{ "apiVersion": "v1", "items": [ { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/liveness-port": "Keeping upstream configs", "ignore-check.kube-linter.io/readiness-port": "Keeping upstream configs" }, "creationTimestamp": "2026-05-15T07:32:38Z", "generation": 1, "labels": { "control-plane": "controller-manager", "pod-template-hash": "5bf7994968" }, "name": "build-service-controller-manager-5bf7994968", "namespace": "build-service", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "build-service-controller-manager", "uid": "ec7d52e1-5443-4318-9eed-e79511e08ece" } ], "resourceVersion": "4889", "uid": "7fcb7ec3-a05a-419d-a693-e2f4e2156e89" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "controller-manager", "pod-template-hash": "5bf7994968" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager", "pod-template-hash": "5bf7994968" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8443", "--leader-elect=false", "--health-probe-bind-address=:8081" ], "command": [ "/manager" ], "env": [ { "name": "PAC_WEBHOOK_URL", "value": "https://hook.pipelinesascode.com/FMPGBULUKAyF" } ], "image": "quay.io/redhat-user-workloads/rhtap-build-tenant/build-service/build-service:on-pr-15f9670dfa710c520d8ad74e3503863e226c490d", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "1Gi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/ssl/certs/ca-custom-bundle.crt", "name": "trusted-ca", "readOnly": true, "subPath": "ca-bundle.crt" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "build-service-controller-manager", "serviceAccountName": "build-service-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "trusted-ca" }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-15T07:28:55Z", "generation": 1, "labels": { "app": "cainjector", "app.kubernetes.io/component": "cainjector", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "cainjector", "app.kubernetes.io/version": "v1.19.4", "helm.sh/chart": "cert-manager-v1.19.4", "pod-template-hash": "5d6f5bdbd9" }, "name": "cert-manager-cainjector-5d6f5bdbd9", "namespace": "cert-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cert-manager-cainjector", "uid": "b8b6f62f-255c-4b15-a34a-65dcdf1eca67" } ], "resourceVersion": "1167", "uid": "bbd04036-7210-4104-bc02-5a5394d17530" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "cainjector", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "cainjector", "pod-template-hash": "5d6f5bdbd9" } }, "template": { "metadata": { "annotations": { "prometheus.io/path": "/metrics", "prometheus.io/port": "9402", "prometheus.io/scrape": "true" }, "creationTimestamp": null, "labels": { "app": "cainjector", "app.kubernetes.io/component": "cainjector", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "cainjector", "app.kubernetes.io/version": "v1.19.4", "helm.sh/chart": "cert-manager-v1.19.4", "pod-template-hash": "5d6f5bdbd9" } }, "spec": { "containers": [ { "args": [ "--v=2", "--leader-election-namespace=kube-system" ], "env": [ { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/jetstack/cert-manager-cainjector:v1.19.4", "imagePullPolicy": "IfNotPresent", "name": "cert-manager-cainjector", "ports": [ { "containerPort": 9402, "name": "http-metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "120m", "memory": "120Mi" }, "requests": { "cpu": "90m", "memory": "90Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cert-manager-cainjector", "serviceAccountName": "cert-manager-cainjector", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-15T07:28:55Z", "generation": 1, "labels": { "app": "cert-manager", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "cert-manager", "app.kubernetes.io/version": "v1.19.4", "helm.sh/chart": "cert-manager-v1.19.4", "pod-template-hash": "ffd797b94" }, "name": "cert-manager-ffd797b94", "namespace": "cert-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cert-manager", "uid": "3417b1f5-68e4-460e-9c83-fe81f27ab286" } ], "resourceVersion": "1175", "uid": "feaf18f6-93ca-4cd4-9c37-9a63a92fe7cb" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "cert-manager", "pod-template-hash": "ffd797b94" } }, "template": { "metadata": { "annotations": { "prometheus.io/path": "/metrics", "prometheus.io/port": "9402", "prometheus.io/scrape": "true" }, "creationTimestamp": null, "labels": { "app": "cert-manager", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "cert-manager", "app.kubernetes.io/version": "v1.19.4", "helm.sh/chart": "cert-manager-v1.19.4", "pod-template-hash": "ffd797b94" } }, "spec": { "containers": [ { "args": [ "--v=2", "--cluster-resource-namespace=$(POD_NAMESPACE)", "--leader-election-namespace=kube-system", "--acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.19.4", "--max-concurrent-challenges=60" ], "env": [ { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/jetstack/cert-manager-controller:v1.19.4", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 8, "httpGet": { "path": "/livez", "port": "http-healthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 15 }, "name": "cert-manager-controller", "ports": [ { "containerPort": 9402, "name": "http-metrics", "protocol": "TCP" }, { "containerPort": 9403, "name": "http-healthz", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "120m", "memory": "120Mi" }, "requests": { "cpu": "90m", "memory": "90Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cert-manager", "serviceAccountName": "cert-manager", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-15T07:28:55Z", "generation": 1, "labels": { "app": "webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/version": "v1.19.4", "helm.sh/chart": "cert-manager-v1.19.4", "pod-template-hash": "7dc4fb7b5b" }, "name": "cert-manager-webhook-7dc4fb7b5b", "namespace": "cert-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cert-manager-webhook", "uid": "cb7fb7ae-d964-4e5d-9a5d-da705580afe8" } ], "resourceVersion": "1189", "uid": "eec2aff5-873a-42ec-b065-0f92a8a3bc79" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "webhook", "pod-template-hash": "7dc4fb7b5b" } }, "template": { "metadata": { "annotations": { "prometheus.io/path": "/metrics", "prometheus.io/port": "9402", "prometheus.io/scrape": "true" }, "creationTimestamp": null, "labels": { "app": "webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/version": "v1.19.4", "helm.sh/chart": "cert-manager-v1.19.4", "pod-template-hash": "7dc4fb7b5b" } }, "spec": { "containers": [ { "args": [ "--v=2", "--secure-port=10250", "--dynamic-serving-ca-secret-namespace=$(POD_NAMESPACE)", "--dynamic-serving-ca-secret-name=cert-manager-webhook-ca", "--dynamic-serving-dns-names=cert-manager-webhook", "--dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE)", "--dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE).svc" ], "env": [ { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/jetstack/cert-manager-webhook:v1.19.4", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/livez", "port": "healthcheck", "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "cert-manager-webhook", "ports": [ { "containerPort": 10250, "name": "https", "protocol": "TCP" }, { "containerPort": 6080, "name": "healthcheck", "protocol": "TCP" }, { "containerPort": 9402, "name": "http-metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "healthcheck", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "120m", "memory": "120Mi" }, "requests": { "cpu": "90m", "memory": "90Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cert-manager-webhook", "serviceAccountName": "cert-manager-webhook", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/readiness-port": "Keeping upstream configs" }, "creationTimestamp": "2026-05-15T07:29:08Z", "generation": 1, "labels": { "app": "trust-manager", "app.kubernetes.io/instance": "trust-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "trust-manager", "app.kubernetes.io/version": "v0.21.0", "helm.sh/chart": "trust-manager-v0.21.0", "pod-template-hash": "5d5c6867f9" }, "name": "trust-manager-5d5c6867f9", "namespace": "cert-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "trust-manager", "uid": "9462092a-8f5d-4298-87ff-98f2a4797e3c" } ], "resourceVersion": "1303", "uid": "c9076bbf-08e7-48d3-b9b5-9ef12babb752" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "trust-manager", "pod-template-hash": "5d5c6867f9" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "trust-manager", "app.kubernetes.io/instance": "trust-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "trust-manager", "app.kubernetes.io/version": "v0.21.0", "helm.sh/chart": "trust-manager-v0.21.0", "pod-template-hash": "5d5c6867f9" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--log-format=text", "--log-level=1", "--metrics-port=9402", "--readiness-probe-port=6060", "--readiness-probe-path=/readyz", "--leader-elect=true", "--leader-election-lease-duration=15s", "--leader-election-renew-deadline=10s", "--trust-namespace=cert-manager", "--webhook-host=0.0.0.0", "--webhook-port=6443", "--webhook-certificate-dir=/tls", "--default-package-location=/packages/cert-manager-package-debian.json" ], "image": "quay.io/jetstack/trust-manager:v0.21.0", "imagePullPolicy": "IfNotPresent", "name": "trust-manager", "ports": [ { "containerPort": 6443, "name": "webhook", "protocol": "TCP" }, { "containerPort": 9402, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 6060, "scheme": "HTTP" }, "initialDelaySeconds": 3, "periodSeconds": 7, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "100m", "memory": "250Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tls", "name": "tls", "readOnly": true }, { "mountPath": "/packages", "name": "packages", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "/copyandmaybepause", "/debian-package", "/packages" ], "image": "quay.io/jetstack/trust-pkg-debian-bookworm:20230311-deb12u1.4", "imagePullPolicy": "IfNotPresent", "name": "cert-manager-package-debian", "resources": { "limits": { "cpu": "100m", "memory": "250Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/packages", "name": "packages" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "trust-manager", "serviceAccountName": "trust-manager", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": { "sizeLimit": "50M" }, "name": "packages" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "trust-manager-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-15T07:31:21Z", "generation": 1, "labels": { "app": "dex", "pod-template-hash": "7fbffb5f98" }, "name": "dex-7fbffb5f98", "namespace": "dex", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "dex", "uid": "ae39576e-ab8d-4092-9d1e-b50233dbc8d3" } ], "resourceVersion": "3576", "uid": "79bbcb00-7de2-4f37-9012-be05b9ab6129" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "dex", "pod-template-hash": "7fbffb5f98" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "dex", "pod-template-hash": "7fbffb5f98" } }, "spec": { "containers": [ { "command": [ "/usr/local/bin/dex", "serve", "/etc/dex/cfg/config.yaml" ], "env": [ { "name": "CLIENT_SECRET", "valueFrom": { "secretKeyRef": { "key": "client-secret", "name": "oauth2-proxy-client-secret" } } } ], "image": "ghcr.io/dexidp/dex:v2.45.1", "imagePullPolicy": "IfNotPresent", "name": "dex", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" }, { "containerPort": 5558, "name": "telemetry", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/ready", "port": "telemetry", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "50m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/dex/cfg", "name": "dex" }, { "mountPath": "/etc/dex/tls", "name": "tls" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "dex", "serviceAccountName": "dex", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.yaml", "path": "config.yaml" } ], "name": "dex-482kth9ktd" }, "name": "dex" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "dex-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-15T07:34:32Z", "generation": 1, "labels": { "control-plane": "controller-manager", "pod-template-hash": "7df969cd9d" }, "name": "image-controller-controller-manager-7df969cd9d", "namespace": "image-controller", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "image-controller-controller-manager", "uid": "1978dde6-a0f8-4ebb-960b-e7467b8c1c3c" } ], "resourceVersion": "5828", "uid": "0526d958-dd24-41dd-b1bf-8931ea7fa506" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "controller-manager", "pod-template-hash": "7df969cd9d" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager", "pod-template-hash": "7df969cd9d" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8443", "--leader-elect=false", "--health-probe-bind-address=:8081" ], "command": [ "/manager" ], "image": "quay.io/konflux-ci/image-controller:292f181e2ab5575c13f41ddf6aae446344f59783", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 8081, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/workspace", "name": "quaytoken", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "image-controller-controller-manager", "serviceAccountName": "image-controller-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "name": "quaytoken", "secret": { "defaultMode": 420, "secretName": "quaytoken" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-15T07:32:49Z", "generation": 1, "labels": { "control-plane": "controller-manager", "pod-template-hash": "5d56658d48" }, "name": "integration-service-controller-manager-5d56658d48", "namespace": "integration-service", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "integration-service-controller-manager", "uid": "82ccc534-c405-4891-8f59-4bedd53b6cff" } ], "resourceVersion": "4957", "uid": "53529fa7-89b6-4fb0-9075-594aabb6f2fe" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "controller-manager", "pod-template-hash": "5d56658d48" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager", "pod-template-hash": "5d56658d48" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8080", "--leader-elect", "--lease-duration=30s", "--leader-renew-deadline=15s", "--leader-elector-retry-period=5s" ], "command": [ "/manager" ], "image": "quay.io/konflux-ci/integration-service:d05fca37afc9a899e6f0ffa32416f074ab51f8e9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" }, { "containerPort": 8081, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "integration-service-controller-manager", "serviceAccountName": "integration-service-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "name": "cert", "secret": { "defaultMode": 420, "secretName": "webhook-server-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/no-read-only-root-fs": "This component requires write permissions", "ignore-check.kube-linter.io/run-as-non-root": "This component requires root permissions" }, "creationTimestamp": "2026-05-15T07:31:23Z", "generation": 1, "labels": { "pod-template-hash": "6546dff65", "run": "registry" }, "name": "registry-6546dff65", "namespace": "kind-registry", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "registry", "uid": "013665ee-d9fa-435f-8d71-91ac6fc9dd9d" } ], "resourceVersion": "3424", "uid": "9ff0a89c-edd9-493a-94b6-9c9e699df668" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "pod-template-hash": "6546dff65", "run": "registry" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "pod-template-hash": "6546dff65", "run": "registry" } }, "spec": { "containers": [ { "args": [ "/etc/zot/config.json" ], "image": "quay.io/konflux-ci/zot:208b9a64ab9ef4682e838945a1a1582fafe600ae", "imagePullPolicy": "IfNotPresent", "name": "registry", "ports": [ { "containerPort": 5000, "protocol": "TCP" } ], "resources": { "limits": { "cpu": "100m", "memory": "250Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/certs", "name": "certs", "readOnly": true }, { "mountPath": "/etc/zot", "name": "zot-config", "readOnly": true }, { "mountPath": "/var/lib/registry", "name": "storage" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "certs", "secret": { "defaultMode": 420, "secretName": "local-registry-tls" } }, { "configMap": { "defaultMode": 420, "name": "zot-config" }, "name": "zot-config" }, { "emptyDir": {}, "name": "storage" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/no-anti-affinity": "Using topologySpreadConstraints" }, "creationTimestamp": "2026-05-15T07:32:55Z", "generation": 1, "labels": { "app": "proxy", "pod-template-hash": "655dbdc97b" }, "name": "proxy-655dbdc97b", "namespace": "konflux-ui", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "proxy", "uid": "d4133284-ba16-4463-8fbd-5c3c2b6c27dc" } ], "resourceVersion": "5573", "uid": "63a65817-4118-41ad-8bdc-7ed3d3ea8cbe" }, "spec": { "minReadySeconds": 30, "replicas": 1, "selector": { "matchLabels": { "app": "proxy", "pod-template-hash": "655dbdc97b" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "proxy", "pod-template-hash": "655dbdc97b" } }, "spec": { "containers": [ { "command": [ "nginx", "-g", "daemon off;", "-c", "/etc/nginx/nginx.conf" ], "image": "registry.access.redhat.com/ubi9/nginx-124@sha256:a75f10d71969dd2451914df6539dea28f8e2c88506f691ea211768a0bd0746d1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 60, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "nginx", "ports": [ { "containerPort": 8080, "name": "web", "protocol": "TCP" }, { "containerPort": 9443, "name": "web-tls", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "300m", "memory": "256Mi" }, "requests": { "cpu": "30m", "memory": "128Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/nginx/nginx.conf", "name": "proxy", "readOnly": true, "subPath": "nginx.conf" }, { "mountPath": "/var/log/nginx", "name": "logs" }, { "mountPath": "/var/lib/nginx/tmp", "name": "nginx-tmp" }, { "mountPath": "/run", "name": "run" }, { "mountPath": "/mnt", "name": "serving-cert" }, { "mountPath": "/mnt/nginx-generated-config", "name": "nginx-generated-config" }, { "mountPath": "/mnt/nginx-additional-location-configs", "name": "nginx-static" }, { "mountPath": "/opt/app-root/src/static-content", "name": "static-content" } ] }, { "args": [ "--provider", "oidc", "--provider-display-name", "Dex OIDC", "--client-id", "oauth2-proxy", "--http-address", "127.0.0.1:6000", "--redirect-url", "https://54.69.129.24:9443/oauth2/callback", "--oidc-issuer-url", "https://54.69.129.24:9443/idp/", "--skip-oidc-discovery", "--login-url", "https://54.69.129.24:9443/idp/auth", "--redeem-url", "https://dex.dex.svc.cluster.local:9443/idp/token", "--oidc-jwks-url", "https://dex.dex.svc.cluster.local:9443/idp/keys", "--cookie-secure", "true", "--cookie-name", "__Host-konflux-ci-cookie", "--email-domain", "*", "--ssl-insecure-skip-verify", "true", "--set-xauthrequest", "true", "--whitelist-domain", "54.69.129.24:9443", "--skip-jwt-bearer-tokens" ], "env": [ { "name": "OAUTH2_PROXY_CLIENT_SECRET", "valueFrom": { "secretKeyRef": { "key": "client-secret", "name": "oauth2-proxy-client-secret" } } }, { "name": "OAUTH2_PROXY_COOKIE_SECRET", "valueFrom": { "secretKeyRef": { "key": "cookie-secret", "name": "oauth2-proxy-cookie-secret" } } } ], "image": "quay.io/oauth2-proxy/oauth2-proxy:latest@sha256:39f08531587045a5443db43299bf8495696c99ed8d0e1fdcbe60534f7c02ce14", "imagePullPolicy": "Always", "name": "oauth2-proxy", "ports": [ { "containerPort": 6000, "name": "web", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "300m", "memory": "256Mi" }, "requests": { "cpu": "30m", "memory": "128Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "cp", "-R", "/opt/app-root/src/.", "/mnt/static-content/" ], "image": "quay.io/konflux-ci/konflux-ui@sha256:6bd0603054128f1b0d056dd4d5ddc14e74285c1e98ff8527f3a09f799dc635f8", "imagePullPolicy": "IfNotPresent", "name": "copy-static-content", "resources": { "limits": { "cpu": "50m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/mnt/static-content", "name": "static-content" } ] }, { "command": [ "sh", "-c", "set -e\n\n# Copy the auth.conf template and replace the bearer token\ntoken=$(cat /mnt/api-token/token)\nsed \"s/__BEARER_TOKEN__/$token/\" /mnt/nginx-templates/auth.conf \u003e /mnt/nginx-generated-config/auth.conf\nchmod 640 /mnt/nginx-generated-config/auth.conf\n" ], "image": "registry.access.redhat.com/ubi9/ubi@sha256:66233eebd72bb5baa25190d4f55e1dc3fff3a9b77186c1f91a0abdb274452072", "imagePullPolicy": "IfNotPresent", "name": "generate-nginx-configs", "resources": { "limits": { "cpu": "50m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/mnt/nginx-generated-config", "name": "nginx-generated-config" }, { "mountPath": "/mnt/nginx-templates", "name": "nginx-templates" }, { "mountPath": "/mnt/api-token", "name": "api-token" } ] } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "proxy", "serviceAccountName": "proxy", "terminationGracePeriodSeconds": 30, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "app": "proxy" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "ScheduleAnyway" } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "nginx.conf", "path": "nginx.conf" } ], "name": "proxy-6bg85b98b7" }, "name": "proxy" }, { "configMap": { "defaultMode": 420, "name": "proxy-nginx-templates-4m8fgtf4m9" }, "name": "nginx-templates" }, { "name": "nginx-static", "projected": { "defaultMode": 420, "sources": [ { "configMap": { "name": "proxy-nginx-static-fmmfg7d22f" } }, { "configMap": { "name": "nginx-idp-location-h959ghd6bh" } } ] } }, { "emptyDir": {}, "name": "logs" }, { "emptyDir": {}, "name": "nginx-tmp" }, { "emptyDir": {}, "name": "run" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "emptyDir": {}, "name": "nginx-generated-config" }, { "name": "api-token", "secret": { "defaultMode": 420, "secretName": "proxy" } }, { "emptyDir": {}, "name": "static-content" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "4", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-05-15T07:25:36Z", "generation": 3, "labels": { "k8s-app": "kube-dns", "pod-template-hash": "575f7c7846" }, "name": "coredns-575f7c7846", "namespace": "kube-system", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "coredns", "uid": "4b8682d7-e21b-4ec3-ae5e-e8e58cd9f5e6" } ], "resourceVersion": "906", "uid": "948dd91a-7602-4ae3-813e-2689e8ee031d" }, "spec": { "replicas": 3, "selector": { "matchLabels": { "k8s-app": "kube-dns", "pod-template-hash": "575f7c7846" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "k8s-app": "kube-dns", "pod-template-hash": "575f7c7846" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "k8s-app", "operator": "In", "values": [ "kube-dns" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-conf", "/etc/coredns/Corefile" ], "image": "registry.k8s.io/coredns/coredns:v1.11.3", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/health", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "coredns", "ports": [ { "containerPort": 53, "name": "dns", "protocol": "UDP" }, { "containerPort": 53, "name": "dns-tcp", "protocol": "TCP" }, { "containerPort": 9153, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": 8181, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "memory": "512Mi" }, "requests": { "cpu": "200m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "add": [ "NET_BIND_SERVICE" ], "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/coredns", "name": "config-volume", "readOnly": true } ] } ], "dnsPolicy": "Default", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "coredns", "serviceAccountName": "coredns", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/control-plane" } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "Corefile", "path": "Corefile" } ], "name": "coredns" }, "name": "config-volume" } ] } } }, "status": { "availableReplicas": 3, "fullyLabeledReplicas": 3, "observedGeneration": 3, "readyReplicas": 3, "replicas": 3 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "4", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-15T07:25:08Z", "generation": 4, "labels": { "k8s-app": "kube-dns", "pod-template-hash": "668d6bf9bc" }, "name": "coredns-668d6bf9bc", "namespace": "kube-system", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "coredns", "uid": "4b8682d7-e21b-4ec3-ae5e-e8e58cd9f5e6" } ], "resourceVersion": "887", "uid": "1cb3d071-b201-4768-b500-08c3c4e10d90" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "k8s-app": "kube-dns", "pod-template-hash": "668d6bf9bc" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "k8s-app": "kube-dns", "pod-template-hash": "668d6bf9bc" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "k8s-app", "operator": "In", "values": [ "kube-dns" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-conf", "/etc/coredns/Corefile" ], "image": "registry.k8s.io/coredns/coredns:v1.11.3", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/health", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "coredns", "ports": [ { "containerPort": 53, "name": "dns", "protocol": "UDP" }, { "containerPort": 53, "name": "dns-tcp", "protocol": "TCP" }, { "containerPort": 9153, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": 8181, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "memory": "170Mi" }, "requests": { "cpu": "100m", "memory": "70Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "add": [ "NET_BIND_SERVICE" ], "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/coredns", "name": "config-volume", "readOnly": true } ] } ], "dnsPolicy": "Default", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "coredns", "serviceAccountName": "coredns", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/control-plane" } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "Corefile", "path": "Corefile" } ], "name": "coredns" }, "name": "config-volume" } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-05-15T07:25:34Z", "generation": 1, "labels": { "k8s-app": "metrics-server", "pod-template-hash": "56ff78d5b7" }, "name": "metrics-server-56ff78d5b7", "namespace": "kube-system", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "metrics-server", "uid": "32ab02f3-cb2a-4522-894d-671a6ed7d656" } ], "resourceVersion": "851", "uid": "9bbca1ee-1346-4050-9b0f-26b321a2560b" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "k8s-app": "metrics-server", "pod-template-hash": "56ff78d5b7" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "k8s-app": "metrics-server", "pod-template-hash": "56ff78d5b7" } }, "spec": { "containers": [ { "args": [ "--cert-dir=/tmp", "--secure-port=10250", "--kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname", "--kubelet-use-node-status-port", "--metric-resolution=15s", "--kubelet-insecure-tls" ], "image": "registry.k8s.io/metrics-server/metrics-server:v0.8.1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/livez", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "metrics-server", "ports": [ { "containerPort": 10250, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": "https", "scheme": "HTTPS" }, "initialDelaySeconds": 20, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "runAsUser": 1000, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp-dir" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "metrics-server", "serviceAccountName": "metrics-server", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "tmp-dir" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-15T07:25:34Z", "generation": 2, "labels": { "k8s-app": "metrics-server", "pod-template-hash": "64fc5f7866" }, "name": "metrics-server-64fc5f7866", "namespace": "kube-system", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "metrics-server", "uid": "32ab02f3-cb2a-4522-894d-671a6ed7d656" } ], "resourceVersion": "886", "uid": "fb4d576c-d6e0-4b99-9599-37ba997daa94" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "k8s-app": "metrics-server", "pod-template-hash": "64fc5f7866" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "k8s-app": "metrics-server", "pod-template-hash": "64fc5f7866" } }, "spec": { "containers": [ { "args": [ "--cert-dir=/tmp", "--secure-port=10250", "--kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname", "--kubelet-use-node-status-port", "--metric-resolution=15s" ], "image": "registry.k8s.io/metrics-server/metrics-server:v0.8.1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/livez", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "metrics-server", "ports": [ { "containerPort": 10250, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": "https", "scheme": "HTTPS" }, "initialDelaySeconds": 20, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "runAsUser": 1000, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp-dir" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "metrics-server", "serviceAccountName": "metrics-server", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "tmp-dir" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "4", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-15T07:31:43Z", "generation": 5, "labels": { "app.kubernetes.io/component": "admission-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.17.1", "pod-template-hash": "58c9d79bd8" }, "name": "kyverno-admission-controller-58c9d79bd8", "namespace": "kyverno", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kyverno-admission-controller", "uid": "0950ba25-b76e-414d-9ba9-da48a572635a" } ], "resourceVersion": "6491", "uid": "d6671ab6-ca1b-44a1-ab00-fc5a313d2da5" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/component": "admission-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "pod-template-hash": "58c9d79bd8" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "admission-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.17.1", "pod-template-hash": "58c9d79bd8" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app.kubernetes.io/component", "operator": "In", "values": [ "admission-controller" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 1 } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--caSecretName=kyverno-svc.kyverno.svc.kyverno-tls-ca", "--tlsSecretName=kyverno-svc.kyverno.svc.kyverno-tls-pair", "--tlsKeyAlgorithm=RSA", "--backgroundServiceAccountName=system:serviceaccount:kyverno:kyverno-background-controller", "--reportsServiceAccountName=system:serviceaccount:kyverno:kyverno-reports-controller", "--servicePort=443", "--webhookServerPort=9443", "--resyncPeriod=15m", "--crdWatcher=false", "--disableMetrics=false", "--otelConfig=prometheus", "--metricsPort=8000", "--admissionReports=true", "--maxAdmissionReports=1000", "--autoUpdateWebhooks=true", "--enableConfigMapCaching=true", "--controllerRuntimeMetricsAddress=:8080", "--enableDeferredLoading=true", "--dumpPayload=false", "--forceFailurePolicyIgnore=false", "--generateValidatingAdmissionPolicy=true", "--generateMutatingAdmissionPolicy=false", "--dumpPatches=false", "--maxAPICallResponseLength=2000000", "--loggingFormat=text", "--v=2", "--omitEvents=PolicyApplied,PolicySkipped", "--enablePolicyException=false", "--protectManagedResources=false", "--allowInsecureRegistry=false", "--registryCredentialHelpers=default,google,amazon,azure,github", "--enableReporting=validate,mutate,mutateExisting,imageVerify,generate" ], "env": [ { "name": "INIT_CONFIG", "value": "kyverno" }, { "name": "METRICS_CONFIG", "value": "kyverno-metrics" }, { "name": "KYVERNO_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "KYVERNO_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "KYVERNO_SERVICEACCOUNT_NAME", "value": "kyverno-admission-controller" }, { "name": "KYVERNO_ROLE_NAME", "value": "kyverno:admission-controller" }, { "name": "KYVERNO_SVC", "value": "kyverno-svc" }, { "name": "TUF_ROOT", "value": "/.sigstore" }, { "name": "KYVERNO_DEPLOYMENT", "value": "kyverno-admission-controller" } ], "image": "reg.kyverno.io/kyverno/kyverno:v1.17.1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 2, "httpGet": { "path": "/health/liveness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "kyverno", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" }, { "containerPort": 8000, "name": "metrics-port", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 6, "httpGet": { "path": "/health/readiness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "memory": "384Mi" }, "requests": { "cpu": "1m", "memory": "1Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "startupProbe": { "failureThreshold": 20, "httpGet": { "path": "/health/liveness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 6, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/.sigstore", "name": "sigstore" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "--loggingFormat=text", "--v=2", "--openreportsEnabled=false" ], "env": [ { "name": "KYVERNO_SERVICEACCOUNT_NAME", "value": "kyverno-admission-controller" }, { "name": "KYVERNO_ROLE_NAME", "value": "kyverno:admission-controller" }, { "name": "INIT_CONFIG", "value": "kyverno" }, { "name": "METRICS_CONFIG", "value": "kyverno-metrics" }, { "name": "KYVERNO_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "KYVERNO_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "KYVERNO_DEPLOYMENT", "value": "kyverno-admission-controller" }, { "name": "KYVERNO_SVC", "value": "kyverno-svc" } ], "image": "reg.kyverno.io/kyverno/kyvernopre:v1.17.1", "imagePullPolicy": "IfNotPresent", "name": "kyverno-pre", "resources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kyverno-admission-controller", "serviceAccountName": "kyverno-admission-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "sigstore" } ] } } }, "status": { "observedGeneration": 5, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "4", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-05-15T07:35:04Z", "generation": 3, "labels": { "app.kubernetes.io/component": "admission-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.17.1", "pod-template-hash": "89d459fb6" }, "name": "kyverno-admission-controller-89d459fb6", "namespace": "kyverno", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kyverno-admission-controller", "uid": "0950ba25-b76e-414d-9ba9-da48a572635a" } ], "resourceVersion": "6675", "uid": "0da5ac38-9e42-4212-bc16-a22789ad686c" }, "spec": { "replicas": 3, "selector": { "matchLabels": { "app.kubernetes.io/component": "admission-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "pod-template-hash": "89d459fb6" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "admission-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.17.1", "pod-template-hash": "89d459fb6" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app.kubernetes.io/component", "operator": "In", "values": [ "admission-controller" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 1 } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--caSecretName=kyverno-svc.kyverno.svc.kyverno-tls-ca", "--tlsSecretName=kyverno-svc.kyverno.svc.kyverno-tls-pair", "--tlsKeyAlgorithm=RSA", "--backgroundServiceAccountName=system:serviceaccount:kyverno:kyverno-background-controller", "--reportsServiceAccountName=system:serviceaccount:kyverno:kyverno-reports-controller", "--servicePort=443", "--webhookServerPort=9443", "--resyncPeriod=15m", "--crdWatcher=false", "--disableMetrics=false", "--otelConfig=prometheus", "--metricsPort=8000", "--admissionReports=true", "--maxAdmissionReports=1000", "--autoUpdateWebhooks=true", "--enableConfigMapCaching=true", "--controllerRuntimeMetricsAddress=:8080", "--enableDeferredLoading=true", "--dumpPayload=false", "--forceFailurePolicyIgnore=false", "--generateValidatingAdmissionPolicy=true", "--generateMutatingAdmissionPolicy=false", "--dumpPatches=false", "--maxAPICallResponseLength=2000000", "--loggingFormat=text", "--v=2", "--omitEvents=PolicyApplied,PolicySkipped", "--enablePolicyException=false", "--protectManagedResources=false", "--allowInsecureRegistry=false", "--registryCredentialHelpers=default,google,amazon,azure,github", "--enableReporting=validate,mutate,mutateExisting,imageVerify,generate" ], "env": [ { "name": "INIT_CONFIG", "value": "kyverno" }, { "name": "METRICS_CONFIG", "value": "kyverno-metrics" }, { "name": "KYVERNO_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "KYVERNO_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "KYVERNO_SERVICEACCOUNT_NAME", "value": "kyverno-admission-controller" }, { "name": "KYVERNO_ROLE_NAME", "value": "kyverno:admission-controller" }, { "name": "KYVERNO_SVC", "value": "kyverno-svc" }, { "name": "TUF_ROOT", "value": "/.sigstore" }, { "name": "KYVERNO_DEPLOYMENT", "value": "kyverno-admission-controller" } ], "image": "reg.kyverno.io/kyverno/kyverno:v1.17.1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 2, "httpGet": { "path": "/health/liveness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "kyverno", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" }, { "containerPort": 8000, "name": "metrics-port", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 6, "httpGet": { "path": "/health/readiness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "memory": "4Gi" }, "requests": { "cpu": "200m", "memory": "512Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "startupProbe": { "failureThreshold": 20, "httpGet": { "path": "/health/liveness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 6, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/.sigstore", "name": "sigstore" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "--loggingFormat=text", "--v=2", "--openreportsEnabled=false" ], "env": [ { "name": "KYVERNO_SERVICEACCOUNT_NAME", "value": "kyverno-admission-controller" }, { "name": "KYVERNO_ROLE_NAME", "value": "kyverno:admission-controller" }, { "name": "INIT_CONFIG", "value": "kyverno" }, { "name": "METRICS_CONFIG", "value": "kyverno-metrics" }, { "name": "KYVERNO_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "KYVERNO_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "KYVERNO_DEPLOYMENT", "value": "kyverno-admission-controller" }, { "name": "KYVERNO_SVC", "value": "kyverno-svc" } ], "image": "reg.kyverno.io/kyverno/kyvernopre:v1.17.1", "imagePullPolicy": "IfNotPresent", "name": "kyverno-pre", "resources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kyverno-admission-controller", "serviceAccountName": "kyverno-admission-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "sigstore" } ] } } }, "status": { "availableReplicas": 3, "fullyLabeledReplicas": 3, "observedGeneration": 3, "readyReplicas": 3, "replicas": 3 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-15T07:31:43Z", "generation": 2, "labels": { "app.kubernetes.io/component": "background-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.17.1", "pod-template-hash": "7447fb7649" }, "name": "kyverno-background-controller-7447fb7649", "namespace": "kyverno", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kyverno-background-controller", "uid": "1f46abc7-e51a-48a1-a9bf-66c82ebebfa0" } ], "resourceVersion": "6120", "uid": "55e83682-396e-4d5d-8e3c-fb77b553d537" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/component": "background-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "pod-template-hash": "7447fb7649" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "background-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.17.1", "pod-template-hash": "7447fb7649" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app.kubernetes.io/component", "operator": "In", "values": [ "background-controller" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 1 } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--disableMetrics=false", "--otelConfig=prometheus", "--metricsPort=8000", "--resyncPeriod=15m", "--enableConfigMapCaching=true", "--enableDeferredLoading=true", "--maxAPICallResponseLength=2000000", "--loggingFormat=text", "--v=2", "--omitEvents=PolicyApplied,PolicySkipped", "--enablePolicyException=false", "--enableReporting=validate,mutate,mutateExisting,imageVerify,generate" ], "env": [ { "name": "KYVERNO_SERVICEACCOUNT_NAME", "value": "kyverno-background-controller" }, { "name": "KYVERNO_DEPLOYMENT", "value": "kyverno-background-controller" }, { "name": "INIT_CONFIG", "value": "kyverno" }, { "name": "METRICS_CONFIG", "value": "kyverno-metrics" }, { "name": "KYVERNO_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "KYVERNO_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "reg.kyverno.io/kyverno/background-controller:v1.17.1", "imagePullPolicy": "IfNotPresent", "name": "controller", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" }, { "containerPort": 8000, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "memory": "128Mi" }, "requests": { "cpu": "1m", "memory": "1Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kyverno-background-controller", "serviceAccountName": "kyverno-background-controller", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 2, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "0", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-15T07:31:43Z", "generation": 1, "labels": { "app.kubernetes.io/component": "cleanup-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.17.1", "pod-template-hash": "58886bb8c6" }, "name": "kyverno-cleanup-controller-58886bb8c6", "namespace": "kyverno", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kyverno-cleanup-controller", "uid": "522e8132-3303-46b5-93ef-efe2d66dce67" } ], "resourceVersion": "3758", "uid": "d998da7e-ad05-4ad8-a122-faf30ecfc299" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/component": "cleanup-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "pod-template-hash": "58886bb8c6" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "cleanup-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.17.1", "pod-template-hash": "58886bb8c6" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app.kubernetes.io/component", "operator": "In", "values": [ "cleanup-controller" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 1 } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--caSecretName=kyverno-cleanup-controller.kyverno.svc.kyverno-tls-ca", "--tlsSecretName=kyverno-cleanup-controller.kyverno.svc.kyverno-tls-pair", "--tlsKeyAlgorithm=RSA", "--servicePort=443", "--resyncPeriod=15m", "--cleanupServerPort=9443", "--disableMetrics=false", "--otelConfig=prometheus", "--metricsPort=8000", "--enableDeferredLoading=true", "--dumpPayload=false", "--maxAPICallResponseLength=2000000", "--loggingFormat=text", "--v=2", "--protectManagedResources=false", "--ttlReconciliationInterval=1m" ], "env": [ { "name": "KYVERNO_DEPLOYMENT", "value": "kyverno-cleanup-controller" }, { "name": "INIT_CONFIG", "value": "kyverno" }, { "name": "METRICS_CONFIG", "value": "kyverno-metrics" }, { "name": "KYVERNO_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "KYVERNO_SERVICEACCOUNT_NAME", "value": "kyverno-cleanup-controller" }, { "name": "KYVERNO_ROLE_NAME", "value": "kyverno:cleanup-controller" }, { "name": "KYVERNO_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "KYVERNO_SVC", "value": "kyverno-cleanup-controller" } ], "image": "reg.kyverno.io/kyverno/cleanup-controller:v1.17.1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 2, "httpGet": { "path": "/health/liveness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "controller", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" }, { "containerPort": 8000, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 6, "httpGet": { "path": "/health/readiness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "memory": "128Mi" }, "requests": { "cpu": "100m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "startupProbe": { "failureThreshold": 20, "httpGet": { "path": "/health/liveness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 6, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kyverno-cleanup-controller", "serviceAccountName": "kyverno-cleanup-controller", "terminationGracePeriodSeconds": 30 } } }, "status": { "observedGeneration": 1, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "0", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-15T07:31:43Z", "generation": 1, "labels": { "app.kubernetes.io/component": "reports-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.17.1", "pod-template-hash": "688567cb4" }, "name": "kyverno-reports-controller-688567cb4", "namespace": "kyverno", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kyverno-reports-controller", "uid": "3ccba10e-a445-4149-b193-bc971889e601" } ], "resourceVersion": "3764", "uid": "f2574d51-5b9b-4995-94ac-3476376f8f60" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/component": "reports-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "pod-template-hash": "688567cb4" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "reports-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.17.1", "pod-template-hash": "688567cb4" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app.kubernetes.io/component", "operator": "In", "values": [ "reports-controller" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 1 } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--disableMetrics=false", "--openreportsEnabled=false", "--otelConfig=prometheus", "--metricsPort=8000", "--resyncPeriod=15m", "--admissionReports=true", "--aggregateReports=true", "--policyReports=true", "--validatingAdmissionPolicyReports=true", "--mutatingAdmissionPolicyReports=false", "--backgroundScan=true", "--backgroundScanWorkers=2", "--backgroundScanInterval=1h", "--skipResourceFilters=true", "--enableConfigMapCaching=true", "--enableDeferredLoading=true", "--maxAPICallResponseLength=2000000", "--loggingFormat=text", "--v=2", "--omitEvents=PolicyApplied,PolicySkipped", "--enablePolicyException=false", "--allowInsecureRegistry=false", "--registryCredentialHelpers=default,google,amazon,azure,github", "--enableReporting=validate,mutate,mutateExisting,imageVerify,generate" ], "env": [ { "name": "KYVERNO_SERVICEACCOUNT_NAME", "value": "kyverno-reports-controller" }, { "name": "KYVERNO_DEPLOYMENT", "value": "kyverno-reports-controller" }, { "name": "INIT_CONFIG", "value": "kyverno" }, { "name": "METRICS_CONFIG", "value": "kyverno-metrics" }, { "name": "KYVERNO_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "KYVERNO_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TUF_ROOT", "value": "/.sigstore" } ], "image": "reg.kyverno.io/kyverno/reports-controller:v1.17.1", "imagePullPolicy": "IfNotPresent", "name": "controller", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" }, { "containerPort": 8000, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "memory": "128Mi" }, "requests": { "cpu": "100m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/.sigstore", "name": "sigstore" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kyverno-reports-controller", "serviceAccountName": "kyverno-reports-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "sigstore" } ] } } }, "status": { "observedGeneration": 1, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-15T07:25:08Z", "generation": 1, "labels": { "app": "local-path-provisioner", "pod-template-hash": "7dc846544d" }, "name": "local-path-provisioner-7dc846544d", "namespace": "local-path-storage", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "local-path-provisioner", "uid": "ecf7edc9-e346-41bc-a562-943910c2e2f3" } ], "resourceVersion": "474", "uid": "e74543ae-fadc-46a8-bba3-b7b2c0283bf7" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "local-path-provisioner", "pod-template-hash": "7dc846544d" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "local-path-provisioner", "pod-template-hash": "7dc846544d" } }, "spec": { "containers": [ { "command": [ "local-path-provisioner", "--debug", "start", "--helper-image", "docker.io/kindest/local-path-helper:v20241212-8ac705d0", "--config", "/etc/config/config.json" ], "env": [ { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "CONFIG_MOUNT_PATH", "value": "/etc/config/" } ], "image": "docker.io/kindest/local-path-provisioner:v20250214-acbabc1a", "imagePullPolicy": "IfNotPresent", "name": "local-path-provisioner", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config/", "name": "config-volume" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "local-path-provisioner-service-account", "serviceAccountName": "local-path-provisioner-service-account", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/control-plane", "operator": "Equal" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Equal" } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "local-path-config" }, "name": "config-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/no-anti-affinity": "Using topologySpreadConstraints" }, "creationTimestamp": "2026-05-15T07:32:52Z", "generation": 1, "labels": { "apps": "namespace-lister", "pod-template-hash": "584d4574c4" }, "name": "namespace-lister-584d4574c4", "namespace": "namespace-lister", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "namespace-lister", "uid": "89b7d6f4-d8dc-4d2a-8635-da21c9c8ad47" } ], "resourceVersion": "4917", "uid": "570a7c5e-597c-44c7-ae61-d98528517463" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "apps": "namespace-lister", "pod-template-hash": "584d4574c4" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "apps": "namespace-lister", "pod-template-hash": "584d4574c4" } }, "spec": { "containers": [ { "args": [ "-enable-tls", "-cert-path=/var/tls/tls.crt", "-key-path=/var/tls/tls.key" ], "env": [ { "name": "LOG_LEVEL", "value": "0" }, { "name": "CACHE_RESYNC_PERIOD", "value": "10m" }, { "name": "CACHE_NAMESPACE_LABELSELECTOR", "value": "konflux-ci.dev/type=tenant" }, { "name": "AUTH_USERNAME_HEADER", "value": "Impersonate-User" } ], "image": "quay.io/konflux-ci/namespace-lister@sha256:e4bb09dfe4513cdbe349507495c7f4044623a3c2aff866b7946d941e82a7a639", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 1, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "namespace-lister", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 1, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "200m", "memory": "256Mi" }, "requests": { "cpu": "20m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "namespace-lister", "serviceAccountName": "namespace-lister", "terminationGracePeriodSeconds": 60, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "apps": "namespace-lister" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "ScheduleAnyway" } ], "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "secretName": "namespace-lister-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2", "ignore-check.kube-linter.io/env-var-secret": "This is the name of the secret rather than the secret" }, "creationTimestamp": "2026-05-15T07:36:17Z", "generation": 1, "labels": { "app": "pipelines-as-code-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.42.0", "pod-template-hash": "77f7dfb9b5" }, "name": "pipelines-as-code-controller-77f7dfb9b5", "namespace": "pipelines-as-code", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-as-code-controller", "uid": "3d5d4ed1-0293-4232-9ccf-4ad44ff28498" } ], "resourceVersion": "6826", "uid": "f02c0ad9-dea4-42e6-aaf6-0e74dbdf619c" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "pod-template-hash": "77f7dfb9b5" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-as-code-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.42.0", "pod-template-hash": "77f7dfb9b5" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "TLS_KEY", "value": "key" }, { "name": "TLS_CERT", "value": "cert" }, { "name": "TLS_SECRET_NAME", "value": "pipelines-as-code-tls-secret" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "K_METRICS_CONFIG", "value": "{\"Domain\":\"pipelinesascode.tekton.dev/controller\",\"Component\":\"pac_controller\",\"PrometheusPort\":9090,\"ConfigMap\":{\"name\":\"pipelines-as-code-config-observability\"}}" }, { "name": "K_TRACING_CONFIG", "value": "{\"backend\":\"prometheus\",\"debug\":\"false\",\"sample-rate\":\"0\"}" }, { "name": "K_SINK_TIMEOUT", "value": "30" }, { "name": "PAC_CONTROLLER_LABEL", "value": "default" }, { "name": "PAC_CONTROLLER_SECRET", "value": "pipelines-as-code-secret" }, { "name": "PAC_CONTROLLER_CONFIGMAP", "value": "pipelines-as-code" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.28.0" } ], "image": "ghcr.io/openshift-pipelines/pipelines-as-code/pipelines-as-code-controller:v0.42.0", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "api", "scheme": "HTTP" }, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "pac-controller", "ports": [ { "containerPort": 8082, "name": "api", "protocol": "TCP" }, { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "api", "scheme": "HTTP" }, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "50m", "memory": "256Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/pipelines-as-code/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-controller", "serviceAccountName": "pipelines-as-code-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "pipelines-as-code-tls-secret" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/env-var-secret": "This is the name of the secret rather than the secret" }, "creationTimestamp": "2026-05-15T07:31:16Z", "generation": 2, "labels": { "app": "pipelines-as-code-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.42.0", "pod-template-hash": "7df9d8cb9c" }, "name": "pipelines-as-code-controller-7df9d8cb9c", "namespace": "pipelines-as-code", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-as-code-controller", "uid": "3d5d4ed1-0293-4232-9ccf-4ad44ff28498" } ], "resourceVersion": "6836", "uid": "b180a0ab-fd14-4c59-a782-750923524401" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "pod-template-hash": "7df9d8cb9c" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-as-code-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.42.0", "pod-template-hash": "7df9d8cb9c" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "TLS_KEY", "value": "key" }, { "name": "TLS_CERT", "value": "cert" }, { "name": "TLS_SECRET_NAME", "value": "pipelines-as-code-tls-secret" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "K_METRICS_CONFIG", "value": "{\"Domain\":\"pipelinesascode.tekton.dev/controller\",\"Component\":\"pac_controller\",\"PrometheusPort\":9090,\"ConfigMap\":{\"name\":\"pipelines-as-code-config-observability\"}}" }, { "name": "K_TRACING_CONFIG", "value": "{\"backend\":\"prometheus\",\"debug\":\"false\",\"sample-rate\":\"0\"}" }, { "name": "K_SINK_TIMEOUT", "value": "30" }, { "name": "PAC_CONTROLLER_LABEL", "value": "default" }, { "name": "PAC_CONTROLLER_SECRET", "value": "pipelines-as-code-secret" }, { "name": "PAC_CONTROLLER_CONFIGMAP", "value": "pipelines-as-code" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.28.0" } ], "image": "ghcr.io/openshift-pipelines/pipelines-as-code/pipelines-as-code-controller:v0.42.0", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "api", "scheme": "HTTP" }, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "pac-controller", "ports": [ { "containerPort": 8082, "name": "api", "protocol": "TCP" }, { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "api", "scheme": "HTTP" }, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "50m", "memory": "50Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/pipelines-as-code/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-controller", "serviceAccountName": "pipelines-as-code-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "pipelines-as-code-tls-secret" } } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-15T07:31:16Z", "generation": 1, "labels": { "app": "pipelines-as-code-watcher", "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.42.0", "pod-template-hash": "7d557456b5" }, "name": "pipelines-as-code-watcher-7d557456b5", "namespace": "pipelines-as-code", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-as-code-watcher", "uid": "4807d71f-878b-4ed2-9328-fb59ef1b6a78" } ], "resourceVersion": "3539", "uid": "d64dc222-b827-46ee-abd1-62e68f84a393" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "pod-template-hash": "7d557456b5" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-as-code-watcher", "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.42.0", "pod-template-hash": "7d557456b5" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipelinesascode" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "pipelines-as-code-config-observability" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "pac-watcher-config-leader-election" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.28.0" } ], "image": "ghcr.io/openshift-pipelines/pipelines-as-code/pipelines-as-code-watcher:v0.42.0", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "pac-watcher", "ports": [ { "containerPort": 8080, "name": "probes", "protocol": "TCP" }, { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "50m", "memory": "50Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-watcher", "serviceAccountName": "pipelines-as-code-watcher", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/env-var-secret": "This is the name of the secret rather than the secret" }, "creationTimestamp": "2026-05-15T07:31:16Z", "generation": 1, "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.42.0", "pod-template-hash": "f7b45c7ff" }, "name": "pipelines-as-code-webhook-f7b45c7ff", "namespace": "pipelines-as-code", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-as-code-webhook", "uid": "2bcac415-3e45-4fad-99bd-cd9d958d1806" } ], "resourceVersion": "3208", "uid": "99469dc2-bb65-4b5b-b259-64584ccd9612" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "pod-template-hash": "f7b45c7ff" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.42.0", "pod-template-hash": "f7b45c7ff" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SERVICE_NAME", "value": "pipelines-as-code-webhook" }, { "name": "WEBHOOK_SECRET_NAME", "value": "pipelines-as-code-webhook-certs" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipelinesascode" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "pac-webhook-config-leader-election" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.28.0" } ], "image": "ghcr.io/openshift-pipelines/pipelines-as-code/pipelines-as-code-webhook:v0.42.0", "imagePullPolicy": "IfNotPresent", "name": "pac-webhook", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "50m", "memory": "50Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-webhook", "serviceAccountName": "pipelines-as-code-webhook", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/liveness-port": "Keeping upstream configs", "ignore-check.kube-linter.io/readiness-port": "Keeping upstream configs" }, "creationTimestamp": "2026-05-15T07:32:26Z", "generation": 1, "labels": { "control-plane": "controller-manager", "pod-template-hash": "6d549cf847" }, "name": "release-service-controller-manager-6d549cf847", "namespace": "release-service", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "release-service-controller-manager", "uid": "6c02d33d-4257-434a-a6ff-449d63ac0b2e" } ], "resourceVersion": "4537", "uid": "4c40f54a-e46d-4305-bcbb-a85f705f9888" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "controller-manager", "pod-template-hash": "6d549cf847" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager", "pod-template-hash": "6d549cf847" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8080", "--leader-elect=false" ], "command": [ "/manager" ], "env": [ { "name": "DEFAULT_RELEASE_PVC", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_RELEASE_PVC", "name": "release-service-manager-properties", "optional": true } } }, { "name": "DEFAULT_RELEASE_WORKSPACE_NAME", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_RELEASE_WORKSPACE_NAME", "name": "release-service-manager-properties", "optional": true } } }, { "name": "DEFAULT_RELEASE_WORKSPACE_SIZE", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_RELEASE_WORKSPACE_SIZE", "name": "release-service-manager-properties", "optional": true } } }, { "name": "SERVICE_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/konflux-ci/release-service:dfc0cd33e84468968581775d8d733bb8d1613721", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "release-service-controller-manager", "serviceAccountName": "release-service-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "name": "cert", "secret": { "defaultMode": 420, "secretName": "webhook-server-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-15T07:31:28Z", "generation": 2, "labels": { "app": "gosmee-client", "pod-template-hash": "5944c98847" }, "name": "gosmee-client-5944c98847", "namespace": "smee-client", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "gosmee-client", "uid": "62a99ece-8c0f-4bf4-8410-8fbc5fbe5d7e" } ], "resourceVersion": "5882", "uid": "66a0179e-4c16-48bd-a5f5-57d238bfb13d" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "gosmee-client", "pod-template-hash": "5944c98847" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "gosmee-client", "pod-template-hash": "5944c98847" } }, "spec": { "containers": [ { "args": [ "client", "https://smee.io/cNiuA1cDYMYor4Dyj0ANMxE82zS4uvOaNl5cLHQ", "http://localhost:8080" ], "image": "ghcr.io/chmouel/gosmee:v0.29.0", "imagePullPolicy": "Always", "livenessProbe": { "exec": { "command": [ "/shared/check-smee-health.sh" ] }, "failureThreshold": 2, "initialDelaySeconds": 20, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "gosmee", "resources": { "limits": { "cpu": "100m", "memory": "32Mi" }, "requests": { "cpu": "10m", "memory": "32Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "shared-health" } ] }, { "env": [ { "name": "DOWNSTREAM_SERVICE_URL", "value": "http://54.69.129.24:8180" }, { "name": "SMEE_CHANNEL_URL", "value": "https://smee.io/cNiuA1cDYMYor4Dyj0ANMxE82zS4uvOaNl5cLHQ" }, { "name": "INSECURE_SKIP_VERIFY", "value": "true" }, { "name": "HEALTH_CHECK_TIMEOUT_SECONDS", "value": "20" } ], "image": "quay.io/konflux-ci/smee-sidecar:latest@sha256:a956e5b4b19ac5bacff713f2bfadf5756d14290e5478e67fd17897ee5747374b", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "exec": { "command": [ "/shared/check-sidecar-health.sh" ] }, "failureThreshold": 2, "initialDelaySeconds": 10, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "health-check-sidecar", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" }, { "containerPort": 9100, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "100m", "memory": "32Mi" }, "requests": { "cpu": "10m", "memory": "32Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "shared-health" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "shared-health" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-05-15T07:34:51Z", "generation": 1, "labels": { "app": "gosmee-client", "pod-template-hash": "647f89469f" }, "name": "gosmee-client-647f89469f", "namespace": "smee-client", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "gosmee-client", "uid": "62a99ece-8c0f-4bf4-8410-8fbc5fbe5d7e" } ], "resourceVersion": "5873", "uid": "4b6af356-7991-49fc-9ec0-60e7616b5e30" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "gosmee-client", "pod-template-hash": "647f89469f" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "gosmee-client", "pod-template-hash": "647f89469f" } }, "spec": { "containers": [ { "args": [ "client", "https://hook.pipelinesascode.com/FMPGBULUKAyF", "http://localhost:8080" ], "image": "ghcr.io/chmouel/gosmee:v0.29.0", "imagePullPolicy": "Always", "livenessProbe": { "exec": { "command": [ "/shared/check-smee-health.sh" ] }, "failureThreshold": 2, "initialDelaySeconds": 20, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "gosmee", "resources": { "limits": { "cpu": "100m", "memory": "32Mi" }, "requests": { "cpu": "10m", "memory": "32Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "shared-health" } ] }, { "env": [ { "name": "DOWNSTREAM_SERVICE_URL", "value": "http://54.69.129.24:8180" }, { "name": "SMEE_CHANNEL_URL", "value": "https://hook.pipelinesascode.com/FMPGBULUKAyF" }, { "name": "INSECURE_SKIP_VERIFY", "value": "true" }, { "name": "HEALTH_CHECK_TIMEOUT_SECONDS", "value": "20" } ], "image": "quay.io/konflux-ci/smee-sidecar:latest@sha256:a956e5b4b19ac5bacff713f2bfadf5756d14290e5478e67fd17897ee5747374b", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "exec": { "command": [ "/shared/check-sidecar-health.sh" ] }, "failureThreshold": 2, "initialDelaySeconds": 10, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "health-check-sidecar", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" }, { "containerPort": 9100, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "100m", "memory": "32Mi" }, "requests": { "cpu": "10m", "memory": "32Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "shared-health" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "shared-health" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-15T07:29:30Z", "generation": 1, "labels": { "app": "tekton-operator", "name": "tekton-operator", "pod-template-hash": "6b96d7c975" }, "name": "tekton-operator-6b96d7c975", "namespace": "tekton-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-operator", "uid": "385452d7-3d4c-46d2-9e30-3c78d3963ea5" } ], "resourceVersion": "1487", "uid": "65f74ec6-1610-4c9d-ada7-538a422b3009" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "tekton-operator", "pod-template-hash": "6b96d7c975" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-operator", "name": "tekton-operator", "pod-template-hash": "6b96d7c975" } }, "spec": { "containers": [ { "args": [ "-controllers", "tektonconfig,tektonpipeline,tektontrigger,tektonhub,tektonchain,tektonresult,tektondashboard,manualapprovalgate,tektonpruner,tektonscheduler,tektonmulticlusterproxyaae", "-unique-process-name", "tekton-operator-lifecycle" ], "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "tekton-operator" }, { "name": "IMAGE_PIPELINES_PROXY", "value": "ghcr.io/tektoncd/operator/proxy-webhook-f6167da7bc41b96a27c5529f850e63d1:v0.79.0@sha256:fd1311731585e2be65571d04a6a6c5b822723236aa76a0768bb42f2477bee3f1" }, { "name": "IMAGE_JOB_PRUNER_TKN", "value": "ghcr.io/tektoncd/plumbing/tkn@sha256:233de6c8b8583a34c2379fa98d42dba739146c9336e8d41b66030484357481ed" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "VERSION", "value": "v0.79.0" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-config-observability" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-controller-config-leader-election" }, { "name": "AUTOINSTALL_COMPONENTS", "valueFrom": { "configMapKeyRef": { "key": "AUTOINSTALL_COMPONENTS", "name": "tekton-config-defaults" } } }, { "name": "DEFAULT_TARGET_NAMESPACE", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_TARGET_NAMESPACE", "name": "tekton-config-defaults" } } } ], "image": "ghcr.io/tektoncd/operator/operator-303303c315a48490ba6517859ef65b77:v0.79.0@sha256:bc90657a93a35b4046ef4fbfc236ecd38c0ea46feea20a44a69f44110731de01", "imagePullPolicy": "IfNotPresent", "name": "tekton-operator-lifecycle", "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" }, { "args": [ "-controllers", "tektoninstallerset", "-unique-process-name", "tekton-operator-cluster-operations" ], "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "tekton-operator" }, { "name": "PROFILING_PORT", "value": "9009" }, { "name": "VERSION", "value": "v0.79.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-controller-config-leader-election" } ], "image": "ghcr.io/tektoncd/operator/operator-303303c315a48490ba6517859ef65b77:v0.79.0@sha256:bc90657a93a35b4046ef4fbfc236ecd38c0ea46feea20a44a69f44110731de01", "imagePullPolicy": "IfNotPresent", "name": "tekton-operator-cluster-operations", "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "tekton-operator", "serviceAccountName": "tekton-operator", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/env-var-secret": "This is the name of the secret rather than the secret" }, "creationTimestamp": "2026-05-15T07:29:30Z", "generation": 1, "labels": { "app": "tekton-operator", "name": "tekton-operator-webhook", "pod-template-hash": "65d7569769" }, "name": "tekton-operator-webhook-65d7569769", "namespace": "tekton-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-operator-webhook", "uid": "2a48eba0-6f64-49da-a3de-d1eba60b35db" } ], "resourceVersion": "1491", "uid": "5da0cbb4-df81-43a4-b5b5-fc1004aa3db9" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "tekton-operator-webhook", "pod-template-hash": "65d7569769" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-operator", "name": "tekton-operator-webhook", "pod-template-hash": "65d7569769" } }, "spec": { "containers": [ { "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-webhook-config-leader-election" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-operator-webhook" }, { "name": "WEBHOOK_SECRET_NAME", "value": "tekton-operator-webhook-certs" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" } ], "image": "ghcr.io/tektoncd/operator/webhook-f2bb711aa8f0c0892856a4cbf6d9ddd8:v0.79.0@sha256:1096920eeb1ad279f4f7e69cec6bf96d8b48a4f038b02f36f7b54ce073e6b0a5", "imagePullPolicy": "IfNotPresent", "name": "tekton-operator-webhook", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "tekton-operator", "serviceAccountName": "tekton-operator", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-15T07:30:33Z", "generation": 2, "labels": { "app": "tekton-chains-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "d2bf57519ecb9d9b99f2d61143730e93", "pipeline.tekton.dev/release": "v0.26.2", "pod-template-hash": "7f4b5668d4", "version": "v0.26.2" }, "name": "tekton-chains-controller-7f4b5668d4", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-chains-controller", "uid": "a76791de-7376-40b0-a7a8-44f3478e1fc8" } ], "resourceVersion": "3052", "uid": "b60faa34-4d1b-4967-aa40-d5eaddcc0f47" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "pod-template-hash": "7f4b5668d4" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-chains-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "d2bf57519ecb9d9b99f2d61143730e93", "pipeline.tekton.dev/release": "v0.26.2", "pod-template-hash": "7f4b5668d4", "version": "v0.26.2" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-chains-config-leader-election" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-chains-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/chains" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/chains/controller-92006fd957c0afd31de6a40b3e33b39f:v0.26.2@sha256:dd86ef17259de205532bdda16cae3a12514785b3feeeae903ca1ddd1541ce7c5", "imagePullPolicy": "IfNotPresent", "name": "tekton-chains-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsUser": 65532 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/signing-secrets", "name": "signing-secrets" }, { "mountPath": "/var/run/sigstore/cosign", "name": "oidc-info" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-chains-controller", "serviceAccountName": "tekton-chains-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "signing-secrets", "secret": { "defaultMode": 420, "secretName": "signing-secrets" } }, { "name": "oidc-info", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "sigstore", "expirationSeconds": 600, "path": "oidc-token" } } ] } } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-05-15T07:31:13Z", "generation": 1, "labels": { "app": "tekton-chains-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "c928362b399530cb75d6f56d119ccac8", "pipeline.tekton.dev/release": "v0.26.2", "pod-template-hash": "d989c4cc6", "version": "v0.26.2" }, "name": "tekton-chains-controller-d989c4cc6", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-chains-controller", "uid": "a76791de-7376-40b0-a7a8-44f3478e1fc8" } ], "resourceVersion": "3040", "uid": "858b71bc-1ee9-45f1-a069-9ac917b025ea" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "pod-template-hash": "d989c4cc6" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-chains-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "c928362b399530cb75d6f56d119ccac8", "pipeline.tekton.dev/release": "v0.26.2", "pod-template-hash": "d989c4cc6", "version": "v0.26.2" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-chains-config-leader-election" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-chains-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/chains" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/chains/controller-92006fd957c0afd31de6a40b3e33b39f:v0.26.2@sha256:dd86ef17259de205532bdda16cae3a12514785b3feeeae903ca1ddd1541ce7c5", "imagePullPolicy": "IfNotPresent", "name": "tekton-chains-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsUser": 65532 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/signing-secrets", "name": "signing-secrets" }, { "mountPath": "/var/run/sigstore/cosign", "name": "oidc-info" }, { "mountPath": "/etc/ssl/certs", "name": "trusted-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-chains-controller", "serviceAccountName": "tekton-chains-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "signing-secrets", "secret": { "defaultMode": 420, "secretName": "signing-secrets" } }, { "name": "oidc-info", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "sigstore", "expirationSeconds": 600, "path": "oidc-token" } } ] } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-15T07:29:54Z", "generation": 1, "labels": { "app": "tekton-events-controller", "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.10.0", "operator.tekton.dev/deployment-spec-applied-hash": "e046087e0d789f0cdc0aa074b3fc01ba", "pipeline.tekton.dev/release": "v1.10.0", "pod-template-hash": "6d8db65c96", "version": "v1.10.0" }, "name": "tekton-events-controller-6d8db65c96", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-events-controller", "uid": "709927d3-570e-4ca2-a408-890d98aba2bb" } ], "resourceVersion": "1968", "uid": "98e54da9-1b72-4fc1-9f62-481fc8a9dac2" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "6d8db65c96" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-events-controller", "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.10.0", "operator.tekton.dev/deployment-spec-applied-hash": "e046087e0d789f0cdc0aa074b3fc01ba", "pipeline.tekton.dev/release": "v1.10.0", "pod-template-hash": "6d8db65c96", "version": "v1.10.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } } }, "containers": [ { "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-events" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SSL_CERT_DIR", "value": "/etc/ssl/certs" }, { "name": "SSL_CERT_FILE", "value": "/etc/config-registry-cert/cert" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/pipeline/events-a9042f7efb0cbade2a868a1ee5ddd52c:v1.10.0@sha256:7568e15a56155b455cdcf43732d7674b66e206b905e85baf5cb7d3c153ec7b63", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "tekton-events-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config-logging", "name": "config-logging" }, { "mountPath": "/etc/config-registry-cert", "name": "config-registry-cert" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-events-controller", "serviceAccountName": "tekton-events-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "config-logging" }, "name": "config-logging" }, { "configMap": { "defaultMode": 420, "name": "config-registry-cert" }, "name": "config-registry-cert" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-15T07:29:54Z", "generation": 1, "labels": { "app": "tekton-operator", "name": "tekton-operator", "operator.tekton.dev/deployment-spec-applied-hash": "d75cb20989c248fde7e8e421b4d1430c", "pod-template-hash": "6d6568fbcf" }, "name": "tekton-operator-proxy-webhook-6d6568fbcf", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-operator-proxy-webhook", "uid": "4fb0d8d7-047a-487f-b5ef-ce5f2e3e4ec2" } ], "resourceVersion": "1889", "uid": "3dbcbfe1-c6c9-4116-8e97-4ca9a5d32f83" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "tekton-operator", "pod-template-hash": "6d6568fbcf" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-operator", "name": "tekton-operator", "operator.tekton.dev/deployment-spec-applied-hash": "d75cb20989c248fde7e8e421b4d1430c", "pod-template-hash": "6d6568fbcf" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-proxy-webhook-config-leader-election" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SECRET_NAME", "value": "proxy-webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-operator-proxy-webhook" } ], "image": "ghcr.io/tektoncd/operator/proxy-webhook-f6167da7bc41b96a27c5529f850e63d1:v0.79.0@sha256:fd1311731585e2be65571d04a6a6c5b822723236aa76a0768bb42f2477bee3f1", "imagePullPolicy": "IfNotPresent", "name": "proxy", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "500Mi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-operators-proxy-webhook", "serviceAccountName": "tekton-operators-proxy-webhook", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-15T07:29:54Z", "generation": 1, "labels": { "app": "tekton-pipelines-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.10.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "9c3422b5e459838a9f1409b2eb255c0c", "pipeline.tekton.dev/release": "v1.10.0", "pod-template-hash": "564cbddb6c", "version": "v1.10.0" }, "name": "tekton-pipelines-controller-564cbddb6c", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-pipelines-controller", "uid": "1eb7968c-d2bf-4ee0-aff3-4127ce6a97cb" } ], "resourceVersion": "1964", "uid": "ebcaa5a7-8661-4cc1-9f34-cd42235dc319" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "564cbddb6c" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.10.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "9c3422b5e459838a9f1409b2eb255c0c", "pipeline.tekton.dev/release": "v1.10.0", "pod-template-hash": "564cbddb6c", "version": "v1.10.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-entrypoint-image", "ghcr.io/tektoncd/pipeline/entrypoint-bff0a22da108bc2f16c818c97641a296:v1.10.0@sha256:8d8b3c2ca74f4d0997d628a4fcce965d097bf147bc8c4a8fa086f59b79b5f60a", "-nop-image", "ghcr.io/tektoncd/pipeline/nop-8eac7c133edad5df719dc37b36b62482:v1.10.0@sha256:13adcca14894b55bf3b6e3c93d3929b1af0b34a7d83948ebdeb85198e53310e4", "-sidecarlogresults-image", "ghcr.io/tektoncd/pipeline/sidecarlogresults-7501c6a20d741631510a448b48ab098f:v1.10.0@sha256:8e3ccf82cc0d2f116568defa4cf9a0e6461ada7ce596685c2bb7a10df99f292c", "-workingdirinit-image", "ghcr.io/tektoncd/pipeline/workingdirinit-0c558922ec6a1b739e550e349f2d5fc1:v1.10.0@sha256:24cfc8896168be54a962b7dcdd8cfdd242372a71bcccd6ee4cc57ea25882eddc", "-shell-image", "cgr.dev/chainguard/busybox@sha256:19f02276bf8dbdd62f069b922f10c65262cc34b710eea26ff928129a736be791", "-shell-image-win", "mcr.microsoft.com/powershell:nanoserver@sha256:b6d5ff841b78bdf2dfed7550000fd4f3437385b8fa686ec0f010be24777654d6", "-disable-ha=false" ], "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults" }, { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-controller" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "CONFIG_SPIRE", "value": "config-spire" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipeline" }, { "name": "SSL_CERT_DIR", "value": "/etc/ssl/certs" }, { "name": "SSL_CERT_FILE", "value": "/etc/config-registry-cert/cert" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/pipeline/controller-10a3e32792f33651396d02b6855a6e36:v1.10.0@sha256:511c343b7f2c866a26a648b5b0fb3cb8f89e4a8e9591fa31b39d07a51a318914", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "tekton-pipelines-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config-logging", "name": "config-logging" }, { "mountPath": "/etc/config-registry-cert", "name": "config-registry-cert" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-controller", "serviceAccountName": "tekton-pipelines-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "config-logging" }, "name": "config-logging" }, { "configMap": { "defaultMode": 420, "name": "config-registry-cert" }, "name": "config-registry-cert" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-15T07:29:54Z", "generation": 2, "labels": { "app": "tekton-pipelines-resolvers", "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.10.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "abc78cb8148410c3f81e660a80576473", "pipeline.tekton.dev/release": "v1.10.0", "pod-template-hash": "59fd8985c5", "version": "v1.10.0" }, "name": "tekton-pipelines-remote-resolvers-59fd8985c5", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-pipelines-remote-resolvers", "uid": "9d9a1aef-2050-4274-b235-86ceca0efa9f" } ], "resourceVersion": "2920", "uid": "ae18f4c9-30b5-477a-abf7-e38eb921a720" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "59fd8985c5" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-resolvers", "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.10.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "abc78cb8148410c3f81e660a80576473", "pipeline.tekton.dev/release": "v1.10.0", "pod-template-hash": "59fd8985c5", "version": "v1.10.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "command": [ "/sbin/tini", "--", "/ko-app/resolvers" ], "env": [ { "name": "ARTIFACT_HUB_API", "value": "https://artifacthub.io/" }, { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-resolvers" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/resolution" }, { "name": "PROBES_PORT", "value": "8080" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TEKTON_HUB_API" } ], "image": "ghcr.io/tektoncd/pipeline/resolvers-ff86b24f130c42b88983d3c13993056d:v1.10.0@sha256:c4194e5138bf3567096f2e931e221ded4e3843ff0c10e39c50c470b4f96574bc", "imagePullPolicy": "IfNotPresent", "name": "controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "1", "memory": "4Gi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp-clone-volume" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-resolvers", "serviceAccountName": "tekton-pipelines-resolvers", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": { "sizeLimit": "4Gi" }, "name": "tmp-clone-volume" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-05-15T07:31:11Z", "generation": 1, "labels": { "app": "tekton-pipelines-resolvers", "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.10.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "c84fa4330278a0610570ab5057c0cb02", "pipeline.tekton.dev/release": "v1.10.0", "pod-template-hash": "5c749bd799", "version": "v1.10.0" }, "name": "tekton-pipelines-remote-resolvers-5c749bd799", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-pipelines-remote-resolvers", "uid": "9d9a1aef-2050-4274-b235-86ceca0efa9f" } ], "resourceVersion": "2910", "uid": "0b388fe4-2480-4dca-80a0-c78346455d72" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "5c749bd799" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-resolvers", "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.10.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "c84fa4330278a0610570ab5057c0cb02", "pipeline.tekton.dev/release": "v1.10.0", "pod-template-hash": "5c749bd799", "version": "v1.10.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "command": [ "/sbin/tini", "--", "/ko-app/resolvers" ], "env": [ { "name": "ARTIFACT_HUB_API", "value": "https://artifacthub.io/" }, { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-resolvers" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "GIT_SSL_CAINFO", "value": "/etc/ssl/certs/ca-bundle.crt" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/resolution" }, { "name": "PROBES_PORT", "value": "8080" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TEKTON_HUB_API" } ], "image": "ghcr.io/tektoncd/pipeline/resolvers-ff86b24f130c42b88983d3c13993056d:v1.10.0@sha256:c4194e5138bf3567096f2e931e221ded4e3843ff0c10e39c50c470b4f96574bc", "imagePullPolicy": "IfNotPresent", "name": "controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "1", "memory": "4Gi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp-clone-volume" }, { "mountPath": "/etc/ssl/certs", "name": "trusted-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-resolvers", "serviceAccountName": "tekton-pipelines-resolvers", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": { "sizeLimit": "4Gi" }, "name": "tmp-clone-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-15T07:29:54Z", "generation": 1, "labels": { "app": "tekton-pipelines-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.10.0", "operator.tekton.dev/deployment-spec-applied-hash": "83ff724c263de669ded3b9d9526836b1", "pipeline.tekton.dev/release": "v1.10.0", "pod-template-hash": "648cf4d468", "version": "v1.10.0" }, "name": "tekton-pipelines-webhook-648cf4d468", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-pipelines-webhook", "uid": "a4da9c26-14e5-43a5-a1f2-23c681b5b2fb" } ], "resourceVersion": "1974", "uid": "b9cce018-e0b2-4e18-ad32-7e25fb414506" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "648cf4d468" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.10.0", "operator.tekton.dev/deployment-spec-applied-hash": "83ff724c263de669ded3b9d9526836b1", "pipeline.tekton.dev/release": "v1.10.0", "pod-template-hash": "648cf4d468", "version": "v1.10.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-webhook" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipeline" }, { "name": "PROBES_PORT", "value": "8080" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_ADMISSION_CONTROLLER_NAME", "value": "webhook.pipeline.tekton.dev" }, { "name": "WEBHOOK_PORT", "value": "8443" }, { "name": "WEBHOOK_SECRET_NAME", "value": "webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-pipelines-webhook" } ], "image": "ghcr.io/tektoncd/pipeline/webhook-d4749e605405422fd87700164e31b2d1:v1.10.0@sha256:92b99b48097f4fbc31423980bc2fa6eb9e232b868d1adc48eef9caee1909f1e1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "webhook", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "cpu": "500m", "memory": "500Mi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-webhook", "serviceAccountName": "tekton-pipelines-webhook", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-15T07:30:38Z", "generation": 1, "labels": { "app": "tekton-results-api", "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.18.0", "operator.tekton.dev/deployment-spec-applied-hash": "10cd0ac72a245c0487bada5455bd0cb3", "pod-template-hash": "5d849b788b" }, "name": "tekton-results-api-5d849b788b", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-results-api", "uid": "e3038721-ee24-43cc-b219-ec38fd5bfa96" } ], "resourceVersion": "2701", "uid": "8ba6d34a-c5b7-411c-9df8-375923a5780a" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.18.0", "pod-template-hash": "5d849b788b" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-results-api", "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.18.0", "operator.tekton.dev/deployment-spec-applied-hash": "10cd0ac72a245c0487bada5455bd0cb3", "pod-template-hash": "5d849b788b" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.18.0" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "DB_HOST", "value": "tekton-results-postgres-service.tekton-pipelines.svc.cluster.local" }, { "name": "DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_PASSWORD", "name": "tekton-results-postgres" } } }, { "name": "DB_USER", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_USER", "name": "tekton-results-postgres" } } }, { "name": "IS_EXTERNAL_DB", "value": "false" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "LOGGING_PLUGIN_TLS_VERIFICATION_DISABLE", "value": "false" }, { "name": "ROUTE_ENABLED", "value": "false" }, { "name": "ROUTE_TLS_TERMINATION", "value": "edge" } ], "image": "ghcr.io/tektoncd/results/api-b1b7ffa9ba32f7c3020c3b68830b30a8:v0.18.0@sha256:72833d31749615fe45d4f7b7a3d4964e5da1cc2966e983fd31f67720d5c22720", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "api", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "startupProbe": { "failureThreshold": 10, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tekton/results", "name": "config", "readOnly": true }, { "mountPath": "/etc/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-results-api", "serviceAccountName": "tekton-results-api", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "tekton-results-api-config" }, "name": "config" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-15T07:30:38Z", "generation": 1, "labels": { "app": "tekton-results-retention-policy-agent", "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/version": "v0.18.0", "operator.tekton.dev/deployment-spec-applied-hash": "6b2d0da04e87227edb306ab1e06c3b8f", "pod-template-hash": "58d6f7bfd5" }, "name": "tekton-results-retention-policy-agent-58d6f7bfd5", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-results-retention-policy-agent", "uid": "00a251e2-e55b-45ea-b1ce-c7ab599a7176" } ], "resourceVersion": "2548", "uid": "049ece5f-7d6e-4ebe-8fcc-ae1d01e59b6c" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/version": "v0.18.0", "pod-template-hash": "58d6f7bfd5" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-results-retention-policy-agent", "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/version": "v0.18.0", "operator.tekton.dev/deployment-spec-applied-hash": "6b2d0da04e87227edb306ab1e06c3b8f", "pod-template-hash": "58d6f7bfd5" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "tekton-results-config-logging" }, { "name": "DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_PASSWORD", "name": "tekton-results-postgres" } } }, { "name": "DB_USER", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_USER", "name": "tekton-results-postgres" } } }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/results/retention-policy-agent-07427b345034d96a9a27896ebb138518:v0.18.0@sha256:b523e3d2bc70fbf8089b8b5ee42b506ccd335f10c633e7f975ec0d250e0d2aea", "imagePullPolicy": "IfNotPresent", "name": "retention-policy-agent", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tekton/results", "name": "config", "readOnly": true }, { "mountPath": "/etc/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-results-watcher", "serviceAccountName": "tekton-results-watcher", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "tekton-results-api-config" }, "name": "config" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-15T07:30:38Z", "generation": 1, "labels": { "app": "tekton-results-watcher", "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.18.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "6badf139127c1027d0f6adba536b2e59", "pod-template-hash": "79bd888d7b" }, "name": "tekton-results-watcher-79bd888d7b", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-results-watcher", "uid": "aab8402c-883c-416a-9f4e-dc89397e656f" } ], "resourceVersion": "2570", "uid": "1d044707-de86-4ecc-93d9-407874190b86" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.18.0", "pod-template-hash": "79bd888d7b" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-results-watcher", "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.18.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "6badf139127c1027d0f6adba536b2e59", "pod-template-hash": "79bd888d7b" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.18.0" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-api_addr", "$(TEKTON_RESULTS_API_SERVICE)", "-auth_mode", "$(AUTH_MODE)" ], "env": [ { "name": "AUTH_MODE", "value": "token" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-results-config-leader-election" }, { "name": "CONFIG_LOGGING_NAME", "value": "tekton-results-config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-results-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/results" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TEKTON_RESULTS_API_SERVICE", "value": "tekton-results-api-service.tekton-pipelines.svc.cluster.local:8080" } ], "image": "ghcr.io/tektoncd/results/watcher-83f971ea227fb24157c0c699b824a628:v0.18.0@sha256:4b50291457cb63028e5f9e2acb921b852d9ad0f265562ea0fa83bafc8a58b367", "imagePullPolicy": "IfNotPresent", "name": "watcher", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-results-watcher", "serviceAccountName": "tekton-results-watcher", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-15T07:30:16Z", "generation": 1, "labels": { "app": "tekton-triggers-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.35.0", "operator.tekton.dev/deployment-spec-applied-hash": "48ff0a9441ad434f089ccea8093abce5", "pod-template-hash": "79bfcd5bfb", "triggers.tekton.dev/release": "v0.35.0", "version": "v0.35.0" }, "name": "tekton-triggers-controller-79bfcd5bfb", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-triggers-controller", "uid": "7302d119-1123-482b-8344-eb6bc30ea559" } ], "resourceVersion": "2199", "uid": "b58d01b7-1a23-4fd1-9557-1cee81462b4d" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers", "pod-template-hash": "79bfcd5bfb" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.35.0", "operator.tekton.dev/deployment-spec-applied-hash": "48ff0a9441ad434f089ccea8093abce5", "pod-template-hash": "79bfcd5bfb", "triggers.tekton.dev/release": "v0.35.0", "version": "v0.35.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-logtostderr", "-stderrthreshold", "INFO", "-el-image", "ghcr.io/tektoncd/triggers/eventlistenersink-7ad1faa98cddbcb0c24990303b220bb8:v0.35.0@sha256:d4ddfc09a5389474452644826540973a53fea11be718abf7ab3d04159c29ed05", "-el-port", "8080", "-el-security-context=true", "-el-read-only-root-filesystem=true", "-el-events", "disable", "-el-readtimeout", "5", "-el-writetimeout", "40", "-el-idletimeout", "120", "-el-timeouthandler", "30", "-el-httpclient-readtimeout", "30", "-el-httpclient-keep-alive", "30", "-el-httpclient-tlshandshaketimeout", "10", "-el-httpclient-responseheadertimeout", "10", "-el-httpclient-expectcontinuetimeout", "1", "-period-seconds", "10", "-failure-threshold", "3" ], "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults-triggers" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-triggers-controllers" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability-triggers" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "METRICS_PROMETHEUS_PORT", "value": "9000" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/triggers/controller-f656ca31de179ab913fa76abc255c315:v0.35.0@sha256:59addf5899cd2cf1e74001ddf7ad30e0492b8c80b80857c351e2deac545d9555", "imagePullPolicy": "IfNotPresent", "name": "tekton-triggers-controller", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-controller", "serviceAccountName": "tekton-triggers-controller", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-15T07:30:16Z", "generation": 1, "labels": { "app": "tekton-triggers-core-interceptors", "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.35.0", "operator.tekton.dev/deployment-spec-applied-hash": "54518c322714c4ebcbc7b5e7be990e4e", "pod-template-hash": "668cbbb8c6", "triggers.tekton.dev/release": "v0.35.0", "version": "v0.35.0" }, "name": "tekton-triggers-core-interceptors-668cbbb8c6", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-triggers-core-interceptors", "uid": "aae87d82-8cfd-40f5-bd12-4b5826323909" } ], "resourceVersion": "2286", "uid": "46ad63f0-24c5-492c-bec2-f4ddaa8c5f7a" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers", "pod-template-hash": "668cbbb8c6" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-core-interceptors", "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.35.0", "operator.tekton.dev/deployment-spec-applied-hash": "54518c322714c4ebcbc7b5e7be990e4e", "pod-template-hash": "668cbbb8c6", "triggers.tekton.dev/release": "v0.35.0", "version": "v0.35.0" } }, "spec": { "containers": [ { "args": [ "-logtostderr", "-stderrthreshold", "INFO" ], "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability-triggers" }, { "name": "INTERCEPTOR_TLS_SECRET_NAME", "value": "tekton-triggers-core-interceptors-certs" }, { "name": "INTERCEPTOR_TLS_SVC_NAME", "value": "tekton-triggers-core-interceptors" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/triggers/interceptors-3176d6a3f314c3655b30bfd36e421dd5:v0.35.0@sha256:5666d72e68d9138fc1919a6758ea990424aa17c27c34e53bc69bcfb81ad121ea", "imagePullPolicy": "IfNotPresent", "name": "tekton-triggers-core-interceptors", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-core-interceptors", "serviceAccountName": "tekton-triggers-core-interceptors", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-15T07:30:16Z", "generation": 1, "labels": { "app": "tekton-triggers-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.35.0", "operator.tekton.dev/deployment-spec-applied-hash": "3ad7156fbb9ee902565fe484d9be9ef3", "pod-template-hash": "687fccdd66", "triggers.tekton.dev/release": "v0.35.0", "version": "v0.35.0" }, "name": "tekton-triggers-webhook-687fccdd66", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-triggers-webhook", "uid": "1c945e8d-42a1-49da-960e-4ee05e99d49b" } ], "resourceVersion": "2222", "uid": "5bd6a9f5-1d00-456e-9a99-590f5d377388" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers", "pod-template-hash": "687fccdd66" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.35.0", "operator.tekton.dev/deployment-spec-applied-hash": "3ad7156fbb9ee902565fe484d9be9ef3", "pod-template-hash": "687fccdd66", "triggers.tekton.dev/release": "v0.35.0", "version": "v0.35.0" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-triggers-webhook" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SECRET_NAME", "value": "triggers-webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-triggers-webhook" } ], "image": "ghcr.io/tektoncd/triggers/webhook-dd1edc925ee1772a9f76e2c1bc291ef6:v0.35.0@sha256:bc97fb4dd2e55b5723e3f2ee7c5a9a5beea4a1362c0a4b2fa40a2cf638cbd9c7", "imagePullPolicy": "IfNotPresent", "name": "webhook", "ports": [ { "containerPort": 9000, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-webhook", "serviceAccountName": "tekton-triggers-webhook", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } } ], "kind": "List", "metadata": { "resourceVersion": "" } }