ClusterAPIInstall=false
      - ClusterAPIInstallIBMCloud=false
      - ClusterMonitoringConfig=false
      - ConsolePluginContentSecurityPolicy=false
      - DNSNameResolver=false
      - DynamicResourceAllocation=false
      - EtcdBackendQuota=false
      - EventedPLEG=false
      - Example=false
      - ExternalOIDC=false
      - ExternalOIDCWithUIDAndExtraClaimMappings=false
      - GCPClusterHostedDNS=false
      - GatewayAPI=false
      - ImageStreamImportMode=false
      - IngressControllerDynamicConfigurationManager=false
      - InsightsConfig=false
      - InsightsConfigAPI=false
      - InsightsOnDemandDataGather=false
      - InsightsRuntimeExtractor=false
      - MachineAPIMigration=false
      - MachineAPIOperatorDisableMachineHealthCheckController=false
      - MachineAPIProviderOpenStack=false
      - MachineConfigNodes=false
      - MaxUnavailableStatefulSet=false
      - MetricsCollectionProfiles=false
      - MinimumKubeletVersion=false
      - MixedCPUsAllocation=false
      - MultiArchInstallAzure=false
      - NodeSwap=false
      - NutanixMultiSubnets=false
      - OVNObservability=false
      - OpenShiftPodSecurityAdmission=false
      - PinnedImages=false
      - PlatformOperators=false
      - ProcMountType=false
      - RouteAdvertisements=false
      - RouteExternalCertificate=false
      - ServiceAccountTokenNodeBinding=false
      - SignatureStores=false
      - SigstoreImageVerification=false
      - StreamingCollectionEncodingToJSON=false
      - StreamingCollectionEncodingToProtobuf=false
      - TranslateStreamCloseWebsocketRequests=false
      - UpgradeStatus=false
      - UserNamespacesPodSecurityStandards=false
      - UserNamespacesSupport=false
      - VSphereMultiNetworks=false
      - VolumeAttributesClass=false
      - VolumeGroupSnapshot=false
      goaway-chance:
      - "0"
      runtime-config:
      - admissionregistration.k8s.io/v1beta1=true
      send-retry-after-while-not-ready-once:
      - "true"
      service-account-issuer:
      - https://kubernetes.default.svc
      service-account-jwks-uri:
      - https://api.sno.openstack.lab:6443/openid/v1/jwks
      shutdown-delay-duration:
      - 0s
    authConfig:
      oauthMetadataFile: /etc/kubernetes/static-pod-resources/configmaps/oauth-metadata/oauthMetadata
    corsAllowedOrigins:
    - //127\.0\.0\.1(:|$)
    - //localhost(:|$)
    gracefulTerminationDuration: "15"
    servicesSubnet: 172.30.0.0/16
    servingInfo:
      bindAddress: 0.0.0.0:6443
      bindNetwork: tcp4
      cipherSuites:
      - TLS_AES_128_GCM_SHA256
      - TLS_AES_256_GCM_SHA384
      - TLS_CHACHA20_POLY1305_SHA256
      - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
      - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
      - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
      - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
      - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
      - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
      minTLSVersion: VersionTLS12
      namedCertificates:
      - certFile: /etc/kubernetes/static-pod-certs/secrets/localhost-serving-cert-certkey/tls.crt
        keyFile: /etc/kubernetes/static-pod-certs/secrets/localhost-serving-cert-certkey/tls.key
      - certFile: /etc/kubernetes/static-pod-certs/secrets/service-network-serving-certkey/tls.crt
        keyFile: /etc/kubernetes/static-pod-certs/secrets/service-network-serving-certkey/tls.key
      - certFile: /etc/kubernetes/static-pod-certs/secrets/external-loadbalancer-serving-certkey/tls.crt
        keyFile: /etc/kubernetes/static-pod-certs/secrets/external-loadbalancer-serving-certkey/tls.key
      - certFile: /etc/kubernetes/static-pod-certs/secrets/internal-loadbalancer-serving-certkey/tls.crt
        keyFile: /etc/kubernetes/static-pod-certs/secrets/internal-loadbalancer-serving-certkey/tls.key
      - certFile: /etc/kubernetes/static-pod-resources/secrets/localhost-recovery-serving-certkey/tls.crt
        keyFile: /etc/kubernetes/static-pod-resources/secrets/localhost-recovery-serving-certkey/tls.key
  operatorLogLevel: Normal
  unsupportedConfigOverrides: null
status:
  conditions:
  - lastTransitionTime: "2025-12-05T12:31:36Z"
    message: Kubelet and API server minor versions are synced.
    reason: KubeletMinorVersionsSynced
    status: "True"
    type: KubeletMinorVersionUpgradeable
  - lastTransitionTime: "2025-12-05T12:31:36Z"
    status: "False"
    type: StartupMonitorPodContainerExcessiveRestartsDegraded
  - lastTransitionTime: "2025-12-05T12:31:36Z"
    status: "False"
    type: StartupMonitorPodDegraded
  - lastTransitionTime: "2025-12-05T12:31:36Z"
    reason: AsExpected
    status: "False"
    type: GuardControllerDegraded
  - lastTransitionTime: "2025-12-05T12:31:36Z"
    status: "False"
    type: StaticPodFallbackRevisionDegraded
  - lastTransitionTime: "2025-12-05T12:31:36Z"
    message: All master nodes are ready
    reason: MasterNodesReady
    status: "False"
    type: NodeControllerDegraded
  - lastTransitionTime: "2025-12-05T12:48:36Z"
    status: "False"
    type: StaticPodsDegraded
  - lastTransitionTime: "2025-12-05T12:31:37Z"
    reason: NoUnsupportedConfigOverrides
    status: "True"
    type: UnsupportedConfigOverridesUpgradeable
  - lastTransitionTime: "2025-12-05T12:31:37Z"
    reason: DefaultCertRotationBase
    status: "True"
    type: CertRotationTimeUpgradeable
  - lastTransitionTime: "2025-12-05T12:31:37Z"
    status: "False"
    type: Encrypted
  - lastTransitionTime: "2025-12-05T12:31:38Z"
    status: "False"
    type: EncryptionKeyControllerDegraded
  - lastTransitionTime: "2025-12-05T12:31:38Z"
    status: "False"
    type: EncryptionMigrationControllerDegraded
  - lastTransitionTime: "2025-12-05T12:31:38Z"
    status: "False"
    type: EncryptionMigrationControllerProgressing
  - lastTransitionTime: "2025-12-05T12:31:38Z"
    status: "False"
    type: EncryptionPruneControllerDegraded
  - lastTransitionTime: "2025-12-05T12:31:38Z"
    status: "False"
    type: EncryptionStateControllerDegraded
  - lastTransitionTime: "2025-12-05T12:32:40Z"
    reason: AsExpected
    status: "False"
    type: RevisionControllerDegraded
  - lastTransitionTime: "2025-12-05T12:32:12Z"
    reason: AsExpected
    status: "False"
    type: NodeKubeconfigControllerDegraded
  - lastTransitionTime: "2025-12-05T12:31:38Z"
    reason: AsExpected
    status: "False"
    type: MissingStaticPodControllerDegraded
  - lastTransitionTime: "2025-12-05T12:31:38Z"
    message: latency profile not set on cluster
    reason: ProfileEmpty
    status: "True"
    type: WorkerLatencyProfileComplete
  - lastTransitionTime: "2025-12-05T12:31:38Z"
    reason: ProfileEmpty
    status: "False"
    type: WorkerLatencyProfileProgressing
  - lastTransitionTime: "2025-12-05T12:32:40Z"
    status: "False"
    type: InstallerControllerDegraded
  - lastTransitionTime: "2025-12-05T12:43:24Z"
    status: "False"
    type: NodeInstallerDegraded
  - lastTransitionTime: "2025-12-05T12:53:41Z"
    message: 1 node is at revision 5
    reason: AllNodesAtLatestRevision
    status: "False"
    type: NodeInstallerProgressing
  - lastTransitionTime: "2025-12-05T12:50:44Z"
    message: 1 nodes are active; 1 node is at revision 5
    status: "True"
    type: StaticPodsAvailable
  - lastTransitionTime: "2025-12-05T12:31:40Z"
    status: "False"
    type: InstallerPodContainerWaitingDegraded
  - lastTransitionTime: "2025-12-05T12:31:40Z"
    status: "False"
    type: InstallerPodNetworkingDegraded
  - lastTransitionTime: "2025-12-05T12:31:40Z"
    status: "False"
    type: InstallerPodPendingDegraded
  - lastTransitionTime: "2025-12-05T12:31:40Z"
    reason: AsExpected
    status: "False"
    type: WorkerLatencyProfileDegraded
  - lastTransitionTime: "2025-12-05T12:31:42Z"
    status: "False"
    type: CertRotation_ControlPlaneNodeAdminClient_Degraded
  - lastTransitionTime: "2025-12-05T12:48:35Z"
    reason: AsExpected
    status: "False"
    type: BackingResourceControllerDegraded
  - lastTransitionTime: "2025-12-05T12:31:59Z"
    status: "False"
    type: ConfigObservationDegraded
  - lastTransitionTime: "2025-12-05T12:31:46Z"
    status: "False"
    type: AuditPolicyDegraded
  - lastTransitionTime: "2025-12-05T12:31:50Z"
    status: "False"
    type: CertRotation_KubeAPIServerToKubeletClientCert_Degraded
  - lastTransitionTime: "2025-12-05T12:31:52Z"
    status: "False"
    type: ResourceSyncControllerDegraded
  - lastTransitionTime: "2025-12-05T12:32:02Z"
    status: "False"
    type: CertRotation_LocalhostServing_Degraded
  - lastTransitionTime: "2025-12-05T12:32:02Z"
    status: "False"
    type: CertRotation_KubeSchedulerClient_Degraded
  - lastTransitionTime: "2025-12-05T12:32:07Z"
    status: "False"
    type: CertRotation_ExternalLoadBalancerServing_Degraded
  - lastTransitionTime: "2025-12-05T12:32:07Z"
    status: "False"
    type: CertRotation_LocalhostRecoveryServing_Degraded
  - lastTransitionTime: "2025-12-05T12:32:09Z"
    status: "False"
    type: CertRotation_KubeControllerManagerClient_Degraded
  - lastTransitionTime: "2025-12-05T12:53:42Z"
    reason: AsExpected
    status: "False"
    type: KubeAPIServerStaticResourcesDegraded
  - lastTransitionTime: "2025-12-05T12:32:10Z"
    status: "False"
    type: CertRotation_InternalLoadBalancerServing_Degraded
  - lastTransitionTime: "2025-12-05T12:32:11Z"
    reason: ExpectedReason
    status: "False"
    type: PodSecurityCustomerEvaluationConditionsDetected
  - lastTransitionTime: "2025-12-05T12:32:11Z"
    reason: ExpectedReason
    status: "False"
    type: PodSecurityOpenshiftEvaluationConditionsDetected
  - lastTransitionTime: "2025-12-05T12:32:11Z"
    reason: ExpectedReason
    status: "False"
    type: PodSecurityRunLevelZeroEvaluationConditionsDetected
  - lastTransitionTime: "2025-12-05T12:32:11Z"
    reason: ExpectedReason
    status: "False"
    type: PodSecurityDisabledSyncerEvaluationConditionsDetected
  - lastTransitionTime: "2025-12-05T12:32:16Z"
    status: "False"
    type: CertRotation_ServiceNetworkServing_Degraded
  - lastTransitionTime: "2025-12-05T12:32:17Z"
    status: "False"
    type: CertRotation_NodeSystemAdminClient_Degraded
  - lastTransitionTime: "2025-12-05T12:32:18Z"
    status: "False"
    type: CertRotation_CheckEndpointsClient_Degraded
  - lastTransitionTime: "2025-12-05T12:32:19Z"
    status: "False"
    type: CertRotation_AggregatorProxyClientCert_Degraded
  - lastTransitionTime: "2025-12-05T12:53:42Z"
    status: "False"
    type: TargetConfigControllerDegraded
  - lastTransitionTime: "2025-12-05T13:34:50Z"
    status: "False"
    type: MutatingAdmissionWebhookConfigurationError
  - lastTransitionTime: "2025-12-05T13:14:15Z"
    status: "False"
    type: ValidatingAdmissionWebhookConfigurationError
  - lastTransitionTime: "2025-12-05T12:59:38Z"
    status: "False"
    type: CRDConversionWebhookConfigurationError
  - lastTransitionTime: "2025-12-05T12:43:01Z"
    status: "False"
    type: VirtualResourceAdmissionError
  latestAvailableRevision: 5
  nodeStatuses:
  - currentRevision: 5
    lastFailedCount: 1
    lastFailedReason: InstallerFailed
    lastFailedRevision: 1
    lastFailedRevisionErrors:
    - |
      installer: ving-cert",
        (string) (len=21) "user-serving-cert-000",
        (string) (len=21) "user-serving-cert-001",
        (string) (len=21) "user-serving-cert-002",
        (string) (len=21) "user-serving-cert-003",
        (string) (len=21) "user-serving-cert-004",
        (string) (len=21) "user-serving-cert-005",
        (string) (len=21) "user-serving-cert-006",
        (string) (len=21) "user-serving-cert-007",
        (string) (len=21) "user-serving-cert-008",
        (string) (len=21) "user-serving-cert-009"
       },
       CertConfigMapNamePrefixes: ([]string) (len=4 cap=4) {
        (string) (len=20) "aggregator-client-ca",
        (string) (len=9) "client-ca",
        (string) (len=29) "control-plane-node-kubeconfig",
        (string) (len=26) "check-endpoints-kubeconfig"
       },
       OptionalCertConfigMapNamePrefixes: ([]string) (len=1 cap=1) {
        (string) (len=17) "trusted-ca-bundle"
       },
       CertDir: (string) (len=57) "/etc/kubernetes/static-pod-resources/kube-apiserver-certs",
       ResourceDir: (string) (len=36) "/etc/kubernetes/static-pod-resources",
       PodManifestDir: (string) (len=25) "/etc/kubernetes/manifests",
       Timeout: (time.Duration) 2m0s,
       StaticPodManifestsLockFile: (string) "",
       PodMutationFns: ([]installerpod.PodMutationFunc) <nil>,
       KubeletVersion: (string) ""
      })
      I1205 12:32:46.323754       1 cmd.go:413] Getting controller reference for node master-0
      I1205 12:32:46.336920       1 cmd.go:426] Waiting for installer revisions to settle for node master-0
      I1205 12:32:46.337004       1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false
      I1205 12:32:46.337021       1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false
      I1205 12:32:46.351313       1 cmd.go:518] Waiting additional period after revisions have settled for node master-0
      I1205 12:33:16.351675       1 cmd.go:524] Getting installer pods for node master-0
      F1205 12:33:30.425981       1 cmd.go:109] Get "https://172.30.0.1:443/api/v1/namespaces/openshift-kube-apiserver/pods?labelSelector=app%3Dinstaller": net/http: request canceled (Client.Timeout exceeded while awaiting headers)
    lastFailedTime: "2025-12-05T12:43:08Z"
    nodeName: master-0
  readyReplicas: 0
  serviceAccountIssuers:
  - name: https://kubernetes.default.svc