{ "apiVersion": "v1", "items": [ { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/liveness-port": "Keeping upstream configs", "ignore-check.kube-linter.io/readiness-port": "Keeping upstream configs" }, "creationTimestamp": "2026-07-10T09:50:18Z", "generation": 1, "labels": { "control-plane": "controller-manager", "pod-template-hash": "6dcbb7d846" }, "name": "build-service-controller-manager-6dcbb7d846", "namespace": "build-service", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "build-service-controller-manager", "uid": "e4608d66-1346-4b9b-9ad6-138aac429952" } ], "resourceVersion": "7553", "uid": "6e7fa5ab-bbe5-4e37-a4d1-64f6054c1998" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "controller-manager", "pod-template-hash": "6dcbb7d846" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager", "pod-template-hash": "6dcbb7d846" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8443", "--leader-elect=false", "--health-probe-bind-address=:8081", "-webhook-config-path=/mnt/webhook-config.json" ], "command": [ "/manager" ], "env": [ { "name": "PAC_WEBHOOK_INSECURE_SSL", "value": "1" } ], "image": "quay.io/konflux-ci/build-service:40d2c83256e3cfe0905f827fbc47f20bc38b1bfc", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "30m", "memory": "128Mi" }, "requests": { "cpu": "30m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/ssl/certs/ca-custom-bundle.crt", "name": "trusted-ca", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/mnt", "name": "webhook-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "build-service-controller-manager", "serviceAccountName": "build-service-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "webhook-config.json", "path": "webhook-config.json" } ], "name": "webhook-config-01c0b13063", "optional": true }, "name": "webhook-config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:41:50Z", "generation": 1, "labels": { "app": "cert-manager", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "cert-manager", "app.kubernetes.io/version": "v1.20.3", "helm.sh/chart": "cert-manager-v1.20.3", "pod-template-hash": "68b9f6fc76" }, "name": "cert-manager-68b9f6fc76", "namespace": "cert-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cert-manager", "uid": "0ffa7fce-2182-49b6-bfdd-dedae0fa2405" } ], "resourceVersion": "1239", "uid": "86e5b324-50a5-4289-bc20-f7436fd696c3" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "cert-manager", "pod-template-hash": "68b9f6fc76" } }, "template": { "metadata": { "annotations": { "prometheus.io/path": "/metrics", "prometheus.io/port": "9402", "prometheus.io/scrape": "true" }, "creationTimestamp": null, "labels": { "app": "cert-manager", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "cert-manager", "app.kubernetes.io/version": "v1.20.3", "helm.sh/chart": "cert-manager-v1.20.3", "pod-template-hash": "68b9f6fc76" } }, "spec": { "containers": [ { "args": [ "--v=2", "--cluster-resource-namespace=$(POD_NAMESPACE)", "--leader-election-namespace=kube-system", "--acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.20.3", "--max-concurrent-challenges=60" ], "env": [ { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/jetstack/cert-manager-controller:v1.20.3", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 8, "httpGet": { "path": "/livez", "port": "http-healthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 15 }, "name": "cert-manager-controller", "ports": [ { "containerPort": 9402, "name": "http-metrics", "protocol": "TCP" }, { "containerPort": 9403, "name": "http-healthz", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "120m", "memory": "120Mi" }, "requests": { "cpu": "90m", "memory": "90Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cert-manager", "serviceAccountName": "cert-manager", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:41:50Z", "generation": 1, "labels": { "app": "cainjector", "app.kubernetes.io/component": "cainjector", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "cainjector", "app.kubernetes.io/version": "v1.20.3", "helm.sh/chart": "cert-manager-v1.20.3", "pod-template-hash": "74ffc7888d" }, "name": "cert-manager-cainjector-74ffc7888d", "namespace": "cert-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cert-manager-cainjector", "uid": "15770bec-6584-4764-a430-ad1349ecb011" } ], "resourceVersion": "1221", "uid": "9832f296-e9c9-45cb-b4b6-395530ad290b" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "cainjector", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "cainjector", "pod-template-hash": "74ffc7888d" } }, "template": { "metadata": { "annotations": { "prometheus.io/path": "/metrics", "prometheus.io/port": "9402", "prometheus.io/scrape": "true" }, "creationTimestamp": null, "labels": { "app": "cainjector", "app.kubernetes.io/component": "cainjector", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "cainjector", "app.kubernetes.io/version": "v1.20.3", "helm.sh/chart": "cert-manager-v1.20.3", "pod-template-hash": "74ffc7888d" } }, "spec": { "containers": [ { "args": [ "--v=2", "--leader-election-namespace=kube-system" ], "env": [ { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/jetstack/cert-manager-cainjector:v1.20.3", "imagePullPolicy": "IfNotPresent", "name": "cert-manager-cainjector", "ports": [ { "containerPort": 9402, "name": "http-metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "120m", "memory": "120Mi" }, "requests": { "cpu": "90m", "memory": "90Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cert-manager-cainjector", "serviceAccountName": "cert-manager-cainjector", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:41:51Z", "generation": 1, "labels": { "app": "webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/version": "v1.20.3", "helm.sh/chart": "cert-manager-v1.20.3", "pod-template-hash": "6b9796b569" }, "name": "cert-manager-webhook-6b9796b569", "namespace": "cert-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cert-manager-webhook", "uid": "54c2313f-1e71-4c95-b1c8-391de015e47f" } ], "resourceVersion": "1251", "uid": "dd81b8d0-050b-4646-8ada-4e66c92d5890" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "webhook", "pod-template-hash": "6b9796b569" } }, "template": { "metadata": { "annotations": { "prometheus.io/path": "/metrics", "prometheus.io/port": "9402", "prometheus.io/scrape": "true" }, "creationTimestamp": null, "labels": { "app": "webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/version": "v1.20.3", "helm.sh/chart": "cert-manager-v1.20.3", "pod-template-hash": "6b9796b569" } }, "spec": { "containers": [ { "args": [ "--v=2", "--secure-port=10250", "--dynamic-serving-ca-secret-namespace=$(POD_NAMESPACE)", "--dynamic-serving-ca-secret-name=cert-manager-webhook-ca", "--dynamic-serving-dns-names=cert-manager-webhook", "--dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE)", "--dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE).svc" ], "env": [ { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/jetstack/cert-manager-webhook:v1.20.3", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/livez", "port": "healthcheck", "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "cert-manager-webhook", "ports": [ { "containerPort": 10250, "name": "https", "protocol": "TCP" }, { "containerPort": 6080, "name": "healthcheck", "protocol": "TCP" }, { "containerPort": 9402, "name": "http-metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "healthcheck", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "120m", "memory": "120Mi" }, "requests": { "cpu": "90m", "memory": "90Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cert-manager-webhook", "serviceAccountName": "cert-manager-webhook", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/readiness-port": "Keeping upstream configs" }, "creationTimestamp": "2026-07-10T09:42:06Z", "generation": 1, "labels": { "app": "trust-manager", "app.kubernetes.io/instance": "trust-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "trust-manager", "app.kubernetes.io/version": "v0.24.0", "helm.sh/chart": "trust-manager-v0.24.0", "pod-template-hash": "6c4ff96554" }, "name": "trust-manager-6c4ff96554", "namespace": "cert-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "trust-manager", "uid": "b4b9cd03-3a4b-436d-ba48-c47fbbf9e58c" } ], "resourceVersion": "13244", "uid": "886966a2-faf4-4974-aae0-d15763b10f81" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "trust-manager", "pod-template-hash": "6c4ff96554" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "trust-manager", "app.kubernetes.io/instance": "trust-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "trust-manager", "app.kubernetes.io/version": "v0.24.0", "helm.sh/chart": "trust-manager-v0.24.0", "pod-template-hash": "6c4ff96554" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--log-format=text", "--log-level=1", "--metrics-port=9402", "--readiness-probe-port=6060", "--readiness-probe-path=/readyz", "--leader-elect=true", "--leader-election-lease-duration=15s", "--leader-election-renew-deadline=10s", "--trust-namespace=cert-manager", "--webhook-host=0.0.0.0", "--webhook-port=6443", "--webhook-certificate-dir=/tls", "--default-package-location=/packages/cert-manager-package-debian.json" ], "image": "quay.io/jetstack/trust-manager:v0.24.0", "imagePullPolicy": "IfNotPresent", "name": "trust-manager", "ports": [ { "containerPort": 6443, "name": "webhook", "protocol": "TCP" }, { "containerPort": 9402, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 6060, "scheme": "HTTP" }, "initialDelaySeconds": 3, "periodSeconds": 7, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "100m", "memory": "250Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tls", "name": "tls", "readOnly": true }, { "mountPath": "/packages", "name": "packages", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "/copyandmaybepause", "/debian-package", "/packages" ], "image": "quay.io/jetstack/trust-pkg-debian-trixie:20250419.1", "imagePullPolicy": "IfNotPresent", "name": "cert-manager-package-debian", "resources": { "limits": { "cpu": "100m", "memory": "250Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/packages", "name": "packages" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "trust-manager", "serviceAccountName": "trust-manager", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": { "sizeLimit": "50M" }, "name": "packages" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "trust-manager-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:50:19Z", "generation": 1, "labels": { "control-plane": "controller-manager", "pod-template-hash": "7fc9594955" }, "name": "image-controller-controller-manager-7fc9594955", "namespace": "image-controller", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "image-controller-controller-manager", "uid": "f70c11f4-173a-4b1c-aece-b3c87e52b719" } ], "resourceVersion": "7484", "uid": "38b745ca-342b-4feb-9184-06399d9986d1" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "controller-manager", "pod-template-hash": "7fc9594955" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager", "pod-template-hash": "7fc9594955" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8443", "--leader-elect=false", "--health-probe-bind-address=:8081" ], "command": [ "/manager" ], "image": "quay.io/redhat-user-workloads/rhtap-build-tenant/image-controller/image-controller@sha256:8125f34ed45485eaf739a1d328ae536b86ca80b7e82399cd2a2395a287ac4c5c", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 8081, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/ssl/certs/quay-ca", "name": "quay-ca-bundle", "readOnly": true }, { "mountPath": "/workspace", "name": "quaytoken", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "image-controller-controller-manager", "serviceAccountName": "image-controller-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "configMap": { "defaultMode": 420, "name": "quay-ca-bundle", "optional": true }, "name": "quay-ca-bundle" }, { "name": "quaytoken", "secret": { "defaultMode": 420, "secretName": "quaytoken" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-07-10T09:50:22Z", "generation": 1, "labels": { "control-plane": "controller-manager", "pod-template-hash": "79564d4ddd" }, "name": "integration-service-controller-manager-79564d4ddd", "namespace": "integration-service", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "integration-service-controller-manager", "uid": "d761c449-050d-4431-b561-a5ae6a49a72c" } ], "resourceVersion": "13493", "uid": "ef02eabd-2583-4632-9900-d788f42350d3" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "controller-manager", "pod-template-hash": "79564d4ddd" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager", "pod-template-hash": "79564d4ddd" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8080", "--leader-elect", "--lease-duration=30s", "--leader-renew-deadline=15s", "--leader-elector-retry-period=5s" ], "command": [ "/manager" ], "env": [ { "name": "CONSOLE_URL", "value": "https://localhost:9443/ns/{{ .Namespace }}/pipelinerun/{{ .PipelineRunName }}" } ], "image": "quay.io/konflux-ci/integration-service:84b3f45d9af1ae3e2f8fe66422f43995c2c08af9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" }, { "containerPort": 8081, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "30m", "memory": "128Mi" }, "requests": { "cpu": "30m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "integration-service-controller-manager", "serviceAccountName": "integration-service-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "name": "cert", "secret": { "defaultMode": 420, "secretName": "webhook-server-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:50:19Z", "generation": 2, "labels": { "control-plane": "controller-manager", "pod-template-hash": "7fcd487c99" }, "name": "integration-service-controller-manager-7fcd487c99", "namespace": "integration-service", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "integration-service-controller-manager", "uid": "d761c449-050d-4431-b561-a5ae6a49a72c" } ], "resourceVersion": "7655", "uid": "a6f70085-a4e5-48bc-8c53-49068b0775ae" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "control-plane": "controller-manager", "pod-template-hash": "7fcd487c99" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager", "pod-template-hash": "7fcd487c99" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8080", "--leader-elect", "--lease-duration=30s", "--leader-renew-deadline=15s", "--leader-elector-retry-period=5s" ], "command": [ "/manager" ], "env": [ { "name": "CONSOLE_URL" } ], "image": "quay.io/konflux-ci/integration-service:84b3f45d9af1ae3e2f8fe66422f43995c2c08af9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" }, { "containerPort": 8081, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "30m", "memory": "128Mi" }, "requests": { "cpu": "30m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "integration-service-controller-manager", "serviceAccountName": "integration-service-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "name": "cert", "secret": { "defaultMode": 420, "secretName": "webhook-server-cert" } } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/no-read-only-root-fs": "This component requires write permissions", "ignore-check.kube-linter.io/run-as-non-root": "This component requires root permissions" }, "creationTimestamp": "2026-07-10T09:50:18Z", "generation": 1, "labels": { "pod-template-hash": "667fc485b9", "run": "registry" }, "name": "registry-667fc485b9", "namespace": "kind-registry", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "registry", "uid": "16969d88-13bb-4b5b-a50d-b6d95552f890" } ], "resourceVersion": "7491", "uid": "d2b0a3c3-f5ef-493d-9e09-e5a09cdffbc2" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "pod-template-hash": "667fc485b9", "run": "registry" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "pod-template-hash": "667fc485b9", "run": "registry" } }, "spec": { "containers": [ { "args": [ "/etc/zot/config.json" ], "image": "quay.io/konflux-ci/zot@sha256:3bfbfbe5d50c830a2867f5ee68fa190a29af702e4fdcafd7e76b6e2e4f1f1aba", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "tcpSocket": { "port": 5000 }, "timeoutSeconds": 1 }, "name": "registry", "ports": [ { "containerPort": 5000, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 5000 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "100m", "memory": "250Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/certs", "name": "certs", "readOnly": true }, { "mountPath": "/etc/zot", "name": "zot-config", "readOnly": true }, { "mountPath": "/etc/zot/auth", "name": "zot-auth", "readOnly": true }, { "mountPath": "/var/lib/registry", "name": "storage" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "certs", "secret": { "defaultMode": 420, "secretName": "local-registry-tls" } }, { "configMap": { "defaultMode": 420, "name": "zot-config" }, "name": "zot-config" }, { "name": "zot-auth", "secret": { "defaultMode": 420, "secretName": "zot-htpasswd" } }, { "emptyDir": {}, "name": "storage" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:50:18Z", "generation": 1, "labels": { "app": "dex", "pod-template-hash": "77c77c5cc8" }, "name": "dex-77c77c5cc8", "namespace": "konflux-ui", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "dex", "uid": "3e26716d-489d-4918-bd4d-a491a8290ea3" } ], "resourceVersion": "8087", "uid": "c1349eb3-0dee-4a88-884b-bd2ec20e0df6" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "dex", "pod-template-hash": "77c77c5cc8" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "dex", "pod-template-hash": "77c77c5cc8" } }, "spec": { "containers": [ { "command": [ "/usr/local/bin/run-dex.sh" ], "env": [ { "name": "TOKEN_PATH", "value": "/var/run/secrets/konflux-ci.dev/serviceaccount/token" }, { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_SERVICE_ACCOUNT", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.serviceAccountName" } } }, { "name": "CLIENT_SECRET", "valueFrom": { "secretKeyRef": { "key": "client-secret", "name": "oauth2-proxy-client-secret" } } } ], "image": "quay.io/konflux-ci/dex@sha256:7fa9712a066c28b0b3b6f4586254cd8c932a4f8934626c5ddeccf428c1dce0d6", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/ready", "port": "telemetry", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "dex", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" }, { "containerPort": 5558, "name": "telemetry", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/ready", "port": "telemetry", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "50m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp" }, { "mountPath": "/var/run/secrets/konflux-ci.dev/serviceaccount/", "name": "dex-token" }, { "mountPath": "/usr/local/bin/run-dex.sh", "name": "run-dex", "subPath": "run-dex.sh" }, { "mountPath": "/etc/dex/cfg", "name": "dex" }, { "mountPath": "/etc/dex/tls", "name": "tls" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "dex", "serviceAccountName": "dex", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": { "medium": "Memory" }, "name": "tmp" }, { "name": "dex-token", "projected": { "defaultMode": 288, "sources": [ { "serviceAccountToken": { "expirationSeconds": 600, "path": "token" } } ] } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "config.yaml", "path": "config.yaml" } ], "name": "dex-b17241f462" }, "name": "dex" }, { "configMap": { "defaultMode": 493, "items": [ { "key": "run-dex.sh", "path": "run-dex.sh" } ], "name": "run-dex-f654f6k7th" }, "name": "run-dex" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "dex-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/no-anti-affinity": "Using topologySpreadConstraints" }, "creationTimestamp": "2026-07-10T09:50:18Z", "generation": 1, "labels": { "app": "proxy", "pod-template-hash": "559f877d48" }, "name": "proxy-559f877d48", "namespace": "konflux-ui", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "proxy", "uid": "d3b0e933-0b1e-4838-8315-3ab2f60c30d9" } ], "resourceVersion": "8300", "uid": "a6c38ddb-e1bb-4c52-9665-7d2dcde2a077" }, "spec": { "minReadySeconds": 30, "replicas": 1, "selector": { "matchLabels": { "app": "proxy", "pod-template-hash": "559f877d48" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "proxy", "pod-template-hash": "559f877d48" } }, "spec": { "containers": [ { "command": [ "caddy", "run", "--config", "/etc/caddy/Caddyfile", "--adapter", "caddyfile" ], "image": "quay.io/konflux-ci/reverse-proxy@sha256:9f5cafce9d0203b125cc1011419e422533711f2ff87bc45d456d21dcae505f61", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 60, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "reverse-proxy", "ports": [ { "containerPort": 9443, "name": "web-tls", "protocol": "TCP" }, { "containerPort": 2112, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "30m", "memory": "128Mi" }, "requests": { "cpu": "30m", "memory": "128Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/caddy/Caddyfile", "name": "proxy-caddyfile", "readOnly": true, "subPath": "Caddyfile" }, { "mountPath": "/mnt/serving-cert", "name": "serving-cert", "readOnly": true }, { "mountPath": "/var/run/secrets/konflux-ci.dev/serviceaccount", "name": "kube-api-token", "readOnly": true }, { "mountPath": "/var/run/secrets/konflux-ci.dev/backend", "name": "backend-token", "readOnly": true }, { "mountPath": "/mnt/caddy-snippets", "name": "caddy-snippets", "readOnly": true }, { "mountPath": "/mnt/cluster-ca", "name": "cluster-ca", "readOnly": true }, { "mountPath": "/mnt/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/opt/app-root/src/static-content", "name": "static-content" }, { "mountPath": "/opt/app-root/src/segment", "name": "segment-bridge-config" }, { "mountPath": "/mnt/watson-config", "name": "watson-config", "readOnly": true }, { "mountPath": "/data", "name": "caddy-data" }, { "mountPath": "/config", "name": "caddy-config" } ] }, { "env": [ { "name": "OAUTH2_PROXY_CLIENT_SECRET", "valueFrom": { "secretKeyRef": { "key": "client-secret", "name": "oauth2-proxy-client-secret" } } }, { "name": "OAUTH2_PROXY_COOKIE_SECRET", "valueFrom": { "secretKeyRef": { "key": "cookie-secret", "name": "oauth2-proxy-cookie-secret" } } }, { "name": "OAUTH2_PROXY_PROVIDER", "value": "oidc" }, { "name": "OAUTH2_PROXY_PROVIDER_DISPLAY_NAME", "value": "Dex OIDC" }, { "name": "OAUTH2_PROXY_CLIENT_ID", "value": "oauth2-proxy" }, { "name": "OAUTH2_PROXY_HTTP_ADDRESS", "value": "127.0.0.1:6000" }, { "name": "OAUTH2_PROXY_SKIP_PROVIDER_BUTTON", "value": "true" }, { "name": "OAUTH2_PROXY_PROMPT", "value": "login" }, { "name": "OAUTH2_PROXY_REDIRECT_URL", "value": "https://localhost:9443/oauth2/callback" }, { "name": "OAUTH2_PROXY_OIDC_ISSUER_URL", "value": "https://localhost:9443/idp/" }, { "name": "OAUTH2_PROXY_LOGIN_URL", "value": "https://localhost:9443/idp/auth" }, { "name": "OAUTH2_PROXY_SKIP_OIDC_DISCOVERY", "value": "true" }, { "name": "OAUTH2_PROXY_REDEEM_URL", "value": "https://dex.konflux-ui.svc.cluster.local:9443/idp/token" }, { "name": "OAUTH2_PROXY_OIDC_JWKS_URL", "value": "https://dex.konflux-ui.svc.cluster.local:9443/idp/keys" }, { "name": "OAUTH2_PROXY_COOKIE_SECURE", "value": "true" }, { "name": "OAUTH2_PROXY_COOKIE_NAME", "value": "__Host-konflux-ci-cookie" }, { "name": "OAUTH2_PROXY_EMAIL_DOMAINS", "value": "*" }, { "name": "OAUTH2_PROXY_SET_XAUTHREQUEST", "value": "true" }, { "name": "OAUTH2_PROXY_SKIP_JWT_BEARER_TOKENS", "value": "true" }, { "name": "OAUTH2_PROXY_SCOPE", "value": "openid email profile groups" }, { "name": "OAUTH2_PROXY_PROVIDER_CA_FILES", "value": "/etc/ssl/certs/ca-bundle.crt" }, { "name": "OAUTH2_PROXY_WHITELIST_DOMAINS", "value": "localhost:9443" } ], "image": "quay.io/konflux-ci/oauth2-proxy@sha256:7f44e0fc7dd7a57a5c77ffd244ab95ed71770ba33a7188d9b9b17f58de3e4a3f", "imagePullPolicy": "IfNotPresent", "name": "oauth2-proxy", "ports": [ { "containerPort": 6000, "name": "web", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "300m", "memory": "256Mi" }, "requests": { "cpu": "30m", "memory": "128Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/ssl/certs", "name": "ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "cp", "-R", "/opt/app-root/src/.", "/mnt/static-content/" ], "image": "quay.io/konflux-ci/konflux-ui@sha256:1b57f8ac49af8d8f0d6c84c82b2da839ae121f19f9265ae3a2fbd31c9d864930", "imagePullPolicy": "IfNotPresent", "name": "copy-static-content", "resources": { "limits": { "cpu": "50m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/mnt/static-content", "name": "static-content" } ] }, { "command": [ "sh", "/var/run/scripts/konflux-ci.dev/generate-proxy-config.sh" ], "image": "quay.io/konflux-ci/konflux-ui@sha256:1b57f8ac49af8d8f0d6c84c82b2da839ae121f19f9265ae3a2fbd31c9d864930", "imagePullPolicy": "IfNotPresent", "name": "generate-proxy-config", "resources": { "limits": { "cpu": "50m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/mnt/caddy-templates", "name": "caddy-templates", "readOnly": true }, { "mountPath": "/mnt/caddy-snippets", "name": "caddy-snippets" }, { "mountPath": "/var/run/scripts/konflux-ci.dev", "name": "generate-proxy-config-script", "readOnly": true }, { "mountPath": "/mnt/service-ca", "name": "service-ca", "readOnly": true } ] } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "proxy", "serviceAccountName": "proxy", "terminationGracePeriodSeconds": 30, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "app": "proxy" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "ScheduleAnyway" } ], "volumes": [ { "name": "ca-bundle", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "ca.crt", "path": "ca-bundle.crt" } ], "name": "oauth2-proxy-cert" } } ] } }, { "configMap": { "defaultMode": 488, "items": [ { "key": "generate-proxy-config.sh", "path": "generate-proxy-config.sh" } ], "name": "proxy-generate-config-thtfcb7h98" }, "name": "generate-proxy-config-script" }, { "name": "kube-api-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "expirationSeconds": 600, "path": "token" } } ] } }, { "name": "backend-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "konflux-backend", "expirationSeconds": 600, "path": "token" } } ] } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "Caddyfile", "path": "Caddyfile" } ], "name": "proxy-caddyfile-567h9kth9f" }, "name": "proxy-caddyfile" }, { "configMap": { "defaultMode": 420, "name": "proxy-caddy-templates-46ctfh6tk7" }, "name": "caddy-templates" }, { "emptyDir": {}, "name": "caddy-snippets" }, { "emptyDir": {}, "name": "caddy-data" }, { "emptyDir": {}, "name": "caddy-config" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "name": "cluster-ca", "secret": { "defaultMode": 420, "items": [ { "key": "ca.crt", "path": "ca-bundle.crt" } ], "secretName": "cluster-root-ref" } }, { "configMap": { "defaultMode": 420, "name": "openshift-service-ca.crt", "optional": true }, "name": "service-ca" }, { "emptyDir": {}, "name": "static-content" }, { "name": "segment-bridge-config", "secret": { "defaultMode": 420, "items": [ { "key": "key", "path": "key" }, { "key": "url", "path": "url" } ], "optional": true, "secretName": "segment-bridge-config" } }, { "name": "watson-config", "secret": { "defaultMode": 420, "optional": true, "secretName": "watson-config" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "4", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-07-10T09:37:07Z", "generation": 3, "labels": { "k8s-app": "kube-dns", "pod-template-hash": "575f7c7846" }, "name": "coredns-575f7c7846", "namespace": "kube-system", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "coredns", "uid": "7fb9717d-adb8-4725-8ff1-061fb0678c17" } ], "resourceVersion": "980", "uid": "9d605e6d-dd91-4391-a831-06d2d75852b2" }, "spec": { "replicas": 3, "selector": { "matchLabels": { "k8s-app": "kube-dns", "pod-template-hash": "575f7c7846" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "k8s-app": "kube-dns", "pod-template-hash": "575f7c7846" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "k8s-app", "operator": "In", "values": [ "kube-dns" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-conf", "/etc/coredns/Corefile" ], "image": "registry.k8s.io/coredns/coredns:v1.11.3", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/health", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "coredns", "ports": [ { "containerPort": 53, "name": "dns", "protocol": "UDP" }, { "containerPort": 53, "name": "dns-tcp", "protocol": "TCP" }, { "containerPort": 9153, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": 8181, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "memory": "512Mi" }, "requests": { "cpu": "200m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "add": [ "NET_BIND_SERVICE" ], "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/coredns", "name": "config-volume", "readOnly": true } ] } ], "dnsPolicy": "Default", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "coredns", "serviceAccountName": "coredns", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/control-plane" } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "Corefile", "path": "Corefile" } ], "name": "coredns" }, "name": "config-volume" } ] } } }, "status": { "availableReplicas": 3, "fullyLabeledReplicas": 3, "observedGeneration": 3, "readyReplicas": 3, "replicas": 3 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "4", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:36:38Z", "generation": 5, "labels": { "k8s-app": "kube-dns", "pod-template-hash": "668d6bf9bc" }, "name": "coredns-668d6bf9bc", "namespace": "kube-system", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "coredns", "uid": "7fb9717d-adb8-4725-8ff1-061fb0678c17" } ], "resourceVersion": "737", "uid": "b9fdf709-501b-46cd-ad27-59569fa94bae" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "k8s-app": "kube-dns", "pod-template-hash": "668d6bf9bc" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "k8s-app": "kube-dns", "pod-template-hash": "668d6bf9bc" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "k8s-app", "operator": "In", "values": [ "kube-dns" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-conf", "/etc/coredns/Corefile" ], "image": "registry.k8s.io/coredns/coredns:v1.11.3", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/health", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "coredns", "ports": [ { "containerPort": 53, "name": "dns", "protocol": "UDP" }, { "containerPort": 53, "name": "dns-tcp", "protocol": "TCP" }, { "containerPort": 9153, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": 8181, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "memory": "170Mi" }, "requests": { "cpu": "100m", "memory": "70Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "add": [ "NET_BIND_SERVICE" ], "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/coredns", "name": "config-volume", "readOnly": true } ] } ], "dnsPolicy": "Default", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "coredns", "serviceAccountName": "coredns", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/control-plane" } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "Corefile", "path": "Corefile" } ], "name": "coredns" }, "name": "config-volume" } ] } } }, "status": { "observedGeneration": 5, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-07-10T09:37:06Z", "generation": 1, "labels": { "k8s-app": "metrics-server", "pod-template-hash": "56ff78d5b7" }, "name": "metrics-server-56ff78d5b7", "namespace": "kube-system", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "metrics-server", "uid": "f9c9b33f-e46d-47b6-a05d-a63def87193c" } ], "resourceVersion": "841", "uid": "edda641c-f0e6-4bb7-ba8f-bb760cef5fda" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "k8s-app": "metrics-server", "pod-template-hash": "56ff78d5b7" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "k8s-app": "metrics-server", "pod-template-hash": "56ff78d5b7" } }, "spec": { "containers": [ { "args": [ "--cert-dir=/tmp", "--secure-port=10250", "--kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname", "--kubelet-use-node-status-port", "--metric-resolution=15s", "--kubelet-insecure-tls" ], "image": "registry.k8s.io/metrics-server/metrics-server:v0.8.1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/livez", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "metrics-server", "ports": [ { "containerPort": 10250, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": "https", "scheme": "HTTPS" }, "initialDelaySeconds": 20, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "runAsUser": 1000, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp-dir" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "metrics-server", "serviceAccountName": "metrics-server", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "tmp-dir" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:37:05Z", "generation": 2, "labels": { "k8s-app": "metrics-server", "pod-template-hash": "64fc5f7866" }, "name": "metrics-server-64fc5f7866", "namespace": "kube-system", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "metrics-server", "uid": "f9c9b33f-e46d-47b6-a05d-a63def87193c" } ], "resourceVersion": "854", "uid": "927f2498-bdeb-423e-a0c1-dd35effe769d" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "k8s-app": "metrics-server", "pod-template-hash": "64fc5f7866" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "k8s-app": "metrics-server", "pod-template-hash": "64fc5f7866" } }, "spec": { "containers": [ { "args": [ "--cert-dir=/tmp", "--secure-port=10250", "--kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname", "--kubelet-use-node-status-port", "--metric-resolution=15s" ], "image": "registry.k8s.io/metrics-server/metrics-server:v0.8.1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/livez", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "metrics-server", "ports": [ { "containerPort": 10250, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": "https", "scheme": "HTTPS" }, "initialDelaySeconds": 20, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "runAsUser": 1000, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp-dir" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "metrics-server", "serviceAccountName": "metrics-server", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "tmp-dir" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:45:56Z", "generation": 1, "labels": { "app.kubernetes.io/component": "admission-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/name": "kyverno-admission-controller", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.18.1", "pod-template-hash": "57c64f5f4d" }, "name": "kyverno-admission-controller-57c64f5f4d", "namespace": "kyverno", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kyverno-admission-controller", "uid": "feaaee09-4def-4344-bd0e-9eb0a078f50e" } ], "resourceVersion": "13421", "uid": "57857fb6-4cc6-4b90-9eef-3413835df8a2" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "admission-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "pod-template-hash": "57c64f5f4d" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "admission-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/name": "kyverno-admission-controller", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.18.1", "pod-template-hash": "57c64f5f4d" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app.kubernetes.io/component", "operator": "In", "values": [ "admission-controller" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 1 } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--caSecretName=kyverno-svc.kyverno.svc.kyverno-tls-ca", "--tlsSecretName=kyverno-svc.kyverno.svc.kyverno-tls-pair", "--tlsKeyAlgorithm=RSA", "--backgroundServiceAccountName=system:serviceaccount:kyverno:kyverno-background-controller", "--reportsServiceAccountName=system:serviceaccount:kyverno:kyverno-reports-controller", "--servicePort=443", "--webhookServerPort=9443", "--resyncPeriod=15m", "--crdWatcher=false", "--disableMetrics=false", "--otelConfig=prometheus", "--metricsPort=8000", "--admissionReports=true", "--maxAdmissionReports=1000", "--autoUpdateWebhooks=true", "--enableConfigMapCaching=true", "--controllerRuntimeMetricsAddress=:8080", "--enableDeferredLoading=true", "--dumpPayload=false", "--forceFailurePolicyIgnore=false", "--generateValidatingAdmissionPolicy=true", "--generateMutatingAdmissionPolicy=false", "--dumpPatches=false", "--maxAPICallResponseLength=2000000", "--apiCallTimeout=30s", "--loggingFormat=text", "--v=2", "--omitEvents=PolicyApplied,PolicySkipped", "--enablePolicyException=false", "--protectManagedResources=false", "--allowInsecureRegistry=false", "--registryCredentialHelpers=default,google,amazon,azure,github", "--enableReporting=validate,mutate,mutateExisting,imageVerify,generate" ], "env": [ { "name": "INIT_CONFIG", "value": "kyverno" }, { "name": "METRICS_CONFIG", "value": "kyverno-metrics" }, { "name": "KYVERNO_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "KYVERNO_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "KYVERNO_SERVICEACCOUNT_NAME", "value": "kyverno-admission-controller" }, { "name": "KYVERNO_ROLE_NAME", "value": "kyverno:admission-controller" }, { "name": "KYVERNO_SVC", "value": "kyverno-svc" }, { "name": "TUF_ROOT", "value": "/.sigstore" }, { "name": "KYVERNO_DEPLOYMENT", "value": "kyverno-admission-controller" } ], "image": "reg.kyverno.io/kyverno/kyverno:v1.18.1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 2, "httpGet": { "path": "/health/liveness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "kyverno", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" }, { "containerPort": 8000, "name": "metrics-port", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 6, "httpGet": { "path": "/health/readiness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "memory": "384Mi" }, "requests": { "cpu": "1m", "memory": "1Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "startupProbe": { "failureThreshold": 20, "httpGet": { "path": "/health/liveness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 6, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/.sigstore", "name": "sigstore" }, { "mountPath": "/var/run/secrets/kyverno/apicall", "name": "apicall-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "--loggingFormat=text", "--v=2", "--openreportsEnabled=false" ], "env": [ { "name": "KYVERNO_SERVICEACCOUNT_NAME", "value": "kyverno-admission-controller" }, { "name": "KYVERNO_ROLE_NAME", "value": "kyverno:admission-controller" }, { "name": "INIT_CONFIG", "value": "kyverno" }, { "name": "METRICS_CONFIG", "value": "kyverno-metrics" }, { "name": "KYVERNO_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "KYVERNO_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "KYVERNO_DEPLOYMENT", "value": "kyverno-admission-controller" }, { "name": "KYVERNO_SVC", "value": "kyverno-svc" } ], "image": "reg.kyverno.io/kyverno/kyvernopre:v1.18.1", "imagePullPolicy": "IfNotPresent", "name": "kyverno-pre", "resources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kyverno-admission-controller", "serviceAccountName": "kyverno-admission-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "sigstore" }, { "name": "apicall-token", "projected": { "defaultMode": 292, "sources": [ { "serviceAccountToken": { "audience": "kyverno-svc.kyverno.io", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:45:56Z", "generation": 1, "labels": { "app.kubernetes.io/component": "background-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/name": "kyverno-background-controller", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.18.1", "pod-template-hash": "6d8f5f4667" }, "name": "kyverno-background-controller-6d8f5f4667", "namespace": "kyverno", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kyverno-background-controller", "uid": "5b743253-9293-4615-b67f-4f7814437b23" } ], "resourceVersion": "13388", "uid": "c65e3485-baa1-4036-b048-5777d548737b" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "background-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "pod-template-hash": "6d8f5f4667" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "background-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/name": "kyverno-background-controller", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.18.1", "pod-template-hash": "6d8f5f4667" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app.kubernetes.io/component", "operator": "In", "values": [ "background-controller" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 1 } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--disableMetrics=false", "--otelConfig=prometheus", "--metricsPort=8000", "--resyncPeriod=15m", "--enableConfigMapCaching=true", "--controllerRuntimeMetricsAddress=:8080", "--enableDeferredLoading=true", "--maxAPICallResponseLength=2000000", "--apiCallTimeout=30s", "--loggingFormat=text", "--v=2", "--omitEvents=PolicyApplied,PolicySkipped", "--enablePolicyException=false", "--enableReporting=validate,mutate,mutateExisting,imageVerify,generate" ], "env": [ { "name": "KYVERNO_SERVICEACCOUNT_NAME", "value": "kyverno-background-controller" }, { "name": "KYVERNO_DEPLOYMENT", "value": "kyverno-background-controller" }, { "name": "INIT_CONFIG", "value": "kyverno" }, { "name": "METRICS_CONFIG", "value": "kyverno-metrics" }, { "name": "KYVERNO_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "KYVERNO_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "reg.kyverno.io/kyverno/background-controller:v1.18.1", "imagePullPolicy": "IfNotPresent", "name": "controller", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" }, { "containerPort": 8000, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "memory": "128Mi" }, "requests": { "cpu": "1m", "memory": "1Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/secrets/kyverno/apicall", "name": "apicall-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kyverno-background-controller", "serviceAccountName": "kyverno-background-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "apicall-token", "projected": { "defaultMode": 292, "sources": [ { "serviceAccountToken": { "audience": "kyverno-svc.kyverno.io", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "0", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:45:56Z", "generation": 1, "labels": { "app.kubernetes.io/component": "cleanup-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/name": "kyverno-cleanup-controller", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.18.1", "pod-template-hash": "8fbd5fdcb" }, "name": "kyverno-cleanup-controller-8fbd5fdcb", "namespace": "kyverno", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kyverno-cleanup-controller", "uid": "9615425e-2df4-4a9c-95d0-010a8ec8710d" } ], "resourceVersion": "4270", "uid": "02b037e6-7188-4141-8239-7aea42ef66cd" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/component": "cleanup-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "pod-template-hash": "8fbd5fdcb" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "cleanup-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/name": "kyverno-cleanup-controller", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.18.1", "pod-template-hash": "8fbd5fdcb" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app.kubernetes.io/component", "operator": "In", "values": [ "cleanup-controller" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 1 } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--caSecretName=kyverno-cleanup-controller.kyverno.svc.kyverno-tls-ca", "--tlsSecretName=kyverno-cleanup-controller.kyverno.svc.kyverno-tls-pair", "--tlsKeyAlgorithm=RSA", "--servicePort=443", "--resyncPeriod=15m", "--cleanupServerPort=9443", "--disableMetrics=false", "--otelConfig=prometheus", "--metricsPort=8000", "--enableDeferredLoading=true", "--dumpPayload=false", "--maxAPICallResponseLength=2000000", "--apiCallTimeout=30s", "--loggingFormat=text", "--v=2", "--protectManagedResources=false", "--ttlReconciliationInterval=1m" ], "env": [ { "name": "KYVERNO_DEPLOYMENT", "value": "kyverno-cleanup-controller" }, { "name": "INIT_CONFIG", "value": "kyverno" }, { "name": "METRICS_CONFIG", "value": "kyverno-metrics" }, { "name": "KYVERNO_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "KYVERNO_SERVICEACCOUNT_NAME", "value": "kyverno-cleanup-controller" }, { "name": "KYVERNO_ROLE_NAME", "value": "kyverno:cleanup-controller" }, { "name": "KYVERNO_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "KYVERNO_SVC", "value": "kyverno-cleanup-controller" } ], "image": "reg.kyverno.io/kyverno/cleanup-controller:v1.18.1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 2, "httpGet": { "path": "/health/liveness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "controller", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" }, { "containerPort": 8000, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 6, "httpGet": { "path": "/health/readiness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "memory": "128Mi" }, "requests": { "cpu": "100m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsGroup": 65534, "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "startupProbe": { "failureThreshold": 20, "httpGet": { "path": "/health/liveness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 6, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/secrets/kyverno/apicall", "name": "apicall-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kyverno-cleanup-controller", "serviceAccountName": "kyverno-cleanup-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "apicall-token", "projected": { "defaultMode": 292, "sources": [ { "serviceAccountToken": { "audience": "kyverno-svc.kyverno.io", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "observedGeneration": 1, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "0", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:45:56Z", "generation": 1, "labels": { "app.kubernetes.io/component": "reports-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/name": "kyverno-reports-controller", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.18.1", "pod-template-hash": "5664d4f95f" }, "name": "kyverno-reports-controller-5664d4f95f", "namespace": "kyverno", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kyverno-reports-controller", "uid": "5f3f8940-d00a-4971-99b3-80be34461d0d" } ], "resourceVersion": "4277", "uid": "c700177c-1137-4161-aee7-afb72651edd2" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/component": "reports-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "pod-template-hash": "5664d4f95f" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "reports-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/name": "kyverno-reports-controller", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.18.1", "pod-template-hash": "5664d4f95f" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app.kubernetes.io/component", "operator": "In", "values": [ "reports-controller" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 1 } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--disableMetrics=false", "--openreportsEnabled=false", "--otelConfig=prometheus", "--metricsPort=8000", "--resyncPeriod=15m", "--admissionReports=true", "--aggregateReports=true", "--policyReports=true", "--validatingAdmissionPolicyReports=true", "--mutatingAdmissionPolicyReports=false", "--backgroundScan=true", "--backgroundScanWorkers=2", "--backgroundScanInterval=1h", "--skipResourceFilters=true", "--enableConfigMapCaching=true", "--enableDeferredLoading=true", "--maxAPICallResponseLength=2000000", "--apiCallTimeout=30s", "--loggingFormat=text", "--v=2", "--omitEvents=PolicyApplied,PolicySkipped", "--enablePolicyException=false", "--allowInsecureRegistry=false", "--registryCredentialHelpers=default,google,amazon,azure,github", "--enableReporting=validate,mutate,mutateExisting,imageVerify,generate" ], "env": [ { "name": "KYVERNO_SERVICEACCOUNT_NAME", "value": "kyverno-reports-controller" }, { "name": "KYVERNO_DEPLOYMENT", "value": "kyverno-reports-controller" }, { "name": "INIT_CONFIG", "value": "kyverno" }, { "name": "METRICS_CONFIG", "value": "kyverno-metrics" }, { "name": "KYVERNO_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "KYVERNO_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TUF_ROOT", "value": "/.sigstore" } ], "image": "reg.kyverno.io/kyverno/reports-controller:v1.18.1", "imagePullPolicy": "IfNotPresent", "name": "controller", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" }, { "containerPort": 8000, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "memory": "128Mi" }, "requests": { "cpu": "100m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsGroup": 65534, "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/.sigstore", "name": "sigstore" }, { "mountPath": "/var/run/secrets/kyverno/apicall", "name": "apicall-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kyverno-reports-controller", "serviceAccountName": "kyverno-reports-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "sigstore" }, { "name": "apicall-token", "projected": { "defaultMode": 292, "sources": [ { "serviceAccountToken": { "audience": "kyverno-svc.kyverno.io", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "observedGeneration": 1, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:36:38Z", "generation": 1, "labels": { "app": "local-path-provisioner", "pod-template-hash": "7dc846544d" }, "name": "local-path-provisioner-7dc846544d", "namespace": "local-path-storage", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "local-path-provisioner", "uid": "f72f425b-de3e-4c22-b9d6-1e19b2a8d4ec" } ], "resourceVersion": "483", "uid": "95cb4be6-0d4d-4f88-b7e7-1dd21ad3f537" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "local-path-provisioner", "pod-template-hash": "7dc846544d" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "local-path-provisioner", "pod-template-hash": "7dc846544d" } }, "spec": { "containers": [ { "command": [ "local-path-provisioner", "--debug", "start", "--helper-image", "docker.io/kindest/local-path-helper:v20241212-8ac705d0", "--config", "/etc/config/config.json" ], "env": [ { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "CONFIG_MOUNT_PATH", "value": "/etc/config/" } ], "image": "docker.io/kindest/local-path-provisioner:v20250214-acbabc1a", "imagePullPolicy": "IfNotPresent", "name": "local-path-provisioner", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config/", "name": "config-volume" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "local-path-provisioner-service-account", "serviceAccountName": "local-path-provisioner-service-account", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/control-plane", "operator": "Equal" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Equal" } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "local-path-config" }, "name": "config-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/no-anti-affinity": "Using topologySpreadConstraints" }, "creationTimestamp": "2026-07-10T09:50:18Z", "generation": 1, "labels": { "apps": "namespace-lister", "pod-template-hash": "9446cd749" }, "name": "namespace-lister-9446cd749", "namespace": "namespace-lister", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "namespace-lister", "uid": "501d6e87-12e9-4e90-b90f-d3147c613546" } ], "resourceVersion": "7328", "uid": "874fc182-be4b-4230-a23c-c8310060fb6a" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "apps": "namespace-lister", "pod-template-hash": "9446cd749" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "apps": "namespace-lister", "pod-template-hash": "9446cd749" } }, "spec": { "containers": [ { "args": [ "-enable-tls", "-cert-path=/var/tls/tls.crt", "-key-path=/var/tls/tls.key" ], "env": [ { "name": "CACHE_NAMESPACE_LABELSELECTOR", "value": "konflux-ci.dev/type=tenant" }, { "name": "AUTH_USERNAME_HEADER", "value": "X-User" }, { "name": "AUTH_GROUPS_HEADER", "value": "X-Group" } ], "image": "quay.io/konflux-ci/namespace-lister@sha256:4e9615b860ac6a7eae65c5caa982015d4e63ff850fcdb6f1d0d2f01c05e8c798", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 1, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "namespace-lister", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 1, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "namespace-lister", "serviceAccountName": "namespace-lister", "terminationGracePeriodSeconds": 60, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "apps": "namespace-lister" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "ScheduleAnyway" } ], "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "secretName": "namespace-lister-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/env-var-secret": "This is the name of the secret rather than the secret" }, "creationTimestamp": "2026-07-10T09:45:10Z", "generation": 1, "labels": { "app": "pipelines-as-code-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.48.0", "pod-template-hash": "7cd9845f6f" }, "name": "pipelines-as-code-controller-7cd9845f6f", "namespace": "pipelines-as-code", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-as-code-controller", "uid": "b4fd70af-38ae-445e-9349-2ea20486de83" } ], "resourceVersion": "3739", "uid": "c227d349-5d13-4a98-8b61-9880a2212406" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "pod-template-hash": "7cd9845f6f" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-as-code-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.48.0", "pod-template-hash": "7cd9845f6f" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "TLS_KEY", "value": "key" }, { "name": "TLS_CERT", "value": "cert" }, { "name": "TLS_SECRET_NAME", "value": "pipelines-as-code-tls-secret" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "pipelines-as-code-config-observability" }, { "name": "K_SINK_TIMEOUT", "value": "30" }, { "name": "PAC_CONTROLLER_LABEL", "value": "default" }, { "name": "PAC_CONTROLLER_SECRET", "value": "pipelines-as-code-secret" }, { "name": "PAC_CONTROLLER_CONFIGMAP", "value": "pipelines-as-code" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.28.0" }, { "name": "TLS_MIN_VERSION" }, { "name": "TLS_CIPHER_SUITES", "value": "TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256" }, { "name": "TLS_CURVE_PREFERENCES", "value": "X25519,P256" } ], "image": "ghcr.io/tektoncd/pipelines-as-code/pipelines-as-code-controller:v0.48.0", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "api", "scheme": "HTTP" }, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "pac-controller", "ports": [ { "containerPort": 8082, "name": "api", "protocol": "TCP" }, { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "api", "scheme": "HTTP" }, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "50m", "memory": "50Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/pipelines-as-code/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-controller", "serviceAccountName": "pipelines-as-code-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "pipelines-as-code-tls-secret" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:45:11Z", "generation": 1, "labels": { "app": "pipelines-as-code-watcher", "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.48.0", "pod-template-hash": "64d9b6774f" }, "name": "pipelines-as-code-watcher-64d9b6774f", "namespace": "pipelines-as-code", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-as-code-watcher", "uid": "b47b286a-5536-40e9-873e-f86baa26f0ce" } ], "resourceVersion": "3822", "uid": "a97c17a7-e841-4560-aaba-314b4ed90a1a" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "pod-template-hash": "64d9b6774f" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-as-code-watcher", "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.48.0", "pod-template-hash": "64d9b6774f" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipelinesascode" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "pipelines-as-code-config-observability" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "pac-watcher-config-leader-election" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.28.0" } ], "image": "ghcr.io/tektoncd/pipelines-as-code/pipelines-as-code-watcher:v0.48.0", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "pac-watcher", "ports": [ { "containerPort": 8080, "name": "probes", "protocol": "TCP" }, { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "50m", "memory": "50Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-watcher", "serviceAccountName": "pipelines-as-code-watcher", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/env-var-secret": "This is the name of the secret rather than the secret" }, "creationTimestamp": "2026-07-10T09:45:11Z", "generation": 1, "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.48.0", "pod-template-hash": "7bcf76977" }, "name": "pipelines-as-code-webhook-7bcf76977", "namespace": "pipelines-as-code", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-as-code-webhook", "uid": "52039d44-824f-47a4-b65f-784f39afe795" } ], "resourceVersion": "3711", "uid": "aca226d1-6e3d-4eaf-9efd-a983b44ed073" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "pod-template-hash": "7bcf76977" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.48.0", "pod-template-hash": "7bcf76977" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SERVICE_NAME", "value": "pipelines-as-code-webhook" }, { "name": "WEBHOOK_SECRET_NAME", "value": "pipelines-as-code-webhook-certs" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipelinesascode" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "pac-webhook-config-leader-election" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.28.0" } ], "image": "ghcr.io/tektoncd/pipelines-as-code/pipelines-as-code-webhook:v0.48.0", "imagePullPolicy": "IfNotPresent", "name": "pac-webhook", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "50m", "memory": "50Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-webhook", "serviceAccountName": "pipelines-as-code-webhook", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/liveness-port": "Keeping upstream configs", "ignore-check.kube-linter.io/readiness-port": "Keeping upstream configs" }, "creationTimestamp": "2026-07-10T09:50:20Z", "generation": 1, "labels": { "control-plane": "controller-manager", "pod-template-hash": "85c59755f4" }, "name": "release-service-controller-manager-85c59755f4", "namespace": "release-service", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "release-service-controller-manager", "uid": "d4718712-80d8-455e-9494-5974e109612c" } ], "resourceVersion": "7728", "uid": "638ae81d-f21b-40a5-8179-72d62e3b0871" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "controller-manager", "pod-template-hash": "85c59755f4" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager", "pod-template-hash": "85c59755f4" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8080", "--leader-elect=false" ], "command": [ "/manager" ], "env": [ { "name": "DEFAULT_RELEASE_PVC", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_RELEASE_PVC", "name": "release-service-manager-properties", "optional": true } } }, { "name": "DEFAULT_RELEASE_WORKSPACE_NAME", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_RELEASE_WORKSPACE_NAME", "name": "release-service-manager-properties", "optional": true } } }, { "name": "DEFAULT_RELEASE_WORKSPACE_SIZE", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_RELEASE_WORKSPACE_SIZE", "name": "release-service-manager-properties", "optional": true } } }, { "name": "MAX_CONCURRENT_RECONCILES", "value": "10" }, { "name": "SERVICE_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/konflux-ci/release-service:e2ea734989e61089a1738821c66f11fab829cb0f", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "30m", "memory": "256Mi" }, "requests": { "cpu": "30m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "release-service-controller-manager", "serviceAccountName": "release-service-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "name": "cert", "secret": { "defaultMode": 420, "secretName": "webhook-server-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:45:47Z", "generation": 1, "labels": { "app": "gosmee-client", "pod-template-hash": "5df4548fcc" }, "name": "gosmee-client-5df4548fcc", "namespace": "smee-client", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "gosmee-client", "uid": "417e6313-13ea-4393-a98b-727ad1a28734" } ], "resourceVersion": "4280", "uid": "d1f7650b-1c38-477d-a28e-ee78331e5509" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "gosmee-client", "pod-template-hash": "5df4548fcc" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "gosmee-client", "pod-template-hash": "5df4548fcc" } }, "spec": { "containers": [ { "args": [ "client", "https://hook.pipelinesascode.com/FMPGBULUKAyF", "http://localhost:8080" ], "image": "ghcr.io/chmouel/gosmee:v0.31.1", "imagePullPolicy": "Always", "livenessProbe": { "exec": { "command": [ "/shared/check-smee-health.sh" ] }, "failureThreshold": 2, "initialDelaySeconds": 20, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "gosmee", "resources": { "limits": { "cpu": "100m", "memory": "32Mi" }, "requests": { "cpu": "10m", "memory": "32Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "shared-health" } ] }, { "env": [ { "name": "DOWNSTREAM_SERVICE_URL", "value": "http://pipelines-as-code-controller.pipelines-as-code:8180" }, { "name": "SMEE_CHANNEL_URL", "value": "https://hook.pipelinesascode.com/FMPGBULUKAyF" }, { "name": "INSECURE_SKIP_VERIFY", "value": "true" }, { "name": "HEALTH_CHECK_TIMEOUT_SECONDS", "value": "20" } ], "image": "quay.io/konflux-ci/smee-sidecar:latest@sha256:8fa8c2a00cbc727704fe1a1edfe0dbd2febf70c91347a4c34ccd2044d375304b", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "exec": { "command": [ "/shared/check-sidecar-health.sh" ] }, "failureThreshold": 2, "initialDelaySeconds": 10, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "health-check-sidecar", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" }, { "containerPort": 9100, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "100m", "memory": "32Mi" }, "requests": { "cpu": "10m", "memory": "32Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "shared-health" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "shared-health" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:42:32Z", "generation": 1, "labels": { "app": "tekton-operator", "name": "tekton-operator", "pod-template-hash": "6cbfd9684" }, "name": "tekton-operator-6cbfd9684", "namespace": "tekton-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-operator", "uid": "c9c8a79e-0ead-40c4-a4df-a0866c599bcd" } ], "resourceVersion": "1521", "uid": "09742a19-6d92-4ae7-a111-0a6253e51a98" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "tekton-operator", "pod-template-hash": "6cbfd9684" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-operator", "name": "tekton-operator", "pod-template-hash": "6cbfd9684" } }, "spec": { "containers": [ { "args": [ "-controllers", "tektonconfig,tektonpipeline,tektontrigger,tektonhub,tektonchain,tektonresult,tektondashboard,manualapprovalgate,tektonpruner,tektonscheduler,tektonmulticlusterproxyaae,openshiftpipelinesascode", "-unique-process-name", "tekton-operator-lifecycle" ], "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "tekton-operator" }, { "name": "IMAGE_PIPELINES_PROXY", "value": "ghcr.io/tektoncd/operator/proxy-webhook-f6167da7bc41b96a27c5529f850e63d1:v0.80.0@sha256:2260f9bdf1699253a47e5d2664f70465f1a8c59ad7651cede2469a7586774341" }, { "name": "IMAGE_JOB_PRUNER_TKN", "value": "ghcr.io/tektoncd/plumbing/tkn@sha256:233de6c8b8583a34c2379fa98d42dba739146c9336e8d41b66030484357481ed" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "VERSION", "value": "v0.80.0" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-config-observability" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-controller-config-leader-election" }, { "name": "AUTOINSTALL_COMPONENTS", "valueFrom": { "configMapKeyRef": { "key": "AUTOINSTALL_COMPONENTS", "name": "tekton-config-defaults" } } }, { "name": "DEFAULT_TARGET_NAMESPACE", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_TARGET_NAMESPACE", "name": "tekton-config-defaults" } } } ], "image": "ghcr.io/tektoncd/operator/operator-303303c315a48490ba6517859ef65b77:v0.80.0@sha256:49f9f258920f77ca9db8031f8ee93b6abef0ff6a1a23254d937fd347601f4853", "imagePullPolicy": "IfNotPresent", "name": "tekton-operator-lifecycle", "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" }, { "args": [ "-controllers", "tektoninstallerset", "-unique-process-name", "tekton-operator-cluster-operations" ], "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "tekton-operator" }, { "name": "PROFILING_PORT", "value": "9009" }, { "name": "VERSION", "value": "v0.80.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-controller-config-leader-election" } ], "image": "ghcr.io/tektoncd/operator/operator-303303c315a48490ba6517859ef65b77:v0.80.0@sha256:49f9f258920f77ca9db8031f8ee93b6abef0ff6a1a23254d937fd347601f4853", "imagePullPolicy": "IfNotPresent", "name": "tekton-operator-cluster-operations", "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "tekton-operator", "serviceAccountName": "tekton-operator", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/env-var-secret": "This is the name of the secret rather than the secret" }, "creationTimestamp": "2026-07-10T09:42:32Z", "generation": 1, "labels": { "app": "tekton-operator", "name": "tekton-operator-webhook", "pod-template-hash": "679cb94c97" }, "name": "tekton-operator-webhook-679cb94c97", "namespace": "tekton-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-operator-webhook", "uid": "8dfba0ad-54a6-4e6a-ba67-6f9c89c59ced" } ], "resourceVersion": "1506", "uid": "e8d171a9-610d-4ab6-8549-83a2ac13a66e" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "tekton-operator-webhook", "pod-template-hash": "679cb94c97" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-operator", "name": "tekton-operator-webhook", "pod-template-hash": "679cb94c97" } }, "spec": { "containers": [ { "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-webhook-config-leader-election" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-operator-webhook" }, { "name": "WEBHOOK_SECRET_NAME", "value": "tekton-operator-webhook-certs" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" } ], "image": "ghcr.io/tektoncd/operator/webhook-f2bb711aa8f0c0892856a4cbf6d9ddd8:v0.80.0@sha256:e4ec282861616a364dd8ad02cadec0fdabe26087605852ec85de3b7c084e5c50", "imagePullPolicy": "IfNotPresent", "name": "tekton-operator-webhook", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "tekton-operator", "serviceAccountName": "tekton-operator", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:44:34Z", "generation": 1, "labels": { "app": "pipelines-as-code-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.48.0", "operator.tekton.dev/deployment-spec-applied-hash": "7635d0108c1fc3f49269aa63ec697cee", "pod-template-hash": "654fdf5c96" }, "name": "pipelines-as-code-controller-654fdf5c96", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-as-code-controller", "uid": "6d823a4e-de46-43af-b569-c5d7071913e9" } ], "resourceVersion": "3211", "uid": "44359721-a6bd-4644-9b04-66aace79b171" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "pod-template-hash": "654fdf5c96" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-as-code-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.48.0", "operator.tekton.dev/deployment-spec-applied-hash": "7635d0108c1fc3f49269aa63ec697cee", "pod-template-hash": "654fdf5c96" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "pipelines-as-code-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "K_SINK_TIMEOUT", "value": "30" }, { "name": "PAC_CONTROLLER_CONFIGMAP", "value": "pipelines-as-code" }, { "name": "PAC_CONTROLLER_LABEL", "value": "default" }, { "name": "PAC_CONTROLLER_SECRET", "value": "pipelines-as-code-secret" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TLS_CERT", "value": "cert" }, { "name": "TLS_CIPHER_SUITES", "value": "TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256" }, { "name": "TLS_CURVE_PREFERENCES", "value": "X25519,P256" }, { "name": "TLS_KEY", "value": "key" }, { "name": "TLS_MIN_VERSION" }, { "name": "TLS_SECRET_NAME", "value": "pipelines-as-code-tls-secret" } ], "image": "ghcr.io/tektoncd/pipelines-as-code/pipelines-as-code-controller:v0.48.0", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "api", "scheme": "HTTP" }, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "pac-controller", "ports": [ { "containerPort": 8082, "name": "api", "protocol": "TCP" }, { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "api", "scheme": "HTTP" }, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/pipelines-as-code/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-controller", "serviceAccountName": "pipelines-as-code-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "pipelines-as-code-tls-secret" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:44:34Z", "generation": 1, "labels": { "app": "pipelines-as-code-watcher", "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.48.0", "operator.tekton.dev/deployment-spec-applied-hash": "e55d5e999615e1ed290ae06d64611ecf", "pod-template-hash": "547c9bc698" }, "name": "pipelines-as-code-watcher-547c9bc698", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-as-code-watcher", "uid": "8338ec3f-b4b9-43a6-8436-7eee08ca956f" } ], "resourceVersion": "3287", "uid": "740206c7-f9bb-4a36-b1fb-4334608a7062" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "pod-template-hash": "547c9bc698" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-as-code-watcher", "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.48.0", "operator.tekton.dev/deployment-spec-applied-hash": "e55d5e999615e1ed290ae06d64611ecf", "pod-template-hash": "547c9bc698" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "pac-watcher-config-leader-election" }, { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "pipelines-as-code-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipelinesascode" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/pipelines-as-code/pipelines-as-code-watcher:v0.48.0", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "pac-watcher", "ports": [ { "containerPort": 8080, "name": "probes", "protocol": "TCP" }, { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-watcher", "serviceAccountName": "pipelines-as-code-watcher", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:44:34Z", "generation": 1, "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.48.0", "operator.tekton.dev/deployment-spec-applied-hash": "d7d629b8f2c7aeed2f23a9439131967d", "pod-template-hash": "84cfcb758c" }, "name": "pipelines-as-code-webhook-84cfcb758c", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-as-code-webhook", "uid": "eb079604-004b-4e62-8f2b-ed4d8679e24e" } ], "resourceVersion": "3174", "uid": "611391dc-f57a-46a3-95d6-1f19834e36e6" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "pod-template-hash": "84cfcb758c" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.48.0", "operator.tekton.dev/deployment-spec-applied-hash": "d7d629b8f2c7aeed2f23a9439131967d", "pod-template-hash": "84cfcb758c" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "pac-webhook-config-leader-election" }, { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipelinesascode" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SECRET_NAME", "value": "pipelines-as-code-webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "pipelines-as-code-webhook" } ], "image": "ghcr.io/tektoncd/pipelines-as-code/pipelines-as-code-webhook:v0.48.0", "imagePullPolicy": "IfNotPresent", "name": "pac-webhook", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-webhook", "serviceAccountName": "pipelines-as-code-webhook", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:43:45Z", "generation": 2, "labels": { "app": "tekton-chains-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "40f13e8c231faec745f774520cf96e9d", "pipeline.tekton.dev/release": "v0.27.1", "pod-template-hash": "7676b464dd", "version": "v0.27.1" }, "name": "tekton-chains-controller-7676b464dd", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-chains-controller", "uid": "ce2afa49-041c-402f-a940-968d8ba8b811" } ], "resourceVersion": "3615", "uid": "df59b5ea-62ad-4a36-a1be-2b5488ed4585" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "pod-template-hash": "7676b464dd" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-chains-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "40f13e8c231faec745f774520cf96e9d", "pipeline.tekton.dev/release": "v0.27.1", "pod-template-hash": "7676b464dd", "version": "v0.27.1" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-chains-config-leader-election" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-chains-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/chains" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/chains/github.com/tektoncd/chains/cmd/controller:v0.27.1@sha256:2011424841784c67b7fe9f5a103304859ebd9bb809b3326de6698528b548be17", "imagePullPolicy": "IfNotPresent", "name": "tekton-chains-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsUser": 65532 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/signing-secrets", "name": "signing-secrets" }, { "mountPath": "/var/run/sigstore/cosign", "name": "oidc-info" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-chains-controller", "serviceAccountName": "tekton-chains-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "signing-secrets", "secret": { "defaultMode": 420, "secretName": "signing-secrets" } }, { "name": "oidc-info", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "sigstore", "expirationSeconds": 600, "path": "oidc-token" } } ] } } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-07-10T09:45:08Z", "generation": 1, "labels": { "app": "tekton-chains-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "e0d7139663f1bd447c5bc99bb86a8eb4", "pipeline.tekton.dev/release": "v0.27.1", "pod-template-hash": "8675f95777", "version": "v0.27.1" }, "name": "tekton-chains-controller-8675f95777", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-chains-controller", "uid": "ce2afa49-041c-402f-a940-968d8ba8b811" } ], "resourceVersion": "3603", "uid": "439d029f-b31a-4c05-b9c6-bec708d5ee7c" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "pod-template-hash": "8675f95777" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-chains-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "e0d7139663f1bd447c5bc99bb86a8eb4", "pipeline.tekton.dev/release": "v0.27.1", "pod-template-hash": "8675f95777", "version": "v0.27.1" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-chains-config-leader-election" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-chains-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/chains" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/chains/github.com/tektoncd/chains/cmd/controller:v0.27.1@sha256:2011424841784c67b7fe9f5a103304859ebd9bb809b3326de6698528b548be17", "imagePullPolicy": "IfNotPresent", "name": "tekton-chains-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsUser": 65532 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/signing-secrets", "name": "signing-secrets" }, { "mountPath": "/var/run/sigstore/cosign", "name": "oidc-info" }, { "mountPath": "/etc/ssl/certs", "name": "trusted-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-chains-controller", "serviceAccountName": "tekton-chains-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "signing-secrets", "secret": { "defaultMode": 420, "secretName": "signing-secrets" } }, { "name": "oidc-info", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "sigstore", "expirationSeconds": 600, "path": "oidc-token" } } ] } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:43:00Z", "generation": 1, "labels": { "app": "tekton-events-controller", "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.12.0", "operator.tekton.dev/deployment-spec-applied-hash": "040b9773514d95c4cac51c38f552404d", "pipeline.tekton.dev/release": "v1.12.0", "pod-template-hash": "d578b6f8d", "version": "v1.12.0" }, "name": "tekton-events-controller-d578b6f8d", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-events-controller", "uid": "4d28099d-8c50-4c04-8fd8-e2c3deaad864" } ], "resourceVersion": "2012", "uid": "8d8ac91f-e738-4e30-9210-2c0aba3d07cb" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "d578b6f8d" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-events-controller", "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.12.0", "operator.tekton.dev/deployment-spec-applied-hash": "040b9773514d95c4cac51c38f552404d", "pipeline.tekton.dev/release": "v1.12.0", "pod-template-hash": "d578b6f8d", "version": "v1.12.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } } }, "containers": [ { "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-events" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SSL_CERT_DIR", "value": "/etc/ssl/certs" }, { "name": "SSL_CERT_FILE", "value": "/etc/config-registry-cert/cert" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/pipeline/events-a9042f7efb0cbade2a868a1ee5ddd52c:v1.12.0@sha256:d5d5869215a58fea01ce627d605786090949a324969102ab1fd25716adde10e9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "tekton-events-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config-logging", "name": "config-logging" }, { "mountPath": "/etc/config-registry-cert", "name": "config-registry-cert" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-events-controller", "serviceAccountName": "tekton-events-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "config-logging" }, "name": "config-logging" }, { "configMap": { "defaultMode": 420, "name": "config-registry-cert" }, "name": "config-registry-cert" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:43:00Z", "generation": 1, "labels": { "app": "tekton-operator", "name": "tekton-operator", "operator.tekton.dev/deployment-spec-applied-hash": "b3b023e44c12741e64724118ef3926db", "pod-template-hash": "6df58545d8" }, "name": "tekton-operator-proxy-webhook-6df58545d8", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-operator-proxy-webhook", "uid": "b9101e4b-98ef-4498-949e-49244391ce97" } ], "resourceVersion": "1927", "uid": "320eb5bd-68ee-4221-98bf-ab2edda0e757" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "tekton-operator", "pod-template-hash": "6df58545d8" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-operator", "name": "tekton-operator", "operator.tekton.dev/deployment-spec-applied-hash": "b3b023e44c12741e64724118ef3926db", "pod-template-hash": "6df58545d8" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-proxy-webhook-config-leader-election" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SECRET_NAME", "value": "proxy-webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-operator-proxy-webhook" } ], "image": "ghcr.io/tektoncd/operator/proxy-webhook-f6167da7bc41b96a27c5529f850e63d1:v0.80.0@sha256:2260f9bdf1699253a47e5d2664f70465f1a8c59ad7651cede2469a7586774341", "imagePullPolicy": "IfNotPresent", "name": "proxy", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "500Mi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-operators-proxy-webhook", "serviceAccountName": "tekton-operators-proxy-webhook", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:43:00Z", "generation": 1, "labels": { "app": "tekton-pipelines-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.12.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "28a8f6a6b377353ba5fc122beee45d27", "pipeline.tekton.dev/release": "v1.12.0", "pod-template-hash": "7d9c98c49f", "version": "v1.12.0" }, "name": "tekton-pipelines-controller-7d9c98c49f", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-pipelines-controller", "uid": "71162a54-5ac9-48d4-b294-e4c0a3f2e634" } ], "resourceVersion": "2036", "uid": "4d18caf8-0a2a-4af1-b668-f6b045a40f58" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "7d9c98c49f" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.12.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "28a8f6a6b377353ba5fc122beee45d27", "pipeline.tekton.dev/release": "v1.12.0", "pod-template-hash": "7d9c98c49f", "version": "v1.12.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-entrypoint-image", "ghcr.io/tektoncd/pipeline/entrypoint-bff0a22da108bc2f16c818c97641a296:v1.12.0@sha256:3ec960b07abd85604242e146092e72f11be8787452c2a20d12a37fdee4a666e2", "-nop-image", "ghcr.io/tektoncd/pipeline/nop-8eac7c133edad5df719dc37b36b62482:v1.12.0@sha256:f89fb760b05fdef6895290e524d992b66ede72546622d5028b0406a9bea36d2f", "-sidecarlogresults-image", "ghcr.io/tektoncd/pipeline/sidecarlogresults-7501c6a20d741631510a448b48ab098f:v1.12.0@sha256:8b61bdcad62a99e7b15f9dc92690ea39f49be2c5a1c9f428a0aac712f349543d", "-workingdirinit-image", "ghcr.io/tektoncd/pipeline/workingdirinit-0c558922ec6a1b739e550e349f2d5fc1:v1.12.0@sha256:11031cbed2b8ddbb5af0947a5e0c997ba7cd3da5f309ddfa76e58f5418868d71", "-shell-image", "cgr.dev/chainguard/busybox@sha256:19f02276bf8dbdd62f069b922f10c65262cc34b710eea26ff928129a736be791", "-shell-image-win", "mcr.microsoft.com/powershell:nanoserver@sha256:b6d5ff841b78bdf2dfed7550000fd4f3437385b8fa686ec0f010be24777654d6", "-disable-ha=false" ], "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults" }, { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-controller" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "CONFIG_SPIRE", "value": "config-spire" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipeline" }, { "name": "SSL_CERT_DIR", "value": "/etc/ssl/certs" }, { "name": "SSL_CERT_FILE", "value": "/etc/config-registry-cert/cert" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/pipeline/controller-10a3e32792f33651396d02b6855a6e36:v1.12.0@sha256:8d5f900677386b8fe5371429e9c1461b25de47e5e34736c7f99e82e2c279ebbc", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "tekton-pipelines-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config-logging", "name": "config-logging" }, { "mountPath": "/etc/config-registry-cert", "name": "config-registry-cert" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-controller", "serviceAccountName": "tekton-pipelines-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "config-logging" }, "name": "config-logging" }, { "configMap": { "defaultMode": 420, "name": "config-registry-cert" }, "name": "config-registry-cert" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:43:00Z", "generation": 2, "labels": { "app": "tekton-pipelines-resolvers", "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.12.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "255f71663e6365a23b6a94169eea21dc", "pipeline.tekton.dev/release": "v1.12.0", "pod-template-hash": "5d8785b59", "version": "v1.12.0" }, "name": "tekton-pipelines-remote-resolvers-5d8785b59", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-pipelines-remote-resolvers", "uid": "95bae591-4bad-4dbf-8cb9-df9519ef9867" } ], "resourceVersion": "3512", "uid": "a84e09eb-ec78-4a35-ba04-3e303460a453" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "5d8785b59" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-resolvers", "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.12.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "255f71663e6365a23b6a94169eea21dc", "pipeline.tekton.dev/release": "v1.12.0", "pod-template-hash": "5d8785b59", "version": "v1.12.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "command": [ "/sbin/tini", "--", "/ko-app/resolvers" ], "env": [ { "name": "ARTIFACT_HUB_API", "value": "https://artifacthub.io/" }, { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-resolvers" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/resolution" }, { "name": "PROBES_PORT", "value": "8080" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TEKTON_HUB_API" } ], "image": "ghcr.io/tektoncd/pipeline/resolvers-ff86b24f130c42b88983d3c13993056d:v1.12.0@sha256:b1f06197342ed946b23efd1ce124d7c17d50678b461733a6cc0912b07a4943e7", "imagePullPolicy": "IfNotPresent", "name": "controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "1", "memory": "4Gi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp-clone-volume" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-resolvers", "serviceAccountName": "tekton-pipelines-resolvers", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": { "sizeLimit": "4Gi" }, "name": "tmp-clone-volume" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-07-10T09:45:05Z", "generation": 1, "labels": { "app": "tekton-pipelines-resolvers", "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.12.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "739880a215725d1224d3aab1d9bf9221", "pipeline.tekton.dev/release": "v1.12.0", "pod-template-hash": "d47c498f6", "version": "v1.12.0" }, "name": "tekton-pipelines-remote-resolvers-d47c498f6", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-pipelines-remote-resolvers", "uid": "95bae591-4bad-4dbf-8cb9-df9519ef9867" } ], "resourceVersion": "3499", "uid": "46a4085f-fc2c-46eb-abb9-a307e4910498" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "d47c498f6" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-resolvers", "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.12.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "739880a215725d1224d3aab1d9bf9221", "pipeline.tekton.dev/release": "v1.12.0", "pod-template-hash": "d47c498f6", "version": "v1.12.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "command": [ "/sbin/tini", "--", "/ko-app/resolvers" ], "env": [ { "name": "ARTIFACT_HUB_API", "value": "https://artifacthub.io/" }, { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-resolvers" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "GIT_SSL_CAINFO", "value": "/etc/ssl/certs/ca-bundle.crt" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/resolution" }, { "name": "PROBES_PORT", "value": "8080" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TEKTON_HUB_API" } ], "image": "ghcr.io/tektoncd/pipeline/resolvers-ff86b24f130c42b88983d3c13993056d:v1.12.0@sha256:b1f06197342ed946b23efd1ce124d7c17d50678b461733a6cc0912b07a4943e7", "imagePullPolicy": "IfNotPresent", "name": "controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "1", "memory": "4Gi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp-clone-volume" }, { "mountPath": "/etc/ssl/certs", "name": "trusted-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-resolvers", "serviceAccountName": "tekton-pipelines-resolvers", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": { "sizeLimit": "4Gi" }, "name": "tmp-clone-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:43:00Z", "generation": 5, "labels": { "app": "tekton-pipelines-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.12.0", "operator.tekton.dev/deployment-spec-applied-hash": "964112982901c592d25f97da311c00b9", "pipeline.tekton.dev/release": "v1.12.0", "pod-template-hash": "7c4b4cc6cc", "version": "v1.12.0" }, "name": "tekton-pipelines-webhook-7c4b4cc6cc", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-pipelines-webhook", "uid": "2906b18f-d254-48f6-a262-ddeea157cb2a" } ], "resourceVersion": "18173", "uid": "0bd5e2ae-8938-4653-8e34-31379f9dcda4" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "7c4b4cc6cc" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.12.0", "operator.tekton.dev/deployment-spec-applied-hash": "964112982901c592d25f97da311c00b9", "pipeline.tekton.dev/release": "v1.12.0", "pod-template-hash": "7c4b4cc6cc", "version": "v1.12.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-webhook" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipeline" }, { "name": "PROBES_PORT", "value": "8080" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_ADMISSION_CONTROLLER_NAME", "value": "webhook.pipeline.tekton.dev" }, { "name": "WEBHOOK_PORT", "value": "8443" }, { "name": "WEBHOOK_SECRET_NAME", "value": "webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-pipelines-webhook" } ], "image": "ghcr.io/tektoncd/pipeline/webhook-d4749e605405422fd87700164e31b2d1:v1.12.0@sha256:1e4eded1773f6fa8ec67c9348f84bed0d39666a9698ebd1ffb4eaed88b38f7d4", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "webhook", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "cpu": "500m", "memory": "500Mi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-webhook", "serviceAccountName": "tekton-pipelines-webhook", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 5, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:43:52Z", "generation": 1, "labels": { "app": "tekton-results-api", "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.18.0", "operator.tekton.dev/deployment-spec-applied-hash": "09542cd69bdf1e108d1147d7a4a017c6", "pod-template-hash": "6f7897965b" }, "name": "tekton-results-api-6f7897965b", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-results-api", "uid": "524b371a-5a5c-4fa3-96d2-2a887986060f" } ], "resourceVersion": "2887", "uid": "fbd1bdb0-75c6-4e7b-bec9-5e5c252359d4" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.18.0", "pod-template-hash": "6f7897965b" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-results-api", "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.18.0", "operator.tekton.dev/deployment-spec-applied-hash": "09542cd69bdf1e108d1147d7a4a017c6", "pod-template-hash": "6f7897965b" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.18.0" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "DB_HOST", "value": "tekton-results-postgres-service.tekton-pipelines.svc.cluster.local" }, { "name": "DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_PASSWORD", "name": "tekton-results-postgres" } } }, { "name": "DB_USER", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_USER", "name": "tekton-results-postgres" } } }, { "name": "IS_EXTERNAL_DB", "value": "false" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "LOGGING_PLUGIN_TLS_VERIFICATION_DISABLE", "value": "false" }, { "name": "ROUTE_ENABLED", "value": "false" }, { "name": "ROUTE_TLS_TERMINATION", "value": "edge" } ], "image": "ghcr.io/tektoncd/results/api-b1b7ffa9ba32f7c3020c3b68830b30a8:v0.18.0@sha256:72833d31749615fe45d4f7b7a3d4964e5da1cc2966e983fd31f67720d5c22720", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "api", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "startupProbe": { "failureThreshold": 10, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tekton/results", "name": "config", "readOnly": true }, { "mountPath": "/etc/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-results-api", "serviceAccountName": "tekton-results-api", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "tekton-results-api-config" }, "name": "config" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:43:53Z", "generation": 1, "labels": { "app": "tekton-results-retention-policy-agent", "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/version": "v0.18.0", "operator.tekton.dev/deployment-spec-applied-hash": "5c42c04867c4e2a1d28ac486319efd76", "pod-template-hash": "ddb78fc" }, "name": "tekton-results-retention-policy-agent-ddb78fc", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-results-retention-policy-agent", "uid": "08feb2fa-a438-4752-924f-62587bba847f" } ], "resourceVersion": "2822", "uid": "7e892bb3-0f6f-460d-8b89-eb395ee7b753" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/version": "v0.18.0", "pod-template-hash": "ddb78fc" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-results-retention-policy-agent", "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/version": "v0.18.0", "operator.tekton.dev/deployment-spec-applied-hash": "5c42c04867c4e2a1d28ac486319efd76", "pod-template-hash": "ddb78fc" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "tekton-results-config-logging" }, { "name": "DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_PASSWORD", "name": "tekton-results-postgres" } } }, { "name": "DB_USER", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_USER", "name": "tekton-results-postgres" } } }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/results/retention-policy-agent-07427b345034d96a9a27896ebb138518:v0.18.0@sha256:b523e3d2bc70fbf8089b8b5ee42b506ccd335f10c633e7f975ec0d250e0d2aea", "imagePullPolicy": "IfNotPresent", "name": "retention-policy-agent", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tekton/results", "name": "config", "readOnly": true }, { "mountPath": "/etc/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-results-watcher", "serviceAccountName": "tekton-results-watcher", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "tekton-results-api-config" }, "name": "config" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:43:53Z", "generation": 1, "labels": { "app": "tekton-results-watcher", "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.18.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "9a11b42bd89d802d811ef5ffa7a13653", "pod-template-hash": "64bbfbc954" }, "name": "tekton-results-watcher-64bbfbc954", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-results-watcher", "uid": "8ec675b4-cf52-477b-84e9-0add7f6624d2" } ], "resourceVersion": "2841", "uid": "5337a4b9-cf09-49f8-a729-72572a464b87" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.18.0", "pod-template-hash": "64bbfbc954" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-results-watcher", "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.18.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "9a11b42bd89d802d811ef5ffa7a13653", "pod-template-hash": "64bbfbc954" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.18.0" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-api_addr", "$(TEKTON_RESULTS_API_SERVICE)", "-auth_mode", "$(AUTH_MODE)" ], "env": [ { "name": "AUTH_MODE", "value": "token" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-results-config-leader-election" }, { "name": "CONFIG_LOGGING_NAME", "value": "tekton-results-config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-results-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/results" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TEKTON_RESULTS_API_SERVICE", "value": "tekton-results-api-service.tekton-pipelines.svc.cluster.local:8080" } ], "image": "ghcr.io/tektoncd/results/watcher-83f971ea227fb24157c0c699b824a628:v0.18.0@sha256:4b50291457cb63028e5f9e2acb921b852d9ad0f265562ea0fa83bafc8a58b367", "imagePullPolicy": "IfNotPresent", "name": "watcher", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-results-watcher", "serviceAccountName": "tekton-results-watcher", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:43:27Z", "generation": 1, "labels": { "app": "tekton-triggers-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.36.0", "operator.tekton.dev/deployment-spec-applied-hash": "09ef2ba4f41841583f11cfc031ba634a", "pod-template-hash": "5564644d6f", "triggers.tekton.dev/release": "v0.36.0", "version": "v0.36.0" }, "name": "tekton-triggers-controller-5564644d6f", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-triggers-controller", "uid": "2e918772-a29b-4d9a-aa31-45a1132aceba" } ], "resourceVersion": "2280", "uid": "415a1762-7f48-4548-b8b5-ff10029c67ac" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers", "pod-template-hash": "5564644d6f" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.36.0", "operator.tekton.dev/deployment-spec-applied-hash": "09ef2ba4f41841583f11cfc031ba634a", "pod-template-hash": "5564644d6f", "triggers.tekton.dev/release": "v0.36.0", "version": "v0.36.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-logtostderr", "-stderrthreshold", "INFO", "-el-image", "ghcr.io/tektoncd/triggers/eventlistenersink-7ad1faa98cddbcb0c24990303b220bb8:v0.36.0@sha256:ca044dc8b45cb5f5089faf553b4cbd5f0f8e05fcf8d66db7a703c88a40163a73", "-el-port", "8080", "-el-security-context=true", "-el-read-only-root-filesystem=true", "-el-events", "disable", "-el-readtimeout", "5", "-el-writetimeout", "40", "-el-idletimeout", "120", "-el-timeouthandler", "30", "-el-httpclient-readtimeout", "30", "-el-httpclient-keep-alive", "30", "-el-httpclient-tlshandshaketimeout", "10", "-el-httpclient-responseheadertimeout", "10", "-el-httpclient-expectcontinuetimeout", "1", "-period-seconds", "10", "-failure-threshold", "3" ], "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults-triggers" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-triggers-controllers" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability-triggers" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "METRICS_PROMETHEUS_PORT", "value": "9000" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/triggers/controller-f656ca31de179ab913fa76abc255c315:v0.36.0@sha256:03f192f4aebeb3471db9d390d0532ab4d49e5aeeb70327df91be445f3629e859", "imagePullPolicy": "IfNotPresent", "name": "tekton-triggers-controller", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-controller", "serviceAccountName": "tekton-triggers-controller", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:43:27Z", "generation": 1, "labels": { "app": "tekton-triggers-core-interceptors", "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.36.0", "operator.tekton.dev/deployment-spec-applied-hash": "423beb53dbfae5abeaf1765d3fa44c30", "pod-template-hash": "55d64dcb67", "triggers.tekton.dev/release": "v0.36.0", "version": "v0.36.0" }, "name": "tekton-triggers-core-interceptors-55d64dcb67", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-triggers-core-interceptors", "uid": "b3280115-35c9-4ab1-8b56-30f7e45e8055" } ], "resourceVersion": "2389", "uid": "69c1115a-74ce-4ca1-a321-f62eb8b74cc1" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers", "pod-template-hash": "55d64dcb67" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-core-interceptors", "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.36.0", "operator.tekton.dev/deployment-spec-applied-hash": "423beb53dbfae5abeaf1765d3fa44c30", "pod-template-hash": "55d64dcb67", "triggers.tekton.dev/release": "v0.36.0", "version": "v0.36.0" } }, "spec": { "containers": [ { "args": [ "-logtostderr", "-stderrthreshold", "INFO" ], "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability-triggers" }, { "name": "INTERCEPTOR_TLS_SECRET_NAME", "value": "tekton-triggers-core-interceptors-certs" }, { "name": "INTERCEPTOR_TLS_SVC_NAME", "value": "tekton-triggers-core-interceptors" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/triggers/interceptors-3176d6a3f314c3655b30bfd36e421dd5:v0.36.0@sha256:35e9444ce57aed35f378b18d75e71483d81c41dc7fb6bf44119c5730d617ce54", "imagePullPolicy": "IfNotPresent", "name": "tekton-triggers-core-interceptors", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-core-interceptors", "serviceAccountName": "tekton-triggers-core-interceptors", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-10T09:43:27Z", "generation": 1, "labels": { "app": "tekton-triggers-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.36.0", "operator.tekton.dev/deployment-spec-applied-hash": "93c477c73830a9d593bc653f3d9c072e", "pod-template-hash": "64c5979d4c", "triggers.tekton.dev/release": "v0.36.0", "version": "v0.36.0" }, "name": "tekton-triggers-webhook-64c5979d4c", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-triggers-webhook", "uid": "1fc0363b-a9bb-4489-b9fb-fe7d62e07dd0" } ], "resourceVersion": "2318", "uid": "e3fef6dc-6dc0-45ae-a2fc-3aa0f152f039" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers", "pod-template-hash": "64c5979d4c" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.36.0", "operator.tekton.dev/deployment-spec-applied-hash": "93c477c73830a9d593bc653f3d9c072e", "pod-template-hash": "64c5979d4c", "triggers.tekton.dev/release": "v0.36.0", "version": "v0.36.0" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-triggers-webhook" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SECRET_NAME", "value": "triggers-webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-triggers-webhook" } ], "image": "ghcr.io/tektoncd/triggers/webhook-dd1edc925ee1772a9f76e2c1bc291ef6:v0.36.0@sha256:02d25a89d4b58e7cf341ea32c44d4938eaa3a43b6eafb61d88b9abb0d8a6f67d", "imagePullPolicy": "IfNotPresent", "name": "webhook", "ports": [ { "containerPort": 9000, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-webhook", "serviceAccountName": "tekton-triggers-webhook", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } } ], "kind": "List", "metadata": { "resourceVersion": "" } }