--- apiVersion: operator.openshift.io/v1 kind: KubeControllerManager metadata: annotations: include.release.openshift.io/hypershift: "true" include.release.openshift.io/ibm-cloud-managed: "true" include.release.openshift.io/self-managed-high-availability: "true" include.release.openshift.io/single-node-developer: "true" release.openshift.io/create-only: "true" creationTimestamp: "2025-12-05T12:25:55Z" generation: 3 managedFields: - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"WorkerLatencyProfileComplete"}: .: {} f:lastTransitionTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} k:{"type":"WorkerLatencyProfileProgressing"}: .: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} manager: kube-controller-manager-LatencyProfile operation: Apply subresource: status time: "2025-12-05T12:32:10Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"WorkerLatencyProfileDegraded"}: .: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} manager: WorkerLatencyProfile-reportDegraded operation: Apply subresource: status time: "2025-12-05T12:32:11Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"ConfigObservationDegraded"}: .: {} f:lastTransitionTime: {} f:status: {} f:type: {} manager: kube-controller-manager-ConfigObserver operation: Apply subresource: status time: "2025-12-05T12:32:11Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"UnsupportedConfigOverridesUpgradeable"}: .: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} manager: kube-controller-manager-operator-UnsupportedConfigOverrides operation: Apply subresource: status time: "2025-12-05T12:32:11Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"NodeControllerDegraded"}: .: {} f:lastTransitionTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} f:nodeStatuses: k:{"nodeName":"master-0"}: .: {} f:nodeName: {} manager: kube-controller-manager-Node operation: Apply subresource: status time: "2025-12-05T12:32:12Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"GuardControllerDegraded"}: .: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} manager: GuardController-reportDegraded operation: Apply subresource: status time: "2025-12-05T12:32:13Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"MissingStaticPodControllerDegraded"}: .: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} manager: MissingStaticPodController-reportDegraded operation: Apply subresource: status time: "2025-12-05T12:32:13Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"InstallerPodContainerWaitingDegraded"}: .: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"InstallerPodNetworkingDegraded"}: .: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"InstallerPodPendingDegraded"}: .: {} f:lastTransitionTime: {} f:status: {} f:type: {} manager: kube-controller-manager-InstallerState operation: Apply subresource: status time: "2025-12-05T12:32:16Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"ResourceSyncControllerDegraded"}: .: {} f:lastTransitionTime: {} f:status: {} f:type: {} manager: kube-controller-manager-ResourceSync operation: Apply subresource: status time: "2025-12-05T12:32:16Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"BackingResourceControllerDegraded"}: .: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} manager: BackingResourceController-StaticResources operation: Apply subresource: status time: "2025-12-05T12:48:23Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"KubeControllerManagerStaticResourcesDegraded"}: .: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} manager: KubeControllerManagerStaticResources-StaticResources operation: Apply subresource: status time: "2025-12-05T12:48:28Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"RevisionControllerDegraded"}: .: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} manager: RevisionController-reportDegraded operation: Apply subresource: status time: "2025-12-05T12:48:32Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:latestAvailableRevision: {} manager: kube-controller-manager-RevisionController operation: Apply subresource: status time: "2025-12-05T12:55:39Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"InstallerControllerDegraded"}: .: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"NodeInstallerDegraded"}: .: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"NodeInstallerProgressing"}: .: {} f:lastTransitionTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} k:{"type":"StaticPodsAvailable"}: .: {} f:lastTransitionTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} f:nodeStatuses: k:{"nodeName":"master-0"}: .: {} f:currentRevision: {} f:lastFailedCount: {} f:lastFailedReason: {} f:lastFailedRevision: {} f:lastFailedRevisionErrors: {} f:lastFailedTime: {} f:lastFallbackCount: {} f:nodeName: {} f:targetRevision: {} manager: kube-controller-manager-Installer operation: Apply subresource: status time: "2025-12-05T12:56:42Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"StaticPodsDegraded"}: .: {} f:lastTransitionTime: {} f:status: {} f:type: {} manager: kube-controller-manager-StaticPodState operation: Apply subresource: status time: "2025-12-05T13:13:38Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:include.release.openshift.io/hypershift: {} f:include.release.openshift.io/ibm-cloud-managed: {} f:include.release.openshift.io/self-managed-high-availability: {} f:include.release.openshift.io/single-node-developer: {} f:release.openshift.io/create-only: {} f:ownerReferences: .: {} k:{"uid":"3e53dbaf-62d9-4a62-8112-0c194035adba"}: {} f:spec: .: {} f:logLevel: {} f:managementState: {} f:operatorLogLevel: {} f:useMoreSecureServiceCA: {} manager: cluster-version-operator operation: Update time: "2025-12-05T12:25:55Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:spec: f:observedConfig: .: {} f:extendedArguments: .: {} f:cluster-cidr: {} f:cluster-name: {} f:feature-gates: {} f:service-cluster-ip-range: {} f:featureGates: {} f:serviceServingCert: .: {} f:certFile: {} f:servingInfo: .: {} f:cipherSuites: {} f:minTLSVersion: {} f:unsupportedConfigOverrides: {} manager: cluster-kube-controller-manager-operator operation: Update time: "2025-12-05T12:32:18Z" - apiVersion: operator.openshift.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: .: {} f:conditions: .: {} k:{"type":"CertRotation_CSRSigningCert_Degraded"}: .: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"GarbageCollectorDegraded"}: .: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} k:{"type":"SATokenSignerDegraded"}: .: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"TargetConfigControllerDegraded"}: .: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"Upgradeable"}: .: {} f:lastTransitionTime: {} f:status: {} f:type: {} f:readyReplicas: {} manager: cluster-kube-controller-manager-operator operation: Update subresource: status time: "2025-12-05T12:55:32Z" name: cluster ownerReferences: - apiVersion: config.openshift.io/v1 kind: ClusterVersion name: version uid: 3e53dbaf-62d9-4a62-8112-0c194035adba resourceVersion: "38123" uid: 29e4d6ad-5ef1-4354-878f-a73f3d54ec62 spec: logLevel: Normal managementState: Managed observedConfig: extendedArguments: cluster-cidr: - 10.128.0.0/16 cluster-name: - sno-9mqg9 feature-gates: - AWSEFSDriverVolumeMetrics=true - AdminNetworkPolicy=true - AlibabaPlatform=true - AzureWorkloadIdentity=true - BareMetalLoadBalancer=true - BuildCSIVolumes=true - ChunkSizeMiB=true - CloudDualStackNodeIPs=true - DisableKubeletCloudCredentialProviders=true - GCPLabelsTags=true - HardwareSpeed=true - IngressControllerLBSubnetsAWS=true - KMSv1=true - ManagedBootImages=true - ManagedBootImagesAWS=true - MultiArchInstallAWS=true - MultiArchInstallGCP=true - NetworkDiagnosticsConfig=true - NetworkLiveMigration=true - NetworkSegmentation=true - NewOLM=true - NodeDisruptionPolicy=true - OnClusterBuild=true - PersistentIPsForVirtualization=true - PrivateHostedZoneAWS=true - SetEIPForNLBIngressController=true - VSphereControlPlaneMachineSet=true - VSphereDriverConfiguration=true - VSphereMultiVCenters=true - VSphereStaticIPs=true - ValidatingAdmissionPolicy=true - AWSClusterHostedDNS=false - AdditionalRoutingCapabilities=false - AutomatedEtcdBackup=false - BootcNodeManagement=false - CSIDriverSharedResource=false - ClusterAPIInstall=false - ClusterAPIInstallIBMCloud=false - ClusterMonitoringConfig=false - ConsolePluginContentSecurityPolicy=false - DNSNameResolver=false - DynamicResourceAllocation=false - EtcdBackendQuota=false - EventedPLEG=false - Example=false - ExternalOIDC=false - ExternalOIDCWithUIDAndExtraClaimMappings=false - GCPClusterHostedDNS=false - GatewayAPI=false - ImageStreamImportMode=false - IngressControllerDynamicConfigurationManager=false - InsightsConfig=false - InsightsConfigAPI=false - InsightsOnDemandDataGather=false - InsightsRuntimeExtractor=false - MachineAPIMigration=false - MachineAPIOperatorDisableMachineHealthCheckController=false - MachineAPIProviderOpenStack=false - MachineConfigNodes=false - MaxUnavailableStatefulSet=false - MetricsCollectionProfiles=false - MinimumKubeletVersion=false - MixedCPUsAllocation=false - MultiArchInstallAzure=false - NodeSwap=false - NutanixMultiSubnets=false - OVNObservability=false - OpenShiftPodSecurityAdmission=false - PinnedImages=false - PlatformOperators=false - ProcMountType=false - RouteAdvertisements=false - RouteExternalCertificate=false - ServiceAccountTokenNodeBinding=false - SignatureStores=false - SigstoreImageVerification=false - StreamingCollectionEncodingToJSON=false - StreamingCollectionEncodingToProtobuf=false - TranslateStreamCloseWebsocketRequests=false - UpgradeStatus=false - UserNamespacesPodSecurityStandards=false - UserNamespacesSupport=false - VSphereMultiNetworks=false - VolumeAttributesClass=false - VolumeGroupSnapshot=false service-cluster-ip-range: - 172.30.0.0/16 featureGates: - AWSEFSDriverVolumeMetrics=true - AdminNetworkPolicy=true - AlibabaPlatform=true - AzureWorkloadIdentity=true - BareMetalLoadBalancer=true - BuildCSIVolumes=true - ChunkSizeMiB=true - CloudDualStackNodeIPs=true - DisableKubeletCloudCredentialProviders=true - GCPLabelsTags=true - HardwareSpeed=true - IngressControllerLBSubnetsAWS=true - KMSv1=true - ManagedBootImages=true - ManagedBootImagesAWS=true - MultiArchInstallAWS=true - MultiArchInstallGCP=true - NetworkDiagnosticsConfig=true - NetworkLiveMigration=true - NetworkSegmentation=true - NewOLM=true - NodeDisruptionPolicy=true - OnClusterBuild=true - PersistentIPsForVirtualization=true - PrivateHostedZoneAWS=true - SetEIPForNLBIngressController=true - VSphereControlPlaneMachineSet=true - VSphereDriverConfiguration=true - VSphereMultiVCenters=true - VSphereStaticIPs=true - ValidatingAdmissionPolicy=true - AWSClusterHostedDNS=false - AdditionalRoutingCapabilities=false - AutomatedEtcdBackup=false - BootcNodeManagement=false - CSIDriverSharedResource=false - ClusterAPIInstall=false - ClusterAPIInstallIBMCloud=false - ClusterMonitoringConfig=false - ConsolePluginContentSecurityPolicy=false - DNSNameResolver=false - DynamicResourceAllocation=false - EtcdBackendQuota=false - EventedPLEG=false - Example=false - ExternalOIDC=false - ExternalOIDCWithUIDAndExtraClaimMappings=false - GCPClusterHostedDNS=false - GatewayAPI=false - ImageStreamImportMode=false - IngressControllerDynamicConfigurationManager=false - InsightsConfig=false - InsightsConfigAPI=false - InsightsOnDemandDataGather=false - InsightsRuntimeExtractor=false - MachineAPIMigration=false - MachineAPIOperatorDisableMachineHealthCheckController=false - MachineAPIProviderOpenStack=false - MachineConfigNodes=false - MaxUnavailableStatefulSet=false - MetricsCollectionProfiles=false - MinimumKubeletVersion=false - MixedCPUsAllocation=false - MultiArchInstallAzure=false - NodeSwap=false - NutanixMultiSubnets=false - OVNObservability=false - OpenShiftPodSecurityAdmission=false - PinnedImages=false - PlatformOperators=false - ProcMountType=false - RouteAdvertisements=false - RouteExternalCertificate=false - ServiceAccountTokenNodeBinding=false - SignatureStores=false - SigstoreImageVerification=false - StreamingCollectionEncodingToJSON=false - StreamingCollectionEncodingToProtobuf=false - TranslateStreamCloseWebsocketRequests=false - UpgradeStatus=false - UserNamespacesPodSecurityStandards=false - UserNamespacesSupport=false - VSphereMultiNetworks=false - VolumeAttributesClass=false - VolumeGroupSnapshot=false serviceServingCert: certFile: /etc/kubernetes/static-pod-resources/configmaps/service-ca/ca-bundle.crt servingInfo: cipherSuites: - TLS_AES_128_GCM_SHA256 - TLS_AES_256_GCM_SHA384 - TLS_CHACHA20_POLY1305_SHA256 - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 minTLSVersion: VersionTLS12 operatorLogLevel: Normal unsupportedConfigOverrides: null useMoreSecureServiceCA: true status: conditions: - lastTransitionTime: "2025-12-05T12:32:10Z" reason: AsExpected status: "False" type: GarbageCollectorDegraded - lastTransitionTime: "2025-12-05T12:32:10Z" message: latency profile not set on cluster reason: ProfileEmpty status: "True" type: WorkerLatencyProfileComplete - lastTransitionTime: "2025-12-05T12:32:10Z" reason: ProfileEmpty status: "False" type: WorkerLatencyProfileProgressing - lastTransitionTime: "2025-12-05T12:48:32Z" reason: AsExpected status: "False" type: RevisionControllerDegraded - lastTransitionTime: "2025-12-05T12:32:10Z" status: "False" type: ConfigObservationDegraded - lastTransitionTime: "2025-12-05T12:32:10Z" reason: NoUnsupportedConfigOverrides status: "True" type: UnsupportedConfigOverridesUpgradeable - lastTransitionTime: "2025-12-05T12:32:11Z" reason: AsExpected status: "False" type: WorkerLatencyProfileDegraded - lastTransitionTime: "2025-12-05T12:32:12Z" message: All master nodes are ready reason: MasterNodesReady status: "False" type: NodeControllerDegraded - lastTransitionTime: "2025-12-05T12:32:13Z" reason: AsExpected status: "False" type: MissingStaticPodControllerDegraded - lastTransitionTime: "2025-12-05T12:32:13Z" reason: AsExpected status: "False" type: GuardControllerDegraded - lastTransitionTime: "2025-12-05T12:32:44Z" status: "False" type: InstallerControllerDegraded - lastTransitionTime: "2025-12-05T12:48:34Z" status: "False" type: NodeInstallerDegraded - lastTransitionTime: "2025-12-05T12:56:42Z" message: 1 node is at revision 5 reason: AllNodesAtLatestRevision status: "False" type: NodeInstallerProgressing - lastTransitionTime: "2025-12-05T12:49:44Z" message: 1 nodes are active; 1 node is at revision 5 reason: "" status: "True" type: StaticPodsAvailable - lastTransitionTime: "2025-12-05T12:32:16Z" status: "False" type: CertRotation_CSRSigningCert_Degraded - lastTransitionTime: "2025-12-05T13:13:38Z" status: "False" type: StaticPodsDegraded - lastTransitionTime: "2025-12-05T12:32:16Z" status: "False" type: InstallerPodContainerWaitingDegraded - lastTransitionTime: "2025-12-05T12:32:16Z" status: "False" type: InstallerPodNetworkingDegraded - lastTransitionTime: "2025-12-05T12:32:16Z" status: "False" type: InstallerPodPendingDegraded - lastTransitionTime: "2025-12-05T12:32:16Z" status: "False" type: ResourceSyncControllerDegraded - lastTransitionTime: "2025-12-05T12:48:23Z" reason: AsExpected status: "False" type: BackingResourceControllerDegraded - lastTransitionTime: "2025-12-05T12:50:25Z" status: "False" type: SATokenSignerDegraded - lastTransitionTime: "2025-12-05T12:48:28Z" reason: AsExpected status: "False" type: KubeControllerManagerStaticResourcesDegraded - lastTransitionTime: "2025-12-05T12:32:31Z" status: "True" type: Upgradeable - lastTransitionTime: "2025-12-05T12:32:31Z" status: "False" type: TargetConfigControllerDegraded latestAvailableRevision: 5 nodeStatuses: - currentRevision: 5 lastFailedCount: 1 lastFailedReason: InstallerFailed lastFailedRevision: 2 lastFailedRevisionErrors: - | installer: icy-controller-config", (string) (len=29) "controller-manager-kubeconfig", (string) (len=38) "kube-controller-cert-syncer-kubeconfig", (string) (len=17) "serviceaccount-ca", (string) (len=10) "service-ca", (string) (len=15) "recycler-config" }, OptionalConfigMapNamePrefixes: ([]string) (len=1 cap=1) { (string) (len=12) "cloud-config" }, CertSecretNames: ([]string) (len=2 cap=2) { (string) (len=39) "kube-controller-manager-client-cert-key", (string) (len=10) "csr-signer" }, OptionalCertSecretNamePrefixes: ([]string) , CertConfigMapNamePrefixes: ([]string) (len=2 cap=2) { (string) (len=20) "aggregator-client-ca", (string) (len=9) "client-ca" }, OptionalCertConfigMapNamePrefixes: ([]string) (len=1 cap=1) { (string) (len=17) "trusted-ca-bundle" }, CertDir: (string) (len=66) "/etc/kubernetes/static-pod-resources/kube-controller-manager-certs", ResourceDir: (string) (len=36) "/etc/kubernetes/static-pod-resources", PodManifestDir: (string) (len=25) "/etc/kubernetes/manifests", Timeout: (time.Duration) 2m0s, StaticPodManifestsLockFile: (string) "", PodMutationFns: ([]installerpod.PodMutationFunc) , KubeletVersion: (string) "" }) I1205 12:43:25.828662 1 cmd.go:413] Getting controller reference for node master-0 I1205 12:43:25.924330 1 cmd.go:426] Waiting for installer revisions to settle for node master-0 I1205 12:43:25.924399 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I1205 12:43:25.924417 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I1205 12:43:25.930994 1 cmd.go:518] Waiting additional period after revisions have settled for node master-0 I1205 12:43:55.931077 1 cmd.go:524] Getting installer pods for node master-0 F1205 12:44:09.934462 1 cmd.go:109] Get "https://172.30.0.1:443/api/v1/namespaces/openshift-kube-controller-manager/pods?labelSelector=app%3Dinstaller": net/http: request canceled (Client.Timeout exceeded while awaiting headers) lastFailedTime: "2025-12-05T12:48:23Z" lastFallbackCount: 0 nodeName: master-0 targetRevision: 0 readyReplicas: 0