{ "apiVersion": "v1", "items": [ { "apiVersion": "apps/v1", "kind": "StatefulSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "squid-in-cluster-local:apps/StatefulSet:caching/artifact-registry-proxy", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"StatefulSet\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"squid-in-cluster-local:apps/StatefulSet:caching/artifact-registry-proxy\"},\"labels\":{\"app.kubernetes.io/component\":\"nginx-caching\",\"app.kubernetes.io/instance\":\"release-name\",\"app.kubernetes.io/managed-by\":\"Helm\",\"app.kubernetes.io/name\":\"artifact-registry-proxy\",\"app.kubernetes.io/version\":\"5a803139450b968160cb914c7dd221a8db07f2d7\",\"helm.sh/chart\":\"squid-helm-0.1.1409_5a80313\"},\"name\":\"artifact-registry-proxy\",\"namespace\":\"caching\"},\"spec\":{\"minReadySeconds\":30,\"replicas\":1,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"nginx-caching\",\"app.kubernetes.io/instance\":\"release-name\",\"app.kubernetes.io/name\":\"artifact-registry-proxy\"}},\"serviceName\":\"artifact-registry-proxy-headless\",\"template\":{\"metadata\":{\"annotations\":{\"checksum/config\":\"50b95ed23fb241374f8c75ca48a705c7fcd1d28ca4bdbcc541e6d0f889cdb0df\"},\"labels\":{\"app.kubernetes.io/component\":\"nginx-caching\",\"app.kubernetes.io/instance\":\"release-name\",\"app.kubernetes.io/name\":\"artifact-registry-proxy\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"nginx-caching\",\"app.kubernetes.io/instance\":\"release-name\",\"app.kubernetes.io/name\":\"artifact-registry-proxy\"}},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"args\":[\"-e\",\"/dev/stderr\",\"-g\",\"daemon off;\"],\"command\":[\"nginx\"],\"image\":\"registry.access.redhat.com/ubi10/nginx-126@sha256:866a1eb7e58d8c916ed5f916cb734a45edaa0b891affbd78e7cb1e68a5b31c33\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/health\",\"port\":\"https\",\"scheme\":\"HTTPS\"},\"initialDelaySeconds\":10,\"periodSeconds\":10},\"name\":\"nginx\",\"ports\":[{\"containerPort\":8080,\"name\":\"http\",\"protocol\":\"TCP\"},{\"containerPort\":8443,\"name\":\"https\",\"protocol\":\"TCP\"},{\"containerPort\":8081,\"name\":\"stub-status\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/health\",\"port\":\"https\",\"scheme\":\"HTTPS\"},\"initialDelaySeconds\":5,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"volumeMounts\":[{\"mountPath\":\"/var/cache/nginx\",\"name\":\"cache\"},{\"mountPath\":\"/tmp\",\"name\":\"tmp\"},{\"mountPath\":\"/var/run\",\"name\":\"run\"},{\"mountPath\":\"/etc/nginx/tls\",\"name\":\"tls\",\"readOnly\":true},{\"mountPath\":\"/etc/nginx/nginx.conf\",\"name\":\"config\",\"readOnly\":true,\"subPath\":\"nginx.conf\"}]},{\"args\":[\"--config=/etc/exporter/config.yaml\"],\"image\":\"quay.io/konflux-ci/caching/access-log-exporter:5a803139450b968160cb914c7dd221a8db07f2d7\",\"imagePullPolicy\":\"IfNotPresent\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/metrics\",\"port\":\"metrics\",\"scheme\":\"HTTPS\"},\"initialDelaySeconds\":10,\"periodSeconds\":30},\"name\":\"access-log-exporter\",\"ports\":[{\"containerPort\":9113,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/metrics\",\"port\":\"metrics\",\"scheme\":\"HTTPS\"},\"initialDelaySeconds\":5,\"periodSeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"32Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/exporter\",\"name\":\"exporter-config\",\"readOnly\":true},{\"mountPath\":\"/etc/exporter/tls\",\"name\":\"tls\",\"readOnly\":true},{\"mountPath\":\"/tmp\",\"name\":\"tmp\"}]}],\"initContainers\":[{\"args\":[\"set -e\\nRESOLVER=$(awk '/^nameserver/{print $2; exit}' /etc/resolv.conf)\\nsed -e \\\"s|__RESOLVER__|${RESOLVER}|g\\\" \\\\\\n /config-template/nginx.conf \\u003e /config/nginx.conf\\n\"],\"command\":[\"sh\",\"-c\"],\"image\":\"registry.access.redhat.com/ubi10/nginx-126@sha256:866a1eb7e58d8c916ed5f916cb734a45edaa0b891affbd78e7cb1e68a5b31c33\",\"name\":\"init-config\",\"resources\":{\"limits\":{\"cpu\":\"10m\",\"memory\":\"32Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"32Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"volumeMounts\":[{\"mountPath\":\"/config-template\",\"name\":\"config-template\",\"readOnly\":true},{\"mountPath\":\"/config\",\"name\":\"config\"}]}],\"securityContext\":{\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"topologySpreadConstraints\":[{\"labelSelector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"nginx-caching\",\"app.kubernetes.io/instance\":\"release-name\",\"app.kubernetes.io/name\":\"artifact-registry-proxy\"}},\"maxSkew\":1,\"topologyKey\":\"topology.kubernetes.io/zone\",\"whenUnsatisfiable\":\"ScheduleAnyway\"}],\"volumes\":[{\"configMap\":{\"name\":\"artifact-registry-proxy-config\"},\"name\":\"config-template\"},{\"name\":\"tls\",\"secret\":{\"secretName\":\"artifact-registry-proxy-tls\"}},{\"emptyDir\":{},\"name\":\"config\"},{\"emptyDir\":{\"sizeLimit\":\"100Mi\"},\"name\":\"tmp\"},{\"emptyDir\":{},\"name\":\"run\"},{\"configMap\":{\"name\":\"artifact-registry-proxy-exporter-config\"},\"name\":\"exporter-config\"}]}},\"volumeClaimTemplates\":[{\"metadata\":{\"name\":\"cache\"},\"spec\":{\"accessModes\":[\"ReadWriteOnce\"],\"resources\":{\"requests\":{\"storage\":\"1024Mi\"}}}}]}}\n" }, "creationTimestamp": "2026-04-22T13:31:00Z", "generation": 1, "labels": { "app.kubernetes.io/component": "nginx-caching", "app.kubernetes.io/instance": "release-name", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "artifact-registry-proxy", "app.kubernetes.io/version": "5a803139450b968160cb914c7dd221a8db07f2d7", "helm.sh/chart": "squid-helm-0.1.1409_5a80313" }, "name": "artifact-registry-proxy", "namespace": "caching", "resourceVersion": "33116", "uid": "ff2bb4b6-8c48-4b2c-815f-7537e9c0fb7e" }, "spec": { "minReadySeconds": 30, "persistentVolumeClaimRetentionPolicy": { "whenDeleted": "Retain", "whenScaled": "Retain" }, "podManagementPolicy": "OrderedReady", "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "nginx-caching", "app.kubernetes.io/instance": "release-name", "app.kubernetes.io/name": "artifact-registry-proxy" } }, "serviceName": "artifact-registry-proxy-headless", "template": { "metadata": { "annotations": { "checksum/config": "50b95ed23fb241374f8c75ca48a705c7fcd1d28ca4bdbcc541e6d0f889cdb0df" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "nginx-caching", "app.kubernetes.io/instance": "release-name", "app.kubernetes.io/name": "artifact-registry-proxy" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "nginx-caching", "app.kubernetes.io/instance": "release-name", "app.kubernetes.io/name": "artifact-registry-proxy" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-e", "/dev/stderr", "-g", "daemon off;" ], "command": [ "nginx" ], "image": "registry.access.redhat.com/ubi10/nginx-126@sha256:866a1eb7e58d8c916ed5f916cb734a45edaa0b891affbd78e7cb1e68a5b31c33", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "https", "scheme": "HTTPS" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "nginx", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" }, { "containerPort": 8443, "name": "https", "protocol": "TCP" }, { "containerPort": 8081, "name": "stub-status", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "https", "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "100m", "memory": "128Mi" }, "requests": { "cpu": "100m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/cache/nginx", "name": "cache" }, { "mountPath": "/tmp", "name": "tmp" }, { "mountPath": "/var/run", "name": "run" }, { "mountPath": "/etc/nginx/tls", "name": "tls", "readOnly": true }, { "mountPath": "/etc/nginx/nginx.conf", "name": "config", "readOnly": true, "subPath": "nginx.conf" } ] }, { "args": [ "--config=/etc/exporter/config.yaml" ], "image": "quay.io/konflux-ci/caching/access-log-exporter:5a803139450b968160cb914c7dd221a8db07f2d7", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/metrics", "port": "metrics", "scheme": "HTTPS" }, "initialDelaySeconds": 10, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "access-log-exporter", "ports": [ { "containerPort": 9113, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/metrics", "port": "metrics", "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "100m", "memory": "64Mi" }, "requests": { "cpu": "10m", "memory": "32Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/exporter", "name": "exporter-config", "readOnly": true }, { "mountPath": "/etc/exporter/tls", "name": "tls", "readOnly": true }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "set -e\nRESOLVER=$(awk '/^nameserver/{print $2; exit}' /etc/resolv.conf)\nsed -e \"s|__RESOLVER__|${RESOLVER}|g\" \\\n /config-template/nginx.conf \u003e /config/nginx.conf\n" ], "command": [ "sh", "-c" ], "image": "registry.access.redhat.com/ubi10/nginx-126@sha256:866a1eb7e58d8c916ed5f916cb734a45edaa0b891affbd78e7cb1e68a5b31c33", "imagePullPolicy": "IfNotPresent", "name": "init-config", "resources": { "limits": { "cpu": "10m", "memory": "32Mi" }, "requests": { "cpu": "10m", "memory": "32Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/config-template", "name": "config-template", "readOnly": true }, { "mountPath": "/config", "name": "config" } ] } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "nginx-caching", "app.kubernetes.io/instance": "release-name", "app.kubernetes.io/name": "artifact-registry-proxy" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "ScheduleAnyway" } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "artifact-registry-proxy-config" }, "name": "config-template" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "artifact-registry-proxy-tls" } }, { "emptyDir": {}, "name": "config" }, { "emptyDir": { "sizeLimit": "100Mi" }, "name": "tmp" }, { "emptyDir": {}, "name": "run" }, { "configMap": { "defaultMode": 420, "name": "artifact-registry-proxy-exporter-config" }, "name": "exporter-config" } ] } }, "updateStrategy": { "rollingUpdate": { "partition": 0 }, "type": "RollingUpdate" }, "volumeClaimTemplates": [ { "apiVersion": "v1", "kind": "PersistentVolumeClaim", "metadata": { "creationTimestamp": null, "name": "cache" }, "spec": { "accessModes": [ "ReadWriteOnce" ], "resources": { "requests": { "storage": "1Gi" } }, "volumeMode": "Filesystem" }, "status": { "phase": "Pending" } } ] }, "status": { "availableReplicas": 1, "collisionCount": 0, "currentReplicas": 1, "currentRevision": "artifact-registry-proxy-79b944f88", "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updateRevision": "artifact-registry-proxy-79b944f88", "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "StatefulSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "squid-in-cluster-local:apps/StatefulSet:caching/squid", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"StatefulSet\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"squid-in-cluster-local:apps/StatefulSet:caching/squid\"},\"labels\":{\"app.kubernetes.io/component\":\"squid-caching\",\"app.kubernetes.io/instance\":\"release-name\",\"app.kubernetes.io/managed-by\":\"Helm\",\"app.kubernetes.io/name\":\"squid\",\"app.kubernetes.io/version\":\"5a803139450b968160cb914c7dd221a8db07f2d7\",\"helm.sh/chart\":\"squid-helm-0.1.1409_5a80313\"},\"name\":\"squid\",\"namespace\":\"caching\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"squid-caching\",\"app.kubernetes.io/instance\":\"release-name\",\"app.kubernetes.io/name\":\"squid\"}},\"serviceName\":\"squid-headless\",\"template\":{\"metadata\":{\"annotations\":{\"checksum/config\":\"aba1c52fc12cde091cfd5397093fce7880a46ea13f95678b89f2b24f0e1e59e8\"},\"labels\":{\"app.kubernetes.io/component\":\"squid-caching\",\"app.kubernetes.io/instance\":\"release-name\",\"app.kubernetes.io/name\":\"squid\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"squid-caching\",\"app.kubernetes.io/instance\":\"release-name\",\"app.kubernetes.io/name\":\"squid\"}},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"args\":[\"squid-with-per-site-exporter\",\"-web.listen-address\",\":9302\",\"-web.tls-cert-file\",\"/etc/squid/certs/tls.crt\",\"-web.tls-key-file\",\"/etc/squid/certs/tls.key\"],\"image\":\"quay.io/konflux-ci/caching/squid:5a803139450b968160cb914c7dd221a8db07f2d7\",\"imagePullPolicy\":\"IfNotPresent\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/health\",\"port\":\"per-site-http\",\"scheme\":\"HTTPS\"}},\"name\":\"squid\",\"ports\":[{\"containerPort\":3128,\"name\":\"http\",\"protocol\":\"TCP\"},{\"containerPort\":9302,\"name\":\"per-site-http\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/health\",\"port\":\"per-site-http\",\"scheme\":\"HTTPS\"}},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/squid/squid.conf\",\"name\":\"squid-config\",\"subPath\":\"squid.conf\"},{\"mountPath\":\"/etc/squid/certs\",\"name\":\"squid-certs-secret\",\"readOnly\":true},{\"mountPath\":\"/var/spool/squid/cache\",\"name\":\"squid-spool-cache\"},{\"mountPath\":\"/var/spool/squid/ssl\",\"name\":\"squid-spool-ssl\"},{\"mountPath\":\"/tmp\",\"name\":\"squid-tmp\"},{\"mountPath\":\"/etc/pki/ca-trust/extracted/pem\",\"name\":\"trusted-ca\",\"readOnly\":true}]},{\"args\":[\"icap-server\"],\"image\":\"quay.io/konflux-ci/caching/squid:5a803139450b968160cb914c7dd221a8db07f2d7\",\"imagePullPolicy\":\"IfNotPresent\",\"livenessProbe\":{\"tcpSocket\":{\"port\":\"icap\"}},\"name\":\"icap-server\",\"ports\":[{\"containerPort\":1344,\"name\":\"icap\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"tcpSocket\":{\"port\":\"icap\"}},\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"32Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}}},{\"args\":[\"exporter\",\"-squid-hostname\",\"localhost\",\"-squid-port\",\"3128\",\"-listen\",\":9301\",\"-metrics-path\",\"/metrics\"],\"env\":[{\"name\":\"SQUID_HOSTNAME\",\"value\":\"localhost\"},{\"name\":\"SQUID_PORT\",\"value\":\"3128\"},{\"name\":\"SQUID_EXPORTER_LISTEN\",\"value\":\":9301\"},{\"name\":\"SQUID_EXPORTER_METRICS_PATH\",\"value\":\"/metrics\"},{\"name\":\"SQUID_EXTRACTSERVICETIMES\",\"value\":\"true\"}],\"image\":\"quay.io/konflux-ci/caching/squid:5a803139450b968160cb914c7dd221a8db07f2d7\",\"imagePullPolicy\":\"IfNotPresent\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/metrics\",\"port\":\"metrics\"},\"initialDelaySeconds\":30,\"periodSeconds\":30},\"name\":\"squid-exporter\",\"ports\":[{\"containerPort\":9301,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/metrics\",\"port\":\"metrics\"},\"initialDelaySeconds\":5,\"periodSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"16Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}}}],\"securityContext\":{\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"squid\",\"volumes\":[{\"configMap\":{\"name\":\"squid-config\"},\"name\":\"squid-config\"},{\"name\":\"squid-certs-secret\",\"secret\":{\"secretName\":\"caching-tls\"}},{\"emptyDir\":{},\"name\":\"squid-spool-ssl\"},{\"emptyDir\":{},\"name\":\"squid-tmp\"},{\"configMap\":{\"items\":[{\"key\":\"ca-bundle.crt\",\"path\":\"tls-ca-bundle.pem\"}],\"name\":\"trusted-ca\"},\"name\":\"trusted-ca\"}]}},\"volumeClaimTemplates\":[{\"metadata\":{\"name\":\"squid-spool-cache\"},\"spec\":{\"accessModes\":[\"ReadWriteOnce\"],\"resources\":{\"requests\":{\"storage\":\"192Mi\"}}}}]}}\n" }, "creationTimestamp": "2026-04-22T13:31:00Z", "generation": 1, "labels": { "app.kubernetes.io/component": "squid-caching", "app.kubernetes.io/instance": "release-name", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "squid", "app.kubernetes.io/version": "5a803139450b968160cb914c7dd221a8db07f2d7", "helm.sh/chart": "squid-helm-0.1.1409_5a80313" }, "name": "squid", "namespace": "caching", "resourceVersion": "29718", "uid": "00998223-8683-40a3-a35b-8ca74c333988" }, "spec": { "persistentVolumeClaimRetentionPolicy": { "whenDeleted": "Retain", "whenScaled": "Retain" }, "podManagementPolicy": "OrderedReady", "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "squid-caching", "app.kubernetes.io/instance": "release-name", "app.kubernetes.io/name": "squid" } }, "serviceName": "squid-headless", "template": { "metadata": { "annotations": { "checksum/config": "aba1c52fc12cde091cfd5397093fce7880a46ea13f95678b89f2b24f0e1e59e8" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "squid-caching", "app.kubernetes.io/instance": "release-name", "app.kubernetes.io/name": "squid" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "squid-caching", "app.kubernetes.io/instance": "release-name", "app.kubernetes.io/name": "squid" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "squid-with-per-site-exporter", "-web.listen-address", ":9302", "-web.tls-cert-file", "/etc/squid/certs/tls.crt", "-web.tls-key-file", "/etc/squid/certs/tls.key" ], "image": "quay.io/konflux-ci/caching/squid:5a803139450b968160cb914c7dd221a8db07f2d7", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "per-site-http", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "squid", "ports": [ { "containerPort": 3128, "name": "http", "protocol": "TCP" }, { "containerPort": 9302, "name": "per-site-http", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "per-site-http", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "200m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/squid/squid.conf", "name": "squid-config", "subPath": "squid.conf" }, { "mountPath": "/etc/squid/certs", "name": "squid-certs-secret", "readOnly": true }, { "mountPath": "/var/spool/squid/cache", "name": "squid-spool-cache" }, { "mountPath": "/var/spool/squid/ssl", "name": "squid-spool-ssl" }, { "mountPath": "/tmp", "name": "squid-tmp" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca", "readOnly": true } ] }, { "args": [ "icap-server" ], "image": "quay.io/konflux-ci/caching/squid:5a803139450b968160cb914c7dd221a8db07f2d7", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": "icap" }, "timeoutSeconds": 1 }, "name": "icap-server", "ports": [ { "containerPort": 1344, "name": "icap", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": "icap" }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "100m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "32Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" }, { "args": [ "exporter", "-squid-hostname", "localhost", "-squid-port", "3128", "-listen", ":9301", "-metrics-path", "/metrics" ], "env": [ { "name": "SQUID_HOSTNAME", "value": "localhost" }, { "name": "SQUID_PORT", "value": "3128" }, { "name": "SQUID_EXPORTER_LISTEN", "value": ":9301" }, { "name": "SQUID_EXPORTER_METRICS_PATH", "value": "/metrics" }, { "name": "SQUID_EXTRACTSERVICETIMES", "value": "true" } ], "image": "quay.io/konflux-ci/caching/squid:5a803139450b968160cb914c7dd221a8db07f2d7", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/metrics", "port": "metrics", "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "squid-exporter", "ports": [ { "containerPort": 9301, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/metrics", "port": "metrics", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "100m", "memory": "64Mi" }, "requests": { "cpu": "10m", "memory": "16Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "squid", "serviceAccountName": "squid", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "squid-config" }, "name": "squid-config" }, { "name": "squid-certs-secret", "secret": { "defaultMode": 420, "secretName": "caching-tls" } }, { "emptyDir": {}, "name": "squid-spool-ssl" }, { "emptyDir": {}, "name": "squid-tmp" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca" }, "name": "trusted-ca" } ] } }, "updateStrategy": { "rollingUpdate": { "partition": 0 }, "type": "RollingUpdate" }, "volumeClaimTemplates": [ { "apiVersion": "v1", "kind": "PersistentVolumeClaim", "metadata": { "creationTimestamp": null, "name": "squid-spool-cache" }, "spec": { "accessModes": [ "ReadWriteOnce" ], "resources": { "requests": { "storage": "192Mi" } }, "volumeMode": "Filesystem" }, "status": { "phase": "Pending" } } ] }, "status": { "availableReplicas": 1, "collisionCount": 0, "currentReplicas": 1, "currentRevision": "squid-c85bc646b", "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updateRevision": "squid-c85bc646b", "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "StatefulSet", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/sync-wave": "0", "argocd.argoproj.io/tracking-id": "backup-in-cluster-local:minio.min.io/Tenant:openshift-adp/oadp-minio-storage", "min.io/revision": "0", "prometheus.io/path": "/minio/v2/metrics/cluster", "prometheus.io/port": "9000", "prometheus.io/scrape": "true" }, "creationTimestamp": "2026-04-22T13:31:08Z", "generation": 1, "labels": { "app": "minio", "v1.min.io/console": "oadp-minio-storage-console", "v1.min.io/pool": "pool-0", "v1.min.io/tenant": "oadp-minio-storage" }, "name": "oadp-minio-storage-pool-0", "namespace": "openshift-adp", "ownerReferences": [ { "apiVersion": "minio.min.io/v2", "blockOwnerDeletion": true, "controller": true, "kind": "Tenant", "name": "oadp-minio-storage", "uid": "3204b5c5-221a-4b2a-8a00-d6ed0413fa35" } ], "resourceVersion": "30185", "uid": "9b7108cc-631d-40ad-9e8a-9fd2fab6c4df" }, "spec": { "persistentVolumeClaimRetentionPolicy": { "whenDeleted": "Retain", "whenScaled": "Retain" }, "podManagementPolicy": "Parallel", "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "v1.min.io/console": "oadp-minio-storage-console", "v1.min.io/pool": "pool-0", "v1.min.io/tenant": "oadp-minio-storage" } }, "serviceName": "oadp-minio-storage-hl", "template": { "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/sync-wave": "0", "argocd.argoproj.io/tracking-id": "backup-in-cluster-local:minio.min.io/Tenant:openshift-adp/oadp-minio-storage", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"minio.min.io/v2\",\"kind\":\"Tenant\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/sync-wave\":\"0\",\"argocd.argoproj.io/tracking-id\":\"backup-in-cluster-local:minio.min.io/Tenant:openshift-adp/oadp-minio-storage\",\"prometheus.io/path\":\"/minio/v2/metrics/cluster\",\"prometheus.io/port\":\"9000\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"app\":\"minio\"},\"name\":\"oadp-minio-storage\",\"namespace\":\"openshift-adp\"},\"spec\":{\"certConfig\":{},\"configuration\":{\"name\":\"minio-storage-configuration\"},\"env\":[],\"exposeServices\":{\"minio\":false},\"externalCaCertSecret\":[],\"externalCertSecret\":[],\"externalClientCertSecrets\":[],\"features\":{\"bucketDNS\":false,\"domains\":{}},\"image\":\"quay.io/minio/minio:RELEASE.2024-08-26T15-33-07Z\",\"imagePullSecret\":{},\"mountPath\":\"/export\",\"podManagementPolicy\":\"Parallel\",\"pools\":[{\"affinity\":{\"nodeAffinity\":{},\"podAffinity\":{},\"podAntiAffinity\":{}},\"containerSecurityContext\":{},\"name\":\"pool-0\",\"nodeSelector\":{},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"256Mi\"}},\"securityContext\":{},\"servers\":1,\"tolerations\":[],\"volumeClaimTemplate\":{\"apiVersion\":\"v1\",\"kind\":\"persistentvolumeclaims\",\"metadata\":{},\"spec\":{\"accessModes\":[\"ReadWriteOnce\"],\"resources\":{\"requests\":{\"storage\":\"1Gi\"}}},\"status\":{}},\"volumesPerServer\":2}],\"priorityClassName\":\"\",\"requestAutoCert\":true,\"serviceMetadata\":{\"consoleServiceAnnotations\":{},\"consoleServiceLabels\":{},\"minioServiceAnnotations\":{},\"minioServiceLabels\":{}},\"subPath\":\"\"}}\n", "min.io/revision": "0", "prometheus.io/path": "/minio/v2/metrics/cluster", "prometheus.io/port": "9000", "prometheus.io/scrape": "true" }, "creationTimestamp": null, "labels": { "app": "minio", "v1.min.io/console": "oadp-minio-storage-console", "v1.min.io/pool": "pool-0", "v1.min.io/tenant": "oadp-minio-storage" } }, "spec": { "affinity": { "nodeAffinity": {}, "podAffinity": {}, "podAntiAffinity": {} }, "containers": [ { "args": [ "server", "--certs-dir", "/tmp/certs", "--console-address", ":9443" ], "env": [ { "name": "MINIO_CONFIG_ENV_FILE", "value": "/tmp/minio/config.env" }, { "name": "MINIO_OPERATOR_VERSION", "value": "5.0.15" }, { "name": "MINIO_PROMETHEUS_JOB_ID", "value": "minio-job" }, { "name": "MINIO_SERVER_URL", "value": "https://minio.openshift-adp.svc.cluster.local:443" }, { "name": "MINIO_UPDATE", "value": "on" }, { "name": "MINIO_UPDATE_MINISIGN_PUBKEY", "value": "RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav" } ], "image": "quay.io/minio/minio:RELEASE.2024-08-26T15-33-07Z", "imagePullPolicy": "IfNotPresent", "name": "minio", "ports": [ { "containerPort": 9000, "protocol": "TCP" }, { "containerPort": 9443, "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "512Mi" }, "requests": { "cpu": "50m", "memory": "256Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp/minio/", "name": "cfg-vol" }, { "mountPath": "/export0", "name": "0" }, { "mountPath": "/export1", "name": "1" }, { "mountPath": "/tmp/certs", "name": "oadp-minio-storage-tls" } ] }, { "args": [ "sidecar", "--tenant", "oadp-minio-storage", "--config-name", "minio-storage-configuration" ], "env": [ { "name": "CLUSTER_DOMAIN", "value": "cluster.local" } ], "image": "quay.io/minio/operator:v5.0.15", "imagePullPolicy": "IfNotPresent", "name": "sidecar", "resources": {}, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp/minio/", "name": "cfg-vol" }, { "mountPath": "/tmp/minio-config", "name": "configuration" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "validate", "--tenant", "oadp-minio-storage" ], "env": [ { "name": "CLUSTER_DOMAIN", "value": "cluster.local" } ], "image": "quay.io/minio/operator:v5.0.15", "imagePullPolicy": "IfNotPresent", "name": "validate-arguments", "resources": {}, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp/minio/", "name": "cfg-vol" }, { "mountPath": "/tmp/minio-config", "name": "configuration" } ] } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroupChangePolicy": "OnRootMismatch" }, "serviceAccount": "oadp-minio-storage-sa", "serviceAccountName": "oadp-minio-storage-sa", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "cfg-vol" }, { "name": "oadp-minio-storage-tls", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "public.crt", "path": "public.crt" }, { "key": "private.key", "path": "private.key" }, { "key": "public.crt", "path": "CAs/public.crt" } ], "name": "oadp-minio-storage-tls" } } ] } }, { "name": "configuration", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "minio-storage-configuration" } } ] } } ] } }, "updateStrategy": { "rollingUpdate": { "partition": 0 }, "type": "RollingUpdate" }, "volumeClaimTemplates": [ { "apiVersion": "v1", "kind": "PersistentVolumeClaim", "metadata": { "creationTimestamp": null, "name": "0" }, "spec": { "accessModes": [ "ReadWriteOnce" ], "resources": { "requests": { "storage": "1Gi" } }, "volumeMode": "Filesystem" }, "status": { "phase": "Pending" } }, { "apiVersion": "v1", "kind": "PersistentVolumeClaim", "metadata": { "creationTimestamp": null, "name": "1" }, "spec": { "accessModes": [ "ReadWriteOnce" ], "resources": { "requests": { "storage": "1Gi" } }, "volumeMode": "Filesystem" }, "status": { "phase": "Pending" } } ] }, "status": { "availableReplicas": 1, "collisionCount": 0, "currentReplicas": 1, "currentRevision": "oadp-minio-storage-pool-0-6fddb9c55f", "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updateRevision": "oadp-minio-storage-pool-0-6fddb9c55f", "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "StatefulSet", "metadata": { "creationTimestamp": "2026-04-22T13:27:13Z", "generation": 2, "labels": { "app.kubernetes.io/component": "application-controller", "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops-application-controller", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-application-controller", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "30c3eb9d-9fe7-412b-8751-75cd8606e87f" } ], "resourceVersion": "17833", "uid": "1dd3c55c-a552-487d-8d70-fdfa7b55842c" }, "spec": { "persistentVolumeClaimRetentionPolicy": { "whenDeleted": "Retain", "whenScaled": "Retain" }, "podManagementPolicy": "OrderedReady", "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/name": "openshift-gitops-application-controller" } }, "serviceName": "openshift-gitops-application-controller", "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "openshift-gitops-application-controller" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "openshift-gitops-argocd-application-controller" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 }, { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/part-of": "argocd" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 5 } ] } }, "containers": [ { "command": [ "argocd-application-controller", "--operation-processors", "10", "--redis", "openshift-gitops-redis.openshift-gitops.svc.cluster.local:6379", "--repo-server", "openshift-gitops-repo-server.openshift-gitops.svc.cluster.local:8081", "--status-processors", "20", "--kubectl-parallelism-limit", "10", "--loglevel", "info", "--logformat", "text" ], "env": [ { "name": "HOME", "value": "/home/argocd" }, { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "admin.password", "name": "openshift-gitops-redis-initial-password" } } } ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:911733d78ae6f36f642b4d63f044cd102b7eee170508eaf518ac7acf0f339698", "imagePullPolicy": "Always", "name": "argocd-application-controller", "ports": [ { "containerPort": 8082, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8082, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "4", "memory": "4Gi" }, "requests": { "cpu": "250m", "memory": "1Gi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/controller/tls", "name": "argocd-repo-server-tls" }, { "mountPath": "/app/config/controller/tls/redis", "name": "argocd-operator-redis-tls" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-gitops-argocd-application-controller", "serviceAccountName": "openshift-gitops-argocd-application-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "argocd-repo-server-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-repo-server-tls" } }, { "name": "argocd-operator-redis-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-operator-redis-tls" } } ] } }, "updateStrategy": { "rollingUpdate": { "partition": 0 }, "type": "RollingUpdate" } }, "status": { "availableReplicas": 1, "collisionCount": 0, "currentReplicas": 1, "currentRevision": "openshift-gitops-application-controller-64dfbd76d", "observedGeneration": 2, "readyReplicas": 1, "replicas": 1, "updateRevision": "openshift-gitops-application-controller-64dfbd76d", "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "StatefulSet", "metadata": { "annotations": { "operator.prometheus.io/controller-id": "openshift-monitoring/prometheus-operator", "prometheus-operator-input-hash": "3709955188807315603" }, "creationTimestamp": "2026-04-22T13:18:19Z", "generation": 2, "labels": { "app.kubernetes.io/component": "alert-router", "app.kubernetes.io/instance": "main", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "alertmanager", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.27.0", "managed-by": "prometheus-operator" }, "name": "alertmanager-main", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "monitoring.coreos.com/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Alertmanager", "name": "main", "uid": "8d4a4576-b90d-46aa-b494-bf1de370cec8" } ], "resourceVersion": "14352", "uid": "4a400398-b882-4675-989e-2bc12a1f4f89" }, "spec": { "persistentVolumeClaimRetentionPolicy": { "whenDeleted": "Retain", "whenScaled": "Retain" }, "podManagementPolicy": "Parallel", "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "alertmanager": "main", "app.kubernetes.io/instance": "main", "app.kubernetes.io/managed-by": "prometheus-operator", "app.kubernetes.io/name": "alertmanager" } }, "serviceName": "alertmanager-operated", "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "alertmanager", "openshift.io/required-scc": "nonroot", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "alertmanager": "main", "app.kubernetes.io/component": "alert-router", "app.kubernetes.io/instance": "main", "app.kubernetes.io/managed-by": "prometheus-operator", "app.kubernetes.io/name": "alertmanager", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.27.0" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "alert-router", "app.kubernetes.io/instance": "main", "app.kubernetes.io/name": "alertmanager", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--config.file=/etc/alertmanager/config_out/alertmanager.env.yaml", "--storage.path=/alertmanager", "--data.retention=120h", "--cluster.listen-address=[$(POD_IP)]:9094", "--web.listen-address=127.0.0.1:9093", "--web.external-url=https://console-openshift-console.apps.rosa.kx-d937aeccb0.yjz3.p3.openshiftapps.com/monitoring", "--web.route-prefix=/", "--cluster.label=openshift-monitoring/main", "--cluster.peer=alertmanager-main-0.alertmanager-operated:9094", "--cluster.peer=alertmanager-main-1.alertmanager-operated:9094", "--cluster.reconnect-timeout=5m", "--web.config.file=/etc/alertmanager/web_config/web-config.yaml" ], "env": [ { "name": "HTTP_PROXY" }, { "name": "HTTPS_PROXY" }, { "name": "NO_PROXY" }, { "name": "POD_IP", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "status.podIP" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:753017c5c3fd579e45e9c112b3473b8d9f49bd9b137ee86c196c61e59a8ad213", "imagePullPolicy": "IfNotPresent", "name": "alertmanager", "ports": [ { "containerPort": 9094, "name": "mesh-tcp", "protocol": "TCP" }, { "containerPort": 9094, "name": "mesh-udp", "protocol": "UDP" } ], "resources": { "requests": { "cpu": "4m", "memory": "40Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "startupProbe": { "exec": { "command": [ "sh", "-c", "exec curl --fail http://localhost:9093/-/ready" ] }, "failureThreshold": 40, "initialDelaySeconds": 20, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/alertmanager/config", "name": "config-volume" }, { "mountPath": "/etc/alertmanager/config_out", "name": "config-out", "readOnly": true }, { "mountPath": "/etc/alertmanager/certs", "name": "tls-assets", "readOnly": true }, { "mountPath": "/alertmanager", "name": "alertmanager-main-db" }, { "mountPath": "/etc/alertmanager/secrets/alertmanager-main-tls", "name": "secret-alertmanager-main-tls", "readOnly": true }, { "mountPath": "/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy", "name": "secret-alertmanager-kube-rbac-proxy", "readOnly": true }, { "mountPath": "/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-metric", "name": "secret-alertmanager-kube-rbac-proxy-metric", "readOnly": true }, { "mountPath": "/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-web", "name": "secret-alertmanager-kube-rbac-proxy-web", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem/", "name": "alertmanager-trusted-ca-bundle" }, { "mountPath": "/etc/alertmanager/web_config/web-config.yaml", "name": "web-config", "readOnly": true, "subPath": "web-config.yaml" } ] }, { "args": [ "--listen-address=localhost:8080", "--web-config-file=/etc/alertmanager/web_config/web-config.yaml", "--reload-url=http://localhost:9093/-/reload", "--config-file=/etc/alertmanager/config/alertmanager.yaml.gz", "--config-envsubst-file=/etc/alertmanager/config_out/alertmanager.env.yaml", "--watched-dir=/etc/alertmanager/config", "--watched-dir=/etc/alertmanager/secrets/alertmanager-main-tls", "--watched-dir=/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy", "--watched-dir=/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-metric", "--watched-dir=/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-web" ], "command": [ "/bin/prometheus-config-reloader" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "SHARD", "value": "-1" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8e158c83ec12b3e0237fab9a221630bd691e79c079a111f346354ff43b8199df", "imagePullPolicy": "IfNotPresent", "name": "config-reloader", "resources": { "requests": { "cpu": "1m", "memory": "10Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/alertmanager/config", "name": "config-volume", "readOnly": true }, { "mountPath": "/etc/alertmanager/config_out", "name": "config-out" }, { "mountPath": "/etc/alertmanager/secrets/alertmanager-main-tls", "name": "secret-alertmanager-main-tls", "readOnly": true }, { "mountPath": "/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy", "name": "secret-alertmanager-kube-rbac-proxy", "readOnly": true }, { "mountPath": "/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-metric", "name": "secret-alertmanager-kube-rbac-proxy-metric", "readOnly": true }, { "mountPath": "/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-web", "name": "secret-alertmanager-kube-rbac-proxy-web", "readOnly": true }, { "mountPath": "/etc/alertmanager/web_config/web-config.yaml", "name": "web-config", "readOnly": true, "subPath": "web-config.yaml" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9095", "--upstream=http://127.0.0.1:9093", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--ignore-paths=/-/healthy,/-/ready", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-web", "ports": [ { "containerPort": 9095, "name": "web", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-alertmanager-kube-rbac-proxy-web", "readOnly": true }, { "mountPath": "/etc/tls/private", "name": "secret-alertmanager-main-tls", "readOnly": true } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9092", "--upstream=http://127.0.0.1:9096", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9092, "name": "tenancy", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-alertmanager-kube-rbac-proxy" }, { "mountPath": "/etc/tls/private", "name": "secret-alertmanager-main-tls" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9097", "--upstream=http://127.0.0.1:9093", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--client-ca-file=/etc/tls/client/client-ca.crt", "--allow-paths=/metrics", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-metric", "ports": [ { "containerPort": 9097, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-alertmanager-kube-rbac-proxy-metric", "readOnly": true }, { "mountPath": "/etc/tls/private", "name": "secret-alertmanager-main-tls", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] }, { "args": [ "--insecure-listen-address=127.0.0.1:9096", "--upstream=http://127.0.0.1:9093", "--label=namespace", "--error-on-replace" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2897724cec17bc13acc133181f64ccb8d54ce5dc9582f9cecf704c2540e15600", "imagePullPolicy": "IfNotPresent", "name": "prom-label-proxy", "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "--watch-interval=0", "--listen-address=:8081", "--config-file=/etc/alertmanager/config/alertmanager.yaml.gz", "--config-envsubst-file=/etc/alertmanager/config_out/alertmanager.env.yaml", "--watched-dir=/etc/alertmanager/config", "--watched-dir=/etc/alertmanager/secrets/alertmanager-main-tls", "--watched-dir=/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy", "--watched-dir=/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-metric", "--watched-dir=/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-web" ], "command": [ "/bin/prometheus-config-reloader" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "SHARD", "value": "-1" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8e158c83ec12b3e0237fab9a221630bd691e79c079a111f346354ff43b8199df", "imagePullPolicy": "IfNotPresent", "name": "init-config-reloader", "ports": [ { "containerPort": 8081, "name": "reloader-web", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "10Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/alertmanager/config", "name": "config-volume", "readOnly": true }, { "mountPath": "/etc/alertmanager/config_out", "name": "config-out" }, { "mountPath": "/etc/alertmanager/secrets/alertmanager-main-tls", "name": "secret-alertmanager-main-tls", "readOnly": true }, { "mountPath": "/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy", "name": "secret-alertmanager-kube-rbac-proxy", "readOnly": true }, { "mountPath": "/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-metric", "name": "secret-alertmanager-kube-rbac-proxy-metric", "readOnly": true }, { "mountPath": "/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-web", "name": "secret-alertmanager-kube-rbac-proxy-web", "readOnly": true }, { "mountPath": "/etc/alertmanager/web_config/web-config.yaml", "name": "web-config", "readOnly": true, "subPath": "web-config.yaml" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 65534, "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "alertmanager-main", "serviceAccountName": "alertmanager-main", "terminationGracePeriodSeconds": 120, "volumes": [ { "name": "config-volume", "secret": { "defaultMode": 420, "secretName": "alertmanager-main-generated" } }, { "name": "tls-assets", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "alertmanager-main-tls-assets-0" } } ] } }, { "emptyDir": { "medium": "Memory" }, "name": "config-out" }, { "name": "secret-alertmanager-main-tls", "secret": { "defaultMode": 420, "secretName": "alertmanager-main-tls" } }, { "name": "secret-alertmanager-kube-rbac-proxy", "secret": { "defaultMode": 420, "secretName": "alertmanager-kube-rbac-proxy" } }, { "name": "secret-alertmanager-kube-rbac-proxy-metric", "secret": { "defaultMode": 420, "secretName": "alertmanager-kube-rbac-proxy-metric" } }, { "name": "secret-alertmanager-kube-rbac-proxy-web", "secret": { "defaultMode": 420, "secretName": "alertmanager-kube-rbac-proxy-web" } }, { "name": "web-config", "secret": { "defaultMode": 420, "secretName": "alertmanager-main-web-config" } }, { "emptyDir": {}, "name": "alertmanager-main-db" }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "alertmanager-trusted-ca-bundle" }, "name": "alertmanager-trusted-ca-bundle" } ] } }, "updateStrategy": { "type": "RollingUpdate" } }, "status": { "availableReplicas": 2, "collisionCount": 0, "currentReplicas": 2, "currentRevision": "alertmanager-main-57f57b4949", "observedGeneration": 2, "readyReplicas": 2, "replicas": 2, "updateRevision": "alertmanager-main-57f57b4949", "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "StatefulSet", "metadata": { "annotations": { "operator.prometheus.io/controller-id": "openshift-monitoring/prometheus-operator", "prometheus-operator-input-hash": "7307953007983992337" }, "creationTimestamp": "2026-04-22T13:18:24Z", "generation": 3, "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.55.1", "managed-by": "prometheus-operator", "operator.prometheus.io/mode": "server", "operator.prometheus.io/name": "k8s", "operator.prometheus.io/shard": "0" }, "name": "prometheus-k8s", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "monitoring.coreos.com/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Prometheus", "name": "k8s", "uid": "0f3795c5-1106-4f65-acab-208e1af97177" } ], "resourceVersion": "32366", "uid": "f1a977a3-0844-43af-bd4e-a34a84bde2f5" }, "spec": { "persistentVolumeClaimRetentionPolicy": { "whenDeleted": "Retain", "whenScaled": "Retain" }, "podManagementPolicy": "Parallel", "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/managed-by": "prometheus-operator", "app.kubernetes.io/name": "prometheus", "operator.prometheus.io/name": "k8s", "operator.prometheus.io/shard": "0", "prometheus": "k8s" } }, "serviceName": "prometheus-operated", "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "prometheus", "openshift.io/required-scc": "nonroot", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/managed-by": "prometheus-operator", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.55.1", "operator.prometheus.io/name": "k8s", "operator.prometheus.io/shard": "0", "prometheus": "k8s" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--web.console.templates=/etc/prometheus/consoles", "--web.console.libraries=/etc/prometheus/console_libraries", "--config.file=/etc/prometheus/config_out/prometheus.env.yaml", "--web.enable-lifecycle", "--enable-feature=delayed-compaction", "--web.external-url=https://console-openshift-console.apps.rosa.kx-d937aeccb0.yjz3.p3.openshiftapps.com/monitoring", "--web.route-prefix=/", "--web.listen-address=127.0.0.1:9090", "--storage.tsdb.retention.time=7d", "--storage.tsdb.path=/prometheus", "--web.config.file=/etc/prometheus/web_config/web-config.yaml", "--scrape.timestamp-tolerance=15ms" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c8ba3078651d566566f7855c51c53baedfe6b6c743d316275e81b6e9d242bfb6", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "exec": { "command": [ "sh", "-c", "if [ -x \"$(command -v curl)\" ]; then exec curl --fail http://localhost:9090/-/healthy; elif [ -x \"$(command -v wget)\" ]; then exec wget -q -O /dev/null http://localhost:9090/-/healthy; else exit 1; fi" ] }, "failureThreshold": 6, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "prometheus", "readinessProbe": { "exec": { "command": [ "sh", "-c", "if [ -x \"$(command -v curl)\" ]; then exec curl --fail http://localhost:9090/-/ready; elif [ -x \"$(command -v wget)\" ]; then exec wget -q -O /dev/null http://localhost:9090/-/ready; else exit 1; fi" ] }, "failureThreshold": 3, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 3 }, "resources": { "requests": { "cpu": "70m", "memory": "1Gi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "startupProbe": { "exec": { "command": [ "sh", "-c", "if [ -x \"$(command -v curl)\" ]; then exec curl --fail http://localhost:9090/-/ready; elif [ -x \"$(command -v wget)\" ]; then exec wget -q -O /dev/null http://localhost:9090/-/ready; else exit 1; fi" ] }, "failureThreshold": 60, "periodSeconds": 60, "successThreshold": 1, "timeoutSeconds": 3 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/ca-trust/extracted/pem/", "name": "prometheus-trusted-ca-bundle" }, { "mountPath": "/etc/prometheus/config_out", "name": "config-out", "readOnly": true }, { "mountPath": "/etc/prometheus/certs", "name": "tls-assets", "readOnly": true }, { "mountPath": "/prometheus", "name": "prometheus-k8s-db" }, { "mountPath": "/etc/prometheus/secrets/prometheus-k8s-tls", "name": "secret-prometheus-k8s-tls", "readOnly": true }, { "mountPath": "/etc/prometheus/secrets/prometheus-k8s-thanos-sidecar-tls", "name": "secret-prometheus-k8s-thanos-sidecar-tls", "readOnly": true }, { "mountPath": "/etc/prometheus/secrets/kube-rbac-proxy", "name": "secret-kube-rbac-proxy", "readOnly": true }, { "mountPath": "/etc/prometheus/secrets/prometheus-k8s-kube-rbac-proxy-web", "name": "secret-prometheus-k8s-kube-rbac-proxy-web", "readOnly": true }, { "mountPath": "/etc/prometheus/secrets/metrics-client-certs", "name": "secret-metrics-client-certs", "readOnly": true }, { "mountPath": "/etc/prometheus/configmaps/serving-certs-ca-bundle", "name": "configmap-serving-certs-ca-bundle", "readOnly": true }, { "mountPath": "/etc/prometheus/configmaps/kubelet-serving-ca-bundle", "name": "configmap-kubelet-serving-ca-bundle", "readOnly": true }, { "mountPath": "/etc/prometheus/configmaps/metrics-client-ca", "name": "configmap-metrics-client-ca", "readOnly": true }, { "mountPath": "/etc/prometheus/rules/prometheus-k8s-rulefiles-0", "name": "prometheus-k8s-rulefiles-0" }, { "mountPath": "/etc/prometheus/web_config/web-config.yaml", "name": "web-config", "readOnly": true, "subPath": "web-config.yaml" } ] }, { "args": [ "--listen-address=localhost:8080", "--web-config-file=/etc/prometheus/web_config/web-config.yaml", "--reload-url=http://localhost:9090/-/reload", "--config-file=/etc/prometheus/config/prometheus.yaml.gz", "--config-envsubst-file=/etc/prometheus/config_out/prometheus.env.yaml", "--watched-dir=/etc/prometheus/rules/prometheus-k8s-rulefiles-0" ], "command": [ "/bin/prometheus-config-reloader" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "SHARD", "value": "0" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8e158c83ec12b3e0237fab9a221630bd691e79c079a111f346354ff43b8199df", "imagePullPolicy": "IfNotPresent", "name": "config-reloader", "resources": { "requests": { "cpu": "1m", "memory": "10Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/prometheus/config", "name": "config" }, { "mountPath": "/etc/prometheus/config_out", "name": "config-out" }, { "mountPath": "/etc/prometheus/web_config/web-config.yaml", "name": "web-config", "readOnly": true, "subPath": "web-config.yaml" }, { "mountPath": "/etc/prometheus/rules/prometheus-k8s-rulefiles-0", "name": "prometheus-k8s-rulefiles-0" } ] }, { "args": [ "sidecar", "--prometheus.url=http://localhost:9090/", "--tsdb.path=/prometheus", "--http-address=127.0.0.1:10902", "--grpc-server-tls-cert=/etc/tls/grpc/server.crt", "--grpc-server-tls-key=/etc/tls/grpc/server.key", "--grpc-server-tls-client-ca=/etc/tls/grpc/ca.crt" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8f34d18e3a237f96e2b9e9a071e5bf159c04f978ed12af457f1d065e6796220d", "imagePullPolicy": "IfNotPresent", "name": "thanos-sidecar", "ports": [ { "containerPort": 10902, "name": "http", "protocol": "TCP" }, { "containerPort": 10901, "name": "grpc", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "25Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/grpc", "name": "secret-grpc-tls" }, { "mountPath": "/etc/thanos/config", "name": "thanos-prometheus-http-client-file" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9091", "--upstream=http://127.0.0.1:9090", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--ignore-paths=/-/healthy,/-/ready", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-web", "ports": [ { "containerPort": 9091, "name": "web", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-prometheus-k8s-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-prometheus-k8s-kube-rbac-proxy-web" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9092", "--upstream=http://127.0.0.1:9090", "--allow-paths=/metrics,/federate", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9092, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-prometheus-k8s-tls" }, { "mountPath": "/etc/tls/client", "name": "configmap-metrics-client-ca", "readOnly": true }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-kube-rbac-proxy" } ] }, { "args": [ "--secure-listen-address=[$(POD_IP)]:10903", "--upstream=http://127.0.0.1:10902", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--allow-paths=/metrics", "--tls-min-version=VersionTLS12" ], "env": [ { "name": "POD_IP", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "status.podIP" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-thanos", "ports": [ { "containerPort": 10903, "name": "thanos-proxy", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "10Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-prometheus-k8s-thanos-sidecar-tls", "readOnly": true }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-kube-rbac-proxy", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "configmap-metrics-client-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "--watch-interval=0", "--listen-address=:8081", "--config-file=/etc/prometheus/config/prometheus.yaml.gz", "--config-envsubst-file=/etc/prometheus/config_out/prometheus.env.yaml", "--watched-dir=/etc/prometheus/rules/prometheus-k8s-rulefiles-0" ], "command": [ "/bin/prometheus-config-reloader" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "SHARD", "value": "0" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8e158c83ec12b3e0237fab9a221630bd691e79c079a111f346354ff43b8199df", "imagePullPolicy": "IfNotPresent", "name": "init-config-reloader", "ports": [ { "containerPort": 8081, "name": "reloader-web", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "10Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/prometheus/config", "name": "config" }, { "mountPath": "/etc/prometheus/config_out", "name": "config-out" }, { "mountPath": "/etc/prometheus/web_config/web-config.yaml", "name": "web-config", "readOnly": true, "subPath": "web-config.yaml" }, { "mountPath": "/etc/prometheus/rules/prometheus-k8s-rulefiles-0", "name": "prometheus-k8s-rulefiles-0" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 65534, "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "prometheus-k8s", "serviceAccountName": "prometheus-k8s", "shareProcessNamespace": false, "terminationGracePeriodSeconds": 600, "volumes": [ { "name": "config", "secret": { "defaultMode": 420, "secretName": "prometheus-k8s" } }, { "name": "tls-assets", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "prometheus-k8s-tls-assets-0" } } ] } }, { "emptyDir": { "medium": "Memory" }, "name": "config-out" }, { "name": "secret-prometheus-k8s-tls", "secret": { "defaultMode": 420, "secretName": "prometheus-k8s-tls" } }, { "name": "secret-prometheus-k8s-thanos-sidecar-tls", "secret": { "defaultMode": 420, "secretName": "prometheus-k8s-thanos-sidecar-tls" } }, { "name": "secret-kube-rbac-proxy", "secret": { "defaultMode": 420, "secretName": "kube-rbac-proxy" } }, { "name": "secret-prometheus-k8s-kube-rbac-proxy-web", "secret": { "defaultMode": 420, "secretName": "prometheus-k8s-kube-rbac-proxy-web" } }, { "name": "secret-metrics-client-certs", "secret": { "defaultMode": 420, "secretName": "metrics-client-certs" } }, { "configMap": { "defaultMode": 420, "name": "serving-certs-ca-bundle" }, "name": "configmap-serving-certs-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "kubelet-serving-ca-bundle" }, "name": "configmap-kubelet-serving-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "configmap-metrics-client-ca" }, { "configMap": { "defaultMode": 420, "name": "prometheus-k8s-rulefiles-0" }, "name": "prometheus-k8s-rulefiles-0" }, { "name": "web-config", "secret": { "defaultMode": 420, "secretName": "prometheus-k8s-web-config" } }, { "name": "thanos-prometheus-http-client-file", "secret": { "defaultMode": 420, "secretName": "prometheus-k8s-thanos-prometheus-http-client-file" } }, { "emptyDir": {}, "name": "prometheus-k8s-db" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "prometheus-trusted-ca-bundle" }, "name": "prometheus-trusted-ca-bundle" }, { "name": "secret-grpc-tls", "secret": { "defaultMode": 420, "secretName": "prometheus-k8s-grpc-tls-79gcr97g8l9a3" } } ] } }, "updateStrategy": { "type": "RollingUpdate" } }, "status": { "availableReplicas": 2, "collisionCount": 0, "currentReplicas": 2, "currentRevision": "prometheus-k8s-55749d746b", "observedGeneration": 3, "readyReplicas": 2, "replicas": 2, "updateRevision": "prometheus-k8s-55749d746b", "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "StatefulSet", "metadata": { "creationTimestamp": "2026-04-22T13:32:02Z", "generation": 1, "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.10.2", "operator.tekton.dev/operand-name": "tektoncd-pipelines", "pipeline.tekton.dev/release": "v1.10.2", "version": "v1.10.2" }, "name": "tekton-pipelines-controller", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-lshtw", "uid": "eff5724e-debf-49af-b56f-10339c6a03cd" } ], "resourceVersion": "32447", "uid": "a25d1813-23c5-4c10-9894-a33187734711" }, "spec": { "persistentVolumeClaimRetentionPolicy": { "whenDeleted": "Retain", "whenScaled": "Retain" }, "podManagementPolicy": "OrderedReady", "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "serviceName": "tekton-pipelines-controller", "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.10.2", "config-leader-election-controller.data.buckets": "2", "deployment.spec.replicas": "2", "pipeline.tekton.dev/release": "v1.10.2", "version": "v1.10.2" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-entrypoint-image", "quay.io/openshift-pipeline/pipelines-entrypoint-rhel9@sha256:897b6c837949216304d30c2ae0c31e8e52ae3420bd06c476a974b1ebe0b2e629", "-nop-image", "quay.io/openshift-pipeline/pipelines-nop-rhel9@sha256:395271295255bb03ee76a5210279a4013b70b0972d04c82ac50763cd6868f990", "-sidecarlogresults-image", "quay.io/openshift-pipeline/pipelines-sidecarlogresults-rhel9@sha256:46cc729642ad2aaef01cc07cde8ecf33ee5e64c84837805f6efbba45c709b08b", "-workingdirinit-image", "quay.io/openshift-pipeline/pipelines-workingdirinit-rhel9@sha256:858493470190ab600f3153f6e2d8bdbd9ae74736512a1a4c0edbd6c8dfeada4a", "-shell-image", "quay.io/openshift-pipeline/pipelines-entrypoint-rhel9@sha256:897b6c837949216304d30c2ae0c31e8e52ae3420bd06c476a974b1ebe0b2e629", "-shell-image-win", "mcr.microsoft.com/powershell:nanoserver@sha256:b6d5ff841b78bdf2dfed7550000fd4f3437385b8fa686ec0f010be24777654d6", "-disable-ha=false", "-kube-api-burst=50", "-kube-api-qps=50", "-threads-per-controller=32" ], "env": [ { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-controller" }, { "name": "CONFIG_SPIRE", "value": "config-spire" }, { "name": "SSL_CERT_FILE", "value": "/etc/config-registry-cert/cert" }, { "name": "SSL_CERT_DIR", "value": "/etc/ssl/certs" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipeline" }, { "name": "STATEFUL_SERVICE_NAME", "value": "tekton-pipelines-controller" }, { "name": "STATEFUL_CONTROLLER_ORDINAL", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-pipeline/pipelines-controller-rhel9@sha256:0d3951e89c79b2ffedd410f230fb90f495ce54971cdd430d48ae95b109c4be51", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "tekton-pipelines-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "cpu": "500m", "memory": "1Gi" }, "requests": { "cpu": "200m", "memory": "512Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config-logging", "name": "config-logging" }, { "mountPath": "/etc/config-registry-cert", "name": "config-registry-cert" }, { "mountPath": "/etc/ssl/certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/etc/ssl/certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-controller", "serviceAccountName": "tekton-pipelines-controller", "terminationGracePeriodSeconds": 30, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "app": "tekton-pipelines-controller" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "DoNotSchedule" } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config-logging" }, "name": "config-logging" }, { "configMap": { "defaultMode": 420, "name": "config-registry-cert" }, "name": "config-registry-cert" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } }, "updateStrategy": { "type": "RollingUpdate" } }, "status": { "availableReplicas": 2, "collisionCount": 0, "currentReplicas": 2, "currentRevision": "tekton-pipelines-controller-57cfc9d6cf", "observedGeneration": 1, "readyReplicas": 2, "replicas": 2, "updateRevision": "tekton-pipelines-controller-57cfc9d6cf", "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "StatefulSet", "metadata": { "creationTimestamp": "2026-04-22T13:32:26Z", "generation": 1, "labels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.10.2", "operator.tekton.dev/operand-name": "tektoncd-pipelines", "pipeline.tekton.dev/release": "v1.10.2", "version": "v1.10.2" }, "name": "tekton-pipelines-remote-resolvers", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-static-lshtw", "uid": "eff5724e-debf-49af-b56f-10339c6a03cd" } ], "resourceVersion": "33089", "uid": "21e92d45-4ce4-44e8-a8f8-a3d9e9bf6656" }, "spec": { "persistentVolumeClaimRetentionPolicy": { "whenDeleted": "Retain", "whenScaled": "Retain" }, "podManagementPolicy": "OrderedReady", "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "serviceName": "tekton-pipelines-remote-resolvers", "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-resolvers", "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.10.2", "config-leader-election-resolvers.data.buckets": "2", "deployment.spec.replicas": "2", "pipeline.tekton.dev/release": "v1.10.2", "version": "v1.10.2" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-kube-api-burst=50", "-kube-api-qps=50", "-threads-per-controller=32" ], "command": [ "/sbin/tini", "--", "/ko-app/resolvers" ], "env": [ { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-resolvers" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/resolution" }, { "name": "PROBES_PORT", "value": "8080" }, { "name": "TEKTON_HUB_API" }, { "name": "ARTIFACT_HUB_API", "value": "https://artifacthub.io/" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "STATEFUL_SERVICE_NAME", "value": "tekton-pipelines-remote-resolvers" }, { "name": "STATEFUL_CONTROLLER_ORDINAL", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "GIT_SSL_CAINFO", "value": "/tekton-custom-certs/ca-bundle.crt" } ], "image": "quay.io/openshift-pipeline/pipelines-resolvers-rhel9@sha256:6a0977a2c1bff6eccccb6c0f43346e94c15e5a8f4efa04c86c07b16b034cadbe", "imagePullPolicy": "IfNotPresent", "name": "controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "300m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp-clone-volume" }, { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-resolvers", "serviceAccountName": "tekton-pipelines-resolvers", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": { "sizeLimit": "4Gi" }, "name": "tmp-clone-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } }, "updateStrategy": { "type": "RollingUpdate" } }, "status": { "availableReplicas": 2, "collisionCount": 0, "currentReplicas": 2, "currentRevision": "tekton-pipelines-remote-resolvers-7d6599cf97", "observedGeneration": 1, "readyReplicas": 2, "replicas": 2, "updateRevision": "tekton-pipelines-remote-resolvers-7d6599cf97", "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "StatefulSet", "metadata": { "annotations": { "operator.prometheus.io/controller-id": "openshift-user-workload-monitoring/prometheus-operator", "prometheus-operator-input-hash": "9414916899139062527" }, "creationTimestamp": "2026-04-22T13:30:08Z", "generation": 1, "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "user-workload", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.55.1", "managed-by": "prometheus-operator", "operator.prometheus.io/mode": "server", "operator.prometheus.io/name": "user-workload", "operator.prometheus.io/shard": "0" }, "name": "prometheus-user-workload", "namespace": "openshift-user-workload-monitoring", "ownerReferences": [ { "apiVersion": "monitoring.coreos.com/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Prometheus", "name": "user-workload", "uid": "fd5bbc9f-9ec3-4952-a3ea-9a7514bfb36f" } ], "resourceVersion": "26730", "uid": "d850f0ba-abcb-4ba5-a41b-12a48646cd79" }, "spec": { "persistentVolumeClaimRetentionPolicy": { "whenDeleted": "Retain", "whenScaled": "Retain" }, "podManagementPolicy": "Parallel", "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/instance": "user-workload", "app.kubernetes.io/managed-by": "prometheus-operator", "app.kubernetes.io/name": "prometheus", "operator.prometheus.io/name": "user-workload", "operator.prometheus.io/shard": "0", "prometheus": "user-workload" } }, "serviceName": "prometheus-operated", "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "prometheus", "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "user-workload", "app.kubernetes.io/managed-by": "prometheus-operator", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.55.1", "operator.prometheus.io/name": "user-workload", "operator.prometheus.io/shard": "0", "prometheus": "user-workload" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "user-workload", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-user-workload-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--web.console.templates=/etc/prometheus/consoles", "--web.console.libraries=/etc/prometheus/console_libraries", "--config.file=/etc/prometheus/config_out/prometheus.env.yaml", "--web.enable-lifecycle", "--enable-feature=extra-scrape-metrics,delayed-compaction", "--web.external-url=https://console-openshift-console.apps.rosa.kx-d937aeccb0.yjz3.p3.openshiftapps.com/monitoring", "--web.route-prefix=/", "--web.listen-address=127.0.0.1:9090", "--storage.tsdb.retention.time=24h", "--storage.tsdb.path=/prometheus", "--web.config.file=/etc/prometheus/web_config/web-config.yaml", "--scrape.timestamp-tolerance=15ms" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c8ba3078651d566566f7855c51c53baedfe6b6c743d316275e81b6e9d242bfb6", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "exec": { "command": [ "sh", "-c", "if [ -x \"$(command -v curl)\" ]; then exec curl --fail http://localhost:9090/-/healthy; elif [ -x \"$(command -v wget)\" ]; then exec wget -q -O /dev/null http://localhost:9090/-/healthy; else exit 1; fi" ] }, "failureThreshold": 6, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "prometheus", "readinessProbe": { "exec": { "command": [ "sh", "-c", "if [ -x \"$(command -v curl)\" ]; then exec curl --fail http://localhost:9090/-/ready; elif [ -x \"$(command -v wget)\" ]; then exec wget -q -O /dev/null http://localhost:9090/-/ready; else exit 1; fi" ] }, "failureThreshold": 3, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 3 }, "resources": { "requests": { "cpu": "6m", "memory": "30Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "startupProbe": { "exec": { "command": [ "sh", "-c", "if [ -x \"$(command -v curl)\" ]; then exec curl --fail http://localhost:9090/-/ready; elif [ -x \"$(command -v wget)\" ]; then exec wget -q -O /dev/null http://localhost:9090/-/ready; else exit 1; fi" ] }, "failureThreshold": 240, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 3 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/ca-trust/extracted/pem/", "name": "prometheus-user-workload-trusted-ca-bundle" }, { "mountPath": "/etc/prometheus/config_out", "name": "config-out", "readOnly": true }, { "mountPath": "/etc/prometheus/certs", "name": "tls-assets", "readOnly": true }, { "mountPath": "/prometheus", "name": "prometheus-user-workload-db" }, { "mountPath": "/etc/prometheus/secrets/prometheus-user-workload-tls", "name": "secret-prometheus-user-workload-tls", "readOnly": true }, { "mountPath": "/etc/prometheus/secrets/prometheus-user-workload-thanos-sidecar-tls", "name": "secret-prometheus-user-workload-thanos-sidecar-tls", "readOnly": true }, { "mountPath": "/etc/prometheus/secrets/kube-rbac-proxy-metrics", "name": "secret-kube-rbac-proxy-metrics", "readOnly": true }, { "mountPath": "/etc/prometheus/secrets/kube-rbac-proxy-federate", "name": "secret-kube-rbac-proxy-federate", "readOnly": true }, { "mountPath": "/etc/prometheus/configmaps/serving-certs-ca-bundle", "name": "configmap-serving-certs-ca-bundle", "readOnly": true }, { "mountPath": "/etc/prometheus/configmaps/metrics-client-ca", "name": "configmap-metrics-client-ca", "readOnly": true }, { "mountPath": "/etc/prometheus/rules/prometheus-user-workload-rulefiles-0", "name": "prometheus-user-workload-rulefiles-0" }, { "mountPath": "/etc/prometheus/web_config/web-config.yaml", "name": "web-config", "readOnly": true, "subPath": "web-config.yaml" } ] }, { "args": [ "--listen-address=localhost:8080", "--reload-url=http://localhost:9090/-/reload", "--config-file=/etc/prometheus/config/prometheus.yaml.gz", "--config-envsubst-file=/etc/prometheus/config_out/prometheus.env.yaml", "--watched-dir=/etc/prometheus/rules/prometheus-user-workload-rulefiles-0" ], "command": [ "/bin/prometheus-config-reloader" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "SHARD", "value": "0" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8e158c83ec12b3e0237fab9a221630bd691e79c079a111f346354ff43b8199df", "imagePullPolicy": "IfNotPresent", "name": "config-reloader", "resources": { "requests": { "cpu": "1m", "memory": "10Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/prometheus/config", "name": "config" }, { "mountPath": "/etc/prometheus/config_out", "name": "config-out" }, { "mountPath": "/etc/prometheus/rules/prometheus-user-workload-rulefiles-0", "name": "prometheus-user-workload-rulefiles-0" } ] }, { "args": [ "sidecar", "--prometheus.url=http://localhost:9090/", "--tsdb.path=/prometheus", "--http-address=127.0.0.1:10902", "--grpc-server-tls-cert=/etc/tls/grpc/server.crt", "--grpc-server-tls-key=/etc/tls/grpc/server.key", "--grpc-server-tls-client-ca=/etc/tls/grpc/ca.crt" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8f34d18e3a237f96e2b9e9a071e5bf159c04f978ed12af457f1d065e6796220d", "imagePullPolicy": "IfNotPresent", "name": "thanos-sidecar", "ports": [ { "containerPort": 10902, "name": "http", "protocol": "TCP" }, { "containerPort": 10901, "name": "grpc", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "17Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/grpc", "name": "secret-grpc-tls" }, { "mountPath": "/etc/thanos/config", "name": "thanos-prometheus-http-client-file" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9092", "--upstream=http://127.0.0.1:9090", "--allow-paths=/federate", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-federate", "ports": [ { "containerPort": 9092, "name": "federate", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "10Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-prometheus-user-workload-tls" }, { "mountPath": "/etc/tls/client", "name": "configmap-metrics-client-ca", "readOnly": true }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-kube-rbac-proxy-federate" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9091", "--upstream=http://127.0.0.1:9090", "--allow-paths=/metrics", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-metrics", "ports": [ { "containerPort": 9091, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "10Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-prometheus-user-workload-tls" }, { "mountPath": "/etc/tls/client", "name": "configmap-metrics-client-ca", "readOnly": true }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-kube-rbac-proxy-metrics" } ] }, { "args": [ "--secure-listen-address=[$(POD_IP)]:10903", "--upstream=http://127.0.0.1:10902", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--allow-paths=/metrics", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-min-version=VersionTLS12" ], "env": [ { "name": "POD_IP", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "status.podIP" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-thanos", "ports": [ { "containerPort": 10903, "name": "thanos-proxy", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "10Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-prometheus-user-workload-thanos-sidecar-tls" }, { "mountPath": "/etc/tls/client", "name": "configmap-metrics-client-ca", "readOnly": true }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-kube-rbac-proxy-metrics" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "--watch-interval=0", "--listen-address=:8081", "--config-file=/etc/prometheus/config/prometheus.yaml.gz", "--config-envsubst-file=/etc/prometheus/config_out/prometheus.env.yaml", "--watched-dir=/etc/prometheus/rules/prometheus-user-workload-rulefiles-0" ], "command": [ "/bin/prometheus-config-reloader" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "SHARD", "value": "0" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8e158c83ec12b3e0237fab9a221630bd691e79c079a111f346354ff43b8199df", "imagePullPolicy": "IfNotPresent", "name": "init-config-reloader", "ports": [ { "containerPort": 8081, "name": "reloader-web", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "10Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/prometheus/config", "name": "config" }, { "mountPath": "/etc/prometheus/config_out", "name": "config-out" }, { "mountPath": "/etc/prometheus/rules/prometheus-user-workload-rulefiles-0", "name": "prometheus-user-workload-rulefiles-0" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 65534, "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "prometheus-user-workload", "serviceAccountName": "prometheus-user-workload", "shareProcessNamespace": false, "terminationGracePeriodSeconds": 600, "volumes": [ { "name": "config", "secret": { "defaultMode": 420, "secretName": "prometheus-user-workload" } }, { "name": "tls-assets", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "prometheus-user-workload-tls-assets-0" } } ] } }, { "emptyDir": { "medium": "Memory" }, "name": "config-out" }, { "name": "secret-prometheus-user-workload-tls", "secret": { "defaultMode": 420, "secretName": "prometheus-user-workload-tls" } }, { "name": "secret-prometheus-user-workload-thanos-sidecar-tls", "secret": { "defaultMode": 420, "secretName": "prometheus-user-workload-thanos-sidecar-tls" } }, { "name": "secret-kube-rbac-proxy-metrics", "secret": { "defaultMode": 420, "secretName": "kube-rbac-proxy-metrics" } }, { "name": "secret-kube-rbac-proxy-federate", "secret": { "defaultMode": 420, "secretName": "kube-rbac-proxy-federate" } }, { "configMap": { "defaultMode": 420, "name": "serving-certs-ca-bundle" }, "name": "configmap-serving-certs-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "configmap-metrics-client-ca" }, { "configMap": { "defaultMode": 420, "name": "prometheus-user-workload-rulefiles-0" }, "name": "prometheus-user-workload-rulefiles-0" }, { "name": "web-config", "secret": { "defaultMode": 420, "secretName": "prometheus-user-workload-web-config" } }, { "name": "thanos-prometheus-http-client-file", "secret": { "defaultMode": 420, "secretName": "prometheus-user-workload-thanos-prometheus-http-client-file" } }, { "emptyDir": {}, "name": "prometheus-user-workload-db" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "prometheus-user-workload-trusted-ca-bundle" }, "name": "prometheus-user-workload-trusted-ca-bundle" }, { "name": "secret-grpc-tls", "secret": { "defaultMode": 420, "secretName": "prometheus-user-workload-grpc-tls-79gcr97g8l9a3" } } ] } }, "updateStrategy": { "type": "RollingUpdate" } }, "status": { "availableReplicas": 2, "collisionCount": 0, "currentReplicas": 2, "currentRevision": "prometheus-user-workload-f578bc544", "observedGeneration": 1, "readyReplicas": 2, "replicas": 2, "updateRevision": "prometheus-user-workload-f578bc544", "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "StatefulSet", "metadata": { "annotations": { "operator.prometheus.io/controller-id": "openshift-user-workload-monitoring/prometheus-operator", "prometheus-operator-input-hash": "16753092660480003852" }, "creationTimestamp": "2026-04-22T13:30:09Z", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring", "managed-by": "prometheus-operator", "thanosRulerName": "user-workload" }, "name": "thanos-ruler-user-workload", "namespace": "openshift-user-workload-monitoring", "ownerReferences": [ { "apiVersion": "monitoring.coreos.com/v1", "blockOwnerDeletion": true, "controller": true, "kind": "ThanosRuler", "name": "user-workload", "uid": "efbb1ecc-8ace-43e6-a3f4-dd955b6a3d49" } ], "resourceVersion": "25481", "uid": "ced3bada-1f2b-4540-8c17-14fd25aad51c" }, "spec": { "persistentVolumeClaimRetentionPolicy": { "whenDeleted": "Retain", "whenScaled": "Retain" }, "podManagementPolicy": "Parallel", "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/instance": "user-workload", "app.kubernetes.io/managed-by": "prometheus-operator", "app.kubernetes.io/name": "thanos-ruler", "thanos-ruler": "user-workload" } }, "serviceName": "thanos-ruler-operated", "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "thanos-ruler", "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/instance": "user-workload", "app.kubernetes.io/managed-by": "prometheus-operator", "app.kubernetes.io/name": "thanos-ruler", "thanos-ruler": "user-workload" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "thanos-ruler", "thanos-ruler": "user-workload" } }, "namespaces": [ "openshift-user-workload-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "rule", "--data-dir=/thanos/data", "--eval-interval=15s", "--tsdb.retention=24h", "--label=thanos_ruler_replica=\"$(POD_NAME)\"", "--alert.label-drop=thanos_ruler_replica", "--http-address=localhost:10902", "--rule-file=/etc/thanos/rules/*/*.yaml", "--query.config-file=/etc/thanos/config/query-config/query.yaml", "--alertmanagers.config-file=/etc/thanos/config/alertmanager-config/alertmanagers.yaml", "--grpc-server-tls-cert=/etc/tls/grpc/server.crt", "--grpc-server-tls-key=/etc/tls/grpc/server.key", "--grpc-server-tls-client-ca=/etc/tls/grpc/ca.crt", "--alert.query-url=https://console-openshift-console.apps.rosa.kx-d937aeccb0.yjz3.p3.openshiftapps.com/monitoring", "--http.config=/etc/thanos/web_config/web-config.yaml" ], "env": [ { "name": "ALERTMANAGER_CONFIG_SECRET_VERSION", "value": "83162be910c54a1087f765b4b78d6aad20b0654992b2a4370b5a85c0" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8f34d18e3a237f96e2b9e9a071e5bf159c04f978ed12af457f1d065e6796220d", "imagePullPolicy": "IfNotPresent", "name": "thanos-ruler", "ports": [ { "containerPort": 10901, "name": "grpc", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "21Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-ruler-tls" }, { "mountPath": "/etc/tls/grpc", "name": "secret-grpc-tls" }, { "mountPath": "/etc/prometheus/configmaps/serving-certs-ca-bundle", "name": "serving-certs-ca-bundle" }, { "mountPath": "/etc/thanos/config/query-config", "name": "query-config" }, { "mountPath": "/etc/thanos/config/alertmanager-config", "name": "alertmanager-config" }, { "mountPath": "/etc/thanos/certs", "name": "tls-assets", "readOnly": true }, { "mountPath": "/etc/thanos/web_config/web-config.yaml", "name": "web-config", "readOnly": true, "subPath": "web-config.yaml" }, { "mountPath": "/thanos/data", "name": "thanos-ruler-user-workload-data" }, { "mountPath": "/etc/thanos/rules/thanos-ruler-user-workload-rulefiles-0", "name": "thanos-ruler-user-workload-rulefiles-0" } ] }, { "args": [ "--listen-address=localhost:8080", "--web-config-file=/etc/thanos/web_config/web-config.yaml", "--reload-url=http://localhost:10902/-/reload", "--watched-dir=/etc/thanos/rules/thanos-ruler-user-workload-rulefiles-0" ], "command": [ "/bin/prometheus-config-reloader" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "SHARD", "value": "-1" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8e158c83ec12b3e0237fab9a221630bd691e79c079a111f346354ff43b8199df", "imagePullPolicy": "IfNotPresent", "name": "config-reloader", "resources": { "requests": { "cpu": "1m", "memory": "10Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/thanos/rules/thanos-ruler-user-workload-rulefiles-0", "name": "thanos-ruler-user-workload-rulefiles-0" }, { "mountPath": "/etc/thanos/web_config/web-config.yaml", "name": "web-config", "readOnly": true, "subPath": "web-config.yaml" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9091", "--upstream=http://127.0.0.1:10902", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-web", "ports": [ { "containerPort": 9091, "name": "web", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "12Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-ruler-tls", "readOnly": true }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-user-workload-kube-rbac-proxy-web", "readOnly": true } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9092", "--upstream=http://127.0.0.1:10902", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--allow-paths=/metrics", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-metrics", "ports": [ { "containerPort": 9092, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-ruler-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-ruler-kube-rbac-proxy-metrics" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 65534, "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "thanos-ruler", "serviceAccountName": "thanos-ruler", "terminationGracePeriodSeconds": 120, "volumes": [ { "name": "query-config", "secret": { "defaultMode": 420, "items": [ { "key": "query.yaml", "path": "query.yaml" } ], "secretName": "thanos-ruler-query-config" } }, { "name": "alertmanager-config", "secret": { "defaultMode": 420, "items": [ { "key": "alertmanagers.yaml", "path": "alertmanagers.yaml" } ], "secretName": "thanos-ruler-alertmanagers-config" } }, { "name": "tls-assets", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "thanos-ruler-user-workload-tls-assets-0" } } ] } }, { "name": "web-config", "secret": { "defaultMode": 420, "secretName": "thanos-ruler-user-workload-web-config" } }, { "configMap": { "defaultMode": 420, "name": "thanos-ruler-user-workload-rulefiles-0" }, "name": "thanos-ruler-user-workload-rulefiles-0" }, { "emptyDir": {}, "name": "thanos-ruler-user-workload-data" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "serving-certs-ca-bundle" }, "name": "serving-certs-ca-bundle" }, { "name": "secret-thanos-ruler-tls", "secret": { "defaultMode": 420, "secretName": "thanos-ruler-tls" } }, { "name": "secret-thanos-ruler-kube-rbac-proxy-metrics", "secret": { "defaultMode": 420, "secretName": "thanos-ruler-kube-rbac-proxy-metrics" } }, { "name": "secret-thanos-user-workload-kube-rbac-proxy-web", "secret": { "defaultMode": 420, "secretName": "thanos-user-workload-kube-rbac-proxy-web" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "name": "secret-grpc-tls", "secret": { "defaultMode": 420, "secretName": "thanos-ruler-grpc-tls-79gcr97g8l9a3" } } ] } }, "updateStrategy": { "type": "RollingUpdate" } }, "status": { "availableReplicas": 2, "collisionCount": 0, "currentReplicas": 2, "currentRevision": "thanos-ruler-user-workload-5fc7584949", "observedGeneration": 1, "readyReplicas": 2, "replicas": 2, "updateRevision": "thanos-ruler-user-workload-5fc7584949", "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "StatefulSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "vector-kubearchive-log-collector-in-cluster-local:apps/StatefulSet:product-kubearchive-logging/loki-chunks-cache", "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector runs requires access to socket.\"\n", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Minio post-jobs from chart require write access to filesystem.\"\n", "ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy": "\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector runs requires certain host mounts to watch files being created by pods.\"\n", "ignore-check.kube-linter.io/unset-cpu-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "ignore-check.kube-linter.io/unset-memory-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"StatefulSet\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"vector-kubearchive-log-collector-in-cluster-local:apps/StatefulSet:product-kubearchive-logging/loki-chunks-cache\",\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Minio post-jobs from chart require write access to filesystem.\\\"\\n\",\"ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy\":\"\\\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector runs requires certain host mounts to watch files being created by pods.\\\"\\n\",\"ignore-check.kube-linter.io/unset-cpu-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"ignore-check.kube-linter.io/unset-memory-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\"},\"labels\":{\"app.kubernetes.io/component\":\"memcached-chunks-cache\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\",\"app.kubernetes.io/version\":\"3.6.3\",\"helm.sh/chart\":\"loki-6.49.0\",\"name\":\"memcached-chunks-cache\"},\"name\":\"loki-chunks-cache\",\"namespace\":\"product-kubearchive-logging\"},\"spec\":{\"podManagementPolicy\":\"Parallel\",\"replicas\":1,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"memcached-chunks-cache\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\",\"name\":\"memcached-chunks-cache\"}},\"serviceName\":\"loki-chunks-cache\",\"template\":{\"metadata\":{\"annotations\":{\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Minio post-jobs from chart require write access to filesystem.\\\"\\n\",\"ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy\":\"\\\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector runs requires certain host mounts to watch files being created by pods.\\\"\\n\",\"ignore-check.kube-linter.io/unset-cpu-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"ignore-check.kube-linter.io/unset-memory-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\"},\"labels\":{\"app.kubernetes.io/component\":\"memcached-chunks-cache\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\",\"name\":\"memcached-chunks-cache\"}},\"spec\":{\"affinity\":{},\"containers\":[{\"args\":[\"-m 8192\",\"--extended=modern,track_sizes\",\"-I 10m\",\"-c 16384\",\"-v\",\"-u 11211\"],\"env\":null,\"envFrom\":null,\"image\":\"quay.io/kubearchive/memcached:1.6.39-alpine\",\"imagePullPolicy\":\"IfNotPresent\",\"livenessProbe\":{\"failureThreshold\":3,\"initialDelaySeconds\":30,\"periodSeconds\":10,\"tcpSocket\":{\"port\":\"client\"},\"timeoutSeconds\":5},\"name\":\"memcached\",\"ports\":[{\"containerPort\":11211,\"name\":\"client\"}],\"readinessProbe\":{\"failureThreshold\":6,\"initialDelaySeconds\":5,\"periodSeconds\":5,\"tcpSocket\":{\"port\":\"client\"},\"timeoutSeconds\":3},\"resources\":{\"limits\":{\"memory\":\"9830Mi\"},\"requests\":{\"cpu\":\"500m\",\"memory\":\"9830Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true}},{\"args\":[\"--memcached.address=localhost:11211\",\"--web.listen-address=0.0.0.0:9150\"],\"image\":\"quay.io/kubearchive/memcached-exporter:v0.15.4\",\"imagePullPolicy\":\"IfNotPresent\",\"livenessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/metrics\",\"port\":\"http-metrics\"},\"initialDelaySeconds\":30,\"periodSeconds\":10,\"timeoutSeconds\":5},\"name\":\"exporter\",\"ports\":[{\"containerPort\":9150,\"name\":\"http-metrics\"}],\"readinessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/metrics\",\"port\":\"http-metrics\"},\"initialDelaySeconds\":5,\"periodSeconds\":5,\"timeoutSeconds\":3},\"resources\":{\"limits\":{},\"requests\":{}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true}}],\"initContainers\":[],\"nodeSelector\":{},\"securityContext\":{\"fsGroup\":11211,\"runAsGroup\":11211,\"runAsNonRoot\":true,\"runAsUser\":11211},\"serviceAccountName\":\"loki\",\"terminationGracePeriodSeconds\":60,\"tolerations\":[],\"topologySpreadConstraints\":[]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" }, "creationTimestamp": "2026-04-22T13:33:12Z", "generation": 1, "labels": { "app.kubernetes.io/component": "memcached-chunks-cache", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki", "app.kubernetes.io/version": "3.6.3", "helm.sh/chart": "loki-6.49.0", "name": "memcached-chunks-cache" }, "name": "loki-chunks-cache", "namespace": "product-kubearchive-logging", "resourceVersion": "34971", "uid": "2c9f048e-56e4-4e68-908a-b7341971cc3e" }, "spec": { "persistentVolumeClaimRetentionPolicy": { "whenDeleted": "Retain", "whenScaled": "Retain" }, "podManagementPolicy": "Parallel", "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "memcached-chunks-cache", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki", "name": "memcached-chunks-cache" } }, "serviceName": "loki-chunks-cache", "template": { "metadata": { "annotations": { "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector runs requires access to socket.\"\n", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Minio post-jobs from chart require write access to filesystem.\"\n", "ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy": "\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector runs requires certain host mounts to watch files being created by pods.\"\n", "ignore-check.kube-linter.io/unset-cpu-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "ignore-check.kube-linter.io/unset-memory-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "memcached-chunks-cache", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki", "name": "memcached-chunks-cache" } }, "spec": { "affinity": {}, "containers": [ { "args": [ "-m 8192", "--extended=modern,track_sizes", "-I 10m", "-c 16384", "-v", "-u 11211" ], "image": "quay.io/kubearchive/memcached:1.6.39-alpine", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": "client" }, "timeoutSeconds": 5 }, "name": "memcached", "ports": [ { "containerPort": 11211, "name": "client", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 6, "initialDelaySeconds": 5, "periodSeconds": 5, "successThreshold": 1, "tcpSocket": { "port": "client" }, "timeoutSeconds": 3 }, "resources": { "limits": { "memory": "9830Mi" }, "requests": { "cpu": "500m", "memory": "9830Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" }, { "args": [ "--memcached.address=localhost:11211", "--web.listen-address=0.0.0.0:9150" ], "image": "quay.io/kubearchive/memcached-exporter:v0.15.4", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/metrics", "port": "http-metrics", "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "exporter", "ports": [ { "containerPort": 9150, "name": "http-metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/metrics", "port": "http-metrics", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 3 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 11211, "runAsGroup": 11211, "runAsNonRoot": true, "runAsUser": 11211 }, "serviceAccount": "loki", "serviceAccountName": "loki", "terminationGracePeriodSeconds": 60 } }, "updateStrategy": { "type": "RollingUpdate" } }, "status": { "availableReplicas": 1, "collisionCount": 0, "currentReplicas": 1, "currentRevision": "loki-chunks-cache-5d56d6977c", "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updateRevision": "loki-chunks-cache-5d56d6977c", "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "StatefulSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "vector-kubearchive-log-collector-in-cluster-local:apps/StatefulSet:product-kubearchive-logging/loki-compactor", "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector runs requires access to socket.\"\n", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Minio post-jobs from chart require write access to filesystem.\"\n", "ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy": "\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector runs requires certain host mounts to watch files being created by pods.\"\n", "ignore-check.kube-linter.io/unset-cpu-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "ignore-check.kube-linter.io/unset-memory-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"StatefulSet\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"vector-kubearchive-log-collector-in-cluster-local:apps/StatefulSet:product-kubearchive-logging/loki-compactor\",\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Minio post-jobs from chart require write access to filesystem.\\\"\\n\",\"ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy\":\"\\\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector runs requires certain host mounts to watch files being created by pods.\\\"\\n\",\"ignore-check.kube-linter.io/unset-cpu-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"ignore-check.kube-linter.io/unset-memory-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\"},\"labels\":{\"app.kubernetes.io/component\":\"compactor\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\",\"app.kubernetes.io/part-of\":\"memberlist\",\"app.kubernetes.io/version\":\"3.6.3\",\"helm.sh/chart\":\"loki-6.49.0\"},\"name\":\"loki-compactor\",\"namespace\":\"product-kubearchive-logging\"},\"spec\":{\"podManagementPolicy\":\"Parallel\",\"replicas\":1,\"revisionHistoryLimit\":10,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"compactor\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\"}},\"serviceName\":\"loki-compactor-headless\",\"template\":{\"metadata\":{\"annotations\":{\"checksum/config\":\"9c1da9d587c969666f111c0953bc5aa254e49555cfdd18dbb56b2805de7e56b6\",\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Minio post-jobs from chart require write access to filesystem.\\\"\\n\",\"ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy\":\"\\\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector runs requires certain host mounts to watch files being created by pods.\\\"\\n\",\"ignore-check.kube-linter.io/unset-cpu-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"ignore-check.kube-linter.io/unset-memory-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\"},\"labels\":{\"app.kubernetes.io/component\":\"compactor\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\",\"app.kubernetes.io/part-of\":\"memberlist\",\"app.kubernetes.io/version\":\"3.6.3\",\"helm.sh/chart\":\"loki-6.49.0\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":[{\"labelSelector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"compactor\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\"}},\"topologyKey\":\"kubernetes.io/hostname\"}]}},\"containers\":[{\"args\":[\"-config.file=/etc/loki/config/config.yaml\",\"-target=compactor\",\"-log.level=debug\"],\"image\":\"quay.io/kubearchive/loki:3.6.3\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"compactor\",\"ports\":[{\"containerPort\":3100,\"name\":\"http-metrics\",\"protocol\":\"TCP\"},{\"containerPort\":9095,\"name\":\"grpc\",\"protocol\":\"TCP\"},{\"containerPort\":7946,\"name\":\"http-memberlist\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/ready\",\"port\":\"http-metrics\"},\"initialDelaySeconds\":15,\"periodSeconds\":10,\"successThreshold\":1,\"timeoutSeconds\":1},\"resources\":{\"limits\":{\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"64Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true},\"volumeMounts\":[{\"mountPath\":\"/tmp\",\"name\":\"temp\"},{\"mountPath\":\"/etc/loki/config\",\"name\":\"config\"},{\"mountPath\":\"/etc/loki/runtime-config\",\"name\":\"runtime-config\"},{\"mountPath\":\"/var/loki\",\"name\":\"data\"}]}],\"securityContext\":{\"fsGroup\":10001,\"fsGroupChangePolicy\":\"OnRootMismatch\",\"runAsGroup\":10001,\"runAsNonRoot\":true,\"runAsUser\":10001},\"serviceAccountName\":\"loki\",\"terminationGracePeriodSeconds\":30,\"volumes\":[{\"emptyDir\":{},\"name\":\"temp\"},{\"configMap\":{\"items\":[{\"key\":\"config.yaml\",\"path\":\"config.yaml\"}],\"name\":\"loki\"},\"name\":\"config\"},{\"configMap\":{\"name\":\"loki-runtime\"},\"name\":\"runtime-config\"},{\"emptyDir\":{},\"name\":\"data\"}]}},\"updateStrategy\":{\"rollingUpdate\":{\"partition\":0}}}}\n" }, "creationTimestamp": "2026-04-22T13:33:12Z", "generation": 1, "labels": { "app.kubernetes.io/component": "compactor", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki", "app.kubernetes.io/part-of": "memberlist", "app.kubernetes.io/version": "3.6.3", "helm.sh/chart": "loki-6.49.0" }, "name": "loki-compactor", "namespace": "product-kubearchive-logging", "resourceVersion": "35768", "uid": "6347ae30-e659-4b61-93a4-eef0a4e4d8ec" }, "spec": { "persistentVolumeClaimRetentionPolicy": { "whenDeleted": "Retain", "whenScaled": "Retain" }, "podManagementPolicy": "Parallel", "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "compactor", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki" } }, "serviceName": "loki-compactor-headless", "template": { "metadata": { "annotations": { "checksum/config": "9c1da9d587c969666f111c0953bc5aa254e49555cfdd18dbb56b2805de7e56b6", "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector runs requires access to socket.\"\n", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Minio post-jobs from chart require write access to filesystem.\"\n", "ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy": "\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector runs requires certain host mounts to watch files being created by pods.\"\n", "ignore-check.kube-linter.io/unset-cpu-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "ignore-check.kube-linter.io/unset-memory-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "compactor", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki", "app.kubernetes.io/part-of": "memberlist", "app.kubernetes.io/version": "3.6.3", "helm.sh/chart": "loki-6.49.0" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "compactor", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "-config.file=/etc/loki/config/config.yaml", "-target=compactor", "-log.level=debug" ], "image": "quay.io/kubearchive/loki:3.6.3", "imagePullPolicy": "IfNotPresent", "name": "compactor", "ports": [ { "containerPort": 3100, "name": "http-metrics", "protocol": "TCP" }, { "containerPort": 9095, "name": "grpc", "protocol": "TCP" }, { "containerPort": 7946, "name": "http-memberlist", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": "http-metrics", "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "memory": "128Mi" }, "requests": { "cpu": "50m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "temp" }, { "mountPath": "/etc/loki/config", "name": "config" }, { "mountPath": "/etc/loki/runtime-config", "name": "runtime-config" }, { "mountPath": "/var/loki", "name": "data" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 10001, "fsGroupChangePolicy": "OnRootMismatch", "runAsGroup": 10001, "runAsNonRoot": true, "runAsUser": 10001 }, "serviceAccount": "loki", "serviceAccountName": "loki", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "temp" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "config.yaml", "path": "config.yaml" } ], "name": "loki" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "loki-runtime" }, "name": "runtime-config" }, { "emptyDir": {}, "name": "data" } ] } }, "updateStrategy": { "rollingUpdate": { "partition": 0 }, "type": "RollingUpdate" } }, "status": { "availableReplicas": 1, "collisionCount": 0, "currentReplicas": 1, "currentRevision": "loki-compactor-5b4fd5844b", "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updateRevision": "loki-compactor-5b4fd5844b", "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "StatefulSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "vector-kubearchive-log-collector-in-cluster-local:apps/StatefulSet:product-kubearchive-logging/loki-index-gateway", "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector runs requires access to socket.\"\n", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Minio post-jobs from chart require write access to filesystem.\"\n", "ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy": "\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector runs requires certain host mounts to watch files being created by pods.\"\n", "ignore-check.kube-linter.io/unset-cpu-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "ignore-check.kube-linter.io/unset-memory-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"StatefulSet\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"vector-kubearchive-log-collector-in-cluster-local:apps/StatefulSet:product-kubearchive-logging/loki-index-gateway\",\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Minio post-jobs from chart require write access to filesystem.\\\"\\n\",\"ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy\":\"\\\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector runs requires certain host mounts to watch files being created by pods.\\\"\\n\",\"ignore-check.kube-linter.io/unset-cpu-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"ignore-check.kube-linter.io/unset-memory-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\"},\"labels\":{\"app.kubernetes.io/component\":\"index-gateway\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\",\"app.kubernetes.io/version\":\"3.6.3\",\"helm.sh/chart\":\"loki-6.49.0\"},\"name\":\"loki-index-gateway\",\"namespace\":\"product-kubearchive-logging\"},\"spec\":{\"replicas\":1,\"revisionHistoryLimit\":10,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"index-gateway\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\"}},\"serviceName\":\"loki-index-gateway-headless\",\"template\":{\"metadata\":{\"annotations\":{\"checksum/config\":\"9c1da9d587c969666f111c0953bc5aa254e49555cfdd18dbb56b2805de7e56b6\",\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Minio post-jobs from chart require write access to filesystem.\\\"\\n\",\"ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy\":\"\\\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector runs requires certain host mounts to watch files being created by pods.\\\"\\n\",\"ignore-check.kube-linter.io/unset-cpu-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"ignore-check.kube-linter.io/unset-memory-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\"},\"labels\":{\"app.kubernetes.io/component\":\"index-gateway\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\",\"app.kubernetes.io/part-of\":\"memberlist\",\"app.kubernetes.io/version\":\"3.6.3\",\"helm.sh/chart\":\"loki-6.49.0\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":[{\"labelSelector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"index-gateway\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\"}},\"topologyKey\":\"kubernetes.io/hostname\"}]}},\"containers\":[{\"args\":[\"-config.file=/etc/loki/config/config.yaml\",\"-target=index-gateway\",\"-log.level=debug\"],\"image\":\"quay.io/kubearchive/loki:3.6.3\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"index-gateway\",\"ports\":[{\"containerPort\":3100,\"name\":\"http-metrics\",\"protocol\":\"TCP\"},{\"containerPort\":9095,\"name\":\"grpc\",\"protocol\":\"TCP\"},{\"containerPort\":7946,\"name\":\"http-memberlist\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/ready\",\"port\":\"http-metrics\"},\"initialDelaySeconds\":15,\"periodSeconds\":10,\"successThreshold\":1,\"timeoutSeconds\":1},\"resources\":{\"limits\":{\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"128Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true},\"volumeMounts\":[{\"mountPath\":\"/etc/loki/config\",\"name\":\"config\"},{\"mountPath\":\"/etc/loki/runtime-config\",\"name\":\"runtime-config\"},{\"mountPath\":\"/var/loki\",\"name\":\"data\"}]}],\"securityContext\":{\"fsGroup\":10001,\"fsGroupChangePolicy\":\"OnRootMismatch\",\"runAsGroup\":10001,\"runAsNonRoot\":true,\"runAsUser\":10001},\"serviceAccountName\":\"loki\",\"terminationGracePeriodSeconds\":300,\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"config.yaml\",\"path\":\"config.yaml\"}],\"name\":\"loki\"},\"name\":\"config\"},{\"configMap\":{\"name\":\"loki-runtime\"},\"name\":\"runtime-config\"},{\"emptyDir\":{},\"name\":\"data\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" }, "creationTimestamp": "2026-04-22T13:33:12Z", "generation": 1, "labels": { "app.kubernetes.io/component": "index-gateway", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki", "app.kubernetes.io/version": "3.6.3", "helm.sh/chart": "loki-6.49.0" }, "name": "loki-index-gateway", "namespace": "product-kubearchive-logging", "resourceVersion": "35774", "uid": "dc0ed893-6ba7-430c-b2e3-c9f63e2c421b" }, "spec": { "persistentVolumeClaimRetentionPolicy": { "whenDeleted": "Retain", "whenScaled": "Retain" }, "podManagementPolicy": "OrderedReady", "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "index-gateway", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki" } }, "serviceName": "loki-index-gateway-headless", "template": { "metadata": { "annotations": { "checksum/config": "9c1da9d587c969666f111c0953bc5aa254e49555cfdd18dbb56b2805de7e56b6", "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector runs requires access to socket.\"\n", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Minio post-jobs from chart require write access to filesystem.\"\n", "ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy": "\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector runs requires certain host mounts to watch files being created by pods.\"\n", "ignore-check.kube-linter.io/unset-cpu-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "ignore-check.kube-linter.io/unset-memory-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "index-gateway", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki", "app.kubernetes.io/part-of": "memberlist", "app.kubernetes.io/version": "3.6.3", "helm.sh/chart": "loki-6.49.0" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "index-gateway", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "-config.file=/etc/loki/config/config.yaml", "-target=index-gateway", "-log.level=debug" ], "image": "quay.io/kubearchive/loki:3.6.3", "imagePullPolicy": "IfNotPresent", "name": "index-gateway", "ports": [ { "containerPort": 3100, "name": "http-metrics", "protocol": "TCP" }, { "containerPort": 9095, "name": "grpc", "protocol": "TCP" }, { "containerPort": 7946, "name": "http-memberlist", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": "http-metrics", "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "memory": "256Mi" }, "requests": { "cpu": "50m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/loki/config", "name": "config" }, { "mountPath": "/etc/loki/runtime-config", "name": "runtime-config" }, { "mountPath": "/var/loki", "name": "data" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 10001, "fsGroupChangePolicy": "OnRootMismatch", "runAsGroup": 10001, "runAsNonRoot": true, "runAsUser": 10001 }, "serviceAccount": "loki", "serviceAccountName": "loki", "terminationGracePeriodSeconds": 300, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.yaml", "path": "config.yaml" } ], "name": "loki" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "loki-runtime" }, "name": "runtime-config" }, { "emptyDir": {}, "name": "data" } ] } }, "updateStrategy": { "type": "RollingUpdate" } }, "status": { "availableReplicas": 1, "collisionCount": 0, "currentReplicas": 1, "currentRevision": "loki-index-gateway-5547b6669", "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updateRevision": "loki-index-gateway-5547b6669", "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "StatefulSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "vector-kubearchive-log-collector-in-cluster-local:apps/StatefulSet:product-kubearchive-logging/loki-ingester", "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector runs requires access to socket.\"\n", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Minio post-jobs from chart require write access to filesystem.\"\n", "ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy": "\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector runs requires certain host mounts to watch files being created by pods.\"\n", "ignore-check.kube-linter.io/unset-cpu-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "ignore-check.kube-linter.io/unset-memory-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"StatefulSet\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"vector-kubearchive-log-collector-in-cluster-local:apps/StatefulSet:product-kubearchive-logging/loki-ingester\",\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Minio post-jobs from chart require write access to filesystem.\\\"\\n\",\"ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy\":\"\\\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector runs requires certain host mounts to watch files being created by pods.\\\"\\n\",\"ignore-check.kube-linter.io/unset-cpu-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"ignore-check.kube-linter.io/unset-memory-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\"},\"labels\":{\"app.kubernetes.io/component\":\"ingester\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\",\"app.kubernetes.io/part-of\":\"memberlist\",\"app.kubernetes.io/version\":\"3.6.3\",\"helm.sh/chart\":\"loki-6.49.0\"},\"name\":\"loki-ingester\",\"namespace\":\"product-kubearchive-logging\"},\"spec\":{\"persistentVolumeClaimRetentionPolicy\":{\"whenDeleted\":\"Delete\",\"whenScaled\":\"Delete\"},\"podManagementPolicy\":\"Parallel\",\"replicas\":1,\"revisionHistoryLimit\":10,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"ingester\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\"}},\"serviceName\":\"loki-ingester-headless\",\"template\":{\"metadata\":{\"annotations\":{\"checksum/config\":\"9c1da9d587c969666f111c0953bc5aa254e49555cfdd18dbb56b2805de7e56b6\",\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Minio post-jobs from chart require write access to filesystem.\\\"\\n\",\"ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy\":\"\\\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector runs requires certain host mounts to watch files being created by pods.\\\"\\n\",\"ignore-check.kube-linter.io/unset-cpu-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"ignore-check.kube-linter.io/unset-memory-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\"},\"labels\":{\"app.kubernetes.io/component\":\"ingester\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\",\"app.kubernetes.io/part-of\":\"memberlist\",\"app.kubernetes.io/version\":\"3.6.3\",\"helm.sh/chart\":\"loki-6.49.0\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":[{\"labelSelector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"ingester\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\"}},\"topologyKey\":\"kubernetes.io/hostname\"}]}},\"containers\":[{\"args\":[\"-config.file=/etc/loki/config/config.yaml\",\"-ingester.availability-zone=zone-default\",\"-target=ingester\",\"-log.level=debug\"],\"env\":[{\"name\":\"AWS_ACCESS_KEY_ID\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"AWS_ACCESS_KEY_ID\",\"name\":\"kubearchive-loki\"}}},{\"name\":\"AWS_SECRET_ACCESS_KEY\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"AWS_SECRET_ACCESS_KEY\",\"name\":\"kubearchive-loki\"}}},{\"name\":\"AWS_DEFAULT_REGION\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"AWS_DEFAULT_REGION\",\"name\":\"kubearchive-loki\"}}}],\"image\":\"quay.io/kubearchive/loki:3.6.3\",\"imagePullPolicy\":\"IfNotPresent\",\"lifecycle\":{\"preStop\":{\"exec\":{\"command\":[\"/bin/sh\",\"-c\",\"sleep 10\"]}}},\"name\":\"ingester\",\"ports\":[{\"containerPort\":3100,\"name\":\"http-metrics\",\"protocol\":\"TCP\"},{\"containerPort\":9095,\"name\":\"grpc\",\"protocol\":\"TCP\"},{\"containerPort\":7946,\"name\":\"http-memberlist\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/ready\",\"port\":\"http-metrics\"},\"initialDelaySeconds\":15,\"periodSeconds\":10,\"successThreshold\":1,\"timeoutSeconds\":1},\"resources\":{\"limits\":{\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"256Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true},\"volumeMounts\":[{\"mountPath\":\"/etc/loki/config\",\"name\":\"config\"},{\"mountPath\":\"/etc/loki/runtime-config\",\"name\":\"runtime-config\"},{\"mountPath\":\"/var/loki\",\"name\":\"data\"}]}],\"securityContext\":{\"fsGroup\":10001,\"fsGroupChangePolicy\":\"OnRootMismatch\",\"runAsGroup\":10001,\"runAsNonRoot\":true,\"runAsUser\":10001},\"serviceAccountName\":\"loki\",\"terminationGracePeriodSeconds\":90,\"topologySpreadConstraints\":[{\"labelSelector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"ingester\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\"}},\"maxSkew\":1,\"topologyKey\":\"kubernetes.io/hostname\",\"whenUnsatisfiable\":\"ScheduleAnyway\"}],\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"config.yaml\",\"path\":\"config.yaml\"}],\"name\":\"loki\"},\"name\":\"config\"},{\"configMap\":{\"name\":\"loki-runtime\"},\"name\":\"runtime-config\"},{\"emptyDir\":{},\"name\":\"data\"}]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" }, "creationTimestamp": "2026-04-22T13:33:12Z", "generation": 1, "labels": { "app.kubernetes.io/component": "ingester", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki", "app.kubernetes.io/part-of": "memberlist", "app.kubernetes.io/version": "3.6.3", "helm.sh/chart": "loki-6.49.0" }, "name": "loki-ingester", "namespace": "product-kubearchive-logging", "resourceVersion": "189646", "uid": "72d1c602-cf97-4024-81fe-330683c8a687" }, "spec": { "persistentVolumeClaimRetentionPolicy": { "whenDeleted": "Delete", "whenScaled": "Delete" }, "podManagementPolicy": "Parallel", "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "ingester", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki" } }, "serviceName": "loki-ingester-headless", "template": { "metadata": { "annotations": { "checksum/config": "9c1da9d587c969666f111c0953bc5aa254e49555cfdd18dbb56b2805de7e56b6", "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector runs requires access to socket.\"\n", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Minio post-jobs from chart require write access to filesystem.\"\n", "ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy": "\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector runs requires certain host mounts to watch files being created by pods.\"\n", "ignore-check.kube-linter.io/unset-cpu-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "ignore-check.kube-linter.io/unset-memory-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "ingester", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki", "app.kubernetes.io/part-of": "memberlist", "app.kubernetes.io/version": "3.6.3", "helm.sh/chart": "loki-6.49.0" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "ingester", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "-config.file=/etc/loki/config/config.yaml", "-ingester.availability-zone=zone-default", "-target=ingester", "-log.level=debug" ], "env": [ { "name": "AWS_ACCESS_KEY_ID", "valueFrom": { "secretKeyRef": { "key": "AWS_ACCESS_KEY_ID", "name": "kubearchive-loki" } } }, { "name": "AWS_SECRET_ACCESS_KEY", "valueFrom": { "secretKeyRef": { "key": "AWS_SECRET_ACCESS_KEY", "name": "kubearchive-loki" } } }, { "name": "AWS_DEFAULT_REGION", "valueFrom": { "secretKeyRef": { "key": "AWS_DEFAULT_REGION", "name": "kubearchive-loki" } } } ], "image": "quay.io/kubearchive/loki:3.6.3", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "/bin/sh", "-c", "sleep 10" ] } } }, "name": "ingester", "ports": [ { "containerPort": 3100, "name": "http-metrics", "protocol": "TCP" }, { "containerPort": 9095, "name": "grpc", "protocol": "TCP" }, { "containerPort": 7946, "name": "http-memberlist", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": "http-metrics", "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "memory": "512Mi" }, "requests": { "cpu": "50m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/loki/config", "name": "config" }, { "mountPath": "/etc/loki/runtime-config", "name": "runtime-config" }, { "mountPath": "/var/loki", "name": "data" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 10001, "fsGroupChangePolicy": "OnRootMismatch", "runAsGroup": 10001, "runAsNonRoot": true, "runAsUser": 10001 }, "serviceAccount": "loki", "serviceAccountName": "loki", "terminationGracePeriodSeconds": 90, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "ingester", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki" } }, "maxSkew": 1, "topologyKey": "kubernetes.io/hostname", "whenUnsatisfiable": "ScheduleAnyway" } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.yaml", "path": "config.yaml" } ], "name": "loki" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "loki-runtime" }, "name": "runtime-config" }, { "emptyDir": {}, "name": "data" } ] } }, "updateStrategy": { "type": "RollingUpdate" } }, "status": { "availableReplicas": 1, "collisionCount": 0, "currentReplicas": 1, "currentRevision": "loki-ingester-dddfdfb76", "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updateRevision": "loki-ingester-dddfdfb76", "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "StatefulSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "vector-kubearchive-log-collector-in-cluster-local:apps/StatefulSet:product-kubearchive-logging/loki-results-cache", "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector runs requires access to socket.\"\n", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Minio post-jobs from chart require write access to filesystem.\"\n", "ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy": "\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector runs requires certain host mounts to watch files being created by pods.\"\n", "ignore-check.kube-linter.io/unset-cpu-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "ignore-check.kube-linter.io/unset-memory-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"StatefulSet\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"vector-kubearchive-log-collector-in-cluster-local:apps/StatefulSet:product-kubearchive-logging/loki-results-cache\",\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Minio post-jobs from chart require write access to filesystem.\\\"\\n\",\"ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy\":\"\\\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector runs requires certain host mounts to watch files being created by pods.\\\"\\n\",\"ignore-check.kube-linter.io/unset-cpu-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"ignore-check.kube-linter.io/unset-memory-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\"},\"labels\":{\"app.kubernetes.io/component\":\"memcached-results-cache\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\",\"app.kubernetes.io/version\":\"3.6.3\",\"helm.sh/chart\":\"loki-6.49.0\",\"name\":\"memcached-results-cache\"},\"name\":\"loki-results-cache\",\"namespace\":\"product-kubearchive-logging\"},\"spec\":{\"podManagementPolicy\":\"Parallel\",\"replicas\":1,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"memcached-results-cache\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\",\"name\":\"memcached-results-cache\"}},\"serviceName\":\"loki-results-cache\",\"template\":{\"metadata\":{\"annotations\":{\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Minio post-jobs from chart require write access to filesystem.\\\"\\n\",\"ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy\":\"\\\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector runs requires certain host mounts to watch files being created by pods.\\\"\\n\",\"ignore-check.kube-linter.io/unset-cpu-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"ignore-check.kube-linter.io/unset-memory-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\"},\"labels\":{\"app.kubernetes.io/component\":\"memcached-results-cache\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\",\"name\":\"memcached-results-cache\"}},\"spec\":{\"affinity\":{},\"containers\":[{\"args\":[\"-m 1024\",\"--extended=modern,track_sizes\",\"-I 10m\",\"-c 16384\",\"-v\",\"-u 11211\"],\"env\":null,\"envFrom\":null,\"image\":\"quay.io/kubearchive/memcached:1.6.39-alpine\",\"imagePullPolicy\":\"IfNotPresent\",\"livenessProbe\":{\"failureThreshold\":3,\"initialDelaySeconds\":30,\"periodSeconds\":10,\"tcpSocket\":{\"port\":\"client\"},\"timeoutSeconds\":5},\"name\":\"memcached\",\"ports\":[{\"containerPort\":11211,\"name\":\"client\"}],\"readinessProbe\":{\"failureThreshold\":6,\"initialDelaySeconds\":5,\"periodSeconds\":5,\"tcpSocket\":{\"port\":\"client\"},\"timeoutSeconds\":3},\"resources\":{\"limits\":{\"memory\":\"1229Mi\"},\"requests\":{\"cpu\":\"500m\",\"memory\":\"1229Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true}},{\"args\":[\"--memcached.address=localhost:11211\",\"--web.listen-address=0.0.0.0:9150\"],\"image\":\"quay.io/kubearchive/memcached-exporter:v0.15.4\",\"imagePullPolicy\":\"IfNotPresent\",\"livenessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/metrics\",\"port\":\"http-metrics\"},\"initialDelaySeconds\":30,\"periodSeconds\":10,\"timeoutSeconds\":5},\"name\":\"exporter\",\"ports\":[{\"containerPort\":9150,\"name\":\"http-metrics\"}],\"readinessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/metrics\",\"port\":\"http-metrics\"},\"initialDelaySeconds\":5,\"periodSeconds\":5,\"timeoutSeconds\":3},\"resources\":{\"limits\":{},\"requests\":{}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true}}],\"initContainers\":[],\"nodeSelector\":{},\"securityContext\":{\"fsGroup\":11211,\"runAsGroup\":11211,\"runAsNonRoot\":true,\"runAsUser\":11211},\"serviceAccountName\":\"loki\",\"terminationGracePeriodSeconds\":60,\"tolerations\":[],\"topologySpreadConstraints\":[]}},\"updateStrategy\":{\"type\":\"RollingUpdate\"}}}\n" }, "creationTimestamp": "2026-04-22T13:33:12Z", "generation": 1, "labels": { "app.kubernetes.io/component": "memcached-results-cache", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki", "app.kubernetes.io/version": "3.6.3", "helm.sh/chart": "loki-6.49.0", "name": "memcached-results-cache" }, "name": "loki-results-cache", "namespace": "product-kubearchive-logging", "resourceVersion": "35079", "uid": "feaeddac-877d-4588-acc5-0171056cd28c" }, "spec": { "persistentVolumeClaimRetentionPolicy": { "whenDeleted": "Retain", "whenScaled": "Retain" }, "podManagementPolicy": "Parallel", "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "memcached-results-cache", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki", "name": "memcached-results-cache" } }, "serviceName": "loki-results-cache", "template": { "metadata": { "annotations": { "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector runs requires access to socket.\"\n", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Minio post-jobs from chart require write access to filesystem.\"\n", "ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy": "\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector runs requires certain host mounts to watch files being created by pods.\"\n", "ignore-check.kube-linter.io/unset-cpu-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "ignore-check.kube-linter.io/unset-memory-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "memcached-results-cache", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki", "name": "memcached-results-cache" } }, "spec": { "affinity": {}, "containers": [ { "args": [ "-m 1024", "--extended=modern,track_sizes", "-I 10m", "-c 16384", "-v", "-u 11211" ], "image": "quay.io/kubearchive/memcached:1.6.39-alpine", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": "client" }, "timeoutSeconds": 5 }, "name": "memcached", "ports": [ { "containerPort": 11211, "name": "client", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 6, "initialDelaySeconds": 5, "periodSeconds": 5, "successThreshold": 1, "tcpSocket": { "port": "client" }, "timeoutSeconds": 3 }, "resources": { "limits": { "memory": "1229Mi" }, "requests": { "cpu": "500m", "memory": "1229Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" }, { "args": [ "--memcached.address=localhost:11211", "--web.listen-address=0.0.0.0:9150" ], "image": "quay.io/kubearchive/memcached-exporter:v0.15.4", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/metrics", "port": "http-metrics", "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "exporter", "ports": [ { "containerPort": 9150, "name": "http-metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/metrics", "port": "http-metrics", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 3 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 11211, "runAsGroup": 11211, "runAsNonRoot": true, "runAsUser": 11211 }, "serviceAccount": "loki", "serviceAccountName": "loki", "terminationGracePeriodSeconds": 60 } }, "updateStrategy": { "type": "RollingUpdate" } }, "status": { "availableReplicas": 1, "collisionCount": 0, "currentReplicas": 1, "currentRevision": "loki-results-cache-7f9b5584bb", "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updateRevision": "loki-results-cache-7f9b5584bb", "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "StatefulSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "postgres:apps/StatefulSet:tekton-results/postgres-postgresql", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"StatefulSet\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"postgres:apps/StatefulSet:tekton-results/postgres-postgresql\"},\"labels\":{\"app.kubernetes.io/component\":\"primary\",\"app.kubernetes.io/instance\":\"postgres\",\"app.kubernetes.io/managed-by\":\"Helm\",\"app.kubernetes.io/name\":\"postgresql\",\"app.kubernetes.io/version\":\"17.6.0\",\"helm.sh/chart\":\"postgresql-17.0.2\"},\"name\":\"postgres-postgresql\",\"namespace\":\"tekton-results\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"primary\",\"app.kubernetes.io/instance\":\"postgres\",\"app.kubernetes.io/name\":\"postgresql\"}},\"serviceName\":\"postgres-postgresql-hl\",\"template\":{\"metadata\":{\"labels\":{\"app.kubernetes.io/component\":\"primary\",\"app.kubernetes.io/instance\":\"postgres\",\"app.kubernetes.io/managed-by\":\"Helm\",\"app.kubernetes.io/name\":\"postgresql\",\"app.kubernetes.io/version\":\"17.6.0\",\"helm.sh/chart\":\"postgresql-17.0.2\"},\"name\":\"postgres-postgresql\"},\"spec\":{\"affinity\":{\"nodeAffinity\":null,\"podAffinity\":null,\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"primary\",\"app.kubernetes.io/instance\":\"postgres\",\"app.kubernetes.io/name\":\"postgresql\"}},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":1}]}},\"automountServiceAccountToken\":false,\"containers\":[{\"env\":[{\"name\":\"BITNAMI_DEBUG\",\"value\":\"false\"},{\"name\":\"POSTGRESQL_PORT_NUMBER\",\"value\":\"5432\"},{\"name\":\"POSTGRESQL_VOLUME_DIR\",\"value\":\"/bitnami/postgresql\"},{\"name\":\"PGDATA\",\"value\":\"/bitnami/postgresql/data\"},{\"name\":\"POSTGRES_USER\",\"value\":\"tekton\"},{\"name\":\"POSTGRES_PASSWORD_FILE\",\"value\":\"/opt/bitnami/postgresql/secrets/db.password\"},{\"name\":\"POSTGRES_POSTGRES_PASSWORD_FILE\",\"value\":\"/opt/bitnami/postgresql/secrets/db.password\"},{\"name\":\"POSTGRES_DATABASE\",\"value\":\"tekton_results\"},{\"name\":\"POSTGRESQL_ENABLE_LDAP\",\"value\":\"no\"},{\"name\":\"POSTGRESQL_ENABLE_TLS\",\"value\":\"yes\"},{\"name\":\"POSTGRESQL_TLS_PREFER_SERVER_CIPHERS\",\"value\":\"yes\"},{\"name\":\"POSTGRESQL_TLS_CERT_FILE\",\"value\":\"/opt/bitnami/postgresql/certs/tls.crt\"},{\"name\":\"POSTGRESQL_TLS_KEY_FILE\",\"value\":\"/opt/bitnami/postgresql/certs/tls.key\"},{\"name\":\"POSTGRESQL_LOG_HOSTNAME\",\"value\":\"false\"},{\"name\":\"POSTGRESQL_LOG_CONNECTIONS\",\"value\":\"false\"},{\"name\":\"POSTGRESQL_LOG_DISCONNECTIONS\",\"value\":\"false\"},{\"name\":\"POSTGRESQL_PGAUDIT_LOG_CATALOG\",\"value\":\"off\"},{\"name\":\"POSTGRESQL_CLIENT_MIN_MESSAGES\",\"value\":\"error\"},{\"name\":\"POSTGRESQL_SHARED_PRELOAD_LIBRARIES\",\"value\":\"pgaudit\"}],\"image\":\"quay.io/openshift-pipeline/postgresql:latest\",\"imagePullPolicy\":\"IfNotPresent\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/sh\",\"-c\",\"exec pg_isready -U \\\"tekton\\\" -d \\\"dbname=tekton_results\\\" -h 127.0.0.1 -p 5432\"]},\"failureThreshold\":6,\"initialDelaySeconds\":30,\"periodSeconds\":10,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"postgresql\",\"ports\":[{\"containerPort\":5432,\"name\":\"tcp-postgresql\"}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/sh\",\"-c\",\"-e\",\"exec pg_isready -U \\\"tekton\\\" -d \\\"dbname=tekton_results sslcert=/opt/bitnami/postgresql/certs/tls.crt sslkey=/opt/bitnami/postgresql/certs/tls.key\\\" -h 127.0.0.1 -p 5432\\n[ -f /opt/bitnami/postgresql/tmp/.initialized ] || [ -f /bitnami/postgresql/.initialized ]\\n\"]},\"failureThreshold\":6,\"initialDelaySeconds\":5,\"periodSeconds\":10,\"successThreshold\":1,\"timeoutSeconds\":5},\"resources\":{\"requests\":null},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"privileged\":false,\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"volumeMounts\":[{\"mountPath\":\"/tmp\",\"name\":\"empty-dir\",\"subPath\":\"tmp-dir\"},{\"mountPath\":\"/opt/bitnami/postgresql/conf\",\"name\":\"empty-dir\",\"subPath\":\"app-conf-dir\"},{\"mountPath\":\"/opt/bitnami/postgresql/tmp\",\"name\":\"empty-dir\",\"subPath\":\"app-tmp-dir\"},{\"mountPath\":\"/opt/bitnami/postgresql/secrets/\",\"name\":\"postgresql-password\"},{\"mountPath\":\"/opt/bitnami/postgresql/certs\",\"name\":\"postgresql-certificates\",\"readOnly\":true},{\"mountPath\":\"/bitnami/postgresql\",\"name\":\"data\"}]}],\"hostIPC\":false,\"hostNetwork\":false,\"initContainers\":[{\"command\":[\"/bin/sh\",\"-ec\",\"cp /tmp/certs/* /opt/bitnami/postgresql/certs/\\nchmod 600 /opt/bitnami/postgresql/certs/tls.key\\n\"],\"image\":\"quay.io/openshift-pipeline/os-shell:latest\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"copy-certs\",\"resources\":{\"requests\":null},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"privileged\":false,\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"volumeMounts\":[{\"mountPath\":\"/tmp\",\"name\":\"empty-dir\",\"subPath\":\"tmp-dir\"},{\"mountPath\":\"/tmp/certs\",\"name\":\"raw-certificates\"},{\"mountPath\":\"/opt/bitnami/postgresql/certs\",\"name\":\"postgresql-certificates\"}]}],\"securityContext\":{\"fsGroupChangePolicy\":\"Always\",\"seccompProfile\":{\"type\":\"RuntimeDefault\"},\"supplementalGroups\":[],\"sysctls\":[]},\"serviceAccountName\":\"postgres-postgresql\",\"volumes\":[{\"emptyDir\":{},\"name\":\"empty-dir\"},{\"name\":\"postgresql-password\",\"secret\":{\"secretName\":\"tekton-results-database\"}},{\"name\":\"raw-certificates\",\"secret\":{\"secretName\":\"postgresql-tls\"}},{\"emptyDir\":{},\"name\":\"postgresql-certificates\"}]}},\"updateStrategy\":{\"rollingUpdate\":{},\"type\":\"RollingUpdate\"},\"volumeClaimTemplates\":[{\"apiVersion\":\"v1\",\"kind\":\"PersistentVolumeClaim\",\"metadata\":{\"name\":\"data\"},\"spec\":{\"accessModes\":[\"ReadWriteOnce\"],\"resources\":{\"requests\":{\"storage\":\"8Gi\"}}}}]}}\n" }, "creationTimestamp": "2026-04-22T13:31:04Z", "generation": 1, "labels": { "app.kubernetes.io/component": "primary", "app.kubernetes.io/instance": "postgres", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "postgresql", "app.kubernetes.io/version": "17.6.0", "helm.sh/chart": "postgresql-17.0.2" }, "name": "postgres-postgresql", "namespace": "tekton-results", "resourceVersion": "30478", "uid": "a7f81c3f-f06f-48a5-b46e-fcdc55011351" }, "spec": { "persistentVolumeClaimRetentionPolicy": { "whenDeleted": "Retain", "whenScaled": "Retain" }, "podManagementPolicy": "OrderedReady", "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "primary", "app.kubernetes.io/instance": "postgres", "app.kubernetes.io/name": "postgresql" } }, "serviceName": "postgres-postgresql-hl", "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "primary", "app.kubernetes.io/instance": "postgres", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "postgresql", "app.kubernetes.io/version": "17.6.0", "helm.sh/chart": "postgresql-17.0.2" }, "name": "postgres-postgresql" }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "primary", "app.kubernetes.io/instance": "postgres", "app.kubernetes.io/name": "postgresql" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 1 } ] } }, "automountServiceAccountToken": false, "containers": [ { "env": [ { "name": "BITNAMI_DEBUG", "value": "false" }, { "name": "POSTGRESQL_PORT_NUMBER", "value": "5432" }, { "name": "POSTGRESQL_VOLUME_DIR", "value": "/bitnami/postgresql" }, { "name": "PGDATA", "value": "/bitnami/postgresql/data" }, { "name": "POSTGRES_USER", "value": "tekton" }, { "name": "POSTGRES_PASSWORD_FILE", "value": "/opt/bitnami/postgresql/secrets/db.password" }, { "name": "POSTGRES_POSTGRES_PASSWORD_FILE", "value": "/opt/bitnami/postgresql/secrets/db.password" }, { "name": "POSTGRES_DATABASE", "value": "tekton_results" }, { "name": "POSTGRESQL_ENABLE_LDAP", "value": "no" }, { "name": "POSTGRESQL_ENABLE_TLS", "value": "yes" }, { "name": "POSTGRESQL_TLS_PREFER_SERVER_CIPHERS", "value": "yes" }, { "name": "POSTGRESQL_TLS_CERT_FILE", "value": "/opt/bitnami/postgresql/certs/tls.crt" }, { "name": "POSTGRESQL_TLS_KEY_FILE", "value": "/opt/bitnami/postgresql/certs/tls.key" }, { "name": "POSTGRESQL_LOG_HOSTNAME", "value": "false" }, { "name": "POSTGRESQL_LOG_CONNECTIONS", "value": "false" }, { "name": "POSTGRESQL_LOG_DISCONNECTIONS", "value": "false" }, { "name": "POSTGRESQL_PGAUDIT_LOG_CATALOG", "value": "off" }, { "name": "POSTGRESQL_CLIENT_MIN_MESSAGES", "value": "error" }, { "name": "POSTGRESQL_SHARED_PRELOAD_LIBRARIES", "value": "pgaudit" } ], "image": "quay.io/openshift-pipeline/postgresql:latest", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "exec": { "command": [ "/bin/sh", "-c", "exec pg_isready -U \"tekton\" -d \"dbname=tekton_results\" -h 127.0.0.1 -p 5432" ] }, "failureThreshold": 6, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "postgresql", "ports": [ { "containerPort": 5432, "name": "tcp-postgresql", "protocol": "TCP" } ], "readinessProbe": { "exec": { "command": [ "/bin/sh", "-c", "-e", "exec pg_isready -U \"tekton\" -d \"dbname=tekton_results sslcert=/opt/bitnami/postgresql/certs/tls.crt sslkey=/opt/bitnami/postgresql/certs/tls.key\" -h 127.0.0.1 -p 5432\n[ -f /opt/bitnami/postgresql/tmp/.initialized ] || [ -f /bitnami/postgresql/.initialized ]\n" ] }, "failureThreshold": 6, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "empty-dir", "subPath": "tmp-dir" }, { "mountPath": "/opt/bitnami/postgresql/conf", "name": "empty-dir", "subPath": "app-conf-dir" }, { "mountPath": "/opt/bitnami/postgresql/tmp", "name": "empty-dir", "subPath": "app-tmp-dir" }, { "mountPath": "/opt/bitnami/postgresql/secrets/", "name": "postgresql-password" }, { "mountPath": "/opt/bitnami/postgresql/certs", "name": "postgresql-certificates", "readOnly": true }, { "mountPath": "/bitnami/postgresql", "name": "data" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "/bin/sh", "-ec", "cp /tmp/certs/* /opt/bitnami/postgresql/certs/\nchmod 600 /opt/bitnami/postgresql/certs/tls.key\n" ], "image": "quay.io/openshift-pipeline/os-shell:latest", "imagePullPolicy": "IfNotPresent", "name": "copy-certs", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "empty-dir", "subPath": "tmp-dir" }, { "mountPath": "/tmp/certs", "name": "raw-certificates" }, { "mountPath": "/opt/bitnami/postgresql/certs", "name": "postgresql-certificates" } ] } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroupChangePolicy": "Always", "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "postgres-postgresql", "serviceAccountName": "postgres-postgresql", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "empty-dir" }, { "name": "postgresql-password", "secret": { "defaultMode": 420, "secretName": "tekton-results-database" } }, { "name": "raw-certificates", "secret": { "defaultMode": 420, "secretName": "postgresql-tls" } }, { "emptyDir": {}, "name": "postgresql-certificates" } ] } }, "updateStrategy": { "rollingUpdate": { "partition": 0 }, "type": "RollingUpdate" }, "volumeClaimTemplates": [ { "apiVersion": "v1", "kind": "PersistentVolumeClaim", "metadata": { "creationTimestamp": null, "name": "data" }, "spec": { "accessModes": [ "ReadWriteOnce" ], "resources": { "requests": { "storage": "8Gi" } }, "volumeMode": "Filesystem" }, "status": { "phase": "Pending" } } ] }, "status": { "availableReplicas": 1, "collisionCount": 0, "currentReplicas": 1, "currentRevision": "postgres-postgresql-5695b46c48", "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updateRevision": "postgres-postgresql-5695b46c48", "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "StatefulSet", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/sync-wave": "0", "argocd.argoproj.io/tracking-id": "pipeline-service-in-cluster-local:minio.min.io/Tenant:tekton-results/storage", "min.io/revision": "0", "prometheus.io/path": "/minio/v2/metrics/cluster", "prometheus.io/port": "9000", "prometheus.io/scrape": "true" }, "creationTimestamp": "2026-04-22T13:31:01Z", "generation": 1, "labels": { "app": "minio", "v1.min.io/console": "storage-console", "v1.min.io/pool": "pool-0", "v1.min.io/tenant": "storage" }, "name": "storage-pool-0", "namespace": "tekton-results", "ownerReferences": [ { "apiVersion": "minio.min.io/v2", "blockOwnerDeletion": true, "controller": true, "kind": "Tenant", "name": "storage", "uid": "6524c9c7-922a-48a4-9c03-403dfcff36b1" } ], "resourceVersion": "29944", "uid": "ebd137a1-5c87-42de-afd2-abf5708beab3" }, "spec": { "persistentVolumeClaimRetentionPolicy": { "whenDeleted": "Retain", "whenScaled": "Retain" }, "podManagementPolicy": "Parallel", "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "v1.min.io/console": "storage-console", "v1.min.io/pool": "pool-0", "v1.min.io/tenant": "storage" } }, "serviceName": "storage-hl", "template": { "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/sync-wave": "0", "argocd.argoproj.io/tracking-id": "pipeline-service-in-cluster-local:minio.min.io/Tenant:tekton-results/storage", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"minio.min.io/v2\",\"kind\":\"Tenant\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/sync-wave\":\"0\",\"argocd.argoproj.io/tracking-id\":\"pipeline-service-in-cluster-local:minio.min.io/Tenant:tekton-results/storage\",\"prometheus.io/path\":\"/minio/v2/metrics/cluster\",\"prometheus.io/port\":\"9000\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"app\":\"minio\"},\"name\":\"storage\",\"namespace\":\"tekton-results\"},\"spec\":{\"certConfig\":{},\"configuration\":{\"name\":\"minio-storage-configuration\"},\"env\":[],\"exposeServices\":{\"minio\":false},\"externalCaCertSecret\":[],\"externalCertSecret\":[],\"externalClientCertSecrets\":[],\"features\":{\"bucketDNS\":false,\"domains\":{}},\"image\":\"quay.io/minio/minio:RELEASE.2024-08-26T15-33-07Z\",\"imagePullSecret\":{},\"mountPath\":\"/export\",\"podManagementPolicy\":\"Parallel\",\"pools\":[{\"affinity\":{\"nodeAffinity\":{},\"podAffinity\":{},\"podAntiAffinity\":{}},\"containerSecurityContext\":{},\"name\":\"pool-0\",\"nodeSelector\":{},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"256Mi\"}},\"securityContext\":{},\"servers\":1,\"tolerations\":[],\"volumeClaimTemplate\":{\"apiVersion\":\"v1\",\"kind\":\"persistentvolumeclaims\",\"metadata\":{},\"spec\":{\"accessModes\":[\"ReadWriteOnce\"],\"resources\":{\"requests\":{\"storage\":\"1Gi\"}}},\"status\":{}},\"volumesPerServer\":2}],\"priorityClassName\":\"\",\"requestAutoCert\":true,\"serviceMetadata\":{\"consoleServiceAnnotations\":{},\"consoleServiceLabels\":{},\"minioServiceAnnotations\":{},\"minioServiceLabels\":{}},\"subPath\":\"\"}}\n", "min.io/revision": "0", "prometheus.io/path": "/minio/v2/metrics/cluster", "prometheus.io/port": "9000", "prometheus.io/scrape": "true" }, "creationTimestamp": null, "labels": { "app": "minio", "v1.min.io/console": "storage-console", "v1.min.io/pool": "pool-0", "v1.min.io/tenant": "storage" } }, "spec": { "affinity": { "nodeAffinity": {}, "podAffinity": {}, "podAntiAffinity": {} }, "containers": [ { "args": [ "server", "--certs-dir", "/tmp/certs", "--console-address", ":9443" ], "env": [ { "name": "MINIO_CONFIG_ENV_FILE", "value": "/tmp/minio/config.env" }, { "name": "MINIO_OPERATOR_VERSION", "value": "5.0.15" }, { "name": "MINIO_PROMETHEUS_JOB_ID", "value": "minio-job" }, { "name": "MINIO_SERVER_URL", "value": "https://minio.tekton-results.svc.cluster.local:443" }, { "name": "MINIO_UPDATE", "value": "on" }, { "name": "MINIO_UPDATE_MINISIGN_PUBKEY", "value": "RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav" } ], "image": "quay.io/minio/minio:RELEASE.2024-08-26T15-33-07Z", "imagePullPolicy": "IfNotPresent", "name": "minio", "ports": [ { "containerPort": 9000, "protocol": "TCP" }, { "containerPort": 9443, "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "512Mi" }, "requests": { "cpu": "50m", "memory": "256Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp/minio/", "name": "cfg-vol" }, { "mountPath": "/export0", "name": "0" }, { "mountPath": "/export1", "name": "1" }, { "mountPath": "/tmp/certs", "name": "storage-tls" } ] }, { "args": [ "sidecar", "--tenant", "storage", "--config-name", "minio-storage-configuration" ], "env": [ { "name": "CLUSTER_DOMAIN", "value": "cluster.local" } ], "image": "quay.io/minio/operator:v5.0.15", "imagePullPolicy": "IfNotPresent", "name": "sidecar", "resources": {}, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp/minio/", "name": "cfg-vol" }, { "mountPath": "/tmp/minio-config", "name": "configuration" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "validate", "--tenant", "storage" ], "env": [ { "name": "CLUSTER_DOMAIN", "value": "cluster.local" } ], "image": "quay.io/minio/operator:v5.0.15", "imagePullPolicy": "IfNotPresent", "name": "validate-arguments", "resources": {}, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp/minio/", "name": "cfg-vol" }, { "mountPath": "/tmp/minio-config", "name": "configuration" } ] } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroupChangePolicy": "OnRootMismatch" }, "serviceAccount": "storage-sa", "serviceAccountName": "storage-sa", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "cfg-vol" }, { "name": "storage-tls", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "public.crt", "path": "public.crt" }, { "key": "private.key", "path": "private.key" }, { "key": "public.crt", "path": "CAs/public.crt" } ], "name": "storage-tls" } } ] } }, { "name": "configuration", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "minio-storage-configuration" } } ] } } ] } }, "updateStrategy": { "rollingUpdate": { "partition": 0 }, "type": "RollingUpdate" }, "volumeClaimTemplates": [ { "apiVersion": "v1", "kind": "PersistentVolumeClaim", "metadata": { "creationTimestamp": null, "name": "0" }, "spec": { "accessModes": [ "ReadWriteOnce" ], "resources": { "requests": { "storage": "1Gi" } }, "volumeMode": "Filesystem" }, "status": { "phase": "Pending" } }, { "apiVersion": "v1", "kind": "PersistentVolumeClaim", "metadata": { "creationTimestamp": null, "name": "1" }, "spec": { "accessModes": [ "ReadWriteOnce" ], "resources": { "requests": { "storage": "1Gi" } }, "volumeMode": "Filesystem" }, "status": { "phase": "Pending" } } ] }, "status": { "availableReplicas": 1, "collisionCount": 0, "currentReplicas": 1, "currentRevision": "storage-pool-0-68fcb6cd47", "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updateRevision": "storage-pool-0-68fcb6cd47", "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "StatefulSet", "metadata": { "creationTimestamp": "2026-04-22T13:29:51Z", "generation": 1, "labels": { "app.kubernetes.io/component": "tempo", "app.kubernetes.io/instance": "tempo", "app.kubernetes.io/managed-by": "tempo-operator", "app.kubernetes.io/name": "tempo-monolithic" }, "name": "tempo-tempo", "namespace": "tempo-operator", "ownerReferences": [ { "apiVersion": "tempo.grafana.com/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TempoMonolithic", "name": "tempo", "uid": "d44d5165-c42b-446f-8458-38c96383e9af" } ], "resourceVersion": "28406", "uid": "0c92fa10-d0c1-465b-9657-e3f2fc637335" }, "spec": { "persistentVolumeClaimRetentionPolicy": { "whenDeleted": "Retain", "whenScaled": "Retain" }, "podManagementPolicy": "Parallel", "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "tempo", "app.kubernetes.io/instance": "tempo", "app.kubernetes.io/managed-by": "tempo-operator", "app.kubernetes.io/name": "tempo-monolithic" } }, "serviceName": "", "template": { "metadata": { "annotations": { "tempo.grafana.com/cert-hash-tempo-tempo-mtls": "e40e51729c5a3681b1cde3bf329486abd887e792b73216e687fedce7c2ecad70", "tempo.grafana.com/tempoConfig.hash": "bf34e59aef8e4d07f87b213a41a82802daca6682f5b2c2975dfb0467126569c8" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "tempo", "app.kubernetes.io/instance": "tempo", "app.kubernetes.io/managed-by": "tempo-operator", "app.kubernetes.io/name": "tempo-monolithic" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "tempo", "app.kubernetes.io/instance": "tempo", "app.kubernetes.io/managed-by": "tempo-operator", "app.kubernetes.io/name": "tempo-monolithic" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 }, { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "tempo", "app.kubernetes.io/instance": "tempo", "app.kubernetes.io/managed-by": "tempo-operator", "app.kubernetes.io/name": "tempo-monolithic" } }, "topologyKey": "failure-domain.beta.kubernetes.io/zone" }, "weight": 75 } ] } }, "containers": [ { "args": [ "-config.file=/conf/tempo.yaml", "-mem-ballast-size-mbs=1024", "-log.level=info" ], "image": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:91b5138e11f428e1f8c77aa9651297084701cdbe799b8553235d70aa5b0afb83", "imagePullPolicy": "IfNotPresent", "name": "tempo", "ports": [ { "containerPort": 3200, "name": "http", "protocol": "TCP" }, { "containerPort": 3101, "name": "tempo-internal", "protocol": "TCP" }, { "containerPort": 4317, "name": "otlp-grpc", "protocol": "TCP" }, { "containerPort": 4318, "name": "otlp-http", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": "tempo-internal", "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/conf", "name": "tempo-conf", "readOnly": true }, { "mountPath": "/var/tempo", "name": "tempo-storage" } ] }, { "args": [ "--query.base-path=/", "--span-storage.type=grpc", "--grpc-storage.server=localhost:7777", "--query.bearer-token-propagation=true" ], "image": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:8adf1d5471eb789b74a83aef91273895bb3170871c665a4511d9f2867874ada1", "imagePullPolicy": "IfNotPresent", "name": "jaeger-query", "ports": [ { "containerPort": 16685, "name": "jaeger-grpc", "protocol": "TCP" }, { "containerPort": 16686, "name": "jaeger-ui", "protocol": "TCP" }, { "containerPort": 16687, "name": "jaeger-metrics", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tempo-query-tmp" } ] }, { "args": [ "-config=/conf/tempo-query.yaml" ], "image": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:dd811d521e8334c831175d7a5e1202ed0cedaaa3ed09612280ebbe5f00178ba1", "imagePullPolicy": "IfNotPresent", "name": "tempo-query", "ports": [ { "containerPort": 7777, "name": "proxy-grpc", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/conf", "name": "tempo-conf", "readOnly": true } ] }, { "args": [ "--cookie-secret-file=/var/run/secrets/kubernetes.io/serviceaccount/token", "--https-address=:8443", "--openshift-service-account=tempo-tempo", "--provider=openshift", "--tls-cert=/etc/tls/private/tls.crt", "--tls-key=/etc/tls/private/tls.key", "--upstream=http://localhost:16686", "--upstream-timeout=30s", "--openshift-sar={\"namespace\": \"tempo-operator\", \"resource\": \"pods\", \"verb\": \"get\"}" ], "image": "registry.redhat.io/openshift4/ose-oauth-proxy@sha256:6bcfa981a7a75c242a16afa6dab36bf6e3b8a1442fa863875919ad551f48eceb", "imagePullPolicy": "IfNotPresent", "name": "oauth-proxy", "ports": [ { "containerPort": 8443, "name": "oauth-proxy", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/oauth/healthz", "port": "oauth-proxy", "scheme": "HTTPS" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "tempo-ui-oauth-proxy-tls" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "tempo-tempo", "serviceAccountName": "tempo-tempo", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "tempo-tempo-config" }, "name": "tempo-conf" }, { "emptyDir": {}, "name": "tempo-query-tmp" }, { "name": "tempo-ui-oauth-proxy-tls", "secret": { "defaultMode": 420, "secretName": "tempo-ui-oauth-proxy-tls" } } ] } }, "updateStrategy": { "rollingUpdate": { "partition": 0 }, "type": "RollingUpdate" }, "volumeClaimTemplates": [ { "apiVersion": "v1", "kind": "PersistentVolumeClaim", "metadata": { "creationTimestamp": null, "name": "tempo-storage" }, "spec": { "accessModes": [ "ReadWriteOnce" ], "resources": { "requests": { "storage": "10Gi" } }, "volumeMode": "Filesystem" }, "status": { "phase": "Pending" } } ] }, "status": { "availableReplicas": 1, "collisionCount": 0, "currentReplicas": 1, "currentRevision": "tempo-tempo-7fd645f676", "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updateRevision": "tempo-tempo-7fd645f676", "updatedReplicas": 1 } } ], "kind": "List", "metadata": { "resourceVersion": "" } }