--- apiVersion: v1 items: - apiVersion: v1 kind: Pod metadata: annotations: kubectl.kubernetes.io/default-container: etcd kubernetes.io/config.hash: 58d12e893528ad53a994f10901a644ea kubernetes.io/config.mirror: 58d12e893528ad53a994f10901a644ea kubernetes.io/config.seen: "2025-12-05T10:48:24.983243202Z" kubernetes.io/config.source: file target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}' creationTimestamp: "2025-12-05T10:55:01Z" labels: app: etcd etcd: "true" k8s-app: etcd revision: "2" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:kubectl.kubernetes.io/default-container: {} f:kubernetes.io/config.hash: {} f:kubernetes.io/config.mirror: {} f:kubernetes.io/config.seen: {} f:kubernetes.io/config.source: {} f:target.workload.openshift.io/management: {} f:labels: .: {} f:app: {} f:etcd: {} f:k8s-app: {} f:revision: {} f:ownerReferences: .: {} k:{"uid":"ea73023b-75de-4456-80a9-4718aa8e39ac"}: {} f:spec: f:containers: k:{"name":"etcd"}: .: {} f:command: {} f:env: .: {} k:{"name":"ALL_ETCD_ENDPOINTS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_CIPHER_SUITES"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_DATA_DIR"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_ELECTION_TIMEOUT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_ENABLE_PPROF"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_MAX_LEARNERS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_WARNING_APPLY_DURATION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_WATCH_PROGRESS_NOTIFY_INTERVAL"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_HEARTBEAT_INTERVAL"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_IMAGE"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_INITIAL_CLUSTER_STATE"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_QUOTA_BACKEND_BYTES"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_SOCKET_REUSE_ADDRESS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_STATIC_POD_VERSION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_TLS_MIN_VERSION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_API"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_CACERT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_CERT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_ENDPOINTS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_KEY"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_ETCD_NAME"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_ETCD_URL_HOST"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_IP"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:livenessProbe: .: {} f:failureThreshold: {} f:httpGet: .: {} f:path: {} f:port: {} f:scheme: {} f:periodSeconds: {} f:successThreshold: {} f:timeoutSeconds: {} f:name: {} f:ports: .: {} k:{"containerPort":2379,"protocol":"TCP"}: .: {} f:containerPort: {} f:hostPort: {} f:name: {} f:protocol: {} k:{"containerPort":2380,"protocol":"TCP"}: .: {} f:containerPort: {} f:hostPort: {} f:name: {} f:protocol: {} k:{"containerPort":9978,"protocol":"TCP"}: .: {} f:containerPort: {} f:hostPort: {} f:name: {} f:protocol: {} f:readinessProbe: .: {} f:failureThreshold: {} f:httpGet: .: {} f:path: {} f:port: {} f:scheme: {} f:periodSeconds: {} f:successThreshold: {} f:timeoutSeconds: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:privileged: {} f:startupProbe: .: {} f:failureThreshold: {} f:httpGet: .: {} f:path: {} f:port: {} f:scheme: {} f:initialDelaySeconds: {} f:periodSeconds: {} f:successThreshold: {} f:timeoutSeconds: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/etc/kubernetes/manifests"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/etc/kubernetes/static-pod-certs"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/etc/kubernetes/static-pod-resources"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/var/lib/etcd/"}: .: {} f:mountPath: {} f:name: {} k:{"name":"etcd-metrics"}: .: {} f:command: {} f:env: .: {} k:{"name":"ALL_ETCD_ENDPOINTS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_CIPHER_SUITES"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_DATA_DIR"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_ELECTION_TIMEOUT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_ENABLE_PPROF"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_MAX_LEARNERS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_WARNING_APPLY_DURATION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_WATCH_PROGRESS_NOTIFY_INTERVAL"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_HEARTBEAT_INTERVAL"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_IMAGE"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_INITIAL_CLUSTER_STATE"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_QUOTA_BACKEND_BYTES"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_SOCKET_REUSE_ADDRESS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_STATIC_POD_VERSION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_TLS_MIN_VERSION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_API"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_CACERT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_CERT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_ENDPOINTS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_KEY"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_ETCD_NAME"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_ETCD_URL_HOST"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_IP"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:ports: .: {} k:{"containerPort":9979,"protocol":"TCP"}: .: {} f:containerPort: {} f:hostPort: {} f:name: {} f:protocol: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:privileged: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/etc/kubernetes/static-pod-certs"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/etc/kubernetes/static-pod-resources"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/var/lib/etcd/"}: .: {} f:mountPath: {} f:name: {} k:{"name":"etcd-readyz"}: .: {} f:command: {} f:env: .: {} k:{"name":"ALL_ETCD_ENDPOINTS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_CIPHER_SUITES"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_DATA_DIR"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_ELECTION_TIMEOUT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_ENABLE_PPROF"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_MAX_LEARNERS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_WARNING_APPLY_DURATION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_WATCH_PROGRESS_NOTIFY_INTERVAL"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_HEARTBEAT_INTERVAL"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_IMAGE"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_INITIAL_CLUSTER_STATE"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_QUOTA_BACKEND_BYTES"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_SOCKET_REUSE_ADDRESS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_TLS_MIN_VERSION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_API"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_CACERT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_CERT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_ENDPOINTS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_KEY"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_ETCD_NAME"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_ETCD_URL_HOST"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_IP"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:ports: .: {} k:{"containerPort":9980,"protocol":"TCP"}: .: {} f:containerPort: {} f:hostPort: {} f:name: {} f:protocol: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:privileged: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/etc/kubernetes/static-pod-certs"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/var/log/etcd/"}: .: {} f:mountPath: {} f:name: {} k:{"name":"etcd-rev"}: .: {} f:command: {} f:env: .: {} k:{"name":"ALL_ETCD_ENDPOINTS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_CIPHER_SUITES"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_DATA_DIR"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_ELECTION_TIMEOUT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_ENABLE_PPROF"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_MAX_LEARNERS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_WARNING_APPLY_DURATION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_WATCH_PROGRESS_NOTIFY_INTERVAL"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_HEARTBEAT_INTERVAL"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_IMAGE"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_INITIAL_CLUSTER_STATE"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_QUOTA_BACKEND_BYTES"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_SOCKET_REUSE_ADDRESS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_TLS_MIN_VERSION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_API"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_CACERT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_CERT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_ENDPOINTS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_KEY"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_ETCD_NAME"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_ETCD_URL_HOST"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_IP"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:privileged: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/etc/kubernetes/static-pod-certs"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/var/lib/etcd"}: .: {} f:mountPath: {} f:name: {} k:{"name":"etcdctl"}: .: {} f:command: {} f:env: .: {} k:{"name":"ALL_ETCD_ENDPOINTS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_CIPHER_SUITES"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_DATA_DIR"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_ELECTION_TIMEOUT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_ENABLE_PPROF"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_MAX_LEARNERS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_WARNING_APPLY_DURATION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_WATCH_PROGRESS_NOTIFY_INTERVAL"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_HEARTBEAT_INTERVAL"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_IMAGE"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_INITIAL_CLUSTER_STATE"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_QUOTA_BACKEND_BYTES"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_SOCKET_REUSE_ADDRESS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_STATIC_POD_VERSION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_TLS_MIN_VERSION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_API"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_CACERT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_CERT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_ENDPOINTS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_KEY"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_ETCD_NAME"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_ETCD_URL_HOST"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_IP"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/etc/kubernetes/manifests"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/etc/kubernetes/static-pod-certs"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/etc/kubernetes/static-pod-resources"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/var/lib/etcd/"}: .: {} f:mountPath: {} f:name: {} f:dnsPolicy: {} f:enableServiceLinks: {} f:hostNetwork: {} f:initContainers: .: {} k:{"name":"etcd-ensure-env-vars"}: .: {} f:command: {} f:env: .: {} k:{"name":"ALL_ETCD_ENDPOINTS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_CIPHER_SUITES"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_DATA_DIR"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_ELECTION_TIMEOUT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_ENABLE_PPROF"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_MAX_LEARNERS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_WARNING_APPLY_DURATION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_EXPERIMENTAL_WATCH_PROGRESS_NOTIFY_INTERVAL"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_HEARTBEAT_INTERVAL"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_IMAGE"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_INITIAL_CLUSTER_STATE"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_QUOTA_BACKEND_BYTES"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_SOCKET_REUSE_ADDRESS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCD_TLS_MIN_VERSION"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_API"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_CACERT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_CERT"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_ENDPOINTS"}: .: {} f:name: {} f:value: {} k:{"name":"ETCDCTL_KEY"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_IP"}: .: {} f:name: {} f:valueFrom: .: {} f:fieldRef: {} k:{"name":"NODE_master_0_ETCD_NAME"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_ETCD_URL_HOST"}: .: {} f:name: {} f:value: {} k:{"name":"NODE_master_0_IP"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:privileged: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} k:{"name":"etcd-resources-copy"}: .: {} f:command: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:privileged: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/etc/kubernetes/static-pod-certs"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/etc/kubernetes/static-pod-resources"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/usr/local/bin"}: .: {} f:mountPath: {} f:name: {} k:{"name":"setup"}: .: {} f:command: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:privileged: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/var/log/etcd"}: .: {} f:mountPath: {} f:name: {} f:nodeName: {} f:priorityClassName: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: {} f:terminationGracePeriodSeconds: {} f:tolerations: {} f:volumes: .: {} k:{"name":"cert-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"config-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"data-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"etcd-auto-backup-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"log-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"resource-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"static-pod-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"usr-local-bin"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} manager: kubelet operation: Update time: "2025-12-05T10:55:01Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"ContainersReady"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"Initialized"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"PodReadyToStartContainers"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"PodScheduled"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"Ready"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:status: {} f:type: {} f:containerStatuses: {} f:hostIP: {} f:hostIPs: {} f:initContainerStatuses: {} f:phase: {} f:podIP: {} f:podIPs: .: {} k:{"ip":"192.168.32.10"}: .: {} f:ip: {} f:startTime: {} manager: kubelet operation: Update subresource: status time: "2025-12-05T10:55:07Z" name: etcd-master-0 namespace: openshift-etcd ownerReferences: - apiVersion: v1 controller: true kind: Node name: master-0 uid: ea73023b-75de-4456-80a9-4718aa8e39ac resourceVersion: "16108" uid: 36235165-37e3-416c-b2aa-b6fc5b607f4e spec: containers: - command: - /bin/bash - -c - trap TERM INT; sleep infinity & wait env: - name: ALL_ETCD_ENDPOINTS value: https://192.168.32.10:2379 - name: ETCDCTL_API value: "3" - name: ETCDCTL_CACERT value: /etc/kubernetes/static-pod-certs/configmaps/etcd-all-bundles/server-ca-bundle.crt - name: ETCDCTL_CERT value: /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.crt - name: ETCDCTL_ENDPOINTS value: https://192.168.32.10:2379 - name: ETCDCTL_KEY value: /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.key - name: ETCD_CIPHER_SUITES value: TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 - name: ETCD_DATA_DIR value: /var/lib/etcd - name: ETCD_ELECTION_TIMEOUT value: "2500" - name: ETCD_ENABLE_PPROF value: "true" - name: ETCD_EXPERIMENTAL_MAX_LEARNERS value: "1" - name: ETCD_EXPERIMENTAL_WARNING_APPLY_DURATION value: 200ms - name: ETCD_EXPERIMENTAL_WATCH_PROGRESS_NOTIFY_INTERVAL value: 5s - name: ETCD_HEARTBEAT_INTERVAL value: "500" - name: ETCD_IMAGE value: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:188637a52cafee61ec461e92fb0c605e28be325b9ac1f2ac8a37d68e97654718 - name: ETCD_INITIAL_CLUSTER_STATE value: existing - name: ETCD_QUOTA_BACKEND_BYTES value: "8589934592" - name: ETCD_SOCKET_REUSE_ADDRESS value: "true" - name: ETCD_TLS_MIN_VERSION value: TLS1.2 - name: NODE_master_0_ETCD_NAME value: master-0 - name: NODE_master_0_ETCD_URL_HOST value: 192.168.32.10 - name: NODE_master_0_IP value: 192.168.32.10 - name: ETCD_STATIC_POD_VERSION value: "2" image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:188637a52cafee61ec461e92fb0c605e28be325b9ac1f2ac8a37d68e97654718 imagePullPolicy: IfNotPresent name: etcdctl resources: requests: cpu: 10m memory: 60Mi terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /etc/kubernetes/manifests name: static-pod-dir - mountPath: /etc/kubernetes/static-pod-resources name: resource-dir - mountPath: /etc/kubernetes/static-pod-certs name: cert-dir - mountPath: /var/lib/etcd/ name: data-dir - command: - /bin/sh - -c - | #!/bin/sh set -euo pipefail etcdctl member list || true # this has a non-zero return code if the command is non-zero. If you use an export first, it doesn't and you # will succeed when you should fail. ETCD_INITIAL_CLUSTER=$(discover-etcd-initial-cluster \ --cacert=/etc/kubernetes/static-pod-certs/configmaps/etcd-all-bundles/server-ca-bundle.crt \ --cert=/etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.crt \ --key=/etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.key \ --endpoints=${ALL_ETCD_ENDPOINTS} \ --data-dir=/var/lib/etcd \ --target-peer-url-host=${NODE_master_0_ETCD_URL_HOST} \ --target-name=master-0) export ETCD_INITIAL_CLUSTER # we cannot use the "normal" port conflict initcontainer because when we upgrade, the existing static pod will never yield, # so we do the detection in etcd container itself. echo -n "Waiting for ports 2379, 2380 and 9978 to be released." time while [ -n "$(ss -Htan '( sport = 2379 or sport = 2380 or sport = 9978 )')" ]; do echo -n "." sleep 1 done export ETCD_NAME=${NODE_master_0_ETCD_NAME} env | grep ETCD | grep -v NODE set -x # See https://etcd.io/docs/v3.4.0/tuning/ for why we use ionice exec nice -n -19 ionice -c2 -n0 etcd \ --logger=zap \ --log-level=info \ --experimental-initial-corrupt-check=true \ --snapshot-count=10000 \ --initial-advertise-peer-urls=https://${NODE_master_0_IP}:2380 \ --cert-file=/etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-serving-master-0.crt \ --key-file=/etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-serving-master-0.key \ --trusted-ca-file=/etc/kubernetes/static-pod-certs/configmaps/etcd-all-bundles/server-ca-bundle.crt \ --client-cert-auth=true \ --peer-cert-file=/etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.crt \ --peer-key-file=/etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.key \ --peer-trusted-ca-file=/etc/kubernetes/static-pod-certs/configmaps/etcd-all-bundles/server-ca-bundle.crt \ --peer-client-cert-auth=true \ --advertise-client-urls=https://${NODE_master_0_IP}:2379 \ --listen-client-urls=https://0.0.0.0:2379,unixs://${NODE_master_0_IP}:0 \ --listen-peer-urls=https://0.0.0.0:2380 \ --metrics=extensive \ --listen-metrics-urls=https://0.0.0.0:9978 || mv /etc/kubernetes/etcd-backup-dir/etcd-member.yaml /etc/kubernetes/manifests env: - name: ALL_ETCD_ENDPOINTS value: https://192.168.32.10:2379 - name: ETCDCTL_API value: "3" - name: ETCDCTL_CACERT value: /etc/kubernetes/static-pod-certs/configmaps/etcd-all-bundles/server-ca-bundle.crt - name: ETCDCTL_CERT value: /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.crt - name: ETCDCTL_ENDPOINTS value: https://192.168.32.10:2379 - name: ETCDCTL_KEY value: /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.key - name: ETCD_CIPHER_SUITES value: TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 - name: ETCD_DATA_DIR value: /var/lib/etcd - name: ETCD_ELECTION_TIMEOUT value: "2500" - name: ETCD_ENABLE_PPROF value: "true" - name: ETCD_EXPERIMENTAL_MAX_LEARNERS value: "1" - name: ETCD_EXPERIMENTAL_WARNING_APPLY_DURATION value: 200ms - name: ETCD_EXPERIMENTAL_WATCH_PROGRESS_NOTIFY_INTERVAL value: 5s - name: ETCD_HEARTBEAT_INTERVAL value: "500" - name: ETCD_IMAGE value: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:188637a52cafee61ec461e92fb0c605e28be325b9ac1f2ac8a37d68e97654718 - name: ETCD_INITIAL_CLUSTER_STATE value: existing - name: ETCD_QUOTA_BACKEND_BYTES value: "8589934592" - name: ETCD_SOCKET_REUSE_ADDRESS value: "true" - name: ETCD_TLS_MIN_VERSION value: TLS1.2 - name: NODE_master_0_ETCD_NAME value: master-0 - name: NODE_master_0_ETCD_URL_HOST value: 192.168.32.10 - name: NODE_master_0_IP value: 192.168.32.10 - name: ETCD_STATIC_POD_VERSION value: "2" image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:188637a52cafee61ec461e92fb0c605e28be325b9ac1f2ac8a37d68e97654718 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 5 httpGet: path: healthz port: 9980 scheme: HTTPS periodSeconds: 5 successThreshold: 1 timeoutSeconds: 30 name: etcd ports: - containerPort: 2379 hostPort: 2379 name: etcd protocol: TCP - containerPort: 2380 hostPort: 2380 name: etcd-peer protocol: TCP - containerPort: 9978 hostPort: 9978 name: etcd-metrics protocol: TCP readinessProbe: failureThreshold: 5 httpGet: path: readyz port: 9980 scheme: HTTPS periodSeconds: 5 successThreshold: 1 timeoutSeconds: 30 resources: requests: cpu: 300m memory: 600Mi securityContext: privileged: true startupProbe: failureThreshold: 18 httpGet: path: readyz port: 9980 scheme: HTTPS initialDelaySeconds: 10 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /etc/kubernetes/manifests name: static-pod-dir - mountPath: /etc/kubernetes/static-pod-resources name: resource-dir - mountPath: /etc/kubernetes/static-pod-certs name: cert-dir - mountPath: /var/lib/etcd/ name: data-dir - command: - /bin/sh - -c - | #!/bin/sh set -euo pipefail export ETCD_NAME=${NODE_master_0_ETCD_NAME} exec nice -n -18 etcd grpc-proxy start \ --endpoints https://${NODE_master_0_ETCD_URL_HOST}:9978 \ --metrics-addr https://0.0.0.0:9979 \ --listen-addr 127.0.0.1:9977 \ --advertise-client-url "" \ --key /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.key \ --key-file /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-serving-metrics-master-0.key \ --cert /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.crt \ --cert-file /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-serving-metrics-master-0.crt \ --cacert /etc/kubernetes/static-pod-certs/configmaps/etcd-all-bundles/server-ca-bundle.crt \ --trusted-ca-file /etc/kubernetes/static-pod-certs/configmaps/etcd-all-bundles/metrics-ca-bundle.crt \ --listen-cipher-suites TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 \ --tls-min-version $(ETCD_TLS_MIN_VERSION) env: - name: ALL_ETCD_ENDPOINTS value: https://192.168.32.10:2379 - name: ETCDCTL_API value: "3" - name: ETCDCTL_CACERT value: /etc/kubernetes/static-pod-certs/configmaps/etcd-all-bundles/server-ca-bundle.crt - name: ETCDCTL_CERT value: /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.crt - name: ETCDCTL_ENDPOINTS value: https://192.168.32.10:2379 - name: ETCDCTL_KEY value: /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.key - name: ETCD_CIPHER_SUITES value: TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 - name: ETCD_DATA_DIR value: /var/lib/etcd - name: ETCD_ELECTION_TIMEOUT value: "2500" - name: ETCD_ENABLE_PPROF value: "true" - name: ETCD_EXPERIMENTAL_MAX_LEARNERS value: "1" - name: ETCD_EXPERIMENTAL_WARNING_APPLY_DURATION value: 200ms - name: ETCD_EXPERIMENTAL_WATCH_PROGRESS_NOTIFY_INTERVAL value: 5s - name: ETCD_HEARTBEAT_INTERVAL value: "500" - name: ETCD_IMAGE value: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:188637a52cafee61ec461e92fb0c605e28be325b9ac1f2ac8a37d68e97654718 - name: ETCD_INITIAL_CLUSTER_STATE value: existing - name: ETCD_QUOTA_BACKEND_BYTES value: "8589934592" - name: ETCD_SOCKET_REUSE_ADDRESS value: "true" - name: ETCD_TLS_MIN_VERSION value: TLS1.2 - name: NODE_master_0_ETCD_NAME value: master-0 - name: NODE_master_0_ETCD_URL_HOST value: 192.168.32.10 - name: NODE_master_0_IP value: 192.168.32.10 - name: ETCD_STATIC_POD_VERSION value: "2" image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:188637a52cafee61ec461e92fb0c605e28be325b9ac1f2ac8a37d68e97654718 imagePullPolicy: IfNotPresent name: etcd-metrics ports: - containerPort: 9979 hostPort: 9979 name: proxy-metrics protocol: TCP resources: requests: cpu: 40m memory: 200Mi securityContext: privileged: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /etc/kubernetes/static-pod-resources name: resource-dir - mountPath: /etc/kubernetes/static-pod-certs name: cert-dir - mountPath: /var/lib/etcd/ name: data-dir - command: - /bin/sh - -c - | #!/bin/sh set -euo pipefail exec nice -n -18 cluster-etcd-operator readyz \ --target=https://localhost:2379 \ --listen-port=9980 \ --serving-cert-file=/etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-serving-master-0.crt \ --serving-key-file=/etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-serving-master-0.key \ --client-cert-file=$(ETCDCTL_CERT) \ --client-key-file=$(ETCDCTL_KEY) \ --client-cacert-file=$(ETCDCTL_CACERT) \ --listen-cipher-suites TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 \ --listen-tls-min-version=$(ETCD_TLS_MIN_VERSION) env: - name: ALL_ETCD_ENDPOINTS value: https://192.168.32.10:2379 - name: ETCDCTL_API value: "3" - name: ETCDCTL_CACERT value: /etc/kubernetes/static-pod-certs/configmaps/etcd-all-bundles/server-ca-bundle.crt - name: ETCDCTL_CERT value: /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.crt - name: ETCDCTL_ENDPOINTS value: https://192.168.32.10:2379 - name: ETCDCTL_KEY value: /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.key - name: ETCD_CIPHER_SUITES value: TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 - name: ETCD_DATA_DIR value: /var/lib/etcd - name: ETCD_ELECTION_TIMEOUT value: "2500" - name: ETCD_ENABLE_PPROF value: "true" - name: ETCD_EXPERIMENTAL_MAX_LEARNERS value: "1" - name: ETCD_EXPERIMENTAL_WARNING_APPLY_DURATION value: 200ms - name: ETCD_EXPERIMENTAL_WATCH_PROGRESS_NOTIFY_INTERVAL value: 5s - name: ETCD_HEARTBEAT_INTERVAL value: "500" - name: ETCD_IMAGE value: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:188637a52cafee61ec461e92fb0c605e28be325b9ac1f2ac8a37d68e97654718 - name: ETCD_INITIAL_CLUSTER_STATE value: existing - name: ETCD_QUOTA_BACKEND_BYTES value: "8589934592" - name: ETCD_SOCKET_REUSE_ADDRESS value: "true" - name: ETCD_TLS_MIN_VERSION value: TLS1.2 - name: NODE_master_0_ETCD_NAME value: master-0 - name: NODE_master_0_ETCD_URL_HOST value: 192.168.32.10 - name: NODE_master_0_IP value: 192.168.32.10 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f4d4282cb53325e737ad68abbfcb70687ae04fb50353f4f0ba0ba5703b15009a imagePullPolicy: IfNotPresent name: etcd-readyz ports: - containerPort: 9980 hostPort: 9980 name: readyz protocol: TCP resources: requests: cpu: 10m memory: 50Mi securityContext: privileged: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /var/log/etcd/ name: log-dir - mountPath: /etc/kubernetes/static-pod-certs name: cert-dir - command: - /bin/sh - -c - | #!/bin/sh set -euo pipefail cluster-etcd-operator rev \ --endpoints=$(ALL_ETCD_ENDPOINTS) \ --client-cert-file=$(ETCDCTL_CERT) \ --client-key-file=$(ETCDCTL_KEY) \ --client-cacert-file=$(ETCDCTL_CACERT) env: - name: ALL_ETCD_ENDPOINTS value: https://192.168.32.10:2379 - name: ETCDCTL_API value: "3" - name: ETCDCTL_CACERT value: /etc/kubernetes/static-pod-certs/configmaps/etcd-all-bundles/server-ca-bundle.crt - name: ETCDCTL_CERT value: /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.crt - name: ETCDCTL_ENDPOINTS value: https://192.168.32.10:2379 - name: ETCDCTL_KEY value: /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.key - name: ETCD_CIPHER_SUITES value: TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 - name: ETCD_DATA_DIR value: /var/lib/etcd - name: ETCD_ELECTION_TIMEOUT value: "2500" - name: ETCD_ENABLE_PPROF value: "true" - name: ETCD_EXPERIMENTAL_MAX_LEARNERS value: "1" - name: ETCD_EXPERIMENTAL_WARNING_APPLY_DURATION value: 200ms - name: ETCD_EXPERIMENTAL_WATCH_PROGRESS_NOTIFY_INTERVAL value: 5s - name: ETCD_HEARTBEAT_INTERVAL value: "500" - name: ETCD_IMAGE value: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:188637a52cafee61ec461e92fb0c605e28be325b9ac1f2ac8a37d68e97654718 - name: ETCD_INITIAL_CLUSTER_STATE value: existing - name: ETCD_QUOTA_BACKEND_BYTES value: "8589934592" - name: ETCD_SOCKET_REUSE_ADDRESS value: "true" - name: ETCD_TLS_MIN_VERSION value: TLS1.2 - name: NODE_master_0_ETCD_NAME value: master-0 - name: NODE_master_0_ETCD_URL_HOST value: 192.168.32.10 - name: NODE_master_0_IP value: 192.168.32.10 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f4d4282cb53325e737ad68abbfcb70687ae04fb50353f4f0ba0ba5703b15009a imagePullPolicy: IfNotPresent name: etcd-rev resources: requests: cpu: 10m memory: 50Mi securityContext: privileged: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /var/lib/etcd name: data-dir - mountPath: /etc/kubernetes/static-pod-certs name: cert-dir dnsPolicy: ClusterFirst enableServiceLinks: true hostNetwork: true initContainers: - command: - /bin/sh - -c - | #!/bin/sh echo -n "Fixing etcd log permissions." mkdir -p /var/log/etcd && chmod 0600 /var/log/etcd echo -n "Fixing etcd auto backup permissions." mkdir -p /var/lib/etcd-auto-backup && chmod 0600 /var/lib/etcd-auto-backup image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:188637a52cafee61ec461e92fb0c605e28be325b9ac1f2ac8a37d68e97654718 imagePullPolicy: IfNotPresent name: setup resources: requests: cpu: 5m memory: 50Mi securityContext: privileged: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /var/log/etcd name: log-dir - command: - /bin/sh - -c - | #!/bin/sh set -euo pipefail : "${NODE_master_0_ETCD_URL_HOST?not set}" : "${NODE_master_0_ETCD_NAME?not set}" : "${NODE_master_0_IP?not set}" # check for ipv4 addresses as well as ipv6 addresses with extra square brackets if [[ "${NODE_master_0_IP}" != "${NODE_IP}" && "${NODE_master_0_IP}" != "[${NODE_IP}]" ]]; then # echo the error message to stderr echo "Expected node IP to be ${NODE_IP} got ${NODE_master_0_IP}" >&2 exit 1 fi # check for ipv4 addresses as well as ipv6 addresses with extra square brackets if [[ "${NODE_master_0_ETCD_URL_HOST}" != "${NODE_IP}" && "${NODE_master_0_ETCD_URL_HOST}" != "[${NODE_IP}]" ]]; then # echo the error message to stderr echo "Expected etcd url host to be ${NODE_IP} got ${NODE_master_0_ETCD_URL_HOST}" >&2 exit 1 fi env: - name: ALL_ETCD_ENDPOINTS value: https://192.168.32.10:2379 - name: ETCDCTL_API value: "3" - name: ETCDCTL_CACERT value: /etc/kubernetes/static-pod-certs/configmaps/etcd-all-bundles/server-ca-bundle.crt - name: ETCDCTL_CERT value: /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.crt - name: ETCDCTL_ENDPOINTS value: https://192.168.32.10:2379 - name: ETCDCTL_KEY value: /etc/kubernetes/static-pod-certs/secrets/etcd-all-certs/etcd-peer-master-0.key - name: ETCD_CIPHER_SUITES value: TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 - name: ETCD_DATA_DIR value: /var/lib/etcd - name: ETCD_ELECTION_TIMEOUT value: "2500" - name: ETCD_ENABLE_PPROF value: "true" - name: ETCD_EXPERIMENTAL_MAX_LEARNERS value: "1" - name: ETCD_EXPERIMENTAL_WARNING_APPLY_DURATION value: 200ms - name: ETCD_EXPERIMENTAL_WATCH_PROGRESS_NOTIFY_INTERVAL value: 5s - name: ETCD_HEARTBEAT_INTERVAL value: "500" - name: ETCD_IMAGE value: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:188637a52cafee61ec461e92fb0c605e28be325b9ac1f2ac8a37d68e97654718 - name: ETCD_INITIAL_CLUSTER_STATE value: existing - name: ETCD_QUOTA_BACKEND_BYTES value: "8589934592" - name: ETCD_SOCKET_REUSE_ADDRESS value: "true" - name: ETCD_TLS_MIN_VERSION value: TLS1.2 - name: NODE_master_0_ETCD_NAME value: master-0 - name: NODE_master_0_ETCD_URL_HOST value: 192.168.32.10 - name: NODE_master_0_IP value: 192.168.32.10 - name: NODE_IP valueFrom: fieldRef: apiVersion: v1 fieldPath: status.podIP image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:188637a52cafee61ec461e92fb0c605e28be325b9ac1f2ac8a37d68e97654718 imagePullPolicy: IfNotPresent name: etcd-ensure-env-vars resources: requests: cpu: 10m memory: 60Mi securityContext: privileged: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError - command: - /bin/sh - -c - | #!/bin/sh set -euo pipefail rm -f $(grep -l '^### Created by cluster-etcd-operator' /usr/local/bin/*) cp -p /etc/kubernetes/static-pod-certs/configmaps/etcd-scripts/*.sh /usr/local/bin image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:188637a52cafee61ec461e92fb0c605e28be325b9ac1f2ac8a37d68e97654718 imagePullPolicy: IfNotPresent name: etcd-resources-copy resources: requests: cpu: 10m memory: 60Mi securityContext: privileged: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /etc/kubernetes/static-pod-resources name: resource-dir - mountPath: /etc/kubernetes/static-pod-certs name: cert-dir - mountPath: /usr/local/bin name: usr-local-bin nodeName: master-0 preemptionPolicy: PreemptLowerPriority priority: 2000001000 priorityClassName: system-node-critical restartPolicy: Always schedulerName: default-scheduler securityContext: {} terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: - hostPath: path: /etc/kubernetes/manifests type: "" name: static-pod-dir - hostPath: path: /etc/kubernetes/static-pod-resources/etcd-pod-2 type: "" name: resource-dir - hostPath: path: /etc/kubernetes/static-pod-resources/etcd-certs type: "" name: cert-dir - hostPath: path: /var/lib/etcd type: "" name: data-dir - hostPath: path: /usr/local/bin type: "" name: usr-local-bin - hostPath: path: /var/log/etcd type: "" name: log-dir - hostPath: path: /etc/kubernetes type: "" name: config-dir - hostPath: path: /var/lib/etcd-auto-backup type: "" name: etcd-auto-backup-dir status: conditions: - lastProbeTime: null lastTransitionTime: "2025-12-05T10:49:37Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2025-12-05T10:50:48Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2025-12-05T10:51:41Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2025-12-05T10:51:41Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2025-12-05T10:47:20Z" status: "True" type: PodScheduled containerStatuses: - containerID: cri-o://65e7dc775f9b903f864d03460f97b58c8c0e7629adb4c1a2a38f2ad73d7c39ab image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:188637a52cafee61ec461e92fb0c605e28be325b9ac1f2ac8a37d68e97654718 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:188637a52cafee61ec461e92fb0c605e28be325b9ac1f2ac8a37d68e97654718 lastState: {} name: etcd ready: true restartCount: 0 started: true state: running: startedAt: "2025-12-05T10:51:23Z" volumeMounts: - mountPath: /etc/kubernetes/manifests name: static-pod-dir - mountPath: /etc/kubernetes/static-pod-resources name: resource-dir - mountPath: /etc/kubernetes/static-pod-certs name: cert-dir - mountPath: /var/lib/etcd/ name: data-dir - containerID: cri-o://349ce0f25655b8eafee0223909bcba5b7fcea0fd278ec922bd70f16532f5a83c image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:188637a52cafee61ec461e92fb0c605e28be325b9ac1f2ac8a37d68e97654718 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:188637a52cafee61ec461e92fb0c605e28be325b9ac1f2ac8a37d68e97654718 lastState: {} name: etcd-metrics ready: true restartCount: 0 started: true state: running: startedAt: "2025-12-05T10:51:23Z" volumeMounts: - mountPath: /etc/kubernetes/static-pod-resources name: resource-dir - mountPath: /etc/kubernetes/static-pod-certs name: cert-dir - mountPath: /var/lib/etcd/ name: data-dir - containerID: cri-o://7af113abd305fa6b983b07383f4fbdc4ddb7dda77e1cb7229fe9aa7569f577a8 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f4d4282cb53325e737ad68abbfcb70687ae04fb50353f4f0ba0ba5703b15009a imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f4d4282cb53325e737ad68abbfcb70687ae04fb50353f4f0ba0ba5703b15009a lastState: {} name: etcd-readyz ready: true restartCount: 0 started: true state: running: startedAt: "2025-12-05T10:51:24Z" volumeMounts: - mountPath: /var/log/etcd/ name: log-dir - mountPath: /etc/kubernetes/static-pod-certs name: cert-dir - containerID: cri-o://0196da7ea350db2032f72563c90e8277b2f9a6bc34a822a931025e1ee2729cf8 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f4d4282cb53325e737ad68abbfcb70687ae04fb50353f4f0ba0ba5703b15009a imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f4d4282cb53325e737ad68abbfcb70687ae04fb50353f4f0ba0ba5703b15009a lastState: {} name: etcd-rev ready: true restartCount: 0 started: true state: running: startedAt: "2025-12-05T10:51:24Z" volumeMounts: - mountPath: /var/lib/etcd name: data-dir - mountPath: /etc/kubernetes/static-pod-certs name: cert-dir - containerID: cri-o://5fb61e8b9729625ae43ae87d4d6128e709c2bd2a1e2e471d1e03d8c13cc548da image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:188637a52cafee61ec461e92fb0c605e28be325b9ac1f2ac8a37d68e97654718 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:188637a52cafee61ec461e92fb0c605e28be325b9ac1f2ac8a37d68e97654718 lastState: {} name: etcdctl ready: true restartCount: 0 started: true state: running: startedAt: "2025-12-05T10:51:23Z" volumeMounts: - mountPath: /etc/kubernetes/manifests name: static-pod-dir - mountPath: /etc/kubernetes/static-pod-resources name: resource-dir - mountPath: /etc/kubernetes/static-pod-certs name: cert-dir - mountPath: /var/lib/etcd/ name: data-dir hostIP: 192.168.32.10 hostIPs: - ip: 192.168.32.10 initContainerStatuses: - containerID: cri-o://43d3f4e122ed97183dd21d655df13c829e9b14d20b03aa1aeaca2312eec97b50 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:188637a52cafee61ec461e92fb0c605e28be325b9ac1f2ac8a37d68e97654718 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:188637a52cafee61ec461e92fb0c605e28be325b9ac1f2ac8a37d68e97654718 lastState: {} name: setup ready: true restartCount: 0 started: false state: terminated: containerID: cri-o://43d3f4e122ed97183dd21d655df13c829e9b14d20b03aa1aeaca2312eec97b50 exitCode: 0 finishedAt: "2025-12-05T10:49:36Z" reason: Completed startedAt: "2025-12-05T10:49:36Z" volumeMounts: - mountPath: /var/log/etcd name: log-dir - containerID: cri-o://248aafb616cc9e7a645eeebc252c6d5c2dc76601e14b41b4b8c8fb10f43512f6 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:188637a52cafee61ec461e92fb0c605e28be325b9ac1f2ac8a37d68e97654718 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:188637a52cafee61ec461e92fb0c605e28be325b9ac1f2ac8a37d68e97654718 lastState: {} name: etcd-ensure-env-vars ready: true restartCount: 0 started: false state: terminated: containerID: cri-o://248aafb616cc9e7a645eeebc252c6d5c2dc76601e14b41b4b8c8fb10f43512f6 exitCode: 0 finishedAt: "2025-12-05T10:50:11Z" reason: Completed startedAt: "2025-12-05T10:50:11Z" - containerID: cri-o://12cb4e737c9c66d2fe3cc4bd86482f28a548a5b5cc2c79adfbd5d604b334960f image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:188637a52cafee61ec461e92fb0c605e28be325b9ac1f2ac8a37d68e97654718 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:188637a52cafee61ec461e92fb0c605e28be325b9ac1f2ac8a37d68e97654718 lastState: {} name: etcd-resources-copy ready: true restartCount: 0 started: false state: terminated: containerID: cri-o://12cb4e737c9c66d2fe3cc4bd86482f28a548a5b5cc2c79adfbd5d604b334960f exitCode: 0 finishedAt: "2025-12-05T10:50:47Z" reason: Completed startedAt: "2025-12-05T10:50:47Z" volumeMounts: - mountPath: /etc/kubernetes/static-pod-resources name: resource-dir - mountPath: /etc/kubernetes/static-pod-certs name: cert-dir - mountPath: /usr/local/bin name: usr-local-bin phase: Running podIP: 192.168.32.10 podIPs: - ip: 192.168.32.10 qosClass: Burstable startTime: "2025-12-05T10:47:20Z" - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.128.0.36/23"],"mac_address":"0a:58:0a:80:00:24","gateway_ips":["10.128.0.1"],"routes":[{"dest":"10.128.0.0/16","nextHop":"10.128.0.1"},{"dest":"172.30.0.0/16","nextHop":"10.128.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.128.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.128.0.1"}],"ip_address":"10.128.0.36/23","gateway_ip":"10.128.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.128.0.36" ], "mac": "0a:58:0a:80:00:24", "default": true, "dns": {} }] creationTimestamp: "2025-12-05T10:37:57Z" labels: app: installer managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: .: {} f:app: {} f:ownerReferences: .: {} k:{"uid":"19e35685-271f-40a0-908b-5e56f0ce4d87"}: {} f:spec: f:automountServiceAccountToken: {} f:containers: k:{"name":"installer"}: .: {} f:args: {} f:command: {} f:env: .: {} k:{"name":"NODE_NAME"}: .: {} f:name: {} f:valueFrom: .: {} f:fieldRef: {} k:{"name":"POD_NAME"}: .: {} f:name: {} f:valueFrom: .: {} f:fieldRef: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:limits: .: {} f:cpu: {} f:memory: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:privileged: {} f:runAsUser: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/etc/kubernetes/"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/var/lock"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/var/run/secrets/kubernetes.io/serviceaccount"}: .: {} f:mountPath: {} f:name: {} f:readOnly: {} f:dnsPolicy: {} f:enableServiceLinks: {} f:nodeName: {} f:priorityClassName: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: .: {} f:runAsUser: {} f:serviceAccount: {} f:serviceAccountName: {} f:terminationGracePeriodSeconds: {} f:tolerations: {} f:volumes: .: {} k:{"name":"kube-api-access"}: .: {} f:name: {} f:projected: .: {} f:defaultMode: {} f:sources: {} k:{"name":"kubelet-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"var-lock"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} manager: cluster-etcd-operator operation: Update time: "2025-12-05T10:37:57Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:k8s.ovn.org/pod-networks: {} manager: master-0 operation: Update subresource: status time: "2025-12-05T10:37:57Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.v1.cni.cncf.io/network-status: {} manager: multus-daemon operation: Update subresource: status time: "2025-12-05T10:37:58Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"ContainersReady"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} k:{"type":"Initialized"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} k:{"type":"PodReadyToStartContainers"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"PodScheduled"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"Ready"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} f:containerStatuses: {} f:hostIP: {} f:hostIPs: {} f:phase: {} f:startTime: {} manager: kubelet operation: Update subresource: status time: "2025-12-05T10:40:27Z" name: installer-1-master-0 namespace: openshift-etcd ownerReferences: - apiVersion: v1 kind: ConfigMap name: revision-status-1 uid: 19e35685-271f-40a0-908b-5e56f0ce4d87 resourceVersion: "12072" uid: e149cbe7-1ec3-4a06-af61-3a8906b8e9ef spec: automountServiceAccountToken: false containers: - args: - -v=2 - --revision=1 - --namespace=openshift-etcd - --pod=etcd-pod - --resource-dir=/etc/kubernetes/static-pod-resources - --pod-manifest-dir=/etc/kubernetes/manifests - --configmaps=etcd-pod - --configmaps=etcd-endpoints - --configmaps=etcd-all-bundles - --secrets=etcd-all-certs - --cert-dir=/etc/kubernetes/static-pod-resources/etcd-certs - --cert-configmaps=restore-etcd-pod - --cert-configmaps=etcd-scripts - --cert-configmaps=etcd-all-bundles - --cert-secrets=etcd-all-certs command: - cluster-etcd-operator - installer env: - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: NODE_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: spec.nodeName image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f4d4282cb53325e737ad68abbfcb70687ae04fb50353f4f0ba0ba5703b15009a imagePullPolicy: IfNotPresent name: installer resources: limits: cpu: 150m memory: 200M requests: cpu: 150m memory: 200M securityContext: privileged: true runAsUser: 0 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /etc/kubernetes/ name: kubelet-dir - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - mountPath: /var/lock name: var-lock dnsPolicy: ClusterFirst enableServiceLinks: true nodeName: master-0 preemptionPolicy: PreemptLowerPriority priority: 2000001000 priorityClassName: system-node-critical restartPolicy: Never schedulerName: default-scheduler securityContext: runAsUser: 0 serviceAccount: installer-sa serviceAccountName: installer-sa terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: - hostPath: path: /etc/kubernetes/ type: "" name: kubelet-dir - hostPath: path: /var/lock type: "" name: var-lock - name: kube-api-access projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3600 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2025-12-05T10:38:47Z" status: "False" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2025-12-05T10:37:57Z" reason: PodCompleted status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2025-12-05T10:38:46Z" reason: PodCompleted status: "False" type: Ready - lastProbeTime: null lastTransitionTime: "2025-12-05T10:38:46Z" reason: PodCompleted status: "False" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2025-12-05T10:37:57Z" status: "True" type: PodScheduled containerStatuses: - containerID: cri-o://86721e833ddfe5b80f087deb054f43ae1d6033b98f09d3f999eb1efccfb11215 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f4d4282cb53325e737ad68abbfcb70687ae04fb50353f4f0ba0ba5703b15009a imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f4d4282cb53325e737ad68abbfcb70687ae04fb50353f4f0ba0ba5703b15009a lastState: {} name: installer ready: false restartCount: 0 started: false state: terminated: containerID: cri-o://86721e833ddfe5b80f087deb054f43ae1d6033b98f09d3f999eb1efccfb11215 exitCode: 0 finishedAt: "2025-12-05T10:38:46Z" reason: Completed startedAt: "2025-12-05T10:38:01Z" volumeMounts: - mountPath: /etc/kubernetes/ name: kubelet-dir - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true recursiveReadOnly: Disabled - mountPath: /var/lock name: var-lock hostIP: 192.168.32.10 hostIPs: - ip: 192.168.32.10 phase: Succeeded qosClass: Guaranteed startTime: "2025-12-05T10:37:57Z" - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.128.0.79/23"],"mac_address":"0a:58:0a:80:00:4f","gateway_ips":["10.128.0.1"],"routes":[{"dest":"10.128.0.0/16","nextHop":"10.128.0.1"},{"dest":"172.30.0.0/16","nextHop":"10.128.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.128.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.128.0.1"}],"ip_address":"10.128.0.79/23","gateway_ip":"10.128.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.128.0.79" ], "mac": "0a:58:0a:80:00:4f", "default": true, "dns": {} }] creationTimestamp: "2025-12-05T10:46:44Z" labels: app: installer managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: .: {} f:app: {} f:ownerReferences: .: {} k:{"uid":"ae8975cb-8534-4800-b039-12af83331959"}: {} f:spec: f:automountServiceAccountToken: {} f:containers: k:{"name":"installer"}: .: {} f:args: {} f:command: {} f:env: .: {} k:{"name":"NODE_NAME"}: .: {} f:name: {} f:valueFrom: .: {} f:fieldRef: {} k:{"name":"POD_NAME"}: .: {} f:name: {} f:valueFrom: .: {} f:fieldRef: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:limits: .: {} f:cpu: {} f:memory: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:privileged: {} f:runAsUser: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/etc/kubernetes/"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/var/lock"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/var/run/secrets/kubernetes.io/serviceaccount"}: .: {} f:mountPath: {} f:name: {} f:readOnly: {} f:dnsPolicy: {} f:enableServiceLinks: {} f:nodeName: {} f:priorityClassName: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: .: {} f:runAsUser: {} f:serviceAccount: {} f:serviceAccountName: {} f:terminationGracePeriodSeconds: {} f:tolerations: {} f:volumes: .: {} k:{"name":"kube-api-access"}: .: {} f:name: {} f:projected: .: {} f:defaultMode: {} f:sources: {} k:{"name":"kubelet-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"var-lock"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} manager: cluster-etcd-operator operation: Update time: "2025-12-05T10:46:44Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:k8s.ovn.org/pod-networks: {} manager: master-0 operation: Update subresource: status time: "2025-12-05T10:46:44Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.v1.cni.cncf.io/network-status: {} manager: multus-daemon operation: Update subresource: status time: "2025-12-05T10:46:45Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"ContainersReady"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} k:{"type":"Initialized"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"PodReadyToStartContainers"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"PodScheduled"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"Ready"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} f:containerStatuses: {} f:hostIP: {} f:hostIPs: {} f:phase: {} f:startTime: {} manager: kubelet operation: Update subresource: status time: "2025-12-05T10:47:26Z" name: installer-2-master-0 namespace: openshift-etcd ownerReferences: - apiVersion: v1 kind: ConfigMap name: revision-status-2 uid: ae8975cb-8534-4800-b039-12af83331959 resourceVersion: "12030" uid: 68058d25-5888-495f-8571-453f0bf919d9 spec: automountServiceAccountToken: false containers: - args: - -v=2 - --revision=2 - --namespace=openshift-etcd - --pod=etcd-pod - --resource-dir=/etc/kubernetes/static-pod-resources - --pod-manifest-dir=/etc/kubernetes/manifests - --configmaps=etcd-pod - --configmaps=etcd-endpoints - --configmaps=etcd-all-bundles - --secrets=etcd-all-certs - --cert-dir=/etc/kubernetes/static-pod-resources/etcd-certs - --cert-configmaps=restore-etcd-pod - --cert-configmaps=etcd-scripts - --cert-configmaps=etcd-all-bundles - --cert-secrets=etcd-all-certs command: - cluster-etcd-operator - installer env: - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: NODE_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: spec.nodeName image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f4d4282cb53325e737ad68abbfcb70687ae04fb50353f4f0ba0ba5703b15009a imagePullPolicy: IfNotPresent name: installer resources: limits: cpu: 150m memory: 200M requests: cpu: 150m memory: 200M securityContext: privileged: true runAsUser: 0 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /etc/kubernetes/ name: kubelet-dir - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - mountPath: /var/lock name: var-lock dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: installer-sa-dockercfg-76wfq nodeName: master-0 preemptionPolicy: PreemptLowerPriority priority: 2000001000 priorityClassName: system-node-critical restartPolicy: Never schedulerName: default-scheduler securityContext: runAsUser: 0 serviceAccount: installer-sa serviceAccountName: installer-sa terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: - hostPath: path: /etc/kubernetes/ type: "" name: kubelet-dir - hostPath: path: /var/lock type: "" name: var-lock - name: kube-api-access projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3600 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2025-12-05T10:47:21Z" status: "False" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2025-12-05T10:46:44Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2025-12-05T10:47:21Z" reason: PodFailed status: "False" type: Ready - lastProbeTime: null lastTransitionTime: "2025-12-05T10:47:21Z" reason: PodFailed status: "False" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2025-12-05T10:46:44Z" status: "True" type: PodScheduled containerStatuses: - containerID: cri-o://2ea94dd01104138f23272416f98911388c3b177dca6ad44593587087deb08528 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f4d4282cb53325e737ad68abbfcb70687ae04fb50353f4f0ba0ba5703b15009a imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f4d4282cb53325e737ad68abbfcb70687ae04fb50353f4f0ba0ba5703b15009a lastState: {} name: installer ready: false restartCount: 0 started: false state: terminated: containerID: cri-o://2ea94dd01104138f23272416f98911388c3b177dca6ad44593587087deb08528 exitCode: 1 finishedAt: "2025-12-05T10:47:16Z" message: | "", Namespace: (string) (len=14) "openshift-etcd", Clock: (clock.RealClock) { }, PodConfigMapNamePrefix: (string) (len=8) "etcd-pod", SecretNamePrefixes: ([]string) (len=1 cap=1) { (string) (len=14) "etcd-all-certs" }, OptionalSecretNamePrefixes: ([]string) , ConfigMapNamePrefixes: ([]string) (len=3 cap=4) { (string) (len=8) "etcd-pod", (string) (len=14) "etcd-endpoints", (string) (len=16) "etcd-all-bundles" }, OptionalConfigMapNamePrefixes: ([]string) , CertSecretNames: ([]string) (len=1 cap=1) { (string) (len=14) "etcd-all-certs" }, OptionalCertSecretNamePrefixes: ([]string) , CertConfigMapNamePrefixes: ([]string) (len=3 cap=4) { (string) (len=16) "restore-etcd-pod", (string) (len=12) "etcd-scripts", (string) (len=16) "etcd-all-bundles" }, OptionalCertConfigMapNamePrefixes: ([]string) , CertDir: (string) (len=47) "/etc/kubernetes/static-pod-resources/etcd-certs", ResourceDir: (string) (len=36) "/etc/kubernetes/static-pod-resources", PodManifestDir: (string) (len=25) "/etc/kubernetes/manifests", Timeout: (time.Duration) 2m0s, StaticPodManifestsLockFile: (string) "", PodMutationFns: ([]installerpod.PodMutationFunc) , KubeletVersion: (string) "" }) I1205 10:46:46.571721 1 cmd.go:413] Getting controller reference for node master-0 I1205 10:46:46.584625 1 cmd.go:426] Waiting for installer revisions to settle for node master-0 I1205 10:46:46.584702 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I1205 10:46:46.584738 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I1205 10:46:46.668714 1 cmd.go:518] Waiting additional period after revisions have settled for node master-0 I1205 10:47:16.668781 1 cmd.go:524] Getting installer pods for node master-0 F1205 10:47:16.670172 1 cmd.go:109] Get "https://172.30.0.1:443/api/v1/namespaces/openshift-etcd/pods?labelSelector=app%3Dinstaller": dial tcp 172.30.0.1:443: connect: connection refused reason: Error startedAt: "2025-12-05T10:46:45Z" volumeMounts: - mountPath: /etc/kubernetes/ name: kubelet-dir - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true recursiveReadOnly: Disabled - mountPath: /var/lock name: var-lock hostIP: 192.168.32.10 hostIPs: - ip: 192.168.32.10 phase: Failed qosClass: Guaranteed startTime: "2025-12-05T10:46:44Z" - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.128.0.83/23"],"mac_address":"0a:58:0a:80:00:53","gateway_ips":["10.128.0.1"],"routes":[{"dest":"10.128.0.0/16","nextHop":"10.128.0.1"},{"dest":"172.30.0.0/16","nextHop":"10.128.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.128.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.128.0.1"}],"ip_address":"10.128.0.83/23","gateway_ip":"10.128.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.128.0.83" ], "mac": "0a:58:0a:80:00:53", "default": true, "dns": {} }] creationTimestamp: "2025-12-05T10:47:53Z" labels: app: installer managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: .: {} f:app: {} f:ownerReferences: .: {} k:{"uid":"ae8975cb-8534-4800-b039-12af83331959"}: {} f:spec: f:automountServiceAccountToken: {} f:containers: k:{"name":"installer"}: .: {} f:args: {} f:command: {} f:env: .: {} k:{"name":"NODE_NAME"}: .: {} f:name: {} f:valueFrom: .: {} f:fieldRef: {} k:{"name":"POD_NAME"}: .: {} f:name: {} f:valueFrom: .: {} f:fieldRef: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:resources: .: {} f:limits: .: {} f:cpu: {} f:memory: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:privileged: {} f:runAsUser: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/etc/kubernetes/"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/var/lock"}: .: {} f:mountPath: {} f:name: {} k:{"mountPath":"/var/run/secrets/kubernetes.io/serviceaccount"}: .: {} f:mountPath: {} f:name: {} f:readOnly: {} f:dnsPolicy: {} f:enableServiceLinks: {} f:nodeName: {} f:priorityClassName: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: .: {} f:runAsUser: {} f:serviceAccount: {} f:serviceAccountName: {} f:terminationGracePeriodSeconds: {} f:tolerations: {} f:volumes: .: {} k:{"name":"kube-api-access"}: .: {} f:name: {} f:projected: .: {} f:defaultMode: {} f:sources: {} k:{"name":"kubelet-dir"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} k:{"name":"var-lock"}: .: {} f:hostPath: .: {} f:path: {} f:type: {} f:name: {} manager: cluster-etcd-operator operation: Update time: "2025-12-05T10:47:53Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:k8s.ovn.org/pod-networks: {} manager: master-0 operation: Update subresource: status time: "2025-12-05T10:47:53Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.v1.cni.cncf.io/network-status: {} manager: multus-daemon operation: Update subresource: status time: "2025-12-05T10:47:53Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"ContainersReady"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} k:{"type":"Initialized"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} k:{"type":"PodReadyToStartContainers"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"PodScheduled"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:status: {} f:type: {} k:{"type":"Ready"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:reason: {} f:status: {} f:type: {} f:containerStatuses: {} f:hostIP: {} f:hostIPs: {} f:phase: {} f:podIP: {} f:podIPs: .: {} k:{"ip":"10.128.0.83"}: .: {} f:ip: {} f:startTime: {} manager: kubelet operation: Update subresource: status time: "2025-12-05T10:53:10Z" name: installer-2-retry-1-master-0 namespace: openshift-etcd ownerReferences: - apiVersion: v1 kind: ConfigMap name: revision-status-2 uid: ae8975cb-8534-4800-b039-12af83331959 resourceVersion: "14220" uid: ee0f69ec-1862-4016-bf9d-7edf6554f473 spec: automountServiceAccountToken: false containers: - args: - -v=2 - --revision=2 - --namespace=openshift-etcd - --pod=etcd-pod - --resource-dir=/etc/kubernetes/static-pod-resources - --pod-manifest-dir=/etc/kubernetes/manifests - --configmaps=etcd-pod - --configmaps=etcd-endpoints - --configmaps=etcd-all-bundles - --secrets=etcd-all-certs - --cert-dir=/etc/kubernetes/static-pod-resources/etcd-certs - --cert-configmaps=restore-etcd-pod - --cert-configmaps=etcd-scripts - --cert-configmaps=etcd-all-bundles - --cert-secrets=etcd-all-certs command: - cluster-etcd-operator - installer env: - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: NODE_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: spec.nodeName image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f4d4282cb53325e737ad68abbfcb70687ae04fb50353f4f0ba0ba5703b15009a imagePullPolicy: IfNotPresent name: installer resources: limits: cpu: 150m memory: 200M requests: cpu: 150m memory: 200M securityContext: privileged: true runAsUser: 0 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /etc/kubernetes/ name: kubelet-dir - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true - mountPath: /var/lock name: var-lock dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: installer-sa-dockercfg-76wfq nodeName: master-0 preemptionPolicy: PreemptLowerPriority priority: 2000001000 priorityClassName: system-node-critical restartPolicy: Never schedulerName: default-scheduler securityContext: runAsUser: 0 serviceAccount: installer-sa serviceAccountName: installer-sa terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: - hostPath: path: /etc/kubernetes/ type: "" name: kubelet-dir - hostPath: path: /var/lock type: "" name: var-lock - name: kube-api-access projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3600 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2025-12-05T10:48:43Z" status: "False" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2025-12-05T10:47:53Z" reason: PodCompleted status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2025-12-05T10:48:42Z" reason: PodCompleted status: "False" type: Ready - lastProbeTime: null lastTransitionTime: "2025-12-05T10:48:42Z" reason: PodCompleted status: "False" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2025-12-05T10:47:53Z" status: "True" type: PodScheduled containerStatuses: - containerID: cri-o://65a2979f50126cee418c5079b957bacb2ab47de1f45bc884591b9006fd791955 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f4d4282cb53325e737ad68abbfcb70687ae04fb50353f4f0ba0ba5703b15009a imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f4d4282cb53325e737ad68abbfcb70687ae04fb50353f4f0ba0ba5703b15009a lastState: {} name: installer ready: false restartCount: 0 started: false state: terminated: containerID: cri-o://65a2979f50126cee418c5079b957bacb2ab47de1f45bc884591b9006fd791955 exitCode: 0 finishedAt: "2025-12-05T10:48:41Z" reason: Completed startedAt: "2025-12-05T10:47:53Z" volumeMounts: - mountPath: /etc/kubernetes/ name: kubelet-dir - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access readOnly: true recursiveReadOnly: Disabled - mountPath: /var/lock name: var-lock hostIP: 192.168.32.10 hostIPs: - ip: 192.168.32.10 phase: Succeeded podIP: 10.128.0.83 podIPs: - ip: 10.128.0.83 qosClass: Guaranteed startTime: "2025-12-05T10:47:53Z" kind: PodList metadata: resourceVersion: "51617"