--- apiVersion: apps/v1 items: - apiVersion: apps/v1 kind: DaemonSet metadata: annotations: deprecated.daemonset.template.generation: "1" operator.openshift.io/spec-hash: 4d6aae5de7d84327bffeb5b00c7fd574f51e3f07f19836b70bce77038d75ca54 creationTimestamp: "2026-03-19T12:27:36Z" generation: 1 labels: k8s-app: metal3 managedFields: - apiVersion: apps/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:deprecated.daemonset.template.generation: {} f:operator.openshift.io/spec-hash: {} f:labels: .: {} f:k8s-app: {} f:ownerReferences: .: {} k:{"uid":"131908b6-c998-40d6-8721-894755da5b4a"}: {} f:spec: f:revisionHistoryLimit: {} f:selector: {} f:template: f:metadata: f:annotations: .: {} f:target.workload.openshift.io/management: {} f:labels: .: {} f:baremetal.openshift.io/cluster-baremetal-operator: {} f:k8s-app: {} f:spec: f:containers: k:{"name":"ironic-proxy"}: .: {} f:command: {} f:env: .: {} k:{"name":"IRONIC_PROXY_PORT"}: .: {} f:name: {} f:value: {} k:{"name":"IRONIC_UPSTREAM_IP"}: .: {} f:name: {} f:value: {} k:{"name":"IRONIC_UPSTREAM_PORT"}: .: {} f:name: {} f:value: {} k:{"name":"PROVISIONING_IP"}: .: {} f:name: {} f:valueFrom: .: {} f:fieldRef: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:ports: .: {} k:{"containerPort":6385,"protocol":"TCP"}: .: {} f:containerPort: {} f:hostPort: {} f:name: {} f:protocol: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:capabilities: .: {} f:add: {} f:drop: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/certs/ironic"}: .: {} f:mountPath: {} f:name: {} f:readOnly: {} k:{"mountPath":"/etc/pki/ca-trust/extracted/pem"}: .: {} f:mountPath: {} f:name: {} f:readOnly: {} f:dnsPolicy: {} f:hostNetwork: {} f:nodeSelector: {} f:priorityClassName: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: .: {} f:runAsNonRoot: {} f:serviceAccount: {} f:serviceAccountName: {} f:terminationGracePeriodSeconds: {} f:tolerations: {} f:volumes: .: {} k:{"name":"metal3-ironic-tls"}: .: {} f:name: {} f:secret: .: {} f:defaultMode: {} f:secretName: {} k:{"name":"trusted-ca"}: .: {} f:configMap: .: {} f:defaultMode: {} f:items: {} f:name: {} f:optional: {} f:name: {} f:updateStrategy: f:rollingUpdate: .: {} f:maxSurge: {} f:maxUnavailable: {} f:type: {} manager: cluster-baremetal-operator operation: Update time: "2026-03-19T12:27:36Z" - apiVersion: apps/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:currentNumberScheduled: {} f:desiredNumberScheduled: {} f:numberAvailable: {} f:numberReady: {} f:observedGeneration: {} f:updatedNumberScheduled: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-03-19T12:27:47Z" name: ironic-proxy namespace: openshift-machine-api ownerReferences: - apiVersion: metal3.io/v1alpha1 blockOwnerDeletion: true controller: true kind: Provisioning name: provisioning-configuration uid: 131908b6-c998-40d6-8721-894755da5b4a resourceVersion: "20184" uid: 26efaf75-5df4-42a8-bbb2-cd1a7b37d07e spec: revisionHistoryLimit: 10 selector: matchLabels: baremetal.openshift.io/cluster-baremetal-operator: ironic-proxy k8s-app: metal3 template: metadata: annotations: target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}' creationTimestamp: null labels: baremetal.openshift.io/cluster-baremetal-operator: ironic-proxy k8s-app: metal3 spec: containers: - command: - /bin/runironic-proxy env: - name: IRONIC_PROXY_PORT value: "6385" - name: IRONIC_UPSTREAM_IP value: 192.168.32.10 - name: IRONIC_UPSTREAM_PORT value: "6388" - name: PROVISIONING_IP valueFrom: fieldRef: apiVersion: v1 fieldPath: status.hostIP image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8484f65d4a84230f93c986362dde19aff9b77de01b50e5af1948748b51382001 imagePullPolicy: IfNotPresent name: ironic-proxy ports: - containerPort: 6385 hostPort: 6385 name: ironic-proxy protocol: TCP resources: requests: cpu: 5m memory: 50Mi securityContext: capabilities: add: - FOWNER drop: - ALL terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /certs/ironic name: metal3-ironic-tls readOnly: true - mountPath: /etc/pki/ca-trust/extracted/pem name: trusted-ca readOnly: true dnsPolicy: ClusterFirstWithHostNet hostNetwork: true nodeSelector: node-role.kubernetes.io/master: "" priorityClassName: system-node-critical restartPolicy: Always schedulerName: default-scheduler securityContext: runAsNonRoot: false serviceAccount: cluster-baremetal-operator serviceAccountName: cluster-baremetal-operator terminationGracePeriodSeconds: 30 tolerations: - effect: NoSchedule key: node-role.kubernetes.io/master - key: CriticalAddonsOnly operator: Exists - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 120 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 120 volumes: - name: metal3-ironic-tls secret: defaultMode: 420 secretName: metal3-ironic-tls - configMap: defaultMode: 420 items: - key: ca-bundle.crt path: tls-ca-bundle.pem name: cbo-trusted-ca optional: true name: trusted-ca updateStrategy: rollingUpdate: maxSurge: 0 maxUnavailable: 100% type: RollingUpdate status: currentNumberScheduled: 1 desiredNumberScheduled: 1 numberAvailable: 1 numberMisscheduled: 0 numberReady: 1 observedGeneration: 1 updatedNumberScheduled: 1 kind: DaemonSetList metadata: resourceVersion: "76540"