---
apiVersion: v1
kind: Pod
metadata:
  annotations:
    openshift.io/scc: hostnetwork
    unsupported.do-not-use.openshift.io/override-liveness-grace-period-seconds: "10"
  creationTimestamp: "2022-03-08T10:39:53Z"
  generateName: router-default-5b76b97bbb-
  labels:
    ingresscontroller.operator.openshift.io/deployment-ingresscontroller: default
    pod-template-hash: 5b76b97bbb
  managedFields:
  - apiVersion: v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .: {}
          f:unsupported.do-not-use.openshift.io/override-liveness-grace-period-seconds: {}
        f:generateName: {}
        f:labels:
          .: {}
          f:ingresscontroller.operator.openshift.io/deployment-ingresscontroller: {}
          f:pod-template-hash: {}
        f:ownerReferences:
          .: {}
          k:{"uid":"5cb3ec22-4ab0-4a80-b4aa-351134b2050c"}:
            .: {}
            f:apiVersion: {}
            f:blockOwnerDeletion: {}
            f:controller: {}
            f:kind: {}
            f:name: {}
            f:uid: {}
      f:spec:
        f:containers:
          k:{"name":"router"}:
            .: {}
            f:env:
              .: {}
              k:{"name":"DEFAULT_CERTIFICATE_DIR"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"DEFAULT_DESTINATION_CA_PATH"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_ALLOW_WILDCARD_ROUTES"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_CANONICAL_HOSTNAME"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_CIPHERS"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_DISABLE_HTTP2"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_DISABLE_NAMESPACE_OWNERSHIP_CHECK"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_METRICS_TLS_CERT_FILE"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_METRICS_TLS_KEY_FILE"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_METRICS_TYPE"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_SERVICE_NAME"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_SERVICE_NAMESPACE"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_SET_FORWARDED_HEADERS"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"ROUTER_THREADS"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"SSL_MIN_VERSION"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"STATS_PASSWORD"}:
                .: {}
                f:name: {}
                f:valueFrom:
                  .: {}
                  f:secretKeyRef:
                    .: {}
                    f:key: {}
                    f:name: {}
              k:{"name":"STATS_PORT"}:
                .: {}
                f:name: {}
                f:value: {}
              k:{"name":"STATS_USERNAME"}:
                .: {}
                f:name: {}
                f:valueFrom:
                  .: {}
                  f:secretKeyRef:
                    .: {}
                    f:key: {}
                    f:name: {}
            f:image: {}
            f:imagePullPolicy: {}
            f:livenessProbe:
              .: {}
              f:failureThreshold: {}
              f:httpGet:
                .: {}
                f:host: {}
                f:path: {}
                f:port: {}
                f:scheme: {}
              f:initialDelaySeconds: {}
              f:periodSeconds: {}
              f:successThreshold: {}
              f:timeoutSeconds: {}
            f:name: {}
            f:ports:
              .: {}
              k:{"containerPort":80,"protocol":"TCP"}:
                .: {}
                f:containerPort: {}
                f:hostPort: {}
                f:name: {}
                f:protocol: {}
              k:{"containerPort":443,"protocol":"TCP"}:
                .: {}
                f:containerPort: {}
                f:hostPort: {}
                f:name: {}
                f:protocol: {}
              k:{"containerPort":1936,"protocol":"TCP"}:
                .: {}
                f:containerPort: {}
                f:hostPort: {}
                f:name: {}
                f:protocol: {}
            f:readinessProbe:
              .: {}
              f:failureThreshold: {}
              f:httpGet:
                .: {}
                f:host: {}
                f:path: {}
                f:port: {}
                f:scheme: {}
              f:initialDelaySeconds: {}
              f:periodSeconds: {}
              f:successThreshold: {}
              f:timeoutSeconds: {}
            f:resources:
              .: {}
              f:requests:
                .: {}
                f:cpu: {}
                f:memory: {}
            f:terminationMessagePath: {}
            f:terminationMessagePolicy: {}
            f:volumeMounts:
              .: {}
              k:{"mountPath":"/etc/pki/tls/metrics-certs"}:
                .: {}
                f:mountPath: {}
                f:name: {}
                f:readOnly: {}
              k:{"mountPath":"/etc/pki/tls/private"}:
                .: {}
                f:mountPath: {}
                f:name: {}
                f:readOnly: {}
              k:{"mountPath":"/var/run/configmaps/service-ca"}:
                .: {}
                f:mountPath: {}
                f:name: {}
                f:readOnly: {}
        f:dnsPolicy: {}
        f:enableServiceLinks: {}
        f:hostNetwork: {}
        f:nodeSelector:
          .: {}
          f:kubernetes.io/os: {}
          f:node-role.kubernetes.io/worker: {}
        f:priorityClassName: {}
        f:restartPolicy: {}
        f:schedulerName: {}
        f:securityContext: {}
        f:serviceAccount: {}
        f:serviceAccountName: {}
        f:terminationGracePeriodSeconds: {}
        f:volumes:
          .: {}
          k:{"name":"default-certificate"}:
            .: {}
            f:name: {}
            f:secret:
              .: {}
              f:defaultMode: {}
              f:secretName: {}
          k:{"name":"metrics-certs"}:
            .: {}
            f:name: {}
            f:secret:
              .: {}
              f:defaultMode: {}
              f:secretName: {}
          k:{"name":"service-ca-bundle"}:
            .: {}
            f:configMap:
              .: {}
              f:defaultMode: {}
              f:items: {}
              f:name: {}
              f:optional: {}
            f:name: {}
    manager: kube-controller-manager
    operation: Update
    time: "2022-03-08T10:39:53Z"
  - apiVersion: v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"PodScheduled"}:
            .: {}
            f:lastProbeTime: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: kube-scheduler
    operation: Update
    time: "2022-03-08T10:39:53Z"
  - apiVersion: v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          k:{"type":"ContainersReady"}:
            .: {}
            f:lastProbeTime: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"Initialized"}:
            .: {}
            f:lastProbeTime: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
          k:{"type":"Ready"}:
            .: {}
            f:lastProbeTime: {}
            f:lastTransitionTime: {}
            f:status: {}
            f:type: {}
        f:containerStatuses: {}
        f:hostIP: {}
        f:phase: {}
        f:podIP: {}
        f:podIPs:
          .: {}
          k:{"ip":"10.0.94.235"}:
            .: {}
            f:ip: {}
        f:startTime: {}
    manager: kubelet
    operation: Update
    time: "2022-03-08T10:47:47Z"
  name: router-default-5b76b97bbb-ltvlc
  namespace: openshift-ingress
  ownerReferences:
  - apiVersion: apps/v1
    blockOwnerDeletion: true
    controller: true
    kind: ReplicaSet
    name: router-default-5b76b97bbb
    uid: 5cb3ec22-4ab0-4a80-b4aa-351134b2050c
  resourceVersion: "20679"
  selfLink: /api/v1/namespaces/openshift-ingress/pods/router-default-5b76b97bbb-ltvlc
  uid: e1b9dafc-81de-4f00-9fe2-2976336b029e
spec:
  containers:
  - env:
    - name: STATS_PORT
      value: "1936"
    - name: ROUTER_SERVICE_NAMESPACE
      value: openshift-ingress
    - name: DEFAULT_CERTIFICATE_DIR
      value: /etc/pki/tls/private
    - name: DEFAULT_DESTINATION_CA_PATH
      value: /var/run/configmaps/service-ca/service-ca.crt
    - name: ROUTER_SERVICE_NAME
      value: default
    - name: STATS_USERNAME
      valueFrom:
        secretKeyRef:
          key: statsUsername
          name: router-stats-default
    - name: STATS_PASSWORD
      valueFrom:
        secretKeyRef:
          key: statsPassword
          name: router-stats-default
    - name: ROUTER_METRICS_TYPE
      value: haproxy
    - name: ROUTER_METRICS_TLS_CERT_FILE
      value: /etc/pki/tls/metrics-certs/tls.crt
    - name: ROUTER_METRICS_TLS_KEY_FILE
      value: /etc/pki/tls/metrics-certs/tls.key
    - name: ROUTER_CANONICAL_HOSTNAME
      value: apps.case03116926.lab.upshift.rdu2.redhat.com
    - name: ROUTER_THREADS
      value: "4"
    - name: ROUTER_CIPHERS
      value: TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384
    - name: SSL_MIN_VERSION
      value: TLSv1.2
    - name: ROUTER_DISABLE_NAMESPACE_OWNERSHIP_CHECK
      value: "false"
    - name: ROUTER_ALLOW_WILDCARD_ROUTES
      value: "false"
    - name: ROUTER_SET_FORWARDED_HEADERS
      value: append
    - name: ROUTER_DISABLE_HTTP2
      value: "true"
    image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:570ef2ff0e37e0933d0f9bbffd82bf3d119e96dfa0eb9c3f11ea9892c5d68384
    imagePullPolicy: IfNotPresent
    livenessProbe:
      failureThreshold: 3
      httpGet:
        host: localhost
        path: /healthz
        port: 1936
        scheme: HTTP
      initialDelaySeconds: 10
      periodSeconds: 10
      successThreshold: 1
      timeoutSeconds: 1
    name: router
    ports:
    - containerPort: 80
      hostPort: 80
      name: http
      protocol: TCP
    - containerPort: 443
      hostPort: 443
      name: https
      protocol: TCP
    - containerPort: 1936
      hostPort: 1936
      name: metrics
      protocol: TCP
    readinessProbe:
      failureThreshold: 3
      httpGet:
        host: localhost
        path: /healthz/ready
        port: 1936
        scheme: HTTP
      initialDelaySeconds: 10
      periodSeconds: 10
      successThreshold: 1
      timeoutSeconds: 1
    resources:
      requests:
        cpu: 100m
        memory: 256Mi
    securityContext:
      capabilities:
        drop:
        - KILL
        - MKNOD
        - SETGID
        - SETUID
      runAsUser: 1000540000
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: FallbackToLogsOnError
    volumeMounts:
    - mountPath: /etc/pki/tls/private
      name: default-certificate
      readOnly: true
    - mountPath: /var/run/configmaps/service-ca
      name: service-ca-bundle
      readOnly: true
    - mountPath: /etc/pki/tls/metrics-certs
      name: metrics-certs
      readOnly: true
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: router-token-vh2ps
      readOnly: true
  dnsPolicy: ClusterFirst
  enableServiceLinks: true
  hostNetwork: true
  nodeName: worker-2.case03116926.lab.upshift.rdu2.redhat.com
  nodeSelector:
    kubernetes.io/os: linux
    node-role.kubernetes.io/worker: ""
  preemptionPolicy: PreemptLowerPriority
  priority: 2000000000
  priorityClassName: system-cluster-critical
  restartPolicy: Always
  schedulerName: default-scheduler
  securityContext:
    fsGroup: 1000540000
    seLinuxOptions:
      level: s0:c23,c17
    supplementalGroups:
    - 1000540000
  serviceAccount: router
  serviceAccountName: router
  terminationGracePeriodSeconds: 3600
  tolerations:
  - effect: NoExecute
    key: node.kubernetes.io/not-ready
    operator: Exists
    tolerationSeconds: 300
  - effect: NoExecute
    key: node.kubernetes.io/unreachable
    operator: Exists
    tolerationSeconds: 300
  - effect: NoSchedule
    key: node.kubernetes.io/memory-pressure
    operator: Exists
  volumes:
  - name: default-certificate
    secret:
      defaultMode: 420
      secretName: router-certs-default
  - configMap:
      defaultMode: 420
      items:
      - key: service-ca.crt
        path: service-ca.crt
      name: service-ca-bundle
      optional: false
    name: service-ca-bundle
  - name: metrics-certs
    secret:
      defaultMode: 420
      secretName: router-metrics-certs-default
  - name: router-token-vh2ps
    secret:
      defaultMode: 420
      secretName: router-token-vh2ps
status:
  conditions:
  - lastProbeTime: null
    lastTransitionTime: "2022-03-08T10:47:30Z"
    status: "True"
    type: Initialized
  - lastProbeTime: null
    lastTransitionTime: "2022-03-08T10:47:47Z"
    status: "True"
    type: Ready
  - lastProbeTime: null
    lastTransitionTime: "2022-03-08T10:47:47Z"
    status: "True"
    type: ContainersReady
  - lastProbeTime: null
    lastTransitionTime: "2022-03-08T10:47:30Z"
    status: "True"
    type: PodScheduled
  containerStatuses:
  - containerID: cri-o://48b54db194291ffead19502625d60ced842932f5a98e9b2c60ab7de6a5e6490f
    image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:570ef2ff0e37e0933d0f9bbffd82bf3d119e96dfa0eb9c3f11ea9892c5d68384
    imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:570ef2ff0e37e0933d0f9bbffd82bf3d119e96dfa0eb9c3f11ea9892c5d68384
    lastState: {}
    name: router
    ready: true
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2022-03-08T10:47:35Z"
  hostIP: 10.0.94.235
  phase: Running
  podIP: 10.0.94.235
  podIPs:
  - ip: 10.0.94.235
  qosClass: Burstable
  startTime: "2022-03-08T10:47:30Z"
