{ "apiVersion": "v1", "items": [ { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "has-in-cluster-local:apps/Deployment:application-service/application-service-controller-manager", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"has-in-cluster-local:apps/Deployment:application-service/application-service-controller-manager\"},\"labels\":{\"control-plane\":\"controller-manager\"},\"name\":\"application-service-controller-manager\",\"namespace\":\"application-service\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"control-plane\":\"controller-manager\"}},\"template\":{\"metadata\":{\"labels\":{\"control-plane\":\"controller-manager\"}},\"spec\":{\"containers\":[{\"args\":[\"--health-probe-bind-address=:8081\",\"--metrics-bind-address=127.0.0.1:8080\",\"--leader-elect=false\"],\"command\":[\"entrypoint.sh\"],\"env\":[{\"name\":\"ENABLE_PPROF\",\"value\":\"true\"},{\"name\":\"IMAGE_REPOSITORY\",\"value\":\"\"},{\"name\":\"GITHUB_ORG\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"GITHUB_ORG\",\"name\":\"application-service-github-config\",\"optional\":true}}},{\"name\":\"GITHUB_AUTH_TOKEN\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"token\",\"name\":\"has-github-token\",\"optional\":true}}},{\"name\":\"GITHUB_TOKEN_LIST\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"tokens\",\"name\":\"has-github-token\",\"optional\":true}}},{\"name\":\"CDQ_GITHUB_TOKEN\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"cdq-token\",\"name\":\"has-github-token\",\"optional\":true}}},{\"name\":\"DEVFILE_REGISTRY_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"DEVFILE_REGISTRY_URL\",\"name\":\"application-service-devfile-registry-config\",\"optional\":true}}},{\"name\":\"ENVIRONMENT\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"ENVIRONMENT\",\"name\":\"application-service-feature-flag-config\",\"optional\":true}}}],\"image\":\"quay.io/redhat-appstudio/application-service:1336ddc41f94df2da57a8ad8da2613e789be4041\",\"imagePullPolicy\":\"Always\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8081},\"initialDelaySeconds\":15,\"periodSeconds\":20},\"name\":\"manager\",\"ports\":[{\"containerPort\":9443,\"name\":\"webhook-server\",\"protocol\":\"TCP\"},{\"containerPort\":8081,\"name\":\"health\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readyz\",\"port\":8081},\"initialDelaySeconds\":5,\"periodSeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"2Gi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"1Gi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true},\"volumeMounts\":[{\"mountPath\":\"/tmp/k8s-webhook-server/serving-certs\",\"name\":\"cert\",\"readOnly\":true},{\"mountPath\":\"/tmp\",\"name\":\"tmp-storage\",\"readOnly\":false}]},{\"args\":[\"--secure-listen-address=0.0.0.0:8443\",\"--upstream=http://127.0.0.1:8080/\",\"--logtostderr=true\",\"--v=10\",\"--http2-disable=true\"],\"image\":\"registry.redhat.io/openshift4/ose-kube-rbac-proxy-rhel9:v4.18\",\"name\":\"kube-rbac-proxy\",\"ports\":[{\"containerPort\":8443,\"name\":\"https\",\"protocol\":\"TCP\"}],\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"400Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true}}],\"securityContext\":{\"runAsNonRoot\":true},\"serviceAccountName\":\"application-service-controller-manager\",\"terminationGracePeriodSeconds\":10,\"volumes\":[{\"name\":\"cert\",\"secret\":{\"defaultMode\":420,\"secretName\":\"webhook-server-cert\"}},{\"emptyDir\":{},\"name\":\"tmp-storage\"}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:47:17Z", "generation": 1, "labels": { "control-plane": "controller-manager" }, "name": "application-service-controller-manager", "namespace": "application-service", "resourceVersion": "23167", "uid": "bb471273-9a85-41d9-a588-0ac98d7e4fcc" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "control-plane": "controller-manager" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "control-plane": "controller-manager" } }, "spec": { "containers": [ { "args": [ "--health-probe-bind-address=:8081", "--metrics-bind-address=127.0.0.1:8080", "--leader-elect=false" ], "command": [ "entrypoint.sh" ], "env": [ { "name": "ENABLE_PPROF", "value": "true" }, { "name": "IMAGE_REPOSITORY" }, { "name": "GITHUB_ORG", "valueFrom": { "configMapKeyRef": { "key": "GITHUB_ORG", "name": "application-service-github-config", "optional": true } } }, { "name": "GITHUB_AUTH_TOKEN", "valueFrom": { "secretKeyRef": { "key": "token", "name": "has-github-token", "optional": true } } }, { "name": "GITHUB_TOKEN_LIST", "valueFrom": { "secretKeyRef": { "key": "tokens", "name": "has-github-token", "optional": true } } }, { "name": "CDQ_GITHUB_TOKEN", "valueFrom": { "secretKeyRef": { "key": "cdq-token", "name": "has-github-token", "optional": true } } }, { "name": "DEVFILE_REGISTRY_URL", "valueFrom": { "configMapKeyRef": { "key": "DEVFILE_REGISTRY_URL", "name": "application-service-devfile-registry-config", "optional": true } } }, { "name": "ENVIRONMENT", "valueFrom": { "configMapKeyRef": { "key": "ENVIRONMENT", "name": "application-service-feature-flag-config", "optional": true } } } ], "image": "quay.io/redhat-appstudio/application-service:1336ddc41f94df2da57a8ad8da2613e789be4041", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" }, { "containerPort": 8081, "name": "health", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "2Gi" }, "requests": { "cpu": "100m", "memory": "1Gi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "cert", "readOnly": true }, { "mountPath": "/tmp", "name": "tmp-storage" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:8443", "--upstream=http://127.0.0.1:8080/", "--logtostderr=true", "--v=10", "--http2-disable=true" ], "image": "registry.redhat.io/openshift4/ose-kube-rbac-proxy-rhel9:v4.18", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "400Mi" }, "requests": { "cpu": "100m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "application-service-controller-manager", "serviceAccountName": "application-service-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "name": "cert", "secret": { "defaultMode": 420, "secretName": "webhook-server-cert" } }, { "emptyDir": {}, "name": "tmp-storage" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:47:31Z", "lastUpdateTime": "2026-05-13T16:47:31Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:17Z", "lastUpdateTime": "2026-05-13T16:47:31Z", "message": "ReplicaSet \"application-service-controller-manager-6988b7b4bb\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "monitoring-cardinality-in-cluster-local:apps/Deployment:appstudio-cardinality-exporter/prometheus-cardinality-exporter", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"monitoring-cardinality-in-cluster-local:apps/Deployment:appstudio-cardinality-exporter/prometheus-cardinality-exporter\"},\"labels\":{\"app\":\"prometheus-cardinality-exporter\"},\"name\":\"prometheus-cardinality-exporter\",\"namespace\":\"appstudio-cardinality-exporter\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"prometheus-cardinality-exporter\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"prometheus-cardinality-exporter\"}},\"spec\":{\"containers\":[{\"args\":[\"--service_discovery\",\"--freq=1\",\"--selector=app.kubernetes.io/component=prometheus\",\"--regex=prometheus[a-zA-Z0-9_-]*\",\"--auth=/etc/cardinality-exporter/auth.yaml\"],\"command\":[\"/home/app/prometheus-cardinality-exporter\"],\"image\":\"quay.io/jmicanek/cardinality-exporter:v0.1\",\"imagePullPolicy\":\"Always\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/health\",\"port\":\"http\"},\"initialDelaySeconds\":5,\"periodSeconds\":3},\"name\":\"prometheus-cardinality-exporter\",\"ports\":[{\"containerPort\":9090,\"name\":\"http\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/health\",\"port\":\"http\"},\"initialDelaySeconds\":5,\"periodSeconds\":3},\"resources\":{\"limits\":{\"memory\":\"400Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"200Mi\"}},\"securityContext\":{\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true},\"volumeMounts\":[{\"mountPath\":\"/etc/cardinality-exporter\",\"name\":\"auth-config\",\"readOnly\":true}]}],\"serviceAccountName\":\"prometheus-cardinality-exporter\",\"volumes\":[{\"configMap\":{\"name\":\"cardinality-exporter-auth\"},\"name\":\"auth-config\"}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:47:54Z", "generation": 1, "labels": { "app": "prometheus-cardinality-exporter" }, "name": "prometheus-cardinality-exporter", "namespace": "appstudio-cardinality-exporter", "resourceVersion": "26541", "uid": "865dcbe8-4ded-4fae-95d3-69cd6e9778bc" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "prometheus-cardinality-exporter" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "prometheus-cardinality-exporter" } }, "spec": { "containers": [ { "args": [ "--service_discovery", "--freq=1", "--selector=app.kubernetes.io/component=prometheus", "--regex=prometheus[a-zA-Z0-9_-]*", "--auth=/etc/cardinality-exporter/auth.yaml" ], "command": [ "/home/app/prometheus-cardinality-exporter" ], "image": "quay.io/jmicanek/cardinality-exporter:v0.1", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "http", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 3, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "prometheus-cardinality-exporter", "ports": [ { "containerPort": 9090, "name": "http", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "http", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 3, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "memory": "400Mi" }, "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/cardinality-exporter", "name": "auth-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "prometheus-cardinality-exporter", "serviceAccountName": "prometheus-cardinality-exporter", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "cardinality-exporter-auth" }, "name": "auth-config" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:48:04Z", "lastUpdateTime": "2026-05-13T16:48:04Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:55Z", "lastUpdateTime": "2026-05-13T16:48:04Z", "message": "ReplicaSet \"prometheus-cardinality-exporter-79d5577fc6\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/tracking-id": "monitoring-workload-custom-kube-state-metrics-in-cluster-local:apps/Deployment:appstudio-monitoring/custom-kube-state-metrics", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/tracking-id\":\"monitoring-workload-custom-kube-state-metrics-in-cluster-local:apps/Deployment:appstudio-monitoring/custom-kube-state-metrics\"},\"labels\":{\"app.kubernetes.io/component\":\"exporter\",\"app.kubernetes.io/name\":\"custom-kube-state-metrics\",\"app.kubernetes.io/part-of\":\"konflux-monitoring\"},\"name\":\"custom-kube-state-metrics\",\"namespace\":\"appstudio-monitoring\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/name\":\"custom-kube-state-metrics\"}},\"template\":{\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\"},\"labels\":{\"app.kubernetes.io/component\":\"exporter\",\"app.kubernetes.io/name\":\"custom-kube-state-metrics\",\"app.kubernetes.io/part-of\":\"konflux-monitoring\"}},\"spec\":{\"automountServiceAccountToken\":true,\"containers\":[{\"args\":[\"--custom-resource-state-only=true\",\"--custom-resource-state-config-file=/etc/config/custom-resource-state.yaml\",\"--telemetry-host=0.0.0.0\",\"--telemetry-port=8081\"],\"image\":\"registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.11.0\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8080},\"initialDelaySeconds\":5,\"timeoutSeconds\":5},\"name\":\"kube-state-metrics\",\"ports\":[{\"containerPort\":8080,\"name\":\"metrics\",\"protocol\":\"TCP\"},{\"containerPort\":8081,\"name\":\"telemetry\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/\",\"port\":8080},\"initialDelaySeconds\":5,\"timeoutSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"1Gi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"1Gi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true},\"volumeMounts\":[{\"mountPath\":\"/etc/config\",\"name\":\"config\",\"readOnly\":true}]}],\"securityContext\":{\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"custom-kube-state-metrics\",\"volumes\":[{\"configMap\":{\"name\":\"custom-kube-state-metrics-config\"},\"name\":\"config\"}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:47:10Z", "generation": 1, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/name": "custom-kube-state-metrics", "app.kubernetes.io/part-of": "konflux-monitoring" }, "name": "custom-kube-state-metrics", "namespace": "appstudio-monitoring", "resourceVersion": "22446", "uid": "f8023470-80c1-4a39-8319-ae5e1c7e6ac9" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/name": "custom-kube-state-metrics" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/name": "custom-kube-state-metrics", "app.kubernetes.io/part-of": "konflux-monitoring" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--custom-resource-state-only=true", "--custom-resource-state-config-file=/etc/config/custom-resource-state.yaml", "--telemetry-host=0.0.0.0", "--telemetry-port=8081" ], "image": "registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.11.0", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "kube-state-metrics", "ports": [ { "containerPort": 8080, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8081, "name": "telemetry", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "cpu": "200m", "memory": "1Gi" }, "requests": { "cpu": "50m", "memory": "1Gi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config", "name": "config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "custom-kube-state-metrics", "serviceAccountName": "custom-kube-state-metrics", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "custom-kube-state-metrics-config" }, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:47:22Z", "lastUpdateTime": "2026-05-13T16:47:22Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:10Z", "lastUpdateTime": "2026-05-13T16:47:22Z", "message": "ReplicaSet \"custom-kube-state-metrics-85947f8c5b\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/tracking-id": "build-service-in-cluster-local:apps/Deployment:build-service/build-service-controller-manager", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/tracking-id\":\"build-service-in-cluster-local:apps/Deployment:build-service/build-service-controller-manager\"},\"labels\":{\"app.kubernetes.io/managed-by\":\"kustomize\",\"app.kubernetes.io/name\":\"build-service\",\"control-plane\":\"controller-manager\"},\"name\":\"build-service-controller-manager\",\"namespace\":\"build-service\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"control-plane\":\"controller-manager\"}},\"template\":{\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"kubectl.kubernetes.io/default-container\":\"manager\"},\"labels\":{\"control-plane\":\"controller-manager\"}},\"spec\":{\"containers\":[{\"args\":[\"--metrics-bind-address=:8443\",\"--leader-elect=false\",\"--health-probe-bind-address=:8081\",\"-webhook-config-path=/mnt/webhook-config.json\",\"--zap-encoder=console\"],\"command\":[\"/manager\"],\"env\":[{\"name\":\"PAC_WEBHOOK_INSECURE_SSL\",\"value\":\"1\"},{\"name\":\"IMAGE_TAG_ON_PR_EXPIRATION\",\"value\":\"6h\"}],\"image\":\"quay.io/konflux-ci/build-service:b1d1753245617e47679b3366b2baa0e4ea6b8007\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8081},\"initialDelaySeconds\":15,\"periodSeconds\":20},\"name\":\"manager\",\"readinessProbe\":{\"httpGet\":{\"path\":\"/readyz\",\"port\":8081},\"initialDelaySeconds\":5,\"periodSeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"1024Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"64Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"privileged\":false,\"readOnlyRootFilesystem\":true},\"volumeMounts\":[{\"mountPath\":\"/etc/pki/ca-trust/extracted/pem\",\"name\":\"trusted-ca\",\"readOnly\":true},{\"mountPath\":\"/mnt\",\"name\":\"webhook-config\",\"readOnly\":true}]}],\"securityContext\":{\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"build-service-controller-manager\",\"terminationGracePeriodSeconds\":10,\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"ca-bundle.crt\",\"path\":\"tls-ca-bundle.pem\"}],\"name\":\"trusted-ca-6ct58987ht\"},\"name\":\"trusted-ca\"},{\"configMap\":{\"items\":[{\"key\":\"webhook-config.json\",\"path\":\"webhook-config.json\"}],\"name\":\"webhook-config-4ttbfg57cf\"},\"name\":\"webhook-config\"}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:47:26Z", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "kustomize", "app.kubernetes.io/name": "build-service", "control-plane": "controller-manager" }, "name": "build-service-controller-manager", "namespace": "build-service", "resourceVersion": "38902", "uid": "507254c6-9453-4dbe-9f8c-496b8f02e523" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "control-plane": "controller-manager" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8443", "--leader-elect=false", "--health-probe-bind-address=:8081", "-webhook-config-path=/mnt/webhook-config.json", "--zap-encoder=console" ], "command": [ "/manager" ], "env": [ { "name": "PAC_WEBHOOK_INSECURE_SSL", "value": "1" }, { "name": "IMAGE_TAG_ON_PR_EXPIRATION", "value": "6h" } ], "image": "quay.io/konflux-ci/build-service:b1d1753245617e47679b3366b2baa0e4ea6b8007", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "1Gi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca", "readOnly": true }, { "mountPath": "/mnt", "name": "webhook-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "build-service-controller-manager", "serviceAccountName": "build-service-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht" }, "name": "trusted-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "webhook-config.json", "path": "webhook-config.json" } ], "name": "webhook-config-4ttbfg57cf" }, "name": "webhook-config" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:52:27Z", "lastUpdateTime": "2026-05-13T16:52:27Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:26Z", "lastUpdateTime": "2026-05-13T16:52:27Z", "message": "ReplicaSet \"build-service-controller-manager-98966c96b\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:47:53Z", "generation": 1, "labels": { "app.kubernetes.io/component": "manager", "app.kubernetes.io/created-by": "cert-manager-operator", "app.kubernetes.io/instance": "controller-manager", "app.kubernetes.io/managed-by": "kustomize", "app.kubernetes.io/name": "deployment", "app.kubernetes.io/part-of": "cert-manager-operator", "olm.deployment-spec-hash": "bbjbJFNGFDrY9hLcTLtsRqMxIUyeAjrXumiGwa", "olm.managed": "true", "olm.owner": "cert-manager-operator.v1.19.0", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "cert-manager-operator", "operators.coreos.com/openshift-cert-manager-operator.cert-manager-operator": "" }, "name": "cert-manager-operator-controller-manager", "namespace": "cert-manager-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "cert-manager-operator.v1.19.0", "uid": "e6b1a787-35f1-420b-a054-bfb286932ef3" } ], "resourceVersion": "25586", "uid": "482b463d-026b-4879-96f7-42dfbf9879a3" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 1, "selector": { "matchLabels": { "name": "cert-manager-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"acme.cert-manager.io/v1\",\n \"kind\": \"Challenge\",\n \"metadata\": {\n \"name\": \"tls-cert-sample\",\n \"namespace\": \"default\"\n },\n \"spec\": {\n \"authorizationURL\": \"https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/XXXXX\",\n \"dnsName\": \"sample.dns.name\",\n \"issuerRef\": {\n \"kind\": \"Issuer\",\n \"name\": \"letsencrypt-staging\"\n },\n \"key\": \"XXX\",\n \"solver\": {\n \"dns01\": {\n \"route53\": {\n \"accessKeyID\": \"XXX\",\n \"hostedZoneID\": \"XXX\",\n \"region\": \"us-east-1\",\n \"secretAccessKeySecretRef\": {\n \"key\": \"awsSecretAccessKey\",\n \"name\": \"aws-secret\"\n }\n }\n },\n \"selector\": {\n \"dnsNames\": [\n \"sample.dns.name\"\n ]\n }\n },\n \"token\": \"XXX\",\n \"type\": \"DNS-01\",\n \"url\": \"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/XXXXXX/XXXXX\",\n \"wildcard\": false\n }\n },\n {\n \"apiVersion\": \"acme.cert-manager.io/v1\",\n \"kind\": \"Order\",\n \"metadata\": {\n \"annotations\": {\n \"cert-manager.io/certificate-name\": \"tls-cert\",\n \"cert-manager.io/certificate-revision\": \"1\",\n \"cert-manager.io/private-key-secret-name\": \"tls-cert-sample\"\n },\n \"name\": \"tls-cert-sample\",\n \"namespace\": \"default\"\n },\n \"spec\": {\n \"commonName\": \"sample.dns.name\",\n \"dnsNames\": [\n \"sample.dns.name\"\n ],\n \"issuerRef\": {\n \"kind\": \"Issuer\",\n \"name\": \"letsencrypt-staging\"\n },\n \"request\": \"XXX\"\n }\n },\n {\n \"apiVersion\": \"cert-manager.io/v1\",\n \"kind\": \"Certificate\",\n \"metadata\": {\n \"name\": \"selfsigned-ca\",\n \"namespace\": \"default\"\n },\n \"spec\": {\n \"commonName\": \"selfsigned-ca.dns.name\",\n \"isCA\": true,\n \"issuerRef\": {\n \"group\": \"cert-manager.io\",\n \"kind\": \"ClusterIssuer\",\n \"name\": \"ca-cluster-issuer\"\n },\n \"privateKey\": {\n \"algorithm\": \"ECDSA\",\n \"size\": 256\n },\n \"secretName\": \"ca-root-secret\"\n }\n },\n {\n \"apiVersion\": \"cert-manager.io/v1\",\n \"kind\": \"Certificate\",\n \"metadata\": {\n \"name\": \"tls-cert\",\n \"namespace\": \"default\"\n },\n \"spec\": {\n \"commonName\": \"sample.dns.name\",\n \"dnsNames\": [\n \"sample.dns.name\"\n ],\n \"isCA\": false,\n \"issuerRef\": {\n \"kind\": \"Issuer\",\n \"name\": \"letsencrypt-staging\"\n },\n \"secretName\": \"tls-cert\"\n }\n },\n {\n \"apiVersion\": \"cert-manager.io/v1\",\n \"kind\": \"CertificateRequest\",\n \"metadata\": {\n \"annotations\": {\n \"cert-manager.io/certificate-name\": \"tls-cert\",\n \"cert-manager.io/certificate-revision\": \"1\",\n \"cert-manager.io/private-key-secret-name\": \"tls-cert-sample\"\n },\n \"name\": \"tls-cert-sample\",\n \"namespace\": \"default\"\n },\n \"spec\": {\n \"groups\": [\n \"system:serviceaccounts\",\n \"system:serviceaccounts:cert-manager\",\n \"system:authenticated\"\n ],\n \"issuerRef\": {\n \"kind\": \"Issuer\",\n \"name\": \"letsencrypt-staging\"\n },\n \"request\": \"XXX\",\n \"username\": \"system:serviceaccount:cert-manager:cert-manager\"\n }\n },\n {\n \"apiVersion\": \"cert-manager.io/v1\",\n \"kind\": \"ClusterIssuer\",\n \"metadata\": {\n \"name\": \"ca-cluster-issuer\"\n },\n \"spec\": {\n \"ca\": {\n \"secretName\": \"ca-root-secret\"\n }\n }\n },\n {\n \"apiVersion\": \"cert-manager.io/v1\",\n \"kind\": \"Issuer\",\n \"metadata\": {\n \"name\": \"ca-issuer\",\n \"namespace\": \"default\"\n },\n \"spec\": {\n \"ca\": {\n \"secretName\": \"ca-root-secret\"\n }\n }\n },\n {\n \"apiVersion\": \"cert-manager.io/v1\",\n \"kind\": \"Issuer\",\n \"metadata\": {\n \"name\": \"letsencrypt-staging\",\n \"namespace\": \"default\"\n },\n \"spec\": {\n \"acme\": {\n \"email\": \"aos-ci-cd@redhat.com\",\n \"privateKeySecretRef\": {\n \"name\": \"letsencrypt-staging\"\n },\n \"server\": \"https://acme-staging-v02.api.letsencrypt.org/directory\",\n \"solvers\": [\n {\n \"dns01\": {\n \"route53\": {\n \"accessKeyID\": \"ACCESS_KEY_ID\",\n \"hostedZoneID\": \"HOSTED_ZONE_ID\",\n \"region\": \"AWS_REGION\",\n \"secretAccessKeySecretRef\": {\n \"key\": \"access-key\",\n \"name\": \"sample-aws-secret\"\n }\n }\n },\n \"selector\": {\n \"dnsNames\": [\n \"sample.dns.name\"\n ]\n }\n }\n ]\n }\n }\n },\n {\n \"apiVersion\": \"operator.openshift.io/v1alpha1\",\n \"kind\": \"CertManager\",\n \"metadata\": {\n \"name\": \"cluster\"\n },\n \"spec\": {\n \"logLevel\": \"Normal\",\n \"managementState\": \"Managed\"\n }\n },\n {\n \"apiVersion\": \"operator.openshift.io/v1alpha1\",\n \"kind\": \"IstioCSR\",\n \"metadata\": {\n \"annotations\": {\n \"kubernetes.io/description\": \"Resource behavior is managed through IstioCSR featuregate, which is enabled by default. Please refer to the cert-manager documentation for more information on the istio-csr feature.\"\n },\n \"name\": \"default\",\n \"namespace\": \"istio-csr\"\n },\n \"spec\": {\n \"istioCSRConfig\": {\n \"certManager\": {\n \"issuerRef\": {\n \"group\": \"cert-manager.io\",\n \"kind\": \"Issuer\",\n \"name\": \"istio-csr-issuer\"\n }\n },\n \"istio\": {\n \"namespace\": \"istio-system\"\n },\n \"istiodTLSConfig\": {\n \"trustDomain\": \"cluster.local\"\n }\n }\n }\n },\n {\n \"apiVersion\": \"operator.openshift.io/v1alpha1\",\n \"kind\": \"TrustManager\",\n \"metadata\": {\n \"name\": \"cluster\"\n },\n \"spec\": {\n \"trustManagerConfig\": {\n \"defaultCAPackage\": {\n \"policy\": \"Enabled\"\n },\n \"logFormat\": \"text\",\n \"logLevel\": 1,\n \"trustNamespace\": \"cert-manager\"\n }\n }\n },\n {\n \"apiVersion\": \"trust.cert-manager.io/v1alpha1\",\n \"kind\": \"Bundle\",\n \"metadata\": {\n \"name\": \"example-bundle\"\n },\n \"spec\": {\n \"sources\": [\n {\n \"useDefaultCAs\": true\n }\n ],\n \"target\": {\n \"configMap\": {\n \"key\": \"ca-certificates.crt\"\n }\n }\n }\n }\n]", "capabilities": "Seamless Upgrades", "categories": "Security", "console.openshift.io/disable-operand-delete": "true", "containerImage": "registry.redhat.io/cert-manager/cert-manager-operator-rhel9@sha256:484342520dc3babe0ff4a9360edc98816556f2bd1b9981ec3d5dbab09a7536a9", "createdAt": "2026-04-20T13:57:26", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "true", "features.operators.openshift.io/proxy-aware": "true", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "true", "features.operators.openshift.io/token-auth-azure": "true", "features.operators.openshift.io/token-auth-gcp": "true", "kubectl.kubernetes.io/default-container": "cert-manager-operator", "olm.operatorGroup": "openshift-cert-manager-operator", "olm.operatorNamespace": "cert-manager-operator", "olm.skipRange": "\u003e=1.18.0 \u003c1.19.0", "olm.targetNamespaces": "", "operator.openshift.io/uninstall-message": "The cert-manager Operator for Red Hat OpenShift will be removed from cert-manager-operator namespace. If your Operator configured any off-cluster resources, these will continue to run and require manual cleanup. All operands created by the operator will need to be manually cleaned up. Please refer to https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/cert-manager-operator-uninstall.html for additional steps.", "operatorframework.io/cluster-monitoring": "true", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"acme.cert-manager.io\",\"kind\":\"Challenge\",\"version\":\"v1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"acme.cert-manager.io\",\"kind\":\"Order\",\"version\":\"v1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"cert-manager.io\",\"kind\":\"Certificate\",\"version\":\"v1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"cert-manager.io\",\"kind\":\"CertificateRequest\",\"version\":\"v1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"cert-manager.io\",\"kind\":\"ClusterIssuer\",\"version\":\"v1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"cert-manager.io\",\"kind\":\"Issuer\",\"version\":\"v1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.openshift.io\",\"kind\":\"CertManager\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.openshift.io\",\"kind\":\"IstioCSR\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.openshift.io\",\"kind\":\"TrustManager\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"trust.cert-manager.io\",\"kind\":\"Bundle\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"openshift-cert-manager-operator\",\"version\":\"1.19.0\"}}]}", "operatorframework.io/suggested-namespace": "cert-manager-operator", "operators.openshift.io/valid-subscription": "[\"OpenShift Kubernetes Engine\", \"OpenShift Container Platform\", \"OpenShift Platform Plus\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.25.1", "operators.operatorframework.io/project_layout": "go.kubebuilder.io/v3", "repository": "https://github.com/openshift/cert-manager-operator", "support": "Red Hat, Inc." }, "creationTimestamp": null, "labels": { "name": "cert-manager-operator" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/arch", "operator": "In", "values": [ "amd64", "arm64", "ppc64le", "s390x" ] }, { "key": "kubernetes.io/os", "operator": "In", "values": [ "linux" ] } ] } ] } } }, "containers": [ { "args": [ "start", "--v=$(OPERATOR_LOG_LEVEL)", "--trusted-ca-configmap=$(TRUSTED_CA_CONFIGMAP_NAME)", "--cloud-credentials-secret=$(CLOUD_CREDENTIALS_SECRET_NAME)", "--unsupported-addon-features=$(UNSUPPORTED_ADDON_FEATURES)" ], "command": [ "/usr/bin/cert-manager-operator" ], "env": [ { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.annotations['olm.targetNamespaces']" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "cert-manager-operator" }, { "name": "RELATED_IMAGE_CERT_MANAGER_WEBHOOK", "value": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:f0467f589027c52288f2707bab33d0ccd1c15410dcbc9010d0f948feb4e50dd0" }, { "name": "RELATED_IMAGE_CERT_MANAGER_CA_INJECTOR", "value": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:f0467f589027c52288f2707bab33d0ccd1c15410dcbc9010d0f948feb4e50dd0" }, { "name": "RELATED_IMAGE_CERT_MANAGER_CONTROLLER", "value": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:f0467f589027c52288f2707bab33d0ccd1c15410dcbc9010d0f948feb4e50dd0" }, { "name": "RELATED_IMAGE_CERT_MANAGER_ACMESOLVER", "value": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:2118a138033fa32afb314d697dc29d2690277a978c8a84b1eba4f152a6d59c1a" }, { "name": "RELATED_IMAGE_CERT_MANAGER_ISTIOCSR", "value": "registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:65711de646434e6462387113e80cf3fdc31736369a2a2046ea56eb59643e92fb" }, { "name": "RELATED_IMAGE_CERT_MANAGER_TRUST_MANAGER", "value": "registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:d0834b140e53cb2b96d30f227b0c7dcab3463eeab80049df608582c45c792a82" }, { "name": "OPERAND_IMAGE_VERSION", "value": "1.19.4" }, { "name": "ISTIOCSR_OPERAND_IMAGE_VERSION", "value": "0.16.0" }, { "name": "TRUSTMANAGER_OPERAND_IMAGE_VERSION", "value": "0.20.3" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "1.19.0" }, { "name": "OPERATOR_LOG_LEVEL", "value": "2" }, { "name": "TRUSTED_CA_CONFIGMAP_NAME" }, { "name": "CLOUD_CREDENTIALS_SECRET_NAME" }, { "name": "UNSUPPORTED_ADDON_FEATURES" }, { "name": "OPERATOR_CONDITION_NAME", "value": "cert-manager-operator.v1.19.0" } ], "image": "registry.redhat.io/cert-manager/cert-manager-operator-rhel9@sha256:484342520dc3babe0ff4a9360edc98816556f2bd1b9981ec3d5dbab09a7536a9", "imagePullPolicy": "IfNotPresent", "name": "cert-manager-operator", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "32Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cert-manager-operator-controller-manager", "serviceAccountName": "cert-manager-operator-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:47:57Z", "lastUpdateTime": "2026-05-13T16:47:57Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:53Z", "lastUpdateTime": "2026-05-13T16:47:57Z", "message": "ReplicaSet \"cert-manager-operator-controller-manager-665bb775dc\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "e0cfe42b11e4c00c3958876d2fcfda840899bb9ef0c78b4bf5e094dd508f9208" }, "creationTimestamp": "2026-05-13T16:47:57Z", "generation": 1, "labels": { "app": "cert-manager", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "cert-manager", "app.kubernetes.io/version": "v1.19.4" }, "name": "cert-manager", "namespace": "cert-manager", "resourceVersion": "27153", "uid": "bcb8c1a9-b934-4706-92be-457864c2a2bb" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "cert-manager" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "prometheus.io/path": "/metrics", "prometheus.io/port": "9402", "prometheus.io/scrape": "true" }, "creationTimestamp": null, "labels": { "app": "cert-manager", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "cert-manager", "app.kubernetes.io/version": "v1.19.4" } }, "spec": { "containers": [ { "args": [ "--acme-http01-solver-image=registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:2118a138033fa32afb314d697dc29d2690277a978c8a84b1eba4f152a6d59c1a", "--cluster-resource-namespace=$(POD_NAMESPACE)", "--feature-gates=ACMEHTTP01IngressPathTypeExact=false", "--leader-election-namespace=kube-system", "--max-concurrent-challenges=60", "--v=2" ], "command": [ "/app/cmd/controller/controller" ], "env": [ { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:f0467f589027c52288f2707bab33d0ccd1c15410dcbc9010d0f948feb4e50dd0", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 8, "httpGet": { "path": "/livez", "port": "http-healthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 15 }, "name": "cert-manager-controller", "ports": [ { "containerPort": 9402, "name": "http-metrics", "protocol": "TCP" }, { "containerPort": 9403, "name": "http-healthz", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cert-manager", "serviceAccountName": "cert-manager", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:48:19Z", "lastUpdateTime": "2026-05-13T16:48:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:57Z", "lastUpdateTime": "2026-05-13T16:48:19Z", "message": "ReplicaSet \"cert-manager-5d8d9b9547\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "b0785af9e2b017686006a1d8813cd8022446e253068ff763dbe024206f713b6b" }, "creationTimestamp": "2026-05-13T16:47:58Z", "generation": 1, "labels": { "app": "cainjector", "app.kubernetes.io/component": "cainjector", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "cainjector", "app.kubernetes.io/version": "v1.19.4" }, "name": "cert-manager-cainjector", "namespace": "cert-manager", "resourceVersion": "26890", "uid": "2cebe609-8f80-4746-9f8e-5ce99d6469ce" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "cainjector", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "cainjector" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "prometheus.io/path": "/metrics", "prometheus.io/port": "9402", "prometheus.io/scrape": "true" }, "creationTimestamp": null, "labels": { "app": "cainjector", "app.kubernetes.io/component": "cainjector", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "cainjector", "app.kubernetes.io/version": "v1.19.4" } }, "spec": { "containers": [ { "args": [ "--leader-election-namespace=kube-system", "--v=2" ], "command": [ "/app/cmd/cainjector/cainjector" ], "env": [ { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:f0467f589027c52288f2707bab33d0ccd1c15410dcbc9010d0f948feb4e50dd0", "imagePullPolicy": "IfNotPresent", "name": "cert-manager-cainjector", "ports": [ { "containerPort": 9402, "name": "http-metrics", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cert-manager-cainjector", "serviceAccountName": "cert-manager-cainjector", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:48:11Z", "lastUpdateTime": "2026-05-13T16:48:11Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:58Z", "lastUpdateTime": "2026-05-13T16:48:11Z", "message": "ReplicaSet \"cert-manager-cainjector-58d69f44d4\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "e0a9b6fe303c7f02fb9370e5798d9fabe9a4b75436a991330a91392afae6d3d8" }, "creationTimestamp": "2026-05-13T16:47:57Z", "generation": 1, "labels": { "app": "webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/version": "v1.19.4" }, "name": "cert-manager-webhook", "namespace": "cert-manager", "resourceVersion": "26815", "uid": "ef663f9f-5b18-48de-aada-7acb64dfd931" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "webhook" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "prometheus.io/path": "/metrics", "prometheus.io/port": "9402", "prometheus.io/scrape": "true" }, "creationTimestamp": null, "labels": { "app": "webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/version": "v1.19.4" } }, "spec": { "containers": [ { "args": [ "--dynamic-serving-ca-secret-name=cert-manager-webhook-ca", "--dynamic-serving-ca-secret-namespace=$(POD_NAMESPACE)", "--dynamic-serving-dns-names=cert-manager-webhook,cert-manager-webhook.$(POD_NAMESPACE),cert-manager-webhook.$(POD_NAMESPACE).svc", "--secure-port=10250", "--v=2" ], "command": [ "/app/cmd/webhook/webhook" ], "env": [ { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:f0467f589027c52288f2707bab33d0ccd1c15410dcbc9010d0f948feb4e50dd0", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/livez", "port": "healthcheck", "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "cert-manager-webhook", "ports": [ { "containerPort": 10250, "name": "https", "protocol": "TCP" }, { "containerPort": 6080, "name": "healthcheck", "protocol": "TCP" }, { "containerPort": 9402, "name": "http-metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "healthcheck", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cert-manager-webhook", "serviceAccountName": "cert-manager-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:48:10Z", "lastUpdateTime": "2026-05-13T16:48:10Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:57Z", "lastUpdateTime": "2026-05-13T16:48:10Z", "message": "ReplicaSet \"cert-manager-webhook-86f685c978\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "trust-manager-in-cluster-local:apps/Deployment:cert-manager/trust-manager", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"trust-manager-in-cluster-local:apps/Deployment:cert-manager/trust-manager\"},\"labels\":{\"app.kubernetes.io/instance\":\"trust-manager\",\"app.kubernetes.io/managed-by\":\"Helm\",\"app.kubernetes.io/name\":\"trust-manager\",\"app.kubernetes.io/version\":\"v0.19.0\",\"helm.sh/chart\":\"trust-manager-v0.19.0\"},\"name\":\"trust-manager\",\"namespace\":\"cert-manager\"},\"spec\":{\"replicas\":1,\"revisionHistoryLimit\":10,\"selector\":{\"matchLabels\":{\"app\":\"trust-manager\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"trust-manager\",\"app.kubernetes.io/instance\":\"trust-manager\",\"app.kubernetes.io/managed-by\":\"Helm\",\"app.kubernetes.io/name\":\"trust-manager\",\"app.kubernetes.io/version\":\"v0.19.0\",\"helm.sh/chart\":\"trust-manager-v0.19.0\"}},\"spec\":{\"automountServiceAccountToken\":true,\"containers\":[{\"args\":[\"--log-format=text\",\"--log-level=1\",\"--metrics-port=9402\",\"--readiness-probe-port=6060\",\"--readiness-probe-path=/readyz\",\"--leader-elect=false\",\"--leader-election-lease-duration=15s\",\"--leader-election-renew-deadline=10s\",\"--trust-namespace=cert-manager\",\"--webhook-host=0.0.0.0\",\"--webhook-port=6443\",\"--webhook-certificate-dir=/tls\",\"--default-package-location=/packages/cert-manager-package-debian.json\"],\"image\":\"quay.io/jetstack/trust-manager:v0.19.0\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"trust-manager\",\"ports\":[{\"containerPort\":6443,\"name\":\"webhook\"},{\"containerPort\":9402,\"name\":\"metrics\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readyz\",\"port\":6060},\"initialDelaySeconds\":3,\"periodSeconds\":7},\"resources\":{\"limits\":{\"cpu\":\"25m\",\"memory\":\"64Mi\"},\"requests\":{\"cpu\":\"25m\",\"memory\":\"64Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"volumeMounts\":[{\"mountPath\":\"/tls\",\"name\":\"tls\",\"readOnly\":true},{\"mountPath\":\"/packages\",\"name\":\"packages\",\"readOnly\":true}]}],\"initContainers\":[{\"args\":[\"/copyandmaybepause\",\"/debian-package\",\"/packages\"],\"image\":\"quay.io/jetstack/trust-pkg-debian-bookworm:20230311-deb12u1.0\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"cert-manager-package-debian\",\"resources\":{\"limits\":{\"cpu\":\"25m\",\"memory\":\"64Mi\"},\"requests\":{\"cpu\":\"25m\",\"memory\":\"64Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"volumeMounts\":[{\"mountPath\":\"/packages\",\"name\":\"packages\",\"readOnly\":false}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"serviceAccountName\":\"trust-manager\",\"volumes\":[{\"emptyDir\":{\"sizeLimit\":\"50M\"},\"name\":\"packages\"},{\"name\":\"tls\",\"secret\":{\"defaultMode\":420,\"secretName\":\"trust-manager-tls\"}}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:48:32Z", "generation": 1, "labels": { "app.kubernetes.io/instance": "trust-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "trust-manager", "app.kubernetes.io/version": "v0.19.0", "helm.sh/chart": "trust-manager-v0.19.0" }, "name": "trust-manager", "namespace": "cert-manager", "resourceVersion": "30952", "uid": "3d52b063-6ba8-4a5a-b008-9bfc06dfbee1" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "trust-manager" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "trust-manager", "app.kubernetes.io/instance": "trust-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "trust-manager", "app.kubernetes.io/version": "v0.19.0", "helm.sh/chart": "trust-manager-v0.19.0" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--log-format=text", "--log-level=1", "--metrics-port=9402", "--readiness-probe-port=6060", "--readiness-probe-path=/readyz", "--leader-elect=false", "--leader-election-lease-duration=15s", "--leader-election-renew-deadline=10s", "--trust-namespace=cert-manager", "--webhook-host=0.0.0.0", "--webhook-port=6443", "--webhook-certificate-dir=/tls", "--default-package-location=/packages/cert-manager-package-debian.json" ], "image": "quay.io/jetstack/trust-manager:v0.19.0", "imagePullPolicy": "IfNotPresent", "name": "trust-manager", "ports": [ { "containerPort": 6443, "name": "webhook", "protocol": "TCP" }, { "containerPort": 9402, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 6060, "scheme": "HTTP" }, "initialDelaySeconds": 3, "periodSeconds": 7, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "25m", "memory": "64Mi" }, "requests": { "cpu": "25m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tls", "name": "tls", "readOnly": true }, { "mountPath": "/packages", "name": "packages", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "/copyandmaybepause", "/debian-package", "/packages" ], "image": "quay.io/jetstack/trust-pkg-debian-bookworm:20230311-deb12u1.0", "imagePullPolicy": "IfNotPresent", "name": "cert-manager-package-debian", "resources": { "limits": { "cpu": "25m", "memory": "64Mi" }, "requests": { "cpu": "25m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/packages", "name": "packages" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "trust-manager", "serviceAccountName": "trust-manager", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": { "sizeLimit": "50M" }, "name": "packages" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "trust-manager-tls" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:49:18Z", "lastUpdateTime": "2026-05-13T16:49:18Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:48:32Z", "lastUpdateTime": "2026-05-13T16:49:18Z", "message": "ReplicaSet \"trust-manager-548ff9dcf5\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/sync-wave": "-1", "argocd.argoproj.io/tracking-id": "crossplane-control-plane-in-cluster-local:apps/Deployment:crossplane-system/crossplane", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/env-var-secret": "The env variables only contain the name of Secrets to be mounted", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-wave\":\"-1\",\"argocd.argoproj.io/tracking-id\":\"crossplane-control-plane-in-cluster-local:apps/Deployment:crossplane-system/crossplane\",\"ignore-check.kube-linter.io/env-var-secret\":\"The env variables only contain the name of Secrets to be mounted\"},\"labels\":{\"app\":\"crossplane\",\"app.kubernetes.io/component\":\"cloud-infrastructure-controller\",\"app.kubernetes.io/instance\":\"crossplane\",\"app.kubernetes.io/managed-by\":\"Helm\",\"app.kubernetes.io/name\":\"crossplane\",\"app.kubernetes.io/part-of\":\"crossplane\",\"app.kubernetes.io/version\":\"2.2.0\",\"helm.sh/chart\":\"crossplane-2.2.0\",\"release\":\"crossplane\"},\"name\":\"crossplane\",\"namespace\":\"crossplane-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"crossplane\",\"release\":\"crossplane\"}},\"strategy\":{\"type\":\"RollingUpdate\"},\"template\":{\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-wave\":\"-1\",\"ignore-check.kube-linter.io/env-var-secret\":\"The env variables only contain the name of Secrets to be mounted\"},\"labels\":{\"app\":\"crossplane\",\"app.kubernetes.io/component\":\"cloud-infrastructure-controller\",\"app.kubernetes.io/instance\":\"crossplane\",\"app.kubernetes.io/managed-by\":\"Helm\",\"app.kubernetes.io/name\":\"crossplane\",\"app.kubernetes.io/part-of\":\"crossplane\",\"app.kubernetes.io/version\":\"2.2.0\",\"helm.sh/chart\":\"crossplane-2.2.0\",\"release\":\"crossplane\"}},\"spec\":{\"containers\":[{\"args\":[\"core\",\"start\"],\"env\":[{\"name\":\"GOMAXPROCS\",\"valueFrom\":{\"resourceFieldRef\":{\"containerName\":\"crossplane\",\"divisor\":\"1\",\"resource\":\"limits.cpu\"}}},{\"name\":\"GOMEMLIMIT\",\"valueFrom\":{\"resourceFieldRef\":{\"containerName\":\"crossplane\",\"divisor\":\"1\",\"resource\":\"limits.memory\"}}},{\"name\":\"POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"POD_SERVICE_ACCOUNT\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.serviceAccountName\"}}},{\"name\":\"LEADER_ELECTION\",\"value\":\"false\"},{\"name\":\"TLS_SERVER_SECRET_NAME\",\"value\":\"crossplane-tls-server\"},{\"name\":\"TLS_SERVER_CERTS_DIR\",\"value\":\"/tls/server\"},{\"name\":\"TLS_CLIENT_SECRET_NAME\",\"value\":\"crossplane-tls-client\"},{\"name\":\"TLS_CLIENT_CERTS_DIR\",\"value\":\"/tls/client\"}],\"image\":\"xpkg.crossplane.io/crossplane/crossplane:v2.2.0\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"crossplane\",\"ports\":[{\"containerPort\":8081,\"name\":\"readyz\"},{\"containerPort\":9443,\"name\":\"webhooks\"}],\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"1024Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"256Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true},\"startupProbe\":{\"failureThreshold\":30,\"periodSeconds\":2,\"tcpSocket\":{\"port\":\"readyz\"}},\"volumeMounts\":[{\"mountPath\":\"/cache/xpkg\",\"name\":\"package-cache\"},{\"mountPath\":\"/cache/xfn\",\"name\":\"function-cache\"},{\"mountPath\":\"/tls/server\",\"name\":\"tls-server-certs\"},{\"mountPath\":\"/tls/client\",\"name\":\"tls-client-certs\"}]}],\"hostNetwork\":false,\"initContainers\":[{\"args\":[\"core\",\"init\",\"--activation\",\"*\"],\"env\":[{\"name\":\"GOMAXPROCS\",\"valueFrom\":{\"resourceFieldRef\":{\"containerName\":\"crossplane-init\",\"divisor\":\"1\",\"resource\":\"limits.cpu\"}}},{\"name\":\"GOMEMLIMIT\",\"valueFrom\":{\"resourceFieldRef\":{\"containerName\":\"crossplane-init\",\"divisor\":\"1\",\"resource\":\"limits.memory\"}}},{\"name\":\"POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"POD_SERVICE_ACCOUNT\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"spec.serviceAccountName\"}}},{\"name\":\"WEBHOOK_SERVICE_NAME\",\"value\":\"crossplane-webhooks\"},{\"name\":\"WEBHOOK_SERVICE_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"WEBHOOK_SERVICE_PORT\",\"value\":\"9443\"},{\"name\":\"TLS_CA_SECRET_NAME\",\"value\":\"crossplane-root-ca\"},{\"name\":\"TLS_SERVER_SECRET_NAME\",\"value\":\"crossplane-tls-server\"},{\"name\":\"TLS_CLIENT_SECRET_NAME\",\"value\":\"crossplane-tls-client\"}],\"image\":\"xpkg.crossplane.io/crossplane/crossplane:v2.2.0\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"crossplane-init\",\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"1024Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"256Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true}}],\"serviceAccountName\":\"crossplane\",\"volumes\":[{\"emptyDir\":{\"medium\":null,\"sizeLimit\":\"20Mi\"},\"name\":\"package-cache\"},{\"emptyDir\":{\"medium\":null,\"sizeLimit\":\"512Mi\"},\"name\":\"function-cache\"},{\"name\":\"tls-server-certs\",\"secret\":{\"secretName\":\"crossplane-tls-server\"}},{\"name\":\"tls-client-certs\",\"secret\":{\"secretName\":\"crossplane-tls-client\"}}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:47:26Z", "generation": 1, "labels": { "app": "crossplane", "app.kubernetes.io/component": "cloud-infrastructure-controller", "app.kubernetes.io/instance": "crossplane", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "crossplane", "app.kubernetes.io/part-of": "crossplane", "app.kubernetes.io/version": "2.2.0", "helm.sh/chart": "crossplane-2.2.0", "release": "crossplane" }, "name": "crossplane", "namespace": "crossplane-system", "resourceVersion": "27058", "uid": "c88041cf-f66f-43eb-9c85-66488c5348b6" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "crossplane", "release": "crossplane" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "argocd.argoproj.io/sync-wave": "-1", "ignore-check.kube-linter.io/env-var-secret": "The env variables only contain the name of Secrets to be mounted" }, "creationTimestamp": null, "labels": { "app": "crossplane", "app.kubernetes.io/component": "cloud-infrastructure-controller", "app.kubernetes.io/instance": "crossplane", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "crossplane", "app.kubernetes.io/part-of": "crossplane", "app.kubernetes.io/version": "2.2.0", "helm.sh/chart": "crossplane-2.2.0", "release": "crossplane" } }, "spec": { "containers": [ { "args": [ "core", "start" ], "env": [ { "name": "GOMAXPROCS", "valueFrom": { "resourceFieldRef": { "containerName": "crossplane", "divisor": "1", "resource": "limits.cpu" } } }, { "name": "GOMEMLIMIT", "valueFrom": { "resourceFieldRef": { "containerName": "crossplane", "divisor": "1", "resource": "limits.memory" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_SERVICE_ACCOUNT", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.serviceAccountName" } } }, { "name": "LEADER_ELECTION", "value": "false" }, { "name": "TLS_SERVER_SECRET_NAME", "value": "crossplane-tls-server" }, { "name": "TLS_SERVER_CERTS_DIR", "value": "/tls/server" }, { "name": "TLS_CLIENT_SECRET_NAME", "value": "crossplane-tls-client" }, { "name": "TLS_CLIENT_CERTS_DIR", "value": "/tls/client" } ], "image": "xpkg.crossplane.io/crossplane/crossplane:v2.2.0", "imagePullPolicy": "IfNotPresent", "name": "crossplane", "ports": [ { "containerPort": 8081, "name": "readyz", "protocol": "TCP" }, { "containerPort": 9443, "name": "webhooks", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "1Gi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "startupProbe": { "failureThreshold": 30, "periodSeconds": 2, "successThreshold": 1, "tcpSocket": { "port": "readyz" }, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/cache/xpkg", "name": "package-cache" }, { "mountPath": "/cache/xfn", "name": "function-cache" }, { "mountPath": "/tls/server", "name": "tls-server-certs" }, { "mountPath": "/tls/client", "name": "tls-client-certs" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "core", "init", "--activation", "*" ], "env": [ { "name": "GOMAXPROCS", "valueFrom": { "resourceFieldRef": { "containerName": "crossplane-init", "divisor": "1", "resource": "limits.cpu" } } }, { "name": "GOMEMLIMIT", "valueFrom": { "resourceFieldRef": { "containerName": "crossplane-init", "divisor": "1", "resource": "limits.memory" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_SERVICE_ACCOUNT", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.serviceAccountName" } } }, { "name": "WEBHOOK_SERVICE_NAME", "value": "crossplane-webhooks" }, { "name": "WEBHOOK_SERVICE_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SERVICE_PORT", "value": "9443" }, { "name": "TLS_CA_SECRET_NAME", "value": "crossplane-root-ca" }, { "name": "TLS_SERVER_SECRET_NAME", "value": "crossplane-tls-server" }, { "name": "TLS_CLIENT_SECRET_NAME", "value": "crossplane-tls-client" } ], "image": "xpkg.crossplane.io/crossplane/crossplane:v2.2.0", "imagePullPolicy": "IfNotPresent", "name": "crossplane-init", "resources": { "limits": { "cpu": "500m", "memory": "1Gi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "crossplane", "serviceAccountName": "crossplane", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": { "sizeLimit": "20Mi" }, "name": "package-cache" }, { "emptyDir": { "sizeLimit": "512Mi" }, "name": "function-cache" }, { "name": "tls-server-certs", "secret": { "defaultMode": 420, "secretName": "crossplane-tls-server" } }, { "name": "tls-client-certs", "secret": { "defaultMode": 420, "secretName": "crossplane-tls-client" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:48:14Z", "lastUpdateTime": "2026-05-13T16:48:14Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:26Z", "lastUpdateTime": "2026-05-13T16:48:14Z", "message": "ReplicaSet \"crossplane-5f84756477\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/sync-wave": "-1", "argocd.argoproj.io/tracking-id": "crossplane-control-plane-in-cluster-local:apps/Deployment:crossplane-system/crossplane-rbac-manager", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/env-var-secret": "The env variables only contain the name of Secrets to be mounted", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-wave\":\"-1\",\"argocd.argoproj.io/tracking-id\":\"crossplane-control-plane-in-cluster-local:apps/Deployment:crossplane-system/crossplane-rbac-manager\",\"ignore-check.kube-linter.io/env-var-secret\":\"The env variables only contain the name of Secrets to be mounted\"},\"labels\":{\"app\":\"crossplane-rbac-manager\",\"app.kubernetes.io/component\":\"cloud-infrastructure-controller\",\"app.kubernetes.io/instance\":\"crossplane\",\"app.kubernetes.io/managed-by\":\"Helm\",\"app.kubernetes.io/name\":\"crossplane\",\"app.kubernetes.io/part-of\":\"crossplane\",\"app.kubernetes.io/version\":\"2.2.0\",\"helm.sh/chart\":\"crossplane-2.2.0\",\"release\":\"crossplane\"},\"name\":\"crossplane-rbac-manager\",\"namespace\":\"crossplane-system\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"crossplane-rbac-manager\",\"release\":\"crossplane\"}},\"strategy\":{\"type\":\"RollingUpdate\"},\"template\":{\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-wave\":\"-1\",\"ignore-check.kube-linter.io/env-var-secret\":\"The env variables only contain the name of Secrets to be mounted\"},\"labels\":{\"app\":\"crossplane-rbac-manager\",\"app.kubernetes.io/component\":\"cloud-infrastructure-controller\",\"app.kubernetes.io/instance\":\"crossplane\",\"app.kubernetes.io/managed-by\":\"Helm\",\"app.kubernetes.io/name\":\"crossplane\",\"app.kubernetes.io/part-of\":\"crossplane\",\"app.kubernetes.io/version\":\"2.2.0\",\"helm.sh/chart\":\"crossplane-2.2.0\",\"release\":\"crossplane\"}},\"spec\":{\"containers\":[{\"args\":[\"rbac\",\"start\",\"--provider-clusterrole=crossplane:allowed-provider-permissions\"],\"env\":[{\"name\":\"GOMAXPROCS\",\"valueFrom\":{\"resourceFieldRef\":{\"containerName\":\"crossplane\",\"divisor\":\"1\",\"resource\":\"limits.cpu\"}}},{\"name\":\"GOMEMLIMIT\",\"valueFrom\":{\"resourceFieldRef\":{\"containerName\":\"crossplane\",\"divisor\":\"1\",\"resource\":\"limits.memory\"}}},{\"name\":\"LEADER_ELECTION\",\"value\":\"false\"}],\"image\":\"xpkg.crossplane.io/crossplane/crossplane:v2.2.0\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"crossplane\",\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"256Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true}}],\"initContainers\":[{\"args\":[\"rbac\",\"init\"],\"env\":[{\"name\":\"GOMAXPROCS\",\"valueFrom\":{\"resourceFieldRef\":{\"containerName\":\"crossplane-init\",\"divisor\":\"1\",\"resource\":\"limits.cpu\"}}},{\"name\":\"GOMEMLIMIT\",\"valueFrom\":{\"resourceFieldRef\":{\"containerName\":\"crossplane-init\",\"divisor\":\"1\",\"resource\":\"limits.memory\"}}}],\"image\":\"xpkg.crossplane.io/crossplane/crossplane:v2.2.0\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"crossplane-init\",\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"256Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true}}],\"serviceAccountName\":\"rbac-manager\"}}}}\n" }, "creationTimestamp": "2026-05-13T16:47:26Z", "generation": 1, "labels": { "app": "crossplane-rbac-manager", "app.kubernetes.io/component": "cloud-infrastructure-controller", "app.kubernetes.io/instance": "crossplane", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "crossplane", "app.kubernetes.io/part-of": "crossplane", "app.kubernetes.io/version": "2.2.0", "helm.sh/chart": "crossplane-2.2.0", "release": "crossplane" }, "name": "crossplane-rbac-manager", "namespace": "crossplane-system", "resourceVersion": "26733", "uid": "84e93d48-79e6-4421-931e-040d1165aaab" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "crossplane-rbac-manager", "release": "crossplane" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "argocd.argoproj.io/sync-wave": "-1", "ignore-check.kube-linter.io/env-var-secret": "The env variables only contain the name of Secrets to be mounted" }, "creationTimestamp": null, "labels": { "app": "crossplane-rbac-manager", "app.kubernetes.io/component": "cloud-infrastructure-controller", "app.kubernetes.io/instance": "crossplane", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "crossplane", "app.kubernetes.io/part-of": "crossplane", "app.kubernetes.io/version": "2.2.0", "helm.sh/chart": "crossplane-2.2.0", "release": "crossplane" } }, "spec": { "containers": [ { "args": [ "rbac", "start", "--provider-clusterrole=crossplane:allowed-provider-permissions" ], "env": [ { "name": "GOMAXPROCS", "valueFrom": { "resourceFieldRef": { "containerName": "crossplane", "divisor": "1", "resource": "limits.cpu" } } }, { "name": "GOMEMLIMIT", "valueFrom": { "resourceFieldRef": { "containerName": "crossplane", "divisor": "1", "resource": "limits.memory" } } }, { "name": "LEADER_ELECTION", "value": "false" } ], "image": "xpkg.crossplane.io/crossplane/crossplane:v2.2.0", "imagePullPolicy": "IfNotPresent", "name": "crossplane", "resources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "rbac", "init" ], "env": [ { "name": "GOMAXPROCS", "valueFrom": { "resourceFieldRef": { "containerName": "crossplane-init", "divisor": "1", "resource": "limits.cpu" } } }, { "name": "GOMEMLIMIT", "valueFrom": { "resourceFieldRef": { "containerName": "crossplane-init", "divisor": "1", "resource": "limits.memory" } } } ], "image": "xpkg.crossplane.io/crossplane/crossplane:v2.2.0", "imagePullPolicy": "IfNotPresent", "name": "crossplane-init", "resources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "rbac-manager", "serviceAccountName": "rbac-manager", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:48:08Z", "lastUpdateTime": "2026-05-13T16:48:08Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:26Z", "lastUpdateTime": "2026-05-13T16:48:08Z", "message": "ReplicaSet \"crossplane-rbac-manager-76796867d5\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:49:24Z", "generation": 1, "name": "function-auto-ready-a37a591901b6", "namespace": "crossplane-system", "ownerReferences": [ { "apiVersion": "pkg.crossplane.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "FunctionRevision", "name": "function-auto-ready-a37a591901b6", "uid": "6bd51af6-70e3-48fa-a5ef-0bf17d3543fb" } ], "resourceVersion": "31629", "uid": "4e268bd3-e85f-4a20-a69c-fd0a68c4fab7" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "pkg.crossplane.io/function": "function-auto-ready", "pkg.crossplane.io/revision": "function-auto-ready-a37a591901b6" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "pkg.crossplane.io/function": "function-auto-ready", "pkg.crossplane.io/revision": "function-auto-ready-a37a591901b6" } }, "spec": { "containers": [ { "env": [ { "name": "TLS_SERVER_CERTS_DIR", "value": "/tls/server" }, { "name": "FUNCTION_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.labels['pkg.crossplane.io/function']" } } }, { "name": "REVISION_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.labels['pkg.crossplane.io/revision']" } } }, { "name": "REVISION_UID", "value": "6bd51af6-70e3-48fa-a5ef-0bf17d3543fb" } ], "image": "xpkg.upbound.io/crossplane-contrib/function-auto-ready:v0.6.3", "imagePullPolicy": "IfNotPresent", "name": "package-runtime", "ports": [ { "containerPort": 8080, "name": "metrics", "protocol": "TCP" }, { "containerPort": 9443, "name": "grpc", "protocol": "TCP" } ], "resources": {}, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/templates/xnamespace", "name": "xnamespace-templates", "readOnly": true }, { "mountPath": "/templates/xtestplatformcluster", "name": "xtestplatformcluster-templates", "readOnly": true }, { "mountPath": "/tls/server", "name": "tls-server-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "function-auto-ready-a37a591901b6", "serviceAccountName": "function-auto-ready-a37a591901b6", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "xnamespace-templates" }, "name": "xnamespace-templates" }, { "configMap": { "defaultMode": 420, "name": "xtestplatformcluster-templates" }, "name": "xtestplatformcluster-templates" }, { "name": "tls-server-certs", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" }, { "key": "ca.crt", "path": "ca.crt" } ], "secretName": "function-auto-ready-tls-server" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:49:27Z", "lastUpdateTime": "2026-05-13T16:49:27Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:49:24Z", "lastUpdateTime": "2026-05-13T16:49:27Z", "message": "ReplicaSet \"function-auto-ready-a37a591901b6-5c7cc9c7c9\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:49:23Z", "generation": 1, "name": "function-go-templating-ec55f6817a88", "namespace": "crossplane-system", "ownerReferences": [ { "apiVersion": "pkg.crossplane.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "FunctionRevision", "name": "function-go-templating-ec55f6817a88", "uid": "bb3de1b3-9d36-4dee-aa95-741156ba7dd4" } ], "resourceVersion": "31603", "uid": "77d82949-ce71-4eb0-bba2-db0d84e57832" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "pkg.crossplane.io/function": "function-go-templating", "pkg.crossplane.io/revision": "function-go-templating-ec55f6817a88" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "pkg.crossplane.io/function": "function-go-templating", "pkg.crossplane.io/revision": "function-go-templating-ec55f6817a88" } }, "spec": { "containers": [ { "env": [ { "name": "TLS_SERVER_CERTS_DIR", "value": "/tls/server" }, { "name": "FUNCTION_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.labels['pkg.crossplane.io/function']" } } }, { "name": "REVISION_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.labels['pkg.crossplane.io/revision']" } } }, { "name": "REVISION_UID", "value": "bb3de1b3-9d36-4dee-aa95-741156ba7dd4" } ], "image": "xpkg.upbound.io/crossplane-contrib/function-go-templating:v0.12.0", "imagePullPolicy": "IfNotPresent", "name": "package-runtime", "ports": [ { "containerPort": 8080, "name": "metrics", "protocol": "TCP" }, { "containerPort": 9443, "name": "grpc", "protocol": "TCP" } ], "resources": {}, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/templates/xnamespace", "name": "xnamespace-templates", "readOnly": true }, { "mountPath": "/templates/xtestplatformcluster", "name": "xtestplatformcluster-templates", "readOnly": true }, { "mountPath": "/tls/server", "name": "tls-server-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "function-go-templating-ec55f6817a88", "serviceAccountName": "function-go-templating-ec55f6817a88", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "xnamespace-templates" }, "name": "xnamespace-templates" }, { "configMap": { "defaultMode": 420, "name": "xtestplatformcluster-templates" }, "name": "xtestplatformcluster-templates" }, { "name": "tls-server-certs", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" }, { "key": "ca.crt", "path": "ca.crt" } ], "secretName": "function-go-templating-tls-server" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:49:26Z", "lastUpdateTime": "2026-05-13T16:49:26Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:49:23Z", "lastUpdateTime": "2026-05-13T16:49:26Z", "message": "ReplicaSet \"function-go-templating-ec55f6817a88-5965bd675d\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:49:23Z", "generation": 1, "name": "function-patch-and-transform-a4b98f52af5b", "namespace": "crossplane-system", "ownerReferences": [ { "apiVersion": "pkg.crossplane.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "FunctionRevision", "name": "function-patch-and-transform-a4b98f52af5b", "uid": "3e6bb689-4ff3-426b-bf46-de058156a988" } ], "resourceVersion": "31608", "uid": "e8d5600b-0acf-42d7-8875-8bd4c8113320" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "pkg.crossplane.io/function": "function-patch-and-transform", "pkg.crossplane.io/revision": "function-patch-and-transform-a4b98f52af5b" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "pkg.crossplane.io/function": "function-patch-and-transform", "pkg.crossplane.io/revision": "function-patch-and-transform-a4b98f52af5b" } }, "spec": { "containers": [ { "env": [ { "name": "TLS_SERVER_CERTS_DIR", "value": "/tls/server" }, { "name": "FUNCTION_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.labels['pkg.crossplane.io/function']" } } }, { "name": "REVISION_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.labels['pkg.crossplane.io/revision']" } } }, { "name": "REVISION_UID", "value": "3e6bb689-4ff3-426b-bf46-de058156a988" } ], "image": "xpkg.upbound.io/crossplane-contrib/function-patch-and-transform:v0.10.3", "imagePullPolicy": "IfNotPresent", "name": "package-runtime", "ports": [ { "containerPort": 8080, "name": "metrics", "protocol": "TCP" }, { "containerPort": 9443, "name": "grpc", "protocol": "TCP" } ], "resources": {}, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/templates/xnamespace", "name": "xnamespace-templates", "readOnly": true }, { "mountPath": "/templates/xtestplatformcluster", "name": "xtestplatformcluster-templates", "readOnly": true }, { "mountPath": "/tls/server", "name": "tls-server-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "function-patch-and-transform-a4b98f52af5b", "serviceAccountName": "function-patch-and-transform-a4b98f52af5b", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "xnamespace-templates" }, "name": "xnamespace-templates" }, { "configMap": { "defaultMode": 420, "name": "xtestplatformcluster-templates" }, "name": "xtestplatformcluster-templates" }, { "name": "tls-server-certs", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" }, { "key": "ca.crt", "path": "ca.crt" } ], "secretName": "function-patch-and-transform-tls-server" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:49:26Z", "lastUpdateTime": "2026-05-13T16:49:26Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:49:23Z", "lastUpdateTime": "2026-05-13T16:49:26Z", "message": "ReplicaSet \"function-patch-and-transform-a4b98f52af5b-765f574b49\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:49:24Z", "generation": 1, "name": "provider-kubernetes-f6665ef36536", "namespace": "crossplane-system", "ownerReferences": [ { "apiVersion": "pkg.crossplane.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "ProviderRevision", "name": "provider-kubernetes-f6665ef36536", "uid": "e6d38204-c08b-4b7f-9286-ece069e1868a" } ], "resourceVersion": "31635", "uid": "7d7f89a0-026f-4dcf-a898-6b1d327bbd17" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "pkg.crossplane.io/provider": "provider-kubernetes", "pkg.crossplane.io/revision": "provider-kubernetes-f6665ef36536" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "prometheus.io/path": "/metrics", "prometheus.io/port": "8080", "prometheus.io/scrape": "true" }, "creationTimestamp": null, "labels": { "pkg.crossplane.io/provider": "provider-kubernetes", "pkg.crossplane.io/revision": "provider-kubernetes-f6665ef36536" } }, "spec": { "containers": [ { "args": [ "--sanitize-secrets", "--enable-watches" ], "env": [ { "name": "TLS_CLIENT_CERTS_DIR", "value": "/tls/client" }, { "name": "TLS_SERVER_CERTS_DIR", "value": "/tls/server" }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "PROVIDER_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.labels['pkg.crossplane.io/provider']" } } }, { "name": "REVISION_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.labels['pkg.crossplane.io/revision']" } } }, { "name": "REVISION_UID", "value": "e6d38204-c08b-4b7f-9286-ece069e1868a" }, { "name": "WEBHOOK_TLS_CERT_DIR", "value": "$(TLS_SERVER_CERTS_DIR)" } ], "image": "xpkg.upbound.io/crossplane-contrib/provider-kubernetes:v1.2.1", "imagePullPolicy": "IfNotPresent", "name": "package-runtime", "ports": [ { "containerPort": 8080, "name": "metrics", "protocol": "TCP" }, { "containerPort": 9443, "name": "webhook", "protocol": "TCP" } ], "resources": {}, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tls/client", "name": "tls-client-certs", "readOnly": true }, { "mountPath": "/tls/server", "name": "tls-server-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "provider-kubernetes", "serviceAccountName": "provider-kubernetes", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls-client-certs", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" }, { "key": "ca.crt", "path": "ca.crt" } ], "secretName": "provider-kubernetes-tls-client" } }, { "name": "tls-server-certs", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" }, { "key": "ca.crt", "path": "ca.crt" } ], "secretName": "provider-kubernetes-tls-server" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:49:27Z", "lastUpdateTime": "2026-05-13T16:49:27Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:49:24Z", "lastUpdateTime": "2026-05-13T16:49:27Z", "message": "ReplicaSet \"provider-kubernetes-f6665ef36536-64564749bc\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "dora-metrics-in-cluster-local:apps/Deployment:dora-metrics/exporter", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"dora-metrics-in-cluster-local:apps/Deployment:dora-metrics/exporter\"},\"name\":\"exporter\",\"namespace\":\"dora-metrics\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"exporter\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"exporter\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"GITHUB_TOKEN\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"github\",\"name\":\"exporters-secret\",\"optional\":false}}},{\"name\":\"PAGERDUTY_API_KEY\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"pager-duty-token\",\"name\":\"exporters-secret\",\"optional\":false}}}],\"image\":\"quay.io/konflux-ci/dora-metrics:5c6ee5f7130dabfddab0b775bd36c867cbdf8403\",\"name\":\"container\",\"ports\":[{\"containerPort\":9101,\"name\":\"metrics-port\",\"protocol\":\"TCP\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"5m\",\"memory\":\"64Mi\"}},\"securityContext\":{\"readOnlyRootFilesystem\":true}}],\"securityContext\":{\"runAsNonRoot\":true},\"serviceAccount\":\"dora-metrics-exporter-sa\",\"serviceAccountName\":\"dora-metrics-exporter-sa\"}}}}\n" }, "creationTimestamp": "2026-05-13T16:47:12Z", "generation": 1, "name": "exporter", "namespace": "dora-metrics", "resourceVersion": "24502", "uid": "bf86d254-291a-4db2-8890-87418e41e437" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "exporter" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "exporter" } }, "spec": { "containers": [ { "env": [ { "name": "GITHUB_TOKEN", "valueFrom": { "secretKeyRef": { "key": "github", "name": "exporters-secret", "optional": false } } }, { "name": "PAGERDUTY_API_KEY", "valueFrom": { "secretKeyRef": { "key": "pager-duty-token", "name": "exporters-secret", "optional": false } } } ], "image": "quay.io/konflux-ci/dora-metrics:5c6ee5f7130dabfddab0b775bd36c867cbdf8403", "imagePullPolicy": "IfNotPresent", "name": "container", "ports": [ { "containerPort": 9101, "name": "metrics-port", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "100m", "memory": "128Mi" }, "requests": { "cpu": "5m", "memory": "64Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "dora-metrics-exporter-sa", "serviceAccountName": "dora-metrics-exporter-sa", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:47:45Z", "lastUpdateTime": "2026-05-13T16:47:45Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:12Z", "lastUpdateTime": "2026-05-13T16:47:45Z", "message": "ReplicaSet \"exporter-5dfc68f599\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/tracking-id": "monitoring-workload-prometheus-in-cluster-local:apps/Deployment:dummy-service/kube-rbac-proxy", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/tracking-id\":\"monitoring-workload-prometheus-in-cluster-local:apps/Deployment:dummy-service/kube-rbac-proxy\"},\"name\":\"kube-rbac-proxy\",\"namespace\":\"dummy-service\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"kube-rbac-proxy\"}},\"template\":{\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\"},\"labels\":{\"app\":\"kube-rbac-proxy\"}},\"spec\":{\"containers\":[{\"args\":[\"--secure-listen-address=0.0.0.0:8443\",\"--upstream=http://127.0.0.1:8081/\",\"--logtostderr=true\",\"--v=10\"],\"image\":\"quay.io/brancz/kube-rbac-proxy:v0.14.0\",\"name\":\"kube-rbac-proxy\",\"ports\":[{\"containerPort\":8443,\"name\":\"https\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"200Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"200Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true}},{\"args\":[\"--bind=127.0.0.1:8081\"],\"image\":\"quay.io/brancz/prometheus-example-app:v0.1.0\",\"name\":\"prometheus-example-app\",\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"200Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"200Mi\"}},\"securityContext\":{\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true}}],\"serviceAccountName\":\"kube-rbac-proxy\"}}}}\n" }, "creationTimestamp": "2026-05-13T16:48:25Z", "generation": 1, "name": "kube-rbac-proxy", "namespace": "dummy-service", "resourceVersion": "28188", "uid": "ce1dc647-ffa1-4eec-b78f-b1547e301926" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "kube-rbac-proxy" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true" }, "creationTimestamp": null, "labels": { "app": "kube-rbac-proxy" } }, "spec": { "containers": [ { "args": [ "--secure-listen-address=0.0.0.0:8443", "--upstream=http://127.0.0.1:8081/", "--logtostderr=true", "--v=10" ], "image": "quay.io/brancz/kube-rbac-proxy:v0.14.0", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "100m", "memory": "200Mi" }, "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" }, { "args": [ "--bind=127.0.0.1:8081" ], "image": "quay.io/brancz/prometheus-example-app:v0.1.0", "imagePullPolicy": "IfNotPresent", "name": "prometheus-example-app", "resources": { "limits": { "cpu": "100m", "memory": "200Mi" }, "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kube-rbac-proxy", "serviceAccountName": "kube-rbac-proxy", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:48:30Z", "lastUpdateTime": "2026-05-13T16:48:30Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:48:25Z", "lastUpdateTime": "2026-05-13T16:48:30Z", "message": "ReplicaSet \"kube-rbac-proxy-7cdd67b8d4\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "image-controller-in-cluster-local:apps/Deployment:image-controller/image-controller-controller-manager", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"image-controller-in-cluster-local:apps/Deployment:image-controller/image-controller-controller-manager\"},\"labels\":{\"app.kubernetes.io/managed-by\":\"kustomize\",\"app.kubernetes.io/name\":\"image-controller\",\"control-plane\":\"controller-manager\"},\"name\":\"image-controller-controller-manager\",\"namespace\":\"image-controller\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"control-plane\":\"controller-manager\"}},\"template\":{\"metadata\":{\"annotations\":{\"kubectl.kubernetes.io/default-container\":\"manager\"},\"labels\":{\"control-plane\":\"controller-manager\"}},\"spec\":{\"containers\":[{\"args\":[\"--metrics-bind-address=:8443\",\"--leader-elect=false\",\"--health-probe-bind-address=:8081\",\"--zap-encoder=console\"],\"command\":[\"/manager\"],\"image\":\"quay.io/konflux-ci/image-controller:67cc74626bb768336d375413d93725d380474417\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8081},\"initialDelaySeconds\":15,\"periodSeconds\":20},\"name\":\"manager\",\"ports\":[{\"containerPort\":8081,\"name\":\"probes\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readyz\",\"port\":8081},\"initialDelaySeconds\":5,\"periodSeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"2Gi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true},\"volumeMounts\":[{\"mountPath\":\"/workspace\",\"name\":\"quaytoken\",\"readOnly\":true}]}],\"securityContext\":{\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"image-controller-controller-manager\",\"terminationGracePeriodSeconds\":10,\"volumes\":[{\"name\":\"quaytoken\",\"secret\":{\"secretName\":\"quaytoken\"}}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:47:26Z", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "kustomize", "app.kubernetes.io/name": "image-controller", "control-plane": "controller-manager" }, "name": "image-controller-controller-manager", "namespace": "image-controller", "resourceVersion": "26740", "uid": "86f421e4-5912-43d0-8fb9-f9d1b18043a7" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "control-plane": "controller-manager" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8443", "--leader-elect=false", "--health-probe-bind-address=:8081", "--zap-encoder=console" ], "command": [ "/manager" ], "image": "quay.io/konflux-ci/image-controller:67cc74626bb768336d375413d93725d380474417", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 8081, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "2Gi" }, "requests": { "cpu": "100m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/workspace", "name": "quaytoken", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "image-controller-controller-manager", "serviceAccountName": "image-controller-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "name": "quaytoken", "secret": { "defaultMode": 420, "secretName": "quaytoken" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:48:09Z", "lastUpdateTime": "2026-05-13T16:48:09Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:27Z", "lastUpdateTime": "2026-05-13T16:48:09Z", "message": "ReplicaSet \"image-controller-controller-manager-6bcc9fd74c\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "image-rbac-proxy-in-cluster-local:apps/Deployment:image-rbac-proxy/dex", "deployment.kubernetes.io/revision": "3", "ignore-check.kube-linter.io/no-anti-affinity": "Using topologySpreadConstraints", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"image-rbac-proxy-in-cluster-local:apps/Deployment:image-rbac-proxy/dex\",\"ignore-check.kube-linter.io/no-anti-affinity\":\"Using topologySpreadConstraints\"},\"labels\":{\"app\":\"dex\"},\"name\":\"dex\",\"namespace\":\"image-rbac-proxy\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"dex\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"dex\"}},\"spec\":{\"containers\":[{\"command\":[\"/usr/local/bin/dex\",\"serve\",\"/etc/dex/cfg/config.yaml\"],\"env\":[{\"name\":\"OPENSHIFT_OAUTH_CLIENT_SECRET\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"token\",\"name\":\"dex-client\"}}},{\"name\":\"OAUTH2_CLIENT_SECRET\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"client-secret\",\"name\":\"image-proxy-client-secret\"}}}],\"image\":\"ghcr.io/dexidp/dex:v2.32.0\",\"name\":\"dex\",\"ports\":[{\"containerPort\":9443,\"name\":\"https\"},{\"containerPort\":5558,\"name\":\"telemetry\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/healthz/ready\",\"port\":\"telemetry\"}},\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"256Mi\"}},\"securityContext\":{\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true},\"volumeMounts\":[{\"mountPath\":\"/etc/dex/cfg\",\"name\":\"dex\"},{\"mountPath\":\"/etc/dex/tls\",\"name\":\"tls\"}]}],\"serviceAccountName\":\"dex\",\"topologySpreadConstraints\":[{\"labelSelector\":{\"matchLabels\":{\"app\":\"dex\"}},\"maxSkew\":1,\"topologyKey\":\"topology.kubernetes.io/zone\",\"whenUnsatisfiable\":\"ScheduleAnyway\"}],\"volumes\":[{\"configMap\":{\"defaultMode\":420,\"items\":[{\"key\":\"dex-config.yaml\",\"path\":\"config.yaml\"}],\"name\":\"dex-9mgh6c988h\"},\"name\":\"dex\"},{\"name\":\"tls\",\"secret\":{\"secretName\":\"dex-tls\"}}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:47:21Z", "generation": 3, "labels": { "app": "dex" }, "name": "dex", "namespace": "image-rbac-proxy", "resourceVersion": "172305", "uid": "b2987af3-0fa5-4874-bc17-fa07d3c16c42" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "dex" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/restartedAt": "2026-05-13T17:51:37Z" }, "creationTimestamp": null, "labels": { "app": "dex" } }, "spec": { "containers": [ { "command": [ "/usr/local/bin/dex", "serve", "/etc/dex/cfg/config.yaml" ], "env": [ { "name": "OPENSHIFT_OAUTH_CLIENT_SECRET", "valueFrom": { "secretKeyRef": { "key": "token", "name": "dex-client" } } }, { "name": "OAUTH2_CLIENT_SECRET", "valueFrom": { "secretKeyRef": { "key": "client-secret", "name": "image-proxy-client-secret" } } } ], "image": "ghcr.io/dexidp/dex:v2.32.0", "imagePullPolicy": "IfNotPresent", "name": "dex", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" }, { "containerPort": 5558, "name": "telemetry", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/ready", "port": "telemetry", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/dex/cfg", "name": "dex" }, { "mountPath": "/etc/dex/tls", "name": "tls" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "dex", "serviceAccountName": "dex", "terminationGracePeriodSeconds": 30, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "app": "dex" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "ScheduleAnyway" } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "dex-config.yaml", "path": "config.yaml" } ], "name": "dex-9mgh6c988h" }, "name": "dex" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "dex-tls" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:47:21Z", "lastUpdateTime": "2026-05-13T17:51:39Z", "message": "ReplicaSet \"dex-5b7c6cb59f\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-05-13T18:15:58Z", "lastUpdateTime": "2026-05-13T18:15:58Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 3, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "image-rbac-proxy-in-cluster-local:apps/Deployment:image-rbac-proxy/image-rbac-proxy", "deployment.kubernetes.io/revision": "3", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"image-rbac-proxy-in-cluster-local:apps/Deployment:image-rbac-proxy/image-rbac-proxy\"},\"name\":\"image-rbac-proxy\",\"namespace\":\"image-rbac-proxy\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"image-rbac-proxy\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"image-rbac-proxy\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"QUAY_USERNAME\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"quay-username\",\"name\":\"quay-robot-account\"}}},{\"name\":\"QUAY_PASSWORD\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"quay-password\",\"name\":\"quay-robot-account\"}}},{\"name\":\"BACKEND_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"backend-url\",\"name\":\"image-rbac-proxy\"}}},{\"name\":\"BACKEND_NAMESPACE\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"backend-namespace\",\"name\":\"image-rbac-proxy\"}}},{\"name\":\"CLUSTER_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"cluster-url\",\"name\":\"image-rbac-proxy\"}}},{\"name\":\"PROXY_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"proxy-url\",\"name\":\"image-rbac-proxy\"}}},{\"name\":\"MEMCACHE_SERVERS\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"memcache-servers\",\"name\":\"image-rbac-proxy\"}}},{\"name\":\"OAUTH_TOKEN\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"token\",\"name\":\"image-rbac-proxy-token\"}}},{\"name\":\"DEX_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dex-url\",\"name\":\"image-rbac-proxy\"}}},{\"name\":\"DEX_CLIENT_ID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"dex-client-id\",\"name\":\"image-rbac-proxy\"}}},{\"name\":\"DEX_CLIENT_SECRET\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"client-secret\",\"name\":\"image-proxy-client-secret\"}}}],\"image\":\"quay.io/konflux-ci/image-rbac-proxy:8fc718007abb984ee2f29acb860601f2bd1cdce6\",\"livenessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/_ping\",\"port\":4000,\"scheme\":\"HTTPS\"},\"initialDelaySeconds\":5,\"periodSeconds\":15,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"image-rbac-proxy\",\"ports\":[{\"containerPort\":4000,\"name\":\"https\"}],\"readinessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/_ping\",\"port\":4000,\"scheme\":\"HTTPS\"},\"initialDelaySeconds\":15,\"periodSeconds\":30,\"successThreshold\":1,\"timeoutSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"250m\",\"memory\":\"256Mi\"}},\"securityContext\":{\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true},\"volumeMounts\":[{\"mountPath\":\"/certs\",\"name\":\"tls\"},{\"mountPath\":\"/etc/ssl/certs\",\"name\":\"trusted-ca\",\"readOnly\":true}]},{\"args\":[\"-m\",\"64\"],\"image\":\"quay.io/kubearchive/memcached:1.6.39\",\"name\":\"memcache\",\"ports\":[{\"containerPort\":11211,\"name\":\"memcache\"}],\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"}},\"securityContext\":{\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true}}],\"volumes\":[{\"name\":\"tls\",\"secret\":{\"secretName\":\"proxy-tls\"}},{\"configMap\":{\"items\":[{\"key\":\"ca-bundle.crt\",\"path\":\"ca-bundle.crt\"}],\"name\":\"trusted-ca\",\"optional\":true},\"name\":\"trusted-ca\"}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:47:21Z", "generation": 3, "name": "image-rbac-proxy", "namespace": "image-rbac-proxy", "resourceVersion": "150190", "uid": "76015b96-19a5-46b1-819d-4427c1ac9d28" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "image-rbac-proxy" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/restartedAt": "2026-05-13T17:50:27Z" }, "creationTimestamp": null, "labels": { "app": "image-rbac-proxy" } }, "spec": { "containers": [ { "env": [ { "name": "QUAY_USERNAME", "valueFrom": { "secretKeyRef": { "key": "quay-username", "name": "quay-robot-account" } } }, { "name": "QUAY_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "quay-password", "name": "quay-robot-account" } } }, { "name": "BACKEND_URL", "valueFrom": { "configMapKeyRef": { "key": "backend-url", "name": "image-rbac-proxy" } } }, { "name": "BACKEND_NAMESPACE", "valueFrom": { "configMapKeyRef": { "key": "backend-namespace", "name": "image-rbac-proxy" } } }, { "name": "CLUSTER_URL", "valueFrom": { "configMapKeyRef": { "key": "cluster-url", "name": "image-rbac-proxy" } } }, { "name": "PROXY_URL", "valueFrom": { "configMapKeyRef": { "key": "proxy-url", "name": "image-rbac-proxy" } } }, { "name": "MEMCACHE_SERVERS", "valueFrom": { "configMapKeyRef": { "key": "memcache-servers", "name": "image-rbac-proxy" } } }, { "name": "OAUTH_TOKEN", "valueFrom": { "secretKeyRef": { "key": "token", "name": "image-rbac-proxy-token" } } }, { "name": "DEX_URL", "valueFrom": { "configMapKeyRef": { "key": "dex-url", "name": "image-rbac-proxy" } } }, { "name": "DEX_CLIENT_ID", "valueFrom": { "configMapKeyRef": { "key": "dex-client-id", "name": "image-rbac-proxy" } } }, { "name": "DEX_CLIENT_SECRET", "valueFrom": { "secretKeyRef": { "key": "client-secret", "name": "image-proxy-client-secret" } } } ], "image": "quay.io/konflux-ci/image-rbac-proxy:8fc718007abb984ee2f29acb860601f2bd1cdce6", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/_ping", "port": 4000, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "image-rbac-proxy", "ports": [ { "containerPort": 4000, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/_ping", "port": 4000, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "cpu": "500m", "memory": "512Mi" }, "requests": { "cpu": "250m", "memory": "256Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/certs", "name": "tls" }, { "mountPath": "/etc/ssl/certs", "name": "trusted-ca", "readOnly": true } ] }, { "args": [ "-m", "64" ], "image": "quay.io/kubearchive/memcached:1.6.39", "imagePullPolicy": "IfNotPresent", "name": "memcache", "ports": [ { "containerPort": 11211, "name": "memcache", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "200m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "128Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "secretName": "proxy-tls" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:48:22Z", "lastUpdateTime": "2026-05-13T16:48:22Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:21Z", "lastUpdateTime": "2026-05-13T17:50:58Z", "message": "ReplicaSet \"image-rbac-proxy-d966849c6\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 3, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "integration-in-cluster-local:apps/Deployment:integration-service/integration-service-controller-manager", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"integration-in-cluster-local:apps/Deployment:integration-service/integration-service-controller-manager\"},\"labels\":{\"control-plane\":\"controller-manager\"},\"name\":\"integration-service-controller-manager\",\"namespace\":\"integration-service\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"control-plane\":\"controller-manager\"}},\"template\":{\"metadata\":{\"annotations\":{\"kubectl.kubernetes.io/default-container\":\"manager\"},\"labels\":{\"control-plane\":\"controller-manager\"}},\"spec\":{\"containers\":[{\"args\":[\"--leader-elect=false\"],\"command\":[\"/manager\"],\"env\":[{\"name\":\"CONSOLE_NAME\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"CONSOLE_NAME\",\"name\":\"integration-config-h96k4ckh4c\",\"optional\":true}}},{\"name\":\"CONSOLE_URL\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"CONSOLE_URL\",\"name\":\"integration-config-h96k4ckh4c\",\"optional\":true}}},{\"name\":\"CONSOLE_URL_TASKLOG\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"CONSOLE_URL_TASKLOG\",\"name\":\"integration-config-h96k4ckh4c\",\"optional\":true}}},{\"name\":\"PIPELINE_TIMEOUT\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"PIPELINE_TIMEOUT\",\"name\":\"pipelinerun-options-g6875ct7d8\",\"optional\":true}}},{\"name\":\"TASKS_TIMEOUT\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"TASKS_TIMEOUT\",\"name\":\"pipelinerun-options-g6875ct7d8\",\"optional\":true}}},{\"name\":\"FINALLY_TIMEOUT\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"FINALLY_TIMEOUT\",\"name\":\"pipelinerun-options-g6875ct7d8\",\"optional\":true}}},{\"name\":\"INTEGRATION_NS\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"INTEGRATION_NS\",\"name\":\"integration-config-h96k4ckh4c\",\"optional\":true}}},{\"name\":\"PAC_SECRET\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"PAC_SECRET\",\"name\":\"integration-config-h96k4ckh4c\",\"optional\":true}}},{\"name\":\"GITHUBAPPLICATION_ID\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"GITHUBAPPLICATION_ID\",\"name\":\"integration-config-h96k4ckh4c\",\"optional\":true}}},{\"name\":\"GITHUBPRIVATE_KEY\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"GITHUBPRIVATE_KEY\",\"name\":\"integration-config-h96k4ckh4c\",\"optional\":true}}}],\"image\":\"quay.io/konflux-ci/integration-service:07e3f6374d1e62c0273d9e06fe84fa4c6c591f3e\",\"imagePullPolicy\":\"Always\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8081},\"initialDelaySeconds\":15,\"periodSeconds\":20},\"name\":\"manager\",\"ports\":[{\"containerPort\":9443,\"name\":\"webhook-server\",\"protocol\":\"TCP\"},{\"containerPort\":8081,\"name\":\"probes\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readyz\",\"port\":8081},\"initialDelaySeconds\":5,\"periodSeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"1Gi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"20Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true},\"volumeMounts\":[{\"mountPath\":\"/etc/pki/ca-trust/extracted/pem\",\"name\":\"trusted-ca\",\"readOnly\":true},{\"mountPath\":\"/tmp/k8s-webhook-server/serving-certs\",\"name\":\"cert\",\"readOnly\":true}]}],\"securityContext\":{\"runAsNonRoot\":true},\"serviceAccountName\":\"integration-service-controller-manager\",\"terminationGracePeriodSeconds\":10,\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"ca-bundle.crt\",\"path\":\"tls-ca-bundle.pem\"}],\"name\":\"trusted-ca-6ct58987ht\"},\"name\":\"trusted-ca\"},{\"name\":\"cert\",\"secret\":{\"defaultMode\":420,\"secretName\":\"webhook-server-cert\"}}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:47:55Z", "generation": 1, "labels": { "control-plane": "controller-manager" }, "name": "integration-service-controller-manager", "namespace": "integration-service", "resourceVersion": "35509", "uid": "35b2004c-da45-4ddb-8a21-479b3a133056" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "control-plane": "controller-manager" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager" } }, "spec": { "containers": [ { "args": [ "--leader-elect=false" ], "command": [ "/manager" ], "env": [ { "name": "CONSOLE_NAME", "valueFrom": { "configMapKeyRef": { "key": "CONSOLE_NAME", "name": "integration-config-h96k4ckh4c", "optional": true } } }, { "name": "CONSOLE_URL", "valueFrom": { "configMapKeyRef": { "key": "CONSOLE_URL", "name": "integration-config-h96k4ckh4c", "optional": true } } }, { "name": "CONSOLE_URL_TASKLOG", "valueFrom": { "configMapKeyRef": { "key": "CONSOLE_URL_TASKLOG", "name": "integration-config-h96k4ckh4c", "optional": true } } }, { "name": "PIPELINE_TIMEOUT", "valueFrom": { "configMapKeyRef": { "key": "PIPELINE_TIMEOUT", "name": "pipelinerun-options-g6875ct7d8", "optional": true } } }, { "name": "TASKS_TIMEOUT", "valueFrom": { "configMapKeyRef": { "key": "TASKS_TIMEOUT", "name": "pipelinerun-options-g6875ct7d8", "optional": true } } }, { "name": "FINALLY_TIMEOUT", "valueFrom": { "configMapKeyRef": { "key": "FINALLY_TIMEOUT", "name": "pipelinerun-options-g6875ct7d8", "optional": true } } }, { "name": "INTEGRATION_NS", "valueFrom": { "configMapKeyRef": { "key": "INTEGRATION_NS", "name": "integration-config-h96k4ckh4c", "optional": true } } }, { "name": "PAC_SECRET", "valueFrom": { "configMapKeyRef": { "key": "PAC_SECRET", "name": "integration-config-h96k4ckh4c", "optional": true } } }, { "name": "GITHUBAPPLICATION_ID", "valueFrom": { "configMapKeyRef": { "key": "GITHUBAPPLICATION_ID", "name": "integration-config-h96k4ckh4c", "optional": true } } }, { "name": "GITHUBPRIVATE_KEY", "valueFrom": { "configMapKeyRef": { "key": "GITHUBPRIVATE_KEY", "name": "integration-config-h96k4ckh4c", "optional": true } } } ], "image": "quay.io/konflux-ci/integration-service:07e3f6374d1e62c0273d9e06fe84fa4c6c591f3e", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" }, { "containerPort": 8081, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "1Gi" }, "requests": { "cpu": "100m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca", "readOnly": true }, { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "integration-service-controller-manager", "serviceAccountName": "integration-service-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht" }, "name": "trusted-ca" }, { "name": "cert", "secret": { "defaultMode": 420, "secretName": "webhook-server-cert" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:47:55Z", "lastUpdateTime": "2026-05-13T16:48:25Z", "message": "ReplicaSet \"integration-service-controller-manager-5c6cbdd477\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-05-13T16:50:55Z", "lastUpdateTime": "2026-05-13T16:50:55Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "knative-eventing-in-cluster-local:apps/Deployment:knative-eventing/eventing-controller", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"knative-eventing-in-cluster-local:apps/Deployment:knative-eventing/eventing-controller\"},\"labels\":{\"app.kubernetes.io/component\":\"eventing-controller\",\"app.kubernetes.io/name\":\"knative-eventing\",\"app.kubernetes.io/version\":\"1.16.7\",\"bindings.knative.dev/exclude\":\"true\",\"knative.dev/high-availability\":\"true\"},\"name\":\"eventing-controller\",\"namespace\":\"knative-eventing\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"eventing-controller\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"eventing-controller\",\"app.kubernetes.io/component\":\"eventing-controller\",\"app.kubernetes.io/name\":\"knative-eventing\",\"app.kubernetes.io/version\":\"1.16.7\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchLabels\":{\"app\":\"eventing-controller\"}},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"env\":[{\"name\":\"APISERVER_RA_IMAGE\",\"value\":\"quay.io/kubearchive/eventing-adapter:remove-sar\"},{\"name\":\"SYSTEM_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CONFIG_LOGGING_NAME\",\"value\":\"config-logging\"},{\"name\":\"CONFIG_OBSERVABILITY_NAME\",\"value\":\"config-observability\"},{\"name\":\"METRICS_DOMAIN\",\"value\":\"knative.dev/eventing\"},{\"name\":\"POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}}],\"image\":\"quay.io/kubearchive/eventing-controller:remove-sar\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/health\",\"port\":\"probes\",\"scheme\":\"HTTP\"},\"initialDelaySeconds\":20,\"periodSeconds\":10,\"timeoutSeconds\":5},\"name\":\"eventing-controller\",\"ports\":[{\"containerPort\":9090,\"name\":\"metrics\"},{\"containerPort\":8008,\"name\":\"profiling\"},{\"containerPort\":8080,\"name\":\"probes\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readiness\",\"port\":\"probes\",\"scheme\":\"HTTP\"},\"initialDelaySeconds\":20,\"periodSeconds\":10,\"timeoutSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"500Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"500Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"terminationMessagePolicy\":\"FallbackToLogsOnError\"}],\"enableServiceLinks\":false,\"serviceAccountName\":\"eventing-controller\"}}}}\n" }, "creationTimestamp": "2026-05-13T16:47:56Z", "generation": 1, "labels": { "app.kubernetes.io/component": "eventing-controller", "app.kubernetes.io/name": "knative-eventing", "app.kubernetes.io/version": "1.16.7", "bindings.knative.dev/exclude": "true", "knative.dev/high-availability": "true" }, "name": "eventing-controller", "namespace": "knative-eventing", "resourceVersion": "27783", "uid": "3cb28046-203b-47d1-a681-ca341bf6c30b" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "eventing-controller" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "eventing-controller", "app.kubernetes.io/component": "eventing-controller", "app.kubernetes.io/name": "knative-eventing", "app.kubernetes.io/version": "1.16.7" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app": "eventing-controller" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "APISERVER_RA_IMAGE", "value": "quay.io/kubearchive/eventing-adapter:remove-sar" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "METRICS_DOMAIN", "value": "knative.dev/eventing" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/kubearchive/eventing-controller:remove-sar", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 20, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "eventing-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 20, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "cpu": "200m", "memory": "500Mi" }, "requests": { "cpu": "200m", "memory": "500Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "eventing-controller", "serviceAccountName": "eventing-controller", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:48:26Z", "lastUpdateTime": "2026-05-13T16:48:26Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:56Z", "lastUpdateTime": "2026-05-13T16:48:26Z", "message": "ReplicaSet \"eventing-controller-779579b56\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "knative-eventing-in-cluster-local:apps/Deployment:knative-eventing/eventing-webhook", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"knative-eventing-in-cluster-local:apps/Deployment:knative-eventing/eventing-webhook\"},\"labels\":{\"app.kubernetes.io/component\":\"eventing-webhook\",\"app.kubernetes.io/name\":\"knative-eventing\",\"app.kubernetes.io/version\":\"1.16.7\",\"bindings.knative.dev/exclude\":\"true\"},\"name\":\"eventing-webhook\",\"namespace\":\"knative-eventing\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"eventing-webhook\",\"role\":\"eventing-webhook\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"eventing-webhook\",\"app.kubernetes.io/component\":\"eventing-webhook\",\"app.kubernetes.io/name\":\"knative-eventing\",\"app.kubernetes.io/version\":\"1.16.7\",\"role\":\"eventing-webhook\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchLabels\":{\"app\":\"eventing-webhook\"}},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"env\":[{\"name\":\"SYSTEM_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CONFIG_LOGGING_NAME\",\"value\":\"config-logging\"},{\"name\":\"METRICS_DOMAIN\",\"value\":\"knative.dev/eventing\"},{\"name\":\"WEBHOOK_NAME\",\"value\":\"eventing-webhook\"},{\"name\":\"WEBHOOK_PORT\",\"value\":\"8443\"},{\"name\":\"SINK_BINDING_SELECTION_MODE\",\"value\":\"exclusion\"},{\"name\":\"POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}}],\"image\":\"gcr.io/knative-releases/knative.dev/eventing/cmd/webhook@sha256:b904a052b34366a9ad8aba9ea040085e9332f87521324857ffc4bacb0c580d09\",\"livenessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"k-kubelet-probe\",\"value\":\"webhook\"}],\"port\":8443,\"scheme\":\"HTTPS\"},\"initialDelaySeconds\":120,\"periodSeconds\":1},\"name\":\"eventing-webhook\",\"ports\":[{\"containerPort\":8443,\"name\":\"https-webhook\"},{\"containerPort\":9090,\"name\":\"metrics\"},{\"containerPort\":8008,\"name\":\"profiling\"}],\"readinessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"k-kubelet-probe\",\"value\":\"webhook\"}],\"port\":8443,\"scheme\":\"HTTPS\"},\"periodSeconds\":1},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"200Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"50Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"terminationMessagePolicy\":\"FallbackToLogsOnError\"}],\"enableServiceLinks\":false,\"serviceAccountName\":\"eventing-webhook\",\"terminationGracePeriodSeconds\":300}}}}\n" }, "creationTimestamp": "2026-05-13T16:47:56Z", "generation": 1, "labels": { "app.kubernetes.io/component": "eventing-webhook", "app.kubernetes.io/name": "knative-eventing", "app.kubernetes.io/version": "1.16.7", "bindings.knative.dev/exclude": "true" }, "name": "eventing-webhook", "namespace": "knative-eventing", "resourceVersion": "82229", "uid": "ab9b6acf-7c32-4c3b-a8ca-758e968ae42f" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "eventing-webhook", "role": "eventing-webhook" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "eventing-webhook", "app.kubernetes.io/component": "eventing-webhook", "app.kubernetes.io/name": "knative-eventing", "app.kubernetes.io/version": "1.16.7", "role": "eventing-webhook" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app": "eventing-webhook" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "METRICS_DOMAIN", "value": "knative.dev/eventing" }, { "name": "WEBHOOK_NAME", "value": "eventing-webhook" }, { "name": "WEBHOOK_PORT", "value": "8443" }, { "name": "SINK_BINDING_SELECTION_MODE", "value": "exclusion" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "gcr.io/knative-releases/knative.dev/eventing/cmd/webhook@sha256:b904a052b34366a9ad8aba9ea040085e9332f87521324857ffc4bacb0c580d09", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "httpHeaders": [ { "name": "k-kubelet-probe", "value": "webhook" } ], "path": "/", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 120, "periodSeconds": 1, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "eventing-webhook", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" }, { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "httpHeaders": [ { "name": "k-kubelet-probe", "value": "webhook" } ], "path": "/", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 1, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "200m", "memory": "200Mi" }, "requests": { "cpu": "100m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "eventing-webhook", "serviceAccountName": "eventing-webhook", "terminationGracePeriodSeconds": 300 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:47:56Z", "lastUpdateTime": "2026-05-13T16:48:03Z", "message": "ReplicaSet \"eventing-webhook-779c8ffc7c\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-05-13T17:14:04Z", "lastUpdateTime": "2026-05-13T17:14:04Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "knative-eventing-in-cluster-local:apps/Deployment:knative-eventing/imc-controller", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"knative-eventing-in-cluster-local:apps/Deployment:knative-eventing/imc-controller\"},\"labels\":{\"app.kubernetes.io/component\":\"imc-controller\",\"app.kubernetes.io/name\":\"knative-eventing\",\"app.kubernetes.io/version\":\"1.16.7\",\"bindings.knative.dev/exclude\":\"true\",\"knative.dev/high-availability\":\"true\"},\"name\":\"imc-controller\",\"namespace\":\"knative-eventing\"},\"spec\":{\"selector\":{\"matchLabels\":{\"messaging.knative.dev/channel\":\"in-memory-channel\",\"messaging.knative.dev/role\":\"controller\"}},\"template\":{\"metadata\":{\"labels\":{\"app.kubernetes.io/component\":\"imc-controller\",\"app.kubernetes.io/name\":\"knative-eventing\",\"app.kubernetes.io/version\":\"1.16.7\",\"messaging.knative.dev/channel\":\"in-memory-channel\",\"messaging.knative.dev/role\":\"controller\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchLabels\":{\"messaging.knative.dev/channel\":\"in-memory-channel\",\"messaging.knative.dev/role\":\"controller\"}},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"env\":[{\"name\":\"WEBHOOK_NAME\",\"value\":\"inmemorychannel-webhook\"},{\"name\":\"WEBHOOK_PORT\",\"value\":\"8443\"},{\"name\":\"CONFIG_LOGGING_NAME\",\"value\":\"config-logging\"},{\"name\":\"CONFIG_OBSERVABILITY_NAME\",\"value\":\"config-observability\"},{\"name\":\"METRICS_DOMAIN\",\"value\":\"knative.dev/inmemorychannel-controller\"},{\"name\":\"SYSTEM_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"DISPATCHER_IMAGE\",\"value\":\"gcr.io/knative-releases/knative.dev/eventing/cmd/in_memory/channel_dispatcher@sha256:5a1eccadf43ae80b1bb02361da0018e0748fc3a89f0cbbf5395a91760937ce2f\"},{\"name\":\"POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}}],\"image\":\"gcr.io/knative-releases/knative.dev/eventing/cmd/in_memory/channel_controller@sha256:62c0aaf048b327b5a2b263c15d21147fb099293c8ea7bbe369e3bfe97c0865da\",\"livenessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"k-kubelet-probe\",\"value\":\"webhook\"}],\"port\":8443,\"scheme\":\"HTTPS\"},\"initialDelaySeconds\":120,\"periodSeconds\":1},\"name\":\"controller\",\"ports\":[{\"containerPort\":9090,\"name\":\"metrics\"},{\"containerPort\":8008,\"name\":\"profiling\"},{\"containerPort\":8443,\"name\":\"https-webhook\"}],\"readinessProbe\":{\"httpGet\":{\"httpHeaders\":[{\"name\":\"k-kubelet-probe\",\"value\":\"webhook\"}],\"port\":8443,\"scheme\":\"HTTPS\"},\"periodSeconds\":1},\"resources\":{\"limits\":{\"cpu\":\"150m\",\"memory\":\"1Gi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"1Gi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}}}],\"enableServiceLinks\":false,\"serviceAccountName\":\"imc-controller\",\"terminationGracePeriodSeconds\":300}}}}\n" }, "creationTimestamp": "2026-05-13T16:47:56Z", "generation": 1, "labels": { "app.kubernetes.io/component": "imc-controller", "app.kubernetes.io/name": "knative-eventing", "app.kubernetes.io/version": "1.16.7", "bindings.knative.dev/exclude": "true", "knative.dev/high-availability": "true" }, "name": "imc-controller", "namespace": "knative-eventing", "resourceVersion": "26193", "uid": "b3b0c0d5-8016-4123-a53e-6aa30c4c36d0" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "messaging.knative.dev/channel": "in-memory-channel", "messaging.knative.dev/role": "controller" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "imc-controller", "app.kubernetes.io/name": "knative-eventing", "app.kubernetes.io/version": "1.16.7", "messaging.knative.dev/channel": "in-memory-channel", "messaging.knative.dev/role": "controller" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "messaging.knative.dev/channel": "in-memory-channel", "messaging.knative.dev/role": "controller" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "WEBHOOK_NAME", "value": "inmemorychannel-webhook" }, { "name": "WEBHOOK_PORT", "value": "8443" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "METRICS_DOMAIN", "value": "knative.dev/inmemorychannel-controller" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "DISPATCHER_IMAGE", "value": "gcr.io/knative-releases/knative.dev/eventing/cmd/in_memory/channel_dispatcher@sha256:5a1eccadf43ae80b1bb02361da0018e0748fc3a89f0cbbf5395a91760937ce2f" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "gcr.io/knative-releases/knative.dev/eventing/cmd/in_memory/channel_controller@sha256:62c0aaf048b327b5a2b263c15d21147fb099293c8ea7bbe369e3bfe97c0865da", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "httpHeaders": [ { "name": "k-kubelet-probe", "value": "webhook" } ], "path": "/", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 120, "periodSeconds": 1, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "httpHeaders": [ { "name": "k-kubelet-probe", "value": "webhook" } ], "path": "/", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 1, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "150m", "memory": "1Gi" }, "requests": { "cpu": "100m", "memory": "1Gi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "imc-controller", "serviceAccountName": "imc-controller", "terminationGracePeriodSeconds": 300 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:48:00Z", "lastUpdateTime": "2026-05-13T16:48:00Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:56Z", "lastUpdateTime": "2026-05-13T16:48:00Z", "message": "ReplicaSet \"imc-controller-64cd67c879\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "knative-eventing-in-cluster-local:apps/Deployment:knative-eventing/imc-dispatcher", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"knative-eventing-in-cluster-local:apps/Deployment:knative-eventing/imc-dispatcher\"},\"labels\":{\"app.kubernetes.io/component\":\"imc-dispatcher\",\"app.kubernetes.io/name\":\"knative-eventing\",\"app.kubernetes.io/version\":\"1.16.7\",\"bindings.knative.dev/exclude\":\"true\",\"knative.dev/high-availability\":\"true\"},\"name\":\"imc-dispatcher\",\"namespace\":\"knative-eventing\"},\"spec\":{\"selector\":{\"matchLabels\":{\"messaging.knative.dev/channel\":\"in-memory-channel\",\"messaging.knative.dev/role\":\"dispatcher\"}},\"template\":{\"metadata\":{\"labels\":{\"app.kubernetes.io/component\":\"imc-dispatcher\",\"app.kubernetes.io/name\":\"knative-eventing\",\"app.kubernetes.io/version\":\"1.16.7\",\"messaging.knative.dev/channel\":\"in-memory-channel\",\"messaging.knative.dev/role\":\"dispatcher\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchLabels\":{\"messaging.knative.dev/channel\":\"in-memory-channel\",\"messaging.knative.dev/role\":\"dispatcher\"}},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"env\":[{\"name\":\"CONFIG_LOGGING_NAME\",\"value\":\"config-logging\"},{\"name\":\"CONFIG_OBSERVABILITY_NAME\",\"value\":\"config-observability\"},{\"name\":\"METRICS_DOMAIN\",\"value\":\"knative.dev/inmemorychannel-dispatcher\"},{\"name\":\"SYSTEM_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}},{\"name\":\"CONTAINER_NAME\",\"value\":\"dispatcher\"},{\"name\":\"MAX_IDLE_CONNS\",\"value\":\"1000\"},{\"name\":\"MAX_IDLE_CONNS_PER_HOST\",\"value\":\"1000\"}],\"image\":\"gcr.io/knative-releases/knative.dev/eventing/cmd/in_memory/channel_dispatcher@sha256:5a1eccadf43ae80b1bb02361da0018e0748fc3a89f0cbbf5395a91760937ce2f\",\"livenessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":5,\"periodSeconds\":2,\"successThreshold\":1,\"timeoutSeconds\":1},\"name\":\"dispatcher\",\"ports\":[{\"containerPort\":8080,\"name\":\"http\",\"protocol\":\"TCP\"},{\"containerPort\":8443,\"name\":\"https\",\"protocol\":\"TCP\"},{\"containerPort\":9090,\"name\":\"metrics\"}],\"readinessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTP\"},\"periodSeconds\":2,\"successThreshold\":1,\"timeoutSeconds\":1},\"resources\":{\"limits\":{\"cpu\":\"150m\",\"memory\":\"200Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}}}],\"enableServiceLinks\":false,\"serviceAccountName\":\"imc-dispatcher\"}}}}\n" }, "creationTimestamp": "2026-05-13T16:47:56Z", "generation": 1, "labels": { "app.kubernetes.io/component": "imc-dispatcher", "app.kubernetes.io/name": "knative-eventing", "app.kubernetes.io/version": "1.16.7", "bindings.knative.dev/exclude": "true", "knative.dev/high-availability": "true" }, "name": "imc-dispatcher", "namespace": "knative-eventing", "resourceVersion": "26481", "uid": "0411247d-a486-4ebc-8a7a-2e0941972c6d" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "messaging.knative.dev/channel": "in-memory-channel", "messaging.knative.dev/role": "dispatcher" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "imc-dispatcher", "app.kubernetes.io/name": "knative-eventing", "app.kubernetes.io/version": "1.16.7", "messaging.knative.dev/channel": "in-memory-channel", "messaging.knative.dev/role": "dispatcher" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "messaging.knative.dev/channel": "in-memory-channel", "messaging.knative.dev/role": "dispatcher" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "METRICS_DOMAIN", "value": "knative.dev/inmemorychannel-dispatcher" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "CONTAINER_NAME", "value": "dispatcher" }, { "name": "MAX_IDLE_CONNS", "value": "1000" }, { "name": "MAX_IDLE_CONNS_PER_HOST", "value": "1000" } ], "image": "gcr.io/knative-releases/knative.dev/eventing/cmd/in_memory/channel_dispatcher@sha256:5a1eccadf43ae80b1bb02361da0018e0748fc3a89f0cbbf5395a91760937ce2f", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 2, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "dispatcher", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" }, { "containerPort": 8443, "name": "https", "protocol": "TCP" }, { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 2, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "150m", "memory": "200Mi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "imc-dispatcher", "serviceAccountName": "imc-dispatcher", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:48:03Z", "lastUpdateTime": "2026-05-13T16:48:03Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:56Z", "lastUpdateTime": "2026-05-13T16:48:03Z", "message": "ReplicaSet \"imc-dispatcher-65fd79f75f\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "knative-eventing-in-cluster-local:apps/Deployment:knative-eventing/job-sink", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"knative-eventing-in-cluster-local:apps/Deployment:knative-eventing/job-sink\"},\"labels\":{\"app.kubernetes.io/component\":\"job-sink\",\"app.kubernetes.io/name\":\"knative-eventing\",\"app.kubernetes.io/version\":\"1.16.7\"},\"name\":\"job-sink\",\"namespace\":\"knative-eventing\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"sinks.knative.dev/sink\":\"job-sink\"}},\"template\":{\"metadata\":{\"labels\":{\"app.kubernetes.io/component\":\"job-sink\",\"app.kubernetes.io/name\":\"knative-eventing\",\"app.kubernetes.io/version\":\"1.16.7\",\"sinks.knative.dev/sink\":\"job-sink\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchLabels\":{\"sinks.knative.dev/sink\":\"job-sink\"}},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"env\":[{\"name\":\"SYSTEM_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"apiVersion\":\"v1\",\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"apiVersion\":\"v1\",\"fieldPath\":\"metadata.name\"}}},{\"name\":\"CONTAINER_NAME\",\"value\":\"job-sink\"},{\"name\":\"CONFIG_LOGGING_NAME\",\"value\":\"config-logging\"},{\"name\":\"CONFIG_OBSERVABILITY_NAME\",\"value\":\"config-observability\"},{\"name\":\"METRICS_DOMAIN\",\"value\":\"knative.dev/internal/eventing\"},{\"name\":\"INGRESS_PORT\",\"value\":\"8080\"},{\"name\":\"INGRESS_PORT_HTTPS\",\"value\":\"8443\"}],\"image\":\"gcr.io/knative-releases/knative.dev/eventing/cmd/jobsink@sha256:936332d6b61a407a69f235d178e454088ebf1828325da7901a967848b46af18a\",\"livenessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":5,\"periodSeconds\":2,\"successThreshold\":1,\"timeoutSeconds\":1},\"name\":\"job-sink\",\"ports\":[{\"containerPort\":8080,\"name\":\"http\",\"protocol\":\"TCP\"},{\"containerPort\":8443,\"name\":\"https\",\"protocol\":\"TCP\"},{\"containerPort\":9092,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTP\"},\"periodSeconds\":2,\"successThreshold\":1,\"timeoutSeconds\":1},\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"2048Mi\"},\"requests\":{\"cpu\":\"125m\",\"memory\":\"64Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"terminationMessagePath\":\"/dev/termination-log\",\"terminationMessagePolicy\":\"FallbackToLogsOnError\"}],\"enableServiceLinks\":false,\"serviceAccountName\":\"job-sink\"}}}}\n" }, "creationTimestamp": "2026-05-13T16:47:56Z", "generation": 1, "labels": { "app.kubernetes.io/component": "job-sink", "app.kubernetes.io/name": "knative-eventing", "app.kubernetes.io/version": "1.16.7" }, "name": "job-sink", "namespace": "knative-eventing", "resourceVersion": "26488", "uid": "2f27b11e-e1e9-434f-a389-8b1d472f4034" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "sinks.knative.dev/sink": "job-sink" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "job-sink", "app.kubernetes.io/name": "knative-eventing", "app.kubernetes.io/version": "1.16.7", "sinks.knative.dev/sink": "job-sink" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "sinks.knative.dev/sink": "job-sink" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "CONTAINER_NAME", "value": "job-sink" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "METRICS_DOMAIN", "value": "knative.dev/internal/eventing" }, { "name": "INGRESS_PORT", "value": "8080" }, { "name": "INGRESS_PORT_HTTPS", "value": "8443" } ], "image": "gcr.io/knative-releases/knative.dev/eventing/cmd/jobsink@sha256:936332d6b61a407a69f235d178e454088ebf1828325da7901a967848b46af18a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 2, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "job-sink", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" }, { "containerPort": 8443, "name": "https", "protocol": "TCP" }, { "containerPort": 9092, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 2, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "2Gi" }, "requests": { "cpu": "125m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "job-sink", "serviceAccountName": "job-sink", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:48:03Z", "lastUpdateTime": "2026-05-13T16:48:03Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:56Z", "lastUpdateTime": "2026-05-13T16:48:03Z", "message": "ReplicaSet \"job-sink-656f7ff7bc\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "knative-eventing-in-cluster-local:apps/Deployment:knative-eventing/mt-broker-controller", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/unset-memory-requirements": "\"Startup traverses all the cluster. Its a known problem, being solved on upstream. See https://github.com/knative/eventing/pull/8418\"\n", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"knative-eventing-in-cluster-local:apps/Deployment:knative-eventing/mt-broker-controller\",\"ignore-check.kube-linter.io/unset-memory-requirements\":\"\\\"Startup traverses all the cluster. Its a known problem, being solved on upstream. See https://github.com/knative/eventing/pull/8418\\\"\\n\"},\"labels\":{\"app.kubernetes.io/component\":\"mt-broker-controller\",\"app.kubernetes.io/name\":\"knative-eventing\",\"app.kubernetes.io/version\":\"1.16.7\",\"bindings.knative.dev/exclude\":\"true\"},\"name\":\"mt-broker-controller\",\"namespace\":\"knative-eventing\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"mt-broker-controller\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"mt-broker-controller\",\"app.kubernetes.io/component\":\"broker-controller\",\"app.kubernetes.io/name\":\"knative-eventing\",\"app.kubernetes.io/version\":\"1.16.7\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchLabels\":{\"app\":\"mt-broker-controller\"}},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"env\":[{\"name\":\"SYSTEM_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CONFIG_LOGGING_NAME\",\"value\":\"config-logging\"},{\"name\":\"CONFIG_OBSERVABILITY_NAME\",\"value\":\"config-observability\"},{\"name\":\"METRICS_DOMAIN\",\"value\":\"knative.dev/eventing\"},{\"name\":\"POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}}],\"image\":\"gcr.io/knative-releases/knative.dev/eventing/cmd/mtchannel_broker@sha256:2a079941b5d4f235190928d169071d9bd2398c456dd236d89dc0e9855f2e321d\",\"name\":\"mt-broker-controller\",\"ports\":[{\"containerPort\":9090,\"name\":\"metrics\"},{\"containerPort\":8008,\"name\":\"profiling\"}],\"resources\":{\"limits\":{\"cpu\":\"150m\"},\"requests\":{\"cpu\":\"150m\",\"memory\":\"400Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"terminationMessagePolicy\":\"FallbackToLogsOnError\"}],\"enableServiceLinks\":false,\"serviceAccountName\":\"eventing-controller\"}}}}\n" }, "creationTimestamp": "2026-05-13T16:47:56Z", "generation": 1, "labels": { "app.kubernetes.io/component": "mt-broker-controller", "app.kubernetes.io/name": "knative-eventing", "app.kubernetes.io/version": "1.16.7", "bindings.knative.dev/exclude": "true" }, "name": "mt-broker-controller", "namespace": "knative-eventing", "resourceVersion": "26154", "uid": "a8013c48-7d31-427e-a0c1-bb31134d8cb3" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "mt-broker-controller" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "mt-broker-controller", "app.kubernetes.io/component": "broker-controller", "app.kubernetes.io/name": "knative-eventing", "app.kubernetes.io/version": "1.16.7" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app": "mt-broker-controller" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "METRICS_DOMAIN", "value": "knative.dev/eventing" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "gcr.io/knative-releases/knative.dev/eventing/cmd/mtchannel_broker@sha256:2a079941b5d4f235190928d169071d9bd2398c456dd236d89dc0e9855f2e321d", "imagePullPolicy": "IfNotPresent", "name": "mt-broker-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "150m" }, "requests": { "cpu": "150m", "memory": "400Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "eventing-controller", "serviceAccountName": "eventing-controller", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:48:00Z", "lastUpdateTime": "2026-05-13T16:48:00Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:56Z", "lastUpdateTime": "2026-05-13T16:48:00Z", "message": "ReplicaSet \"mt-broker-controller-6cc85b5cb5\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "knative-eventing-in-cluster-local:apps/Deployment:knative-eventing/mt-broker-filter", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"knative-eventing-in-cluster-local:apps/Deployment:knative-eventing/mt-broker-filter\"},\"labels\":{\"app.kubernetes.io/component\":\"broker-filter\",\"app.kubernetes.io/name\":\"knative-eventing\",\"app.kubernetes.io/version\":\"1.16.7\",\"bindings.knative.dev/exclude\":\"true\"},\"name\":\"mt-broker-filter\",\"namespace\":\"knative-eventing\"},\"spec\":{\"selector\":{\"matchLabels\":{\"eventing.knative.dev/brokerRole\":\"filter\"}},\"template\":{\"metadata\":{\"labels\":{\"app.kubernetes.io/component\":\"broker-filter\",\"app.kubernetes.io/name\":\"knative-eventing\",\"app.kubernetes.io/version\":\"1.16.7\",\"eventing.knative.dev/brokerRole\":\"filter\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"SYSTEM_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"apiVersion\":\"v1\",\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"apiVersion\":\"v1\",\"fieldPath\":\"metadata.name\"}}},{\"name\":\"CONTAINER_NAME\",\"value\":\"filter\"},{\"name\":\"CONFIG_LOGGING_NAME\",\"value\":\"config-logging\"},{\"name\":\"CONFIG_OBSERVABILITY_NAME\",\"value\":\"config-observability\"},{\"name\":\"METRICS_DOMAIN\",\"value\":\"knative.dev/internal/eventing\"},{\"name\":\"FILTER_PORT\",\"value\":\"8080\"},{\"name\":\"FILTER_PORT_HTTPS\",\"value\":\"8443\"}],\"image\":\"gcr.io/knative-releases/knative.dev/eventing/cmd/broker/filter@sha256:484c6f41e19485725b036fe85c30d47f73d5d5f29d42603806e384805a40982d\",\"livenessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":5,\"periodSeconds\":2,\"successThreshold\":1,\"timeoutSeconds\":1},\"name\":\"filter\",\"ports\":[{\"containerPort\":8080,\"name\":\"http\",\"protocol\":\"TCP\"},{\"containerPort\":8443,\"name\":\"https\",\"protocol\":\"TCP\"},{\"containerPort\":9092,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTP\"},\"periodSeconds\":2,\"successThreshold\":1,\"timeoutSeconds\":1},\"resources\":{\"limits\":{\"cpu\":\"150m\",\"memory\":\"200Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"terminationMessagePath\":\"/dev/termination-log\",\"terminationMessagePolicy\":\"FallbackToLogsOnError\"}],\"enableServiceLinks\":false,\"serviceAccountName\":\"mt-broker-filter\"}}}}\n" }, "creationTimestamp": "2026-05-13T16:47:56Z", "generation": 1, "labels": { "app.kubernetes.io/component": "broker-filter", "app.kubernetes.io/name": "knative-eventing", "app.kubernetes.io/version": "1.16.7", "bindings.knative.dev/exclude": "true" }, "name": "mt-broker-filter", "namespace": "knative-eventing", "resourceVersion": "26477", "uid": "4de90f8d-b9dd-42bd-9bdc-86e2feb87489" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "eventing.knative.dev/brokerRole": "filter" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "broker-filter", "app.kubernetes.io/name": "knative-eventing", "app.kubernetes.io/version": "1.16.7", "eventing.knative.dev/brokerRole": "filter" } }, "spec": { "containers": [ { "env": [ { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "CONTAINER_NAME", "value": "filter" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "METRICS_DOMAIN", "value": "knative.dev/internal/eventing" }, { "name": "FILTER_PORT", "value": "8080" }, { "name": "FILTER_PORT_HTTPS", "value": "8443" } ], "image": "gcr.io/knative-releases/knative.dev/eventing/cmd/broker/filter@sha256:484c6f41e19485725b036fe85c30d47f73d5d5f29d42603806e384805a40982d", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 2, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "filter", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" }, { "containerPort": 8443, "name": "https", "protocol": "TCP" }, { "containerPort": 9092, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 2, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "150m", "memory": "200Mi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "mt-broker-filter", "serviceAccountName": "mt-broker-filter", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:48:03Z", "lastUpdateTime": "2026-05-13T16:48:03Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:56Z", "lastUpdateTime": "2026-05-13T16:48:03Z", "message": "ReplicaSet \"mt-broker-filter-bfc9bd7f6\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "knative-eventing-in-cluster-local:apps/Deployment:knative-eventing/mt-broker-ingress", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"knative-eventing-in-cluster-local:apps/Deployment:knative-eventing/mt-broker-ingress\"},\"labels\":{\"app.kubernetes.io/component\":\"broker-ingress\",\"app.kubernetes.io/name\":\"knative-eventing\",\"app.kubernetes.io/version\":\"1.16.7\",\"bindings.knative.dev/exclude\":\"true\"},\"name\":\"mt-broker-ingress\",\"namespace\":\"knative-eventing\"},\"spec\":{\"selector\":{\"matchLabels\":{\"eventing.knative.dev/brokerRole\":\"ingress\"}},\"template\":{\"metadata\":{\"labels\":{\"app.kubernetes.io/component\":\"broker-ingress\",\"app.kubernetes.io/name\":\"knative-eventing\",\"app.kubernetes.io/version\":\"1.16.7\",\"eventing.knative.dev/brokerRole\":\"ingress\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"SYSTEM_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"apiVersion\":\"v1\",\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"apiVersion\":\"v1\",\"fieldPath\":\"metadata.name\"}}},{\"name\":\"CONTAINER_NAME\",\"value\":\"ingress\"},{\"name\":\"CONFIG_LOGGING_NAME\",\"value\":\"config-logging\"},{\"name\":\"CONFIG_OBSERVABILITY_NAME\",\"value\":\"config-observability\"},{\"name\":\"METRICS_DOMAIN\",\"value\":\"knative.dev/internal/eventing\"},{\"name\":\"INGRESS_PORT\",\"value\":\"8080\"},{\"name\":\"INGRESS_PORT_HTTPS\",\"value\":\"8443\"}],\"image\":\"gcr.io/knative-releases/knative.dev/eventing/cmd/broker/ingress@sha256:b486f702b9b45a1b889b6d5ec04a167677ed5a582e7e6c7e6f100f1b47caace3\",\"livenessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTP\"},\"initialDelaySeconds\":5,\"periodSeconds\":2,\"successThreshold\":1,\"timeoutSeconds\":1},\"name\":\"ingress\",\"ports\":[{\"containerPort\":8080,\"name\":\"http\",\"protocol\":\"TCP\"},{\"containerPort\":8443,\"name\":\"https\",\"protocol\":\"TCP\"},{\"containerPort\":9092,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTP\"},\"periodSeconds\":2,\"successThreshold\":1,\"timeoutSeconds\":1},\"resources\":{\"limits\":{\"cpu\":\"150m\",\"memory\":\"200Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"terminationMessagePath\":\"/dev/termination-log\",\"terminationMessagePolicy\":\"FallbackToLogsOnError\"}],\"enableServiceLinks\":false,\"serviceAccountName\":\"mt-broker-ingress\"}}}}\n" }, "creationTimestamp": "2026-05-13T16:47:56Z", "generation": 1, "labels": { "app.kubernetes.io/component": "broker-ingress", "app.kubernetes.io/name": "knative-eventing", "app.kubernetes.io/version": "1.16.7", "bindings.knative.dev/exclude": "true" }, "name": "mt-broker-ingress", "namespace": "knative-eventing", "resourceVersion": "26132", "uid": "f2bdc02c-7f9a-4d95-8e3b-8da0b3709622" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "eventing.knative.dev/brokerRole": "ingress" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "broker-ingress", "app.kubernetes.io/name": "knative-eventing", "app.kubernetes.io/version": "1.16.7", "eventing.knative.dev/brokerRole": "ingress" } }, "spec": { "containers": [ { "env": [ { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "CONTAINER_NAME", "value": "ingress" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "METRICS_DOMAIN", "value": "knative.dev/internal/eventing" }, { "name": "INGRESS_PORT", "value": "8080" }, { "name": "INGRESS_PORT_HTTPS", "value": "8443" } ], "image": "gcr.io/knative-releases/knative.dev/eventing/cmd/broker/ingress@sha256:b486f702b9b45a1b889b6d5ec04a167677ed5a582e7e6c7e6f100f1b47caace3", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 2, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "ingress", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" }, { "containerPort": 8443, "name": "https", "protocol": "TCP" }, { "containerPort": 9092, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 2, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "150m", "memory": "200Mi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "mt-broker-ingress", "serviceAccountName": "mt-broker-ingress", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:48:00Z", "lastUpdateTime": "2026-05-13T16:48:00Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:56Z", "lastUpdateTime": "2026-05-13T16:48:00Z", "message": "ReplicaSet \"mt-broker-ingress-75c8c58675\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "knative-eventing-in-cluster-local:apps/Deployment:knative-eventing/pingsource-mt-adapter", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"knative-eventing-in-cluster-local:apps/Deployment:knative-eventing/pingsource-mt-adapter\"},\"labels\":{\"app.kubernetes.io/component\":\"pingsource-mt-adapter\",\"app.kubernetes.io/name\":\"knative-eventing\",\"app.kubernetes.io/version\":\"1.16.7\",\"bindings.knative.dev/exclude\":\"true\"},\"name\":\"pingsource-mt-adapter\",\"namespace\":\"knative-eventing\"},\"spec\":{\"replicas\":0,\"selector\":{\"matchLabels\":{\"eventing.knative.dev/source\":\"ping-source-controller\",\"sources.knative.dev/role\":\"adapter\"}},\"template\":{\"metadata\":{\"labels\":{\"app.kubernetes.io/component\":\"pingsource-mt-adapter\",\"app.kubernetes.io/name\":\"knative-eventing\",\"app.kubernetes.io/version\":\"1.16.7\",\"eventing.knative.dev/source\":\"ping-source-controller\",\"sources.knative.dev/role\":\"adapter\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchLabels\":{\"eventing.knative.dev/source\":\"ping-source-controller\",\"sources.knative.dev/role\":\"adapter\"}},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"env\":[{\"name\":\"SYSTEM_NAMESPACE\",\"value\":\"\",\"valueFrom\":{\"fieldRef\":{\"apiVersion\":\"v1\",\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"NAMESPACE\",\"value\":\"\",\"valueFrom\":{\"fieldRef\":{\"apiVersion\":\"v1\",\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"K_METRICS_CONFIG\",\"value\":\"\"},{\"name\":\"K_LOGGING_CONFIG\",\"value\":\"\"},{\"name\":\"K_LEADER_ELECTION_CONFIG\",\"value\":\"\"},{\"name\":\"K_NO_SHUTDOWN_AFTER\",\"value\":\"\"},{\"name\":\"K_SINK_TIMEOUT\",\"value\":\"-1\"},{\"name\":\"POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}}],\"image\":\"gcr.io/knative-releases/knative.dev/eventing/cmd/mtping@sha256:4c56cef6351b48d78129ff01779e7472e78186b3186b7733fcf751a5c25802be\",\"name\":\"dispatcher\",\"ports\":[{\"containerPort\":9090,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"limits\":{\"cpu\":\"1000m\",\"memory\":\"2048Mi\"},\"requests\":{\"cpu\":\"125m\",\"memory\":\"64Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}}}],\"enableServiceLinks\":false,\"serviceAccountName\":\"pingsource-mt-adapter\"}}}}\n" }, "creationTimestamp": "2026-05-13T16:47:56Z", "generation": 1, "labels": { "app.kubernetes.io/component": "pingsource-mt-adapter", "app.kubernetes.io/name": "knative-eventing", "app.kubernetes.io/version": "1.16.7", "bindings.knative.dev/exclude": "true" }, "name": "pingsource-mt-adapter", "namespace": "knative-eventing", "resourceVersion": "25565", "uid": "ebd3d207-07df-47ad-8bfa-c4caa4423178" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 0, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "eventing.knative.dev/source": "ping-source-controller", "sources.knative.dev/role": "adapter" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "pingsource-mt-adapter", "app.kubernetes.io/name": "knative-eventing", "app.kubernetes.io/version": "1.16.7", "eventing.knative.dev/source": "ping-source-controller", "sources.knative.dev/role": "adapter" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "eventing.knative.dev/source": "ping-source-controller", "sources.knative.dev/role": "adapter" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "K_METRICS_CONFIG" }, { "name": "K_LOGGING_CONFIG" }, { "name": "K_LEADER_ELECTION_CONFIG" }, { "name": "K_NO_SHUTDOWN_AFTER" }, { "name": "K_SINK_TIMEOUT", "value": "-1" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "gcr.io/knative-releases/knative.dev/eventing/cmd/mtping@sha256:4c56cef6351b48d78129ff01779e7472e78186b3186b7733fcf751a5c25802be", "imagePullPolicy": "IfNotPresent", "name": "dispatcher", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "1", "memory": "2Gi" }, "requests": { "cpu": "125m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "pingsource-mt-adapter", "serviceAccountName": "pingsource-mt-adapter", "terminationGracePeriodSeconds": 30 } } }, "status": { "conditions": [ { "lastTransitionTime": "2026-05-13T16:47:56Z", "lastUpdateTime": "2026-05-13T16:47:56Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:56Z", "lastUpdateTime": "2026-05-13T16:47:56Z", "message": "ReplicaSet \"pingsource-mt-adapter-7689f6f9d\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "disaster-recovery-in-cluster-local:triggers.tekton.dev/EventListener:konflux-disaster-recovery/cron-listener", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:53:10Z", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "EventListener", "app.kubernetes.io/part-of": "Triggers", "eventlistener": "cron-listener" }, "name": "el-cron-listener", "namespace": "konflux-disaster-recovery", "ownerReferences": [ { "apiVersion": "triggers.tekton.dev/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "EventListener", "name": "cron-listener", "uid": "26d5b768-9536-4d71-839e-dbcdd757e2d7" } ], "resourceVersion": "39844", "uid": "7be15144-d042-4302-818c-ea893f412bbb" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/managed-by": "EventListener", "app.kubernetes.io/part-of": "Triggers", "eventlistener": "cron-listener" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/managed-by": "EventListener", "app.kubernetes.io/part-of": "Triggers", "eventlistener": "cron-listener" } }, "spec": { "containers": [ { "args": [ "--el-name=cron-listener", "--el-namespace=konflux-disaster-recovery", "--port=8080", "--readtimeout=5", "--writetimeout=40", "--idletimeout=120", "--timeouthandler=30", "--httpclient-readtimeout=30", "--httpclient-keep-alive=30", "--httpclient-tlshandshaketimeout=10", "--httpclient-responseheadertimeout=10", "--httpclient-expectcontinuetimeout=1", "--is-multi-ns=false", "--payload-validation=true", "--cloudevent-uri=", "--tls-cert=", "--tls-key=" ], "env": [ { "name": "K_LOGGING_CONFIG", "value": "{\"zap-logger-config\":\"{\\n \\\"level\\\": \\\"info\\\",\\n \\\"development\\\": false,\\n \\\"sampling\\\": {\\n \\\"initial\\\": 100,\\n \\\"thereafter\\\": 100\\n },\\n \\\"outputPaths\\\": [\\\"stdout\\\"],\\n \\\"errorOutputPaths\\\": [\\\"stderr\\\"],\\n \\\"encoding\\\": \\\"json\\\",\\n \\\"encoderConfig\\\": {\\n \\\"timeKey\\\": \\\"ts\\\",\\n \\\"levelKey\\\": \\\"level\\\",\\n \\\"nameKey\\\": \\\"logger\\\",\\n \\\"callerKey\\\": \\\"caller\\\",\\n \\\"messageKey\\\": \\\"msg\\\",\\n \\\"stacktraceKey\\\": \\\"stacktrace\\\",\\n \\\"lineEnding\\\": \\\"\\\",\\n \\\"levelEncoder\\\": \\\"\\\",\\n \\\"timeEncoder\\\": \\\"iso8601\\\",\\n \\\"durationEncoder\\\": \\\"string\\\",\\n \\\"callerEncoder\\\": \\\"\\\"\\n }\\n}\\n\"}" }, { "name": "K_METRICS_CONFIG", "value": "{\"Domain\":\"tekton.dev/triggers\",\"Component\":\"eventlistener\",\"PrometheusPort\":0,\"PrometheusHost\":\"\",\"ConfigMap\":{}}" }, { "name": "K_TRACING_CONFIG", "value": "{\"backend\":\"none\",\"debug\":\"false\",\"sample-rate\":\"0.1\"}" }, { "name": "NAMESPACE", "value": "konflux-disaster-recovery" }, { "name": "NAME", "value": "cron-listener" }, { "name": "EL_EVENT", "value": "enable" }, { "name": "K_SINK_TIMEOUT", "value": "30" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "METRICS_PROMETHEUS_PORT", "value": "9000" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" } ], "image": "quay.io/openshift-pipeline/pipelines-triggers-eventlistenersink-rhel9@sha256:6da20e394b8e26c307804005127c5333d87dd96a53aa6f379a6d223a970b30bd", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "event-listener", "ports": [ { "containerPort": 8080, "protocol": "TCP" }, { "containerPort": 9000, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cron-trigger", "serviceAccountName": "cron-trigger", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:53:14Z", "lastUpdateTime": "2026-05-13T16:53:14Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:53:10Z", "lastUpdateTime": "2026-05-13T16:53:14Z", "message": "ReplicaSet \"el-cron-listener-65f65cd8d7\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "konflux-kite-in-cluster-local:apps/Deployment:konflux-kite/konflux-kite", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"konflux-kite-in-cluster-local:apps/Deployment:konflux-kite/konflux-kite\"},\"labels\":{\"app\":\"konflux-kite\",\"component\":\"backend\",\"version\":\"1.0.0\"},\"name\":\"konflux-kite\",\"namespace\":\"konflux-kite\"},\"spec\":{\"replicas\":2,\"selector\":{\"matchLabels\":{\"app\":\"konflux-kite\",\"component\":\"backend\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":1,\"maxUnavailable\":1},\"type\":\"RollingUpdate\"},\"template\":{\"metadata\":{\"annotations\":{\"config.openshift.io/inject-trusted-cabundle\":\"true\"},\"labels\":{\"app\":\"konflux-kite\",\"component\":\"backend\",\"version\":\"1.0.0\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchExpressions\":[{\"key\":\"app\",\"operator\":\"In\",\"values\":[\"konflux-kite\"]}]},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"env\":[{\"name\":\"KITE_DB_PASSWORD\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"DB_PASSWORD\",\"name\":\"kite-database-credentials-52d679kdb7\"}}},{\"name\":\"KITE_DB_USER\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"DB_USER\",\"name\":\"kite-database-credentials-52d679kdb7\"}}},{\"name\":\"KITE_DB_HOST\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"DB_HOST\",\"name\":\"kite-database-credentials-52d679kdb7\"}}},{\"name\":\"KITE_DB_PORT\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"DB_PORT\",\"name\":\"kite-database-credentials-52d679kdb7\"}}},{\"name\":\"KITE_DB_NAME\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"DB_NAME\",\"name\":\"kite-database-credentials-52d679kdb7\"}}}],\"envFrom\":[{\"configMapRef\":{\"name\":\"kite-config-k5fck89tk9\"}},{\"secretRef\":{\"name\":\"kite-database-credentials-52d679kdb7\"}}],\"image\":\"quay.io/konflux-ci/kite-prod:a8f90611b6e50cd7fa53287cf409e5f7940d2de9\",\"imagePullPolicy\":\"Always\",\"livenessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/api/v1/health/\",\"port\":\"kite-port\",\"scheme\":\"HTTP\"},\"initialDelaySeconds\":30,\"periodSeconds\":30,\"successThreshold\":1,\"timeoutSeconds\":5},\"name\":\"kite-api\",\"ports\":[{\"containerPort\":8080,\"name\":\"kite-port\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/api/v1/health/\",\"port\":\"kite-port\",\"scheme\":\"HTTP\"},\"initialDelaySeconds\":10,\"periodSeconds\":10,\"timeoutSeconds\":3},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"256Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"startupProbe\":{\"failureThreshold\":30,\"httpGet\":{\"path\":\"/api/v1/health/\",\"port\":\"kite-port\",\"scheme\":\"HTTP\"},\"initialDelaySeconds\":10,\"periodSeconds\":5,\"successThreshold\":1,\"timeoutSeconds\":3},\"volumeMounts\":[{\"mountPath\":\"/var/tls\",\"name\":\"tls\",\"readOnly\":true}]}],\"initContainers\":[{\"env\":[{\"name\":\"KITE_DB_PASSWORD\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"DB_PASSWORD\",\"name\":\"kite-database-credentials-52d679kdb7\"}}},{\"name\":\"KITE_DB_USER\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"DB_USER\",\"name\":\"kite-database-credentials-52d679kdb7\"}}},{\"name\":\"KITE_DB_HOST\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"DB_HOST\",\"name\":\"kite-database-credentials-52d679kdb7\"}}},{\"name\":\"KITE_DB_PORT\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"DB_PORT\",\"name\":\"kite-database-credentials-52d679kdb7\"}}},{\"name\":\"KITE_DB_NAME\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"DB_NAME\",\"name\":\"kite-database-credentials-52d679kdb7\"}}}],\"envFrom\":[{\"configMapRef\":{\"name\":\"kite-config-k5fck89tk9\"}},{\"secretRef\":{\"name\":\"kite-database-credentials-52d679kdb7\"}}],\"image\":\"quay.io/konflux-ci/kite-init:a8f90611b6e50cd7fa53287cf409e5f7940d2de9\",\"imagePullPolicy\":\"Always\",\"name\":\"kite-init-container\",\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"500m\",\"memory\":\"128Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}}}],\"securityContext\":{\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"konflux-kite\",\"terminationGracePeriodSeconds\":30,\"volumes\":[{\"name\":\"tls\",\"secret\":{\"secretName\":\"konflux-kite-tls\"}}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:47:11Z", "generation": 1, "labels": { "app": "konflux-kite", "component": "backend", "version": "1.0.0" }, "name": "konflux-kite", "namespace": "konflux-kite", "resourceVersion": "23656", "uid": "3f06e567-35c0-4405-b431-4670a333fa0f" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "konflux-kite", "component": "backend" } }, "strategy": { "rollingUpdate": { "maxSurge": 1, "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "config.openshift.io/inject-trusted-cabundle": "true" }, "creationTimestamp": null, "labels": { "app": "konflux-kite", "component": "backend", "version": "1.0.0" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "konflux-kite" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "KITE_DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "DB_PASSWORD", "name": "kite-database-credentials-52d679kdb7" } } }, { "name": "KITE_DB_USER", "valueFrom": { "secretKeyRef": { "key": "DB_USER", "name": "kite-database-credentials-52d679kdb7" } } }, { "name": "KITE_DB_HOST", "valueFrom": { "secretKeyRef": { "key": "DB_HOST", "name": "kite-database-credentials-52d679kdb7" } } }, { "name": "KITE_DB_PORT", "valueFrom": { "secretKeyRef": { "key": "DB_PORT", "name": "kite-database-credentials-52d679kdb7" } } }, { "name": "KITE_DB_NAME", "valueFrom": { "secretKeyRef": { "key": "DB_NAME", "name": "kite-database-credentials-52d679kdb7" } } } ], "envFrom": [ { "configMapRef": { "name": "kite-config-k5fck89tk9" } }, { "secretRef": { "name": "kite-database-credentials-52d679kdb7" } } ], "image": "quay.io/konflux-ci/kite-prod:a8f90611b6e50cd7fa53287cf409e5f7940d2de9", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/api/v1/health/", "port": "kite-port", "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "kite-api", "ports": [ { "containerPort": 8080, "name": "kite-port", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/api/v1/health/", "port": "kite-port", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "resources": { "limits": { "cpu": "500m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/api/v1/health/", "port": "kite-port", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 3 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "env": [ { "name": "KITE_DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "DB_PASSWORD", "name": "kite-database-credentials-52d679kdb7" } } }, { "name": "KITE_DB_USER", "valueFrom": { "secretKeyRef": { "key": "DB_USER", "name": "kite-database-credentials-52d679kdb7" } } }, { "name": "KITE_DB_HOST", "valueFrom": { "secretKeyRef": { "key": "DB_HOST", "name": "kite-database-credentials-52d679kdb7" } } }, { "name": "KITE_DB_PORT", "valueFrom": { "secretKeyRef": { "key": "DB_PORT", "name": "kite-database-credentials-52d679kdb7" } } }, { "name": "KITE_DB_NAME", "valueFrom": { "secretKeyRef": { "key": "DB_NAME", "name": "kite-database-credentials-52d679kdb7" } } } ], "envFrom": [ { "configMapRef": { "name": "kite-config-k5fck89tk9" } }, { "secretRef": { "name": "kite-database-credentials-52d679kdb7" } } ], "image": "quay.io/konflux-ci/kite-init:a8f90611b6e50cd7fa53287cf409e5f7940d2de9", "imagePullPolicy": "Always", "name": "kite-init-container", "resources": { "limits": { "cpu": "500m", "memory": "128Mi" }, "requests": { "cpu": "500m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "konflux-kite", "serviceAccountName": "konflux-kite", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "secretName": "konflux-kite-tls" } } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-05-13T16:47:37Z", "lastUpdateTime": "2026-05-13T16:47:37Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:11Z", "lastUpdateTime": "2026-05-13T16:47:37Z", "message": "ReplicaSet \"konflux-kite-696ffdf49\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "konflux-kite-in-cluster-local:apps/Deployment:konflux-kite/postgresql", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Postgres requires to write on root fs and\n this should only be used in development, so lets ignore it.\"\n", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"konflux-kite-in-cluster-local:apps/Deployment:konflux-kite/postgresql\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Postgres requires to write on root fs and\\n this should only be used in development, so lets ignore it.\\\"\\n\"},\"labels\":{\"app\":\"postgresql\"},\"name\":\"postgresql\",\"namespace\":\"konflux-kite\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"postgresql\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"postgresql\"}},\"spec\":{\"containers\":[{\"args\":[\"-c\",\"ssl=on\",\"-c\",\"ssl_cert_file=/var/lib/postgresql/ssl/tls.crt\",\"-c\",\"ssl_key_file=/var/lib/postgresql/ssl/tls.key\"],\"command\":[\"/usr/bin/run-postgresql\"],\"env\":[{\"name\":\"POSTGRESQL_USER\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"DB_USER\",\"name\":\"kite-database-credentials-52d679kdb7\"}}},{\"name\":\"POSTGRESQL_PASSWORD\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"DB_PASSWORD\",\"name\":\"kite-database-credentials-52d679kdb7\"}}},{\"name\":\"POSTGRESQL_DATABASE\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"DB_NAME\",\"name\":\"kite-database-credentials-52d679kdb7\"}}}],\"image\":\"quay.io/konflux-kite/postgresql:15\",\"name\":\"postgresql\",\"ports\":[{\"containerPort\":5432,\"name\":\"postgresql\"}],\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"256Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":false,\"runAsNonRoot\":true},\"volumeMounts\":[{\"mountPath\":\"/var/lib/pgsql/data\",\"name\":\"postgresql-data\"},{\"mountPath\":\"/var/lib/postgresql/ssl/\",\"name\":\"ssl-certs\",\"readOnly\":true}]}],\"volumes\":[{\"emptyDir\":{},\"name\":\"postgresql-data\"},{\"name\":\"ssl-certs\",\"secret\":{\"defaultMode\":384,\"secretName\":\"postgresql-tls\"}}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:47:11Z", "generation": 1, "labels": { "app": "postgresql" }, "name": "postgresql", "namespace": "konflux-kite", "resourceVersion": "22178", "uid": "1009faef-9ddd-4e05-9a95-5cd314bb037c" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "postgresql" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "postgresql" } }, "spec": { "containers": [ { "args": [ "-c", "ssl=on", "-c", "ssl_cert_file=/var/lib/postgresql/ssl/tls.crt", "-c", "ssl_key_file=/var/lib/postgresql/ssl/tls.key" ], "command": [ "/usr/bin/run-postgresql" ], "env": [ { "name": "POSTGRESQL_USER", "valueFrom": { "secretKeyRef": { "key": "DB_USER", "name": "kite-database-credentials-52d679kdb7" } } }, { "name": "POSTGRESQL_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "DB_PASSWORD", "name": "kite-database-credentials-52d679kdb7" } } }, { "name": "POSTGRESQL_DATABASE", "valueFrom": { "secretKeyRef": { "key": "DB_NAME", "name": "kite-database-credentials-52d679kdb7" } } } ], "image": "quay.io/konflux-kite/postgresql:15", "imagePullPolicy": "IfNotPresent", "name": "postgresql", "ports": [ { "containerPort": 5432, "name": "postgresql", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/lib/pgsql/data", "name": "postgresql-data" }, { "mountPath": "/var/lib/postgresql/ssl/", "name": "ssl-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "postgresql-data" }, { "name": "ssl-certs", "secret": { "defaultMode": 384, "secretName": "postgresql-tls" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:47:18Z", "lastUpdateTime": "2026-05-13T16:47:18Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:11Z", "lastUpdateTime": "2026-05-13T16:47:18Z", "message": "ReplicaSet \"postgresql-785c4db684\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "kyverno-in-cluster-local:apps/Deployment:konflux-kyverno/kyverno-admission-controller", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:49:46Z", "generation": 1, "labels": { "app.kubernetes.io/component": "admission-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/part-of": "konflux-kyverno", "app.kubernetes.io/version": "3.5.2", "helm.sh/chart": "kyverno-3.5.2" }, "name": "kyverno-admission-controller", "namespace": "konflux-kyverno", "resourceVersion": "33427", "uid": "045e0717-de60-4d2d-a082-f534c55acd6c" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "admission-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "konflux-kyverno" } }, "strategy": { "rollingUpdate": { "maxSurge": 1, "maxUnavailable": "40%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "admission-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/part-of": "konflux-kyverno", "app.kubernetes.io/version": "3.5.2", "helm.sh/chart": "kyverno-3.5.2" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app.kubernetes.io/component", "operator": "In", "values": [ "admission-controller" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 1 } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--caSecretName=konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-ca", "--tlsSecretName=konflux-kyverno-svc.konflux-kyverno.svc.kyverno-tls-pair", "--backgroundServiceAccountName=system:serviceaccount:konflux-kyverno:kyverno-background-controller", "--servicePort=443", "--webhookServerPort=9443", "--resyncPeriod=15m", "--crdWatcher=false", "--disableMetrics=false", "--otelConfig=prometheus", "--metricsPort=8000", "--admissionReports=false", "--maxAdmissionReports=1000", "--autoUpdateWebhooks=true", "--enableConfigMapCaching=true", "--controllerRuntimeMetricsAddress=:8080", "--enableDeferredLoading=true", "--dumpPayload=false", "--forceFailurePolicyIgnore=false", "--generateValidatingAdmissionPolicy=true", "--generateMutatingAdmissionPolicy=false", "--dumpPatches=false", "--maxAPICallResponseLength=2000000", "--loggingFormat=text", "--v=2", "--omitEvents=PolicyApplied,PolicySkipped", "--enablePolicyException=false", "--protectManagedResources=false", "--allowInsecureRegistry=false", "--registryCredentialHelpers=default,google,amazon,azure,github", "--enableReporting=", "--leaderElectionRetryPeriod=26s" ], "env": [ { "name": "INIT_CONFIG", "value": "konflux-kyverno" }, { "name": "METRICS_CONFIG", "value": "konflux-kyverno-metrics" }, { "name": "KYVERNO_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "KYVERNO_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "KYVERNO_SERVICEACCOUNT_NAME", "value": "kyverno-admission-controller" }, { "name": "KYVERNO_ROLE_NAME", "value": "konflux-kyverno:admission-controller" }, { "name": "KYVERNO_SVC", "value": "konflux-kyverno-svc" }, { "name": "TUF_ROOT", "value": "/.sigstore" }, { "name": "KYVERNO_DEPLOYMENT", "value": "kyverno-admission-controller" } ], "image": "quay.io/konflux-ci/kyverno/kyverno:98fb01cc292a1089bb92e1de884e534e21b671fe", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 2, "httpGet": { "path": "/health/liveness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "kyverno", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" }, { "containerPort": 8000, "name": "metrics-port", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 6, "httpGet": { "path": "/health/readiness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "memory": "384Mi" }, "requests": { "cpu": "100m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "startupProbe": { "failureThreshold": 20, "httpGet": { "path": "/health/liveness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 6, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/.sigstore", "name": "sigstore" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "--loggingFormat=text", "--v=2", "--openreportsEnabled=false" ], "env": [ { "name": "KYVERNO_SERVICEACCOUNT_NAME", "value": "kyverno-admission-controller" }, { "name": "KYVERNO_ROLE_NAME", "value": "konflux-kyverno:admission-controller" }, { "name": "INIT_CONFIG", "value": "konflux-kyverno" }, { "name": "METRICS_CONFIG", "value": "konflux-kyverno-metrics" }, { "name": "KYVERNO_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "KYVERNO_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "KYVERNO_DEPLOYMENT", "value": "kyverno-admission-controller" }, { "name": "KYVERNO_SVC", "value": "konflux-kyverno-svc" } ], "image": "quay.io/konflux-ci/kyverno/kyverno-init:98fb01cc292a1089bb92e1de884e534e21b671fe", "imagePullPolicy": "IfNotPresent", "name": "kyverno-pre", "resources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kyverno-admission-controller", "serviceAccountName": "kyverno-admission-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "sigstore" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:49:58Z", "lastUpdateTime": "2026-05-13T16:49:58Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:49:46Z", "lastUpdateTime": "2026-05-13T16:49:58Z", "message": "ReplicaSet \"kyverno-admission-controller-5cbb799dc8\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "kyverno-in-cluster-local:apps/Deployment:konflux-kyverno/kyverno-background-controller", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:49:46Z", "generation": 1, "labels": { "app.kubernetes.io/component": "background-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/part-of": "konflux-kyverno", "app.kubernetes.io/version": "3.5.2", "helm.sh/chart": "kyverno-3.5.2" }, "name": "kyverno-background-controller", "namespace": "konflux-kyverno", "resourceVersion": "32706", "uid": "b642a210-378b-4da0-88d6-3ae72318cb09" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "background-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "konflux-kyverno" } }, "strategy": { "rollingUpdate": { "maxSurge": 1, "maxUnavailable": "40%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "background-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/part-of": "konflux-kyverno", "app.kubernetes.io/version": "3.5.2", "helm.sh/chart": "kyverno-3.5.2" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app.kubernetes.io/component", "operator": "In", "values": [ "background-controller" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 1 } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--disableMetrics=false", "--otelConfig=prometheus", "--metricsPort=8000", "--resyncPeriod=15m", "--enableConfigMapCaching=true", "--enableDeferredLoading=true", "--maxAPICallResponseLength=2000000", "--loggingFormat=text", "--v=2", "--omitEvents=PolicyApplied,PolicySkipped", "--enablePolicyException=false", "--enableReporting=", "--leaderElectionRetryPeriod=26s" ], "env": [ { "name": "KYVERNO_SERVICEACCOUNT_NAME", "value": "kyverno-background-controller" }, { "name": "KYVERNO_DEPLOYMENT", "value": "kyverno-background-controller" }, { "name": "INIT_CONFIG", "value": "konflux-kyverno" }, { "name": "METRICS_CONFIG", "value": "konflux-kyverno-metrics" }, { "name": "KYVERNO_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "KYVERNO_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/konflux-ci/kyverno/kyverno-background:98fb01cc292a1089bb92e1de884e534e21b671fe", "imagePullPolicy": "IfNotPresent", "name": "controller", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" }, { "containerPort": 8000, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "memory": "128Mi" }, "requests": { "cpu": "100m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kyverno-background-controller", "serviceAccountName": "kyverno-background-controller", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:49:50Z", "lastUpdateTime": "2026-05-13T16:49:50Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:49:46Z", "lastUpdateTime": "2026-05-13T16:49:50Z", "message": "ReplicaSet \"kyverno-background-controller-9bc79c6d5\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "kyverno-in-cluster-local:apps/Deployment:konflux-kyverno/kyverno-cleanup-controller", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:49:46Z", "generation": 1, "labels": { "app.kubernetes.io/component": "cleanup-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/part-of": "konflux-kyverno", "app.kubernetes.io/version": "3.5.2", "helm.sh/chart": "kyverno-3.5.2" }, "name": "kyverno-cleanup-controller", "namespace": "konflux-kyverno", "resourceVersion": "33417", "uid": "c2824d59-e9e5-403b-a87e-b85746dae244" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "cleanup-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "konflux-kyverno" } }, "strategy": { "rollingUpdate": { "maxSurge": 1, "maxUnavailable": "40%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "cleanup-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/part-of": "konflux-kyverno", "app.kubernetes.io/version": "3.5.2", "helm.sh/chart": "kyverno-3.5.2" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app.kubernetes.io/component", "operator": "In", "values": [ "cleanup-controller" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 1 } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--caSecretName=kyverno-cleanup-controller.konflux-kyverno.svc.kyverno-tls-ca", "--tlsSecretName=kyverno-cleanup-controller.konflux-kyverno.svc.kyverno-tls-pair", "--servicePort=443", "--cleanupServerPort=9443", "--webhookServerPort=9443", "--resyncPeriod=15m", "--disableMetrics=false", "--otelConfig=prometheus", "--metricsPort=8000", "--enableDeferredLoading=true", "--dumpPayload=false", "--maxAPICallResponseLength=2000000", "--loggingFormat=text", "--v=2", "--protectManagedResources=false", "--ttlReconciliationInterval=1m", "--leaderElectionRetryPeriod=26s" ], "env": [ { "name": "KYVERNO_DEPLOYMENT", "value": "kyverno-cleanup-controller" }, { "name": "INIT_CONFIG", "value": "konflux-kyverno" }, { "name": "METRICS_CONFIG", "value": "konflux-kyverno-metrics" }, { "name": "KYVERNO_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "KYVERNO_SERVICEACCOUNT_NAME", "value": "kyverno-cleanup-controller" }, { "name": "KYVERNO_ROLE_NAME", "value": "konflux-kyverno:cleanup-controller" }, { "name": "KYVERNO_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "KYVERNO_SVC", "value": "kyverno-cleanup-controller" } ], "image": "quay.io/konflux-ci/kyverno/kyverno-cleanup:98fb01cc292a1089bb92e1de884e534e21b671fe", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 2, "httpGet": { "path": "/health/liveness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "controller", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" }, { "containerPort": 8000, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 6, "httpGet": { "path": "/health/readiness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "memory": "128Mi" }, "requests": { "cpu": "100m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "startupProbe": { "failureThreshold": 20, "httpGet": { "path": "/health/liveness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 6, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kyverno-cleanup-controller", "serviceAccountName": "kyverno-cleanup-controller", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:49:58Z", "lastUpdateTime": "2026-05-13T16:49:58Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:49:46Z", "lastUpdateTime": "2026-05-13T16:49:58Z", "message": "ReplicaSet \"kyverno-cleanup-controller-955df97b8\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "tracing-workload-otel-collector-in-cluster-local:apps/Deployment:konflux-otel/open-telemetry-opentelemetry-collector", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"tracing-workload-otel-collector-in-cluster-local:apps/Deployment:konflux-otel/open-telemetry-opentelemetry-collector\"},\"labels\":{\"app.kubernetes.io/instance\":\"tracing-workload-otel-collector-in-cluster-local\",\"app.kubernetes.io/managed-by\":\"Helm\",\"app.kubernetes.io/name\":\"opentelemetry-collector\",\"app.kubernetes.io/version\":\"0.106.1\",\"helm.sh/chart\":\"opentelemetry-collector-0.101.2\"},\"name\":\"open-telemetry-opentelemetry-collector\",\"namespace\":\"konflux-otel\"},\"spec\":{\"replicas\":1,\"revisionHistoryLimit\":10,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/instance\":\"tracing-workload-otel-collector-in-cluster-local\",\"app.kubernetes.io/name\":\"opentelemetry-collector\",\"component\":\"standalone-collector\"}},\"strategy\":{\"type\":\"RollingUpdate\"},\"template\":{\"metadata\":{\"annotations\":{\"checksum/config\":\"1c8b1f87e49744c53b99e5d7ce4a216e54039a875c383f60d9558c9dff939a0a\"},\"labels\":{\"app.kubernetes.io/instance\":\"tracing-workload-otel-collector-in-cluster-local\",\"app.kubernetes.io/name\":\"opentelemetry-collector\",\"component\":\"standalone-collector\"}},\"spec\":{\"containers\":[{\"args\":[\"--config=/conf/relay.yaml\"],\"command\":[\"/usr/local/bin/otel-collector-sp\"],\"env\":[{\"name\":\"MY_POD_IP\",\"valueFrom\":{\"fieldRef\":{\"apiVersion\":\"v1\",\"fieldPath\":\"status.podIP\"}}}],\"image\":\"quay.io/factory2/otel-collector-sp/otel-binary-image:0.113.0\",\"imagePullPolicy\":\"Always\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/\",\"port\":13133}},\"name\":\"opentelemetry-collector\",\"ports\":[{\"containerPort\":4317,\"name\":\"otlp\",\"protocol\":\"TCP\"},{\"containerPort\":4318,\"name\":\"otlp-http\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/\",\"port\":13133}},\"securityContext\":{},\"volumeMounts\":[{\"mountPath\":\"/conf\",\"name\":\"opentelemetry-collector-configmap\"}]}],\"hostNetwork\":false,\"securityContext\":{},\"serviceAccountName\":\"open-telemetry-opentelemetry-collector\",\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"relay\",\"path\":\"relay.yaml\"}],\"name\":\"open-telemetry-opentelemetry-collector\"},\"name\":\"opentelemetry-collector-configmap\"}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:48:11Z", "generation": 1, "labels": { "app.kubernetes.io/instance": "tracing-workload-otel-collector-in-cluster-local", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "opentelemetry-collector", "app.kubernetes.io/version": "0.106.1", "helm.sh/chart": "opentelemetry-collector-0.101.2" }, "name": "open-telemetry-opentelemetry-collector", "namespace": "konflux-otel", "resourceVersion": "27291", "uid": "578342c6-693e-4e8d-8a86-bb4b4237710c" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/instance": "tracing-workload-otel-collector-in-cluster-local", "app.kubernetes.io/name": "opentelemetry-collector", "component": "standalone-collector" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "checksum/config": "1c8b1f87e49744c53b99e5d7ce4a216e54039a875c383f60d9558c9dff939a0a" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/instance": "tracing-workload-otel-collector-in-cluster-local", "app.kubernetes.io/name": "opentelemetry-collector", "component": "standalone-collector" } }, "spec": { "containers": [ { "args": [ "--config=/conf/relay.yaml" ], "command": [ "/usr/local/bin/otel-collector-sp" ], "env": [ { "name": "MY_POD_IP", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "status.podIP" } } } ], "image": "quay.io/factory2/otel-collector-sp/otel-binary-image:0.113.0", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 13133, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "opentelemetry-collector", "ports": [ { "containerPort": 4317, "name": "otlp", "protocol": "TCP" }, { "containerPort": 4318, "name": "otlp-http", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 13133, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/conf", "name": "opentelemetry-collector-configmap" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "open-telemetry-opentelemetry-collector", "serviceAccountName": "open-telemetry-opentelemetry-collector", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "relay", "path": "relay.yaml" } ], "name": "open-telemetry-opentelemetry-collector" }, "name": "opentelemetry-collector-configmap" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:48:21Z", "lastUpdateTime": "2026-05-13T16:48:21Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:48:11Z", "lastUpdateTime": "2026-05-13T16:48:21Z", "message": "ReplicaSet \"open-telemetry-opentelemetry-collector-585d6cd6f4\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/sync-wave": "10", "argocd.argoproj.io/tracking-id": "kueue-in-cluster-local:apps/Deployment:kueue-external-admission/alert-mgr-kueue-admission-controller-manager", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/sync-wave\":\"10\",\"argocd.argoproj.io/tracking-id\":\"kueue-in-cluster-local:apps/Deployment:kueue-external-admission/alert-mgr-kueue-admission-controller-manager\"},\"labels\":{\"app.kubernetes.io/managed-by\":\"kustomize\",\"app.kubernetes.io/name\":\"alert-manager-kueue-admission\",\"control-plane\":\"controller-manager\"},\"name\":\"alert-mgr-kueue-admission-controller-manager\",\"namespace\":\"kueue-external-admission\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/name\":\"alert-manager-kueue-admission\",\"control-plane\":\"controller-manager\"}},\"template\":{\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/sync-wave\":\"10\",\"kubectl.kubernetes.io/default-container\":\"manager\"},\"labels\":{\"app.kubernetes.io/name\":\"alert-manager-kueue-admission\",\"control-plane\":\"controller-manager\"}},\"spec\":{\"containers\":[{\"args\":[\"--metrics-bind-address=:8443\",\"--leader-elect\",\"--health-probe-bind-address=:8081\"],\"command\":[\"/manager\"],\"image\":\"quay.io/konflux-ci/kueue-external-admission:aa92aa7f658e34577a23b072204de2af5768b3cc\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8081},\"initialDelaySeconds\":15,\"periodSeconds\":20},\"name\":\"manager\",\"ports\":[],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readyz\",\"port\":8081},\"initialDelaySeconds\":5,\"periodSeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true},\"volumeMounts\":[]}],\"securityContext\":{\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"alert-mgr-kueue-admission-controller-manager\",\"terminationGracePeriodSeconds\":10,\"volumes\":[]}}}}\n" }, "creationTimestamp": "2026-05-13T16:51:59Z", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "kustomize", "app.kubernetes.io/name": "alert-manager-kueue-admission", "control-plane": "controller-manager" }, "name": "alert-mgr-kueue-admission-controller-manager", "namespace": "kueue-external-admission", "resourceVersion": "180794", "uid": "2063ca45-23fd-4577-8444-c1a413d6f333" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/name": "alert-manager-kueue-admission", "control-plane": "controller-manager" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/sync-wave": "10", "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "alert-manager-kueue-admission", "control-plane": "controller-manager" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8443", "--leader-elect", "--health-probe-bind-address=:8081" ], "command": [ "/manager" ], "image": "quay.io/konflux-ci/kueue-external-admission:aa92aa7f658e34577a23b072204de2af5768b3cc", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "512Mi" }, "requests": { "cpu": "500m", "memory": "512Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "alert-mgr-kueue-admission-controller-manager", "serviceAccountName": "alert-mgr-kueue-admission-controller-manager", "terminationGracePeriodSeconds": 10 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:51:59Z", "lastUpdateTime": "2026-05-13T16:52:10Z", "message": "ReplicaSet \"alert-mgr-kueue-admission-controller-manager-548794f8bb\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-05-13T18:26:31Z", "lastUpdateTime": "2026-05-13T18:26:31Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/tracking-id": "pipeline-service-in-cluster-local:apps/Deployment:minio-operator/console", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/tracking-id\":\"pipeline-service-in-cluster-local:apps/Deployment:minio-operator/console\",\"operator.min.io/authors\":\"MinIO, Inc.\",\"operator.min.io/license\":\"AGPLv3\",\"operator.min.io/support\":\"https://subnet.min.io\"},\"labels\":{\"app.kubernetes.io/instance\":\"minio-operator\",\"app.kubernetes.io/name\":\"operator\"},\"name\":\"console\",\"namespace\":\"minio-operator\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"console\"}},\"template\":{\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"operator.min.io/authors\":\"MinIO, Inc.\",\"operator.min.io/license\":\"AGPLv3\",\"operator.min.io/support\":\"https://subnet.min.io\"},\"labels\":{\"app\":\"console\",\"app.kubernetes.io/instance\":\"minio-operator-console\",\"app.kubernetes.io/name\":\"operator\"}},\"spec\":{\"containers\":[{\"args\":[\"ui\",\"--certs-dir=/tmp/certs\"],\"image\":\"quay.io/minio/operator:v5.0.15\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"console\",\"ports\":[{\"containerPort\":9090,\"name\":\"http\"},{\"containerPort\":9443,\"name\":\"https\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"64Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"volumeMounts\":[{\"mountPath\":\"/tmp/certs\",\"name\":\"tls-certificates\"},{\"mountPath\":\"/tmp/certs/CAs\",\"name\":\"tmp\"}]}],\"serviceAccountName\":\"console-sa\",\"volumes\":[{\"name\":\"tls-certificates\",\"projected\":{\"sources\":[{\"secret\":{\"items\":[{\"key\":\"public.crt\",\"path\":\"public.crt\"},{\"key\":\"public.crt\",\"path\":\"CAs/public.crt\"},{\"key\":\"private.key\",\"path\":\"private.key\"},{\"key\":\"tls.crt\",\"path\":\"tls.crt\"},{\"key\":\"tls.crt\",\"path\":\"CAs/tls.crt\"},{\"key\":\"tls.key\",\"path\":\"tls.key\"}],\"name\":\"console-tls\",\"optional\":true}}]}},{\"emptyDir\":{},\"name\":\"tmp\"}]}}}}\n", "operator.min.io/authors": "MinIO, Inc.", "operator.min.io/license": "AGPLv3", "operator.min.io/support": "https://subnet.min.io" }, "creationTimestamp": "2026-05-13T16:49:15Z", "generation": 1, "labels": { "app.kubernetes.io/instance": "minio-operator", "app.kubernetes.io/name": "operator" }, "name": "console", "namespace": "minio-operator", "resourceVersion": "30998", "uid": "28c89670-55d3-47b2-af99-22881348d7b4" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "console" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "operator.min.io/authors": "MinIO, Inc.", "operator.min.io/license": "AGPLv3", "operator.min.io/support": "https://subnet.min.io" }, "creationTimestamp": null, "labels": { "app": "console", "app.kubernetes.io/instance": "minio-operator-console", "app.kubernetes.io/name": "operator" } }, "spec": { "containers": [ { "args": [ "ui", "--certs-dir=/tmp/certs" ], "image": "quay.io/minio/operator:v5.0.15", "imagePullPolicy": "IfNotPresent", "name": "console", "ports": [ { "containerPort": 9090, "name": "http", "protocol": "TCP" }, { "containerPort": 9443, "name": "https", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "100m", "memory": "128Mi" }, "requests": { "cpu": "50m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp/certs", "name": "tls-certificates" }, { "mountPath": "/tmp/certs/CAs", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "console-sa", "serviceAccountName": "console-sa", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls-certificates", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "public.crt", "path": "public.crt" }, { "key": "public.crt", "path": "CAs/public.crt" }, { "key": "private.key", "path": "private.key" }, { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.crt", "path": "CAs/tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "name": "console-tls", "optional": true } } ] } }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:49:19Z", "lastUpdateTime": "2026-05-13T16:49:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:49:15Z", "lastUpdateTime": "2026-05-13T16:49:19Z", "message": "ReplicaSet \"console-5579558f5f\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/tracking-id": "pipeline-service-in-cluster-local:apps/Deployment:minio-operator/minio-operator", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/no-read-only-root-fs": "The operator needs to be able to write to /tmp", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/tracking-id\":\"pipeline-service-in-cluster-local:apps/Deployment:minio-operator/minio-operator\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"The operator needs to be able to write to /tmp\",\"operator.min.io/authors\":\"MinIO, Inc.\",\"operator.min.io/license\":\"AGPLv3\",\"operator.min.io/support\":\"https://subnet.min.io\"},\"labels\":{\"app.kubernetes.io/instance\":\"minio-operator\",\"app.kubernetes.io/name\":\"operator\"},\"name\":\"minio-operator\",\"namespace\":\"minio-operator\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"name\":\"minio-operator\"}},\"strategy\":{\"type\":\"Recreate\"},\"template\":{\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"operator.min.io/authors\":\"MinIO, Inc.\",\"operator.min.io/license\":\"AGPLv3\",\"operator.min.io/support\":\"https://subnet.min.io\"},\"labels\":{\"app.kubernetes.io/instance\":\"minio-operator\",\"app.kubernetes.io/name\":\"operator\",\"name\":\"minio-operator\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":[{\"labelSelector\":{\"matchExpressions\":[{\"key\":\"name\",\"operator\":\"In\",\"values\":[\"minio-operator\"]}]},\"topologyKey\":\"kubernetes.io/hostname\"}]}},\"containers\":[{\"args\":[\"controller\"],\"env\":[{\"name\":\"MINIO_CONSOLE_TLS_ENABLE\",\"value\":\"off\"},{\"name\":\"OPERATOR_STS_ENABLED\",\"value\":\"on\"}],\"image\":\"quay.io/minio/operator:v5.0.15\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"minio-operator\",\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"128Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}}}],\"serviceAccountName\":\"minio-operator\"}}}}\n", "operator.min.io/authors": "MinIO, Inc.", "operator.min.io/license": "AGPLv3", "operator.min.io/support": "https://subnet.min.io" }, "creationTimestamp": "2026-05-13T16:49:14Z", "generation": 1, "labels": { "app.kubernetes.io/instance": "minio-operator", "app.kubernetes.io/name": "operator" }, "name": "minio-operator", "namespace": "minio-operator", "resourceVersion": "31005", "uid": "71906260-61a6-4d00-aaa9-eb2ca4d1b8b9" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "name": "minio-operator" } }, "strategy": { "type": "Recreate" }, "template": { "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "operator.min.io/authors": "MinIO, Inc.", "operator.min.io/license": "AGPLv3", "operator.min.io/support": "https://subnet.min.io" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/instance": "minio-operator", "app.kubernetes.io/name": "operator", "name": "minio-operator" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "name", "operator": "In", "values": [ "minio-operator" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "controller" ], "env": [ { "name": "MINIO_CONSOLE_TLS_ENABLE", "value": "off" }, { "name": "OPERATOR_STS_ENABLED", "value": "on" } ], "image": "quay.io/minio/operator:v5.0.15", "imagePullPolicy": "IfNotPresent", "name": "minio-operator", "resources": { "limits": { "cpu": "200m", "memory": "256Mi" }, "requests": { "cpu": "50m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "minio-operator", "serviceAccountName": "minio-operator", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:49:19Z", "lastUpdateTime": "2026-05-13T16:49:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:49:15Z", "lastUpdateTime": "2026-05-13T16:49:19Z", "message": "ReplicaSet \"minio-operator-54646886cb\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/tracking-id": "mintmaker-in-cluster-local:apps/Deployment:mintmaker/mintmaker-controller-manager", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/tracking-id\":\"mintmaker-in-cluster-local:apps/Deployment:mintmaker/mintmaker-controller-manager\"},\"labels\":{\"app.kubernetes.io/managed-by\":\"kustomize\",\"app.kubernetes.io/name\":\"mintmaker\",\"control-plane\":\"controller-manager\"},\"name\":\"mintmaker-controller-manager\",\"namespace\":\"mintmaker\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"control-plane\":\"controller-manager\"}},\"template\":{\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"kubectl.kubernetes.io/default-container\":\"manager\",\"mintmaker.appstudio.redhat.com/renovate-image\":\"quay.io/konflux-ci/mintmaker-renovate-image:latest\"},\"labels\":{\"control-plane\":\"controller-manager\"}},\"spec\":{\"containers\":[{\"args\":[\"--metrics-bind-address=:8080\",\"--health-probe-bind-address=:8081\",\"--metrics-secure=false\",\"--metrics-bind-address=:8080\"],\"command\":[\"/manager\"],\"env\":[{\"name\":\"RENOVATE_IMAGE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.annotations['mintmaker.appstudio.redhat.com/renovate-image']\"}}}],\"image\":\"quay.io/konflux-ci/mintmaker:f630842900c1caf0080e113925b3295b6c008df2\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8081},\"initialDelaySeconds\":15,\"periodSeconds\":20},\"name\":\"manager\",\"readinessProbe\":{\"httpGet\":{\"path\":\"/readyz\",\"port\":8081},\"initialDelaySeconds\":5,\"periodSeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"256Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true},\"volumeMounts\":[{\"mountPath\":\"/etc/pki/ca-trust/extracted/pem\",\"name\":\"trusted-ca\",\"readOnly\":true}]}],\"securityContext\":{\"runAsNonRoot\":true},\"serviceAccountName\":\"mintmaker-controller-manager\",\"terminationGracePeriodSeconds\":10,\"volumes\":[{\"configMap\":{\"items\":[{\"key\":\"ca-bundle.crt\",\"path\":\"tls-ca-bundle.pem\"}],\"name\":\"trusted-ca-6ct58987ht\"},\"name\":\"trusted-ca\"}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:47:33Z", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "kustomize", "app.kubernetes.io/name": "mintmaker", "control-plane": "controller-manager" }, "name": "mintmaker-controller-manager", "namespace": "mintmaker", "resourceVersion": "35453", "uid": "3a692b99-370c-4cd9-bfa7-2c9472020242" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "control-plane": "controller-manager" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "kubectl.kubernetes.io/default-container": "manager", "mintmaker.appstudio.redhat.com/renovate-image": "quay.io/konflux-ci/mintmaker-renovate-image:latest" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8080", "--health-probe-bind-address=:8081", "--metrics-secure=false", "--metrics-bind-address=:8080" ], "command": [ "/manager" ], "env": [ { "name": "RENOVATE_IMAGE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.annotations['mintmaker.appstudio.redhat.com/renovate-image']" } } } ], "image": "quay.io/konflux-ci/mintmaker:f630842900c1caf0080e113925b3295b6c008df2", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "512Mi" }, "requests": { "cpu": "10m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "mintmaker-controller-manager", "serviceAccountName": "mintmaker-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-6ct58987ht" }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:50:54Z", "lastUpdateTime": "2026-05-13T16:50:54Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:33Z", "lastUpdateTime": "2026-05-13T16:50:54Z", "message": "ReplicaSet \"mintmaker-controller-manager-7785d946f6\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/tracking-id": "mintmaker-in-cluster-local:apps/Deployment:mintmaker/redis", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/tracking-id\":\"mintmaker-in-cluster-local:apps/Deployment:mintmaker/redis\"},\"name\":\"redis\",\"namespace\":\"mintmaker\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"redis\"}},\"strategy\":{\"type\":\"Recreate\"},\"template\":{\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\"},\"labels\":{\"app\":\"redis\"}},\"spec\":{\"containers\":[{\"args\":[\"run-redis\"],\"command\":[\"container-entrypoint\"],\"image\":\"registry.redhat.io/rhel9/redis-7:9.5\",\"livenessProbe\":{\"exec\":{\"command\":[\"/bin/sh\",\"-c\",\"redis-cli ping | grep -q PONG\"]},\"failureThreshold\":5,\"initialDelaySeconds\":60,\"periodSeconds\":30,\"timeoutSeconds\":15},\"name\":\"redis\",\"ports\":[{\"containerPort\":6379}],\"readinessProbe\":{\"exec\":{\"command\":[\"/bin/sh\",\"-c\",\"redis-cli ping | grep -q PONG\"]},\"failureThreshold\":5,\"initialDelaySeconds\":10,\"periodSeconds\":15,\"timeoutSeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"300m\",\"memory\":\"800Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"250Mi\"}},\"securityContext\":{\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"runAsUser\":1001},\"volumeMounts\":[{\"mountPath\":\"/var/lib/redis/data\",\"name\":\"redis-data\"},{\"mountPath\":\"/etc/redis/redis.conf\",\"name\":\"redis-config\",\"subPath\":\"redis.conf\"}]}],\"securityContext\":{\"fsGroup\":1001},\"serviceAccountName\":\"mintmaker-controller-manager\",\"volumes\":[{\"name\":\"redis-data\",\"persistentVolumeClaim\":{\"claimName\":\"redis-pvc\"}},{\"configMap\":{\"name\":\"redis-config\"},\"name\":\"redis-config\"}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:47:33Z", "generation": 1, "name": "redis", "namespace": "mintmaker", "resourceVersion": "25570", "uid": "ea36489f-a51e-4b81-8596-6c1b3eb87678" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "redis" } }, "strategy": { "type": "Recreate" }, "template": { "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true" }, "creationTimestamp": null, "labels": { "app": "redis" } }, "spec": { "containers": [ { "args": [ "run-redis" ], "command": [ "container-entrypoint" ], "image": "registry.redhat.io/rhel9/redis-7:9.5", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "exec": { "command": [ "/bin/sh", "-c", "redis-cli ping | grep -q PONG" ] }, "failureThreshold": 5, "initialDelaySeconds": 60, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 15 }, "name": "redis", "ports": [ { "containerPort": 6379, "protocol": "TCP" } ], "readinessProbe": { "exec": { "command": [ "/bin/sh", "-c", "redis-cli ping | grep -q PONG" ] }, "failureThreshold": 5, "initialDelaySeconds": 10, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "limits": { "cpu": "300m", "memory": "800Mi" }, "requests": { "cpu": "50m", "memory": "250Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/lib/redis/data", "name": "redis-data" }, { "mountPath": "/etc/redis/redis.conf", "name": "redis-config", "subPath": "redis.conf" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 1001 }, "serviceAccount": "mintmaker-controller-manager", "serviceAccountName": "mintmaker-controller-manager", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "redis-data", "persistentVolumeClaim": { "claimName": "redis-pvc" } }, { "configMap": { "defaultMode": 420, "name": "redis-config" }, "name": "redis-config" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:47:56Z", "lastUpdateTime": "2026-05-13T16:47:56Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:33Z", "lastUpdateTime": "2026-05-13T16:47:56Z", "message": "ReplicaSet \"redis-6f8fc9df97\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "multi-platform-controller-in-cluster-local:apps/Deployment:multi-platform-controller/multi-platform-controller", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"multi-platform-controller-in-cluster-local:apps/Deployment:multi-platform-controller/multi-platform-controller\"},\"labels\":{\"app\":\"multi-platform-controller\"},\"name\":\"multi-platform-controller\",\"namespace\":\"multi-platform-controller\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"multi-platform-controller\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"multi-platform-controller\"}},\"spec\":{\"containers\":[{\"args\":[\"--metrics-bind-address=:8443\",\"--v=4\",\"--zap-log-level=info\",\"--zap-encoder=console\",\"--health-probe-bind-address=:8081\",\"--metrics-secure=true\",\"--zap-encoder=console\"],\"env\":[{\"name\":\"POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"quay.io/konflux-ci/multi-platform-controller:93c18de0be493a99a6f08f8f5fb9ab373c838ad8\",\"imagePullPolicy\":\"Always\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8081},\"initialDelaySeconds\":15,\"periodSeconds\":20},\"name\":\"manager\",\"ports\":[{\"containerPort\":8081,\"name\":\"probes\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readyz\",\"port\":8081},\"initialDelaySeconds\":5,\"periodSeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"4Gi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"512Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true}}],\"securityContext\":{\"runAsNonRoot\":true},\"serviceAccountName\":\"multi-platform-controller-controller-manager\"}}}}\n" }, "creationTimestamp": "2026-05-13T16:51:02Z", "generation": 1, "labels": { "app": "multi-platform-controller" }, "name": "multi-platform-controller", "namespace": "multi-platform-controller", "resourceVersion": "36171", "uid": "f3009a14-f7ca-4d51-a8db-ce567e673742" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "multi-platform-controller" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "multi-platform-controller" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8443", "--v=4", "--zap-log-level=info", "--zap-encoder=console", "--health-probe-bind-address=:8081", "--metrics-secure=true", "--zap-encoder=console" ], "env": [ { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/konflux-ci/multi-platform-controller:93c18de0be493a99a6f08f8f5fb9ab373c838ad8", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 8081, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "4Gi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "multi-platform-controller-controller-manager", "serviceAccountName": "multi-platform-controller-controller-manager", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:51:13Z", "lastUpdateTime": "2026-05-13T16:51:13Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:51:02Z", "lastUpdateTime": "2026-05-13T16:51:13Z", "message": "ReplicaSet \"multi-platform-controller-54d6cb7454\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "multi-platform-controller-in-cluster-local:apps/Deployment:multi-platform-controller/multi-platform-otp-server", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"multi-platform-controller-in-cluster-local:apps/Deployment:multi-platform-controller/multi-platform-otp-server\"},\"labels\":{\"app\":\"multi-platform-otp-server\"},\"name\":\"multi-platform-otp-server\",\"namespace\":\"multi-platform-controller\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"multi-platform-otp-server\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"multi-platform-otp-server\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"quay.io/konflux-ci/multi-platform-controller-otp-service:93c18de0be493a99a6f08f8f5fb9ab373c838ad8\",\"imagePullPolicy\":\"Always\",\"name\":\"multi-platform-otp-server\",\"ports\":[{\"containerPort\":8080,\"name\":\"server\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"}},\"securityContext\":{\"readOnlyRootFilesystem\":true},\"volumeMounts\":[{\"mountPath\":\"/tls\",\"name\":\"tls\"}]}],\"securityContext\":{\"runAsNonRoot\":true},\"volumes\":[{\"name\":\"tls\",\"secret\":{\"secretName\":\"otp-tls-secrets\"}}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:51:02Z", "generation": 1, "labels": { "app": "multi-platform-otp-server" }, "name": "multi-platform-otp-server", "namespace": "multi-platform-controller", "resourceVersion": "35908", "uid": "552e5e84-2038-4d3f-ab24-8fbc87f07a2c" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "multi-platform-otp-server" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "multi-platform-otp-server" } }, "spec": { "containers": [ { "env": [ { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/konflux-ci/multi-platform-controller-otp-service:93c18de0be493a99a6f08f8f5fb9ab373c838ad8", "imagePullPolicy": "Always", "name": "multi-platform-otp-server", "ports": [ { "containerPort": 8080, "name": "server", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "100m", "memory": "128Mi" }, "requests": { "cpu": "100m", "memory": "128Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tls", "name": "tls" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "secretName": "otp-tls-secrets" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:51:05Z", "lastUpdateTime": "2026-05-13T16:51:05Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:51:02Z", "lastUpdateTime": "2026-05-13T16:51:05Z", "message": "ReplicaSet \"multi-platform-otp-server-8589b89c76\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:47:17Z", "generation": 2, "labels": { "control-plane": "controller-manager", "olm.deployment-spec-hash": "seHGL0wR9HlXMkXl1SGYEgaMcJgNoCvb5ZtcB", "olm.managed": "true", "olm.owner": "oadp-operator.v1.4.9", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-adp", "operators.coreos.com/redhat-oadp-operator.openshift-adp": "" }, "name": "openshift-adp-controller-manager", "namespace": "openshift-adp", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "oadp-operator.v1.4.9", "uid": "016281f8-61a2-49f5-9dee-b8231d24464e" } ], "resourceVersion": "22971", "uid": "92a12e84-2fdd-43d9-b981-f98fc58ec659" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 1, "selector": { "matchLabels": { "control-plane": "controller-manager" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"oadp.openshift.io/v1alpha1\",\n \"kind\": \"DataProtectionApplication\",\n \"metadata\": {\n \"name\": \"velero-sample\"\n },\n \"spec\": {\n \"backupLocations\": [\n {\n \"velero\": {\n \"config\": {\n \"profile\": \"default\",\n \"region\": \"us-east-1\"\n },\n \"credential\": {\n \"key\": \"cloud\",\n \"name\": \"cloud-credentials\"\n },\n \"default\": true,\n \"objectStorage\": {\n \"bucket\": \"my-bucket-name\",\n \"prefix\": \"velero\"\n },\n \"provider\": \"aws\"\n }\n }\n ],\n \"configuration\": {\n \"nodeAgent\": {\n \"enable\": true,\n \"uploaderType\": \"restic\"\n },\n \"velero\": {\n \"defaultPlugins\": [\n \"openshift\",\n \"aws\",\n \"kubevirt\"\n ]\n }\n },\n \"snapshotLocations\": [\n {\n \"velero\": {\n \"config\": {\n \"profile\": \"default\",\n \"region\": \"us-west-2\"\n },\n \"provider\": \"aws\"\n }\n }\n ]\n }\n },\n {\n \"apiVersion\": \"velero.io/v1\",\n \"kind\": \"Backup\",\n \"metadata\": {\n \"name\": \"backup\",\n \"namespace\": \"openshift-adp\"\n },\n \"spec\": {}\n },\n {\n \"apiVersion\": \"velero.io/v1\",\n \"kind\": \"BackupStorageLocation\",\n \"metadata\": {\n \"name\": \"backupstoragelocation\",\n \"namespace\": \"openshift-adp\"\n },\n \"spec\": {}\n },\n {\n \"apiVersion\": \"velero.io/v1\",\n \"kind\": \"DeleteBackupRequest\",\n \"metadata\": {\n \"name\": \"deletebackuprequest\",\n \"namespace\": \"openshift-adp\"\n },\n \"spec\": {}\n },\n {\n \"apiVersion\": \"velero.io/v1\",\n \"kind\": \"DownloadRequest\",\n \"metadata\": {\n \"name\": \"downloadrequest\",\n \"namespace\": \"openshift-adp\"\n },\n \"spec\": {}\n },\n {\n \"apiVersion\": \"velero.io/v1\",\n \"kind\": \"PodVolumeBackup\",\n \"metadata\": {\n \"name\": \"podvolumebackup\",\n \"namespace\": \"openshift-adp\"\n },\n \"spec\": {}\n },\n {\n \"apiVersion\": \"velero.io/v1\",\n \"kind\": \"PodVolumeRestore\",\n \"metadata\": {\n \"name\": \"podvolumerestore\",\n \"namespace\": \"openshift-adp\"\n },\n \"spec\": {}\n },\n {\n \"apiVersion\": \"velero.io/v1\",\n \"kind\": \"Restore\",\n \"metadata\": {\n \"name\": \"restore\",\n \"namespace\": \"openshift-adp\"\n },\n \"spec\": {}\n },\n {\n \"apiVersion\": \"velero.io/v1\",\n \"kind\": \"Schedule\",\n \"metadata\": {\n \"name\": \"schedule\",\n \"namespace\": \"openshift-adp\"\n },\n \"spec\": {}\n },\n {\n \"apiVersion\": \"velero.io/v1\",\n \"kind\": \"ServerStatusRequest\",\n \"metadata\": {\n \"name\": \"serverstatusrequest\",\n \"namespace\": \"openshift-adp\"\n },\n \"spec\": {}\n },\n {\n \"apiVersion\": \"velero.io/v1\",\n \"kind\": \"VolumeSnapshotLocation\",\n \"metadata\": {\n \"name\": \"volumesnapshotlocation\",\n \"namespace\": \"openshift-adp\"\n },\n \"spec\": {}\n }\n]", "capabilities": "Seamless Upgrades", "categories": "Cloud Provider,Developer Tools,Modernization \u0026 Migration,OpenShift Optional,Storage\n", "certified": "false", "containerImage": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b3b2f0fcbdbba6663beb566dd60ca1975fc3b24a3bbf7b1ce324dab02ff76656", "createdAt": "2025-09-16T12:21:00Z", "description": "OADP (OpenShift API for Data Protection) operator sets up and installs Data Protection Applications on the OpenShift platform.", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "true", "features.operators.openshift.io/proxy-aware": "true", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "true", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "olm.operatorGroup": "openshift-adp", "olm.operatorNamespace": "openshift-adp", "olm.skipRange": "\u003e=0.0.0 \u003c1.4.9", "olm.targetNamespaces": "openshift-adp", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"oadp.openshift.io\",\"kind\":\"CloudStorage\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"oadp.openshift.io\",\"kind\":\"DataProtectionApplication\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"velero.io\",\"kind\":\"Backup\",\"version\":\"v1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"velero.io\",\"kind\":\"BackupRepository\",\"version\":\"v1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"velero.io\",\"kind\":\"BackupStorageLocation\",\"version\":\"v1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"velero.io\",\"kind\":\"DataDownload\",\"version\":\"v2alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"velero.io\",\"kind\":\"DataUpload\",\"version\":\"v2alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"velero.io\",\"kind\":\"DeleteBackupRequest\",\"version\":\"v1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"velero.io\",\"kind\":\"DownloadRequest\",\"version\":\"v1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"velero.io\",\"kind\":\"PodVolumeBackup\",\"version\":\"v1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"velero.io\",\"kind\":\"PodVolumeRestore\",\"version\":\"v1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"velero.io\",\"kind\":\"Restore\",\"version\":\"v1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"velero.io\",\"kind\":\"Schedule\",\"version\":\"v1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"velero.io\",\"kind\":\"ServerStatusRequest\",\"version\":\"v1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"velero.io\",\"kind\":\"VolumeSnapshotLocation\",\"version\":\"v1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"redhat-oadp-operator\",\"version\":\"1.4.9\"}}]}", "operatorframework.io/suggested-namespace": "openshift-adp", "operators.openshift.io/infrastructure-features": "[\"Disconnected\"]", "operators.openshift.io/must-gather-image": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4a92d1bf0807e46b0c1e9be635db465028104090eaf16be448c40cf543ce5a7f", "operators.openshift.io/valid-subscription": "[\"OpenShift Kubernetes Engine\", \"OpenShift Container Platform\", \"OpenShift Platform Plus\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.34.2", "operators.operatorframework.io/project_layout": "go.kubebuilder.io/v3", "repository": "https://github.com/openshift/oadp-operator", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager" } }, "spec": { "containers": [ { "args": [ "--leader-elect" ], "command": [ "/manager" ], "env": [ { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.annotations['olm.targetNamespaces']" } } }, { "name": "RESTIC_PV_HOSTPATH" }, { "name": "FS_PV_HOSTPATH" }, { "name": "PLUGINS_HOSTPATH" }, { "name": "RELATED_IMAGE_VELERO", "value": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c1fce30641dec0001ffa3fbc50bf641e61141c1e787cdb8e0cbe78cd4c845d29" }, { "name": "RELATED_IMAGE_VELERO_RESTORE_HELPER", "value": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:a75b01dee4d86c9b3bdb39826bd637ede580359d3991b50fdb9939c08df312c2" }, { "name": "RELATED_IMAGE_OPENSHIFT_VELERO_PLUGIN", "value": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:bc5dc692b2c4f6134a7be127bd8939cfdb0ba4e683e0fd95019804cb6f149b9f" }, { "name": "RELATED_IMAGE_VELERO_PLUGIN_FOR_AWS", "value": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:98f8914fba3f4131f7be7146f20b369827dafc62916b63d30ec379e151759213" }, { "name": "RELATED_IMAGE_VELERO_PLUGIN_FOR_LEGACY_AWS", "value": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:c5debdc06cf6d09eed41c5dcb0bc5454d499f28b1637ce65e049d2c7ca9efdc2" }, { "name": "RELATED_IMAGE_VELERO_PLUGIN_FOR_MICROSOFT_AZURE", "value": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:19250aa6136e525f62010394f10e103417a76315077aacefa72724cd85b4c1c4" }, { "name": "RELATED_IMAGE_VELERO_PLUGIN_FOR_GCP", "value": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:886b2a1cab974c79e9ef11a6e2894aefbf9dc05ff6ca3f4bc883f75c34928a5f" }, { "name": "RELATED_IMAGE_KUBEVIRT_VELERO_PLUGIN", "value": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:39e3df46c979ee143ce66c380c52bd52153d43da1e0c4b9317993666aed5344c" }, { "name": "RELATED_IMAGE_HYPERSHIFT_VELERO_PLUGIN", "value": "quay.io/redhat-user-workloads/ocp-art-tenant/oadp-hypershift-oadp-plugin-oadp-1-4" }, { "name": "RELATED_IMAGE_MUSTGATHER", "value": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:4a92d1bf0807e46b0c1e9be635db465028104090eaf16be448c40cf543ce5a7f" }, { "name": "OPERATOR_CONDITION_NAME", "value": "oadp-operator.v1.4.9" } ], "image": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b3b2f0fcbdbba6663beb566dd60ca1975fc3b24a3bbf7b1ce324dab02ff76656", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "512Mi" }, "requests": { "cpu": "500m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false }, "startupProbe": { "failureThreshold": 12, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "openshift-adp-controller-manager", "serviceAccountName": "openshift-adp-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:47:28Z", "lastUpdateTime": "2026-05-13T16:47:28Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:17Z", "lastUpdateTime": "2026-05-13T16:47:28Z", "message": "ReplicaSet \"openshift-adp-controller-manager-dc998bfc9\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 2, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:50:38Z", "generation": 1, "labels": { "app.kubernetes.io/component": "server", "app.kubernetes.io/instance": "velero-aws", "app.kubernetes.io/managed-by": "oadp-operator", "app.kubernetes.io/name": "velero", "component": "velero", "openshift.io/oadp": "True" }, "name": "velero", "namespace": "openshift-adp", "ownerReferences": [ { "apiVersion": "oadp.openshift.io/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "DataProtectionApplication", "name": "velero-aws", "uid": "24973957-57bc-4fba-b2b5-448cb4d357f2" } ], "resourceVersion": "35290", "uid": "cbf1fde5-68a1-467d-9c8a-edca8c8c1c45" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "server", "app.kubernetes.io/instance": "velero-aws", "app.kubernetes.io/managed-by": "oadp-operator", "app.kubernetes.io/name": "velero", "component": "velero", "deploy": "velero", "openshift.io/oadp": "True" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "prometheus.io/path": "/metrics", "prometheus.io/port": "8085", "prometheus.io/scrape": "true" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "server", "app.kubernetes.io/instance": "velero-aws", "app.kubernetes.io/managed-by": "oadp-operator", "app.kubernetes.io/name": "velero", "component": "velero", "deploy": "velero", "openshift.io/oadp": "True" } }, "spec": { "containers": [ { "args": [ "server", "--client-page-size=100", "--fs-backup-timeout=4h0m0s", "--restore-resource-priorities=securitycontextconstraints,customresourcedefinitions,klusterletconfigs.config.open-cluster-management.io,managedcluster.cluster.open-cluster-management.io,namespaces,roles,rolebindings,clusterrolebindings,klusterletaddonconfig.agent.open-cluster-management.io,managedclusteraddon.addon.open-cluster-management.io,storageclasses,volumesnapshotclass.snapshot.storage.k8s.io,volumesnapshotcontents.snapshot.storage.k8s.io,volumesnapshots.snapshot.storage.k8s.io,datauploads.velero.io,persistentvolumes,persistentvolumeclaims,serviceaccounts,secrets,configmaps,limitranges,pods,replicasets.apps,clusterclasses.cluster.x-k8s.io,endpoints,services,-,clusterbootstraps.run.tanzu.vmware.com,clusters.cluster.x-k8s.io,clusterresourcesets.addons.cluster.x-k8s.io", "--resource-timeout=30m", "--disable-informer-cache=false" ], "command": [ "/velero" ], "env": [ { "name": "VELERO_SCRATCH_DIR", "value": "/scratch" }, { "name": "VELERO_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "LD_LIBRARY_PATH", "value": "/plugins" }, { "name": "OPENSHIFT_IMAGESTREAM_BACKUP", "value": "true" } ], "image": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:c1fce30641dec0001ffa3fbc50bf641e61141c1e787cdb8e0cbe78cd4c845d29", "imagePullPolicy": "IfNotPresent", "name": "velero", "ports": [ { "containerPort": 8085, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "500m", "memory": "128Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/plugins", "name": "plugins" }, { "mountPath": "/scratch", "name": "scratch" }, { "mountPath": "/etc/ssl/certs", "name": "certs" }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "image": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:bc5dc692b2c4f6134a7be127bd8939cfdb0ba4e683e0fd95019804cb6f149b9f", "imagePullPolicy": "IfNotPresent", "name": "openshift-velero-plugin", "resources": { "requests": { "cpu": "500m", "memory": "128Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/target", "name": "plugins" } ] }, { "image": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:98f8914fba3f4131f7be7146f20b369827dafc62916b63d30ec379e151759213", "imagePullPolicy": "IfNotPresent", "name": "velero-plugin-for-aws", "resources": { "requests": { "cpu": "500m", "memory": "128Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/target", "name": "plugins" } ] } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "velero", "serviceAccountName": "velero", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "plugins" }, { "emptyDir": {}, "name": "scratch" }, { "emptyDir": {}, "name": "certs" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:50:47Z", "lastUpdateTime": "2026-05-13T16:50:47Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:50:38Z", "lastUpdateTime": "2026-05-13T16:50:47Z", "message": "ReplicaSet \"velero-5498cfc4db\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/ibm-cloud-managed": "true" }, "creationTimestamp": "2026-05-13T16:20:53Z", "generation": 1, "name": "cluster-samples-operator", "namespace": "openshift-cluster-samples-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "389147f5-445e-4654-a83b-68cfdd60fb99" } ], "resourceVersion": "9931", "uid": "84e06759-9545-4bd7-91a6-4af893bf25ee" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "name": "cluster-samples-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "cluster-samples-operator" } }, "spec": { "containers": [ { "command": [ "cluster-samples-operator" ], "env": [ { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "OPERATOR_NAME", "value": "cluster-samples-operator" }, { "name": "RELEASE_VERSION", "value": "4.18.9" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d09ac899f3001937771c6cadd50802a983e7c833fa2e0bde1958e134458c76ae", "imagePullPolicy": "IfNotPresent", "name": "cluster-samples-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/secrets", "name": "samples-operator-tls" } ] }, { "args": [ "--namespace=openshift-cluster-samples-operator", "--process-name=cluster-samples-operator", "--termination-grace-period=30s", "--files=/etc/secrets/tls.crt,/etc/secrets/tls.key" ], "command": [ "cluster-samples-operator-watch", "file-watcher-watchdog" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d09ac899f3001937771c6cadd50802a983e7c833fa2e0bde1958e134458c76ae", "imagePullPolicy": "IfNotPresent", "name": "cluster-samples-operator-watch", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cluster-samples-operator", "serviceAccountName": "cluster-samples-operator", "shareProcessNamespace": true, "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "samples-operator-tls", "secret": { "defaultMode": 420, "secretName": "samples-operator-tls" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:29:56Z", "lastUpdateTime": "2026-05-13T16:29:56Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:20:59Z", "lastUpdateTime": "2026-05-13T16:29:56Z", "message": "ReplicaSet \"cluster-samples-operator-695d9bb6bd\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "config.openshift.io/inject-proxy": "console-operator", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true" }, "creationTimestamp": "2026-05-13T16:20:56Z", "generation": 1, "name": "console-operator", "namespace": "openshift-console-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "389147f5-445e-4654-a83b-68cfdd60fb99" } ], "resourceVersion": "9933", "uid": "480e7b57-7065-489f-9b63-7cadc41ba02b" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "name": "console-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "console-operator" } }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/controller-config.yaml" ], "command": [ "console", "operator" ], "env": [ { "name": "CONSOLE_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7b84f135cfa446962ac6a1a03888a874e2e0ddedeefe32a30a70f535dcd2c721" }, { "name": "DOWNLOADS_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cdba3ca6e2b89d411b5ef466468bc8d91a07bf4bd14238baa65fb4397f54257d" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.9" }, { "name": "OPERATOR_NAME", "value": "console-operator" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:41029e57ece558b2e0b12174ce924647fd9d5c5d83aadf4bba03d6916d3f9f54", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "console-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca" } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console-operator", "serviceAccountName": "console-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "console-operator-config" }, "name": "config" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca" }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:29:56Z", "lastUpdateTime": "2026-05-13T16:29:56Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:21:00Z", "lastUpdateTime": "2026-05-13T16:29:56Z", "message": "ReplicaSet \"console-operator-7d4ddc79d6\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "9897", "console.openshift.io/console-config-version": "23002", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7b84f135cfa446962ac6a1a03888a874e2e0ddedeefe32a30a70f535dcd2c721", "console.openshift.io/infrastructure-config-version": "1380", "console.openshift.io/oauth-secret-version": "10013", "console.openshift.io/proxy-config-version": "1394", "console.openshift.io/service-ca-config-version": "10368", "console.openshift.io/trusted-ca-config-version": "10376", "deployment.kubernetes.io/revision": "6", "operator.openshift.io/spec-hash": "a9d697038db5ae15127fe9b7feaec941ac346e1f73308f7be112acb5624d6f02" }, "creationTimestamp": "2026-05-13T16:30:03Z", "generation": 6, "labels": { "app": "console", "component": "ui" }, "name": "console", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "controller": true, "kind": "Console", "name": "cluster", "uid": "bbfcb4f8-de34-40d1-9a4a-c0fd93c21014" } ], "resourceVersion": "26663", "uid": "a88b2a46-24bb-4897-8703-6debbac170ca" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "console", "component": "ui" } }, "strategy": { "rollingUpdate": { "maxSurge": 3, "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "9897", "console.openshift.io/console-config-version": "23002", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7b84f135cfa446962ac6a1a03888a874e2e0ddedeefe32a30a70f535dcd2c721", "console.openshift.io/infrastructure-config-version": "1380", "console.openshift.io/oauth-secret-version": "10013", "console.openshift.io/proxy-config-version": "1394", "console.openshift.io/service-ca-config-version": "10368", "console.openshift.io/trusted-ca-config-version": "10376", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7b84f135cfa446962ac6a1a03888a874e2e0ddedeefe32a30a70f535dcd2c721", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-05-13T16:30:14Z", "lastUpdateTime": "2026-05-13T16:30:14Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:30:03Z", "lastUpdateTime": "2026-05-13T16:48:06Z", "message": "ReplicaSet \"console-8cc6d6f86\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 6, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "d5a0ecafbc6da39b11300e610cad32356dc1fb7aedd0f02976153facbcd526a7" }, "creationTimestamp": "2026-05-13T16:29:55Z", "generation": 1, "labels": { "app": "console", "component": "downloads" }, "name": "downloads", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "controller": true, "kind": "Console", "name": "cluster", "uid": "bbfcb4f8-de34-40d1-9a4a-c0fd93c21014" } ], "resourceVersion": "12357", "uid": "8b41ec74-ae0f-4726-b724-3759f191efb4" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "console", "component": "downloads" } }, "strategy": { "rollingUpdate": { "maxSurge": 3, "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "downloads" }, "name": "downloads" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "downloads" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "-c", "cat \u003c\u003cEOF \u003e\u003e/tmp/serve.py\nimport errno, http.server, os, re, signal, socket, sys, tarfile, tempfile, threading, time, zipfile\n\nsignal.signal(signal.SIGTERM, lambda signum, frame: sys.exit(0))\n\ndef write_index(path, message):\n with open(path, 'wb') as f:\n f.write('\\n'.join([\n '\u003c!doctype html\u003e',\n '\u003chtml lang=\"en\"\u003e',\n '\u003chead\u003e',\n ' \u003cmeta charset=\"utf-8\"\u003e',\n '\u003c/head\u003e',\n '\u003cbody\u003e',\n ' {}'.format(message),\n '\u003c/body\u003e',\n '\u003c/html\u003e',\n '',\n ]).encode('utf-8'))\n\n# Launch multiple listeners as threads\nclass Thread(threading.Thread):\n def __init__(self, i, socket):\n threading.Thread.__init__(self)\n self.i = i\n self.socket = socket\n self.daemon = True\n self.start()\n\n def run(self):\n server = http.server.SimpleHTTPRequestHandler\n server.server_version = \"OpenShift Downloads Server\"\n server.sys_version = \"\"\n httpd = http.server.HTTPServer(addr, server, False)\n\n # Prevent the HTTP server from re-binding every handler.\n # https://stackoverflow.com/questions/46210672/\n httpd.socket = self.socket\n httpd.server_bind = self.server_close = lambda self: None\n\n httpd.serve_forever()\n\ntemp_dir = tempfile.mkdtemp()\nprint('serving from {}'.format(temp_dir))\nos.chdir(temp_dir)\nfor arch in ['amd64', 'arm64', 'ppc64le', 's390x']:\n os.mkdir(arch)\ncontent = ['\u003ca href=\"oc-license\"\u003elicense\u003c/a\u003e']\nos.symlink('/usr/share/openshift/LICENSE', 'oc-license')\n\nfor arch, operating_system, path in [\n ('amd64', 'linux', '/usr/share/openshift/linux_amd64/oc'),\n ('amd64', 'mac', '/usr/share/openshift/mac/oc'),\n ('amd64', 'windows', '/usr/share/openshift/windows/oc.exe'),\n ('arm64', 'linux', '/usr/share/openshift/linux_arm64/oc'),\n ('arm64', 'mac', '/usr/share/openshift/mac_arm64/oc'),\n ('ppc64le', 'linux', '/usr/share/openshift/linux_ppc64le/oc'),\n ('s390x', 'linux', '/usr/share/openshift/linux_s390x/oc'),\n ]:\n basename = os.path.basename(path)\n target_path = os.path.join(arch, operating_system, basename)\n os.mkdir(os.path.join(arch, operating_system))\n os.symlink(path, target_path)\n base_root, _ = os.path.splitext(basename)\n archive_path_root = os.path.join(arch, operating_system, base_root)\n with tarfile.open('{}.tar'.format(archive_path_root), 'w') as tar:\n tar.add(path, basename)\n with zipfile.ZipFile('{}.zip'.format(archive_path_root), 'w') as zip:\n zip.write(path, basename)\n content.append(\n '\u003ca href=\"{0}\"\u003eoc ({1} {2})\u003c/a\u003e (\u003ca href=\"{3}.tar\"\u003etar\u003c/a\u003e \u003ca href=\"{3}.zip\"\u003ezip\u003c/a\u003e)'.format(\n target_path, arch, operating_system, archive_path_root\n )\n )\n\nfor root, directories, filenames in os.walk(temp_dir):\n root_link = os.path.relpath(temp_dir, os.path.join(root, 'child')).replace(os.path.sep, '/')\n for directory in directories:\n write_index(\n path=os.path.join(root, directory, 'index.html'),\n message='\u003cp\u003eDirectory listings are disabled. See \u003ca href=\"{}\"\u003ehere\u003c/a\u003e for available content.\u003c/p\u003e'.format(root_link),\n )\n\nwrite_index(\n path=os.path.join(temp_dir, 'index.html'),\n message='\\n'.join(\n ['\u003cul\u003e'] +\n [' \u003cli\u003e{}\u003c/li\u003e'.format(entry) for entry in content] +\n ['\u003c/ul\u003e']\n ),\n)\n\n# Create socket\n# IPv6 should handle IPv4 passively so long as it is not bound to a\n# specific address or set to IPv6_ONLY\n# https://stackoverflow.com/questions/25817848/python-3-does-http-server-support-ipv6\ntry:\n addr = ('::', 8080)\n sock = socket.socket(socket.AF_INET6, socket.SOCK_STREAM)\nexcept socket.error as err:\n # errno.EAFNOSUPPORT is \"socket.error: [Errno 97] Address family not supported by protocol\"\n # When IPv6 is disabled, socket will bind using IPv4.\n if err.errno == errno.EAFNOSUPPORT:\n addr = ('', 8080)\n sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)\n else:\n raise \nsock.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)\nsock.bind(addr)\nsock.listen(5)\n\n[Thread(i, socket=sock) for i in range(100)]\ntime.sleep(9e9)\nEOF\nexec python3 /tmp/serve.py\n" ], "command": [ "/bin/sh" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cdba3ca6e2b89d411b5ef466468bc8d91a07bf4bd14238baa65fb4397f54257d", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "download-server", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 0, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-05-13T16:30:41Z", "lastUpdateTime": "2026-05-13T16:30:41Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:29:56Z", "lastUpdateTime": "2026-05-13T16:30:46Z", "message": "ReplicaSet \"downloads-6d4c9b4b6c\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-05-13T16:30:56Z", "generation": 4, "labels": { "olm.deployment-spec-hash": "cARLRMxHm58tY1ruslQHQ8GGVnFfsmR2x6khcy", "olm.managed": "true", "olm.owner": "deployment-validation-operator.v0.1.595-gbf89fe8", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-deployment-validation-operator", "operators.coreos.com/deployment-validation-operator.openshift-deployment-validation": "" }, "name": "deployment-validation-operator", "namespace": "openshift-deployment-validation-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "deployment-validation-operator.v0.1.595-gbf89fe8", "uid": "3bb5319c-61b9-4d5d-a47c-99f2e1ddf715" } ], "resourceVersion": "15448", "uid": "b0f646b6-0918-4181-87eb-c61ba5bdc466" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 1, "selector": { "matchLabels": { "app": "deployment-validation-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": 1, "maxUnavailable": 0 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "capabilities": "Basic Install", "categories": "Application Runtime, Monitoring, Security", "certified": "false", "containerImage": "quay.io/app-sre/deployment-validation-operator:0.1.595-gbf89fe8", "createdAt": "2026-04-24T10:27:15Z", "description": "The deployment validation operator", "olm.operatorGroup": "deployment-validation-operator-og", "olm.operatorNamespace": "openshift-deployment-validation-operator", "olm.targetNamespaces": "openshift-deployment-validation-operator", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.package\",\"value\":{\"packageName\":\"deployment-validation-operator\",\"version\":\"0.1.595-gbf89fe8\"}}]}", "repository": "https://github.com/app-sre/deployment-validation-operator", "support": "Best Effort" }, "creationTimestamp": null, "labels": { "app": "deployment-validation-operator", "name": "deployment-validation-operator" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "deployment-validation-operator" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "--config /config/deployment-validation-operator-config.yaml" ], "env": [ { "name": "WATCH_NAMESPACE" }, { "name": "OPERATOR_NAME", "value": "deployment-validation-operator" }, { "name": "NAMESPACE_IGNORE_PATTERN", "value": "^(openshift.*|kube-.*|default|dedicated-admin|redhat-.*|acm|addon-dba-operator|codeready-.*|prow)$" }, { "name": "RESOURCES_PER_LIST_QUERY", "value": "5" }, { "name": "VALIDATION_CHECK_INTERVAL", "value": "2m" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "OPERATOR_CONDITION_NAME", "value": "deployment-validation-operator.v0.1.595-gbf89fe8" } ], "image": "quay.io/app-sre/deployment-validation-operator:0.1.595-gbf89fe8", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "deployment-validation-operator", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "resources": { "limits": { "memory": "600Mi" }, "requests": { "cpu": "50m", "memory": "400Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/config", "name": "dvo-config" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/arch": "amd64" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "deployment-validation-operator", "serviceAccountName": "deployment-validation-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/infra", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "deployment-validation-operator-config", "optional": true }, "name": "dvo-config" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:36:07Z", "lastUpdateTime": "2026-05-13T16:36:07Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:30:56Z", "lastUpdateTime": "2026-05-13T16:36:07Z", "message": "ReplicaSet \"deployment-validation-operator-56d8559945\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 4, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:46:03Z", "generation": 1, "name": "cluster", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "pipelines.openshift.io/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "GitopsService", "name": "cluster", "uid": "0b7de2d8-76a3-4c8d-8c61-c0c94d8c029d" } ], "resourceVersion": "19435", "uid": "a91e9f02-f9c3-4070-bd89-d33732a082b2" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/name": "cluster" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "cluster", "openshift.io/required-scc": "restricted-v2" } }, "spec": { "containers": [ { "env": [ { "name": "INSECURE", "value": "true" } ], "image": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5bda26e2c16beebf66dd8f3c3c55d48e2f00db870f2d9d4d44570d9d3b8bddb0", "imagePullPolicy": "IfNotPresent", "name": "cluster", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/gitops/ssl", "name": "backend-ssl", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "gitops-service-cluster", "serviceAccountName": "gitops-service-cluster", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "backend-ssl", "secret": { "defaultMode": 420, "secretName": "cluster" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:46:14Z", "lastUpdateTime": "2026-05-13T16:46:14Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:46:03Z", "lastUpdateTime": "2026-05-13T16:46:14Z", "message": "ReplicaSet \"cluster-6459768798\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:46:03Z", "generation": 1, "labels": { "app": "gitops-plugin", "app.kubernetes.io/component": "gitops-plugin", "app.kubernetes.io/instance": "gitops-plugin", "app.kubernetes.io/part-of": "gitops-plugin", "app.kubernetes.io/runtime-namespace": "openshift-gitops" }, "name": "gitops-plugin", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "pipelines.openshift.io/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "GitopsService", "name": "cluster", "uid": "0b7de2d8-76a3-4c8d-8c61-c0c94d8c029d" } ], "resourceVersion": "19421", "uid": "d0bea56e-2003-47a8-91e0-24eb011354d7" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "gitops-plugin" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "gitops-plugin" } }, "spec": { "containers": [ { "image": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:41717c27915251bda8afeef651b609b8a9ed410e0fa09c4cf8fa7e91d6a94292", "imagePullPolicy": "Always", "name": "gitops-plugin", "ports": [ { "containerPort": 9001, "name": "http", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/httpd-ssl/certs/tls.crt", "name": "console-serving-cert", "readOnly": true, "subPath": "tls.crt" }, { "mountPath": "/etc/httpd-ssl/private/tls.key", "name": "console-serving-cert", "readOnly": true, "subPath": "tls.key" }, { "mountPath": "/etc/httpd-cfg/httpd.conf", "name": "httpd-cfg", "readOnly": true, "subPath": "httpd.conf" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "httpd-cfg" }, "name": "httpd-cfg" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:46:13Z", "lastUpdateTime": "2026-05-13T16:46:13Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:46:03Z", "lastUpdateTime": "2026-05-13T16:46:13Z", "message": "ReplicaSet \"gitops-plugin-64f4967d99\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:46:05Z", "generation": 1, "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "argocd-applicationset-controller", "app.kubernetes.io/part-of": "argocd-applicationset" }, "name": "openshift-gitops-applicationset-controller", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "1aa7c47b-8bc6-434f-a215-b131c369d91c" } ], "resourceVersion": "19448", "uid": "fdb971ec-e67f-4672-9d62-090709e0facf" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/name": "openshift-gitops-applicationset-controller" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "openshift-gitops-applicationset-controller" } }, "spec": { "containers": [ { "command": [ "entrypoint.sh", "argocd-applicationset-controller", "--argocd-repo-server", "openshift-gitops-repo-server.openshift-gitops.svc.cluster.local:8081", "--loglevel", "info" ], "env": [ { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:911733d78ae6f36f642b4d63f044cd102b7eee170508eaf518ac7acf0f339698", "imagePullPolicy": "Always", "name": "argocd-applicationset-controller", "ports": [ { "containerPort": 7000, "name": "webhook", "protocol": "TCP" }, { "containerPort": 8080, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "2", "memory": "1Gi" }, "requests": { "cpu": "250m", "memory": "512Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/ssh", "name": "ssh-known-hosts" }, { "mountPath": "/app/config/tls", "name": "tls-certs" }, { "mountPath": "/app/config/gpg/source", "name": "gpg-keys" }, { "mountPath": "/app/config/gpg/keys", "name": "gpg-keyring" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-gitops-applicationset-controller", "serviceAccountName": "openshift-gitops-applicationset-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "argocd-ssh-known-hosts-cm" }, "name": "ssh-known-hosts" }, { "configMap": { "defaultMode": 420, "name": "argocd-tls-certs-cm" }, "name": "tls-certs" }, { "configMap": { "defaultMode": 420, "name": "argocd-gpg-keys-cm" }, "name": "gpg-keys" }, { "emptyDir": {}, "name": "gpg-keyring" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:46:14Z", "lastUpdateTime": "2026-05-13T16:46:14Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:46:05Z", "lastUpdateTime": "2026-05-13T16:46:14Z", "message": "ReplicaSet \"openshift-gitops-applicationset-controller-85ff8f746b\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-05-13T16:46:04Z", "generation": 2, "labels": { "app.kubernetes.io/component": "dex-server", "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops-dex-server", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-dex-server", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "1aa7c47b-8bc6-434f-a215-b131c369d91c" } ], "resourceVersion": "19495", "uid": "4828d973-8412-4cbf-909f-a72590995a64" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/name": "openshift-gitops-dex-server" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "openshift-gitops-dex-server", "dex.config.changed": "05132026-164626-UTC" } }, "spec": { "containers": [ { "command": [ "/shared/argocd-dex", "rundex" ], "image": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a9e2360f00c5c9840a100a6748bd905b8f34169140a33fb0ca4af9cf6db71642", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/live", "port": 5558, "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "dex", "ports": [ { "containerPort": 5556, "name": "http", "protocol": "TCP" }, { "containerPort": 5557, "name": "grpc", "protocol": "TCP" }, { "containerPort": 5558, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "static-files" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "cp", "-n", "/usr/local/bin/argocd", "/shared/argocd-dex" ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:911733d78ae6f36f642b4d63f044cd102b7eee170508eaf518ac7acf0f339698", "imagePullPolicy": "Always", "name": "copyutil", "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "static-files" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-gitops-argocd-dex-server", "serviceAccountName": "openshift-gitops-argocd-dex-server", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "static-files" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:46:14Z", "lastUpdateTime": "2026-05-13T16:46:14Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:46:04Z", "lastUpdateTime": "2026-05-13T16:46:14Z", "message": "ReplicaSet \"openshift-gitops-dex-server-78f774f854\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 2, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:46:05Z", "generation": 1, "labels": { "app.kubernetes.io/component": "redis", "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops-redis", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-redis", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "1aa7c47b-8bc6-434f-a215-b131c369d91c" } ], "resourceVersion": "19231", "uid": "acc1f73c-0b5c-4b0c-8658-7a831203e249" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/name": "openshift-gitops-redis" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "openshift-gitops-redis" } }, "spec": { "containers": [ { "args": [ "redis-server", "--protected-mode", "no", "--save", "", "--appendonly", "no", "--requirepass $(REDIS_PASSWORD)" ], "env": [ { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "admin.password", "name": "openshift-gitops-redis-initial-password" } } } ], "image": "registry.redhat.io/rhel9/redis-7@sha256:2fca0decc49230122f044afb2e7cd8f64921a00141c8c22c2f1402f3564f87f8", "imagePullPolicy": "Always", "name": "redis", "ports": [ { "containerPort": 6379, "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "runAsUser": 999, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/redis/tls", "name": "argocd-operator-redis-tls" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-gitops-argocd-redis", "serviceAccountName": "openshift-gitops-argocd-redis", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "argocd-operator-redis-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-operator-redis-tls" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:46:11Z", "lastUpdateTime": "2026-05-13T16:46:11Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:46:05Z", "lastUpdateTime": "2026-05-13T16:46:11Z", "message": "ReplicaSet \"openshift-gitops-redis-57fd4d6777\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-05-13T16:46:05Z", "generation": 2, "labels": { "app.kubernetes.io/component": "repo-server", "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops-repo-server", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-repo-server", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "1aa7c47b-8bc6-434f-a215-b131c369d91c" } ], "resourceVersion": "20042", "uid": "868009f1-5cd2-41cf-a90b-9fb66fea78a5" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/name": "openshift-gitops-repo-server" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "openshift-gitops-repo-server" } }, "spec": { "automountServiceAccountToken": false, "containers": [ { "command": [ "uid_entrypoint.sh", "argocd-repo-server", "--redis", "openshift-gitops-redis.openshift-gitops.svc.cluster.local:6379", "--loglevel", "info", "--logformat", "text" ], "env": [ { "name": "ARGOCD_EXEC_TIMEOUT", "value": "5m" }, { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "admin.password", "name": "openshift-gitops-redis-initial-password" } } } ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:911733d78ae6f36f642b4d63f044cd102b7eee170508eaf518ac7acf0f339698", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "name": "argocd-repo-server", "ports": [ { "containerPort": 8081, "name": "server", "protocol": "TCP" }, { "containerPort": 8084, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "1Gi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/ssh", "name": "ssh-known-hosts" }, { "mountPath": "/app/config/tls", "name": "tls-certs" }, { "mountPath": "/app/config/gpg/source", "name": "gpg-keys" }, { "mountPath": "/app/config/gpg/keys", "name": "gpg-keyring" }, { "mountPath": "/app/config/reposerver/tls", "name": "argocd-repo-server-tls" }, { "mountPath": "/app/config/reposerver/tls/redis", "name": "argocd-operator-redis-tls" }, { "mountPath": "/home/argocd/cmp-server/plugins", "name": "plugins" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "cp", "-n", "/usr/local/bin/argocd", "/var/run/argocd/argocd-cmp-server" ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:911733d78ae6f36f642b4d63f044cd102b7eee170508eaf518ac7acf0f339698", "imagePullPolicy": "Always", "name": "copyutil", "resources": { "limits": { "cpu": "1", "memory": "1Gi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/argocd", "name": "var-files" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "argocd-ssh-known-hosts-cm" }, "name": "ssh-known-hosts" }, { "configMap": { "defaultMode": 420, "name": "argocd-tls-certs-cm" }, "name": "tls-certs" }, { "configMap": { "defaultMode": 420, "name": "argocd-gpg-keys-cm" }, "name": "gpg-keys" }, { "emptyDir": {}, "name": "gpg-keyring" }, { "name": "argocd-repo-server-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-repo-server-tls" } }, { "name": "argocd-operator-redis-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-operator-redis-tls" } }, { "emptyDir": {}, "name": "var-files" }, { "emptyDir": {}, "name": "plugins" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:46:25Z", "lastUpdateTime": "2026-05-13T16:46:25Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:46:05Z", "lastUpdateTime": "2026-05-13T16:46:29Z", "message": "ReplicaSet \"openshift-gitops-repo-server-7b646d56dd\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 2, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-05-13T16:46:05Z", "generation": 2, "labels": { "app.kubernetes.io/component": "server", "app.kubernetes.io/managed-by": "openshift-gitops", "app.kubernetes.io/name": "openshift-gitops-server", "app.kubernetes.io/part-of": "argocd" }, "name": "openshift-gitops-server", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "argoproj.io/v1beta1", "blockOwnerDeletion": true, "controller": true, "kind": "ArgoCD", "name": "openshift-gitops", "uid": "1aa7c47b-8bc6-434f-a215-b131c369d91c" } ], "resourceVersion": "19862", "uid": "78884cb8-74cb-4abb-8cfe-494c2b8600a1" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/name": "openshift-gitops-server" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/restartedAt": "2026-05-13T16:46:20Z" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "openshift-gitops-server" } }, "spec": { "containers": [ { "command": [ "argocd-server", "--staticassets", "/shared/app", "--dex-server", "https://openshift-gitops-dex-server.openshift-gitops.svc.cluster.local:5556", "--repo-server", "openshift-gitops-repo-server.openshift-gitops.svc.cluster.local:8081", "--redis", "openshift-gitops-redis.openshift-gitops.svc.cluster.local:6379", "--loglevel", "info", "--logformat", "text" ], "env": [ { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "admin.password", "name": "openshift-gitops-redis-initial-password" } } } ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:911733d78ae6f36f642b4d63f044cd102b7eee170508eaf518ac7acf0f339698", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 3, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "argocd-server", "ports": [ { "containerPort": 8080, "protocol": "TCP" }, { "containerPort": 8083, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 3, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "125m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/ssh", "name": "ssh-known-hosts" }, { "mountPath": "/app/config/tls", "name": "tls-certs" }, { "mountPath": "/app/config/server/tls", "name": "argocd-repo-server-tls" }, { "mountPath": "/app/config/server/tls/redis", "name": "argocd-operator-redis-tls" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-gitops-argocd-server", "serviceAccountName": "openshift-gitops-argocd-server", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "argocd-ssh-known-hosts-cm" }, "name": "ssh-known-hosts" }, { "configMap": { "defaultMode": 420, "name": "argocd-tls-certs-cm" }, "name": "tls-certs" }, { "name": "argocd-repo-server-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-repo-server-tls" } }, { "name": "argocd-operator-redis-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-operator-redis-tls" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:46:24Z", "lastUpdateTime": "2026-05-13T16:46:24Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:46:05Z", "lastUpdateTime": "2026-05-13T16:46:24Z", "message": "ReplicaSet \"openshift-gitops-server-97878f966\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 2, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "4", "imageregistry.operator.openshift.io/checksum": "sha256:dea496e4fc83abed04dced084bc93dffa4bbaef290a105febea9c84f12997494", "operator.openshift.io/spec-hash": "b68c8aa01d159730da89d38c20eb9673eec2fac92ab24aa0a6b7ace22508e15a", "release.openshift.io/version": "4.18.9" }, "creationTimestamp": "2026-05-13T16:21:02Z", "generation": 5, "labels": { "docker-registry": "default" }, "name": "image-registry", "namespace": "openshift-image-registry", "resourceVersion": "13498", "uid": "4a4f0ea0-0334-4b80-9d62-94aa12c07b13" }, "spec": { "progressDeadlineSeconds": 60, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "docker-registry": "default" } }, "strategy": { "rollingUpdate": { "maxSurge": 1, "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "imageregistry.operator.openshift.io/dependencies-checksum": "sha256:9ef11029e312c8aa723e18b89310bfca80de5922bfcbecfb8d8ebaaa7bf2e43c", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "docker-registry": "default" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "namespaces": [ "openshift-image-registry" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/sh", "-c", "mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem \u0026\u0026 update-ca-trust extract --output /etc/pki/ca-trust/extracted/ \u0026\u0026 exec /usr/bin/dockerregistry" ], "env": [ { "name": "REGISTRY_STORAGE", "value": "s3" }, { "name": "REGISTRY_STORAGE_S3_BUCKET", "value": "2q95a2qrikvmhfbbhiok6gk9j50uset8-image-registry-us-east-1-ggam" }, { "name": "REGISTRY_STORAGE_S3_REGION", "value": "us-east-1" }, { "name": "REGISTRY_STORAGE_S3_ENCRYPT", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_FORCEPATHSTYLE", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH", "value": "/var/run/secrets/cloud/credentials" }, { "name": "REGISTRY_STORAGE_S3_USEDUALSTACK", "value": "true" }, { "name": "REGISTRY_HTTP_ADDR", "value": ":5000" }, { "name": "REGISTRY_HTTP_NET", "value": "tcp" }, { "name": "REGISTRY_HTTP_SECRET", "value": "4c394c8f40c5750bdfb093cca12751cd6827d30b48c6672f8cb378c289c55765b861eeb60edcfec73a4b24d31beb1b8ada46594e3f5745fdb320471a0b0717c6" }, { "name": "REGISTRY_LOG_LEVEL", "value": "info" }, { "name": "REGISTRY_OPENSHIFT_QUOTA_ENABLED", "value": "true" }, { "name": "REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR", "value": "inmemory" }, { "name": "REGISTRY_STORAGE_DELETE_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL", "value": "10s" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD", "value": "1" }, { "name": "REGISTRY_OPENSHIFT_METRICS_ENABLED", "value": "true" }, { "name": "REGISTRY_OPENSHIFT_SERVER_ADDR", "value": "image-registry.openshift-image-registry.svc:5000" }, { "name": "REGISTRY_HTTP_TLS_CERTIFICATE", "value": "/etc/secrets/tls.crt" }, { "name": "REGISTRY_HTTP_TLS_KEY", "value": "/etc/secrets/tls.key" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0242cefbf0bb876101c4d67ab4e07401cb0ba6c02be2b73a4f17ba33b2960005", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "registry", "ports": [ { "containerPort": 5000, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/cloud", "name": "image-registry-private-configuration", "readOnly": true }, { "mountPath": "/etc/secrets", "name": "registry-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted", "name": "ca-trust-extracted" }, { "mountPath": "/etc/pki/ca-trust/source/anchors", "name": "registry-certificates" }, { "mountPath": "/usr/share/pki/ca-trust-source", "name": "trusted-ca" }, { "mountPath": "/var/lib/kubelet/", "name": "installation-pull-secrets" }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 1000290000, "fsGroupChangePolicy": "OnRootMismatch" }, "serviceAccount": "registry", "serviceAccountName": "registry", "terminationGracePeriodSeconds": 55, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "kubernetes.io/hostname", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "node-role.kubernetes.io/worker", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "DoNotSchedule" } ], "volumes": [ { "name": "image-registry-private-configuration", "secret": { "defaultMode": 420, "optional": false, "secretName": "image-registry-private-configuration" } }, { "name": "registry-tls", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "image-registry-tls" } } ] } }, { "emptyDir": {}, "name": "ca-trust-extracted" }, { "configMap": { "defaultMode": 420, "name": "image-registry-certificates" }, "name": "registry-certificates" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "anchors/ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "name": "installation-pull-secrets", "secret": { "defaultMode": 420, "items": [ { "key": ".dockerconfigjson", "path": "config.json" } ], "optional": true, "secretName": "installation-pull-secrets" } }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-05-13T16:30:21Z", "lastUpdateTime": "2026-05-13T16:30:21Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:28:52Z", "lastUpdateTime": "2026-05-13T16:31:31Z", "message": "ReplicaSet \"image-registry-648b9d8788\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 5, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-05-13T16:20:59Z", "generation": 2, "labels": { "ingresscontroller.operator.openshift.io/owning-ingresscontroller": "default" }, "name": "router-default", "namespace": "openshift-ingress", "resourceVersion": "11688", "uid": "09f8f378-4cb5-41f5-bc56-a662e2841190" }, "spec": { "minReadySeconds": 30, "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "50%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "ingresscontroller.operator.openshift.io/hash": "6f6b588545" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "node.openshift.io/remote-worker", "operator": "NotIn", "values": [ "" ] } ] } ] } }, "podAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/deployment-ingresscontroller", "operator": "In", "values": [ "default" ] }, { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "NotIn", "values": [ "6f6b588545" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] }, "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/deployment-ingresscontroller", "operator": "In", "values": [ "default" ] }, { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "In", "values": [ "6f6b588545" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "env": [ { "name": "DEFAULT_CERTIFICATE_DIR", "value": "/etc/pki/tls/private" }, { "name": "DEFAULT_DESTINATION_CA_PATH", "value": "/var/run/configmaps/service-ca/service-ca.crt" }, { "name": "RELOAD_INTERVAL", "value": "5s" }, { "name": "ROUTER_ALLOW_WILDCARD_ROUTES", "value": "false" }, { "name": "ROUTER_CANONICAL_HOSTNAME", "value": "router-default.apps.rosa.kx-a1aef7ff78.62h6.p3.openshiftapps.com" }, { "name": "ROUTER_CIPHERS", "value": "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384" }, { "name": "ROUTER_CIPHERSUITES", "value": "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256" }, { "name": "ROUTER_DISABLE_HTTP2", "value": "true" }, { "name": "ROUTER_DISABLE_NAMESPACE_OWNERSHIP_CHECK", "value": "false" }, { "name": "ROUTER_DOMAIN", "value": "apps.rosa.kx-a1aef7ff78.62h6.p3.openshiftapps.com" }, { "name": "ROUTER_IDLE_CLOSE_ON_RESPONSE", "value": "true" }, { "name": "ROUTER_LOAD_BALANCE_ALGORITHM", "value": "random" }, { "name": "ROUTER_METRICS_TLS_CERT_FILE", "value": "/etc/pki/tls/metrics-certs/tls.crt" }, { "name": "ROUTER_METRICS_TLS_KEY_FILE", "value": "/etc/pki/tls/metrics-certs/tls.key" }, { "name": "ROUTER_METRICS_TYPE", "value": "haproxy" }, { "name": "ROUTER_SERVICE_NAME", "value": "default" }, { "name": "ROUTER_SERVICE_NAMESPACE", "value": "openshift-ingress" }, { "name": "ROUTER_SET_FORWARDED_HEADERS", "value": "append" }, { "name": "ROUTER_TCP_BALANCE_SCHEME", "value": "source" }, { "name": "ROUTER_THREADS", "value": "4" }, { "name": "SSL_MIN_VERSION", "value": "TLSv1.2" }, { "name": "STATS_PASSWORD_FILE", "value": "/var/lib/haproxy/conf/metrics-auth/statsPassword" }, { "name": "STATS_PORT", "value": "1936" }, { "name": "STATS_USERNAME_FILE", "value": "/var/lib/haproxy/conf/metrics-auth/statsUsername" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0c1abef76d6d2832ddcff31e950ffafeb4e0f6fad80a5f5dca94591de0fc9581", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "terminationGracePeriodSeconds": 10, "timeoutSeconds": 1 }, "name": "router", "ports": [ { "containerPort": 80, "name": "http", "protocol": "TCP" }, { "containerPort": 443, "name": "https", "protocol": "TCP" }, { "containerPort": 1936, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/ready", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": true, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 120, "httpGet": { "path": "/healthz/ready", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 1, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/tls/private", "name": "default-certificate", "readOnly": true }, { "mountPath": "/var/run/configmaps/service-ca", "name": "service-ca-bundle", "readOnly": true }, { "mountPath": "/var/lib/haproxy/conf/metrics-auth", "name": "stats-auth", "readOnly": true }, { "mountPath": "/etc/pki/tls/metrics-certs", "name": "metrics-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/worker": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "router", "serviceAccountName": "router", "terminationGracePeriodSeconds": 3600, "tolerations": [ { "effect": "NoExecute", "key": "kubernetes.io/e2e-evict-taint-key", "operator": "Equal", "value": "evictTaintVal" } ], "topologySpreadConstraints": [ { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "In", "values": [ "6f6b588545" ] } ] }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "ScheduleAnyway" } ], "volumes": [ { "name": "default-certificate", "secret": { "defaultMode": 420, "secretName": "2q95a2qrikvmhfbbhiok6gk9j50uset8-primary-cert-bundle-secret" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "service-ca-bundle", "optional": false }, "name": "service-ca-bundle" }, { "name": "stats-auth", "secret": { "defaultMode": 420, "secretName": "router-stats-default" } }, { "name": "metrics-certs", "secret": { "defaultMode": 420, "secretName": "router-metrics-certs-default" } } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-05-13T16:30:34Z", "lastUpdateTime": "2026-05-13T16:30:34Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:20:59Z", "lastUpdateTime": "2026-05-13T16:30:34Z", "message": "ReplicaSet \"router-default-5d49cbc48c\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 2, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "config.openshift.io/inject-proxy": "insights-operator", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true" }, "creationTimestamp": "2026-05-13T16:20:56Z", "generation": 1, "name": "insights-operator", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "389147f5-445e-4654-a83b-68cfdd60fb99" } ], "resourceVersion": "12896", "uid": "0c4c47a9-eb25-4f73-a8db-93b1a156762b" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "insights-operator" } }, "strategy": { "type": "Recreate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "insights-operator" } }, "spec": { "containers": [ { "args": [ "start", "--config=/etc/insights-operator/server.yaml" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "RELEASE_VERSION", "value": "4.18.9" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bb83c9ed575eb45b3d1b046c430011e8ab5172d8bd61ba20309aa8157b65a8d7", "imagePullPolicy": "IfNotPresent", "name": "insights-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "54Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/insights-operator", "name": "snapshots" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/run/configmaps/service-ca-bundle", "name": "service-ca-bundle", "readOnly": true }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "operator", "serviceAccountName": "operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 900 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 900 } ], "volumes": [ { "emptyDir": {}, "name": "snapshots" }, { "configMap": { "defaultMode": 420, "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "service-ca-bundle", "optional": true }, "name": "service-ca-bundle" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "openshift-insights-serving-cert" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:21:02Z", "lastUpdateTime": "2026-05-13T16:29:35Z", "message": "ReplicaSet \"insights-operator-6fd96f47fd\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-05-13T16:31:01Z", "lastUpdateTime": "2026-05-13T16:31:01Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true" }, "creationTimestamp": "2026-05-13T16:20:42Z", "generation": 1, "labels": { "app": "kube-storage-version-migrator-operator" }, "name": "kube-storage-version-migrator-operator", "namespace": "openshift-kube-storage-version-migrator-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "389147f5-445e-4654-a83b-68cfdd60fb99" } ], "resourceVersion": "12693", "uid": "01bdbd5c-f4a9-4385-87e5-52befee27a4e" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "kube-storage-version-migrator-operator" } }, "strategy": { "type": "Recreate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "kube-storage-version-migrator-operator" }, "name": "kube-storage-version-migrator-operator" }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml" ], "command": [ "cluster-kube-storage-version-migrator-operator", "start" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e6ebfeb84922f87603af2498ef3bf8a4665127b28ddc87209a0fc48c229b1448" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9428a5c3cc3a3e5f5a250abcd306499ffb0983a9a7cd064ae5c11dd0cf4fa98c" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.9" }, { "name": "OPERAND_IMAGE_VERSION", "value": "4.18.9" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9428a5c3cc3a3e5f5a250abcd306499ffb0983a9a7cd064ae5c11dd0cf4fa98c", "imagePullPolicy": "IfNotPresent", "name": "kube-storage-version-migrator-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "kube-storage-version-migrator-operator", "serviceAccountName": "kube-storage-version-migrator-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:21:02Z", "lastUpdateTime": "2026-05-13T16:29:35Z", "message": "ReplicaSet \"kube-storage-version-migrator-operator-66d58888b9\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-05-13T16:30:56Z", "lastUpdateTime": "2026-05-13T16:30:56Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "82b034ec71c9941cc8c82ccb033622ff17b75ab250e2c3077a900d8831871090" }, "creationTimestamp": "2026-05-13T16:29:35Z", "generation": 1, "labels": { "app": "migrator" }, "name": "migrator", "namespace": "openshift-kube-storage-version-migrator", "resourceVersion": "9924", "uid": "5a524d63-7e5d-401f-967f-3c128bb110cf" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "migrator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "migrator" } }, "spec": { "containers": [ { "args": [ "trap 'echo \"Termination signal received, but ignored. Continuing...\"; sleep infinity' TERM\nmigrator \"$@\" \u0026 wait $!", "bash", "--alsologtostderr", "--v=2" ], "command": [ "/bin/bash", "-c" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e6ebfeb84922f87603af2498ef3bf8a4665127b28ddc87209a0fc48c229b1448", "imagePullPolicy": "IfNotPresent", "name": "migrator", "resources": { "requests": { "cpu": "10m", "memory": "200Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "trap 'echo \"Gracefully sleeping for 25s to let another pod start...\"; sleep 25; exit' EXIT\nwhile true; do echo \"Waiting for termination...\"; sleep 3600 \u0026 wait $!; done" ], "command": [ "/bin/bash", "-c" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e6ebfeb84922f87603af2498ef3bf8a4665127b28ddc87209a0fc48c229b1448", "imagePullPolicy": "IfNotPresent", "name": "graceful-termination", "resources": { "requests": { "cpu": "1m", "memory": "1Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "kube-storage-version-migrator-sa", "serviceAccountName": "kube-storage-version-migrator-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:29:56Z", "lastUpdateTime": "2026-05-13T16:29:56Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:29:35Z", "lastUpdateTime": "2026-05-13T16:29:56Z", "message": "ReplicaSet \"migrator-6cf78d8f89\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "2", "operator.openshift.io/spec-hash": "1cfd8fc311ccaf3cf42f850d99d7f0277b287985a74ce821cfa2189e1f6718fa" }, "creationTimestamp": "2026-05-13T16:52:03Z", "generation": 2, "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/name": "kueue", "control-plane": "controller-manager" }, "name": "kueue-controller-manager", "namespace": "openshift-kueue-operator", "ownerReferences": [ { "apiVersion": "kueue.openshift.io/v1", "kind": "Kueue", "name": "cluster", "uid": "e85e5878-3f8e-4ef7-b762-d14775ff93b7" } ], "resourceVersion": "38478", "uid": "bd24aac8-c829-463b-9958-412ea8a57b36" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "control-plane": "controller-manager" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "apiservice/v1beta1.visibility.kueue.x-k8s.io": "49bd9cfbaf50a72ab9654f5699b14ddf1cf710e14ffce1950224ccb4e06435d7", "apiservice/v1beta2.visibility.kueue.x-k8s.io": "08df2fbf4e6f7282abe8ccfe9e8503a6e5668743b755ffd2f10e7434b5098343", "certificate/kueue-visibility-server-cert": "112884663d1d65aa2e086bd7145de39089016a820cba725423888aa998164b31", "certificate/metrics-certs": "4b8f6e46959aa8b6518f9eb6395891efe1c19fe90896a1ce82f3c40ba023fca2", "certificate/webhook-cert": "82b2fba9dc0a2af79de1992794fd62b6487ea62c9a448a256b449a6e28b5896f", "clusterrole/kueue-clusterqueue-editor-role": "9554667a2b4a5afab16805607fc912a5229a474328d7e141668c210b19cde259", "clusterrole/kueue-clusterqueue-viewer-role": "27430dc524cdb406f6885b0bacf79643e00a9a5e586987263fae20107080e919", "clusterrole/kueue-cohort-editor-role": "f48c461c79990bd6597b8df9891d1750cd49a7e37867ec7d908561bf3783b16c", "clusterrole/kueue-cohort-viewer-role": "f1a8300e7fb80c262b05a03ebaf6c6afe186ab0ee82ede9205b300adaf41962d", "clusterrole/kueue-jaxjob-editor-role": "c66c63d72e388c07a69c48abd0e74550182a095b9b19eed37d53bb79f62eaadf", "clusterrole/kueue-jaxjob-viewer-role": "415025a9f98432a2903b7198e1c0d32c337fd5b8c98dc2c069b5a63aa666c334", "clusterrole/kueue-job-editor-role": "31969e3653a4af4c61c796282530e3b26c6d927032bed3447bd0757805f94b7b", "clusterrole/kueue-job-viewer-role": "ea59780fe640a5694187c68a97cc690833979faa3253e3b2962a5c2779c22edd", "clusterrole/kueue-jobset-editor-role": "21c09044062a912478d92c45866b5f154bf876301e8e47e88e7be0f2de91634c", "clusterrole/kueue-jobset-viewer-role": "b1fb1abb986409a9ee24b54f968085c82ea09ebb1cff0012bb474f1d850905dc", "clusterrole/kueue-leaderworkerset-editor-role": "978dfbdd3e14e1d4915f4bca60421de511f8720f4657d7bcc749c0d45c03d242", "clusterrole/kueue-leaderworkerset-viewer-role": "3d6ff03e879b3aa1b59ba00a6135b22e47f27b762c0dc8d0949893c929f230ff", "clusterrole/kueue-localqueue-editor-role": "2e8351331ea22d4106892302f32aa07f35ffe7b6cd2d4d3235021a5a781cbad7", "clusterrole/kueue-localqueue-viewer-role": "6acc8c50d988d270c95ef767a31ca8f228bd1bd342689e006249f00efa4afb2c", "clusterrole/kueue-manager-role": "4fb95f3c8c8fb98d87b61690557d9e2dccba645fc92abe941baf6c0d1541036d", "clusterrole/kueue-metrics-auth-role": "26c3e8d08e5dd279fc194c8699f5377dc9efd87e2083c9b05561d8754c9f9af5", "clusterrole/kueue-metrics-reader": "7a16b32612f51ee1b7e47aebbe68754ce2b70922111ccc6b273c83f72a0a106a", "clusterrole/kueue-mpijob-editor-role": "34d10b747863cb080738289c5c569b589c3612c2a6c412136b65e9bc40811410", "clusterrole/kueue-mpijob-viewer-role": "4af7224a17de7698b65a3eea27594cc0a5c745a390189c53bb7baa4f380d4e51", "clusterrole/kueue-mxjob-editor-role": "90b83557c4b76a4f29bfb208d72699058c917f38c43cb1328d63752022385a44", "clusterrole/kueue-mxjob-viewer-role": "e6b2d26957074476db9fd8e89f1f7fcd8a1d7bcfb8d9a338f4ff8d4828fa1113", "clusterrole/kueue-openshift-roles": "985f12bb839eb3cf977559bb291a3b58d325c8912ac8bacb05fca02955a3bf69", "clusterrole/kueue-paddlejob-editor-role": "649d19223dd1e2779c70585d62e96a848f4673539032b3888af8bf546d491cb5", "clusterrole/kueue-paddlejob-viewer-role": "f3b52afcae7cdbe460ed418b653e7fd1627b8b711391d253cbb922280d8602f0", "clusterrole/kueue-pending-workloads-cq-viewer-role": "fbb0e1ed5c28ae7a6965b06e35e9371c21ba3bd9ec1fea94c89145030706939a", "clusterrole/kueue-pending-workloads-lq-viewer-role": "03ec0aea59fc76abb1efd95c64c9e6e8b150762d00f2e7cfd2530d5fe1ea3db0", "clusterrole/kueue-proxy-role": "26c3e8d08e5dd279fc194c8699f5377dc9efd87e2083c9b05561d8754c9f9af5", "clusterrole/kueue-pytorchjob-editor-role": "b48b530a15b65da6c2609e5002c802fee40d705df4f9208c95d6adaffb129128", "clusterrole/kueue-pytorchjob-viewer-role": "af8bb85c8ec142051cb592f0fbdeeef473b0e4f4497364560e0416d54dbeddac", "clusterrole/kueue-raycluster-editor-role": "0296c797be4d9f812d4ca3de2c58de030b770176b0d3f2e3354dce61da67ada1", "clusterrole/kueue-raycluster-viewer-role": "27c1256bf4bd0e82ae3b68a793681aa76abd8729002cbdaee2b981561a61bbed", "clusterrole/kueue-rayjob-editor-role": "367d6f26e47126239669a4ea946877452b1b6055b950e335a30aeca4b60d7c1a", "clusterrole/kueue-rayjob-viewer-role": "ac0c22258f6121bd37d7a2472134eb9a357e4586877ea4dd513cb04d73e27482", "clusterrole/kueue-resourceflavor-editor-role": "02512f1702f2fc683a608c3713374e0f169d9a81638954a4f11d560e16db246a", "clusterrole/kueue-resourceflavor-viewer-role": "e4d0076d3090e2da4f58a2ab3dc42968797200c249dfcd2cd58a9476e60d654b", "clusterrole/kueue-tfjob-editor-role": "c7cd19e486b7f7f75bb18b0b7852cb86b9401d9ae0b0808780c935c2e0287cfc", "clusterrole/kueue-tfjob-viewer-role": "2d4359daaef02f8321b463a758c1186c4484c062dea3e57fa29aa5a274c07d23", "clusterrole/kueue-topology-editor-role": "36d1205d6884def955398b411f2bc95ea333880b33ccdd62f97917aab2405a5e", "clusterrole/kueue-topology-viewer-role": "12a0f7ff19e03da40da4be77ca27c6af44e6ad549cbbead8dc7303bd03907662", "clusterrole/kueue-trainjob-editor-role": "e4ab9ba12996b31b302b5d49b263a9aa9b3de0b05b8bbc6679a47730fff8174e", "clusterrole/kueue-trainjob-viewer-role": "8dfa1f3e232ebb6db284a2b698f1fc82130689fa7b9c934322c76e8b88711000", "clusterrole/kueue-workload-editor-role": "7f4c2628cc95a5c2ba0b624791c7643827b9587ff6dc78e1c5c36bded5dfd4ec", "clusterrole/kueue-workload-viewer-role": "e39a5bb4b7c677a069a45d8fd250d62f851b01cdd9dbd9467762f4df0b9c7ce1", "clusterrole/kueue-xgboostjob-editor-role": "a03e320306b7096031d05317e59e69f2436e41f64acdedd6962f7b1101b6c3b9", "clusterrole/kueue-xgboostjob-viewer-role": "e08b1bff6bcc7784a356b557e3d89951bcadeb05772b158f4f58144c860ef5c5", "clusterrolebinding/kueue-manager-rolebinding": "3dcba3395e4ffd4a736515239e68ea95d7abe31e8fd8d1f9b7ad31b62b09f76f", "clusterrolebinding/kueue-metrics-auth-rolebinding": "bf828538e755997cb5c25abda34f97cab02a81511ef8a15017c276a079da3e51", "clusterrolebinding/kueue-metrics-monitoring-rolebinding": "ddb55c5d7c425d2a44498bcba30fb6e8ba837af4c17e19cc97b97a4619dca2c5", "clusterrolebinding/kueue-metrics-rolebinding": "c12dbcedfaee5598d637180749ace4872e7732d20b6c0e4f1b00bafc93bf05cd", "clusterrolebinding/kueue-openshift-cluster-role-binding": "8ee994d52b985ce538ca9b5ea4075fb4c9fbe82e56bd09fdc0eb2ab5c0dd08c2", "clusterrolebinding/kueue-proxy-rolebinding": "3e7798dc1dc598574e92199f3fa6a810bf973a08e0f7064e014970989666cc09", "configmap/kueue-manager-config": "1f1e32516dd287f3be88b871af0d205ad7b6377400557266d2d007b69e7ab0b2", "crd/admissionchecks.kueue.x-k8s.io": "0fd5f5bb4cd6aa3522ef3ff99785df4124552f1a77ceaf6eed9e01998f1c2a81", "crd/clusterqueues.kueue.x-k8s.io": "ef8b4c9fedbe62bec59750a6cd4676ed7393933db705771b702002ed6ea8c7d9", "crd/cohorts.kueue.x-k8s.io": "13be150a1d1586bce817adb61ad7bbc3832cb6e7e0e38b3d5abec62ad9041813", "crd/localqueues.kueue.x-k8s.io": "769aba9e9d806f2ad55e4805cbcd59963a18360596825983c99149b851272fec", "crd/multikueueclusters.kueue.x-k8s.io": "eb817848963eaa670724f9d4bfb025ef81237634288f85f21607a5567d0603bb", "crd/multikueueconfigs.kueue.x-k8s.io": "4f1d6ebee58b4d389fe79dcb9fd8bb37f2ca7ac19719ec2326226508f6737e9c", "crd/provisioningrequestconfigs.kueue.x-k8s.io": "d4eeb15d3556e4c0d1b8fdc5ec79dc654c9377c7615f627dc7114348c065f3d2", "crd/resourceflavors.kueue.x-k8s.io": "eeba62030de8a5b6ed3bf52b235b55c74d371b8411fdec27a454ffd3ae655edc", "crd/topologies.kueue.x-k8s.io": "22a90fa9b97c15ba4ab4ef206501e2682f8fbafc296e2c611d18f39dac905c54", "crd/workloadpriorityclasses.kueue.x-k8s.io": "266aa80bbf8469b01371eb2a61046402a6dfbb488f0cbcecdec04806d33ee029", "crd/workloads.kueue.x-k8s.io": "56259ad14ce8c16b2deb8624a472411597124fef7eadbb25e3d0076a62295d77", "flowschema/visibility": "0a96aa38edd3df911a1788fdb9da6cd4cf89e1697ceb5b48b01f0b506df4c426", "issuer/selfsigned": "0900ddeba4433364db66e3771b8ee0edf4603c2007360d6e3bca995cb50294d2", "kubectl.kubernetes.io/default-container": "manager", "kueueoperator.kueue.openshift.io/cluster": "1", "mutatingwebhook/kueue-mutating-webhook-configuration": "4d2fd3884e234db2d11d730020aed801a9bd74c85e78fb9b59e116c5462ce7fc", "networkpolicy/kueue-allow-egress-cluster-dns": "9f2bb82df4a48856d05aa0a4355ba72483a56aa743456705dce215f6219d28e7", "networkpolicy/kueue-allow-egress-kube-apiserver": "9a3340cad1f911db4a97368af28380bcec9404ac4b4d5a8346006985c8282de5", "networkpolicy/kueue-allow-ingress-egress-metrics": "1638409b04c26380a4bd8a346faafa19327985f64a925c1930bc653b47e28a62", "networkpolicy/kueue-allow-ingress-egress-visibility": "a08e18e830feb3a848f70a864ee1ce802dc645a2de8d014e7e21b96e66f47c44", "networkpolicy/kueue-allow-ingress-egress-webhook": "ffbe6f77858631e9c9df88e67e310af4a1b606b2d9f295b87c24190c80489a40", "networkpolicy/kueue-deny-all": "ef12fdba96fac76c868127514eeb3035dfb57e2897e3534c499ba101ea8765f4", "prioritylevelconfiguration/kueue-visibility": "30ce48efdd314a0154daf774edc8e45e024d3ec5d4ccfbf89f6f8c0d79b237cb", "role/kueue-leader-election-role": "18e2271791b5d42aef0b69d73d7ed0a7f70854dd4cacec95a8c1edc1ec959e74", "role/kueue-manager-secrets-role": "19902c9e95212d95b51d296df71623eb7c09a870ecd57cbf335a8756340d9be8", "role/prometheus-k8s": "2944ed6f306638b937eca0eb70b160fd39b3db3824901afdfebde5e610bc351d", "rolebinding/kueue-leader-election-rolebinding": "484a7e3169be38731a802cf881d32d6bebe38e4d9df419281d9dd1361483ef33", "rolebinding/kueue-manager-secrets-rolebinding": "2bb13c867f73f939e5ed6183df010c7b0af77531278b88069fe4659d8c15e075", "rolebinding/kueue-visibility-server-auth-reader": "e4c67a33ce24af51d2209e84f402a42b558535593624607203e8f5c8489c8b81", "rolebinding/prometheus-k8s": "a51150573c4acb66bbf0a01d9381c01d2eda894dca41a7ae895b0514adc011b2", "service/kueue-controller-manager-metrics-service": "eaeb9781eb09f562396c5b1169c62107ba1ed0b2827192d39de3734614ec0ca5", "service/kueue-visibility-server": "460b052947f6f7f6a29bba97b6c3a993cafeb720fdc95947aafd13533daf005d", "service/kueue-webhook-service": "ead3958fe2155741033e9bfedd74c3fff44a34148781fdd086fcdd6a57453268", "serviceaccounts/kueue-controller-manager": "7607c7395ad96e8f0e7251203e2abe9dee0fb158da93e5f00356954b28a866bf", "servicemonitor/kueue-metrics": "5f203a145798afed031a08433fc2bccab34783b5879d9971bc54b1d6f34647af", "validatingwebhook/kueue-validating-webhook-configuration": "73c12c64832f9a358655c826313aeb8260983421339b314a69b87e6576733787" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "kueue", "app.openshift.io/name": "kueue", "control-plane": "controller-manager" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "kueue", "control-plane": "controller-manager" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "--config=/controller_manager_config.yaml", "--zap-log-level=2" ], "command": [ "/manager" ], "image": "registry.redhat.io/kueue/kueue-rhel9@sha256:9ad4355bb1ae356b239f3517a56a21c0ef5979c78ea8eebc936eee5c42560acc", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8082, "name": "visibility", "protocol": "TCP" }, { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "500m", "memory": "512Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/visibility", "name": "visibility" }, { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "cert", "readOnly": true }, { "mountPath": "/controller_manager_config.yaml", "name": "manager-config", "subPath": "controller_manager_config.yaml" }, { "mountPath": "/etc/kueue/metrics/certs", "name": "metrics-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "kueue-controller-manager", "serviceAccountName": "kueue-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "name": "visibility", "secret": { "defaultMode": 420, "items": [ { "key": "ca.crt", "path": "ca.crt" }, { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "optional": false, "secretName": "kueue-visibility-server-cert" } }, { "name": "cert", "secret": { "defaultMode": 420, "secretName": "kueue-webhook-server-cert" } }, { "configMap": { "defaultMode": 420, "name": "kueue-manager-config" }, "name": "manager-config" }, { "name": "metrics-certs", "secret": { "defaultMode": 420, "secretName": "metrics-server-cert" } } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-05-13T16:52:14Z", "lastUpdateTime": "2026-05-13T16:52:14Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:52:03Z", "lastUpdateTime": "2026-05-13T16:52:15Z", "message": "ReplicaSet \"kueue-controller-manager-796db666b\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 2, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:48:45Z", "generation": 1, "labels": { "olm.deployment-spec-hash": "4Gw7PdjfU5CdFk7GFRw1I3r0Q5RwAmU35NDdXK", "olm.managed": "true", "olm.owner": "kueue-operator.v1.3.1", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-kueue-operator", "operators.coreos.com/kueue-operator.openshift-kueue-operator": "" }, "name": "openshift-kueue-operator", "namespace": "openshift-kueue-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "kueue-operator.v1.3.1", "uid": "af6a594a-0f6d-444d-a97f-398b7fbb5f07" } ], "resourceVersion": "29661", "uid": "c4aa536e-3da3-40ca-bc57-c7e4b55720cb" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 1, "selector": { "matchLabels": { "name": "openshift-kueue-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"kueue.openshift.io/v1\",\n \"kind\": \"Kueue\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/managed-by\": \"kustomize\",\n \"app.kubernetes.io/name\": \"kueue-operator\"\n },\n \"name\": \"cluster\"\n },\n \"spec\": {\n \"config\": {\n \"integrations\": {\n \"frameworks\": [\n \"BatchJob\"\n ]\n }\n },\n \"managementState\": \"Managed\"\n }\n }\n]", "capabilities": "Basic Install", "console.openshift.io/operator-monitoring-default": "true", "createdAt": "2026-04-01T18:56:21Z", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "true", "features.operators.openshift.io/proxy-aware": "false", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "olm.operatorGroup": "openshift-kueue-operatorgroup", "olm.operatorNamespace": "openshift-kueue-operator", "olm.targetNamespaces": "", "operatorframework.io/cluster-monitoring": "true", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"kueue.openshift.io\",\"kind\":\"Kueue\",\"version\":\"v1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"kueue-operator\",\"version\":\"1.3.1\"}}]}", "operatorframework.io/suggested-namespace": "openshift-kueue-operator", "operators.openshift.io/valid-subscription": "[\"OpenShift Kubernetes Engine\", \"OpenShift Container Platform\", \"OpenShift Platform Plus\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.37.0", "operators.operatorframework.io/project_layout": "go.kubebuilder.io/v4" }, "creationTimestamp": null, "labels": { "app.openshift.io/component": "operator", "app.openshift.io/name": "kueue", "name": "openshift-kueue-operator" } }, "spec": { "containers": [ { "args": [ "operator" ], "command": [ "kueue-operator" ], "env": [ { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.annotations['olm.targetNamespaces']" } } }, { "name": "OPERATOR_NAME", "value": "openshift-kueue-operator" }, { "name": "RELATED_IMAGE_OPERAND_IMAGE", "value": "registry.redhat.io/kueue/kueue-rhel9@sha256:9ad4355bb1ae356b239f3517a56a21c0ef5979c78ea8eebc936eee5c42560acc" }, { "name": "RELATED_IMAGE_MUST_GATHER", "value": "registry.redhat.io/kueue/kueue-must-gather-rhel9@sha256:01bc7fe88acb8729cf08551cad62f7ba02de88f6c267189d005250ff6a0f1285" }, { "name": "OPERATOR_CONDITION_NAME", "value": "kueue-operator.v1.3.1" } ], "image": "registry.redhat.io/kueue/kueue-rhel9-operator@sha256:2a1ed0265396ca5bc324fa5c7587c9304abda9323c80687b875acb6eb7994e2b", "imagePullPolicy": "Always", "name": "openshift-kueue-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-kueue-operator", "serviceAccountName": "openshift-kueue-operator", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-05-13T16:48:51Z", "lastUpdateTime": "2026-05-13T16:48:51Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:48:45Z", "lastUpdateTime": "2026-05-13T16:48:51Z", "message": "ReplicaSet \"openshift-kueue-operator-54ff5f644b\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/ibm-cloud-managed": "true" }, "creationTimestamp": "2026-05-13T16:20:52Z", "generation": 1, "labels": { "app": "cluster-monitoring-operator", "app.kubernetes.io/managed-by": "cluster-version-operator", "app.kubernetes.io/name": "cluster-monitoring-operator", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "cluster-monitoring-operator", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "389147f5-445e-4654-a83b-68cfdd60fb99" } ], "resourceVersion": "9939", "uid": "6c9dc793-8ee9-47c0-a836-cd44faa963b6" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "cluster-monitoring-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "cluster-monitoring-operator", "app.kubernetes.io/name": "cluster-monitoring-operator" } }, "spec": { "containers": [ { "args": [ "-namespace=openshift-monitoring", "-namespace-user-workload=openshift-user-workload-monitoring", "-configmap=cluster-monitoring-config", "-release-version=$(RELEASE_VERSION)", "-v=2", "-cert-file=/etc/tls/private/tls.crt", "-key-file=/etc/tls/private/tls.key", "-images=prometheus-operator=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8c1fac1dd497afa5ea5d8f89d3cce6f30fef8c9cde34940058fc8d98dad38692", "-images=prometheus-config-reloader=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8e158c83ec12b3e0237fab9a221630bd691e79c079a111f346354ff43b8199df", "-images=prometheus-operator-admission-webhook=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:221622a101db9797df0622b4534e3e42c4498df458f355a8a02fad8d65f8e3f2", "-images=configmap-reloader=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a5af62b7c675b596035059ce47d76d499b419fa482305a1c3099a990415dbed8", "-images=prometheus=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c8ba3078651d566566f7855c51c53baedfe6b6c743d316275e81b6e9d242bfb6", "-images=alertmanager=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:753017c5c3fd579e45e9c112b3473b8d9f49bd9b137ee86c196c61e59a8ad213", "-images=node-exporter=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:68abf16a3b6c33fdd22a823c7d00f96aaaa8015d370116962a5835984908645a", "-images=kube-state-metrics=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cbcaf981e14fc28664f280f59a0953e3bf2a70f09c25d4433730951684fbdb59", "-images=openshift-state-metrics=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:09b3e9e6a4f382fb4bbdb67bc945bcf19d66f604b7c8ffd66d4d4a2c94224248", "-images=kube-rbac-proxy=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "-images=telemeter-client=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:70f4702845ec5b627d49504a53a13d997c0578630cddffb89aba5cfebe04fc25", "-images=prom-label-proxy=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2897724cec17bc13acc133181f64ccb8d54ce5dc9582f9cecf704c2540e15600", "-images=thanos=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8f34d18e3a237f96e2b9e9a071e5bf159c04f978ed12af457f1d065e6796220d", "-images=monitoring-plugin=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cf34884c4154c8b470328a8f1fd45ad5f250b8899c57b897bfa0af41fa6efe18", "-images=kube-metrics-server=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6c12532a36e461e69227c6d5266dce4506e963567ec689a8cf6fd2e70ae20bf4" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.9" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:30ff5e5b72f274598704ca69f1832eba1040cc25da47386004fd59500b6e4c55", "imagePullPolicy": "IfNotPresent", "name": "cluster-monitoring-operator", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "75Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "cluster-monitoring-operator-tls", "readOnly": true }, { "mountPath": "/etc/cluster-monitoring-operator/telemetry", "name": "telemetry-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cluster-monitoring-operator", "serviceAccountName": "cluster-monitoring-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node.kubernetes.io/memory-pressure", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "telemetry-config" }, "name": "telemetry-config" }, { "name": "cluster-monitoring-operator-tls", "secret": { "defaultMode": 420, "secretName": "cluster-monitoring-operator-tls" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:29:56Z", "lastUpdateTime": "2026-05-13T16:29:56Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:20:52Z", "lastUpdateTime": "2026-05-13T16:29:56Z", "message": "ReplicaSet \"cluster-monitoring-operator-5bfb944964\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:30:12Z", "generation": 1, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "kube-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.13.0" }, "name": "kube-state-metrics", "namespace": "openshift-monitoring", "resourceVersion": "11122", "uid": "872de021-dd04-4203-a10b-b35e4db8b0d6" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/name": "kube-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "kube-state-metrics", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "kube-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.13.0" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--host=127.0.0.1", "--port=8081", "--telemetry-host=127.0.0.1", "--telemetry-port=8082", "--metric-denylist=\n^kube_secret_labels$,\n^kube_.+_annotations$\n^kube_customresource_.+_annotations_info$,\n^kube_customresource_.+_labels_info$,\n", "--metric-labels-allowlist=pods=[*],nodes=[*],namespaces=[*],persistentvolumes=[*],persistentvolumeclaims=[*],poddisruptionbudgets=[*]", "--metric-denylist=\n^kube_.+_created$,\n^kube_.+_metadata_resource_version$,\n^kube_replicaset_metadata_generation$,\n^kube_replicaset_status_observed_generation$,\n^kube_pod_restart_policy$,\n^kube_pod_init_container_status_terminated$,\n^kube_pod_init_container_status_running$,\n^kube_pod_container_status_terminated$,\n^kube_pod_container_status_running$,\n^kube_pod_completion_time$,\n^kube_pod_status_scheduled$\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cbcaf981e14fc28664f280f59a0953e3bf2a70f09c25d4433730951684fbdb59", "imagePullPolicy": "IfNotPresent", "name": "kube-state-metrics", "resources": { "requests": { "cpu": "2m", "memory": "80Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp", "name": "volume-directive-shadow" }, { "mountPath": "/etc/kube-state-metrics", "name": "kube-state-metrics-custom-resource-state-configmap", "readOnly": true } ] }, { "args": [ "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8081/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-main", "ports": [ { "containerPort": 8443, "name": "https-main", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "kube-state-metrics-tls" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca" }, { "mountPath": "/etc/kube-rbac-policy", "name": "kube-state-metrics-kube-rbac-proxy-config", "readOnly": true } ] }, { "args": [ "--secure-listen-address=:9443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8082/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-self", "ports": [ { "containerPort": 9443, "name": "https-self", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "kube-state-metrics-tls" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca" }, { "mountPath": "/etc/kube-rbac-policy", "name": "kube-state-metrics-kube-rbac-proxy-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kube-state-metrics", "serviceAccountName": "kube-state-metrics", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "volume-directive-shadow" }, { "name": "kube-state-metrics-tls", "secret": { "defaultMode": 420, "secretName": "kube-state-metrics-tls" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "name": "kube-state-metrics-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "kube-state-metrics-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "kube-state-metrics-custom-resource-state-configmap" }, "name": "kube-state-metrics-custom-resource-state-configmap" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:30:15Z", "lastUpdateTime": "2026-05-13T16:30:15Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:30:12Z", "lastUpdateTime": "2026-05-13T16:30:15Z", "message": "ReplicaSet \"kube-state-metrics-748c6b784b\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:30:17Z", "generation": 1, "labels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "metrics-server", "namespace": "openshift-monitoring", "resourceVersion": "12784", "uid": "457c5f3d-cc3f-45df-9a6f-97ec0c30ba95" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "monitoring.openshift.io/kubelet-serving-ca-bundle-hash": "afo8kpdc44ggn", "monitoring.openshift.io/metrics-client-cert-hash": "fsteikqga9ec0", "monitoring.openshift.io/serving-ca-secret-hash": "cl5ldigesodng", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--secure-port=10250", "--kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname", "--kubelet-use-node-status-port", "--metric-resolution=15s", "--kubelet-certificate-authority=/etc/tls/kubelet-serving-ca-bundle/ca-bundle.crt", "--kubelet-client-certificate=/etc/tls/metrics-client-certs/tls.crt", "--kubelet-client-key=/etc/tls/metrics-client-certs/tls.key", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--shutdown-send-retry-after=true", "--shutdown-delay-duration=150s", "--disable-http2-serving=true", "--tls-min-version=VersionTLS12", "--client-ca-file=/etc/client-ca-bundle/client-ca-file", "--requestheader-client-ca-file=/etc/client-ca-bundle/requestheader-client-ca-file", "--requestheader-allowed-names=kube-apiserver-proxy,system:kube-apiserver-proxy,system:openshift-aggregator", "--requestheader-extra-headers-prefix=X-Remote-Extra-", "--requestheader-group-headers=X-Remote-Group", "--requestheader-username-headers=X-Remote-User", "--audit-policy-file=/etc/audit/metadata-profile.yaml", "--audit-log-path=/var/log/metrics-server/audit.log", "--audit-log-maxsize=100", "--audit-log-maxbackup=5", "--audit-log-compress=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6c12532a36e461e69227c6d5266dce4506e963567ec689a8cf6fd2e70ae20bf4", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/livez", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "metrics-server", "ports": [ { "containerPort": 10250, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 6, "httpGet": { "path": "/readyz", "port": "https", "scheme": "HTTPS" }, "initialDelaySeconds": 20, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1m", "memory": "40Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-metrics-server-tls" }, { "mountPath": "/etc/tls/metrics-client-certs", "name": "secret-metrics-client-certs" }, { "mountPath": "/etc/tls/kubelet-serving-ca-bundle", "name": "configmap-kubelet-serving-ca-bundle" }, { "mountPath": "/etc/audit", "name": "metrics-server-audit-profiles", "readOnly": true }, { "mountPath": "/var/log/metrics-server", "name": "audit-log" }, { "mountPath": "/etc/client-ca-bundle", "name": "client-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "metrics-server", "serviceAccountName": "metrics-server", "terminationGracePeriodSeconds": 170, "volumes": [ { "name": "secret-metrics-client-certs", "secret": { "defaultMode": 420, "secretName": "metrics-client-certs" } }, { "name": "secret-metrics-server-tls", "secret": { "defaultMode": 420, "secretName": "metrics-server-tls" } }, { "configMap": { "defaultMode": 420, "name": "kubelet-serving-ca-bundle" }, "name": "configmap-kubelet-serving-ca-bundle" }, { "emptyDir": {}, "name": "audit-log" }, { "configMap": { "defaultMode": 420, "name": "metrics-server-audit-profiles" }, "name": "metrics-server-audit-profiles" }, { "name": "client-ca-bundle", "secret": { "defaultMode": 420, "secretName": "metrics-server-7gbvahpk9joob" } } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-05-13T16:30:58Z", "lastUpdateTime": "2026-05-13T16:30:58Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:30:17Z", "lastUpdateTime": "2026-05-13T16:30:58Z", "message": "ReplicaSet \"metrics-server-5bd694d864\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:30:17Z", "generation": 1, "labels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "monitoring-plugin", "namespace": "openshift-monitoring", "resourceVersion": "11498", "uid": "78301243-d54b-4462-9784-9a69c0b5731f" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "monitoring.openshift.io/cert-hash": "6crafj1j0u683", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "automountServiceAccountToken": false, "containers": [ { "args": [ "-config-path=/opt/app-root/web/dist", "-static-path=/opt/app-root/web/dist", "-cert=/var/cert/tls.crt", "-key=/var/cert/tls.key" ], "command": [ "/opt/app-root/plugin-backend" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cf34884c4154c8b470328a8f1fd45ad5f250b8899c57b897bfa0af41fa6efe18", "imagePullPolicy": "IfNotPresent", "name": "monitoring-plugin", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/cert", "name": "monitoring-plugin-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "monitoring-plugin-cert", "secret": { "defaultMode": 420, "secretName": "monitoring-plugin-cert" } } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-05-13T16:30:21Z", "lastUpdateTime": "2026-05-13T16:30:21Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:30:17Z", "lastUpdateTime": "2026-05-13T16:30:22Z", "message": "ReplicaSet \"monitoring-plugin-5ff5d75ccd\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:30:12Z", "generation": 1, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "openshift-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "openshift-state-metrics", "namespace": "openshift-monitoring", "resourceVersion": "11116", "uid": "e2a32f98-987f-4548-8e7e-21fc845f6d86" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/name": "openshift-state-metrics" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "openshift-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "spec": { "containers": [ { "args": [ "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8081/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-policy/config.yaml", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-main", "ports": [ { "containerPort": 8443, "name": "https-main", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "openshift-state-metrics-tls" }, { "mountPath": "/etc/kube-rbac-policy", "name": "openshift-state-metrics-kube-rbac-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] }, { "args": [ "--secure-listen-address=:9443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8082/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-policy/config.yaml", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-self", "ports": [ { "containerPort": 9443, "name": "https-self", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "openshift-state-metrics-tls" }, { "mountPath": "/etc/kube-rbac-policy", "name": "openshift-state-metrics-kube-rbac-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] }, { "args": [ "--host=127.0.0.1", "--port=8081", "--telemetry-host=127.0.0.1", "--telemetry-port=8082" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:09b3e9e6a4f382fb4bbdb67bc945bcf19d66f604b7c8ffd66d4d4a2c94224248", "imagePullPolicy": "IfNotPresent", "name": "openshift-state-metrics", "resources": { "requests": { "cpu": "1m", "memory": "32Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-state-metrics", "serviceAccountName": "openshift-state-metrics", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "openshift-state-metrics-tls", "secret": { "defaultMode": 420, "secretName": "openshift-state-metrics-tls" } }, { "name": "openshift-state-metrics-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "openshift-state-metrics-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:30:15Z", "lastUpdateTime": "2026-05-13T16:30:15Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:30:12Z", "lastUpdateTime": "2026-05-13T16:30:15Z", "message": "ReplicaSet \"openshift-state-metrics-774bc9686d\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:30:05Z", "generation": 1, "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.78.1" }, "name": "prometheus-operator", "namespace": "openshift-monitoring", "resourceVersion": "10588", "uid": "4c347b95-ab6e-4a43-a08c-37d76feedd97" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/name": "prometheus-operator", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "prometheus-operator", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.78.1" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--kubelet-service=kube-system/kubelet", "--prometheus-config-reloader=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8e158c83ec12b3e0237fab9a221630bd691e79c079a111f346354ff43b8199df", "--kubelet-endpoints=true", "--kubelet-endpointslice=false", "--prometheus-instance-namespaces=openshift-monitoring", "--thanos-ruler-instance-namespaces=openshift-monitoring", "--alertmanager-instance-namespaces=openshift-monitoring", "--config-reloader-cpu-limit=0", "--config-reloader-memory-limit=0", "--config-reloader-cpu-request=1m", "--config-reloader-memory-request=10Mi", "--web.listen-address=127.0.0.1:8080", "--controller-id=openshift-monitoring/prometheus-operator" ], "env": [ { "name": "GOGC", "value": "30" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8c1fac1dd497afa5ea5d8f89d3cce6f30fef8c9cde34940058fc8d98dad38692", "imagePullPolicy": "IfNotPresent", "name": "prometheus-operator", "resources": { "requests": { "cpu": "5m", "memory": "150Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://localhost:8080/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "prometheus-operator-tls", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true }, { "mountPath": "/etc/kube-rbac-policy", "name": "prometheus-operator-kube-rbac-proxy-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "prometheus-operator", "serviceAccountName": "prometheus-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "prometheus-operator-tls", "secret": { "defaultMode": 420, "secretName": "prometheus-operator-tls" } }, { "name": "prometheus-operator-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "prometheus-operator-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:30:09Z", "lastUpdateTime": "2026-05-13T16:30:09Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:30:05Z", "lastUpdateTime": "2026-05-13T16:30:09Z", "message": "ReplicaSet \"prometheus-operator-6995c4db54\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:29:50Z", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.78.1" }, "name": "prometheus-operator-admission-webhook", "namespace": "openshift-monitoring", "resourceVersion": "10481", "uid": "6ddcbfdd-1fcb-4642-b1f9-3fb1d035bab4" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "prometheus-operator-admission-webhook", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.78.1" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "automountServiceAccountToken": false, "containers": [ { "args": [ "--web.enable-tls=true", "--web.cert-file=/etc/tls/private/tls.crt", "--web.key-file=/etc/tls/private/tls.key", "--web.tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--web.tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:221622a101db9797df0622b4534e3e42c4498df458f355a8a02fad8d65f8e3f2", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "prometheus-operator-admission-webhook", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "5m", "memory": "30Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "tls-certificates", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "prometheus-operator-admission-webhook", "serviceAccountName": "prometheus-operator-admission-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls-certificates", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "prometheus-operator-admission-webhook-tls" } } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-05-13T16:30:01Z", "lastUpdateTime": "2026-05-13T16:30:01Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:29:56Z", "lastUpdateTime": "2026-05-13T16:30:04Z", "message": "ReplicaSet \"prometheus-operator-admission-webhook-7d979c648b\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:31:36Z", "generation": 1, "labels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "telemeter-client", "app.kubernetes.io/part-of": "openshift-monitoring" }, "name": "telemeter-client", "namespace": "openshift-monitoring", "resourceVersion": "13751", "uid": "5a159094-caf5-4ca1-8cfb-55bd77dfcf6d" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/name": "telemeter-client" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}", "telemeter-token-hash": "eahooiiipj3qr" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "telemeter-client", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "spec": { "containers": [ { "command": [ "/usr/bin/telemeter-client", "--id=$(ID)", "--from=$(FROM)", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--from-ca-file=/etc/serving-certs-ca-bundle/service-ca.crt", "--from-token-file=/var/run/secrets/kubernetes.io/serviceaccount/token", "--to=$(TO)", "--to-token-file=/etc/telemeter/token", "--listen=localhost:8080", "--anonymize-salt-file=/etc/telemeter/salt", "--anonymize-labels=$(ANONYMIZE_LABELS)", "--match={__name__=~\"cluster:usage:.*\"}", "--match={__name__=\"count:up0\"}", "--match={__name__=\"count:up1\"}", "--match={__name__=\"cluster_version\"}", "--match={__name__=\"cluster_version_available_updates\"}", "--match={__name__=\"cluster_version_capability\"}", "--match={__name__=\"cluster_operator_up\"}", "--match={__name__=\"cluster_operator_conditions\"}", "--match={__name__=\"cluster_version_payload\"}", "--match={__name__=\"cluster_installer\"}", "--match={__name__=\"cluster_infrastructure_provider\"}", "--match={__name__=\"cluster_feature_set\"}", "--match={__name__=\"instance:etcd_object_counts:sum\"}", "--match={__name__=\"ALERTS\",alertstate=\"firing\",severity=~\"critical|warning|info|none\"}", "--match={__name__=\"code:apiserver_request_total:rate:sum\"}", "--match={__name__=\"cluster:capacity_cpu_cores:sum\"}", "--match={__name__=\"cluster:capacity_memory_bytes:sum\"}", "--match={__name__=\"cluster:cpu_usage_cores:sum\"}", "--match={__name__=\"cluster:memory_usage_bytes:sum\"}", "--match={__name__=\"openshift:cpu_usage_cores:sum\"}", "--match={__name__=\"openshift:memory_usage_bytes:sum\"}", "--match={__name__=\"workload:cpu_usage_cores:sum\"}", "--match={__name__=\"workload:memory_usage_bytes:sum\"}", "--match={__name__=\"cluster:virt_platform_nodes:sum\"}", "--match={__name__=\"cluster:node_instance_type_count:sum\"}", "--match={__name__=\"cnv:vmi_status_running:count\"}", "--match={__name__=\"cnv_abnormal\", reason=~\"memory_working_set_delta_from_request|memory_rss_delta_from_request\"}", "--match={__name__=\"cluster:vmi_request_cpu_cores:sum\"}", "--match={__name__=\"node_role_os_version_machine:cpu_capacity_cores:sum\"}", "--match={__name__=\"node_role_os_version_machine:cpu_capacity_sockets:sum\"}", "--match={__name__=\"subscription_sync_total\"}", "--match={__name__=\"olm_resolution_duration_seconds\"}", "--match={__name__=\"csv_succeeded\"}", "--match={__name__=\"csv_abnormal\"}", "--match={__name__=\"cluster:kube_persistentvolumeclaim_resource_requests_storage_bytes:provisioner:sum\"}", "--match={__name__=\"cluster:kubelet_volume_stats_used_bytes:provisioner:sum\"}", "--match={__name__=\"ceph_cluster_total_bytes\"}", "--match={__name__=\"ceph_cluster_total_used_raw_bytes\"}", "--match={__name__=\"ceph_health_status\"}", "--match={__name__=\"odf_system_raw_capacity_total_bytes\"}", "--match={__name__=\"odf_system_raw_capacity_used_bytes\"}", "--match={__name__=\"odf_system_health_status\"}", "--match={__name__=\"job:ceph_osd_metadata:count\"}", "--match={__name__=\"job:kube_pv:count\"}", "--match={__name__=\"job:odf_system_pvs:count\"}", "--match={__name__=\"job:ceph_pools_iops:total\"}", "--match={__name__=\"job:ceph_pools_iops_bytes:total\"}", "--match={__name__=\"job:ceph_versions_running:count\"}", "--match={__name__=\"job:noobaa_total_unhealthy_buckets:sum\"}", "--match={__name__=\"job:noobaa_bucket_count:sum\"}", "--match={__name__=\"job:noobaa_total_object_count:sum\"}", "--match={__name__=\"odf_system_bucket_count\", system_type=\"OCS\", system_vendor=\"Red Hat\"}", "--match={__name__=\"odf_system_objects_total\", system_type=\"OCS\", system_vendor=\"Red Hat\"}", "--match={__name__=\"noobaa_accounts_num\"}", "--match={__name__=\"noobaa_total_usage\"}", "--match={__name__=\"console_url\"}", "--match={__name__=\"cluster:console_auth_login_requests_total:sum\"}", "--match={__name__=\"cluster:console_auth_login_successes_total:sum\"}", "--match={__name__=\"cluster:console_auth_login_failures_total:sum\"}", "--match={__name__=\"cluster:console_auth_logout_requests_total:sum\"}", "--match={__name__=\"cluster:console_usage_users:max\"}", "--match={__name__=\"cluster:console_plugins_info:max\"}", "--match={__name__=\"cluster:console_customization_perspectives_info:max\"}", "--match={__name__=\"cluster:ovnkube_controller_egress_routing_via_host:max\"}", "--match={__name__=\"cluster:ovnkube_controller_admin_network_policies_db_objects:max\",table_name=~\"ACL|Address_Set\"}", "--match={__name__=\"cluster:ovnkube_controller_baseline_admin_network_policies_db_objects:max\",table_name=~\"ACL|Address_Set\"}", "--match={__name__=\"cluster:ovnkube_controller_admin_network_policies_rules:max\",direction=~\"Ingress|Egress\",action=~\"Pass|Allow|Deny\"}", "--match={__name__=\"cluster:ovnkube_controller_baseline_admin_network_policies_rules:max\",direction=~\"Ingress|Egress\",action=~\"Allow|Deny\"}", "--match={__name__=\"cluster:network_attachment_definition_instances:max\"}", "--match={__name__=\"cluster:network_attachment_definition_enabled_instance_up:max\"}", "--match={__name__=\"cluster:ingress_controller_aws_nlb_active:sum\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:min\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:max\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:avg\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:median\"}", "--match={__name__=\"cluster:openshift_route_info:tls_termination:sum\"}", "--match={__name__=\"insightsclient_request_send_total\"}", "--match={__name__=\"cam_app_workload_migrations\"}", "--match={__name__=\"cluster:apiserver_current_inflight_requests:sum:max_over_time:2m\"}", "--match={__name__=\"cluster:alertmanager_integrations:max\"}", "--match={__name__=\"cluster:telemetry_selected_series:count\"}", "--match={__name__=\"openshift:prometheus_tsdb_head_series:sum\"}", "--match={__name__=\"openshift:prometheus_tsdb_head_samples_appended_total:sum\"}", "--match={__name__=\"monitoring:container_memory_working_set_bytes:sum\"}", "--match={__name__=\"namespace_job:scrape_series_added:topk3_sum1h\"}", "--match={__name__=\"namespace_job:scrape_samples_post_metric_relabeling:topk3\"}", "--match={__name__=\"monitoring:haproxy_server_http_responses_total:sum\"}", "--match={__name__=\"profile:cluster_monitoring_operator_collection_profile:max\"}", "--match={__name__=\"vendor_model:node_accelerator_cards:sum\",vendor=~\"NVIDIA|AMD|GAUDI|INTEL|QUALCOMM\"}", "--match={__name__=\"rhmi_status\"}", "--match={__name__=\"status:upgrading:version:rhoam_state:max\"}", "--match={__name__=\"state:rhoam_critical_alerts:max\"}", "--match={__name__=\"state:rhoam_warning_alerts:max\"}", "--match={__name__=\"rhoam_7d_slo_percentile:max\"}", "--match={__name__=\"rhoam_7d_slo_remaining_error_budget:max\"}", "--match={__name__=\"cluster_legacy_scheduler_policy\"}", "--match={__name__=\"cluster_master_schedulable\"}", "--match={__name__=\"che_workspace_status\"}", "--match={__name__=\"che_workspace_started_total\"}", "--match={__name__=\"che_workspace_failure_total\"}", "--match={__name__=\"che_workspace_start_time_seconds_sum\"}", "--match={__name__=\"che_workspace_start_time_seconds_count\"}", "--match={__name__=\"cco_credentials_mode\"}", "--match={__name__=\"cluster:kube_persistentvolume_plugin_type_counts:sum\"}", "--match={__name__=\"acm_managed_cluster_info\"}", "--match={__name__=\"acm_managed_cluster_worker_cores:max\"}", "--match={__name__=\"acm_console_page_count:sum\", page=~\"overview-classic|overview-fleet|search|search-details|clusters|application|governance\"}", "--match={__name__=\"cluster:vsphere_vcenter_info:sum\"}", "--match={__name__=\"cluster:vsphere_esxi_version_total:sum\"}", "--match={__name__=\"cluster:vsphere_node_hw_version_total:sum\"}", "--match={__name__=\"openshift:build_by_strategy:sum\"}", "--match={__name__=\"rhods_aggregate_availability\"}", "--match={__name__=\"rhods_total_users\"}", "--match={__name__=\"instance:etcd_disk_wal_fsync_duration_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"instance:etcd_mvcc_db_total_size_in_bytes:sum\"}", "--match={__name__=\"instance:etcd_network_peer_round_trip_time_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"instance:etcd_mvcc_db_total_size_in_use_in_bytes:sum\"}", "--match={__name__=\"instance:etcd_disk_backend_commit_duration_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"jaeger_operator_instances_storage_types\"}", "--match={__name__=\"jaeger_operator_instances_strategies\"}", "--match={__name__=\"jaeger_operator_instances_agent_strategies\"}", "--match={__name__=\"type:tempo_operator_tempostack_storage_backend:sum\",type=~\"azure|gcs|s3\"}", "--match={__name__=\"state:tempo_operator_tempostack_managed:sum\",state=~\"Managed|Unmanaged\"}", "--match={__name__=\"type:tempo_operator_tempostack_multi_tenancy:sum\",type=~\"enabled|disabled\"}", "--match={__name__=\"enabled:tempo_operator_tempostack_jaeger_ui:sum\",enabled=~\"true|false\"}", "--match={__name__=\"type:opentelemetry_collector_receivers:sum\",type=~\"jaegerreceiver|hostmetricsreceiver|opencensusreceiver|prometheusreceiver|zipkinreceiver|kafkareceiver|filelogreceiver|journaldreceiver|k8seventsreceiver|kubeletstatsreceiver|k8sclusterreceiver|k8sobjectsreceiver\"}", "--match={__name__=\"type:opentelemetry_collector_exporters:sum\",type=~\"debugexporter|loggingexporter|otlpexporter|otlphttpexporter|prometheusexporter|lokiexporter|kafkaexporter|awscloudwatchlogsexporter|loadbalancingexporter\"}", "--match={__name__=\"type:opentelemetry_collector_processors:sum\",type=~\"batchprocessor|memorylimiterprocessor|attributesprocessor|resourceprocessor|spanprocessor|k8sattributesprocessor|resourcedetectionprocessor|filterprocessor|routingprocessor|cumulativetodeltaprocessor|groupbyattrsprocessor\"}", "--match={__name__=\"type:opentelemetry_collector_extensions:sum\",type=~\"zpagesextension|ballastextension|memorylimiterextension|jaegerremotesampling|healthcheckextension|pprofextension|oauth2clientauthextension|oidcauthextension|bearertokenauthextension|filestorage\"}", "--match={__name__=\"type:opentelemetry_collector_connectors:sum\",type=~\"spanmetricsconnector|forwardconnector\"}", "--match={__name__=\"type:opentelemetry_collector_info:sum\",type=~\"deployment|daemonset|sidecar|statefulset\"}", "--match={__name__=\"appsvcs:cores_by_product:sum\"}", "--match={__name__=\"nto_custom_profiles:count\"}", "--match={__name__=\"openshift_csi_share_configmap\"}", "--match={__name__=\"openshift_csi_share_secret\"}", "--match={__name__=\"openshift_csi_share_mount_failures_total\"}", "--match={__name__=\"openshift_csi_share_mount_requests_total\"}", "--match={__name__=\"eo_es_storage_info\"}", "--match={__name__=\"eo_es_redundancy_policy_info\"}", "--match={__name__=\"eo_es_defined_delete_namespaces_total\"}", "--match={__name__=\"eo_es_misconfigured_memory_resources_info\"}", "--match={__name__=\"cluster:eo_es_data_nodes_total:max\"}", "--match={__name__=\"cluster:eo_es_documents_created_total:sum\"}", "--match={__name__=\"cluster:eo_es_documents_deleted_total:sum\"}", "--match={__name__=\"pod:eo_es_shards_total:max\"}", "--match={__name__=\"eo_es_cluster_management_state_info\"}", "--match={__name__=\"imageregistry:imagestreamtags_count:sum\"}", "--match={__name__=\"imageregistry:operations_count:sum\"}", "--match={__name__=\"log_logging_info\"}", "--match={__name__=\"log_collector_error_count_total\"}", "--match={__name__=\"log_forwarder_pipeline_info\"}", "--match={__name__=\"log_forwarder_input_info\"}", "--match={__name__=\"log_forwarder_output_info\"}", "--match={__name__=\"cluster:log_collected_bytes_total:sum\"}", "--match={__name__=\"cluster:log_logged_bytes_total:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_pipelines:sum\"}", "--match={__name__=\"openshift_logging:log_forwarders:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_input_type:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_output_type:sum\"}", "--match={__name__=\"openshift_logging:vector_component_received_bytes_total:rate5m\"}", "--match={__name__=\"cluster:kata_monitor_running_shim_count:sum\"}", "--match={__name__=\"platform:hypershift_hostedclusters:max\"}", "--match={__name__=\"platform:hypershift_nodepools:max\"}", "--match={__name__=\"cluster_name:hypershift_nodepools_size:sum\"}", "--match={__name__=\"cluster_name:hypershift_nodepools_available_replicas:sum\"}", "--match={__name__=\"namespace:noobaa_unhealthy_bucket_claims:max\"}", "--match={__name__=\"namespace:noobaa_buckets_claims:max\"}", "--match={__name__=\"namespace:noobaa_unhealthy_namespace_resources:max\"}", "--match={__name__=\"namespace:noobaa_namespace_resources:max\"}", "--match={__name__=\"namespace:noobaa_unhealthy_namespace_buckets:max\"}", "--match={__name__=\"namespace:noobaa_namespace_buckets:max\"}", "--match={__name__=\"namespace:noobaa_accounts:max\"}", "--match={__name__=\"namespace:noobaa_usage:max\"}", "--match={__name__=\"namespace:noobaa_system_health_status:max\"}", "--match={__name__=\"ocs_advanced_feature_usage\"}", "--match={__name__=\"os_image_url_override:sum\"}", "--match={__name__=\"cluster:vsphere_topology_tags:max\"}", "--match={__name__=\"cluster:vsphere_infrastructure_failure_domains:max\"}", "--match={__name__=\"apiserver_list_watch_request_success_total:rate:sum\", verb=~\"LIST|WATCH\"}", "--match={__name__=\"rhacs:telemetry:rox_central_info\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_clusters\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_nodes\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_vcpus\"}", "--match={__name__=\"rhacs:telemetry:rox_sensor_info\"}", "--match={__name__=\"cluster:volume_manager_selinux_pod_context_mismatch_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volume_context_mismatch_warnings_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volume_context_mismatch_errors_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volumes_admitted_total\"}", "--match={__name__=\"ols:provider_model_configuration\"}", "--match={__name__=\"ols:rest_api_query_calls_total:2xx\"}", "--match={__name__=\"ols:rest_api_query_calls_total:4xx\"}", "--match={__name__=\"ols:rest_api_query_calls_total:5xx\"}", "--match={__name__=\"openshift:openshift_network_operator_ipsec_state:info\"}", "--match={__name__=\"cluster:health:group_severity:count\", severity=~\"critical|warning|info|none\"}", "--limit-bytes=5242880" ], "env": [ { "name": "ANONYMIZE_LABELS" }, { "name": "FROM", "value": "https://prometheus-k8s.openshift-monitoring.svc:9091" }, { "name": "ID", "value": "a10cb4e1-1c9a-4a95-92c9-8e021fb16ebc" }, { "name": "TO", "value": "https://infogw.api.openshift.com/" }, { "name": "HTTP_PROXY" }, { "name": "HTTPS_PROXY" }, { "name": "NO_PROXY" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:70f4702845ec5b627d49504a53a13d997c0578630cddffb89aba5cfebe04fc25", "imagePullPolicy": "IfNotPresent", "name": "telemeter-client", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "40Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/serving-certs-ca-bundle", "name": "serving-certs-ca-bundle" }, { "mountPath": "/etc/telemeter", "name": "secret-telemeter-client" }, { "mountPath": "/etc/tls/private", "name": "federate-client-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem/", "name": "telemeter-trusted-ca-bundle", "readOnly": true } ] }, { "args": [ "--reload-url=http://localhost:8080/-/reload", "--watched-dir=/etc/serving-certs-ca-bundle" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8e158c83ec12b3e0237fab9a221630bd691e79c079a111f346354ff43b8199df", "imagePullPolicy": "IfNotPresent", "name": "reload", "resources": { "requests": { "cpu": "1m", "memory": "10Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/serving-certs-ca-bundle", "name": "serving-certs-ca-bundle" } ] }, { "args": [ "--secure-listen-address=:8443", "--upstream=http://127.0.0.1:8080/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--config-file=/etc/kube-rbac-policy/config.yaml", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "telemeter-client-tls" }, { "mountPath": "/etc/kube-rbac-policy", "name": "secret-telemeter-client-kube-rbac-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "telemeter-client", "serviceAccountName": "telemeter-client", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "telemeter-client-serving-certs-ca-bundle" }, "name": "serving-certs-ca-bundle" }, { "name": "secret-telemeter-client", "secret": { "defaultMode": 420, "secretName": "telemeter-client" } }, { "name": "telemeter-client-tls", "secret": { "defaultMode": 420, "secretName": "telemeter-client-tls" } }, { "name": "federate-client-tls", "secret": { "defaultMode": 420, "secretName": "federate-client-certs" } }, { "name": "secret-telemeter-client-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "telemeter-client-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "telemeter-trusted-ca-bundle-56c9b9fa8d9gs", "optional": true }, "name": "telemeter-trusted-ca-bundle" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:31:40Z", "lastUpdateTime": "2026-05-13T16:31:40Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:31:36Z", "lastUpdateTime": "2026-05-13T16:31:40Z", "message": "ReplicaSet \"telemeter-client-84769c5ffd\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-05-13T16:30:14Z", "generation": 2, "labels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.36.1" }, "name": "thanos-querier", "namespace": "openshift-monitoring", "resourceVersion": "29022", "uid": "495eb538-3850-446c-9759-42982d92e626" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.36.1" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "query", "--grpc-address=127.0.0.1:10901", "--http-address=127.0.0.1:9090", "--log.format=logfmt", "--query.replica-label=prometheus_replica", "--query.replica-label=thanos_ruler_replica", "--endpoint=dnssrv+_grpc._tcp.prometheus-operated.openshift-monitoring.svc.cluster.local", "--query.auto-downsampling", "--store.sd-dns-resolver=miekgdns", "--grpc-client-tls-secure", "--grpc-client-tls-cert=/etc/tls/grpc/client.crt", "--grpc-client-tls-key=/etc/tls/grpc/client.key", "--grpc-client-tls-ca=/etc/tls/grpc/ca.crt", "--grpc-client-server-name=prometheus-grpc", "--rule=dnssrv+_grpc._tcp.prometheus-operated.openshift-monitoring.svc.cluster.local", "--target=dnssrv+_grpc._tcp.prometheus-operated.openshift-monitoring.svc.cluster.local", "--store=dnssrv+_grpc._tcp.prometheus-operated.openshift-user-workload-monitoring.svc.cluster.local", "--store=dnssrv+_grpc._tcp.thanos-ruler-operated.openshift-user-workload-monitoring.svc.cluster.local", "--rule=dnssrv+_grpc._tcp.prometheus-operated.openshift-user-workload-monitoring.svc.cluster.local", "--rule=dnssrv+_grpc._tcp.thanos-ruler-operated.openshift-user-workload-monitoring.svc.cluster.local", "--target=dnssrv+_grpc._tcp.prometheus-operated.openshift-user-workload-monitoring.svc.cluster.local", "--web.disable-cors" ], "env": [ { "name": "HOST_IP_ADDRESS", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "status.hostIP" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8f34d18e3a237f96e2b9e9a071e5bf159c04f978ed12af457f1d065e6796220d", "imagePullPolicy": "IfNotPresent", "name": "thanos-query", "ports": [ { "containerPort": 9090, "name": "http", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "12Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/grpc", "name": "secret-grpc-tls" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9091", "--upstream=http://127.0.0.1:9090", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--ignore-paths=/-/healthy,/-/ready", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 4, "httpGet": { "path": "/-/healthy", "port": 9091, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "kube-rbac-proxy-web", "ports": [ { "containerPort": 9091, "name": "web", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 20, "httpGet": { "path": "/-/ready", "port": 9091, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy-web" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9092", "--upstream=http://127.0.0.1:9095", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--allow-paths=/api/v1/query,/api/v1/query_range,/api/v1/labels,/api/v1/label/*/values,/api/v1/series", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9092, "name": "tenancy", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy" } ] }, { "args": [ "--insecure-listen-address=127.0.0.1:9095", "--upstream=http://127.0.0.1:9090", "--label=namespace", "--enable-label-apis", "--error-on-replace", "--rules-with-active-alerts" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2897724cec17bc13acc133181f64ccb8d54ce5dc9582f9cecf704c2540e15600", "imagePullPolicy": "IfNotPresent", "name": "prom-label-proxy", "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--secure-listen-address=0.0.0.0:9093", "--upstream=http://127.0.0.1:9095", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--allow-paths=/api/v1/rules,/api/v1/alerts", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-rules", "ports": [ { "containerPort": 9093, "name": "tenancy-rules", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy-rules" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9094", "--upstream=http://127.0.0.1:9090", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--client-ca-file=/etc/tls/client/client-ca.crt", "--allow-paths=/metrics", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-metrics", "ports": [ { "containerPort": 9094, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy-metrics" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "thanos-querier", "serviceAccountName": "thanos-querier", "terminationGracePeriodSeconds": 120, "volumes": [ { "name": "secret-thanos-querier-tls", "secret": { "defaultMode": 420, "secretName": "thanos-querier-tls" } }, { "name": "secret-thanos-querier-kube-rbac-proxy", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy" } }, { "name": "secret-thanos-querier-kube-rbac-proxy-web", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy-web" } }, { "name": "secret-thanos-querier-kube-rbac-proxy-rules", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy-rules" } }, { "name": "secret-thanos-querier-kube-rbac-proxy-metrics", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy-metrics" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "name": "secret-grpc-tls", "secret": { "defaultMode": 420, "secretName": "thanos-querier-grpc-tls-1or3l2ktkv8ok" } } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-05-13T16:30:24Z", "lastUpdateTime": "2026-05-13T16:30:24Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:30:14Z", "lastUpdateTime": "2026-05-13T16:48:41Z", "message": "ReplicaSet \"thanos-querier-66fd47f7bd\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 2, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "kubernetes.io/description": "This deployment deploys the Networking console plugin pod which serves\nthe contents of the Networking section in OpenShift Console\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.18.9" }, "creationTimestamp": "2026-05-13T16:21:33Z", "generation": 1, "labels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator", "networkoperator.openshift.io/generates-operator-status": "2q95a2qrikvmhfbbhiok6gk9j50uset8" }, "name": "networking-console-plugin", "namespace": "openshift-network-console", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "5ac4cb75-7b34-4798-aa86-b294ad10c2c9" } ], "resourceVersion": "10547", "uid": "329266f4-418d-4525-bf8d-5b493681f3f8" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator" } }, "namespaces": [ "openshift-network-console" ], "topologyKey": "kubernetes.io/hostname" }, "weight": 90 } ] } }, "automountServiceAccountToken": false, "containers": [ { "command": [ "/bin/sh", "-c", "if echo \"$POD_IP\" | grep -qE '^([0-9]{1,3}\\.){3}[0-9]{1,3}$'; then\n LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME=\"9443\"\nelse\n LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME=\"[::]:9443\"\nfi\nsed \"s/LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME/$LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME/g\" /etc/nginx/nginx.conf \u003e /tmp/nginx.conf\nexec nginx -c /tmp/nginx.conf -g 'daemon off;'\n" ], "env": [ { "name": "POD_IP", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "status.podIP" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13aabbaf260d634ff0e9ac1af88af075b5ba671fd51313e33e74d7d2f7e54128", "imagePullPolicy": "IfNotPresent", "name": "networking-console-plugin", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/cert", "name": "networking-console-plugin-cert", "readOnly": true }, { "mountPath": "/etc/nginx/nginx.conf", "name": "nginx-conf", "readOnly": true, "subPath": "nginx.conf" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "networking-console-plugin" }, "name": "nginx-conf" }, { "name": "networking-console-plugin-cert", "secret": { "defaultMode": 420, "secretName": "networking-console-plugin-cert" } } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-05-13T16:30:06Z", "lastUpdateTime": "2026-05-13T16:30:06Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:21:34Z", "lastUpdateTime": "2026-05-13T16:30:06Z", "message": "ReplicaSet \"networking-console-plugin-6d95f7dc7\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "kubernetes.io/description": "This deployment deploys the network-check-source pod that performs\npod network connectivity checks\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.18.9" }, "creationTimestamp": "2026-05-13T16:21:28Z", "generation": 1, "labels": { "networkoperator.openshift.io/generates-operator-status": "" }, "name": "network-check-source", "namespace": "openshift-network-diagnostics", "ownerReferences": [ { "apiVersion": "operator.openshift.io/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Network", "name": "cluster", "uid": "5ac4cb75-7b34-4798-aa86-b294ad10c2c9" } ], "resourceVersion": "9150", "uid": "db159fce-30d6-47a3-9742-268893d76e92" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "network-check-source" } }, "strategy": { "type": "Recreate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "network-check-source", "kubernetes.io/os": "linux" } }, "spec": { "containers": [ { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)" ], "command": [ "cluster-network-check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:894452e6587de55d04e37163d3da53e11fced8fb08bd0acf61e6d49f7964284e", "imagePullPolicy": "IfNotPresent", "name": "check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "40Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "network-diagnostics", "serviceAccountName": "network-diagnostics", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:29:32Z", "lastUpdateTime": "2026-05-13T16:29:32Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:21:34Z", "lastUpdateTime": "2026-05-13T16:29:32Z", "message": "ReplicaSet \"network-check-source-658d84f764\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:45:57Z", "generation": 4, "labels": { "control-plane": "gitops-operator", "olm.deployment-spec-hash": "9SIwV4CaV3rXIow3ZwoNDrOK0zeIrfNTalje8y", "olm.managed": "true", "olm.owner": "openshift-gitops-operator.v1.15.4", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-operators", "operators.coreos.com/openshift-gitops-operator.openshift-operators": "" }, "name": "openshift-gitops-operator-controller-manager", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "openshift-gitops-operator.v1.15.4", "uid": "5db16d56-fbee-4d18-8019-29b5f09a3f13" } ], "resourceVersion": "180965", "uid": "e0d91956-c822-4dfa-bf81-9e9f88744853" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 1, "selector": { "matchLabels": { "control-plane": "gitops-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"argoproj.io/v1alpha1\",\n \"kind\": \"AppProject\",\n \"metadata\": {\n \"name\": \"example\"\n },\n \"spec\": null\n },\n {\n \"apiVersion\": \"argoproj.io/v1alpha1\",\n \"kind\": \"Application\",\n \"metadata\": {\n \"name\": \"example\"\n },\n \"spec\": null\n },\n {\n \"apiVersion\": \"argoproj.io/v1alpha1\",\n \"kind\": \"ApplicationSet\",\n \"metadata\": {\n \"name\": \"example\"\n },\n \"spec\": null\n },\n {\n \"apiVersion\": \"argoproj.io/v1alpha1\",\n \"kind\": \"NotificationsConfiguration\",\n \"metadata\": {\n \"name\": \"default-notifications-configuration\"\n },\n \"spec\": {\n \"templates\": {\n \"template.app-created\": \"email:\\n subject: Application {{.app.metadata.name}} has been created.\\nmessage: Application {{.app.metadata.name}} has been created.\\nteams:\\n title: Application {{.app.metadata.name}} has been created.\",\n \"template.app-deleted\": \"email:\\n subject: Application {{.app.metadata.name}} has been deleted.\\nmessage: Application {{.app.metadata.name}} has been deleted.\\nteams:\\n title: Application {{.app.metadata.name}} has been deleted.\",\n \"template.app-deployed\": \"email:\\n subject: New version of an application {{.app.metadata.name}} is up and running.\\nmessage: |\\n {{if eq .serviceType \\\"slack\\\"}}:white_check_mark:{{end}} Application {{.app.metadata.name}} is now running new version of deployments manifests.\\nslack:\\n attachments: |\\n [{\\n \\\"title\\\": \\\"{{ .app.metadata.name}}\\\",\\n \\\"title_link\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\",\\n \\\"color\\\": \\\"#18be52\\\",\\n \\\"fields\\\": [\\n {\\n \\\"title\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\",\\n \\\"short\\\": true\\n },\\n {\\n \\\"title\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\",\\n \\\"short\\\": true\\n },\\n {\\n \\\"title\\\": \\\"Revision\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.revision}}\\\",\\n \\\"short\\\": true\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"title\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\",\\n \\\"short\\\": true\\n }\\n {{end}}\\n ]\\n }]\\n deliveryPolicy: Post\\n groupingKey: \\\"\\\"\\n notifyBroadcast: false\\nteams:\\n facts: |\\n [{\\n \\\"name\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Revision\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.revision}}\\\"\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"name\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\"\\n }\\n {{end}}\\n ]\\n potentialAction: |-\\n [{\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Operation Application\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\"\\n }]\\n },\\n {\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Repository\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.app.spec.source.repoURL | call .repo.RepoURLToHTTPS}}\\\"\\n }]\\n }]\\n themeColor: '#000080'\\n title: New version of an application {{.app.metadata.name}} is up and running.\",\n \"template.app-health-degraded\": \"email:\\n subject: Application {{.app.metadata.name}} has degraded.\\nmessage: |\\n {{if eq .serviceType \\\"slack\\\"}}:exclamation:{{end}} Application {{.app.metadata.name}} has degraded.\\n Application details: {{.context.argocdUrl}}/applications/{{.app.metadata.name}}.\\nslack:\\n attachments: |\\n [{\\n \\\"title\\\": \\\"{{ .app.metadata.name}}\\\",\\n \\\"title_link\\\": \\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\",\\n \\\"color\\\": \\\"#f4c030\\\",\\n \\\"fields\\\": [\\n {\\n \\\"title\\\": \\\"Health Status\\\",\\n \\\"value\\\": \\\"{{.app.status.health.status}}\\\",\\n \\\"short\\\": true\\n },\\n {\\n \\\"title\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\",\\n \\\"short\\\": true\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"title\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\",\\n \\\"short\\\": true\\n }\\n {{end}}\\n ]\\n }]\\n deliveryPolicy: Post\\n groupingKey: \\\"\\\"\\n notifyBroadcast: false\\nteams:\\n facts: |\\n [{\\n \\\"name\\\": \\\"Health Status\\\",\\n \\\"value\\\": \\\"{{.app.status.health.status}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\"\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"name\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\"\\n }\\n {{end}}\\n ]\\n potentialAction: |\\n [{\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Application\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\"\\n }]\\n },\\n {\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Repository\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.app.spec.source.repoURL | call .repo.RepoURLToHTTPS}}\\\"\\n }]\\n }]\\n themeColor: '#FF0000'\\n title: Application {{.app.metadata.name}} has degraded.\",\n \"template.app-sync-failed\": \"email:\\n subject: Failed to sync application {{.app.metadata.name}}.\\nmessage: |\\n {{if eq .serviceType \\\"slack\\\"}}:exclamation:{{end}} The sync operation of application {{.app.metadata.name}} has failed at {{.app.status.operationState.finishedAt}} with the following error: {{.app.status.operationState.message}}\\n Sync operation details are available at: {{.context.argocdUrl}}/applications/{{.app.metadata.name}}?operation=true .\\nslack:\\n attachments: |\\n [{\\n \\\"title\\\": \\\"{{ .app.metadata.name}}\\\",\\n \\\"title_link\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\",\\n \\\"color\\\": \\\"#E96D76\\\",\\n \\\"fields\\\": [\\n {\\n \\\"title\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\",\\n \\\"short\\\": true\\n },\\n {\\n \\\"title\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\",\\n \\\"short\\\": true\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"title\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\",\\n \\\"short\\\": true\\n }\\n {{end}}\\n ]\\n }]\\n deliveryPolicy: Post\\n groupingKey: \\\"\\\"\\n notifyBroadcast: false\\nteams:\\n facts: |\\n [{\\n \\\"name\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Failed at\\\",\\n \\\"value\\\": \\\"{{.app.status.operationState.finishedAt}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\"\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"name\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\"\\n }\\n {{end}}\\n ]\\n potentialAction: |-\\n [{\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Operation\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}?operation=true\\\"\\n }]\\n },\\n {\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Repository\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.app.spec.source.repoURL | call .repo.RepoURLToHTTPS}}\\\"\\n }]\\n }]\\n themeColor: '#FF0000'\\n title: Failed to sync application {{.app.metadata.name}}.\",\n \"template.app-sync-running\": \"email:\\n subject: Start syncing application {{.app.metadata.name}}.\\nmessage: |\\n The sync operation of application {{.app.metadata.name}} has started at {{.app.status.operationState.startedAt}}.\\n Sync operation details are available at: {{.context.argocdUrl}}/applications/{{.app.metadata.name}}?operation=true .\\nslack:\\n attachments: |\\n [{\\n \\\"title\\\": \\\"{{ .app.metadata.name}}\\\",\\n \\\"title_link\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\",\\n \\\"color\\\": \\\"#0DADEA\\\",\\n \\\"fields\\\": [\\n {\\n \\\"title\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\",\\n \\\"short\\\": true\\n },\\n {\\n \\\"title\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\",\\n \\\"short\\\": true\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"title\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\",\\n \\\"short\\\": true\\n }\\n {{end}}\\n ]\\n }]\\n deliveryPolicy: Post\\n groupingKey: \\\"\\\"\\n notifyBroadcast: false\\nteams:\\n facts: |\\n [{\\n \\\"name\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Started at\\\",\\n \\\"value\\\": \\\"{{.app.status.operationState.startedAt}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\"\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"name\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\"\\n }\\n {{end}}\\n ]\\n potentialAction: |-\\n [{\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Operation\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}?operation=true\\\"\\n }]\\n },\\n {\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Repository\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.app.spec.source.repoURL | call .repo.RepoURLToHTTPS}}\\\"\\n }]\\n }]\\n title: Start syncing application {{.app.metadata.name}}.\",\n \"template.app-sync-status-unknown\": \"email:\\n subject: Application {{.app.metadata.name}} sync status is 'Unknown'\\nmessage: |\\n {{if eq .serviceType \\\"slack\\\"}}:exclamation:{{end}} Application {{.app.metadata.name}} sync is 'Unknown'.\\n Application details: {{.context.argocdUrl}}/applications/{{.app.metadata.name}}.\\n {{if ne .serviceType \\\"slack\\\"}}\\n {{range $c := .app.status.conditions}}\\n * {{$c.message}}\\n {{end}}\\n {{end}}\\nslack:\\n attachments: |\\n [{\\n \\\"title\\\": \\\"{{ .app.metadata.name}}\\\",\\n \\\"title_link\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\",\\n \\\"color\\\": \\\"#E96D76\\\",\\n \\\"fields\\\": [\\n {\\n \\\"title\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\",\\n \\\"short\\\": true\\n },\\n {\\n \\\"title\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\",\\n \\\"short\\\": true\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"title\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\",\\n \\\"short\\\": true\\n }\\n {{end}}\\n ]\\n }]\\n deliveryPolicy: Post\\n groupingKey: \\\"\\\"\\n notifyBroadcast: false\\nteams:\\n facts: |\\n [{\\n \\\"name\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\"\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"name\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\"\\n }\\n {{end}}\\n ]\\n potentialAction: |-\\n [{\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Application\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\"\\n }]\\n },\\n {\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Repository\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.app.spec.source.repoURL | call .repo.RepoURLToHTTPS}}\\\"\\n }]\\n }]\\n title: Application {{.app.metadata.name}} sync status is 'Unknown'\",\n \"template.app-sync-succeeded\": \"email:\\n subject: Application {{.app.metadata.name}} has been successfully synced.\\nmessage: |\\n {{if eq .serviceType \\\"slack\\\"}}:white_check_mark:{{end}} Application {{.app.metadata.name}} has been successfully synced at {{.app.status.operationState.finishedAt}}.\\n Sync operation details are available at: {{.context.argocdUrl}}/applications/{{.app.metadata.name}}?operation=true .\\nslack:\\n attachments: |\\n [{\\n \\\"title\\\": \\\"{{ .app.metadata.name}}\\\",\\n \\\"title_link\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\",\\n \\\"color\\\": \\\"#18be52\\\",\\n \\\"fields\\\": [\\n {\\n \\\"title\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\",\\n \\\"short\\\": true\\n },\\n {\\n \\\"title\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\",\\n \\\"short\\\": true\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"title\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\",\\n \\\"short\\\": true\\n }\\n {{end}}\\n ]\\n }]\\n deliveryPolicy: Post\\n groupingKey: \\\"\\\"\\n notifyBroadcast: false\\nteams:\\n facts: |\\n [{\\n \\\"name\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Synced at\\\",\\n \\\"value\\\": \\\"{{.app.status.operationState.finishedAt}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\"\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"name\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\"\\n }\\n {{end}}\\n ]\\n potentialAction: |-\\n [{\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Operation Details\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}?operation=true\\\"\\n }]\\n },\\n {\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Repository\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.app.spec.source.repoURL | call .repo.RepoURLToHTTPS}}\\\"\\n }]\\n }]\\n themeColor: '#000080'\\n title: Application {{.app.metadata.name}} has been successfully synced\"\n },\n \"triggers\": {\n \"trigger.on-created\": \"- description: Application is created.\\n oncePer: app.metadata.name\\n send:\\n - app-created\\n when: \\\"true\\\"\",\n \"trigger.on-deleted\": \"- description: Application is deleted.\\n oncePer: app.metadata.name\\n send:\\n - app-deleted\\n when: app.metadata.deletionTimestamp != nil\",\n \"trigger.on-deployed\": \"- description: Application is synced and healthy. Triggered once per commit.\\n oncePer: app.status.operationState.syncResult.revision\\n send:\\n - app-deployed\\n when: app.status.operationState.phase in ['Succeeded'] and app.status.health.status\\n == 'Healthy'\",\n \"trigger.on-health-degraded\": \"- description: Application has degraded\\n send:\\n - app-health-degraded\\n when: app.status.health.status == 'Degraded'\",\n \"trigger.on-sync-failed\": \"- description: Application syncing has failed\\n send:\\n - app-sync-failed\\n when: app.status.operationState.phase in ['Error', 'Failed']\",\n \"trigger.on-sync-running\": \"- description: Application is being synced\\n send:\\n - app-sync-running\\n when: app.status.operationState.phase in ['Running']\",\n \"trigger.on-sync-status-unknown\": \"- description: Application status is 'Unknown'\\n send:\\n - app-sync-status-unknown\\n when: app.status.sync.status == 'Unknown'\",\n \"trigger.on-sync-succeeded\": \"- description: Application syncing has succeeded\\n send:\\n - app-sync-succeeded\\n when: app.status.operationState.phase in ['Succeeded']\"\n }\n }\n },\n {\n \"apiVersion\": \"argoproj.io/v1beta1\",\n \"kind\": \"ArgoCD\",\n \"metadata\": {\n \"name\": \"argocd\"\n },\n \"spec\": {\n \"controller\": {\n \"resources\": {\n \"limits\": {\n \"cpu\": \"2000m\",\n \"memory\": \"2048Mi\"\n },\n \"requests\": {\n \"cpu\": \"250m\",\n \"memory\": \"1024Mi\"\n }\n }\n },\n \"ha\": {\n \"enabled\": false,\n \"resources\": {\n \"limits\": {\n \"cpu\": \"500m\",\n \"memory\": \"256Mi\"\n },\n \"requests\": {\n \"cpu\": \"250m\",\n \"memory\": \"128Mi\"\n }\n }\n },\n \"rbac\": {\n \"defaultPolicy\": \"\",\n \"policy\": \"g, system:cluster-admins, role:admin\\n\",\n \"scopes\": \"[groups]\"\n },\n \"redis\": {\n \"resources\": {\n \"limits\": {\n \"cpu\": \"500m\",\n \"memory\": \"256Mi\"\n },\n \"requests\": {\n \"cpu\": \"250m\",\n \"memory\": \"128Mi\"\n }\n }\n },\n \"repo\": {\n \"resources\": {\n \"limits\": {\n \"cpu\": \"1000m\",\n \"memory\": \"1024Mi\"\n },\n \"requests\": {\n \"cpu\": \"250m\",\n \"memory\": \"256Mi\"\n }\n }\n },\n \"resourceExclusions\": \"- apiGroups:\\n - tekton.dev\\n clusters:\\n - '*'\\n kinds:\\n - TaskRun\\n - PipelineRun \\n\",\n \"server\": {\n \"resources\": {\n \"limits\": {\n \"cpu\": \"500m\",\n \"memory\": \"256Mi\"\n },\n \"requests\": {\n \"cpu\": \"125m\",\n \"memory\": \"128Mi\"\n }\n },\n \"route\": {\n \"enabled\": true\n }\n },\n \"sso\": {\n \"dex\": {\n \"openShiftOAuth\": true,\n \"resources\": {\n \"limits\": {\n \"cpu\": \"500m\",\n \"memory\": \"256Mi\"\n },\n \"requests\": {\n \"cpu\": \"250m\",\n \"memory\": \"128Mi\"\n }\n }\n },\n \"provider\": \"dex\"\n }\n }\n },\n {\n \"apiVersion\": \"pipelines.openshift.io/v1alpha1\",\n \"kind\": \"GitopsService\",\n \"metadata\": {\n \"name\": \"gitopsservice-sample\"\n },\n \"spec\": null\n }\n]", "capabilities": "Deep Insights", "console.openshift.io/plugins": "[\"gitops-plugin\"]", "containerImage": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:ad49a3d14f843bde0d2365093d00ffa6d3b9d59a75c81e0c56710ad37b53bd92", "createdAt": "2024-11-25T03:57:37Z", "description": "Enables teams to adopt GitOps principles for managing cluster configurations and application delivery across hybrid multi-cluster Kubernetes environments.", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "false", "features.operators.openshift.io/proxy-aware": "true", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "kubectl.kubernetes.io/default-container": "manager", "olm.operatorGroup": "global-operators", "olm.operatorNamespace": "openshift-operators", "olm.skipRange": "", "olm.targetNamespaces": "", "olmcahash": "ea5686f758f2d57ba1b9c7098fbb20fc6a2f82555ba59546b3d8408d518fd3de", "operatorframework.io/cluster-monitoring": "true", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"AnalysisRun\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"AnalysisTemplate\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"AppProject\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"Application\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"ApplicationSet\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"ArgoCD\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"ArgoCD\",\"version\":\"v1beta1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"ClusterAnalysisTemplate\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"Experiment\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"NotificationsConfiguration\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"Rollout\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"RolloutManager\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"pipelines.openshift.io\",\"kind\":\"GitopsService\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"openshift-gitops-operator\",\"version\":\"1.15.4\"}}]}", "operatorframework.io/suggested-namespace": "openshift-gitops-operator", "operators.openshift.io/infrastructure-features": "[\"disconnected\"]", "operators.openshift.io/valid-subscription": "[\"OpenShift Container Platform\", \"OpenShift Platform Plus\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.35.0", "operators.operatorframework.io/internal-objects": "[\"gitopsservices.pipelines.openshift.io\"]", "operators.operatorframework.io/project_layout": "go.kubebuilder.io/v4", "repository": "https://github.com/redhat-developer/gitops-operator", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "control-plane": "gitops-operator" } }, "spec": { "containers": [ { "args": [ "--health-probe-bind-address=:8081", "--metrics-bind-address=127.0.0.1:8080", "--leader-elect" ], "command": [ "/usr/local/bin/manager" ], "env": [ { "name": "ARGOCD_CLUSTER_CONFIG_NAMESPACES", "value": "openshift-gitops" }, { "name": "CLUSTER_SCOPED_ARGO_ROLLOUTS_NAMESPACES", "value": "openshift-gitops" }, { "name": "OPERATOR_NAME", "value": "gitops-operator" }, { "name": "LABEL_SELECTOR" }, { "name": "ENABLE_CONVERSION_WEBHOOK", "value": "true" }, { "name": "RELATED_IMAGE_ARGOCD_DEX_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a9e2360f00c5c9840a100a6748bd905b8f34169140a33fb0ca4af9cf6db71642" }, { "name": "ARGOCD_DEX_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:a9e2360f00c5c9840a100a6748bd905b8f34169140a33fb0ca4af9cf6db71642" }, { "name": "RELATED_IMAGE_ARGOCD_KEYCLOAK_IMAGE", "value": "registry.redhat.io/rh-sso-7/sso76-openshift-rhel8@sha256:4d945dd1a6fc0e8b6cfc16f4359128f1427b094e76efd4ff31325a1839246107" }, { "name": "ARGOCD_KEYCLOAK_IMAGE", "value": "registry.redhat.io/rh-sso-7/sso76-openshift-rhel8@sha256:4d945dd1a6fc0e8b6cfc16f4359128f1427b094e76efd4ff31325a1839246107" }, { "name": "RELATED_IMAGE_BACKEND_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5bda26e2c16beebf66dd8f3c3c55d48e2f00db870f2d9d4d44570d9d3b8bddb0" }, { "name": "BACKEND_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5bda26e2c16beebf66dd8f3c3c55d48e2f00db870f2d9d4d44570d9d3b8bddb0" }, { "name": "RELATED_IMAGE_ARGOCD_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:911733d78ae6f36f642b4d63f044cd102b7eee170508eaf518ac7acf0f339698" }, { "name": "ARGOCD_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:911733d78ae6f36f642b4d63f044cd102b7eee170508eaf518ac7acf0f339698" }, { "name": "ARGOCD_REPOSERVER_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:911733d78ae6f36f642b4d63f044cd102b7eee170508eaf518ac7acf0f339698" }, { "name": "RELATED_IMAGE_ARGOCD_REDIS_IMAGE", "value": "registry.redhat.io/rhel9/redis-7@sha256:2fca0decc49230122f044afb2e7cd8f64921a00141c8c22c2f1402f3564f87f8" }, { "name": "ARGOCD_REDIS_IMAGE", "value": "registry.redhat.io/rhel9/redis-7@sha256:2fca0decc49230122f044afb2e7cd8f64921a00141c8c22c2f1402f3564f87f8" }, { "name": "ARGOCD_REDIS_HA_IMAGE", "value": "registry.redhat.io/rhel9/redis-7@sha256:2fca0decc49230122f044afb2e7cd8f64921a00141c8c22c2f1402f3564f87f8" }, { "name": "RELATED_IMAGE_ARGOCD_REDIS_HA_PROXY_IMAGE", "value": "registry.redhat.io/openshift4/ose-haproxy-router@sha256:2dd72760f736ab13e87d6e507e654c390d2d6af3154c6adb85610b5f58085b9c" }, { "name": "ARGOCD_REDIS_HA_PROXY_IMAGE", "value": "registry.redhat.io/openshift4/ose-haproxy-router@sha256:2dd72760f736ab13e87d6e507e654c390d2d6af3154c6adb85610b5f58085b9c" }, { "name": "RELATED_IMAGE_GITOPS_CONSOLE_PLUGIN_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:41717c27915251bda8afeef651b609b8a9ed410e0fa09c4cf8fa7e91d6a94292" }, { "name": "GITOPS_CONSOLE_PLUGIN_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:41717c27915251bda8afeef651b609b8a9ed410e0fa09c4cf8fa7e91d6a94292" }, { "name": "RELATED_IMAGE_ARGOCD_EXTENSION_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c7f72546d0d918bfd21aff7157b983ff7c832b269f5efb84d2ed723a09bf612" }, { "name": "ARGOCD_EXTENSION_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:0c7f72546d0d918bfd21aff7157b983ff7c832b269f5efb84d2ed723a09bf612" }, { "name": "RELATED_IMAGE_ARGO_ROLLOUTS_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d41454824632475f0e88aa6e0031ec643bd37e1d575df36cd3ee63daf1403281" }, { "name": "ARGO_ROLLOUTS_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d41454824632475f0e88aa6e0031ec643bd37e1d575df36cd3ee63daf1403281" }, { "name": "RELATED_IMAGE_MUST_GATHER_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:6cec76d7ea70d77923cf4285177e375d34e96e3aecbe77b68cd5ff769e6e540b" }, { "name": "RELATED_IMAGE_KUBE_RBAC_PROXY_IMAGE", "value": "registry.redhat.io/openshift4/ose-kube-rbac-proxy@sha256:56653df97e4498ecd67b9645d75e44f65c625594e312dbcf0f09937b57d76010" }, { "name": "OPERATOR_CONDITION_NAME", "value": "openshift-gitops-operator.v1.15.4" } ], "image": "registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:ad49a3d14f843bde0d2365093d00ffa6d3b9d59a75c81e0c56710ad37b53bd92", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/apiserver.local.config/certificates", "name": "apiservice-cert" }, { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "webhook-cert" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:8443", "--upstream=http://127.0.0.1:8080", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--logtostderr=true", "--allow-paths=/metrics", "--http2-disable" ], "env": [ { "name": "ARGOCD_CLUSTER_CONFIG_NAMESPACES", "value": "openshift-gitops" }, { "name": "OPERATOR_CONDITION_NAME", "value": "openshift-gitops-operator.v1.15.4" } ], "image": "registry.redhat.io/openshift4/ose-kube-rbac-proxy@sha256:56653df97e4498ecd67b9645d75e44f65c625594e312dbcf0f09937b57d76010", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "128Mi" }, "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "kube-rbac-proxy-tls", "readOnly": true }, { "mountPath": "/apiserver.local.config/certificates", "name": "apiservice-cert" }, { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "webhook-cert" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "openshift-gitops-operator-controller-manager", "serviceAccountName": "openshift-gitops-operator-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "name": "kube-rbac-proxy-tls", "secret": { "defaultMode": 420, "secretName": "kube-rbac-proxy-tls" } }, { "name": "apiservice-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "apiserver.crt" }, { "key": "tls.key", "path": "apiserver.key" } ], "secretName": "openshift-gitops-operator-controller-manager-service-cert" } }, { "name": "webhook-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "openshift-gitops-operator-controller-manager-service-cert" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:45:57Z", "lastUpdateTime": "2026-05-13T16:46:08Z", "message": "ReplicaSet \"openshift-gitops-operator-controller-manager-6f569f5cbb\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-05-13T18:26:38Z", "lastUpdateTime": "2026-05-13T18:26:38Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 4, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:49:48Z", "generation": 1, "labels": { "olm.deployment-spec-hash": "7xUB0ZIG9joilJgLNL7HqnhHNX8cFTLbTxqxYT", "olm.managed": "true", "olm.owner": "openshift-pipelines-operator-rh.v5.0.5-819", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-operators", "operator.tekton.dev/release": "devel", "operators.coreos.com/openshift-pipelines-operator-rh.openshift-operators": "", "version": "devel" }, "name": "openshift-pipelines-operator", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "openshift-pipelines-operator-rh.v5.0.5-819", "uid": "8fc7c17c-01f0-4241-a956-a69fe7ad6457" } ], "resourceVersion": "32899", "uid": "d9dfc3bc-9731-4c18-adba-091caf224f2b" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 1, "selector": { "matchLabels": { "name": "openshift-pipelines-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"ManualApprovalGate\",\n \"metadata\": {\n \"name\": \"manual-approval-gate\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"OpenShiftPipelinesAsCode\",\n \"metadata\": {\n \"name\": \"pipelines-as-code\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonAddon\",\n \"metadata\": {\n \"name\": \"addon\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonChain\",\n \"metadata\": {\n \"name\": \"chain\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonConfig\",\n \"metadata\": {\n \"name\": \"config\"\n },\n \"spec\": {\n \"addon\": {\n \"params\": [\n {\n \"name\": \"pipelineTemplates\",\n \"value\": \"true\"\n },\n {\n \"name\": \"resolverTasks\",\n \"value\": \"true\"\n },\n {\n \"name\": \"resolverStepActions\",\n \"value\": \"true\"\n },\n {\n \"name\": \"communityResolverTasks\",\n \"value\": \"true\"\n }\n ]\n },\n \"params\": [\n {\n \"name\": \"createRbacResource\",\n \"value\": \"true\"\n },\n {\n \"name\": \"legacyPipelineRbac\",\n \"value\": \"true\"\n },\n {\n \"name\": \"createCABundleConfigMaps\",\n \"value\": \"true\"\n }\n ],\n \"profile\": \"all\",\n \"pruner\": {\n \"keep\": 100,\n \"resources\": [\n \"pipelinerun\",\n \"taskrun\"\n ],\n \"schedule\": \"0 8 * * *\"\n },\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonHub\",\n \"metadata\": {\n \"name\": \"hub\"\n },\n \"spec\": {\n \"api\": {\n \"catalogRefreshInterval\": \"30m\"\n },\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonInstallerSet\",\n \"metadata\": {\n \"name\": \"foo\"\n },\n \"spec\": {\n \"manifests\": []\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonPipeline\",\n \"metadata\": {\n \"name\": \"pipeline\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonPruner\",\n \"metadata\": {\n \"name\": \"pruner\"\n },\n \"spec\": {\n \"disabled\": true,\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonResult\",\n \"metadata\": {\n \"name\": \"result\"\n },\n \"spec\": {\n \"auth_disable\": true,\n \"db_enable_auto_migration\": true,\n \"db_host\": \"tekton-results-postgres-service.openshift-pipelines.svc.cluster.local\",\n \"db_port\": 5432,\n \"log_level\": \"debug\",\n \"logging_pvc_name\": \"tekton-logs\",\n \"logs_api\": true,\n \"logs_buffer_size\": 32768,\n \"logs_path\": \"/logs\",\n \"logs_type\": \"File\",\n \"prometheus_port\": 9090,\n \"server_port\": 8080,\n \"targetNamespace\": \"openshift-pipelines\",\n \"tls_hostname_override\": \"tekton-results-api-service.openshift-pipelines.svc.cluster.local\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonTrigger\",\n \"metadata\": {\n \"name\": \"trigger\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n }\n]", "capabilities": "Full Lifecycle", "categories": "Developer Tools, Integration \u0026 Delivery", "certified": "false", "console.openshift.io/plugins": "[\"pipelines-console-plugin\"]", "containerImage": "registry.redhat.io/openshift-pipelines/pipelines-rhel9-operator@", "description": "Red Hat OpenShift Pipelines is a cloud-native CI/CD solution for building pipelines using Tekton concepts which run natively on OpenShift and Kubernetes.", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "true", "features.operators.openshift.io/proxy-aware": "true", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "olm.operatorGroup": "global-operators", "olm.operatorNamespace": "openshift-operators", "olm.skipRange": "\u003e=1.20.0 \u003c5.0.5-819", "olm.targetNamespaces": "", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"ManualApprovalGate\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"OpenShiftPipelinesAsCode\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"SyncerService\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonAddon\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonChain\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonConfig\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonHub\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonInstallerSet\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonMulticlusterProxyAAE\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonPipeline\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonPruner\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonResult\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonScheduler\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonTrigger\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"openshift-pipelines-operator-rh\",\"version\":\"5.0.5-819\"}}]}", "operators.openshift.io/valid-subscription": "[\"OpenShift Container Platform\", \"OpenShift Platform Plus\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.37.0", "operators.operatorframework.io/internal-objects": "[\"tektoninstallersets.operator.tekton.dev\", \"tektonconfigs.operator.tekton.dev\",\"tektonpipelines.operator.tekton.dev\",\"tektontriggers.operator.tekton.dev\",\"tektonaddons.operator.tekton.dev\", \"tektonhubs.operator.tekton.dev\", \"tektonresults.operator.tekton.dev\", \"tektonchains.operator.tekton.dev\", \"openshiftpipelinesascodes.operator.tekton.dev\", \"manualapprovalgates.operator.tekton.dev\",\"tektonpruners.operator.tekton.dev\",\"tektonschedulers.operator.tekton.dev\",\"tektonmulticlusterproxyaaes.operator.tekton.dev\",\"syncerservices.operator.tekton.dev\"]", "operators.operatorframework.io/project_layout": "unknown", "repository": "https://github.com/tektoncd/operator", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "app": "openshift-pipelines-operator", "name": "openshift-pipelines-operator" } }, "spec": { "containers": [ { "args": [ "-controllers", "tektonconfig,tektonpipeline,tektontrigger,tektonhub,tektonchain,tektonaddon,tektonresult,openshiftpipelinesascode,manualapprovalgate,tektonpruner,tektonscheduler,tektonmulticlusterproxyaae,syncerservice", "-unique-process-name", "tekton-operator-lifecycle" ], "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "PLATFORM", "value": "openshift" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "redhat-openshift-pipelines-operator" }, { "name": "IMAGE_PIPELINES_PROXY", "value": "quay.io/openshift-pipeline/pipelines-operator-proxy-rhel9@sha256:f1a4e301910410cd8a010a2ed9730b9d7ac10f8985f76a8b895a3afa19a5f0ec" }, { "name": "IMAGE_JOB_PRUNER_TKN", "value": "quay.io/openshift-pipeline/pipelines-cli-tkn-rhel9@sha256:a609db6a55cf564b196fe2bbdb81e838dec63b4eca0dcf66573ba577d60ee32a" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "VERSION", "value": "5.0.5-819" }, { "name": "AUTOINSTALL_COMPONENTS", "value": "false" }, { "name": "DEFAULT_TARGET_NAMESPACE", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_TARGET_NAMESPACE", "name": "tekton-config-defaults" } } }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-config-observability" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-controller-config-leader-election" }, { "name": "IMAGE_HUB_TEKTON_HUB_DB", "value": "registry.redhat.io/rhel9/postgresql-15@sha256:90ec347a35ab8a5d530c8d09f5347b13cc71df04f3b994bfa8b1a409b1171d59" }, { "name": "IMAGE_ADDONS_PARAM_BUILDER_IMAGE", "value": "registry.redhat.io/rhel9/buildah@sha256:0e29338c43fbf9847f2060d7685b872594e3b39bfcf56278f470279089e48048" }, { "name": "IMAGE_ADDONS_PARAM_KN_IMAGE", "value": "registry.redhat.io/openshift-serverless-1/kn-client-kn-rhel9@sha256:e213fd263772c5286aa560132cd8c043cf2946f04f96eedf18cd240859bd8a48" }, { "name": "IMAGE_ADDONS_MVN_SETTINGS", "value": "registry.redhat.io/ubi9/ubi-minimal@sha256:61d5ad475048c2e655cd46d0a55dfeaec182cc3faa6348cb85989a7c9e196483" }, { "name": "IMAGE_ADDONS_SKOPEO_COPY", "value": "registry.redhat.io/rhel9/skopeo@sha256:3c1d54513adc2998955731da23ec354a15942fa7dd2e37dc818f85a947f400d4" }, { "name": "IMAGE_ADDONS_GENERATE", "value": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:bc10e7d6122ede5cf4f2882c200447683255465a1080e826761e90bfb983506e" }, { "name": "IMAGE_ADDONS_GEN_ENV_FILE", "value": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:bc10e7d6122ede5cf4f2882c200447683255465a1080e826761e90bfb983506e" }, { "name": "IMAGE_ADDONS_PARAM_MAVEN_IMAGE", "value": "registry.redhat.io/ubi9/openjdk-17@sha256:d334d3c36867a1eef7daa598af10b5f620394ca0234b12e71b8b7e99bda9224e" }, { "name": "IMAGE_ADDONS_OC", "value": "image-registry.openshift-image-registry.svc:5000/openshift/cli:latest" }, { "name": "IMAGE_PIPELINES_TEKTON_PIPELINES_CONTROLLER", "value": "quay.io/openshift-pipeline/pipelines-controller-rhel9@sha256:47743d7e160e288c0519edf806db677473c6b77a8cea3c5bc6091ba3d30c7293" }, { "name": "IMAGE_PIPELINES_WEBHOOK", "value": "quay.io/openshift-pipeline/pipelines-webhook-rhel9@sha256:63cc945d6780526270b8b8a613ea59a342972ac48b511623678d75f52cd3fb25" }, { "name": "IMAGE_PIPELINES_CONTROLLER", "value": "quay.io/openshift-pipeline/pipelines-resolvers-rhel9@sha256:6220b57a218cb14318da8463d34b46ab166af7ea17d4f0c43b3fb89e0890ba66" }, { "name": "IMAGE_PIPELINES_TEKTON_EVENTS_CONTROLLER", "value": "quay.io/openshift-pipeline/pipelines-events-rhel9@sha256:3f3cf600d1296b1d2b0504153685097d567e93f3e39bb07cd5cba4ba6bf3c771" }, { "name": "IMAGE_PIPELINES_ARG__ENTRYPOINT_IMAGE", "value": "quay.io/openshift-pipeline/pipelines-entrypoint-rhel9@sha256:b7e4363b50ab0a9e620803bf93c40004e93772e583b039cc48a5a0b9df1a01b6" }, { "name": "IMAGE_PIPELINES_ARG__GIT_IMAGE", "value": "quay.io/openshift-pipeline/pipelines-git-init-rhel9@sha256:fe655a00a6fe9f590272febd7008728dcba1f25d15462f02e51f33edfc748980" }, { "name": "IMAGE_ADDONS_PARAM_GITINITIMAGE", "value": "quay.io/openshift-pipeline/pipelines-git-init-rhel9@sha256:fe655a00a6fe9f590272febd7008728dcba1f25d15462f02e51f33edfc748980" }, { "name": "IMAGE_ADDONS_GIT_RUN", "value": "quay.io/openshift-pipeline/pipelines-git-init-rhel9@sha256:fe655a00a6fe9f590272febd7008728dcba1f25d15462f02e51f33edfc748980" }, { "name": "IMAGE_ADDONS_REPORT", "value": "quay.io/openshift-pipeline/pipelines-git-init-rhel9@sha256:fe655a00a6fe9f590272febd7008728dcba1f25d15462f02e51f33edfc748980" }, { "name": "IMAGE_ADDONS_GIT_CLONE", "value": "quay.io/openshift-pipeline/pipelines-git-init-rhel9@sha256:fe655a00a6fe9f590272febd7008728dcba1f25d15462f02e51f33edfc748980" }, { "name": "IMAGE_ADDONS_PREPARE_AND_RUN", "value": "quay.io/openshift-pipeline/pipelines-git-init-rhel9@sha256:fe655a00a6fe9f590272febd7008728dcba1f25d15462f02e51f33edfc748980" }, { "name": "IMAGE_ADDONS_CACHE_UPLOAD", "value": "quay.io/openshift-pipeline/pipelines-cache-rhel9@sha256:8f3cac0498b9b0cbd59b87bf624ee4f8d7d9bc979e496628046a6da06770d8eb" }, { "name": "IMAGE_ADDONS_CACHE_FETCH", "value": "quay.io/openshift-pipeline/pipelines-cache-rhel9@sha256:8f3cac0498b9b0cbd59b87bf624ee4f8d7d9bc979e496628046a6da06770d8eb" }, { "name": "IMAGE_PIPELINES_ARG__WORKINGDIRINIT_IMAGE", "value": "quay.io/openshift-pipeline/pipelines-workingdirinit-rhel9@sha256:593ab3275a3e5b45be28a71ac7f45da55dbe0857b193b83d07a185ba1d88e4fb" }, { "name": "IMAGE_PIPELINES_ARG__SIDECARLOGRESULTS_IMAGE", "value": "quay.io/openshift-pipeline/pipelines-sidecarlogresults-rhel9@sha256:eb8a9607faa7a3a4a38df6021a043918c8c6ba17215b4288e931dab2cef52a77" }, { "name": "IMAGE_PIPELINES_ARG__NOP_IMAGE", "value": "quay.io/openshift-pipeline/pipelines-nop-rhel9@sha256:ac735eaaa6969da6d7ba82f170e177613ac544a83801138eaa6af6f054309efe" }, { "name": "IMAGE_PIPELINES_ARG__SHELL_IMAGE", "value": "quay.io/openshift-pipeline/pipelines-entrypoint-rhel9@sha256:b7e4363b50ab0a9e620803bf93c40004e93772e583b039cc48a5a0b9df1a01b6" }, { "name": "IMAGE_TRIGGERS_TEKTON_TRIGGERS_CONTROLLER", "value": "quay.io/openshift-pipeline/pipelines-triggers-controller-rhel9@sha256:0f2742af1888c801562ebf0836c2292303e86f57425101c8a9e9810c0db22560" }, { "name": "IMAGE_TRIGGERS_WEBHOOK", "value": "quay.io/openshift-pipeline/pipelines-triggers-webhook-rhel9@sha256:2778b4bf8e4a85c99e3a1fa8646e397361013cbb1d9d16c5982d6523b3e7b90f" }, { "name": "IMAGE_TRIGGERS_TEKTON_TRIGGERS_CORE_INTERCEPTORS", "value": "quay.io/openshift-pipeline/pipelines-triggers-core-interceptors-rhel9@sha256:69fccbb18a35c2f80d440ad44c5b4d37a16bfc404e401215b412af62593731d1" }, { "name": "IMAGE_TRIGGERS_ARG__EL_IMAGE", "value": "quay.io/openshift-pipeline/pipelines-triggers-eventlistenersink-rhel9@sha256:6da20e394b8e26c307804005127c5333d87dd96a53aa6f379a6d223a970b30bd" }, { "name": "IMAGE_ADDONS_KN", "value": "registry.redhat.io/openshift-serverless-1/kn-client-kn-rhel9@sha256:e213fd263772c5286aa560132cd8c043cf2946f04f96eedf18cd240859bd8a48" }, { "name": "IMAGE_ADDONS_OPC", "value": "quay.io/openshift-pipeline/pipelines-opc-rhel9@sha256:c837a8679762c86f4196f4da753220744c9af3968c8f5bb20350a05bd1416ca6" }, { "name": "IMAGE_ADDONS_SKOPEO_RESULTS", "value": "registry.redhat.io/rhel9/skopeo@sha256:3c1d54513adc2998955731da23ec354a15942fa7dd2e37dc818f85a947f400d4" }, { "name": "IMAGE_ADDONS_BUILD", "value": "registry.redhat.io/rhel9/buildah@sha256:0e29338c43fbf9847f2060d7685b872594e3b39bfcf56278f470279089e48048" }, { "name": "IMAGE_ADDONS_S2I_BUILD", "value": "registry.redhat.io/rhel9/buildah@sha256:0e29338c43fbf9847f2060d7685b872594e3b39bfcf56278f470279089e48048" }, { "name": "IMAGE_ADDONS_S2I_GENERATE", "value": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:bc10e7d6122ede5cf4f2882c200447683255465a1080e826761e90bfb983506e" }, { "name": "IMAGE_ADDONS_LOAD_SCRIPTS", "value": "registry.redhat.io/ubi9/ubi-minimal@sha256:61d5ad475048c2e655cd46d0a55dfeaec182cc3faa6348cb85989a7c9e196483" }, { "name": "IMAGE_ADDONS_MAVEN_GENERATE", "value": "registry.redhat.io/ubi9/ubi-minimal@sha256:61d5ad475048c2e655cd46d0a55dfeaec182cc3faa6348cb85989a7c9e196483" }, { "name": "IMAGE_ADDONS_PREPARE", "value": "registry.redhat.io/ubi9/ubi-minimal@sha256:61d5ad475048c2e655cd46d0a55dfeaec182cc3faa6348cb85989a7c9e196483" }, { "name": "IMAGE_ADDONS_PARAM_TKN_IMAGE", "value": "quay.io/openshift-pipeline/pipelines-cli-tkn-rhel9@sha256:a609db6a55cf564b196fe2bbdb81e838dec63b4eca0dcf66573ba577d60ee32a" }, { "name": "IMAGE_ADDONS_TKN", "value": "quay.io/openshift-pipeline/pipelines-cli-tkn-rhel9@sha256:a609db6a55cf564b196fe2bbdb81e838dec63b4eca0dcf66573ba577d60ee32a" }, { "name": "IMAGE_ADDONS_TKN_CLI_SERVE", "value": "quay.io/openshift-pipeline/pipelines-serve-tkn-cli-rhel9@sha256:7533487fea8eec3c823210450a82baabc26eb80f817d8452451be54202d54de5" }, { "name": "IMAGE_ADDONS_TKN_CLI_SERVE_INIT_CONFIG", "value": "quay.io/openshift-pipeline/pipelines-serve-tkn-cli-rhel9@sha256:7533487fea8eec3c823210450a82baabc26eb80f817d8452451be54202d54de5" }, { "name": "IMAGE_CHAINS_TEKTON_CHAINS_CONTROLLER", "value": "quay.io/openshift-pipeline/pipelines-chains-controller-rhel9@sha256:dc92b0d7157d3258e327d65ec0bdec9b0ce5492a6747c10f49d17a0388090cff" }, { "name": "IMAGE_RESULTS_POSTGRES", "value": "registry.redhat.io/rhel9/postgresql-15@sha256:90ec347a35ab8a5d530c8d09f5347b13cc71df04f3b994bfa8b1a409b1171d59" }, { "name": "IMAGE_HUB_TEKTON_HUB_DB_MIGRATION", "value": "quay.io/openshift-pipeline/pipelines-hub-db-migration-rhel9@sha256:729dc127475c4ac40464acd65ae1e9e5148bd9638a5a4b748d488025106f3233" }, { "name": "IMAGE_HUB_TEKTON_HUB_API", "value": "quay.io/openshift-pipeline/pipelines-hub-api-rhel9@sha256:f5a2747c7884cf81883c1c9a108733a8531cae1ea7b0180a3d78d68836ce7c26" }, { "name": "IMAGE_HUB_TEKTON_HUB_UI", "value": "quay.io/openshift-pipeline/pipelines-hub-ui-rhel9@sha256:0011c27d8286a071030bb775943c540fd16c802c5d05de8a9fb4212c42c0cac9" }, { "name": "IMAGE_MAG_TEKTON_TASKGROUP_CONTROLLER", "value": "quay.io/openshift-pipeline/pipelines-manual-approval-gate-controller-rhel9@sha256:30c3e7d371af622f484af871a36543ea89001b68c236827fe7bdecdf517c2695" }, { "name": "IMAGE_MAG_MANUAL_APPROVAL", "value": "quay.io/openshift-pipeline/pipelines-manual-approval-gate-webhook-rhel9@sha256:7287058f922a9c3e707343b06569f573e767f1090dfac257ecbe05c2f38f30b1" }, { "name": "IMAGE_PRUNER_CONTROLLER", "value": "quay.io/openshift-pipeline/pipelines-pruner-controller-rhel9@sha256:17320f962c3ddf0922b26116d1430e40009988fed875c9f3f1bed63e4a190c94" }, { "name": "IMAGE_SCHEDULER_MANAGER", "value": "quay.io/openshift-pipeline/pipelines-scheduler-rhel9@sha256:6e01003cb4c6779a4618c712135f162200e9146366983f1783db8e77335b2219" }, { "name": "IMAGE_SCHEDULER_WEBHOOK", "value": "quay.io/openshift-pipeline/pipelines-scheduler-rhel9@sha256:6e01003cb4c6779a4618c712135f162200e9146366983f1783db8e77335b2219" }, { "name": "IMAGE_MULTICLUSTERPROXYAAE_PROXY_AAE", "value": "quay.io/openshift-pipeline/pipelines-multicluster-proxy-aae-rhel9@sha256:1b35abc9a866d879b55e8b2aeba89d4a7c46d4a0d57575f11496134e7c8d417b" }, { "name": "IMAGE_SYNCER_SERVICE_WORKLOAD_CONTROLLER", "value": "quay.io/openshift-pipeline/pipelines-syncer-service-rhel9@sha256:62d7508bfa7733e4ecfff2060835bfaf642423d91fece0cbfb2cce21e6178f0d" }, { "name": "IMAGE_PRUNER_WEBHOOK", "value": "quay.io/openshift-pipeline/pipelines-pruner-webhook-rhel9@sha256:6f6e8f7365288388d7a92664561d34675e04e6acc7d795e4e05d84888de9688b" }, { "name": "IMAGE_PAC_PAC_CONTROLLER", "value": "quay.io/openshift-pipeline/pipelines-pipelines-as-code-controller-rhel9@sha256:82dc198bca4e9c6e87cd3694f8fb16d5bb4f1b1268e70f4625bef0cf8ebd78e2" }, { "name": "IMAGE_PAC_PAC_WEBHOOK", "value": "quay.io/openshift-pipeline/pipelines-pipelines-as-code-webhook-rhel9@sha256:f39730d8ed465179d96d4cdb91bd71d849228a4b590aa402cbb80d838077a9da" }, { "name": "IMAGE_PAC_PAC_WATCHER", "value": "quay.io/openshift-pipeline/pipelines-pipelines-as-code-watcher-rhel9@sha256:b92e9d102afd839a452e59188798be0dc092e7208b6d38f1ebcff43922972d58" }, { "name": "IMAGE_PAC_PAC_CLI", "value": "quay.io/openshift-pipeline/pipelines-pipelines-as-code-cli-rhel9@sha256:8ffbd3c1d93e2999a216b273c17fd2831f616589ef52f0e7790aa0f0436aa1af" }, { "name": "IMAGE_RESULTS_WATCHER", "value": "quay.io/openshift-pipeline/pipelines-results-watcher-rhel9@sha256:eee70efb20d98bc7ba993f50bab4e99bb7e2080acdb2739c5310405166ee08ec" }, { "name": "IMAGE_RESULTS_API", "value": "quay.io/openshift-pipeline/pipelines-results-api-rhel9@sha256:784d1ee3c68ae800725144df45667c63a3d0f558db51926958b9a4bb1f425b67" }, { "name": "IMAGE_RESULTS_RETENTION_POLICY_AGENT", "value": "quay.io/openshift-pipeline/pipelines-results-retention-policy-agent-rhel9@sha256:17c667ba52709ec9080c613ccad294b99e16e4fc6e9774335614e411753b1671" }, { "name": "IMAGE_ADDONS_MAVEN_GOALS", "value": "registry.redhat.io/ubi9/openjdk-17@sha256:d334d3c36867a1eef7daa598af10b5f620394ca0234b12e71b8b7e99bda9224e" }, { "name": "IMAGE_PIPELINES_CONSOLE_PLUGIN", "value": "quay.io/openshift-pipeline/pipelines-console-plugin-rhel9@sha256:bb058b3de08a97a38b1eb1c65df636dcb0632194c30c4d57569762097f9b6b86" }, { "name": "IMAGE_PIPELINES_CONSOLE_PLUGIN_LEGACY", "value": "quay.io/openshift-pipeline/pipelines-console-plugin-pf5-rhel9@sha256:85fc10a62da7842eb0972f8141a08b000f79501067c3c2fa5decc146d9e7bab2" }, { "name": "OPERATOR_CONDITION_NAME", "value": "openshift-pipelines-operator-rh.v5.0.5-819" } ], "image": "quay.io/openshift-pipeline/pipelines-rhel9-operator@sha256:4ea7aa995e72e128dbb21560d0c36bfb20b4f1ba7fe4e85d6be25bb1180e354e", "imagePullPolicy": "Always", "name": "openshift-pipelines-operator-lifecycle", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" }, { "args": [ "-controllers", "tektoninstallerset", "-unique-process-name", "tekton-operator-cluster-operations" ], "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "redhat-openshift-pipelines-operator" }, { "name": "PROFILING_PORT", "value": "9009" }, { "name": "VERSION", "value": "devel" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-controller-config-leader-election" }, { "name": "AUTOINSTALL_COMPONENTS", "value": "false" }, { "name": "OPERATOR_CONDITION_NAME", "value": "openshift-pipelines-operator-rh.v5.0.5-819" } ], "image": "quay.io/openshift-pipeline/pipelines-rhel9-operator@sha256:4ea7aa995e72e128dbb21560d0c36bfb20b4f1ba7fe4e85d6be25bb1180e354e", "imagePullPolicy": "Always", "name": "openshift-pipelines-operator-cluster-operations", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-pipelines-operator", "serviceAccountName": "openshift-pipelines-operator", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:49:53Z", "lastUpdateTime": "2026-05-13T16:49:53Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:49:48Z", "lastUpdateTime": "2026-05-13T16:49:53Z", "message": "ReplicaSet \"openshift-pipelines-operator-56484748d5\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:49:48Z", "generation": 1, "labels": { "olm.deployment-spec-hash": "bWw2DXLOrt91NAbhAFg1XSsCZRxrgDZyASX50j", "olm.managed": "true", "olm.owner": "openshift-pipelines-operator-rh.v5.0.5-819", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "openshift-operators", "operator.tekton.dev/release": "devel", "operators.coreos.com/openshift-pipelines-operator-rh.openshift-operators": "", "version": "devel" }, "name": "tekton-operator-webhook", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "openshift-pipelines-operator-rh.v5.0.5-819", "uid": "8fc7c17c-01f0-4241-a956-a69fe7ad6457" } ], "resourceVersion": "32861", "uid": "c0392a5d-0029-405d-83e2-88b7b2442ed9" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 1, "selector": { "matchLabels": { "name": "tekton-operator-webhook" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"ManualApprovalGate\",\n \"metadata\": {\n \"name\": \"manual-approval-gate\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"OpenShiftPipelinesAsCode\",\n \"metadata\": {\n \"name\": \"pipelines-as-code\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonAddon\",\n \"metadata\": {\n \"name\": \"addon\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonChain\",\n \"metadata\": {\n \"name\": \"chain\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonConfig\",\n \"metadata\": {\n \"name\": \"config\"\n },\n \"spec\": {\n \"addon\": {\n \"params\": [\n {\n \"name\": \"pipelineTemplates\",\n \"value\": \"true\"\n },\n {\n \"name\": \"resolverTasks\",\n \"value\": \"true\"\n },\n {\n \"name\": \"resolverStepActions\",\n \"value\": \"true\"\n },\n {\n \"name\": \"communityResolverTasks\",\n \"value\": \"true\"\n }\n ]\n },\n \"params\": [\n {\n \"name\": \"createRbacResource\",\n \"value\": \"true\"\n },\n {\n \"name\": \"legacyPipelineRbac\",\n \"value\": \"true\"\n },\n {\n \"name\": \"createCABundleConfigMaps\",\n \"value\": \"true\"\n }\n ],\n \"profile\": \"all\",\n \"pruner\": {\n \"keep\": 100,\n \"resources\": [\n \"pipelinerun\",\n \"taskrun\"\n ],\n \"schedule\": \"0 8 * * *\"\n },\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonHub\",\n \"metadata\": {\n \"name\": \"hub\"\n },\n \"spec\": {\n \"api\": {\n \"catalogRefreshInterval\": \"30m\"\n },\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonInstallerSet\",\n \"metadata\": {\n \"name\": \"foo\"\n },\n \"spec\": {\n \"manifests\": []\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonPipeline\",\n \"metadata\": {\n \"name\": \"pipeline\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonPruner\",\n \"metadata\": {\n \"name\": \"pruner\"\n },\n \"spec\": {\n \"disabled\": true,\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonResult\",\n \"metadata\": {\n \"name\": \"result\"\n },\n \"spec\": {\n \"auth_disable\": true,\n \"db_enable_auto_migration\": true,\n \"db_host\": \"tekton-results-postgres-service.openshift-pipelines.svc.cluster.local\",\n \"db_port\": 5432,\n \"log_level\": \"debug\",\n \"logging_pvc_name\": \"tekton-logs\",\n \"logs_api\": true,\n \"logs_buffer_size\": 32768,\n \"logs_path\": \"/logs\",\n \"logs_type\": \"File\",\n \"prometheus_port\": 9090,\n \"server_port\": 8080,\n \"targetNamespace\": \"openshift-pipelines\",\n \"tls_hostname_override\": \"tekton-results-api-service.openshift-pipelines.svc.cluster.local\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonTrigger\",\n \"metadata\": {\n \"name\": \"trigger\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n }\n]", "capabilities": "Full Lifecycle", "categories": "Developer Tools, Integration \u0026 Delivery", "certified": "false", "console.openshift.io/plugins": "[\"pipelines-console-plugin\"]", "containerImage": "registry.redhat.io/openshift-pipelines/pipelines-rhel9-operator@", "description": "Red Hat OpenShift Pipelines is a cloud-native CI/CD solution for building pipelines using Tekton concepts which run natively on OpenShift and Kubernetes.", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "true", "features.operators.openshift.io/proxy-aware": "true", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "olm.operatorGroup": "global-operators", "olm.operatorNamespace": "openshift-operators", "olm.skipRange": "\u003e=1.20.0 \u003c5.0.5-819", "olm.targetNamespaces": "", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"ManualApprovalGate\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"OpenShiftPipelinesAsCode\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"SyncerService\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonAddon\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonChain\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonConfig\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonHub\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonInstallerSet\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonMulticlusterProxyAAE\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonPipeline\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonPruner\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonResult\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonScheduler\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonTrigger\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"openshift-pipelines-operator-rh\",\"version\":\"5.0.5-819\"}}]}", "operators.openshift.io/valid-subscription": "[\"OpenShift Container Platform\", \"OpenShift Platform Plus\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.37.0", "operators.operatorframework.io/internal-objects": "[\"tektoninstallersets.operator.tekton.dev\", \"tektonconfigs.operator.tekton.dev\",\"tektonpipelines.operator.tekton.dev\",\"tektontriggers.operator.tekton.dev\",\"tektonaddons.operator.tekton.dev\", \"tektonhubs.operator.tekton.dev\", \"tektonresults.operator.tekton.dev\", \"tektonchains.operator.tekton.dev\", \"openshiftpipelinesascodes.operator.tekton.dev\", \"manualapprovalgates.operator.tekton.dev\",\"tektonpruners.operator.tekton.dev\",\"tektonschedulers.operator.tekton.dev\",\"tektonmulticlusterproxyaaes.operator.tekton.dev\",\"syncerservices.operator.tekton.dev\"]", "operators.operatorframework.io/project_layout": "unknown", "repository": "https://github.com/tektoncd/operator", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "app": "tekton-operator", "name": "tekton-operator-webhook" } }, "spec": { "containers": [ { "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-webhook-config-leader-election" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-operator-webhook" }, { "name": "WEBHOOK_SECRET_NAME", "value": "tekton-operator-webhook-certs" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "PLATFORM", "value": "openshift" }, { "name": "AUTOINSTALL_COMPONENTS", "value": "false" }, { "name": "OPERATOR_CONDITION_NAME", "value": "openshift-pipelines-operator-rh.v5.0.5-819" } ], "image": "quay.io/openshift-pipeline/pipelines-operator-webhook-rhel9@sha256:a9cb50e014686272835474e7695e8e2b1ff6522cfe9b7a2e9645fa606d8fcb66", "imagePullPolicy": "IfNotPresent", "name": "tekton-operator-webhook", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-pipelines-operator", "serviceAccountName": "openshift-pipelines-operator", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:49:52Z", "lastUpdateTime": "2026-05-13T16:49:52Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:49:48Z", "lastUpdateTime": "2026-05-13T16:49:52Z", "message": "ReplicaSet \"tekton-operator-webhook-66bd4595db\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/sync-wave": "0", "argocd.argoproj.io/tracking-id": "pipeline-service-in-cluster-local:apps/Deployment:openshift-pipelines/pipeline-metrics-exporter", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/sync-wave\":\"0\",\"argocd.argoproj.io/tracking-id\":\"pipeline-service-in-cluster-local:apps/Deployment:openshift-pipelines/pipeline-metrics-exporter\"},\"name\":\"pipeline-metrics-exporter\",\"namespace\":\"openshift-pipelines\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"pipeline-metrics-exporter\"}},\"template\":{\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\"},\"labels\":{\"app\":\"pipeline-metrics-exporter\"}},\"spec\":{\"containers\":[{\"args\":[\"-pprof-address\",\"6060\",\"-zap-log-level=6\"],\"image\":\"quay.io/konflux-ci/pipeline-service-exporter:9d2439c8a77d2ce0527cc5aea3fc6561b7671b48\",\"name\":\"pipeline-metrics-exporter\",\"ports\":[{\"containerPort\":9117,\"name\":\"metrics\"}],\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"250m\",\"memory\":\"128Mi\"}},\"securityContext\":{\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true}}],\"restartPolicy\":\"Always\",\"serviceAccountName\":\"pipeline-service-exporter\"}}}}\n" }, "creationTimestamp": "2026-05-13T16:49:14Z", "generation": 1, "name": "pipeline-metrics-exporter", "namespace": "openshift-pipelines", "resourceVersion": "38876", "uid": "faf0bf47-9eec-4cb1-84c0-b7728d66954e" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "pipeline-metrics-exporter" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true" }, "creationTimestamp": null, "labels": { "app": "pipeline-metrics-exporter" } }, "spec": { "containers": [ { "args": [ "-pprof-address", "6060", "-zap-log-level=6" ], "image": "quay.io/konflux-ci/pipeline-service-exporter:9d2439c8a77d2ce0527cc5aea3fc6561b7671b48", "imagePullPolicy": "IfNotPresent", "name": "pipeline-metrics-exporter", "ports": [ { "containerPort": 9117, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "512Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "pipeline-service-exporter", "serviceAccountName": "pipeline-service-exporter", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:49:15Z", "lastUpdateTime": "2026-05-13T16:49:18Z", "message": "ReplicaSet \"pipeline-metrics-exporter-67ffb9cd8b\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-05-13T16:52:26Z", "lastUpdateTime": "2026-05-13T16:52:26Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:52:21Z", "generation": 1, "labels": { "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.46.0", "operator.tekton.dev/operand-name": "openshift-pipeline-as-code" }, "name": "pipelines-as-code-controller", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-deployment-v987k", "uid": "57141f27-c64a-4386-a8bc-8b4dc4f7068e" } ], "resourceVersion": "38867", "uid": "356103c1-780d-45f3-868f-401d7ff27a21" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-as-code-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.46.0", "operator.tekton.dev/deployment-spec-applied-hash": "022d2f84bd7507aa2a61df191b25ce08" } }, "spec": { "containers": [ { "command": [ "/ko-app/pipelines-as-code-controller" ], "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "pipelines-as-code-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "K_SINK_TIMEOUT", "value": "30" }, { "name": "PAC_CONTROLLER_CONFIGMAP", "value": "pipelines-as-code" }, { "name": "PAC_CONTROLLER_LABEL", "value": "default" }, { "name": "PAC_CONTROLLER_SECRET", "value": "pipelines-as-code-secret" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TLS_CERT", "value": "cert" }, { "name": "TLS_KEY", "value": "key" }, { "name": "TLS_SECRET_NAME", "value": "pipelines-as-code-tls-secret" } ], "image": "quay.io/openshift-pipeline/pipelines-pipelines-as-code-controller-rhel9@sha256:82dc198bca4e9c6e87cd3694f8fb16d5bb4f1b1268e70f4625bef0cf8ebd78e2", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "api", "scheme": "HTTP" }, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "pac-controller", "ports": [ { "containerPort": 8082, "name": "api", "protocol": "TCP" }, { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "api", "scheme": "HTTP" }, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/pipelines-as-code/tls", "name": "tls", "readOnly": true }, { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-controller", "serviceAccountName": "pipelines-as-code-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "pipelines-as-code-tls-secret" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:52:26Z", "lastUpdateTime": "2026-05-13T16:52:26Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:52:21Z", "lastUpdateTime": "2026-05-13T16:52:26Z", "message": "ReplicaSet \"pipelines-as-code-controller-594db554cc\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:52:21Z", "generation": 1, "labels": { "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.46.0", "operator.tekton.dev/operand-name": "openshift-pipeline-as-code" }, "name": "pipelines-as-code-watcher", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-deployment-v987k", "uid": "57141f27-c64a-4386-a8bc-8b4dc4f7068e" } ], "resourceVersion": "38959", "uid": "62699771-3db2-4e96-bfc9-8dd7e271c114" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-as-code-watcher", "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.46.0", "operator.tekton.dev/deployment-spec-applied-hash": "023d1ac3bb124d5fab14ef2c4ed7a792" } }, "spec": { "containers": [ { "command": [ "/ko-app/pipelines-as-code-watcher" ], "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "pac-watcher-config-leader-election" }, { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "pipelines-as-code-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipelinesascode" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-pipeline/pipelines-pipelines-as-code-watcher-rhel9@sha256:b92e9d102afd839a452e59188798be0dc092e7208b6d38f1ebcff43922972d58", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "pac-watcher", "ports": [ { "containerPort": 8080, "name": "probes", "protocol": "TCP" }, { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-watcher", "serviceAccountName": "pipelines-as-code-watcher", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-05-13T16:52:31Z", "lastUpdateTime": "2026-05-13T16:52:31Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:52:21Z", "lastUpdateTime": "2026-05-13T16:52:31Z", "message": "ReplicaSet \"pipelines-as-code-watcher-76867fbb46\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:52:21Z", "generation": 1, "labels": { "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.46.0", "operator.tekton.dev/operand-name": "openshift-pipeline-as-code" }, "name": "pipelines-as-code-webhook", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-deployment-v987k", "uid": "57141f27-c64a-4386-a8bc-8b4dc4f7068e" } ], "resourceVersion": "38826", "uid": "9e7ea586-bb0b-4a31-bcb4-48be13918f38" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.46.0", "operator.tekton.dev/deployment-spec-applied-hash": "9253d852959083eefdb65117f9a2f6d6" } }, "spec": { "containers": [ { "command": [ "/ko-app/pipelines-as-code-webhook" ], "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "pac-webhook-config-leader-election" }, { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipelinesascode" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SECRET_NAME", "value": "pipelines-as-code-webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "pipelines-as-code-webhook" } ], "image": "quay.io/openshift-pipeline/pipelines-pipelines-as-code-webhook-rhel9@sha256:f39730d8ed465179d96d4cdb91bd71d849228a4b590aa402cbb80d838077a9da", "imagePullPolicy": "IfNotPresent", "name": "pac-webhook", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-webhook", "serviceAccountName": "pipelines-as-code-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-05-13T16:52:25Z", "lastUpdateTime": "2026-05-13T16:52:25Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:52:21Z", "lastUpdateTime": "2026-05-13T16:52:25Z", "message": "ReplicaSet \"pipelines-as-code-webhook-6974c9b8d4\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:52:33Z", "generation": 1, "labels": { "app.kubernetes.io/part-of": "tekton-config" }, "name": "pipelines-console-plugin", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "tekton-config-console-plugin-manifests-m7jgh", "uid": "0335c4db-9a00-45c5-9585-586e5284d540" } ], "resourceVersion": "39165", "uid": "9b417b3f-3c49-4cf3-89cd-98b72f149ee5" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "pipelines-console-plugin", "name": "pipelines-console-plugin" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-console-plugin", "app.kubernetes.io/part-of": "tekton-config", "name": "pipelines-console-plugin" } }, "spec": { "containers": [ { "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" } ], "image": "quay.io/openshift-pipeline/pipelines-console-plugin-pf5-rhel9@sha256:85fc10a62da7842eb0972f8141a08b000f79501067c3c2fa5decc146d9e7bab2", "imagePullPolicy": "Always", "name": "pipelines-console-plugin", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/cert", "name": "pipelines-console-plugin-cert", "readOnly": true }, { "mountPath": "/etc/nginx/nginx.conf", "name": "nginx-conf", "readOnly": true, "subPath": "nginx.conf" }, { "mountPath": "/var/lib/nginx/tmp", "name": "nginx-tmp" }, { "mountPath": "/var/cache/nginx", "name": "nginx-cache" }, { "mountPath": "/var/run", "name": "nginx-run" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "pipelines-console-plugin-cert", "secret": { "defaultMode": 420, "secretName": "pipelines-console-plugin-cert" } }, { "configMap": { "defaultMode": 420, "name": "pipelines-console-plugin" }, "name": "nginx-conf" }, { "emptyDir": {}, "name": "nginx-tmp" }, { "emptyDir": {}, "name": "nginx-cache" }, { "emptyDir": {}, "name": "nginx-run" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:52:41Z", "lastUpdateTime": "2026-05-13T16:52:41Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:52:33Z", "lastUpdateTime": "2026-05-13T16:52:41Z", "message": "ReplicaSet \"pipelines-console-plugin-76454cd7f5\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:51:28Z", "generation": 1, "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "operator.tekton.dev/operand-name": "tektoncd-chains", "pipeline.tekton.dev/release": "v0.26.3", "version": "v0.26.3" }, "name": "tekton-chains-controller", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "chain-ns8qq", "uid": "f85b67e5-5617-4e77-8678-4bbafd4968e5" } ], "resourceVersion": "36737", "uid": "bf3998ff-31f0-4d62-9deb-6a65414a7926" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-chains-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "7eb89b87c9fce9c3513299bd9c822f97", "pipeline.tekton.dev/release": "v0.26.3", "version": "v0.26.3" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "--threads-per-controller=32", "--kube-api-qps=50", "--kube-api-burst=50" ], "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-chains-config-leader-election" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-chains-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/chains" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-pipeline/pipelines-chains-controller-rhel9@sha256:dc92b0d7157d3258e327d65ec0bdec9b0ce5492a6747c10f49d17a0388090cff", "imagePullPolicy": "IfNotPresent", "name": "tekton-chains-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/signing-secrets", "name": "signing-secrets" }, { "mountPath": "/var/run/sigstore/cosign", "name": "oidc-info" }, { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-chains-controller", "serviceAccountName": "tekton-chains-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "signing-secrets", "secret": { "defaultMode": 420, "secretName": "signing-secrets" } }, { "name": "oidc-info", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "sigstore", "expirationSeconds": 600, "path": "oidc-token" } } ] } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:51:33Z", "lastUpdateTime": "2026-05-13T16:51:33Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:51:28Z", "lastUpdateTime": "2026-05-13T16:51:33Z", "message": "ReplicaSet \"tekton-chains-controller-56d7f67db9\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:50:30Z", "generation": 1, "labels": { "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.12.0", "operator.tekton.dev/operand-name": "tektoncd-pipelines", "pipeline.tekton.dev/release": "v1.12.0", "version": "v1.12.0" }, "name": "tekton-events-controller", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-statefulset-ssdb2", "uid": "f4488d02-7933-4496-be1c-02ea99626cc6" } ], "resourceVersion": "35105", "uid": "216cb42a-4159-4f5f-84fd-6ff23b568ac0" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-events-controller", "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.12.0", "operator.tekton.dev/deployment-spec-applied-hash": "434281236ade93753e76e59aca84e90b", "pipeline.tekton.dev/release": "v1.12.0", "version": "v1.12.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } } }, "containers": [ { "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-events" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SSL_CERT_DIR", "value": "/etc/ssl/certs" }, { "name": "SSL_CERT_FILE", "value": "/etc/config-registry-cert/cert" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-pipeline/pipelines-events-rhel9@sha256:3f3cf600d1296b1d2b0504153685097d567e93f3e39bb07cd5cba4ba6bf3c771", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "tekton-events-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "50m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config-logging", "name": "config-logging" }, { "mountPath": "/etc/config-registry-cert", "name": "config-registry-cert" }, { "mountPath": "/etc/ssl/certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/etc/ssl/certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-events-controller", "serviceAccountName": "tekton-events-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "config-logging" }, "name": "config-logging" }, { "configMap": { "defaultMode": 420, "name": "config-registry-cert" }, "name": "config-registry-cert" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:50:41Z", "lastUpdateTime": "2026-05-13T16:50:41Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:50:30Z", "lastUpdateTime": "2026-05-13T16:50:41Z", "message": "ReplicaSet \"tekton-events-controller-76c67cc696\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:50:30Z", "generation": 1, "labels": { "operator.tekton.dev/operand-name": "tektoncd-pipelines", "operator.tekton.dev/release": "devel", "version": "devel" }, "name": "tekton-operator-proxy-webhook", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-statefulset-ssdb2", "uid": "f4488d02-7933-4496-be1c-02ea99626cc6" } ], "resourceVersion": "34798", "uid": "bf7078dc-fdb5-4d11-8fd4-a39e466f193c" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "name": "tekton-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-operator", "name": "tekton-operator", "operator.tekton.dev/deployment-spec-applied-hash": "47a917f7e400072be84ccaa526fc54d9" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-proxy-webhook-config-leader-election" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SECRET_NAME", "value": "proxy-webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-operator-proxy-webhook" } ], "image": "quay.io/openshift-pipeline/pipelines-operator-proxy-rhel9@sha256:f1a4e301910410cd8a010a2ed9730b9d7ac10f8985f76a8b895a3afa19a5f0ec", "imagePullPolicy": "IfNotPresent", "name": "proxy", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "250m", "memory": "256Mi" }, "requests": { "cpu": "50m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-operators-proxy-webhook", "serviceAccountName": "tekton-operators-proxy-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-05-13T16:50:34Z", "lastUpdateTime": "2026-05-13T16:50:34Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:50:30Z", "lastUpdateTime": "2026-05-13T16:50:34Z", "message": "ReplicaSet \"tekton-operator-proxy-webhook-69db9bd65d\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:50:30Z", "generation": 9, "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.12.0", "operator.tekton.dev/operand-name": "tektoncd-pipelines", "pipeline.tekton.dev/release": "v1.12.0", "version": "v1.12.0" }, "name": "tekton-pipelines-webhook", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-statefulset-ssdb2", "uid": "f4488d02-7933-4496-be1c-02ea99626cc6" } ], "resourceVersion": "60330", "uid": "8405d24c-def9-4ab2-85da-e372f50988f0" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 6, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.12.0", "operator.tekton.dev/deployment-spec-applied-hash": "a2ae70555f60e20c94317cd9d1d2ab5f", "pipeline.tekton.dev/release": "v1.12.0", "version": "v1.12.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-webhook" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipeline" }, { "name": "PROBES_PORT", "value": "8080" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_ADMISSION_CONTROLLER_NAME", "value": "webhook.pipeline.tekton.dev" }, { "name": "WEBHOOK_PORT", "value": "8443" }, { "name": "WEBHOOK_SECRET_NAME", "value": "webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-pipelines-webhook" } ], "image": "quay.io/openshift-pipeline/pipelines-webhook-rhel9@sha256:63cc945d6780526270b8b8a613ea59a342972ac48b511623678d75f52cd3fb25", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "webhook", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "cpu": "500m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-webhook", "serviceAccountName": "tekton-pipelines-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 6, "conditions": [ { "lastTransitionTime": "2026-05-13T16:50:30Z", "lastUpdateTime": "2026-05-13T16:50:41Z", "message": "ReplicaSet \"tekton-pipelines-webhook-cdc4f86d\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-05-13T16:52:08Z", "lastUpdateTime": "2026-05-13T16:52:08Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 9, "readyReplicas": 6, "replicas": 6, "updatedReplicas": 6 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:51:15Z", "generation": 1, "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.35.0", "operator.tekton.dev/operand-name": "tektoncd-triggers", "triggers.tekton.dev/release": "v0.35.0" }, "name": "tekton-triggers-controller", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "trigger-main-deployment-nmr6f", "uid": "ab008c95-ecfa-4b87-bd6d-2b5ec2506b12" } ], "resourceVersion": "36378", "uid": "45fb37de-ed44-4dfc-a3ae-fe2fd6d77567" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.35.0", "operator.tekton.dev/deployment-spec-applied-hash": "37f92d5c64059267191abeeaef3d06d7", "triggers.tekton.dev/release": "v0.35.0", "version": "v0.35.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-logtostderr", "-stderrthreshold", "INFO", "-el-image", "quay.io/openshift-pipeline/pipelines-triggers-eventlistenersink-rhel9@sha256:6da20e394b8e26c307804005127c5333d87dd96a53aa6f379a6d223a970b30bd", "-el-port", "8080", "-el-security-context=true", "-el-read-only-root-filesystem=true", "-el-events", "enable", "-el-readtimeout", "5", "-el-writetimeout", "40", "-el-idletimeout", "120", "-el-timeouthandler", "30", "-el-httpclient-readtimeout", "30", "-el-httpclient-keep-alive", "30", "-el-httpclient-tlshandshaketimeout", "10", "-el-httpclient-responseheadertimeout", "10", "-el-httpclient-expectcontinuetimeout", "1", "-period-seconds", "10", "-failure-threshold", "3" ], "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults-triggers" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-triggers-controllers" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability-triggers" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "METRICS_PROMETHEUS_PORT", "value": "9000" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-pipeline/pipelines-triggers-controller-rhel9@sha256:0f2742af1888c801562ebf0836c2292303e86f57425101c8a9e9810c0db22560", "imagePullPolicy": "IfNotPresent", "name": "tekton-triggers-controller", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-controller", "serviceAccountName": "tekton-triggers-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:51:18Z", "lastUpdateTime": "2026-05-13T16:51:18Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:51:15Z", "lastUpdateTime": "2026-05-13T16:51:18Z", "message": "ReplicaSet \"tekton-triggers-controller-5f5f7786b9\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:51:15Z", "generation": 1, "labels": { "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.35.0", "operator.tekton.dev/operand-name": "tektoncd-triggers", "triggers.tekton.dev/release": "v0.35.0" }, "name": "tekton-triggers-core-interceptors", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "trigger-main-deployment-nmr6f", "uid": "ab008c95-ecfa-4b87-bd6d-2b5ec2506b12" } ], "resourceVersion": "36562", "uid": "dea5b981-28ed-40e2-b7f4-b606b210c338" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-core-interceptors", "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.35.0", "operator.tekton.dev/deployment-spec-applied-hash": "32d1b225be8a2138bcaf35e740203c7f", "triggers.tekton.dev/release": "v0.35.0", "version": "v0.35.0" } }, "spec": { "containers": [ { "args": [ "-logtostderr", "-stderrthreshold", "INFO" ], "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability-triggers" }, { "name": "INTERCEPTOR_TLS_SECRET_NAME", "value": "tekton-triggers-core-interceptors-certs" }, { "name": "INTERCEPTOR_TLS_SVC_NAME", "value": "tekton-triggers-core-interceptors" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-pipeline/pipelines-triggers-core-interceptors-rhel9@sha256:69fccbb18a35c2f80d440ad44c5b4d37a16bfc404e401215b412af62593731d1", "imagePullPolicy": "IfNotPresent", "name": "tekton-triggers-core-interceptors", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-core-interceptors", "serviceAccountName": "tekton-triggers-core-interceptors", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:51:25Z", "lastUpdateTime": "2026-05-13T16:51:25Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:51:15Z", "lastUpdateTime": "2026-05-13T16:51:25Z", "message": "ReplicaSet \"tekton-triggers-core-interceptors-844ccd68bf\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:51:15Z", "generation": 1, "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.35.0", "operator.tekton.dev/operand-name": "tektoncd-triggers", "triggers.tekton.dev/release": "v0.35.0" }, "name": "tekton-triggers-webhook", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "trigger-main-deployment-nmr6f", "uid": "ab008c95-ecfa-4b87-bd6d-2b5ec2506b12" } ], "resourceVersion": "36384", "uid": "252cd559-c1af-4b50-aaf8-28df034f0fd5" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.35.0", "operator.tekton.dev/deployment-spec-applied-hash": "370762100fc9b385965f1ba003e7a906", "triggers.tekton.dev/release": "v0.35.0", "version": "v0.35.0" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-triggers-webhook" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SECRET_NAME", "value": "triggers-webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-triggers-webhook" } ], "image": "quay.io/openshift-pipeline/pipelines-triggers-webhook-rhel9@sha256:2778b4bf8e4a85c99e3a1fa8646e397361013cbb1d9d16c5982d6523b3e7b90f", "imagePullPolicy": "IfNotPresent", "name": "webhook", "ports": [ { "containerPort": 9000, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-webhook", "serviceAccountName": "tekton-triggers-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:51:18Z", "lastUpdateTime": "2026-05-13T16:51:18Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:51:15Z", "lastUpdateTime": "2026-05-13T16:51:18Z", "message": "ReplicaSet \"tekton-triggers-webhook-55fdbd4f44\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:51:39Z", "generation": 1, "labels": { "app.kubernetes.io/component": "tkncliserve", "operator.tekton.dev/operand-name": "openshift-pipelines-addons" }, "name": "tkn-cli-serve", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "addon-custom-openshiftconsole-2qgbt", "uid": "f832e976-ead9-4e8c-b195-c7c7f3e37a5f" } ], "resourceVersion": "38189", "uid": "69977bf9-a9aa-45d9-8f9a-f2a48a30ecb9" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "tkn-cli-serve" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tkn-cli-serve" } }, "spec": { "containers": [ { "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" } ], "image": "quay.io/openshift-pipeline/pipelines-serve-tkn-cli-rhel9@sha256:7533487fea8eec3c823210450a82baabc26eb80f817d8452451be54202d54de5", "imagePullPolicy": "IfNotPresent", "name": "tkn-cli-serve", "ports": [ { "containerPort": 8080, "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/httpd", "name": "httpd-config" }, { "mountPath": "/var/log/httpd", "name": "httpd-logs" }, { "mountPath": "/opt/app-root", "name": "app-root" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "cp -rL /etc/httpd/* /httpd-config/ 2\u003e/dev/null || true\nfind /httpd-config -type f -exec chmod u+w {} \\;\ncp -rL /opt/app-root/* /app-root/ 2\u003e/dev/null || true\nfind /app-root -type f -exec chmod u+w {} \\;\n" ], "image": "quay.io/openshift-pipeline/pipelines-serve-tkn-cli-rhel9@sha256:7533487fea8eec3c823210450a82baabc26eb80f817d8452451be54202d54de5", "imagePullPolicy": "IfNotPresent", "name": "tkn-cli-serve-init-config", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/httpd-config", "name": "httpd-config" }, { "mountPath": "/app-root", "name": "app-root" } ] } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "httpd-config" }, { "emptyDir": {}, "name": "httpd-logs" }, { "emptyDir": {}, "name": "app-root" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:52:06Z", "lastUpdateTime": "2026-05-13T16:52:06Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:51:39Z", "lastUpdateTime": "2026-05-13T16:52:06Z", "message": "ReplicaSet \"tkn-cli-serve-764d797f75\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true" }, "creationTimestamp": "2026-05-13T16:20:57Z", "generation": 1, "labels": { "app": "service-ca-operator" }, "name": "service-ca-operator", "namespace": "openshift-service-ca-operator", "ownerReferences": [ { "apiVersion": "config.openshift.io/v1", "controller": true, "kind": "ClusterVersion", "name": "version", "uid": "389147f5-445e-4654-a83b-68cfdd60fb99" } ], "resourceVersion": "12349", "uid": "1d190fa1-c5f1-4f72-af74-ae0afa05f9b1" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "service-ca-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "service-ca-operator" }, "name": "service-ca-operator" }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/operator-config.yaml", "-v=2" ], "command": [ "service-ca-operator", "operator" ], "env": [ { "name": "CONTROLLER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:957cb9c76d75144d15108d4e8f4c7fc231e61e86f6cf5f377346e2bc313ec720" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.9" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:957cb9c76d75144d15108d4e8f4c7fc231e61e86f6cf5f377346e2bc313ec720", "imagePullPolicy": "IfNotPresent", "name": "service-ca-operator", "resources": { "requests": { "cpu": "10m", "memory": "80Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsGroup": 1001, "runAsNonRoot": true, "runAsUser": 1001, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "service-ca-operator", "serviceAccountName": "service-ca-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "service-ca-operator-config" }, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:21:06Z", "lastUpdateTime": "2026-05-13T16:29:35Z", "message": "ReplicaSet \"service-ca-operator-565f7cf679\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-05-13T16:30:46Z", "lastUpdateTime": "2026-05-13T16:30:46Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "8d19f1043e1c8f2bd251e902ecbbf1162e6cff7d8d8edb590baca710beaf6507" }, "creationTimestamp": "2026-05-13T16:29:37Z", "generation": 1, "labels": { "app": "service-ca", "service-ca": "true" }, "name": "service-ca", "namespace": "openshift-service-ca", "resourceVersion": "9401", "uid": "175da93e-7779-41f7-9d01-ae433d9e4ca2" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "service-ca", "service-ca": "true" } }, "strategy": { "type": "Recreate" }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "service-ca", "service-ca": "true" }, "name": "service-ca" }, "spec": { "containers": [ { "args": [ "-v=2" ], "command": [ "service-ca-operator", "controller" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:957cb9c76d75144d15108d4e8f4c7fc231e61e86f6cf5f377346e2bc313ec720", "imagePullPolicy": "IfNotPresent", "name": "service-ca-controller", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "120Mi" } }, "securityContext": { "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/signing-key", "name": "signing-key" }, { "mountPath": "/var/run/configmaps/signing-cabundle", "name": "signing-cabundle" } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "service-ca", "serviceAccountName": "service-ca", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "signing-key", "secret": { "defaultMode": 420, "secretName": "signing-key" } }, { "configMap": { "defaultMode": 420, "name": "signing-cabundle" }, "name": "signing-cabundle" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:29:38Z", "lastUpdateTime": "2026-05-13T16:29:38Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:29:37Z", "lastUpdateTime": "2026-05-13T16:29:38Z", "message": "ReplicaSet \"service-ca-6549cb95df\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:48:27Z", "generation": 1, "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.78.1" }, "name": "prometheus-operator", "namespace": "openshift-user-workload-monitoring", "resourceVersion": "27966", "uid": "1540abf1-ef2f-4dd7-83f5-5c12e3fa7cc4" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/name": "prometheus-operator", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "prometheus-operator", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.78.1" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--prometheus-config-reloader=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8e158c83ec12b3e0237fab9a221630bd691e79c079a111f346354ff43b8199df", "--kubelet-endpoints=true", "--kubelet-endpointslice=false", "--prometheus-instance-namespaces=openshift-user-workload-monitoring", "--alertmanager-instance-namespaces=openshift-user-workload-monitoring", "--thanos-ruler-instance-namespaces=openshift-user-workload-monitoring", "--config-reloader-cpu-limit=0", "--config-reloader-memory-limit=0", "--config-reloader-cpu-request=1m", "--config-reloader-memory-request=10Mi", "--web.listen-address=127.0.0.1:8080", "--controller-id=openshift-user-workload-monitoring/prometheus-operator" ], "env": [ { "name": "GOGC", "value": "30" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8c1fac1dd497afa5ea5d8f89d3cce6f30fef8c9cde34940058fc8d98dad38692", "imagePullPolicy": "IfNotPresent", "name": "prometheus-operator", "resources": { "requests": { "cpu": "1m", "memory": "17Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8080/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-policy/config.yaml", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "10Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "prometheus-operator-user-workload-tls", "readOnly": true }, { "mountPath": "/etc/kube-rbac-policy", "name": "prometheus-operator-uwm-kube-rbac-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "prometheus-operator", "serviceAccountName": "prometheus-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "prometheus-operator-user-workload-tls", "secret": { "defaultMode": 420, "secretName": "prometheus-operator-user-workload-tls" } }, { "name": "prometheus-operator-uwm-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "prometheus-operator-uwm-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:48:28Z", "lastUpdateTime": "2026-05-13T16:48:28Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:48:27Z", "lastUpdateTime": "2026-05-13T16:48:28Z", "message": "ReplicaSet \"prometheus-operator-7979996c8\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "vector-kubearchive-log-collector-in-cluster-local:apps/Deployment:product-kubearchive-logging/grafana", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector runs requires access to socket.\"\n", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Minio post-jobs from chart require write access to filesystem.\"\n", "ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy": "\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector runs requires certain host mounts to watch files being created by pods.\"\n", "ignore-check.kube-linter.io/unset-cpu-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "ignore-check.kube-linter.io/unset-memory-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"vector-kubearchive-log-collector-in-cluster-local:apps/Deployment:product-kubearchive-logging/grafana\",\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Minio post-jobs from chart require write access to filesystem.\\\"\\n\",\"ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy\":\"\\\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector runs requires certain host mounts to watch files being created by pods.\\\"\\n\",\"ignore-check.kube-linter.io/unset-cpu-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"ignore-check.kube-linter.io/unset-memory-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\"},\"labels\":{\"app.kubernetes.io/instance\":\"grafana\",\"app.kubernetes.io/name\":\"grafana\",\"app.kubernetes.io/version\":\"12.4.3\",\"helm.sh/chart\":\"grafana-11.6.1\"},\"name\":\"grafana\",\"namespace\":\"product-kubearchive-logging\"},\"spec\":{\"replicas\":1,\"revisionHistoryLimit\":10,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/instance\":\"grafana\",\"app.kubernetes.io/name\":\"grafana\"}},\"strategy\":{\"type\":\"RollingUpdate\"},\"template\":{\"metadata\":{\"annotations\":{\"checksum/config\":\"a4cc97ae68f8ec10d9b1c36d5c18f23706f005c2e145a09b23096ead8b309bab\",\"checksum/sc-dashboard-provider-config\":\"e70bf6a851099d385178a76de9757bb0bef8299da6d8443602590e44f05fdf24\",\"checksum/secret\":\"7590fe10cbd3ae3e92a60625ff270e3e7d404731e1c73aaa2df1a78dab2c7768\",\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Minio post-jobs from chart require write access to filesystem.\\\"\\n\",\"ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy\":\"\\\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector runs requires certain host mounts to watch files being created by pods.\\\"\\n\",\"ignore-check.kube-linter.io/unset-cpu-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"ignore-check.kube-linter.io/unset-memory-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"kubectl.kubernetes.io/default-container\":\"grafana\"},\"labels\":{\"app.kubernetes.io/instance\":\"grafana\",\"app.kubernetes.io/name\":\"grafana\",\"app.kubernetes.io/version\":\"12.4.3\",\"helm.sh/chart\":\"grafana-11.6.1\"}},\"spec\":{\"automountServiceAccountToken\":true,\"containers\":[{\"env\":[{\"name\":\"POD_IP\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"status.podIP\"}}},{\"name\":\"GF_SECURITY_ADMIN_USER\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"admin-user\",\"name\":\"grafana\"}}},{\"name\":\"GF_SECURITY_ADMIN_PASSWORD\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"admin-password\",\"name\":\"grafana\"}}},{\"name\":\"GF_PATHS_DATA\",\"value\":\"/var/lib/grafana/\"},{\"name\":\"GF_PATHS_LOGS\",\"value\":\"/var/log/grafana\"},{\"name\":\"GF_PATHS_PLUGINS\",\"value\":\"/var/lib/grafana/plugins\"},{\"name\":\"GF_PATHS_PROVISIONING\",\"value\":\"/etc/grafana/provisioning\"},{\"name\":\"GF_UNIFIED_STORAGE_INDEX_PATH\",\"value\":\"/var/lib/grafana-search/bleve\"},{\"name\":\"GOMEMLIMIT\",\"valueFrom\":{\"resourceFieldRef\":{\"divisor\":\"1\",\"resource\":\"limits.memory\"}}}],\"image\":\"quay.io/kubearchive/grafana:12.4.3\",\"imagePullPolicy\":\"IfNotPresent\",\"livenessProbe\":{\"failureThreshold\":10,\"httpGet\":{\"path\":\"/api/health\",\"port\":\"grafana\"},\"initialDelaySeconds\":60,\"timeoutSeconds\":30},\"name\":\"grafana\",\"ports\":[{\"containerPort\":3000,\"name\":\"grafana\",\"protocol\":\"TCP\"},{\"containerPort\":9094,\"name\":\"gossip-tcp\",\"protocol\":\"TCP\"},{\"containerPort\":9094,\"name\":\"gossip-udp\",\"protocol\":\"UDP\"},{\"containerPort\":6060,\"name\":\"profiling\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/api/health\",\"port\":\"grafana\"}},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"256Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"privileged\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":1000770000,\"runAsNonRoot\":true,\"runAsUser\":1000770000,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/grafana/grafana.ini\",\"name\":\"config\",\"subPath\":\"grafana.ini\"},{\"mountPath\":\"/var/lib/grafana\",\"name\":\"storage\"},{\"mountPath\":\"/var/lib/grafana-search\",\"name\":\"search\"},{\"mountPath\":\"/etc/grafana/provisioning/datasources/datasources.yaml\",\"name\":\"config\",\"subPath\":\"datasources.yaml\"}]}],\"enableServiceLinks\":true,\"securityContext\":{\"fsGroup\":1000770000,\"runAsGroup\":1000770000,\"runAsNonRoot\":true,\"runAsUser\":1000770000},\"serviceAccountName\":\"grafana\",\"shareProcessNamespace\":false,\"volumes\":[{\"configMap\":{\"name\":\"grafana\"},\"name\":\"config\"},{\"emptyDir\":{},\"name\":\"storage\"},{\"emptyDir\":{},\"name\":\"search\"}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:53:33Z", "generation": 1, "labels": { "app.kubernetes.io/instance": "grafana", "app.kubernetes.io/name": "grafana", "app.kubernetes.io/version": "12.4.3", "helm.sh/chart": "grafana-11.6.1" }, "name": "grafana", "namespace": "product-kubearchive-logging", "resourceVersion": "41272", "uid": "41ee3ee3-b2c4-46cd-8437-2b1c8ba17556" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/instance": "grafana", "app.kubernetes.io/name": "grafana" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "checksum/config": "a4cc97ae68f8ec10d9b1c36d5c18f23706f005c2e145a09b23096ead8b309bab", "checksum/sc-dashboard-provider-config": "e70bf6a851099d385178a76de9757bb0bef8299da6d8443602590e44f05fdf24", "checksum/secret": "7590fe10cbd3ae3e92a60625ff270e3e7d404731e1c73aaa2df1a78dab2c7768", "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector runs requires access to socket.\"\n", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Minio post-jobs from chart require write access to filesystem.\"\n", "ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy": "\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector runs requires certain host mounts to watch files being created by pods.\"\n", "ignore-check.kube-linter.io/unset-cpu-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "ignore-check.kube-linter.io/unset-memory-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "kubectl.kubernetes.io/default-container": "grafana" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/instance": "grafana", "app.kubernetes.io/name": "grafana", "app.kubernetes.io/version": "12.4.3", "helm.sh/chart": "grafana-11.6.1" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "env": [ { "name": "POD_IP", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "status.podIP" } } }, { "name": "GF_SECURITY_ADMIN_USER", "valueFrom": { "secretKeyRef": { "key": "admin-user", "name": "grafana" } } }, { "name": "GF_SECURITY_ADMIN_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "admin-password", "name": "grafana" } } }, { "name": "GF_PATHS_DATA", "value": "/var/lib/grafana/" }, { "name": "GF_PATHS_LOGS", "value": "/var/log/grafana" }, { "name": "GF_PATHS_PLUGINS", "value": "/var/lib/grafana/plugins" }, { "name": "GF_PATHS_PROVISIONING", "value": "/etc/grafana/provisioning" }, { "name": "GF_UNIFIED_STORAGE_INDEX_PATH", "value": "/var/lib/grafana-search/bleve" }, { "name": "GOMEMLIMIT", "valueFrom": { "resourceFieldRef": { "divisor": "1", "resource": "limits.memory" } } } ], "image": "quay.io/kubearchive/grafana:12.4.3", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 10, "httpGet": { "path": "/api/health", "port": "grafana", "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 30 }, "name": "grafana", "ports": [ { "containerPort": 3000, "name": "grafana", "protocol": "TCP" }, { "containerPort": 9094, "name": "gossip-tcp", "protocol": "TCP" }, { "containerPort": 9094, "name": "gossip-udp", "protocol": "UDP" }, { "containerPort": 6060, "name": "profiling", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/api/health", "port": "grafana", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsGroup": 1000770000, "runAsNonRoot": true, "runAsUser": 1000770000, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/grafana/grafana.ini", "name": "config", "subPath": "grafana.ini" }, { "mountPath": "/var/lib/grafana", "name": "storage" }, { "mountPath": "/var/lib/grafana-search", "name": "search" }, { "mountPath": "/etc/grafana/provisioning/datasources/datasources.yaml", "name": "config", "subPath": "datasources.yaml" } ] } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": true, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 1000770000, "runAsGroup": 1000770000, "runAsNonRoot": true, "runAsUser": 1000770000 }, "serviceAccount": "grafana", "serviceAccountName": "grafana", "shareProcessNamespace": false, "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "grafana" }, "name": "config" }, { "emptyDir": {}, "name": "storage" }, { "emptyDir": {}, "name": "search" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:54:04Z", "lastUpdateTime": "2026-05-13T16:54:04Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:53:33Z", "lastUpdateTime": "2026-05-13T16:54:04Z", "message": "ReplicaSet \"grafana-c8755fcdd\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "vector-kubearchive-log-collector-in-cluster-local:apps/Deployment:product-kubearchive-logging/loki-distributor", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector runs requires access to socket.\"\n", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Minio post-jobs from chart require write access to filesystem.\"\n", "ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy": "\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector runs requires certain host mounts to watch files being created by pods.\"\n", "ignore-check.kube-linter.io/unset-cpu-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "ignore-check.kube-linter.io/unset-memory-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"vector-kubearchive-log-collector-in-cluster-local:apps/Deployment:product-kubearchive-logging/loki-distributor\",\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Minio post-jobs from chart require write access to filesystem.\\\"\\n\",\"ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy\":\"\\\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector runs requires certain host mounts to watch files being created by pods.\\\"\\n\",\"ignore-check.kube-linter.io/unset-cpu-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"ignore-check.kube-linter.io/unset-memory-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\"},\"labels\":{\"app.kubernetes.io/component\":\"distributor\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\",\"app.kubernetes.io/part-of\":\"memberlist\",\"app.kubernetes.io/version\":\"3.7.1\",\"helm.sh/chart\":\"loki-12.0.0\"},\"name\":\"loki-distributor\",\"namespace\":\"product-kubearchive-logging\"},\"spec\":{\"replicas\":1,\"revisionHistoryLimit\":10,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"distributor\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":0,\"maxUnavailable\":1}},\"template\":{\"metadata\":{\"annotations\":{\"checksum/config\":\"9c1da9d587c969666f111c0953bc5aa254e49555cfdd18dbb56b2805de7e56b6\",\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Minio post-jobs from chart require write access to filesystem.\\\"\\n\",\"ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy\":\"\\\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector runs requires certain host mounts to watch files being created by pods.\\\"\\n\",\"ignore-check.kube-linter.io/unset-cpu-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"ignore-check.kube-linter.io/unset-memory-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"kubectl.kubernetes.io/default-container\":\"distributor\"},\"labels\":{\"app.kubernetes.io/component\":\"distributor\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\",\"app.kubernetes.io/part-of\":\"memberlist\",\"app.kubernetes.io/version\":\"3.7.1\",\"helm.sh/chart\":\"loki-12.0.0\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":[{\"labelSelector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"distributor\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\"}},\"topologyKey\":\"kubernetes.io/hostname\"}]}},\"automountServiceAccountToken\":true,\"containers\":[{\"args\":[\"-config.file=/etc/loki/config/config.yaml\",\"-target=distributor\",\"-log.level=debug\"],\"env\":[{\"name\":\"GOMEMLIMIT\",\"value\":\"217MiB\"},{\"name\":\"GOGC\",\"value\":\"80\"}],\"image\":\"quay.io/kubearchive/loki:3.7.1\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"distributor\",\"ports\":[{\"containerPort\":3100,\"name\":\"http-metrics\",\"protocol\":\"TCP\"},{\"containerPort\":9095,\"name\":\"grpc\",\"protocol\":\"TCP\"},{\"containerPort\":7946,\"name\":\"http-memberlist\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/ready\",\"port\":\"http-metrics\"},\"initialDelaySeconds\":15,\"periodSeconds\":10,\"successThreshold\":1,\"timeoutSeconds\":1},\"resources\":{\"limits\":{\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"128Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/loki/config\",\"name\":\"config\"},{\"mountPath\":\"/etc/loki/runtime-config\",\"name\":\"runtime-config\"},{\"mountPath\":\"/var/loki\",\"name\":\"data\"},{\"mountPath\":\"/tmp\",\"name\":\"temp\"}]}],\"enableServiceLinks\":true,\"securityContext\":{\"fsGroup\":10001,\"fsGroupChangePolicy\":\"OnRootMismatch\",\"runAsGroup\":10001,\"runAsNonRoot\":true,\"runAsUser\":10001,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"loki\",\"terminationGracePeriodSeconds\":30,\"volumes\":[{\"emptyDir\":{},\"name\":\"temp\"},{\"configMap\":{\"items\":[{\"key\":\"config.yaml\",\"path\":\"config.yaml\"}],\"name\":\"loki\"},\"name\":\"config\"},{\"configMap\":{\"name\":\"loki-runtime\"},\"name\":\"runtime-config\"},{\"emptyDir\":{},\"name\":\"data\"}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:53:33Z", "generation": 1, "labels": { "app.kubernetes.io/component": "distributor", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki", "app.kubernetes.io/part-of": "memberlist", "app.kubernetes.io/version": "3.7.1", "helm.sh/chart": "loki-12.0.0" }, "name": "loki-distributor", "namespace": "product-kubearchive-logging", "resourceVersion": "41258", "uid": "e56b32c4-167c-416c-98c5-12b5ff442900" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "distributor", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki" } }, "strategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "checksum/config": "9c1da9d587c969666f111c0953bc5aa254e49555cfdd18dbb56b2805de7e56b6", "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector runs requires access to socket.\"\n", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Minio post-jobs from chart require write access to filesystem.\"\n", "ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy": "\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector runs requires certain host mounts to watch files being created by pods.\"\n", "ignore-check.kube-linter.io/unset-cpu-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "ignore-check.kube-linter.io/unset-memory-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "kubectl.kubernetes.io/default-container": "distributor" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "distributor", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki", "app.kubernetes.io/part-of": "memberlist", "app.kubernetes.io/version": "3.7.1", "helm.sh/chart": "loki-12.0.0" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "distributor", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "-config.file=/etc/loki/config/config.yaml", "-target=distributor", "-log.level=debug" ], "env": [ { "name": "GOMEMLIMIT", "value": "217MiB" }, { "name": "GOGC", "value": "80" } ], "image": "quay.io/kubearchive/loki:3.7.1", "imagePullPolicy": "IfNotPresent", "name": "distributor", "ports": [ { "containerPort": 3100, "name": "http-metrics", "protocol": "TCP" }, { "containerPort": 9095, "name": "grpc", "protocol": "TCP" }, { "containerPort": 7946, "name": "http-memberlist", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": "http-metrics", "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "memory": "256Mi" }, "requests": { "cpu": "50m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/loki/config", "name": "config" }, { "mountPath": "/etc/loki/runtime-config", "name": "runtime-config" }, { "mountPath": "/var/loki", "name": "data" }, { "mountPath": "/tmp", "name": "temp" } ] } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": true, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 10001, "fsGroupChangePolicy": "OnRootMismatch", "runAsGroup": 10001, "runAsNonRoot": true, "runAsUser": 10001, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "loki", "serviceAccountName": "loki", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "temp" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "config.yaml", "path": "config.yaml" } ], "name": "loki" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "loki-runtime" }, "name": "runtime-config" }, { "emptyDir": {}, "name": "data" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:53:33Z", "lastUpdateTime": "2026-05-13T16:53:33Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:53:33Z", "lastUpdateTime": "2026-05-13T16:54:03Z", "message": "ReplicaSet \"loki-distributor-5dd8bc9747\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "vector-kubearchive-log-collector-in-cluster-local:apps/Deployment:product-kubearchive-logging/loki-gateway", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector runs requires access to socket.\"\n", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Minio post-jobs from chart require write access to filesystem.\"\n", "ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy": "\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector runs requires certain host mounts to watch files being created by pods.\"\n", "ignore-check.kube-linter.io/unset-cpu-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "ignore-check.kube-linter.io/unset-memory-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"vector-kubearchive-log-collector-in-cluster-local:apps/Deployment:product-kubearchive-logging/loki-gateway\",\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Minio post-jobs from chart require write access to filesystem.\\\"\\n\",\"ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy\":\"\\\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector runs requires certain host mounts to watch files being created by pods.\\\"\\n\",\"ignore-check.kube-linter.io/unset-cpu-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"ignore-check.kube-linter.io/unset-memory-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\"},\"labels\":{\"app.kubernetes.io/component\":\"gateway\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\",\"app.kubernetes.io/version\":\"3.7.1\",\"helm.sh/chart\":\"loki-12.0.0\"},\"name\":\"loki-gateway\",\"namespace\":\"product-kubearchive-logging\"},\"spec\":{\"replicas\":1,\"revisionHistoryLimit\":10,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"gateway\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\"}},\"strategy\":{\"type\":\"RollingUpdate\"},\"template\":{\"metadata\":{\"annotations\":{\"checksum/config\":\"339da07e9ccee4115cca464905cb8249312ec08eb3112b3077e079dab15b555e\",\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Minio post-jobs from chart require write access to filesystem.\\\"\\n\",\"ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy\":\"\\\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector runs requires certain host mounts to watch files being created by pods.\\\"\\n\",\"ignore-check.kube-linter.io/unset-cpu-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"ignore-check.kube-linter.io/unset-memory-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\"},\"labels\":{\"app.kubernetes.io/component\":\"gateway\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":[{\"labelSelector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"gateway\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\"}},\"topologyKey\":\"kubernetes.io/hostname\"}]}},\"automountServiceAccountToken\":false,\"containers\":[{\"image\":\"quay.io/nginx/nginx-unprivileged:1.29-alpine\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"nginx\",\"ports\":[{\"containerPort\":8080,\"name\":\"http\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/\",\"port\":\"http\"},\"initialDelaySeconds\":5,\"periodSeconds\":5,\"successThreshold\":1,\"timeoutSeconds\":3},\"resources\":{\"limits\":{\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"64Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/nginx\",\"name\":\"config\"},{\"mountPath\":\"/tmp\",\"name\":\"tmp\"},{\"mountPath\":\"/docker-entrypoint.d\",\"name\":\"docker-entrypoint-d-override\"}]},{\"args\":[\"--nginx.scrape-url\",\"http://127.0.0.1:8080/stub_status\",\"--preset\",\"loki\"],\"image\":\"ghcr.io/jkroepke/access-log-exporter:0.3.9\",\"imagePullPolicy\":\"IfNotPresent\",\"livenessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/health\",\"port\":\"http-metrics\"},\"initialDelaySeconds\":30,\"periodSeconds\":10,\"timeoutSeconds\":5},\"name\":\"exporter\",\"ports\":[{\"containerPort\":4040,\"name\":\"http-metrics\"},{\"containerPort\":8514,\"name\":\"syslog\"}],\"readinessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/health\",\"port\":\"http-metrics\"},\"initialDelaySeconds\":5,\"periodSeconds\":5,\"timeoutSeconds\":3},\"resources\":{\"limits\":{},\"requests\":{}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"privileged\":false,\"readOnlyRootFilesystem\":true,\"runAsGroup\":65532,\"runAsNonRoot\":true,\"runAsUser\":65532,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"volumeMounts\":[{\"mountPath\":\"/config.yaml\",\"name\":\"config\",\"subPath\":\"access-log-exporter.yaml\"}]}],\"enableServiceLinks\":true,\"securityContext\":{\"fsGroup\":101,\"runAsGroup\":101,\"runAsNonRoot\":true,\"runAsUser\":101,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"loki-gateway\",\"terminationGracePeriodSeconds\":30,\"volumes\":[{\"configMap\":{\"name\":\"loki-gateway\"},\"name\":\"config\"},{\"emptyDir\":{},\"name\":\"tmp\"},{\"emptyDir\":{},\"name\":\"docker-entrypoint-d-override\"}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:53:33Z", "generation": 1, "labels": { "app.kubernetes.io/component": "gateway", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki", "app.kubernetes.io/version": "3.7.1", "helm.sh/chart": "loki-12.0.0" }, "name": "loki-gateway", "namespace": "product-kubearchive-logging", "resourceVersion": "40885", "uid": "1a0811a0-578c-4db0-80e4-4f6e3a8cecf0" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "gateway", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "checksum/config": "339da07e9ccee4115cca464905cb8249312ec08eb3112b3077e079dab15b555e", "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector runs requires access to socket.\"\n", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Minio post-jobs from chart require write access to filesystem.\"\n", "ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy": "\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector runs requires certain host mounts to watch files being created by pods.\"\n", "ignore-check.kube-linter.io/unset-cpu-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "ignore-check.kube-linter.io/unset-memory-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "gateway", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "gateway", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "automountServiceAccountToken": false, "containers": [ { "image": "quay.io/nginx/nginx-unprivileged:1.29-alpine", "imagePullPolicy": "IfNotPresent", "name": "nginx", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": "http", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 3 }, "resources": { "limits": { "memory": "128Mi" }, "requests": { "cpu": "50m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/nginx", "name": "config" }, { "mountPath": "/tmp", "name": "tmp" }, { "mountPath": "/docker-entrypoint.d", "name": "docker-entrypoint-d-override" } ] }, { "args": [ "--nginx.scrape-url", "http://127.0.0.1:8080/stub_status", "--preset", "loki" ], "image": "ghcr.io/jkroepke/access-log-exporter:0.3.9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "http-metrics", "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "exporter", "ports": [ { "containerPort": 4040, "name": "http-metrics", "protocol": "TCP" }, { "containerPort": 8514, "name": "syslog", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "http-metrics", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 3 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/config.yaml", "name": "config", "subPath": "access-log-exporter.yaml" } ] } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": true, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 101, "runAsGroup": 101, "runAsNonRoot": true, "runAsUser": 101, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "loki-gateway", "serviceAccountName": "loki-gateway", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "loki-gateway" }, "name": "config" }, { "emptyDir": {}, "name": "tmp" }, { "emptyDir": {}, "name": "docker-entrypoint-d-override" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:53:44Z", "lastUpdateTime": "2026-05-13T16:53:44Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:53:33Z", "lastUpdateTime": "2026-05-13T16:53:44Z", "message": "ReplicaSet \"loki-gateway-7f8d55d955\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "vector-kubearchive-log-collector-in-cluster-local:apps/Deployment:product-kubearchive-logging/loki-minio", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector runs requires access to socket.\"\n", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Minio post-jobs from chart require write access to filesystem.\"\n", "ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy": "\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector runs requires certain host mounts to watch files being created by pods.\"\n", "ignore-check.kube-linter.io/unset-cpu-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "ignore-check.kube-linter.io/unset-memory-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"vector-kubearchive-log-collector-in-cluster-local:apps/Deployment:product-kubearchive-logging/loki-minio\",\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Minio post-jobs from chart require write access to filesystem.\\\"\\n\",\"ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy\":\"\\\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector runs requires certain host mounts to watch files being created by pods.\\\"\\n\",\"ignore-check.kube-linter.io/unset-cpu-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"ignore-check.kube-linter.io/unset-memory-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\"},\"labels\":{\"app\":\"minio\",\"chart\":\"minio-5.4.0\",\"heritage\":\"Helm\",\"release\":\"loki\"},\"name\":\"loki-minio\",\"namespace\":\"product-kubearchive-logging\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"minio\",\"release\":\"loki\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":\"100%\",\"maxUnavailable\":0},\"type\":\"RollingUpdate\"},\"template\":{\"metadata\":{\"annotations\":{\"checksum/config\":\"db64089a5f6fe336cb202efe2ea7813618c99c3651b36991914f996af39fe65e\",\"checksum/secrets\":\"d7ad998d24f563da009a414b12e43c6ccf27fdecfac5864c747ffe0d3177e847\",\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Minio post-jobs from chart require write access to filesystem.\\\"\\n\",\"ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy\":\"\\\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector runs requires certain host mounts to watch files being created by pods.\\\"\\n\",\"ignore-check.kube-linter.io/unset-cpu-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"ignore-check.kube-linter.io/unset-memory-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\"},\"labels\":{\"app\":\"minio\",\"release\":\"loki\"},\"name\":\"loki-minio\"},\"spec\":{\"containers\":[{\"command\":[\"/bin/sh\",\"-ce\",\"/usr/bin/docker-entrypoint.sh minio server /export -S /etc/minio/certs/ --address :9000 --console-address :9001\"],\"env\":[{\"name\":\"MINIO_ROOT_USER\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"rootUser\",\"name\":\"loki-minio\"}}},{\"name\":\"MINIO_ROOT_PASSWORD\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"rootPassword\",\"name\":\"loki-minio\"}}},{\"name\":\"MINIO_PROMETHEUS_AUTH_TYPE\",\"value\":\"public\"}],\"image\":\"quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"minio\",\"ports\":[{\"containerPort\":9000,\"name\":\"http\"},{\"containerPort\":9001,\"name\":\"http-console\"}],\"resources\":{\"limits\":{\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"128Mi\"}},\"volumeMounts\":[{\"mountPath\":\"/tmp/credentials\",\"name\":\"minio-user\",\"readOnly\":true},{\"mountPath\":\"/export\",\"name\":\"export\"}]}],\"serviceAccountName\":\"minio-sa\",\"volumes\":[{\"emptyDir\":{},\"name\":\"export\"},{\"name\":\"minio-user\",\"secret\":{\"secretName\":\"loki-minio\"}}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:53:33Z", "generation": 1, "labels": { "app": "minio", "chart": "minio-5.4.0", "heritage": "Helm", "release": "loki" }, "name": "loki-minio", "namespace": "product-kubearchive-logging", "resourceVersion": "40801", "uid": "3a50ba1f-d8a3-4548-bb43-7dc365aa434d" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "minio", "release": "loki" } }, "strategy": { "rollingUpdate": { "maxSurge": "100%", "maxUnavailable": 0 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "checksum/config": "db64089a5f6fe336cb202efe2ea7813618c99c3651b36991914f996af39fe65e", "checksum/secrets": "d7ad998d24f563da009a414b12e43c6ccf27fdecfac5864c747ffe0d3177e847", "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector runs requires access to socket.\"\n", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Minio post-jobs from chart require write access to filesystem.\"\n", "ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy": "\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector runs requires certain host mounts to watch files being created by pods.\"\n", "ignore-check.kube-linter.io/unset-cpu-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "ignore-check.kube-linter.io/unset-memory-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n" }, "creationTimestamp": null, "labels": { "app": "minio", "release": "loki" }, "name": "loki-minio" }, "spec": { "containers": [ { "command": [ "/bin/sh", "-ce", "/usr/bin/docker-entrypoint.sh minio server /export -S /etc/minio/certs/ --address :9000 --console-address :9001" ], "env": [ { "name": "MINIO_ROOT_USER", "valueFrom": { "secretKeyRef": { "key": "rootUser", "name": "loki-minio" } } }, { "name": "MINIO_ROOT_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "rootPassword", "name": "loki-minio" } } }, { "name": "MINIO_PROMETHEUS_AUTH_TYPE", "value": "public" } ], "image": "quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z", "imagePullPolicy": "IfNotPresent", "name": "minio", "ports": [ { "containerPort": 9000, "name": "http", "protocol": "TCP" }, { "containerPort": 9001, "name": "http-console", "protocol": "TCP" } ], "resources": { "limits": { "memory": "256Mi" }, "requests": { "cpu": "50m", "memory": "128Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp/credentials", "name": "minio-user", "readOnly": true }, { "mountPath": "/export", "name": "export" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "minio-sa", "serviceAccountName": "minio-sa", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "export" }, { "name": "minio-user", "secret": { "defaultMode": 420, "secretName": "loki-minio" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:53:41Z", "lastUpdateTime": "2026-05-13T16:53:41Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:53:33Z", "lastUpdateTime": "2026-05-13T16:53:41Z", "message": "ReplicaSet \"loki-minio-7845557dc8\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "vector-kubearchive-log-collector-in-cluster-local:apps/Deployment:product-kubearchive-logging/loki-querier", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector runs requires access to socket.\"\n", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Minio post-jobs from chart require write access to filesystem.\"\n", "ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy": "\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector runs requires certain host mounts to watch files being created by pods.\"\n", "ignore-check.kube-linter.io/unset-cpu-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "ignore-check.kube-linter.io/unset-memory-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"vector-kubearchive-log-collector-in-cluster-local:apps/Deployment:product-kubearchive-logging/loki-querier\",\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Minio post-jobs from chart require write access to filesystem.\\\"\\n\",\"ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy\":\"\\\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector runs requires certain host mounts to watch files being created by pods.\\\"\\n\",\"ignore-check.kube-linter.io/unset-cpu-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"ignore-check.kube-linter.io/unset-memory-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\"},\"labels\":{\"app.kubernetes.io/component\":\"querier\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\",\"app.kubernetes.io/part-of\":\"memberlist\",\"app.kubernetes.io/version\":\"3.7.1\",\"helm.sh/chart\":\"loki-12.0.0\"},\"name\":\"loki-querier\",\"namespace\":\"product-kubearchive-logging\"},\"spec\":{\"replicas\":1,\"revisionHistoryLimit\":10,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"querier\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":0,\"maxUnavailable\":1}},\"template\":{\"metadata\":{\"annotations\":{\"checksum/config\":\"9c1da9d587c969666f111c0953bc5aa254e49555cfdd18dbb56b2805de7e56b6\",\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Minio post-jobs from chart require write access to filesystem.\\\"\\n\",\"ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy\":\"\\\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector runs requires certain host mounts to watch files being created by pods.\\\"\\n\",\"ignore-check.kube-linter.io/unset-cpu-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"ignore-check.kube-linter.io/unset-memory-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"kubectl.kubernetes.io/default-container\":\"querier\"},\"labels\":{\"app.kubernetes.io/component\":\"querier\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\",\"app.kubernetes.io/part-of\":\"memberlist\",\"app.kubernetes.io/version\":\"3.7.1\",\"helm.sh/chart\":\"loki-12.0.0\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":[{\"labelSelector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"querier\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\"}},\"topologyKey\":\"kubernetes.io/hostname\"}]}},\"automountServiceAccountToken\":true,\"containers\":[{\"args\":[\"-config.file=/etc/loki/config/config.yaml\",\"-target=querier\",\"-log.level=debug\"],\"env\":[{\"name\":\"GOMEMLIMIT\",\"value\":\"435MiB\"},{\"name\":\"GOGC\",\"value\":\"80\"}],\"image\":\"quay.io/kubearchive/loki:3.7.1\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"querier\",\"ports\":[{\"containerPort\":3100,\"name\":\"http-metrics\",\"protocol\":\"TCP\"},{\"containerPort\":9095,\"name\":\"grpc\",\"protocol\":\"TCP\"},{\"containerPort\":7946,\"name\":\"http-memberlist\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/ready\",\"port\":\"http-metrics\"},\"initialDelaySeconds\":15,\"periodSeconds\":10,\"successThreshold\":1,\"timeoutSeconds\":1},\"resources\":{\"limits\":{\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"128Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/loki/config\",\"name\":\"config\"},{\"mountPath\":\"/etc/loki/runtime-config\",\"name\":\"runtime-config\"},{\"mountPath\":\"/var/loki\",\"name\":\"data\"},{\"mountPath\":\"/tmp\",\"name\":\"temp\"}]}],\"enableServiceLinks\":true,\"securityContext\":{\"fsGroup\":10001,\"fsGroupChangePolicy\":\"OnRootMismatch\",\"runAsGroup\":10001,\"runAsNonRoot\":true,\"runAsUser\":10001,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"loki\",\"terminationGracePeriodSeconds\":30,\"topologySpreadConstraints\":[{\"labelSelector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"querier\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\"}},\"maxSkew\":1,\"topologyKey\":\"kubernetes.io/hostname\",\"whenUnsatisfiable\":\"ScheduleAnyway\"}],\"volumes\":[{\"emptyDir\":{},\"name\":\"temp\"},{\"configMap\":{\"items\":[{\"key\":\"config.yaml\",\"path\":\"config.yaml\"}],\"name\":\"loki\"},\"name\":\"config\"},{\"configMap\":{\"name\":\"loki-runtime\"},\"name\":\"runtime-config\"},{\"emptyDir\":{},\"name\":\"data\"}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:53:33Z", "generation": 1, "labels": { "app.kubernetes.io/component": "querier", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki", "app.kubernetes.io/part-of": "memberlist", "app.kubernetes.io/version": "3.7.1", "helm.sh/chart": "loki-12.0.0" }, "name": "loki-querier", "namespace": "product-kubearchive-logging", "resourceVersion": "41266", "uid": "0e5d0035-ba9a-4458-a5eb-3e32aee3f153" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "querier", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki" } }, "strategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "checksum/config": "9c1da9d587c969666f111c0953bc5aa254e49555cfdd18dbb56b2805de7e56b6", "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector runs requires access to socket.\"\n", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Minio post-jobs from chart require write access to filesystem.\"\n", "ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy": "\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector runs requires certain host mounts to watch files being created by pods.\"\n", "ignore-check.kube-linter.io/unset-cpu-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "ignore-check.kube-linter.io/unset-memory-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "kubectl.kubernetes.io/default-container": "querier" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "querier", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki", "app.kubernetes.io/part-of": "memberlist", "app.kubernetes.io/version": "3.7.1", "helm.sh/chart": "loki-12.0.0" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "querier", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "-config.file=/etc/loki/config/config.yaml", "-target=querier", "-log.level=debug" ], "env": [ { "name": "GOMEMLIMIT", "value": "435MiB" }, { "name": "GOGC", "value": "80" } ], "image": "quay.io/kubearchive/loki:3.7.1", "imagePullPolicy": "IfNotPresent", "name": "querier", "ports": [ { "containerPort": 3100, "name": "http-metrics", "protocol": "TCP" }, { "containerPort": 9095, "name": "grpc", "protocol": "TCP" }, { "containerPort": 7946, "name": "http-memberlist", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": "http-metrics", "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "memory": "512Mi" }, "requests": { "cpu": "50m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/loki/config", "name": "config" }, { "mountPath": "/etc/loki/runtime-config", "name": "runtime-config" }, { "mountPath": "/var/loki", "name": "data" }, { "mountPath": "/tmp", "name": "temp" } ] } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": true, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 10001, "fsGroupChangePolicy": "OnRootMismatch", "runAsGroup": 10001, "runAsNonRoot": true, "runAsUser": 10001, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "loki", "serviceAccountName": "loki", "terminationGracePeriodSeconds": 30, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "querier", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki" } }, "maxSkew": 1, "topologyKey": "kubernetes.io/hostname", "whenUnsatisfiable": "ScheduleAnyway" } ], "volumes": [ { "emptyDir": {}, "name": "temp" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "config.yaml", "path": "config.yaml" } ], "name": "loki" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "loki-runtime" }, "name": "runtime-config" }, { "emptyDir": {}, "name": "data" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:53:33Z", "lastUpdateTime": "2026-05-13T16:53:33Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:53:33Z", "lastUpdateTime": "2026-05-13T16:54:03Z", "message": "ReplicaSet \"loki-querier-5586f77b45\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "vector-kubearchive-log-collector-in-cluster-local:apps/Deployment:product-kubearchive-logging/loki-query-frontend", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector runs requires access to socket.\"\n", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Minio post-jobs from chart require write access to filesystem.\"\n", "ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy": "\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector runs requires certain host mounts to watch files being created by pods.\"\n", "ignore-check.kube-linter.io/unset-cpu-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "ignore-check.kube-linter.io/unset-memory-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"vector-kubearchive-log-collector-in-cluster-local:apps/Deployment:product-kubearchive-logging/loki-query-frontend\",\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Minio post-jobs from chart require write access to filesystem.\\\"\\n\",\"ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy\":\"\\\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector runs requires certain host mounts to watch files being created by pods.\\\"\\n\",\"ignore-check.kube-linter.io/unset-cpu-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"ignore-check.kube-linter.io/unset-memory-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\"},\"labels\":{\"app.kubernetes.io/component\":\"query-frontend\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\",\"app.kubernetes.io/version\":\"3.7.1\",\"helm.sh/chart\":\"loki-12.0.0\"},\"name\":\"loki-query-frontend\",\"namespace\":\"product-kubearchive-logging\"},\"spec\":{\"replicas\":1,\"revisionHistoryLimit\":10,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"query-frontend\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":0,\"maxUnavailable\":1}},\"template\":{\"metadata\":{\"annotations\":{\"checksum/config\":\"9c1da9d587c969666f111c0953bc5aa254e49555cfdd18dbb56b2805de7e56b6\",\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Minio post-jobs from chart require write access to filesystem.\\\"\\n\",\"ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy\":\"\\\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector runs requires certain host mounts to watch files being created by pods.\\\"\\n\",\"ignore-check.kube-linter.io/unset-cpu-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"ignore-check.kube-linter.io/unset-memory-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"kubectl.kubernetes.io/default-container\":\"query-frontend\"},\"labels\":{\"app.kubernetes.io/component\":\"query-frontend\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\",\"app.kubernetes.io/part-of\":\"memberlist\",\"app.kubernetes.io/version\":\"3.7.1\",\"helm.sh/chart\":\"loki-12.0.0\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":[{\"labelSelector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"query-frontend\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\"}},\"topologyKey\":\"kubernetes.io/hostname\"}]}},\"automountServiceAccountToken\":true,\"containers\":[{\"args\":[\"-config.file=/etc/loki/config/config.yaml\",\"-target=query-frontend\",\"-log.level=debug\"],\"env\":[{\"name\":\"GOMEMLIMIT\",\"value\":\"217MiB\"},{\"name\":\"GOGC\",\"value\":\"80\"}],\"image\":\"quay.io/kubearchive/loki:3.7.1\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"query-frontend\",\"ports\":[{\"containerPort\":3100,\"name\":\"http-metrics\",\"protocol\":\"TCP\"},{\"containerPort\":9095,\"name\":\"grpc\",\"protocol\":\"TCP\"},{\"containerPort\":7946,\"name\":\"http-memberlist\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/ready\",\"port\":\"http-metrics\"},\"initialDelaySeconds\":15,\"periodSeconds\":10,\"successThreshold\":1,\"timeoutSeconds\":1},\"resources\":{\"limits\":{\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"25m\",\"memory\":\"128Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/loki/config\",\"name\":\"config\"},{\"mountPath\":\"/etc/loki/runtime-config\",\"name\":\"runtime-config\"},{\"mountPath\":\"/var/loki\",\"name\":\"data\"},{\"mountPath\":\"/tmp\",\"name\":\"temp\"}]}],\"enableServiceLinks\":true,\"securityContext\":{\"fsGroup\":10001,\"fsGroupChangePolicy\":\"OnRootMismatch\",\"runAsGroup\":10001,\"runAsNonRoot\":true,\"runAsUser\":10001,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"loki\",\"terminationGracePeriodSeconds\":30,\"volumes\":[{\"emptyDir\":{},\"name\":\"temp\"},{\"configMap\":{\"items\":[{\"key\":\"config.yaml\",\"path\":\"config.yaml\"}],\"name\":\"loki\"},\"name\":\"config\"},{\"configMap\":{\"name\":\"loki-runtime\"},\"name\":\"runtime-config\"},{\"emptyDir\":{},\"name\":\"data\"}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:53:33Z", "generation": 1, "labels": { "app.kubernetes.io/component": "query-frontend", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki", "app.kubernetes.io/version": "3.7.1", "helm.sh/chart": "loki-12.0.0" }, "name": "loki-query-frontend", "namespace": "product-kubearchive-logging", "resourceVersion": "41252", "uid": "0e9fe503-487d-47bf-8b99-09d7c5506931" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "query-frontend", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki" } }, "strategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "checksum/config": "9c1da9d587c969666f111c0953bc5aa254e49555cfdd18dbb56b2805de7e56b6", "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector runs requires access to socket.\"\n", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Minio post-jobs from chart require write access to filesystem.\"\n", "ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy": "\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector runs requires certain host mounts to watch files being created by pods.\"\n", "ignore-check.kube-linter.io/unset-cpu-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "ignore-check.kube-linter.io/unset-memory-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "kubectl.kubernetes.io/default-container": "query-frontend" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "query-frontend", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki", "app.kubernetes.io/part-of": "memberlist", "app.kubernetes.io/version": "3.7.1", "helm.sh/chart": "loki-12.0.0" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "query-frontend", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "-config.file=/etc/loki/config/config.yaml", "-target=query-frontend", "-log.level=debug" ], "env": [ { "name": "GOMEMLIMIT", "value": "217MiB" }, { "name": "GOGC", "value": "80" } ], "image": "quay.io/kubearchive/loki:3.7.1", "imagePullPolicy": "IfNotPresent", "name": "query-frontend", "ports": [ { "containerPort": 3100, "name": "http-metrics", "protocol": "TCP" }, { "containerPort": 9095, "name": "grpc", "protocol": "TCP" }, { "containerPort": 7946, "name": "http-memberlist", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": "http-metrics", "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "memory": "256Mi" }, "requests": { "cpu": "25m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/loki/config", "name": "config" }, { "mountPath": "/etc/loki/runtime-config", "name": "runtime-config" }, { "mountPath": "/var/loki", "name": "data" }, { "mountPath": "/tmp", "name": "temp" } ] } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": true, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 10001, "fsGroupChangePolicy": "OnRootMismatch", "runAsGroup": 10001, "runAsNonRoot": true, "runAsUser": 10001, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "loki", "serviceAccountName": "loki", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "temp" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "config.yaml", "path": "config.yaml" } ], "name": "loki" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "loki-runtime" }, "name": "runtime-config" }, { "emptyDir": {}, "name": "data" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:53:33Z", "lastUpdateTime": "2026-05-13T16:53:33Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:53:33Z", "lastUpdateTime": "2026-05-13T16:54:03Z", "message": "ReplicaSet \"loki-query-frontend-6464d48fb5\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "vector-kubearchive-log-collector-in-cluster-local:apps/Deployment:product-kubearchive-logging/loki-query-scheduler", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector runs requires access to socket.\"\n", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Minio post-jobs from chart require write access to filesystem.\"\n", "ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy": "\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector runs requires certain host mounts to watch files being created by pods.\"\n", "ignore-check.kube-linter.io/unset-cpu-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "ignore-check.kube-linter.io/unset-memory-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"vector-kubearchive-log-collector-in-cluster-local:apps/Deployment:product-kubearchive-logging/loki-query-scheduler\",\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Minio post-jobs from chart require write access to filesystem.\\\"\\n\",\"ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy\":\"\\\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector runs requires certain host mounts to watch files being created by pods.\\\"\\n\",\"ignore-check.kube-linter.io/unset-cpu-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"ignore-check.kube-linter.io/unset-memory-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\"},\"labels\":{\"app.kubernetes.io/component\":\"query-scheduler\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\",\"app.kubernetes.io/version\":\"3.7.1\",\"helm.sh/chart\":\"loki-12.0.0\"},\"name\":\"loki-query-scheduler\",\"namespace\":\"product-kubearchive-logging\"},\"spec\":{\"replicas\":1,\"revisionHistoryLimit\":10,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"query-scheduler\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\"}},\"strategy\":{\"rollingUpdate\":{\"maxSurge\":0,\"maxUnavailable\":1}},\"template\":{\"metadata\":{\"annotations\":{\"checksum/config\":\"9c1da9d587c969666f111c0953bc5aa254e49555cfdd18dbb56b2805de7e56b6\",\"ignore-check.kube-linter.io/drop-net-raw-capability\":\"\\\"Vector runs requires access to socket.\\\"\\n\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Minio post-jobs from chart require write access to filesystem.\\\"\\n\",\"ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy\":\"\\\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\\\"\\n\",\"ignore-check.kube-linter.io/run-as-non-root\":\"\\\"Vector runs as Root and attach host Path.\\\"\\n\",\"ignore-check.kube-linter.io/sensitive-host-mounts\":\"\\\"Vector runs requires certain host mounts to watch files being created by pods.\\\"\\n\",\"ignore-check.kube-linter.io/unset-cpu-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"ignore-check.kube-linter.io/unset-memory-requirements\":\"\\\"Minio post-job containers from chart do not expose resource configuration options.\\\"\\n\",\"kubectl.kubernetes.io/default-container\":\"query-scheduler\"},\"labels\":{\"app.kubernetes.io/component\":\"query-scheduler\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\",\"app.kubernetes.io/part-of\":\"memberlist\",\"app.kubernetes.io/version\":\"3.7.1\",\"helm.sh/chart\":\"loki-12.0.0\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":[{\"labelSelector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"query-scheduler\",\"app.kubernetes.io/instance\":\"loki\",\"app.kubernetes.io/name\":\"loki\"}},\"topologyKey\":\"kubernetes.io/hostname\"}]}},\"automountServiceAccountToken\":true,\"containers\":[{\"args\":[\"-config.file=/etc/loki/config/config.yaml\",\"-target=query-scheduler\",\"-log.level=debug\"],\"env\":[{\"name\":\"GOMEMLIMIT\",\"value\":\"54MiB\"},{\"name\":\"GOGC\",\"value\":\"80\"}],\"image\":\"quay.io/kubearchive/loki:3.7.1\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"query-scheduler\",\"ports\":[{\"containerPort\":3100,\"name\":\"http-metrics\",\"protocol\":\"TCP\"},{\"containerPort\":9095,\"name\":\"grpc\",\"protocol\":\"TCP\"},{\"containerPort\":7946,\"name\":\"http-memberlist\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/ready\",\"port\":\"http-metrics\"},\"initialDelaySeconds\":15,\"periodSeconds\":10,\"successThreshold\":1,\"timeoutSeconds\":1},\"resources\":{\"limits\":{\"memory\":\"64Mi\"},\"requests\":{\"cpu\":\"25m\",\"memory\":\"32Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/loki/config\",\"name\":\"config\"},{\"mountPath\":\"/etc/loki/runtime-config\",\"name\":\"runtime-config\"},{\"mountPath\":\"/var/loki\",\"name\":\"data\"},{\"mountPath\":\"/tmp\",\"name\":\"temp\"}]}],\"enableServiceLinks\":true,\"securityContext\":{\"fsGroup\":10001,\"fsGroupChangePolicy\":\"OnRootMismatch\",\"runAsGroup\":10001,\"runAsNonRoot\":true,\"runAsUser\":10001,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"loki\",\"terminationGracePeriodSeconds\":30,\"volumes\":[{\"emptyDir\":{},\"name\":\"temp\"},{\"configMap\":{\"items\":[{\"key\":\"config.yaml\",\"path\":\"config.yaml\"}],\"name\":\"loki\"},\"name\":\"config\"},{\"configMap\":{\"name\":\"loki-runtime\"},\"name\":\"runtime-config\"},{\"emptyDir\":{},\"name\":\"data\"}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:53:33Z", "generation": 1, "labels": { "app.kubernetes.io/component": "query-scheduler", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki", "app.kubernetes.io/version": "3.7.1", "helm.sh/chart": "loki-12.0.0" }, "name": "loki-query-scheduler", "namespace": "product-kubearchive-logging", "resourceVersion": "41290", "uid": "9becc502-e330-4ad2-a007-47e681c891da" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "query-scheduler", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki" } }, "strategy": { "rollingUpdate": { "maxSurge": 0, "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "checksum/config": "9c1da9d587c969666f111c0953bc5aa254e49555cfdd18dbb56b2805de7e56b6", "ignore-check.kube-linter.io/drop-net-raw-capability": "\"Vector runs requires access to socket.\"\n", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Minio post-jobs from chart require write access to filesystem.\"\n", "ignore-check.kube-linter.io/pdb-unhealthy-pod-eviction-policy": "\"Managed by upstream Loki chart (no value exposed for unhealthyPodEvictionPolicy).\"\n", "ignore-check.kube-linter.io/run-as-non-root": "\"Vector runs as Root and attach host Path.\"\n", "ignore-check.kube-linter.io/sensitive-host-mounts": "\"Vector runs requires certain host mounts to watch files being created by pods.\"\n", "ignore-check.kube-linter.io/unset-cpu-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "ignore-check.kube-linter.io/unset-memory-requirements": "\"Minio post-job containers from chart do not expose resource configuration options.\"\n", "kubectl.kubernetes.io/default-container": "query-scheduler" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "query-scheduler", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki", "app.kubernetes.io/part-of": "memberlist", "app.kubernetes.io/version": "3.7.1", "helm.sh/chart": "loki-12.0.0" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "query-scheduler", "app.kubernetes.io/instance": "loki", "app.kubernetes.io/name": "loki" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "-config.file=/etc/loki/config/config.yaml", "-target=query-scheduler", "-log.level=debug" ], "env": [ { "name": "GOMEMLIMIT", "value": "54MiB" }, { "name": "GOGC", "value": "80" } ], "image": "quay.io/kubearchive/loki:3.7.1", "imagePullPolicy": "IfNotPresent", "name": "query-scheduler", "ports": [ { "containerPort": 3100, "name": "http-metrics", "protocol": "TCP" }, { "containerPort": 9095, "name": "grpc", "protocol": "TCP" }, { "containerPort": 7946, "name": "http-memberlist", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": "http-metrics", "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "memory": "64Mi" }, "requests": { "cpu": "25m", "memory": "32Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/loki/config", "name": "config" }, { "mountPath": "/etc/loki/runtime-config", "name": "runtime-config" }, { "mountPath": "/var/loki", "name": "data" }, { "mountPath": "/tmp", "name": "temp" } ] } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": true, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 10001, "fsGroupChangePolicy": "OnRootMismatch", "runAsGroup": 10001, "runAsNonRoot": true, "runAsUser": 10001, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "loki", "serviceAccountName": "loki", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "temp" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "config.yaml", "path": "config.yaml" } ], "name": "loki" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "loki-runtime" }, "name": "runtime-config" }, { "emptyDir": {}, "name": "data" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:53:33Z", "lastUpdateTime": "2026-05-13T16:53:33Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:53:33Z", "lastUpdateTime": "2026-05-13T16:54:04Z", "message": "ReplicaSet \"loki-query-scheduler-6fcd86f79b\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "kubearchive-in-cluster-local:apps/Deployment:product-kubearchive/kubearchive-api-server", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"kubearchive-in-cluster-local:apps/Deployment:product-kubearchive/kubearchive-api-server\"},\"labels\":{\"app.kubernetes.io/component\":\"api-server\",\"app.kubernetes.io/name\":\"kubearchive-api-server\",\"app.kubernetes.io/part-of\":\"kubearchive\",\"app.kubernetes.io/version\":\"v1.21.4\"},\"name\":\"kubearchive-api-server\",\"namespace\":\"product-kubearchive\"},\"spec\":{\"replicas\":2,\"selector\":{\"matchLabels\":{\"app\":\"kubearchive-api-server\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"kubearchive-api-server\"}},\"spec\":{\"affinity\":{\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchLabels\":{\"app\":\"kubearchive-api-server\"}},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":50}]}},\"containers\":[{\"env\":[{\"name\":\"KUBEARCHIVE_OTEL_MODE\",\"value\":\"enabled\"},{\"name\":\"OTEL_EXPORTER_OTLP_ENDPOINT\",\"value\":\"http://otel-collector:4318\"},{\"name\":\"AUTH_IMPERSONATE\",\"value\":\"true\"},{\"name\":\"MIGRATION_VERSION\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"MIGRATION_VERSION\",\"name\":\"kubearchive-deployment-schema-version-hhfkfdkkcg\"}}},{\"name\":\"KUBEARCHIVE_ENABLE_PPROF\",\"value\":\"true\"},{\"name\":\"LOG_LEVEL\",\"value\":\"INFO\"},{\"name\":\"KLOG_LEVEL\",\"value\":\"0\"},{\"name\":\"GIN_MODE\",\"value\":\"release\"},{\"name\":\"KUBEARCHIVE_OTLP_SEND_LOGS\",\"value\":\"false\"},{\"name\":\"OTEL_GO_X_DEPRECATED_RUNTIME_METRICS\",\"value\":\"false\"},{\"name\":\"POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}},{\"name\":\"GOMEMLIMIT\",\"valueFrom\":{\"resourceFieldRef\":{\"resource\":\"limits.memory\"}}},{\"name\":\"GOMAXPROCS\",\"valueFrom\":{\"resourceFieldRef\":{\"resource\":\"limits.cpu\"}}},{\"name\":\"CACHE_EXPIRATION_AUTHORIZED\",\"value\":\"10m\"},{\"name\":\"CACHE_EXPIRATION_UNAUTHORIZED\",\"value\":\"1m\"},{\"name\":\"KUBEARCHIVE_LOGGING_DIR\",\"value\":\"/data/logging\"}],\"envFrom\":[{\"secretRef\":{\"name\":\"kubearchive-database-credentials\"}}],\"image\":\"quay.io/kubearchive/api:v1.21.4@sha256:b176b1651fe024ecd94207f690e727eb246f57436957115274647c2947494dc8\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/livez\",\"port\":8081,\"scheme\":\"HTTPS\"}},\"name\":\"kubearchive-api-server\",\"ports\":[{\"containerPort\":8081,\"name\":\"server\",\"protocol\":\"TCP\"},{\"containerPort\":8888,\"name\":\"pprof\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readyz\",\"port\":8081,\"scheme\":\"HTTPS\"}},\"resources\":{\"limits\":{\"cpu\":\"700m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"230Mi\"}},\"securityContext\":{\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true},\"volumeMounts\":[{\"mountPath\":\"/etc/kubearchive/ssl/\",\"name\":\"tls-secret\",\"readOnly\":true},{\"mountPath\":\"/data/logging\",\"name\":\"logging-config\"}]}],\"serviceAccountName\":\"kubearchive-api-server\",\"volumes\":[{\"name\":\"tls-secret\",\"secret\":{\"secretName\":\"kubearchive-api-server-tls\"}},{\"name\":\"logging-config\",\"projected\":{\"sources\":[{\"configMap\":{\"name\":\"kubearchive-logging-reader-fftdgkfc2g\"}},{\"secret\":{\"name\":\"kubearchive-logging\"}}]}}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:48:53Z", "generation": 1, "labels": { "app.kubernetes.io/component": "api-server", "app.kubernetes.io/name": "kubearchive-api-server", "app.kubernetes.io/part-of": "kubearchive", "app.kubernetes.io/version": "v1.21.4" }, "name": "kubearchive-api-server", "namespace": "product-kubearchive", "resourceVersion": "30077", "uid": "b81aea93-2048-452c-aa37-9046b212210f" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "kubearchive-api-server" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "kubearchive-api-server" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app": "kubearchive-api-server" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 50 } ] } }, "containers": [ { "env": [ { "name": "KUBEARCHIVE_OTEL_MODE", "value": "enabled" }, { "name": "OTEL_EXPORTER_OTLP_ENDPOINT", "value": "http://otel-collector:4318" }, { "name": "AUTH_IMPERSONATE", "value": "true" }, { "name": "MIGRATION_VERSION", "valueFrom": { "configMapKeyRef": { "key": "MIGRATION_VERSION", "name": "kubearchive-deployment-schema-version-hhfkfdkkcg" } } }, { "name": "KUBEARCHIVE_ENABLE_PPROF", "value": "true" }, { "name": "LOG_LEVEL", "value": "INFO" }, { "name": "KLOG_LEVEL", "value": "0" }, { "name": "GIN_MODE", "value": "release" }, { "name": "KUBEARCHIVE_OTLP_SEND_LOGS", "value": "false" }, { "name": "OTEL_GO_X_DEPRECATED_RUNTIME_METRICS", "value": "false" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "GOMEMLIMIT", "valueFrom": { "resourceFieldRef": { "divisor": "0", "resource": "limits.memory" } } }, { "name": "GOMAXPROCS", "valueFrom": { "resourceFieldRef": { "divisor": "0", "resource": "limits.cpu" } } }, { "name": "CACHE_EXPIRATION_AUTHORIZED", "value": "10m" }, { "name": "CACHE_EXPIRATION_UNAUTHORIZED", "value": "1m" }, { "name": "KUBEARCHIVE_LOGGING_DIR", "value": "/data/logging" } ], "envFrom": [ { "secretRef": { "name": "kubearchive-database-credentials" } } ], "image": "quay.io/kubearchive/api:v1.21.4@sha256:b176b1651fe024ecd94207f690e727eb246f57436957115274647c2947494dc8", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/livez", "port": 8081, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "kubearchive-api-server", "ports": [ { "containerPort": 8081, "name": "server", "protocol": "TCP" }, { "containerPort": 8888, "name": "pprof", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "700m", "memory": "512Mi" }, "requests": { "cpu": "200m", "memory": "230Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/kubearchive/ssl/", "name": "tls-secret", "readOnly": true }, { "mountPath": "/data/logging", "name": "logging-config" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kubearchive-api-server", "serviceAccountName": "kubearchive-api-server", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls-secret", "secret": { "defaultMode": 420, "secretName": "kubearchive-api-server-tls" } }, { "name": "logging-config", "projected": { "defaultMode": 420, "sources": [ { "configMap": { "name": "kubearchive-logging-reader-fftdgkfc2g" } }, { "secret": { "name": "kubearchive-logging" } } ] } } ] } } }, "status": { "availableReplicas": 2, "conditions": [ { "lastTransitionTime": "2026-05-13T16:48:59Z", "lastUpdateTime": "2026-05-13T16:48:59Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:48:53Z", "lastUpdateTime": "2026-05-13T16:48:59Z", "message": "ReplicaSet \"kubearchive-api-server-97b5fcdd\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 2, "replicas": 2, "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "kubearchive-in-cluster-local:apps/Deployment:product-kubearchive/kubearchive-operator", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"kubearchive-in-cluster-local:apps/Deployment:product-kubearchive/kubearchive-operator\"},\"labels\":{\"app.kubernetes.io/component\":\"operator\",\"app.kubernetes.io/name\":\"kubearchive-operator\",\"app.kubernetes.io/part-of\":\"kubearchive\",\"app.kubernetes.io/version\":\"v1.21.4\"},\"name\":\"kubearchive-operator\",\"namespace\":\"product-kubearchive\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"control-plane\":\"controller-manager\"}},\"template\":{\"metadata\":{\"annotations\":{\"kubectl.kubernetes.io/default-container\":\"manager\"},\"labels\":{\"control-plane\":\"controller-manager\"}},\"spec\":{\"containers\":[{\"args\":[\"--health-probe-bind-address=:8081\"],\"env\":[{\"name\":\"KUBEARCHIVE_OTEL_MODE\",\"value\":\"enabled\"},{\"name\":\"OTEL_EXPORTER_OTLP_ENDPOINT\",\"value\":\"http://otel-collector:4318\"},{\"name\":\"KUBEARCHIVE_ENABLE_PPROF\",\"value\":\"true\"},{\"name\":\"LOG_LEVEL\",\"value\":\"INFO\"},{\"name\":\"KLOG_LEVEL\",\"value\":\"0\"},{\"name\":\"KUBEARCHIVE_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"KUBEARCHIVE_OTLP_SEND_LOGS\",\"value\":\"false\"},{\"name\":\"OTEL_GO_X_DEPRECATED_RUNTIME_METRICS\",\"value\":\"false\"},{\"name\":\"POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}},{\"name\":\"GOMEMLIMIT\",\"valueFrom\":{\"resourceFieldRef\":{\"resource\":\"limits.memory\"}}},{\"name\":\"GOMAXPROCS\",\"valueFrom\":{\"resourceFieldRef\":{\"resource\":\"limits.cpu\"}}}],\"image\":\"quay.io/kubearchive/operator:v1.21.4@sha256:2beeaeb53a17056249b666e8f9bd67a9a237d3394a66a651cb5caca3f8ac4901\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8081},\"initialDelaySeconds\":15,\"periodSeconds\":20},\"name\":\"manager\",\"ports\":[{\"containerPort\":8081},{\"containerPort\":9443,\"name\":\"webhook-server\",\"protocol\":\"TCP\"},{\"containerPort\":8888,\"name\":\"pprof-server\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readyz\",\"port\":8081},\"initialDelaySeconds\":5,\"periodSeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"256Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"256Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true},\"volumeMounts\":[{\"mountPath\":\"/tmp/k8s-webhook-server/serving-certs\",\"name\":\"cert\",\"readOnly\":true},{\"mountPath\":\"/etc/kubearchive/config\",\"name\":\"operator-config\",\"readOnly\":true}]}],\"securityContext\":{\"runAsNonRoot\":true},\"serviceAccountName\":\"kubearchive-operator\",\"terminationGracePeriodSeconds\":10,\"volumes\":[{\"name\":\"cert\",\"secret\":{\"defaultMode\":420,\"secretName\":\"kubearchive-operator-tls\"}},{\"configMap\":{\"defaultMode\":420,\"name\":\"kubearchive-operator\"},\"name\":\"operator-config\"}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:48:53Z", "generation": 1, "labels": { "app.kubernetes.io/component": "operator", "app.kubernetes.io/name": "kubearchive-operator", "app.kubernetes.io/part-of": "kubearchive", "app.kubernetes.io/version": "v1.21.4" }, "name": "kubearchive-operator", "namespace": "product-kubearchive", "resourceVersion": "30238", "uid": "95d6d9a6-9389-4ca9-9ec5-1fd41c94d8c6" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "control-plane": "controller-manager" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager" } }, "spec": { "containers": [ { "args": [ "--health-probe-bind-address=:8081" ], "env": [ { "name": "KUBEARCHIVE_OTEL_MODE", "value": "enabled" }, { "name": "OTEL_EXPORTER_OTLP_ENDPOINT", "value": "http://otel-collector:4318" }, { "name": "KUBEARCHIVE_ENABLE_PPROF", "value": "true" }, { "name": "LOG_LEVEL", "value": "INFO" }, { "name": "KLOG_LEVEL", "value": "0" }, { "name": "KUBEARCHIVE_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "KUBEARCHIVE_OTLP_SEND_LOGS", "value": "false" }, { "name": "OTEL_GO_X_DEPRECATED_RUNTIME_METRICS", "value": "false" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "GOMEMLIMIT", "valueFrom": { "resourceFieldRef": { "divisor": "0", "resource": "limits.memory" } } }, { "name": "GOMAXPROCS", "valueFrom": { "resourceFieldRef": { "divisor": "0", "resource": "limits.cpu" } } } ], "image": "quay.io/kubearchive/operator:v1.21.4@sha256:2beeaeb53a17056249b666e8f9bd67a9a237d3394a66a651cb5caca3f8ac4901", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 8081, "protocol": "TCP" }, { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" }, { "containerPort": 8888, "name": "pprof-server", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "10m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "cert", "readOnly": true }, { "mountPath": "/etc/kubearchive/config", "name": "operator-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "kubearchive-operator", "serviceAccountName": "kubearchive-operator", "terminationGracePeriodSeconds": 10, "volumes": [ { "name": "cert", "secret": { "defaultMode": 420, "secretName": "kubearchive-operator-tls" } }, { "configMap": { "defaultMode": 420, "name": "kubearchive-operator" }, "name": "operator-config" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:49:04Z", "lastUpdateTime": "2026-05-13T16:49:04Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:48:53Z", "lastUpdateTime": "2026-05-13T16:49:04Z", "message": "ReplicaSet \"kubearchive-operator-5b6c47f45\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "kubearchive-in-cluster-local:apps/Deployment:product-kubearchive/kubearchive-sink", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"kubearchive-in-cluster-local:apps/Deployment:product-kubearchive/kubearchive-sink\"},\"labels\":{\"app.kubernetes.io/component\":\"sink\",\"app.kubernetes.io/name\":\"kubearchive-sink\",\"app.kubernetes.io/part-of\":\"kubearchive\",\"app.kubernetes.io/version\":\"v1.21.4\"},\"name\":\"kubearchive-sink\",\"namespace\":\"product-kubearchive\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"kubearchive-sink\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"kubearchive-sink\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"KUBEARCHIVE_OTEL_MODE\",\"value\":\"enabled\"},{\"name\":\"OTEL_EXPORTER_OTLP_ENDPOINT\",\"value\":\"http://otel-collector:4318\"},{\"name\":\"MIGRATION_VERSION\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"MIGRATION_VERSION\",\"name\":\"kubearchive-deployment-schema-version-hhfkfdkkcg\"}}},{\"name\":\"KUBEARCHIVE_ENABLE_PPROF\",\"value\":\"true\"},{\"name\":\"GIN_MODE\",\"value\":\"release\"},{\"name\":\"LOG_LEVEL\",\"value\":\"INFO\"},{\"name\":\"KLOG_LEVEL\",\"value\":\"0\"},{\"name\":\"KUBEARCHIVE_OTLP_SEND_LOGS\",\"value\":\"false\"},{\"name\":\"OTEL_GO_X_DEPRECATED_RUNTIME_METRICS\",\"value\":\"false\"},{\"name\":\"POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}},{\"name\":\"GOMEMLIMIT\",\"valueFrom\":{\"resourceFieldRef\":{\"resource\":\"limits.memory\"}}},{\"name\":\"GOMAXPROCS\",\"valueFrom\":{\"resourceFieldRef\":{\"resource\":\"limits.cpu\"}}},{\"name\":\"KUBEARCHIVE_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"KUBEARCHIVE_LOGGING_DIR\",\"value\":\"/data/logging\"}],\"envFrom\":[{\"secretRef\":{\"name\":\"kubearchive-database-credentials\"}}],\"image\":\"quay.io/kubearchive/sink:v1.21.4@sha256:3b6603fa0cdd9daf99142573a0cdddce3467cdd8d180fd795e465209584c14b0\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/livez\",\"port\":8080}},\"name\":\"kubearchive-sink\",\"ports\":[{\"containerPort\":8080,\"name\":\"sink\",\"protocol\":\"TCP\"},{\"containerPort\":8888,\"name\":\"pprof\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readyz\",\"port\":8080},\"timeoutSeconds\":4},\"resources\":{\"limits\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"200m\",\"memory\":\"128Mi\"}},\"securityContext\":{\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true},\"volumeMounts\":[{\"mountPath\":\"/data/logging\",\"name\":\"logging-config\"}]}],\"serviceAccountName\":\"kubearchive-sink\",\"volumes\":[{\"configMap\":{\"name\":\"kubearchive-logging-writer-29g6897ccf\"},\"name\":\"logging-config\"}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:48:54Z", "generation": 1, "labels": { "app.kubernetes.io/component": "sink", "app.kubernetes.io/name": "kubearchive-sink", "app.kubernetes.io/part-of": "kubearchive", "app.kubernetes.io/version": "v1.21.4" }, "name": "kubearchive-sink", "namespace": "product-kubearchive", "resourceVersion": "30072", "uid": "1bfef5ff-26dc-4d56-b5f2-7f6eed676f7d" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "kubearchive-sink" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "kubearchive-sink" } }, "spec": { "containers": [ { "env": [ { "name": "KUBEARCHIVE_OTEL_MODE", "value": "enabled" }, { "name": "OTEL_EXPORTER_OTLP_ENDPOINT", "value": "http://otel-collector:4318" }, { "name": "MIGRATION_VERSION", "valueFrom": { "configMapKeyRef": { "key": "MIGRATION_VERSION", "name": "kubearchive-deployment-schema-version-hhfkfdkkcg" } } }, { "name": "KUBEARCHIVE_ENABLE_PPROF", "value": "true" }, { "name": "GIN_MODE", "value": "release" }, { "name": "LOG_LEVEL", "value": "INFO" }, { "name": "KLOG_LEVEL", "value": "0" }, { "name": "KUBEARCHIVE_OTLP_SEND_LOGS", "value": "false" }, { "name": "OTEL_GO_X_DEPRECATED_RUNTIME_METRICS", "value": "false" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "GOMEMLIMIT", "valueFrom": { "resourceFieldRef": { "divisor": "0", "resource": "limits.memory" } } }, { "name": "GOMAXPROCS", "valueFrom": { "resourceFieldRef": { "divisor": "0", "resource": "limits.cpu" } } }, { "name": "KUBEARCHIVE_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "KUBEARCHIVE_LOGGING_DIR", "value": "/data/logging" } ], "envFrom": [ { "secretRef": { "name": "kubearchive-database-credentials" } } ], "image": "quay.io/kubearchive/sink:v1.21.4@sha256:3b6603fa0cdd9daf99142573a0cdddce3467cdd8d180fd795e465209584c14b0", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/livez", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "kubearchive-sink", "ports": [ { "containerPort": 8080, "name": "sink", "protocol": "TCP" }, { "containerPort": 8888, "name": "pprof", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 4 }, "resources": { "limits": { "cpu": "200m", "memory": "128Mi" }, "requests": { "cpu": "200m", "memory": "128Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/data/logging", "name": "logging-config" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kubearchive-sink", "serviceAccountName": "kubearchive-sink", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "kubearchive-logging-writer-29g6897ccf" }, "name": "logging-config" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:48:59Z", "lastUpdateTime": "2026-05-13T16:48:59Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:48:54Z", "lastUpdateTime": "2026-05-13T16:48:59Z", "message": "ReplicaSet \"kubearchive-sink-55f7dc486\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "kubearchive-in-cluster-local:apps/Deployment:product-kubearchive/otel-collector", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"kubearchive-in-cluster-local:apps/Deployment:product-kubearchive/otel-collector\"},\"labels\":{\"app\":\"otel-collector\"},\"name\":\"otel-collector\",\"namespace\":\"product-kubearchive\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"otel-collector\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"otel-collector\"}},\"spec\":{\"containers\":[{\"command\":[\"/otelcol\",\"--config=/conf/otel-collector-config.yaml\"],\"image\":\"quay.io/kubearchive/opentelemetry-collector@sha256:b17fec48359d78477cfdeb758bb5d71c86ef70e08a6b3944d70d038352211d03\",\"name\":\"otel-collector\",\"ports\":[{\"containerPort\":4318}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"200Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"200Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true},\"volumeMounts\":[{\"mountPath\":\"/conf\",\"name\":\"otel-collector-conf\"}]},{\"args\":[\"--secure-listen-address=0.0.0.0:8443\",\"--upstream=http://127.0.0.1:9090/\",\"--logtostderr=true\",\"--v=10\"],\"image\":\"registry.redhat.io/openshift4/ose-kube-rbac-proxy:v4.15\",\"name\":\"kube-rbac-proxy\",\"ports\":[{\"containerPort\":8443,\"name\":\"https\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"200Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"200Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true}}],\"serviceAccountName\":\"kubearchive-otel-collector\",\"volumes\":[{\"configMap\":{\"name\":\"otel-collector-conf-h2c78fc5d4\"},\"name\":\"otel-collector-conf\"}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:48:53Z", "generation": 1, "labels": { "app": "otel-collector" }, "name": "otel-collector", "namespace": "product-kubearchive", "resourceVersion": "30244", "uid": "b0b3d46c-6e45-472a-a864-8384ce60b708" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "otel-collector" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "otel-collector" } }, "spec": { "containers": [ { "command": [ "/otelcol", "--config=/conf/otel-collector-config.yaml" ], "image": "quay.io/kubearchive/opentelemetry-collector@sha256:b17fec48359d78477cfdeb758bb5d71c86ef70e08a6b3944d70d038352211d03", "imagePullPolicy": "IfNotPresent", "name": "otel-collector", "ports": [ { "containerPort": 4318, "protocol": "TCP" } ], "resources": { "limits": { "cpu": "100m", "memory": "200Mi" }, "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/conf", "name": "otel-collector-conf" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:8443", "--upstream=http://127.0.0.1:9090/", "--logtostderr=true", "--v=10" ], "image": "registry.redhat.io/openshift4/ose-kube-rbac-proxy:v4.15", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "100m", "memory": "200Mi" }, "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kubearchive-otel-collector", "serviceAccountName": "kubearchive-otel-collector", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "otel-collector-conf-h2c78fc5d4" }, "name": "otel-collector-conf" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:49:04Z", "lastUpdateTime": "2026-05-13T16:49:04Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:48:54Z", "lastUpdateTime": "2026-05-13T16:49:04Z", "message": "ReplicaSet \"otel-collector-645cbbd9b\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/sync-wave": "-2", "argocd.argoproj.io/tracking-id": "kubearchive-in-cluster-local:apps/Deployment:product-kubearchive/postgresql", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/no-read-only-root-fs": "\"Postgres requires to write on root fs,\n ignoring this one as this is only used in development environment\"\n", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-wave\":\"-2\",\"argocd.argoproj.io/tracking-id\":\"kubearchive-in-cluster-local:apps/Deployment:product-kubearchive/postgresql\",\"ignore-check.kube-linter.io/no-read-only-root-fs\":\"\\\"Postgres requires to write on root fs,\\n ignoring this one as this is only used in development environment\\\"\\n\"},\"labels\":{\"app\":\"postgresql\"},\"name\":\"postgresql\",\"namespace\":\"product-kubearchive\"},\"spec\":{\"selector\":{\"matchLabels\":{\"app\":\"postgresql\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"postgresql\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"POSTGRESQL_DATABASE\",\"value\":\"kubearchive\"},{\"name\":\"POSTGRESQL_USERNAME\",\"value\":\"kubearchive\"},{\"name\":\"POSTGRESQL_PASSWORD\",\"value\":\"password\"},{\"name\":\"POSTGRESQL_REPLICATION_USE_PASSFILE\",\"value\":\"no\"},{\"name\":\"POSTGRESQL_ENABLE_TLS\",\"value\":\"yes\"},{\"name\":\"POSTGRESQL_TLS_CERT_FILE\",\"value\":\"/mount/ssl-postgres/tls.crt\"},{\"name\":\"POSTGRESQL_TLS_KEY_FILE\",\"value\":\"/mount/ssl-postgres/tls.key\"}],\"image\":\"quay.io/kubearchive/postgresql:16.6.0\",\"name\":\"postgresql\",\"ports\":[{\"containerPort\":5432}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"100Mi\"}},\"securityContext\":{\"readOnlyRootFilesystem\":false,\"runAsNonRoot\":true},\"volumeMounts\":[{\"mountPath\":\"/mount/ssl-postgres/\",\"name\":\"ssl\"}]}],\"volumes\":[{\"name\":\"ssl\",\"secret\":{\"defaultMode\":384,\"secretName\":\"postgresql-tls\"}}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:47:21Z", "generation": 1, "labels": { "app": "postgresql" }, "name": "postgresql", "namespace": "product-kubearchive", "resourceVersion": "22948", "uid": "89d43056-3b34-46a6-b0ab-77b91154d6b3" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "postgresql" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "postgresql" } }, "spec": { "containers": [ { "env": [ { "name": "POSTGRESQL_DATABASE", "value": "kubearchive" }, { "name": "POSTGRESQL_USERNAME", "value": "kubearchive" }, { "name": "POSTGRESQL_PASSWORD", "value": "password" }, { "name": "POSTGRESQL_REPLICATION_USE_PASSFILE", "value": "no" }, { "name": "POSTGRESQL_ENABLE_TLS", "value": "yes" }, { "name": "POSTGRESQL_TLS_CERT_FILE", "value": "/mount/ssl-postgres/tls.crt" }, { "name": "POSTGRESQL_TLS_KEY_FILE", "value": "/mount/ssl-postgres/tls.key" } ], "image": "quay.io/kubearchive/postgresql:16.6.0", "imagePullPolicy": "IfNotPresent", "name": "postgresql", "ports": [ { "containerPort": 5432, "protocol": "TCP" } ], "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "50m", "memory": "100Mi" } }, "securityContext": { "readOnlyRootFilesystem": false, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/mount/ssl-postgres/", "name": "ssl" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "ssl", "secret": { "defaultMode": 384, "secretName": "postgresql-tls" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:47:27Z", "lastUpdateTime": "2026-05-13T16:47:27Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:21Z", "lastUpdateTime": "2026-05-13T16:47:27Z", "message": "ReplicaSet \"postgresql-657c8d5447\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "project-controller-in-cluster-local:apps/Deployment:project-controller/project-controller-controller-manager", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"project-controller-in-cluster-local:apps/Deployment:project-controller/project-controller-controller-manager\"},\"labels\":{\"app.kubernetes.io/component\":\"manager\",\"app.kubernetes.io/created-by\":\"project-controller\",\"app.kubernetes.io/instance\":\"controller-manager\",\"app.kubernetes.io/managed-by\":\"kustomize\",\"app.kubernetes.io/name\":\"deployment\",\"app.kubernetes.io/part-of\":\"project-controller\",\"control-plane\":\"controller-manager\"},\"name\":\"project-controller-controller-manager\",\"namespace\":\"project-controller\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"control-plane\":\"controller-manager\"}},\"template\":{\"metadata\":{\"annotations\":{\"kubectl.kubernetes.io/default-container\":\"manager\"},\"labels\":{\"control-plane\":\"controller-manager\"}},\"spec\":{\"containers\":[{\"args\":[\"--metrics-bind-address=:8443\",\"--leader-elect=false\",\"--health-probe-bind-address=:8081\",\"--metrics-secure=true\"],\"command\":[\"/manager\"],\"image\":\"quay.io/konflux-ci/project-controller:a363382369ec76bba26a6d508e1d3ae9f33508a1\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8081},\"initialDelaySeconds\":15,\"periodSeconds\":20},\"name\":\"manager\",\"readinessProbe\":{\"httpGet\":{\"path\":\"/readyz\",\"port\":8081},\"initialDelaySeconds\":5,\"periodSeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"64Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true}}],\"securityContext\":{\"runAsNonRoot\":true},\"serviceAccountName\":\"project-controller-controller-manager\",\"terminationGracePeriodSeconds\":10}}}}\n" }, "creationTimestamp": "2026-05-13T16:47:55Z", "generation": 1, "labels": { "app.kubernetes.io/component": "manager", "app.kubernetes.io/created-by": "project-controller", "app.kubernetes.io/instance": "controller-manager", "app.kubernetes.io/managed-by": "kustomize", "app.kubernetes.io/name": "deployment", "app.kubernetes.io/part-of": "project-controller", "control-plane": "controller-manager" }, "name": "project-controller-controller-manager", "namespace": "project-controller", "resourceVersion": "26622", "uid": "b496e8f8-cc89-4b3b-bc87-b6521269becb" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "control-plane": "controller-manager" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8443", "--leader-elect=false", "--health-probe-bind-address=:8081", "--metrics-secure=true" ], "command": [ "/manager" ], "image": "quay.io/konflux-ci/project-controller:a363382369ec76bba26a6d508e1d3ae9f33508a1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "project-controller-controller-manager", "serviceAccountName": "project-controller-controller-manager", "terminationGracePeriodSeconds": 10 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:48:05Z", "lastUpdateTime": "2026-05-13T16:48:05Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:55Z", "lastUpdateTime": "2026-05-13T16:48:05Z", "message": "ReplicaSet \"project-controller-controller-manager-5495f8bb47\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "release-in-cluster-local:apps/Deployment:release-service/release-service-controller-manager", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:47:55Z", "generation": 1, "labels": { "control-plane": "controller-manager" }, "name": "release-service-controller-manager", "namespace": "release-service", "resourceVersion": "36325", "uid": "9cfc02a4-1588-49da-b911-1f9bfd8f9e66" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "control-plane": "controller-manager" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8080", "--leader-elect=false" ], "command": [ "/manager" ], "env": [ { "name": "DEFAULT_RELEASE_PVC", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_RELEASE_PVC", "name": "release-service-manager-properties", "optional": true } } }, { "name": "DEFAULT_RELEASE_WORKSPACE_NAME", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_RELEASE_WORKSPACE_NAME", "name": "release-service-manager-properties", "optional": true } } }, { "name": "DEFAULT_RELEASE_WORKSPACE_SIZE", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_RELEASE_WORKSPACE_SIZE", "name": "release-service-manager-properties", "optional": true } } }, { "name": "MAX_CONCURRENT_RECONCILES", "value": "10" }, { "name": "SERVICE_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/konflux-ci/release-service:98f4196defe6e8cc3addb22af44b07cd6ba6cec1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "release-service-controller-manager", "serviceAccountName": "release-service-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "name": "cert", "secret": { "defaultMode": 420, "secretName": "webhook-server-cert" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:51:17Z", "lastUpdateTime": "2026-05-13T16:51:17Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:55Z", "lastUpdateTime": "2026-05-13T16:51:17Z", "message": "ReplicaSet \"release-service-controller-manager-5b88846b9b\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "release-in-cluster-local:apps/Deployment:release-service/release-service-monitor-deployment", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:47:55Z", "generation": 1, "name": "release-service-monitor-deployment", "namespace": "release-service", "resourceVersion": "26284", "uid": "a29a1f84-3d47-47dd-bc75-a6dbb9240862" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "release-service-monitor-app" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "release-service-monitor-app" } }, "spec": { "containers": [ { "command": [ "/bin/metrics-server", "/config/server-config.yaml" ], "env": [ { "name": "HOME", "value": "/var/tmp" }, { "name": "TMPDIR", "value": "/var/tmp" } ], "image": "quay.io/konflux-ci/release-service-monitor:0449d84724bf06c663b61ef4775b9f9d497153c1", "imagePullPolicy": "IfNotPresent", "name": "release-service-monitor", "ports": [ { "containerPort": 8080, "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "512Mi" }, "requests": { "cpu": "10m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/config", "name": "config", "readOnly": true }, { "mountPath": "/var/tmp", "name": "temp-directory" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "server-config.yaml", "path": "server-config.yaml" } ], "name": "release-service-monitor-config" }, "name": "config" }, { "emptyDir": {}, "name": "temp-directory" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:48:01Z", "lastUpdateTime": "2026-05-13T16:48:01Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:47:55Z", "lastUpdateTime": "2026-05-13T16:48:01Z", "message": "ReplicaSet \"release-service-monitor-deployment-7d74c47786\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "smee-client-in-cluster-local:apps/Deployment:smee-client/gosmee-client", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"smee-client-in-cluster-local:apps/Deployment:smee-client/gosmee-client\"},\"name\":\"gosmee-client\",\"namespace\":\"smee-client\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"gosmee-client\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"gosmee-client\"}},\"spec\":{\"containers\":[{\"args\":[\"client\",\"--sse-buffer-size\",\"2097152\",\"https://hook.pipelinesascode.com/FMPGBULUKAyF\",\"http://localhost:8080\"],\"image\":\"ghcr.io/chmouel/gosmee:v0.28.0\",\"imagePullPolicy\":\"Always\",\"livenessProbe\":{\"exec\":{\"command\":[\"/shared/check-smee-health.sh\"]},\"failureThreshold\":4,\"initialDelaySeconds\":30,\"periodSeconds\":30,\"timeoutSeconds\":25},\"name\":\"gosmee\",\"resources\":{\"limits\":{\"cpu\":1,\"memory\":\"750Mi\"},\"requests\":{\"cpu\":1,\"memory\":\"750Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"volumeMounts\":[{\"mountPath\":\"/shared\",\"name\":\"shared-health\"}]},{\"env\":[{\"name\":\"DOWNSTREAM_SERVICE_URL\",\"value\":\"http://pipelines-as-code-controller.openshift-pipelines:8080\"},{\"name\":\"SMEE_CHANNEL_URL\",\"value\":\"https://hook.pipelinesascode.com/FMPGBULUKAyF\"},{\"name\":\"HEALTH_CHECK_TIMEOUT_SECONDS\",\"value\":\"20\"}],\"image\":\"quay.io/konflux-ci/smee-sidecar:ff9f8ccd3cedaf21827ac2ef86c49847c970bab9\",\"imagePullPolicy\":\"Always\",\"livenessProbe\":{\"exec\":{\"command\":[\"/shared/check-sidecar-health.sh\"]},\"failureThreshold\":3,\"initialDelaySeconds\":30,\"periodSeconds\":30,\"timeoutSeconds\":25},\"name\":\"health-check-sidecar\",\"ports\":[{\"containerPort\":8080,\"name\":\"http\"},{\"containerPort\":9100,\"name\":\"metrics\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"volumeMounts\":[{\"mountPath\":\"/shared\",\"name\":\"shared-health\"}]}],\"volumes\":[{\"emptyDir\":{},\"name\":\"shared-health\"}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:48:01Z", "generation": 1, "name": "gosmee-client", "namespace": "smee-client", "resourceVersion": "27061", "uid": "19ead529-5df7-41e4-a906-567d083d2943" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "gosmee-client" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "gosmee-client" } }, "spec": { "containers": [ { "args": [ "client", "--sse-buffer-size", "2097152", "https://hook.pipelinesascode.com/FMPGBULUKAyF", "http://localhost:8080" ], "image": "ghcr.io/chmouel/gosmee:v0.28.0", "imagePullPolicy": "Always", "livenessProbe": { "exec": { "command": [ "/shared/check-smee-health.sh" ] }, "failureThreshold": 4, "initialDelaySeconds": 30, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 25 }, "name": "gosmee", "resources": { "limits": { "cpu": "1", "memory": "750Mi" }, "requests": { "cpu": "1", "memory": "750Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "shared-health" } ] }, { "env": [ { "name": "DOWNSTREAM_SERVICE_URL", "value": "http://pipelines-as-code-controller.openshift-pipelines:8080" }, { "name": "SMEE_CHANNEL_URL", "value": "https://hook.pipelinesascode.com/FMPGBULUKAyF" }, { "name": "HEALTH_CHECK_TIMEOUT_SECONDS", "value": "20" } ], "image": "quay.io/konflux-ci/smee-sidecar:ff9f8ccd3cedaf21827ac2ef86c49847c970bab9", "imagePullPolicy": "Always", "livenessProbe": { "exec": { "command": [ "/shared/check-sidecar-health.sh" ] }, "failureThreshold": 3, "initialDelaySeconds": 30, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 25 }, "name": "health-check-sidecar", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" }, { "containerPort": 9100, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "100m", "memory": "128Mi" }, "requests": { "cpu": "100m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "shared-health" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "shared-health" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:48:14Z", "lastUpdateTime": "2026-05-13T16:48:14Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:48:01Z", "lastUpdateTime": "2026-05-13T16:48:14Z", "message": "ReplicaSet \"gosmee-client-6bf7995fb8\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/sync-wave": "10", "argocd.argoproj.io/tracking-id": "kueue-in-cluster-local:apps/Deployment:tekton-kueue/tekton-kueue-controller-manager", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/sync-wave\":\"10\",\"argocd.argoproj.io/tracking-id\":\"kueue-in-cluster-local:apps/Deployment:tekton-kueue/tekton-kueue-controller-manager\"},\"labels\":{\"app.kubernetes.io/managed-by\":\"kustomize\",\"app.kubernetes.io/name\":\"tekton-kueue\",\"control-plane\":\"controller-manager\"},\"name\":\"tekton-kueue-controller-manager\",\"namespace\":\"tekton-kueue\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/name\":\"tekton-kueue\",\"control-plane\":\"controller-manager\"}},\"template\":{\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/sync-wave\":\"10\",\"kubectl.kubernetes.io/default-container\":\"manager\"},\"labels\":{\"app.kubernetes.io/name\":\"tekton-kueue\",\"control-plane\":\"controller-manager\"}},\"spec\":{\"containers\":[{\"args\":[\"controller\",\"--leader-elect\",\"--health-probe-bind-address=:8081\",\"--metrics-bind-address=:8443\",\"--metrics-cert-path=/tmp/k8s-metrics-server/metrics-certs\"],\"command\":[\"/manager\"],\"image\":\"quay.io/konflux-ci/tekton-kueue:cec0b3c8a240a289bb7aff4313ea647b292d96cc\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8081},\"initialDelaySeconds\":15,\"periodSeconds\":20},\"name\":\"manager\",\"ports\":[{\"containerPort\":8443,\"name\":\"metrics-server\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readyz\",\"port\":8081},\"initialDelaySeconds\":5,\"periodSeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"64Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true},\"volumeMounts\":[{\"mountPath\":\"/tmp/k8s-metrics-server/metrics-certs\",\"name\":\"metrics-certs\",\"readOnly\":true}]}],\"securityContext\":{\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"tekton-kueue-controller-manager\",\"terminationGracePeriodSeconds\":10,\"volumes\":[{\"name\":\"metrics-certs\",\"secret\":{\"items\":[{\"key\":\"ca.crt\",\"path\":\"ca.crt\"},{\"key\":\"tls.crt\",\"path\":\"tls.crt\"},{\"key\":\"tls.key\",\"path\":\"tls.key\"}],\"optional\":false,\"secretName\":\"controller-manager-metrics-server-cert\"}}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:51:59Z", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "kustomize", "app.kubernetes.io/name": "tekton-kueue", "control-plane": "controller-manager" }, "name": "tekton-kueue-controller-manager", "namespace": "tekton-kueue", "resourceVersion": "180812", "uid": "5953ebc8-8c44-4306-b27a-40379ac1aeac" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-kueue", "control-plane": "controller-manager" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/sync-wave": "10", "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "tekton-kueue", "control-plane": "controller-manager" } }, "spec": { "containers": [ { "args": [ "controller", "--leader-elect", "--health-probe-bind-address=:8081", "--metrics-bind-address=:8443", "--metrics-cert-path=/tmp/k8s-metrics-server/metrics-certs" ], "command": [ "/manager" ], "image": "quay.io/konflux-ci/tekton-kueue:cec0b3c8a240a289bb7aff4313ea647b292d96cc", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 8443, "name": "metrics-server", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp/k8s-metrics-server/metrics-certs", "name": "metrics-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-kueue-controller-manager", "serviceAccountName": "tekton-kueue-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "name": "metrics-certs", "secret": { "defaultMode": 420, "items": [ { "key": "ca.crt", "path": "ca.crt" }, { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "optional": false, "secretName": "controller-manager-metrics-server-cert" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:51:59Z", "lastUpdateTime": "2026-05-13T16:52:11Z", "message": "ReplicaSet \"tekton-kueue-controller-manager-7c9546d88\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-05-13T18:26:32Z", "lastUpdateTime": "2026-05-13T18:26:32Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/sync-wave": "10", "argocd.argoproj.io/tracking-id": "kueue-in-cluster-local:apps/Deployment:tekton-kueue/tekton-kueue-webhook", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/sync-wave\":\"10\",\"argocd.argoproj.io/tracking-id\":\"kueue-in-cluster-local:apps/Deployment:tekton-kueue/tekton-kueue-webhook\"},\"labels\":{\"app.kubernetes.io/managed-by\":\"kustomize\",\"app.kubernetes.io/name\":\"tekton-kueue-webhook\",\"control-plane\":\"controller-manager\"},\"name\":\"tekton-kueue-webhook\",\"namespace\":\"tekton-kueue\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/name\":\"tekton-kueue-webhook\",\"control-plane\":\"controller-manager\"}},\"template\":{\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/sync-wave\":\"10\",\"kubectl.kubernetes.io/default-container\":\"webhook\"},\"labels\":{\"app.kubernetes.io/name\":\"tekton-kueue-webhook\",\"control-plane\":\"controller-manager\"}},\"spec\":{\"containers\":[{\"args\":[\"webhook\",\"--health-probe-bind-address=:8081\",\"--webhook-cert-path=/tmp/k8s-webhook-server/serving-certs\",\"--metrics-bind-address=:8443\",\"--metrics-cert-path=/tmp/k8s-metrics-server/metrics-certs\"],\"command\":[\"/manager\"],\"image\":\"quay.io/konflux-ci/tekton-kueue:cec0b3c8a240a289bb7aff4313ea647b292d96cc\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8081},\"initialDelaySeconds\":15,\"periodSeconds\":20},\"name\":\"webhook\",\"ports\":[{\"containerPort\":9443,\"name\":\"webhook-server\",\"protocol\":\"TCP\"},{\"containerPort\":8443,\"name\":\"metrics-server\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readyz\",\"port\":8081},\"initialDelaySeconds\":5,\"periodSeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"64Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true},\"volumeMounts\":[{\"mountPath\":\"/tmp/k8s-webhook-server/serving-certs\",\"name\":\"webhook-certs\",\"readOnly\":true},{\"mountPath\":\"/tmp/k8s-metrics-server/metrics-certs\",\"name\":\"metrics-certs\",\"readOnly\":true}]}],\"securityContext\":{\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"tekton-kueue-webhook\",\"terminationGracePeriodSeconds\":10,\"volumes\":[{\"name\":\"webhook-certs\",\"secret\":{\"secretName\":\"webhook-server-cert\"}},{\"name\":\"metrics-certs\",\"secret\":{\"items\":[{\"key\":\"ca.crt\",\"path\":\"ca.crt\"},{\"key\":\"tls.crt\",\"path\":\"tls.crt\"},{\"key\":\"tls.key\",\"path\":\"tls.key\"}],\"optional\":false,\"secretName\":\"webhook-metrics-server-cert\"}}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:51:59Z", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "kustomize", "app.kubernetes.io/name": "tekton-kueue-webhook", "control-plane": "controller-manager" }, "name": "tekton-kueue-webhook", "namespace": "tekton-kueue", "resourceVersion": "38403", "uid": "2e62e5d8-b307-4897-906c-c258c746d34e" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-kueue-webhook", "control-plane": "controller-manager" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/sync-wave": "10", "kubectl.kubernetes.io/default-container": "webhook" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "tekton-kueue-webhook", "control-plane": "controller-manager" } }, "spec": { "containers": [ { "args": [ "webhook", "--health-probe-bind-address=:8081", "--webhook-cert-path=/tmp/k8s-webhook-server/serving-certs", "--metrics-bind-address=:8443", "--metrics-cert-path=/tmp/k8s-metrics-server/metrics-certs" ], "command": [ "/manager" ], "image": "quay.io/konflux-ci/tekton-kueue:cec0b3c8a240a289bb7aff4313ea647b292d96cc", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "webhook", "ports": [ { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" }, { "containerPort": 8443, "name": "metrics-server", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "webhook-certs", "readOnly": true }, { "mountPath": "/tmp/k8s-metrics-server/metrics-certs", "name": "metrics-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-kueue-webhook", "serviceAccountName": "tekton-kueue-webhook", "terminationGracePeriodSeconds": 10, "volumes": [ { "name": "webhook-certs", "secret": { "defaultMode": 420, "secretName": "webhook-server-cert" } }, { "name": "metrics-certs", "secret": { "defaultMode": 420, "items": [ { "key": "ca.crt", "path": "ca.crt" }, { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "optional": false, "secretName": "webhook-metrics-server-cert" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:52:13Z", "lastUpdateTime": "2026-05-13T16:52:13Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:51:59Z", "lastUpdateTime": "2026-05-13T16:52:13Z", "message": "ReplicaSet \"tekton-kueue-webhook-7d7897c9bb\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/sync-wave": "0", "argocd.argoproj.io/tracking-id": "pipeline-service-in-cluster-local:apps/Deployment:tekton-results/tekton-results-api", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/sync-wave\":\"0\",\"argocd.argoproj.io/tracking-id\":\"pipeline-service-in-cluster-local:apps/Deployment:tekton-results/tekton-results-api\"},\"labels\":{\"app.kubernetes.io/name\":\"tekton-results-api\",\"app.kubernetes.io/part-of\":\"tekton-results\",\"app.kubernetes.io/version\":\"devel\"},\"name\":\"tekton-results-api\",\"namespace\":\"tekton-results\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/name\":\"tekton-results-api\"}},\"template\":{\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"cluster-autoscaler.kubernetes.io/safe-to-evict\":\"false\"},\"labels\":{\"app.kubernetes.io/name\":\"tekton-results-api\",\"app.kubernetes.io/version\":\"devel\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"kubernetes.io/os\",\"operator\":\"NotIn\",\"values\":[\"windows\"]}]}]}},\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchLabels\":{\"app.kubernetes.io/name\":\"tekton-results-api\"}},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"env\":[{\"name\":\"LOGS_API\",\"value\":\"true\"},{\"name\":\"LOGS_TYPE\",\"value\":\"blob\"},{\"name\":\"S3_HOSTNAME_IMMUTABLE\",\"value\":\"true\"},{\"name\":\"AWS_ACCESS_KEY_ID\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"aws_access_key_id\",\"name\":\"tekton-results-s3\"}}},{\"name\":\"AWS_SECRET_ACCESS_KEY\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"aws_secret_access_key\",\"name\":\"tekton-results-s3\"}}},{\"name\":\"AWS_REGION\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"aws_region\",\"name\":\"tekton-results-s3\"}}},{\"name\":\"S3_BUCKET_NAME\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"bucket\",\"name\":\"tekton-results-s3\"}}},{\"name\":\"AWS_ENDPOINT_URL\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"endpoint\",\"name\":\"tekton-results-s3\"}}},{\"name\":\"DB_USER\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"db.user\",\"name\":\"tekton-results-database\"}}},{\"name\":\"DB_PASSWORD\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"db.password\",\"name\":\"tekton-results-database\"}}},{\"name\":\"DB_HOST\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"db.host\",\"name\":\"tekton-results-database\"}}},{\"name\":\"DB_NAME\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"db.name\",\"name\":\"tekton-results-database\"}}}],\"image\":\"quay.io/konflux-ci/tekton-results-api:99db802a56c3d62e823e162feee9811e55ed1f5b\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTPS\"},\"initialDelaySeconds\":5,\"periodSeconds\":10},\"name\":\"api\",\"readinessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTPS\"},\"initialDelaySeconds\":5,\"periodSeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"512Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"startupProbe\":{\"failureThreshold\":10,\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTPS\"},\"initialDelaySeconds\":5,\"periodSeconds\":10},\"volumeMounts\":[{\"mountPath\":\"/etc/ssl/certs/s3-cert.crt\",\"name\":\"ca-s3\",\"subPath\":\"s3-cert.crt\"},{\"mountPath\":\"/etc/tls/db\",\"name\":\"db-tls-ca\",\"readOnly\":true},{\"mountPath\":\"/etc/tekton/results\",\"name\":\"config\",\"readOnly\":true},{\"mountPath\":\"/etc/tls\",\"name\":\"tls\",\"readOnly\":true}]},{\"args\":[\"--secure-listen-address=0.0.0.0:9443\",\"--upstream=http://127.0.0.1:9090/\",\"--logtostderr=true\",\"--v=6\"],\"image\":\"registry.redhat.io/openshift4/ose-kube-rbac-proxy:v4.12\",\"name\":\"kube-rbac-proxy\",\"ports\":[{\"containerPort\":9443,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"5m\",\"memory\":\"64Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}}}],\"initContainers\":[{\"args\":[\"-c\",\"mc --config-dir /tmp config host add minio \\\"$S3_ENDPOINT\\\" \\\"$S3_ACCESS_KEY_ID\\\" \\\"$S3_SECRET_ACCESS_KEY\\\" \\u0026\\u0026\\nif [ -z \\\"$(mc --config-dir /tmp ls minio | grep \\\"$S3_BUCKET_NAME\\\")\\\" ]; then\\n mc --config-dir /tmp mb --with-lock --region \\\"$S3_REGION\\\" minio/\\\"$S3_BUCKET_NAME\\\" \\u0026\\u0026\\n echo \\\"Minio bucket $S3_BUCKET_NAME successfully created.\\\"\\nfi\\n\"],\"command\":[\"/bin/bash\"],\"env\":[{\"name\":\"S3_ACCESS_KEY_ID\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"aws_access_key_id\",\"name\":\"tekton-results-s3\"}}},{\"name\":\"S3_SECRET_ACCESS_KEY\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"aws_secret_access_key\",\"name\":\"tekton-results-s3\"}}},{\"name\":\"S3_REGION\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"aws_region\",\"name\":\"tekton-results-s3\"}}},{\"name\":\"S3_BUCKET_NAME\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"bucket\",\"name\":\"tekton-results-s3\"}}},{\"name\":\"S3_ENDPOINT\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"endpoint\",\"name\":\"tekton-results-s3\"}}}],\"image\":\"quay.io/minio/mc:RELEASE.2023-01-28T20-29-38Z\",\"imagePullPolicy\":\"Always\",\"name\":\"mc\",\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"5m\",\"memory\":\"32Mi\"}},\"securityContext\":{\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true},\"volumeMounts\":[{\"mountPath\":\"/etc/ssl/certs/s3-cert.crt\",\"name\":\"ca-s3\",\"subPath\":\"s3-cert.crt\"},{\"mountPath\":\"/tmp\",\"name\":\"tmp-mc-volume\"}]}],\"serviceAccountName\":\"tekton-results-api\",\"volumes\":[{\"name\":\"ca-s3\",\"secret\":{\"items\":[{\"key\":\"public.crt\",\"path\":\"s3-cert.crt\"}],\"secretName\":\"storage-tls\"}},{\"emptyDir\":{},\"name\":\"tmp-mc-volume\"},{\"configMap\":{\"name\":\"rds-root-crt\"},\"name\":\"db-tls-ca\"},{\"configMap\":{\"name\":\"tekton-results-api-config\"},\"name\":\"config\"},{\"name\":\"tls\",\"secret\":{\"secretName\":\"tekton-results-tls\"}}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:49:15Z", "generation": 1, "labels": { "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/part-of": "tekton-results", "app.kubernetes.io/version": "devel" }, "name": "tekton-results-api", "namespace": "tekton-results", "resourceVersion": "34876", "uid": "cb31ea57-c866-4a3e-8d2f-876dd9dc914b" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-api" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "devel" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-api" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "LOGS_API", "value": "true" }, { "name": "LOGS_TYPE", "value": "blob" }, { "name": "S3_HOSTNAME_IMMUTABLE", "value": "true" }, { "name": "AWS_ACCESS_KEY_ID", "valueFrom": { "secretKeyRef": { "key": "aws_access_key_id", "name": "tekton-results-s3" } } }, { "name": "AWS_SECRET_ACCESS_KEY", "valueFrom": { "secretKeyRef": { "key": "aws_secret_access_key", "name": "tekton-results-s3" } } }, { "name": "AWS_REGION", "valueFrom": { "secretKeyRef": { "key": "aws_region", "name": "tekton-results-s3" } } }, { "name": "S3_BUCKET_NAME", "valueFrom": { "secretKeyRef": { "key": "bucket", "name": "tekton-results-s3" } } }, { "name": "AWS_ENDPOINT_URL", "valueFrom": { "secretKeyRef": { "key": "endpoint", "name": "tekton-results-s3" } } }, { "name": "DB_USER", "valueFrom": { "secretKeyRef": { "key": "db.user", "name": "tekton-results-database" } } }, { "name": "DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "db.password", "name": "tekton-results-database" } } }, { "name": "DB_HOST", "valueFrom": { "secretKeyRef": { "key": "db.host", "name": "tekton-results-database" } } }, { "name": "DB_NAME", "valueFrom": { "secretKeyRef": { "key": "db.name", "name": "tekton-results-database" } } } ], "image": "quay.io/konflux-ci/tekton-results-api:99db802a56c3d62e823e162feee9811e55ed1f5b", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "api", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "startupProbe": { "failureThreshold": 10, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/ssl/certs/s3-cert.crt", "name": "ca-s3", "subPath": "s3-cert.crt" }, { "mountPath": "/etc/tls/db", "name": "db-tls-ca", "readOnly": true }, { "mountPath": "/etc/tekton/results", "name": "config", "readOnly": true }, { "mountPath": "/etc/tls", "name": "tls", "readOnly": true } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9443", "--upstream=http://127.0.0.1:9090/", "--logtostderr=true", "--v=6" ], "image": "registry.redhat.io/openshift4/ose-kube-rbac-proxy:v4.12", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9443, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "128Mi" }, "requests": { "cpu": "5m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "-c", "mc --config-dir /tmp config host add minio \"$S3_ENDPOINT\" \"$S3_ACCESS_KEY_ID\" \"$S3_SECRET_ACCESS_KEY\" \u0026\u0026\nif [ -z \"$(mc --config-dir /tmp ls minio | grep \"$S3_BUCKET_NAME\")\" ]; then\n mc --config-dir /tmp mb --with-lock --region \"$S3_REGION\" minio/\"$S3_BUCKET_NAME\" \u0026\u0026\n echo \"Minio bucket $S3_BUCKET_NAME successfully created.\"\nfi\n" ], "command": [ "/bin/bash" ], "env": [ { "name": "S3_ACCESS_KEY_ID", "valueFrom": { "secretKeyRef": { "key": "aws_access_key_id", "name": "tekton-results-s3" } } }, { "name": "S3_SECRET_ACCESS_KEY", "valueFrom": { "secretKeyRef": { "key": "aws_secret_access_key", "name": "tekton-results-s3" } } }, { "name": "S3_REGION", "valueFrom": { "secretKeyRef": { "key": "aws_region", "name": "tekton-results-s3" } } }, { "name": "S3_BUCKET_NAME", "valueFrom": { "secretKeyRef": { "key": "bucket", "name": "tekton-results-s3" } } }, { "name": "S3_ENDPOINT", "valueFrom": { "secretKeyRef": { "key": "endpoint", "name": "tekton-results-s3" } } } ], "image": "quay.io/minio/mc:RELEASE.2023-01-28T20-29-38Z", "imagePullPolicy": "Always", "name": "mc", "resources": { "limits": { "cpu": "100m", "memory": "128Mi" }, "requests": { "cpu": "5m", "memory": "32Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/ssl/certs/s3-cert.crt", "name": "ca-s3", "subPath": "s3-cert.crt" }, { "mountPath": "/tmp", "name": "tmp-mc-volume" } ] } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "tekton-results-api", "serviceAccountName": "tekton-results-api", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "ca-s3", "secret": { "defaultMode": 420, "items": [ { "key": "public.crt", "path": "s3-cert.crt" } ], "secretName": "storage-tls" } }, { "emptyDir": {}, "name": "tmp-mc-volume" }, { "configMap": { "defaultMode": 420, "name": "rds-root-crt" }, "name": "db-tls-ca" }, { "configMap": { "defaultMode": 420, "name": "tekton-results-api-config" }, "name": "config" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:50:37Z", "lastUpdateTime": "2026-05-13T16:50:37Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:49:15Z", "lastUpdateTime": "2026-05-13T16:50:37Z", "message": "ReplicaSet \"tekton-results-api-5455474595\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/sync-wave": "0", "argocd.argoproj.io/tracking-id": "pipeline-service-in-cluster-local:apps/Deployment:tekton-results/tekton-results-api-for-watcher", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/sync-wave\":\"0\",\"argocd.argoproj.io/tracking-id\":\"pipeline-service-in-cluster-local:apps/Deployment:tekton-results/tekton-results-api-for-watcher\"},\"labels\":{\"app.kubernetes.io/name\":\"tekton-results-api-for-watcher\",\"app.kubernetes.io/part-of\":\"tekton-results\",\"app.kubernetes.io/version\":\"devel\"},\"name\":\"tekton-results-api-for-watcher\",\"namespace\":\"tekton-results\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/name\":\"tekton-results-api-for-watcher\"}},\"template\":{\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"cluster-autoscaler.kubernetes.io/safe-to-evict\":\"false\"},\"labels\":{\"app.kubernetes.io/name\":\"tekton-results-api-for-watcher\",\"app.kubernetes.io/version\":\"devel\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"kubernetes.io/os\",\"operator\":\"NotIn\",\"values\":[\"windows\"]}]}]}},\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchLabels\":{\"app.kubernetes.io/name\":\"tekton-results-api-for-watcher\"}},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"env\":[{\"name\":\"LOGS_API\",\"value\":\"true\"},{\"name\":\"LOGS_TYPE\",\"value\":\"blob\"},{\"name\":\"S3_HOSTNAME_IMMUTABLE\",\"value\":\"true\"},{\"name\":\"AWS_ACCESS_KEY_ID\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"aws_access_key_id\",\"name\":\"tekton-results-s3\"}}},{\"name\":\"AWS_SECRET_ACCESS_KEY\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"aws_secret_access_key\",\"name\":\"tekton-results-s3\"}}},{\"name\":\"AWS_REGION\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"aws_region\",\"name\":\"tekton-results-s3\"}}},{\"name\":\"S3_BUCKET_NAME\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"bucket\",\"name\":\"tekton-results-s3\"}}},{\"name\":\"AWS_ENDPOINT_URL\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"endpoint\",\"name\":\"tekton-results-s3\"}}},{\"name\":\"DB_USER\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"db.user\",\"name\":\"tekton-results-database\"}}},{\"name\":\"DB_PASSWORD\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"db.password\",\"name\":\"tekton-results-database\"}}},{\"name\":\"DB_HOST\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"db.host\",\"name\":\"tekton-results-database\"}}},{\"name\":\"DB_NAME\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"db.name\",\"name\":\"tekton-results-database\"}}}],\"image\":\"quay.io/konflux-ci/tekton-results-api:99db802a56c3d62e823e162feee9811e55ed1f5b\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTPS\"},\"initialDelaySeconds\":5,\"periodSeconds\":10},\"name\":\"api\",\"readinessProbe\":{\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTPS\"},\"initialDelaySeconds\":5,\"periodSeconds\":10},\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"512Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"startupProbe\":{\"failureThreshold\":10,\"httpGet\":{\"path\":\"/healthz\",\"port\":8080,\"scheme\":\"HTTPS\"},\"initialDelaySeconds\":5,\"periodSeconds\":10},\"volumeMounts\":[{\"mountPath\":\"/etc/ssl/certs/s3-cert.crt\",\"name\":\"ca-s3\",\"subPath\":\"s3-cert.crt\"},{\"mountPath\":\"/etc/tls/db\",\"name\":\"db-tls-ca\",\"readOnly\":true},{\"mountPath\":\"/etc/tekton/results\",\"name\":\"config\",\"readOnly\":true},{\"mountPath\":\"/etc/tls\",\"name\":\"tls\",\"readOnly\":true}]},{\"args\":[\"--secure-listen-address=0.0.0.0:9443\",\"--upstream=http://127.0.0.1:9090/\",\"--logtostderr=true\",\"--v=6\"],\"image\":\"registry.redhat.io/openshift4/ose-kube-rbac-proxy:v4.12\",\"name\":\"kube-rbac-proxy\",\"ports\":[{\"containerPort\":9443,\"name\":\"metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"5m\",\"memory\":\"64Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}}}],\"serviceAccountName\":\"tekton-results-api\",\"volumes\":[{\"name\":\"ca-s3\",\"secret\":{\"items\":[{\"key\":\"public.crt\",\"path\":\"s3-cert.crt\"}],\"secretName\":\"storage-tls\"}},{\"emptyDir\":{},\"name\":\"tmp-mc-volume\"},{\"configMap\":{\"name\":\"rds-root-crt\"},\"name\":\"db-tls-ca\"},{\"configMap\":{\"name\":\"tekton-results-api-config\"},\"name\":\"config\"},{\"name\":\"tls\",\"secret\":{\"secretName\":\"tekton-results-for-watcher-tls\"}}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:49:15Z", "generation": 1, "labels": { "app.kubernetes.io/name": "tekton-results-api-for-watcher", "app.kubernetes.io/part-of": "tekton-results", "app.kubernetes.io/version": "devel" }, "name": "tekton-results-api-for-watcher", "namespace": "tekton-results", "resourceVersion": "34875", "uid": "c1c37cca-aeb0-4dcf-8a4b-dedda1584d47" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-api-for-watcher" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "tekton-results-api-for-watcher", "app.kubernetes.io/version": "devel" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-api-for-watcher" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "LOGS_API", "value": "true" }, { "name": "LOGS_TYPE", "value": "blob" }, { "name": "S3_HOSTNAME_IMMUTABLE", "value": "true" }, { "name": "AWS_ACCESS_KEY_ID", "valueFrom": { "secretKeyRef": { "key": "aws_access_key_id", "name": "tekton-results-s3" } } }, { "name": "AWS_SECRET_ACCESS_KEY", "valueFrom": { "secretKeyRef": { "key": "aws_secret_access_key", "name": "tekton-results-s3" } } }, { "name": "AWS_REGION", "valueFrom": { "secretKeyRef": { "key": "aws_region", "name": "tekton-results-s3" } } }, { "name": "S3_BUCKET_NAME", "valueFrom": { "secretKeyRef": { "key": "bucket", "name": "tekton-results-s3" } } }, { "name": "AWS_ENDPOINT_URL", "valueFrom": { "secretKeyRef": { "key": "endpoint", "name": "tekton-results-s3" } } }, { "name": "DB_USER", "valueFrom": { "secretKeyRef": { "key": "db.user", "name": "tekton-results-database" } } }, { "name": "DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "db.password", "name": "tekton-results-database" } } }, { "name": "DB_HOST", "valueFrom": { "secretKeyRef": { "key": "db.host", "name": "tekton-results-database" } } }, { "name": "DB_NAME", "valueFrom": { "secretKeyRef": { "key": "db.name", "name": "tekton-results-database" } } } ], "image": "quay.io/konflux-ci/tekton-results-api:99db802a56c3d62e823e162feee9811e55ed1f5b", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "api", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "100m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "512Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "startupProbe": { "failureThreshold": 10, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/ssl/certs/s3-cert.crt", "name": "ca-s3", "subPath": "s3-cert.crt" }, { "mountPath": "/etc/tls/db", "name": "db-tls-ca", "readOnly": true }, { "mountPath": "/etc/tekton/results", "name": "config", "readOnly": true }, { "mountPath": "/etc/tls", "name": "tls", "readOnly": true } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9443", "--upstream=http://127.0.0.1:9090/", "--logtostderr=true", "--v=6" ], "image": "registry.redhat.io/openshift4/ose-kube-rbac-proxy:v4.12", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9443, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "128Mi" }, "requests": { "cpu": "5m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "tekton-results-api", "serviceAccountName": "tekton-results-api", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "ca-s3", "secret": { "defaultMode": 420, "items": [ { "key": "public.crt", "path": "s3-cert.crt" } ], "secretName": "storage-tls" } }, { "emptyDir": {}, "name": "tmp-mc-volume" }, { "configMap": { "defaultMode": 420, "name": "rds-root-crt" }, "name": "db-tls-ca" }, { "configMap": { "defaultMode": 420, "name": "tekton-results-api-config" }, "name": "config" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-for-watcher-tls" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:50:37Z", "lastUpdateTime": "2026-05-13T16:50:37Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:49:15Z", "lastUpdateTime": "2026-05-13T16:50:37Z", "message": "ReplicaSet \"tekton-results-api-for-watcher-549c78859f\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/tracking-id": "pipeline-service-in-cluster-local:apps/Deployment:tekton-results/tekton-results-retention-policy-agent", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/tracking-id\":\"pipeline-service-in-cluster-local:apps/Deployment:tekton-results/tekton-results-retention-policy-agent\"},\"labels\":{\"app.kubernetes.io/name\":\"tekton-results-retention-policy-agent\",\"app.kubernetes.io/part-of\":\"tekton-results\",\"app.kubernetes.io/version\":\"devel\"},\"name\":\"tekton-results-retention-policy-agent\",\"namespace\":\"tekton-results\"},\"spec\":{\"replicas\":0,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/name\":\"tekton-results-retention-policy-agent\"}},\"template\":{\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"cluster-autoscaler.kubernetes.io/safe-to-evict\":\"false\"},\"labels\":{\"app.kubernetes.io/name\":\"tekton-results-retention-policy-agent\",\"app.kubernetes.io/version\":\"devel\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"SYSTEM_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CONFIG_LOGGING_NAME\",\"value\":\"tekton-results-config-logging\"},{\"name\":\"DB_USER\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"POSTGRES_USER\",\"name\":\"tekton-results-postgres\"}}},{\"name\":\"DB_PASSWORD\",\"valueFrom\":{\"secretKeyRef\":{\"key\":\"POSTGRES_PASSWORD\",\"name\":\"tekton-results-postgres\"}}}],\"image\":\"quay.io/konflux-ci/tekton-results-retention-policy-agent:99db802a56c3d62e823e162feee9811e55ed1f5b\",\"name\":\"retention-policy-agent\",\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"5m\",\"memory\":\"64Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/tekton/results\",\"name\":\"config\",\"readOnly\":true},{\"mountPath\":\"/etc/tls\",\"name\":\"tls\",\"readOnly\":true}]}],\"serviceAccountName\":\"tekton-results-watcher\",\"volumes\":[{\"configMap\":{\"name\":\"tekton-results-api-config\"},\"name\":\"config\"},{\"name\":\"tls\",\"secret\":{\"secretName\":\"tekton-results-tls\"}}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:49:14Z", "generation": 1, "labels": { "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/part-of": "tekton-results", "app.kubernetes.io/version": "devel" }, "name": "tekton-results-retention-policy-agent", "namespace": "tekton-results", "resourceVersion": "30777", "uid": "0689fa73-57cd-4dd2-abb5-a4cbcec6c85f" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 0, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-retention-policy-agent" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/version": "devel" } }, "spec": { "containers": [ { "env": [ { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "CONFIG_LOGGING_NAME", "value": "tekton-results-config-logging" }, { "name": "DB_USER", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_USER", "name": "tekton-results-postgres" } } }, { "name": "DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_PASSWORD", "name": "tekton-results-postgres" } } } ], "image": "quay.io/konflux-ci/tekton-results-retention-policy-agent:99db802a56c3d62e823e162feee9811e55ed1f5b", "imagePullPolicy": "IfNotPresent", "name": "retention-policy-agent", "resources": { "limits": { "cpu": "500m", "memory": "128Mi" }, "requests": { "cpu": "5m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tekton/results", "name": "config", "readOnly": true }, { "mountPath": "/etc/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "tekton-results-watcher", "serviceAccountName": "tekton-results-watcher", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "tekton-results-api-config" }, "name": "config" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } } ] } } }, "status": { "conditions": [ { "lastTransitionTime": "2026-05-13T16:49:15Z", "lastUpdateTime": "2026-05-13T16:49:15Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:49:15Z", "lastUpdateTime": "2026-05-13T16:49:15Z", "message": "ReplicaSet \"tekton-results-retention-policy-agent-55bf9dfb64\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "argocd.argoproj.io/sync-wave": "2", "argocd.argoproj.io/tracking-id": "pipeline-service-in-cluster-local:apps/Deployment:tekton-results/tekton-results-watcher", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"argocd.argoproj.io/sync-wave\":\"2\",\"argocd.argoproj.io/tracking-id\":\"pipeline-service-in-cluster-local:apps/Deployment:tekton-results/tekton-results-watcher\"},\"labels\":{\"app.kubernetes.io/name\":\"tekton-results-watcher\",\"app.kubernetes.io/part-of\":\"tekton-results\",\"app.kubernetes.io/version\":\"devel\"},\"name\":\"tekton-results-watcher\",\"namespace\":\"tekton-results\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/name\":\"tekton-results-watcher\"}},\"template\":{\"metadata\":{\"annotations\":{\"argocd.argoproj.io/sync-options\":\"SkipDryRunOnMissingResource=true\",\"cluster-autoscaler.kubernetes.io/safe-to-evict\":\"false\"},\"labels\":{\"app.kubernetes.io/name\":\"tekton-results-watcher\",\"app.kubernetes.io/version\":\"devel\"}},\"spec\":{\"affinity\":{\"nodeAffinity\":{\"requiredDuringSchedulingIgnoredDuringExecution\":{\"nodeSelectorTerms\":[{\"matchExpressions\":[{\"key\":\"kubernetes.io/os\",\"operator\":\"NotIn\",\"values\":[\"windows\"]}]}]}},\"podAntiAffinity\":{\"preferredDuringSchedulingIgnoredDuringExecution\":[{\"podAffinityTerm\":{\"labelSelector\":{\"matchLabels\":{\"app.kubernetes.io/name\":\"tekton-results-watcher\"}},\"topologyKey\":\"kubernetes.io/hostname\"},\"weight\":100}]}},\"containers\":[{\"args\":[\"-api_addr\",\"tekton-results-api-service-for-watcher.tekton-results.svc.cluster.local:8080\",\"-auth_mode\",\"token\",\"-check_owner=false\",\"-completed_run_grace_period=2h\",\"-requeue_interval=2m\",\"-store_deadline=1m\",\"-forward_buffer=1m\",\"-threadiness=32\",\"-qps=50\",\"-burst=50\",\"-logs_api=true\",\"-disable_storing_incomplete_runs=true\"],\"env\":[{\"name\":\"SYSTEM_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CONFIG_LOGGING_NAME\",\"value\":\"tekton-results-config-logging\"},{\"name\":\"CONFIG_LEADERELECTION_NAME\",\"value\":\"tekton-results-config-leader-election\"},{\"name\":\"CONFIG_OBSERVABILITY_NAME\",\"value\":\"tekton-results-config-observability\"},{\"name\":\"METRICS_DOMAIN\",\"value\":\"tekton.dev/results\"},{\"name\":\"TEKTON_RESULTS_API_SERVICE\",\"value\":\"tekton-results-api-service-for-watcher.tekton-results.svc.cluster.local:8080\"},{\"name\":\"AUTH_MODE\",\"value\":\"token\"},{\"name\":\"KUBERNETES_MIN_VERSION\",\"value\":\"v1.28.0\"}],\"image\":\"quay.io/konflux-ci/tekton-results-watcher:99db802a56c3d62e823e162feee9811e55ed1f5b\",\"name\":\"watcher\",\"ports\":[{\"containerPort\":9090,\"name\":\"metrics\"},{\"containerPort\":8008,\"name\":\"profiling\"}],\"resources\":{\"limits\":{\"cpu\":\"250m\",\"memory\":\"2Gi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"volumeMounts\":[{\"mountPath\":\"/etc/tls\",\"name\":\"tls\",\"readOnly\":true}]},{\"args\":[\"--secure-listen-address=0.0.0.0:8443\",\"--upstream=http://127.0.0.1:9090/\",\"--logtostderr=true\",\"--v=6\"],\"image\":\"registry.redhat.io/openshift4/ose-kube-rbac-proxy:v4.12\",\"name\":\"kube-rbac-proxy\",\"ports\":[{\"containerPort\":8443,\"name\":\"watchermetrics\",\"protocol\":\"TCP\"}],\"resources\":{\"limits\":{\"cpu\":\"500m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"5m\",\"memory\":\"64Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}}}],\"serviceAccountName\":\"tekton-results-watcher\",\"volumes\":[{\"name\":\"tls\",\"secret\":{\"secretName\":\"tekton-results-for-watcher-tls\"}}]}}}}\n" }, "creationTimestamp": "2026-05-13T16:59:35Z", "generation": 1, "labels": { "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/part-of": "tekton-results", "app.kubernetes.io/version": "devel" }, "name": "tekton-results-watcher", "namespace": "tekton-results", "resourceVersion": "46956", "uid": "b47215c4-d81b-4251-94e8-d2a7298eb118" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-watcher" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "argocd.argoproj.io/sync-options": "SkipDryRunOnMissingResource=true", "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "devel" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-watcher" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-api_addr", "tekton-results-api-service-for-watcher.tekton-results.svc.cluster.local:8080", "-auth_mode", "token", "-check_owner=false", "-completed_run_grace_period=2h", "-requeue_interval=2m", "-store_deadline=1m", "-forward_buffer=1m", "-threadiness=32", "-qps=50", "-burst=50", "-logs_api=true", "-disable_storing_incomplete_runs=true" ], "env": [ { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "CONFIG_LOGGING_NAME", "value": "tekton-results-config-logging" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-results-config-leader-election" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-results-config-observability" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/results" }, { "name": "TEKTON_RESULTS_API_SERVICE", "value": "tekton-results-api-service-for-watcher.tekton-results.svc.cluster.local:8080" }, { "name": "AUTH_MODE", "value": "token" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.28.0" } ], "image": "quay.io/konflux-ci/tekton-results-watcher:99db802a56c3d62e823e162feee9811e55ed1f5b", "imagePullPolicy": "IfNotPresent", "name": "watcher", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "250m", "memory": "2Gi" }, "requests": { "cpu": "100m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tls", "name": "tls", "readOnly": true } ] }, { "args": [ "--secure-listen-address=0.0.0.0:8443", "--upstream=http://127.0.0.1:9090/", "--logtostderr=true", "--v=6" ], "image": "registry.redhat.io/openshift4/ose-kube-rbac-proxy:v4.12", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "watchermetrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "128Mi" }, "requests": { "cpu": "5m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "tekton-results-watcher", "serviceAccountName": "tekton-results-watcher", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-for-watcher-tls" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:59:39Z", "lastUpdateTime": "2026-05-13T16:59:39Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-05-13T16:59:35Z", "lastUpdateTime": "2026-05-13T16:59:39Z", "message": "ReplicaSet \"tekton-results-watcher-55667bb668\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-13T16:48:35Z", "generation": 4, "labels": { "app.kubernetes.io/managed-by": "operator-lifecycle-manager", "app.kubernetes.io/name": "tempo-operator", "app.kubernetes.io/part-of": "tempo-operator", "control-plane": "controller-manager", "olm.deployment-spec-hash": "5SusiOeTbvSFJRrAlBIOqibSvYKgnNLG0Qxa90", "olm.managed": "true", "olm.owner": "tempo-operator.v0.20.0-3", "olm.owner.kind": "ClusterServiceVersion", "olm.owner.namespace": "tempo-operator", "operators.coreos.com/tempo-product.tempo-operator": "" }, "name": "tempo-operator-controller", "namespace": "tempo-operator", "ownerReferences": [ { "apiVersion": "operators.coreos.com/v1alpha1", "blockOwnerDeletion": false, "controller": false, "kind": "ClusterServiceVersion", "name": "tempo-operator.v0.20.0-3", "uid": "51e1e02f-63c7-43ca-ad8f-bbd8f9152d0a" } ], "resourceVersion": "182193", "uid": "b01f8d88-5635-4d39-bb71-5995d0b733c8" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 1, "selector": { "matchLabels": { "app.kubernetes.io/managed-by": "operator-lifecycle-manager", "app.kubernetes.io/name": "tempo-operator", "app.kubernetes.io/part-of": "tempo-operator", "control-plane": "controller-manager" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"tempo.grafana.com/v1alpha1\",\n \"kind\": \"TempoMonolithic\",\n \"metadata\": {\n \"name\": \"sample\"\n },\n \"spec\": {\n \"jaegerui\": {\n \"enabled\": true,\n \"resources\": {\n \"limits\": {\n \"cpu\": \"2\",\n \"memory\": \"2Gi\"\n }\n },\n \"route\": {\n \"enabled\": true\n }\n },\n \"resources\": {\n \"limits\": {\n \"cpu\": \"2\",\n \"memory\": \"2Gi\"\n }\n },\n \"storage\": {\n \"traces\": {\n \"backend\": \"memory\"\n }\n }\n }\n },\n {\n \"apiVersion\": \"tempo.grafana.com/v1alpha1\",\n \"kind\": \"TempoStack\",\n \"metadata\": {\n \"name\": \"sample\"\n },\n \"spec\": {\n \"resources\": {\n \"total\": {\n \"limits\": {\n \"cpu\": \"2000m\",\n \"memory\": \"2Gi\"\n }\n }\n },\n \"storage\": {\n \"secret\": {\n \"name\": \"my-storage-secret\",\n \"type\": \"s3\"\n }\n },\n \"storageSize\": \"1Gi\",\n \"template\": {\n \"queryFrontend\": {\n \"jaegerQuery\": {\n \"enabled\": true,\n \"ingress\": {\n \"type\": \"route\"\n }\n }\n }\n }\n }\n }\n]", "capabilities": "Deep Insights", "categories": "Logging \u0026 Tracing,Monitoring,Observability", "console.openshift.io/operator-monitoring-default": "true", "containerImage": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:226a838e7197fdaf77c5ceedea374f218d89697eb07a6dcb4f27e5a1f57efbfa", "createdAt": "07 May 2026, 13:28", "description": "Create and manage deployments of Tempo, a high-scale distributed tracing backend.", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "true", "features.operators.openshift.io/proxy-aware": "true", "features.operators.openshift.io/tls-profiles": "true", "features.operators.openshift.io/token-auth-aws": "true", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "kubectl.kubernetes.io/default-container": "manager", "olm.operatorGroup": "tempo-operator", "olm.operatorNamespace": "tempo-operator", "olm.skipRange": "\u003e=0.6.0 \u003c0.20.0-3", "olm.targetNamespaces": "", "olmcahash": "18f49598de6db3db8960fbcee38ccaff48ef82e11ad91ed97cb93c6bf91d0a83", "operatorframework.io/cluster-monitoring": "true", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"tempo.grafana.com\",\"kind\":\"TempoMonolithic\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"tempo.grafana.com\",\"kind\":\"TempoStack\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"tempo-product\",\"version\":\"0.20.0-3\"}}]}", "operatorframework.io/suggested-namespace": "openshift-tempo-operator", "operators.openshift.io/infrastructure-features": "[\"disconnected\"]", "operators.openshift.io/valid-subscription": "[\"OpenShift Container Platform\", \"OpenShift Platform Plus\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.36.0", "operators.operatorframework.io/project_layout": "go.kubebuilder.io/v4", "repository": "https://github.com/grafana/tempo-operator", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/managed-by": "operator-lifecycle-manager", "app.kubernetes.io/name": "tempo-operator", "app.kubernetes.io/part-of": "tempo-operator", "control-plane": "controller-manager" } }, "spec": { "containers": [ { "args": [ "--zap-log-level=info", "start", "--metrics-tls-cert-dir=/var/run/tls/server/" ], "env": [ { "name": "RELATED_IMAGE_TEMPO", "value": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:8af8a53cbe0c6409e57009d00f884e6e39e17080c204344d2d4e21e3ac060053" }, { "name": "RELATED_IMAGE_JAEGER_QUERY", "value": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:28878997d587897914b9941a823c3f405decf19427969ff3c1562d27f19bed07" }, { "name": "RELATED_IMAGE_TEMPO_QUERY", "value": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:49d6aa0b875887810f67128f977ba368dd1ec965d82750123f2053fe3f24ed18" }, { "name": "RELATED_IMAGE_TEMPO_GATEWAY", "value": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:c796377fa6d4a84075c5f35ee403a2cc5e29b71b9419e243a718693adc3eccee" }, { "name": "RELATED_IMAGE_TEMPO_GATEWAY_OPA", "value": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b75d0f3d50a141fe44d9457518f67bb022b03fd6c819bee47096fb01879947c0" }, { "name": "RELATED_IMAGE_OAUTH_PROXY", "value": "registry.redhat.io/openshift4/ose-oauth-proxy@sha256:6bcfa981a7a75c242a16afa6dab36bf6e3b8a1442fa863875919ad551f48eceb" }, { "name": "DISTRIBUTION", "value": "openshift" }, { "name": "FEATURE_GATES", "value": "openshift.route,openshift.servingCertsService,openshift.oauthProxy,openshift.noAuthWarning,prometheusOperator,observability.metrics.createServiceMonitors,observability.metrics.createPrometheusRules" }, { "name": "DEFAULT_POD_SECURITY_CONTEXT", "value": "{}" }, { "name": "OPERATOR_CONDITION_NAME", "value": "tempo-operator.v0.20.0-3" } ], "image": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:226a838e7197fdaf77c5ceedea374f218d89697eb07a6dcb4f27e5a1f57efbfa", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" }, { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "webhook-cert" }, { "mountPath": "/var/run/tls/server", "name": "tempo-operator-metrics-cert" }, { "mountPath": "/apiserver.local.config/certificates", "name": "apiservice-cert" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "tempo-operator-controller-manager", "serviceAccountName": "tempo-operator-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "name": "cert", "secret": { "defaultMode": 420, "secretName": "webhook-server-cert" } }, { "name": "tempo-operator-metrics-cert", "secret": { "defaultMode": 420, "secretName": "tempo-operator-metrics" } }, { "name": "apiservice-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "apiserver.crt" }, { "key": "tls.key", "path": "apiserver.key" } ], "secretName": "tempo-operator-controller-service-cert" } }, { "name": "webhook-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "tempo-operator-controller-service-cert" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-05-13T16:48:35Z", "lastUpdateTime": "2026-05-13T16:48:46Z", "message": "ReplicaSet \"tempo-operator-controller-78f4ccb7b4\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-05-13T18:27:55Z", "lastUpdateTime": "2026-05-13T18:27:55Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 4, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } } ], "kind": "List", "metadata": { "resourceVersion": "" } }