---
apiVersion: operator.openshift.io/v1
kind: KubeAPIServer
metadata:
  annotations:
    include.release.openshift.io/self-managed-high-availability: "true"
    release.openshift.io/create-only: "true"
  creationTimestamp: "2022-03-08T10:14:15Z"
  generation: 4
  managedFields:
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .: {}
          f:include.release.openshift.io/self-managed-high-availability: {}
          f:release.openshift.io/create-only: {}
      f:spec:
        .: {}
        f:logLevel: {}
        f:managementState: {}
        f:operatorLogLevel: {}
    manager: cluster-version-operator
    operation: Update
    time: "2022-03-08T10:14:15Z"
  - apiVersion: operator.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:spec:
        f:observedConfig:
          .: {}
          f:admission: {}
          f:apiServerArguments: {}
          f:authConfig: {}
          f:corsAllowedOrigins: {}
          f:imagePolicyConfig: {}
          f:servicesSubnet: {}
          f:servingInfo: {}
        f:unsupportedConfigOverrides: {}
      f:status:
        .: {}
        f:conditions: {}
        f:latestAvailableRevision: {}
        f:latestAvailableRevisionReason: {}
        f:nodeStatuses: {}
        f:readyReplicas: {}
    manager: cluster-kube-apiserver-operator
    operation: Update
    time: "2022-03-08T11:01:08Z"
  name: cluster
  resourceVersion: "30458"
  selfLink: /apis/operator.openshift.io/v1/kubeapiservers/cluster
  uid: c3b9a08d-7420-4ac5-a9c0-5e5aae2142d0
spec:
  logLevel: Normal
  managementState: Managed
  observedConfig:
    admission:
      pluginConfig:
        network.openshift.io/ExternalIPRanger:
          configuration:
            allowIngressIP: false
            apiVersion: network.openshift.io/v1
            kind: ExternalIPRangerAdmissionConfig
        network.openshift.io/RestrictedEndpointsAdmission:
          configuration:
            apiVersion: network.openshift.io/v1
            kind: RestrictedEndpointsAdmissionConfig
            restrictedCIDRs:
            - 10.128.0.0/14
            - 172.30.0.0/16
    apiServerArguments:
      audit-policy-file:
      - /etc/kubernetes/static-pod-resources/configmaps/kube-apiserver-audit-policies/default.yaml
      etcd-servers:
      - https://10.0.94.119:2379
      - https://10.0.94.219:2379
      - https://10.0.95.76:2379
      - https://localhost:2379
      feature-gates:
      - APIPriorityAndFairness=true
      - RotateKubeletServerCertificate=true
      - SupportPodPidsLimit=true
      - NodeDisruptionExclusion=true
      - ServiceNodeExclusion=true
      - SCTPSupport=true
      - LegacyNodeRoleBehavior=false
    authConfig:
      oauthMetadataFile: /etc/kubernetes/static-pod-resources/configmaps/oauth-metadata/oauthMetadata
    corsAllowedOrigins:
    - //127\.0\.0\.1(:|$)
    - //localhost(:|$)
    imagePolicyConfig:
      internalRegistryHostname: image-registry.openshift-image-registry.svc:5000
    servicesSubnet: 172.30.0.0/16
    servingInfo:
      bindAddress: 0.0.0.0:6443
      bindNetwork: tcp4
      cipherSuites:
      - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
      - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
      - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
      - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
      - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
      - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
      minTLSVersion: VersionTLS12
      namedCertificates:
      - certFile: /etc/kubernetes/static-pod-certs/secrets/localhost-serving-cert-certkey/tls.crt
        keyFile: /etc/kubernetes/static-pod-certs/secrets/localhost-serving-cert-certkey/tls.key
      - certFile: /etc/kubernetes/static-pod-certs/secrets/service-network-serving-certkey/tls.crt
        keyFile: /etc/kubernetes/static-pod-certs/secrets/service-network-serving-certkey/tls.key
      - certFile: /etc/kubernetes/static-pod-certs/secrets/external-loadbalancer-serving-certkey/tls.crt
        keyFile: /etc/kubernetes/static-pod-certs/secrets/external-loadbalancer-serving-certkey/tls.key
      - certFile: /etc/kubernetes/static-pod-certs/secrets/internal-loadbalancer-serving-certkey/tls.crt
        keyFile: /etc/kubernetes/static-pod-certs/secrets/internal-loadbalancer-serving-certkey/tls.key
      - certFile: /etc/kubernetes/static-pod-resources/secrets/localhost-recovery-serving-certkey/tls.crt
        keyFile: /etc/kubernetes/static-pod-resources/secrets/localhost-recovery-serving-certkey/tls.key
  operatorLogLevel: Normal
  unsupportedConfigOverrides: null
status:
  conditions:
  - lastTransitionTime: "2022-03-08T10:38:51Z"
    reason: AllowedFeatureGates_
    status: "True"
    type: FeatureGatesUpgradeable
  - lastTransitionTime: "2022-03-08T10:38:51Z"
    reason: NoWebhookTokenAuthenticatorConfigured
    status: "True"
    type: AuthenticationConfigUpgradeable
  - lastTransitionTime: "2022-03-08T10:44:53Z"
    status: "False"
    type: StaticPodsDegraded
  - lastTransitionTime: "2022-03-08T10:40:16Z"
    reason: AsExpected
    status: "False"
    type: NodeKubeconfigControllerDegraded
  - lastTransitionTime: "2022-03-08T10:38:56Z"
    message: All master nodes are ready
    reason: MasterNodesReady
    status: "False"
    type: NodeControllerDegraded
  - lastTransitionTime: "2022-03-08T10:38:58Z"
    status: "False"
    type: EncryptionMigrationControllerDegraded
  - lastTransitionTime: "2022-03-08T10:38:58Z"
    status: "False"
    type: EncryptionMigrationControllerProgressing
  - lastTransitionTime: "2022-03-08T10:39:00Z"
    status: "False"
    type: InstallerPodPendingDegraded
  - lastTransitionTime: "2022-03-08T10:39:00Z"
    status: "False"
    type: InstallerPodContainerWaitingDegraded
  - lastTransitionTime: "2022-03-08T10:39:00Z"
    status: "False"
    type: InstallerPodNetworkingDegraded
  - lastTransitionTime: "2022-03-08T10:40:34Z"
    status: "False"
    type: InstallerControllerDegraded
  - lastTransitionTime: "2022-03-08T10:41:11Z"
    message: 3 nodes are active; 3 nodes are at revision 5
    status: "True"
    type: StaticPodsAvailable
  - lastTransitionTime: "2022-03-08T11:11:40Z"
    message: 3 nodes are at revision 5
    reason: AllNodesAtLatestRevision
    status: "False"
    type: NodeInstallerProgressing
  - lastTransitionTime: "2022-03-08T10:51:25Z"
    status: "False"
    type: NodeInstallerDegraded
  - lastTransitionTime: "2022-03-08T10:44:10Z"
    status: "False"
    type: ResourceSyncControllerDegraded
  - lastTransitionTime: "2022-03-08T10:39:17Z"
    reason: DefaultCertRotationBase
    status: "True"
    type: CertRotationTimeUpgradeable
  - lastTransitionTime: "2022-03-08T10:39:30Z"
    status: "False"
    type: CertRotation_LocalhostRecoveryServing_Degraded
  - lastTransitionTime: "2022-03-08T10:39:34Z"
    status: "False"
    type: CertRotation_KubeSchedulerClient_Degraded
  - lastTransitionTime: "2022-03-08T10:39:38Z"
    reason: NoUnsupportedConfigOverrides
    status: "True"
    type: UnsupportedConfigOverridesUpgradeable
  - lastTransitionTime: "2022-03-08T10:39:53Z"
    status: "False"
    type: CertRotation_KubeControllerManagerClient_Degraded
  - lastTransitionTime: "2022-03-08T10:39:57Z"
    status: "False"
    type: EncryptionStateControllerDegraded
  - lastTransitionTime: "2022-03-08T10:40:02Z"
    status: "False"
    type: CertRotation_NodeSystemAdminClient_Degraded
  - lastTransitionTime: "2022-03-08T10:40:03Z"
    status: "False"
    type: CertRotation_ControlPlaneNodeAdminClient_Degraded
  - lastTransitionTime: "2022-03-08T10:40:03Z"
    status: "False"
    type: CertRotation_LocalhostServing_Degraded
  - lastTransitionTime: "2022-03-08T10:40:05Z"
    status: "False"
    type: CertRotation_KubeAPIServerToKubeletClientCert_Degraded
  - lastTransitionTime: "2022-03-08T10:40:06Z"
    status: "False"
    type: EncryptionPruneControllerDegraded
  - lastTransitionTime: "2022-03-08T10:40:07Z"
    status: "False"
    type: CertRotation_CheckEndpointsClient_Degraded
  - lastTransitionTime: "2022-03-08T10:40:09Z"
    status: "False"
    type: CertRotation_AggregatorProxyClientCert_Degraded
  - lastTransitionTime: "2022-03-08T10:40:11Z"
    status: "False"
    type: CertRotation_InternalLoadBalancerServing_Degraded
  - lastTransitionTime: "2022-03-08T10:40:13Z"
    status: "False"
    type: CertRotation_ServiceNetworkServing_Degraded
  - lastTransitionTime: "2022-03-08T10:40:14Z"
    reason: AsExpected
    status: "False"
    type: BackingResourceControllerDegraded
  - lastTransitionTime: "2022-03-08T10:40:17Z"
    status: "False"
    type: CertRotation_ExternalLoadBalancerServing_Degraded
  - lastTransitionTime: "2022-03-08T10:40:18Z"
    status: "False"
    type: ConfigObservationDegraded
  - lastTransitionTime: "2022-03-08T10:40:20Z"
    status: "False"
    type: TargetConfigControllerDegraded
  - lastTransitionTime: "2022-03-08T10:40:20Z"
    status: "False"
    type: EncryptionKeyControllerDegraded
  - lastTransitionTime: "2022-03-08T10:40:21Z"
    reason: AsExpected
    status: "False"
    type: KubeAPIServerStaticResourcesDegraded
  - lastTransitionTime: "2022-03-08T11:01:55Z"
    status: "False"
    type: RevisionControllerDegraded
  - lastTransitionTime: "2022-03-08T10:45:05Z"
    message: Encryption is not enabled
    reason: EncryptionDisabled
    status: "False"
    type: Encrypted
  latestAvailableRevision: 5
  latestAvailableRevisionReason: ""
  nodeStatuses:
  - currentRevision: 5
    nodeName: master-1.case03116926.lab.upshift.rdu2.redhat.com
  - currentRevision: 5
    nodeName: master-2.case03116926.lab.upshift.rdu2.redhat.com
  - currentRevision: 5
    nodeName: master-0.case03116926.lab.upshift.rdu2.redhat.com
  readyReplicas: 0
