4.13
HostedCluster
apiVersion: hypershift.openshift.io/v1beta1
kind: HostedCluster
metadata:
annotations:
hypershift.openshift.io/disable-pki-reconciliation: "true"
hypershift.openshift.io/disable-profiling: kube-apiserver, kube-scheduler, kube-controller-manager
hypershift.openshift.io/force-upgrade-to: us.icr.io/armada-master/ocp-release:4.13.0-x86_64
idpoverrides.hypershift.openshift.io/IAM: |
{"urls": {"authorize": "https://iam.test.cloud.ibm.com/identity/authorize", "userInfo": "https://iam.test.cloud.ibm.com/identity/userinfo", "token": "https://iam.test.cloud.ibm.com/identity/ACCOUNTID/token"}, "claims": {"id": ["iam_id"], "email": ["email"], "name": ["name"], "preferredUsername": ["preferred_username"]}, "challenge": true}
oauth.hypershift.openshift.io/login-url-override: https://s9bcaafaec11e1f50b3d0-d603ff82e51c94176a53d44566df9d79-ce00.us-south.satellite.test.appdomain.cloud:32750
finalizers:
- hypershift.openshift.io/finalizer
labels:
clusterid: civ8kn910u3bkslbt6lg
name: civ8kn910u3bkslbt6lg
namespace: master
spec:
autoscaling: {}
clusterID: e54fe2bd-cc45-46e1-8272-f1053ffd4b71
configuration:
apiServer:
audit:
profile: None
clientCA:
name: ""
encryption: {}
servingCerts:
namedCertificates:
- names:
- s9bcaafaec11e1f50b3d0-d603ff82e51c94176a53d44566df9d79-ce00.us-south.satellite.test.appdomain.cloud
servingCertificate:
name: ibm-named-certs
tlsSecurityProfile:
custom:
ciphers:
- ECDHE-ECDSA-AES128-GCM-SHA256
- ECDHE-RSA-AES128-GCM-SHA256
- ECDHE-ECDSA-AES256-GCM-SHA384
- ECDHE-RSA-AES256-GCM-SHA384
- ECDHE-ECDSA-CHACHA20-POLY1305
- ECDHE-RSA-CHACHA20-POLY1305
minTLSVersion: VersionTLS12
type: Custom
featureGate:
customNoUpgrade:
disabled:
- RetroactiveDefaultStorageClass
enabled:
- RotateKubeletServerCertificate
featureSet: CustomNoUpgrade
ingress:
domain: sat-e2e-16902088-9e37478581b5d9de33607f5926d1d18f-0000.us-south.prestg.stg.containers.appdomain.cloud
loadBalancer:
platform:
type: ""
oauth:
identityProviders:
- mappingMethod: lookup
name: IAM
openID:
claims:
email:
- email
name:
- name
preferredUsername:
- preferred_username
clientID: CLIENTID
clientSecret:
name: hypershift-ibm-iam-clientsecret
issuer: https://iam.test.cloud.ibm.com/identity
type: OpenID
templates:
error:
name: ""
login:
name: ""
providerSelection:
name: ""
tokenConfig: {}
controllerAvailabilityPolicy: HighlyAvailable
dns:
baseDomain: sat-e2e-16902088-9e37478581b5d9de33607f5926d1d18f-0000.us-south.prestg.stg.containers.appdomain.cloud
etcd:
managementType: Unmanaged
unmanaged:
endpoint: https://etcd-civ8kn910u3bkslbt6lg-client:2379
tls:
clientSecret:
name: civ8kn910u3bkslbt6lg-etcd-client-tls
fips: false
imageContentSources:
- mirrors:
- us.icr.io/armada-master/ocp-release
source: quay.io/openshift-release-dev/ocp-release
- mirrors:
- us.icr.io/armada-master/ocp-release
source: quay.io/openshift-release-dev/ocp-v4.0-art-dev
infraID: civ8kn910u3bkslbt6lg
infrastructureAvailabilityPolicy: HighlyAvailable
issuerURL: https://kubernetes.default.svc
networking:
apiServer:
advertiseAddress: 172.20.0.1
port: 2040
clusterNetwork:
- cidr: 172.30.0.0/16
machineNetwork:
- cidr: 172.30.0.0/16
networkType: Calico
serviceNetwork:
- cidr: 172.21.0.0/16
olmCatalogPlacement: guest
platform:
ibmcloud:
providerType: UPI
type: IBMCloud
pullSecret:
name: civ8kn910u3bkslbt6lg-pull-secret
release:
image: us.icr.io/armada-master/ocp-release:4.13.0-x86_64
services:
- service: APIServer
servicePublishingStrategy:
nodePort:
address: s9bcaafaec11e1f50b3d0-d603ff82e51c94176a53d44566df9d79-c000.us-south.satellite.test.appdomain.cloud
port: 32750
type: NodePort
- service: OAuthServer
servicePublishingStrategy:
nodePort:
address: s9bcaafaec11e1f50b3d0-d603ff82e51c94176a53d44566df9d79-ce00.us-south.satellite.test.appdomain.cloud
port: 32407
type: NodePort
- service: Konnectivity
servicePublishingStrategy:
nodePort:
address: s9bcaafaec11e1f50b3d0-d603ff82e51c94176a53d44566df9d79-ce00.us-south.satellite.test.appdomain.cloud
port: 32287
type: NodePort
- service: Ignition
servicePublishingStrategy:
nodePort:
address: s9bcaafaec11e1f50b3d0-d603ff82e51c94176a53d44566df9d79-ce00.us-south.satellite.test.appdomain.cloud
port: 30284
type: NodePort
sshKey: {}
HostedControlPlane
apiVersion: hypershift.openshift.io/v1beta1
kind: HostedControlPlane
metadata:
annotations:
hypershift.openshift.io/cluster: master/civ8kn910u3bkslbt6lg
hypershift.openshift.io/disable-pki-reconciliation: "true"
hypershift.openshift.io/disable-profiling: kube-apiserver, kube-scheduler, kube-controller-manager
idpoverrides.hypershift.openshift.io/IAM: |
{"urls": {"authorize": "https://iam.test.cloud.ibm.com/identity/authorize", "userInfo": "https://iam.test.cloud.ibm.com/identity/userinfo", "token": "https://iam.test.cloud.ibm.com/identity/ACCOUNTID/token"}, "claims": {"id": ["iam_id"], "email": ["email"], "name": ["name"], "preferredUsername": ["preferred_username"]}, "challenge": true}
oauth.hypershift.openshift.io/login-url-override: https://s9bcaafaec11e1f50b3d0-d603ff82e51c94176a53d44566df9d79-ce00.us-south.satellite.test.appdomain.cloud:32750
finalizers:
- hypershift.openshift.io/finalizer
name: civ8kn910u3bkslbt6lg
namespace: master-civ8kn910u3bkslbt6lg
spec:
autoscaling: {}
clusterID: e54fe2bd-cc45-46e1-8272-f1053ffd4b71
configuration:
apiServer:
audit:
profile: None
clientCA:
name: ""
encryption: {}
servingCerts:
namedCertificates:
- names:
- s9bcaafaec11e1f50b3d0-d603ff82e51c94176a53d44566df9d79-ce00.us-south.satellite.test.appdomain.cloud
servingCertificate:
name: ibm-named-certs
tlsSecurityProfile:
custom:
ciphers:
- ECDHE-ECDSA-AES128-GCM-SHA256
- ECDHE-RSA-AES128-GCM-SHA256
- ECDHE-ECDSA-AES256-GCM-SHA384
- ECDHE-RSA-AES256-GCM-SHA384
- ECDHE-ECDSA-CHACHA20-POLY1305
- ECDHE-RSA-CHACHA20-POLY1305
minTLSVersion: VersionTLS12
type: Custom
featureGate:
customNoUpgrade:
disabled:
- RetroactiveDefaultStorageClass
enabled:
- RotateKubeletServerCertificate
featureSet: CustomNoUpgrade
ingress:
domain: sat-e2e-16902088-9e37478581b5d9de33607f5926d1d18f-0000.us-south.prestg.stg.containers.appdomain.cloud
loadBalancer:
platform:
type: ""
oauth:
identityProviders:
- mappingMethod: lookup
name: IAM
openID:
ca:
name: ""
claims:
email:
- email
name:
- name
preferredUsername:
- preferred_username
clientID: CLIENTID
clientSecret:
name: hypershift-ibm-iam-clientsecret
issuer: https://iam.test.cloud.ibm.com/identity
type: OpenID
templates:
error:
name: ""
login:
name: ""
providerSelection:
name: ""
tokenConfig: {}
controllerAvailabilityPolicy: HighlyAvailable
dns:
baseDomain: sat-e2e-16902088-9e37478581b5d9de33607f5926d1d18f-0000.us-south.prestg.stg.containers.appdomain.cloud
etcd:
managementType: Unmanaged
unmanaged:
endpoint: https://etcd-civ8kn910u3bkslbt6lg-client:2379
tls:
clientSecret:
name: civ8kn910u3bkslbt6lg-etcd-client-tls
fips: false
imageContentSources:
- mirrors:
- us.icr.io/armada-master/ocp-release
source: quay.io/openshift-release-dev/ocp-release
- mirrors:
- us.icr.io/armada-master/ocp-release
source: quay.io/openshift-release-dev/ocp-v4.0-art-dev
infraID: civ8kn910u3bkslbt6lg
infrastructureAvailabilityPolicy: HighlyAvailable
issuerURL: https://kubernetes.default.svc
networking:
apiServer:
advertiseAddress: 172.20.0.1
port: 2040
clusterNetwork:
- cidr: 172.30.0.0/16
machineNetwork:
- cidr: 172.30.0.0/16
networkType: Calico
serviceNetwork:
- cidr: 172.21.0.0/16
olmCatalogPlacement: guest
platform:
ibmcloud:
providerType: UPI
type: IBMCloud
pullSecret:
name: pull-secret
releaseImage: us.icr.io/armada-master/ocp-release:4.13.0-x86_64
services:
- service: APIServer
servicePublishingStrategy:
nodePort:
address: s9bcaafaec11e1f50b3d0-d603ff82e51c94176a53d44566df9d79-c000.us-south.satellite.test.appdomain.cloud
port: 32750
type: NodePort
- service: OAuthServer
servicePublishingStrategy:
nodePort:
address: s9bcaafaec11e1f50b3d0-d603ff82e51c94176a53d44566df9d79-ce00.us-south.satellite.test.appdomain.cloud
port: 32407
type: NodePort
- service: Konnectivity
servicePublishingStrategy:
nodePort:
address: s9bcaafaec11e1f50b3d0-d603ff82e51c94176a53d44566df9d79-ce00.us-south.satellite.test.appdomain.cloud
port: 32287
type: NodePort
- service: Ignition
servicePublishingStrategy:
nodePort:
address: s9bcaafaec11e1f50b3d0-d603ff82e51c94176a53d44566df9d79-ce00.us-south.satellite.test.appdomain.cloud
port: 30284
type: NodePort
sshKey: {}