{ "apiVersion": "v1", "items": [ { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/liveness-port": "Keeping upstream configs", "ignore-check.kube-linter.io/readiness-port": "Keeping upstream configs" }, "creationTimestamp": "2026-03-29T00:08:06Z", "generation": 1, "labels": { "control-plane": "controller-manager", "pod-template-hash": "8449d858ff" }, "name": "build-service-controller-manager-8449d858ff", "namespace": "build-service", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "build-service-controller-manager", "uid": "cb82fa83-2507-4ec0-aa67-365991f5199e" } ], "resourceVersion": "4969", "uid": "9f6f5e8e-6e15-4406-9def-c055875c1de5" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "controller-manager", "pod-template-hash": "8449d858ff" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager", "pod-template-hash": "8449d858ff" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8443", "--leader-elect=false", "--health-probe-bind-address=:8081" ], "command": [ "/manager" ], "env": [ { "name": "PAC_WEBHOOK_URL", "value": "https://smee.io/eD7wVjSs9x6FJ" } ], "image": "quay.io/konflux-ci/build-service:ca44d2b8386e0af3ce29d2dc2d639a4e8fae3199", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "1Gi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/ssl/certs/ca-custom-bundle.crt", "name": "trusted-ca", "readOnly": true, "subPath": "ca-bundle.crt" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "build-service-controller-manager", "serviceAccountName": "build-service-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "trusted-ca" }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-03-29T00:03:16Z", "generation": 1, "labels": { "app": "cainjector", "app.kubernetes.io/component": "cainjector", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "cainjector", "app.kubernetes.io/version": "v1.19.4", "helm.sh/chart": "cert-manager-v1.19.4", "pod-template-hash": "5d6f5bdbd9" }, "name": "cert-manager-cainjector-5d6f5bdbd9", "namespace": "cert-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cert-manager-cainjector", "uid": "58e9d7c3-1c4d-4f61-a36c-1f2dc967f16a" } ], "resourceVersion": "758", "uid": "c49ee424-ceba-4618-be72-e5152be5c3e5" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "cainjector", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "cainjector", "pod-template-hash": "5d6f5bdbd9" } }, "template": { "metadata": { "annotations": { "prometheus.io/path": "/metrics", "prometheus.io/port": "9402", "prometheus.io/scrape": "true" }, "creationTimestamp": null, "labels": { "app": "cainjector", "app.kubernetes.io/component": "cainjector", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "cainjector", "app.kubernetes.io/version": "v1.19.4", "helm.sh/chart": "cert-manager-v1.19.4", "pod-template-hash": "5d6f5bdbd9" } }, "spec": { "containers": [ { "args": [ "--v=2", "--leader-election-namespace=kube-system" ], "env": [ { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/jetstack/cert-manager-cainjector:v1.19.4", "imagePullPolicy": "IfNotPresent", "name": "cert-manager-cainjector", "ports": [ { "containerPort": 9402, "name": "http-metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "120m", "memory": "120Mi" }, "requests": { "cpu": "90m", "memory": "90Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cert-manager-cainjector", "serviceAccountName": "cert-manager-cainjector", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-03-29T00:03:16Z", "generation": 1, "labels": { "app": "cert-manager", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "cert-manager", "app.kubernetes.io/version": "v1.19.4", "helm.sh/chart": "cert-manager-v1.19.4", "pod-template-hash": "ffd797b94" }, "name": "cert-manager-ffd797b94", "namespace": "cert-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cert-manager", "uid": "d731cc9c-782b-43c0-877a-00ddb3fe53af" } ], "resourceVersion": "799", "uid": "2b46a7dd-befe-4c3a-96a2-bfcf85cc700a" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "cert-manager", "pod-template-hash": "ffd797b94" } }, "template": { "metadata": { "annotations": { "prometheus.io/path": "/metrics", "prometheus.io/port": "9402", "prometheus.io/scrape": "true" }, "creationTimestamp": null, "labels": { "app": "cert-manager", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "cert-manager", "app.kubernetes.io/version": "v1.19.4", "helm.sh/chart": "cert-manager-v1.19.4", "pod-template-hash": "ffd797b94" } }, "spec": { "containers": [ { "args": [ "--v=2", "--cluster-resource-namespace=$(POD_NAMESPACE)", "--leader-election-namespace=kube-system", "--acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.19.4", "--max-concurrent-challenges=60" ], "env": [ { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/jetstack/cert-manager-controller:v1.19.4", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 8, "httpGet": { "path": "/livez", "port": "http-healthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 15 }, "name": "cert-manager-controller", "ports": [ { "containerPort": 9402, "name": "http-metrics", "protocol": "TCP" }, { "containerPort": 9403, "name": "http-healthz", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "120m", "memory": "120Mi" }, "requests": { "cpu": "90m", "memory": "90Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cert-manager", "serviceAccountName": "cert-manager", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-03-29T00:03:16Z", "generation": 1, "labels": { "app": "webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/version": "v1.19.4", "helm.sh/chart": "cert-manager-v1.19.4", "pod-template-hash": "7dc4fb7b5b" }, "name": "cert-manager-webhook-7dc4fb7b5b", "namespace": "cert-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cert-manager-webhook", "uid": "7926b4da-3a6c-4df4-b5db-30028be2d425" } ], "resourceVersion": "769", "uid": "ab136cbe-f659-4f70-9b3c-6697ab373417" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "webhook", "pod-template-hash": "7dc4fb7b5b" } }, "template": { "metadata": { "annotations": { "prometheus.io/path": "/metrics", "prometheus.io/port": "9402", "prometheus.io/scrape": "true" }, "creationTimestamp": null, "labels": { "app": "webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/version": "v1.19.4", "helm.sh/chart": "cert-manager-v1.19.4", "pod-template-hash": "7dc4fb7b5b" } }, "spec": { "containers": [ { "args": [ "--v=2", "--secure-port=10250", "--dynamic-serving-ca-secret-namespace=$(POD_NAMESPACE)", "--dynamic-serving-ca-secret-name=cert-manager-webhook-ca", "--dynamic-serving-dns-names=cert-manager-webhook", "--dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE)", "--dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE).svc" ], "env": [ { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/jetstack/cert-manager-webhook:v1.19.4", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/livez", "port": "healthcheck", "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "cert-manager-webhook", "ports": [ { "containerPort": 10250, "name": "https", "protocol": "TCP" }, { "containerPort": 6080, "name": "healthcheck", "protocol": "TCP" }, { "containerPort": 9402, "name": "http-metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "healthcheck", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "120m", "memory": "120Mi" }, "requests": { "cpu": "90m", "memory": "90Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cert-manager-webhook", "serviceAccountName": "cert-manager-webhook", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/readiness-port": "Keeping upstream configs" }, "creationTimestamp": "2026-03-29T00:03:39Z", "generation": 1, "labels": { "app": "trust-manager", "app.kubernetes.io/instance": "trust-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "trust-manager", "app.kubernetes.io/version": "v0.21.0", "helm.sh/chart": "trust-manager-v0.21.0", "pod-template-hash": "5d5c6867f9" }, "name": "trust-manager-5d5c6867f9", "namespace": "cert-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "trust-manager", "uid": "935e595f-d14e-4539-b953-515a06f889b4" } ], "resourceVersion": "923", "uid": "8292fbfb-d5d4-4f58-b9c7-42d2bd54eccd" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "trust-manager", "pod-template-hash": "5d5c6867f9" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "trust-manager", "app.kubernetes.io/instance": "trust-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "trust-manager", "app.kubernetes.io/version": "v0.21.0", "helm.sh/chart": "trust-manager-v0.21.0", "pod-template-hash": "5d5c6867f9" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--log-format=text", "--log-level=1", "--metrics-port=9402", "--readiness-probe-port=6060", "--readiness-probe-path=/readyz", "--leader-elect=true", "--leader-election-lease-duration=15s", "--leader-election-renew-deadline=10s", "--trust-namespace=cert-manager", "--webhook-host=0.0.0.0", "--webhook-port=6443", "--webhook-certificate-dir=/tls", "--default-package-location=/packages/cert-manager-package-debian.json" ], "image": "quay.io/jetstack/trust-manager:v0.21.0", "imagePullPolicy": "IfNotPresent", "name": "trust-manager", "ports": [ { "containerPort": 6443, "name": "webhook", "protocol": "TCP" }, { "containerPort": 9402, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 6060, "scheme": "HTTP" }, "initialDelaySeconds": 3, "periodSeconds": 7, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "100m", "memory": "250Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tls", "name": "tls", "readOnly": true }, { "mountPath": "/packages", "name": "packages", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "/copyandmaybepause", "/debian-package", "/packages" ], "image": "quay.io/jetstack/trust-pkg-debian-bookworm:20230311-deb12u1.4", "imagePullPolicy": "IfNotPresent", "name": "cert-manager-package-debian", "resources": { "limits": { "cpu": "100m", "memory": "250Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/packages", "name": "packages" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "trust-manager", "serviceAccountName": "trust-manager", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": { "sizeLimit": "50M" }, "name": "packages" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "trust-manager-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-03-29T00:06:21Z", "generation": 1, "labels": { "app": "dex", "pod-template-hash": "5bc5c97b44" }, "name": "dex-5bc5c97b44", "namespace": "dex", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "dex", "uid": "a757c823-5c2f-45d3-b3bc-c40c45ef2d22" } ], "resourceVersion": "3760", "uid": "f04335a0-7430-48b8-867e-23e7da7a0e36" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "dex", "pod-template-hash": "5bc5c97b44" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "dex", "pod-template-hash": "5bc5c97b44" } }, "spec": { "containers": [ { "command": [ "/usr/local/bin/dex", "serve", "/etc/dex/cfg/config.yaml" ], "env": [ { "name": "CLIENT_SECRET", "valueFrom": { "secretKeyRef": { "key": "client-secret", "name": "oauth2-proxy-client-secret" } } } ], "image": "ghcr.io/dexidp/dex:v2.45.1", "imagePullPolicy": "IfNotPresent", "name": "dex", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" }, { "containerPort": 5558, "name": "telemetry", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/ready", "port": "telemetry", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "50m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/dex/cfg", "name": "dex" }, { "mountPath": "/etc/dex/tls", "name": "tls" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "dex", "serviceAccountName": "dex", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.yaml", "path": "config.yaml" } ], "name": "dex-95hmh8df2t" }, "name": "dex" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "dex-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-03-29T00:10:17Z", "generation": 1, "labels": { "control-plane": "controller-manager", "pod-template-hash": "769cb8dd56" }, "name": "image-controller-controller-manager-769cb8dd56", "namespace": "image-controller", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "image-controller-controller-manager", "uid": "1b54c47e-5e1c-4b55-8461-fcb1e21946e7" } ], "resourceVersion": "6152", "uid": "9973a3db-4365-426a-8e82-2547fc51a73f" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "controller-manager", "pod-template-hash": "769cb8dd56" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager", "pod-template-hash": "769cb8dd56" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8443", "--leader-elect=false", "--health-probe-bind-address=:8081" ], "command": [ "/manager" ], "image": "quay.io/redhat-user-workloads/rhtap-build-tenant/image-controller/image-controller:292f181e2ab5575c13f41ddf6aae446344f59783.instrumented", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 8081, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/workspace", "name": "quaytoken", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "image-controller-controller-manager", "serviceAccountName": "image-controller-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "name": "quaytoken", "secret": { "defaultMode": 420, "secretName": "quaytoken" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-03-29T00:08:17Z", "generation": 1, "labels": { "control-plane": "controller-manager", "pod-template-hash": "6d87ccc4f7" }, "name": "integration-service-controller-manager-6d87ccc4f7", "namespace": "integration-service", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "integration-service-controller-manager", "uid": "5b7fdae2-3fe0-4dbd-b202-f1addab53d44" } ], "resourceVersion": "5104", "uid": "17f0e6ff-ee3d-4d43-8c8b-808d0e443c24" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "controller-manager", "pod-template-hash": "6d87ccc4f7" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager", "pod-template-hash": "6d87ccc4f7" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8080", "--leader-elect", "--lease-duration=30s", "--leader-renew-deadline=15s", "--leader-elector-retry-period=5s" ], "command": [ "/manager" ], "image": "quay.io/konflux-ci/integration-service:9b742d08c33530749ae60562698b5ddf68c22f92", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" }, { "containerPort": 8081, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "integration-service-controller-manager", "serviceAccountName": "integration-service-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "name": "cert", "secret": { "defaultMode": 420, "secretName": "webhook-server-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/no-read-only-root-fs": "This component requires write permissions", "ignore-check.kube-linter.io/run-as-non-root": "This component requires root permissions" }, "creationTimestamp": "2026-03-29T00:06:23Z", "generation": 1, "labels": { "pod-template-hash": "6546dff65", "run": "registry" }, "name": "registry-6546dff65", "namespace": "kind-registry", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "registry", "uid": "79dfc9e3-97e8-4b65-88e5-4cdf1822d8d9" } ], "resourceVersion": "3532", "uid": "366f44dd-5b37-4714-8c29-2cadcd9a1f15" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "pod-template-hash": "6546dff65", "run": "registry" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "pod-template-hash": "6546dff65", "run": "registry" } }, "spec": { "containers": [ { "args": [ "/etc/zot/config.json" ], "image": "quay.io/konflux-ci/zot:208b9a64ab9ef4682e838945a1a1582fafe600ae", "imagePullPolicy": "IfNotPresent", "name": "registry", "ports": [ { "containerPort": 5000, "protocol": "TCP" } ], "resources": { "limits": { "cpu": "100m", "memory": "250Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/certs", "name": "certs", "readOnly": true }, { "mountPath": "/etc/zot", "name": "zot-config", "readOnly": true }, { "mountPath": "/var/lib/registry", "name": "storage" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "certs", "secret": { "defaultMode": 420, "secretName": "local-registry-tls" } }, { "configMap": { "defaultMode": 420, "name": "zot-config" }, "name": "zot-config" }, { "emptyDir": {}, "name": "storage" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/no-anti-affinity": "Using topologySpreadConstraints" }, "creationTimestamp": "2026-03-29T00:08:22Z", "generation": 1, "labels": { "app": "proxy", "pod-template-hash": "58b4fb488" }, "name": "proxy-58b4fb488", "namespace": "konflux-ui", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "proxy", "uid": "7315779b-485a-4d77-ae77-d79c4a682f87" } ], "resourceVersion": "5859", "uid": "56216978-47a7-47db-8cda-123feebcb73b" }, "spec": { "minReadySeconds": 30, "replicas": 1, "selector": { "matchLabels": { "app": "proxy", "pod-template-hash": "58b4fb488" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "proxy", "pod-template-hash": "58b4fb488" } }, "spec": { "containers": [ { "command": [ "nginx", "-g", "daemon off;", "-c", "/etc/nginx/nginx.conf" ], "image": "registry.access.redhat.com/ubi9/nginx-124@sha256:a75f10d71969dd2451914df6539dea28f8e2c88506f691ea211768a0bd0746d1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 60, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "nginx", "ports": [ { "containerPort": 8080, "name": "web", "protocol": "TCP" }, { "containerPort": 9443, "name": "web-tls", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "300m", "memory": "256Mi" }, "requests": { "cpu": "30m", "memory": "128Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/nginx/nginx.conf", "name": "proxy", "readOnly": true, "subPath": "nginx.conf" }, { "mountPath": "/var/log/nginx", "name": "logs" }, { "mountPath": "/var/lib/nginx/tmp", "name": "nginx-tmp" }, { "mountPath": "/run", "name": "run" }, { "mountPath": "/mnt", "name": "serving-cert" }, { "mountPath": "/mnt/nginx-generated-config", "name": "nginx-generated-config" }, { "mountPath": "/mnt/nginx-additional-location-configs", "name": "nginx-static" }, { "mountPath": "/opt/app-root/src/static-content", "name": "static-content" } ] }, { "args": [ "--provider", "oidc", "--provider-display-name", "Dex OIDC", "--client-id", "oauth2-proxy", "--http-address", "127.0.0.1:6000", "--redirect-url", "https://35.164.181.12:9443/oauth2/callback", "--oidc-issuer-url", "https://35.164.181.12:9443/idp/", "--skip-oidc-discovery", "--login-url", "https://35.164.181.12:9443/idp/auth", "--redeem-url", "https://dex.dex.svc.cluster.local:9443/idp/token", "--oidc-jwks-url", "https://dex.dex.svc.cluster.local:9443/idp/keys", "--cookie-secure", "true", "--cookie-name", "__Host-konflux-ci-cookie", "--email-domain", "*", "--ssl-insecure-skip-verify", "true", "--set-xauthrequest", "true", "--whitelist-domain", "35.164.181.12:9443", "--skip-jwt-bearer-tokens" ], "env": [ { "name": "OAUTH2_PROXY_CLIENT_SECRET", "valueFrom": { "secretKeyRef": { "key": "client-secret", "name": "oauth2-proxy-client-secret" } } }, { "name": "OAUTH2_PROXY_COOKIE_SECRET", "valueFrom": { "secretKeyRef": { "key": "cookie-secret", "name": "oauth2-proxy-cookie-secret" } } } ], "image": "quay.io/oauth2-proxy/oauth2-proxy:latest@sha256:d963570b1f7e399bc42caace45433aab09e7ae76de5610fde97ba32029b6150a", "imagePullPolicy": "Always", "name": "oauth2-proxy", "ports": [ { "containerPort": 6000, "name": "web", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "300m", "memory": "256Mi" }, "requests": { "cpu": "30m", "memory": "128Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "cp", "-R", "/opt/app-root/src/.", "/mnt/static-content/" ], "image": "quay.io/konflux-ci/konflux-ui@sha256:ccd4a980791307b0fe6b177e64eaccf0574a91b13f5685323c6456c33e7b749c", "imagePullPolicy": "IfNotPresent", "name": "copy-static-content", "resources": { "limits": { "cpu": "50m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/mnt/static-content", "name": "static-content" } ] }, { "command": [ "sh", "-c", "set -e\n\n# Copy the auth.conf template and replace the bearer token\ntoken=$(cat /mnt/api-token/token)\nsed \"s/__BEARER_TOKEN__/$token/\" /mnt/nginx-templates/auth.conf \u003e /mnt/nginx-generated-config/auth.conf\nchmod 640 /mnt/nginx-generated-config/auth.conf\n" ], "image": "registry.access.redhat.com/ubi9/ubi@sha256:66233eebd72bb5baa25190d4f55e1dc3fff3a9b77186c1f91a0abdb274452072", "imagePullPolicy": "IfNotPresent", "name": "generate-nginx-configs", "resources": { "limits": { "cpu": "50m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/mnt/nginx-generated-config", "name": "nginx-generated-config" }, { "mountPath": "/mnt/nginx-templates", "name": "nginx-templates" }, { "mountPath": "/mnt/api-token", "name": "api-token" } ] } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "proxy", "serviceAccountName": "proxy", "terminationGracePeriodSeconds": 30, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "app": "proxy" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "ScheduleAnyway" } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "nginx.conf", "path": "nginx.conf" } ], "name": "proxy-6bg85b98b7" }, "name": "proxy" }, { "configMap": { "defaultMode": 420, "name": "proxy-nginx-templates-4m8fgtf4m9" }, "name": "nginx-templates" }, { "name": "nginx-static", "projected": { "defaultMode": 420, "sources": [ { "configMap": { "name": "proxy-nginx-static-fmmfg7d22f" } }, { "configMap": { "name": "nginx-idp-location-h959ghd6bh" } } ] } }, { "emptyDir": {}, "name": "logs" }, { "emptyDir": {}, "name": "nginx-tmp" }, { "emptyDir": {}, "name": "run" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "emptyDir": {}, "name": "nginx-generated-config" }, { "name": "api-token", "secret": { "defaultMode": 420, "secretName": "proxy" } }, { "emptyDir": {}, "name": "static-content" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-03-29T00:02:20Z", "generation": 1, "labels": { "k8s-app": "kube-dns", "pod-template-hash": "668d6bf9bc" }, "name": "coredns-668d6bf9bc", "namespace": "kube-system", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "coredns", "uid": "c2d04dfb-cda9-47ea-924f-81c45abd11e3" } ], "resourceVersion": "483", "uid": "30d34620-f8a8-4e8d-a425-6fd9feaa736e" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "k8s-app": "kube-dns", "pod-template-hash": "668d6bf9bc" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "k8s-app": "kube-dns", "pod-template-hash": "668d6bf9bc" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "k8s-app", "operator": "In", "values": [ "kube-dns" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-conf", "/etc/coredns/Corefile" ], "image": "registry.k8s.io/coredns/coredns:v1.11.3", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/health", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "coredns", "ports": [ { "containerPort": 53, "name": "dns", "protocol": "UDP" }, { "containerPort": 53, "name": "dns-tcp", "protocol": "TCP" }, { "containerPort": 9153, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": 8181, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "memory": "170Mi" }, "requests": { "cpu": "100m", "memory": "70Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "add": [ "NET_BIND_SERVICE" ], "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/coredns", "name": "config-volume", "readOnly": true } ] } ], "dnsPolicy": "Default", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "coredns", "serviceAccountName": "coredns", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/control-plane" } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "Corefile", "path": "Corefile" } ], "name": "coredns" }, "name": "config-volume" } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-03-29T00:07:12Z", "generation": 1, "labels": { "app.kubernetes.io/component": "admission-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.17.1", "pod-template-hash": "58c9d79bd8" }, "name": "kyverno-admission-controller-58c9d79bd8", "namespace": "kyverno", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kyverno-admission-controller", "uid": "849b7816-fccb-4392-a346-4e24b012c5c6" } ], "resourceVersion": "3979", "uid": "89db1ae6-00e5-4493-b4eb-34409e58a6a6" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "admission-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "pod-template-hash": "58c9d79bd8" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "admission-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.17.1", "pod-template-hash": "58c9d79bd8" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app.kubernetes.io/component", "operator": "In", "values": [ "admission-controller" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 1 } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--caSecretName=kyverno-svc.kyverno.svc.kyverno-tls-ca", "--tlsSecretName=kyverno-svc.kyverno.svc.kyverno-tls-pair", "--tlsKeyAlgorithm=RSA", "--backgroundServiceAccountName=system:serviceaccount:kyverno:kyverno-background-controller", "--reportsServiceAccountName=system:serviceaccount:kyverno:kyverno-reports-controller", "--servicePort=443", "--webhookServerPort=9443", "--resyncPeriod=15m", "--crdWatcher=false", "--disableMetrics=false", "--otelConfig=prometheus", "--metricsPort=8000", "--admissionReports=true", "--maxAdmissionReports=1000", "--autoUpdateWebhooks=true", "--enableConfigMapCaching=true", "--controllerRuntimeMetricsAddress=:8080", "--enableDeferredLoading=true", "--dumpPayload=false", "--forceFailurePolicyIgnore=false", "--generateValidatingAdmissionPolicy=true", "--generateMutatingAdmissionPolicy=false", "--dumpPatches=false", "--maxAPICallResponseLength=2000000", "--loggingFormat=text", "--v=2", "--omitEvents=PolicyApplied,PolicySkipped", "--enablePolicyException=false", "--protectManagedResources=false", "--allowInsecureRegistry=false", "--registryCredentialHelpers=default,google,amazon,azure,github", "--enableReporting=validate,mutate,mutateExisting,imageVerify,generate" ], "env": [ { "name": "INIT_CONFIG", "value": "kyverno" }, { "name": "METRICS_CONFIG", "value": "kyverno-metrics" }, { "name": "KYVERNO_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "KYVERNO_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "KYVERNO_SERVICEACCOUNT_NAME", "value": "kyverno-admission-controller" }, { "name": "KYVERNO_ROLE_NAME", "value": "kyverno:admission-controller" }, { "name": "KYVERNO_SVC", "value": "kyverno-svc" }, { "name": "TUF_ROOT", "value": "/.sigstore" }, { "name": "KYVERNO_DEPLOYMENT", "value": "kyverno-admission-controller" } ], "image": "reg.kyverno.io/kyverno/kyverno:v1.17.1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 2, "httpGet": { "path": "/health/liveness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "kyverno", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" }, { "containerPort": 8000, "name": "metrics-port", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 6, "httpGet": { "path": "/health/readiness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "memory": "384Mi" }, "requests": { "cpu": "1m", "memory": "1Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "startupProbe": { "failureThreshold": 20, "httpGet": { "path": "/health/liveness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 6, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/.sigstore", "name": "sigstore" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "--loggingFormat=text", "--v=2", "--openreportsEnabled=false" ], "env": [ { "name": "KYVERNO_SERVICEACCOUNT_NAME", "value": "kyverno-admission-controller" }, { "name": "KYVERNO_ROLE_NAME", "value": "kyverno:admission-controller" }, { "name": "INIT_CONFIG", "value": "kyverno" }, { "name": "METRICS_CONFIG", "value": "kyverno-metrics" }, { "name": "KYVERNO_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "KYVERNO_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "KYVERNO_DEPLOYMENT", "value": "kyverno-admission-controller" }, { "name": "KYVERNO_SVC", "value": "kyverno-svc" } ], "image": "reg.kyverno.io/kyverno/kyvernopre:v1.17.1", "imagePullPolicy": "IfNotPresent", "name": "kyverno-pre", "resources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kyverno-admission-controller", "serviceAccountName": "kyverno-admission-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "sigstore" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-03-29T00:07:12Z", "generation": 1, "labels": { "app.kubernetes.io/component": "background-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.17.1", "pod-template-hash": "7447fb7649" }, "name": "kyverno-background-controller-7447fb7649", "namespace": "kyverno", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kyverno-background-controller", "uid": "7b97687d-d332-4081-bec3-6158fc599ad3" } ], "resourceVersion": "3890", "uid": "4c052310-f95a-4890-b31b-5d0e5ab10f11" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "background-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "pod-template-hash": "7447fb7649" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "background-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.17.1", "pod-template-hash": "7447fb7649" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app.kubernetes.io/component", "operator": "In", "values": [ "background-controller" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 1 } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--disableMetrics=false", "--otelConfig=prometheus", "--metricsPort=8000", "--resyncPeriod=15m", "--enableConfigMapCaching=true", "--enableDeferredLoading=true", "--maxAPICallResponseLength=2000000", "--loggingFormat=text", "--v=2", "--omitEvents=PolicyApplied,PolicySkipped", "--enablePolicyException=false", "--enableReporting=validate,mutate,mutateExisting,imageVerify,generate" ], "env": [ { "name": "KYVERNO_SERVICEACCOUNT_NAME", "value": "kyverno-background-controller" }, { "name": "KYVERNO_DEPLOYMENT", "value": "kyverno-background-controller" }, { "name": "INIT_CONFIG", "value": "kyverno" }, { "name": "METRICS_CONFIG", "value": "kyverno-metrics" }, { "name": "KYVERNO_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "KYVERNO_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "reg.kyverno.io/kyverno/background-controller:v1.17.1", "imagePullPolicy": "IfNotPresent", "name": "controller", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" }, { "containerPort": 8000, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "memory": "128Mi" }, "requests": { "cpu": "1m", "memory": "1Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kyverno-background-controller", "serviceAccountName": "kyverno-background-controller", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "0", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-03-29T00:07:12Z", "generation": 1, "labels": { "app.kubernetes.io/component": "cleanup-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.17.1", "pod-template-hash": "58886bb8c6" }, "name": "kyverno-cleanup-controller-58886bb8c6", "namespace": "kyverno", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kyverno-cleanup-controller", "uid": "9bad8264-2ade-484e-99e2-33e787d80546" } ], "resourceVersion": "3825", "uid": "b3f69ae6-6850-464b-ad4c-1c82a51d5f23" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/component": "cleanup-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "pod-template-hash": "58886bb8c6" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "cleanup-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.17.1", "pod-template-hash": "58886bb8c6" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app.kubernetes.io/component", "operator": "In", "values": [ "cleanup-controller" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 1 } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--caSecretName=kyverno-cleanup-controller.kyverno.svc.kyverno-tls-ca", "--tlsSecretName=kyverno-cleanup-controller.kyverno.svc.kyverno-tls-pair", "--tlsKeyAlgorithm=RSA", "--servicePort=443", "--resyncPeriod=15m", "--cleanupServerPort=9443", "--disableMetrics=false", "--otelConfig=prometheus", "--metricsPort=8000", "--enableDeferredLoading=true", "--dumpPayload=false", "--maxAPICallResponseLength=2000000", "--loggingFormat=text", "--v=2", "--protectManagedResources=false", "--ttlReconciliationInterval=1m" ], "env": [ { "name": "KYVERNO_DEPLOYMENT", "value": "kyverno-cleanup-controller" }, { "name": "INIT_CONFIG", "value": "kyverno" }, { "name": "METRICS_CONFIG", "value": "kyverno-metrics" }, { "name": "KYVERNO_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "KYVERNO_SERVICEACCOUNT_NAME", "value": "kyverno-cleanup-controller" }, { "name": "KYVERNO_ROLE_NAME", "value": "kyverno:cleanup-controller" }, { "name": "KYVERNO_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "KYVERNO_SVC", "value": "kyverno-cleanup-controller" } ], "image": "reg.kyverno.io/kyverno/cleanup-controller:v1.17.1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 2, "httpGet": { "path": "/health/liveness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "controller", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" }, { "containerPort": 8000, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 6, "httpGet": { "path": "/health/readiness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "memory": "128Mi" }, "requests": { "cpu": "100m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "startupProbe": { "failureThreshold": 20, "httpGet": { "path": "/health/liveness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 6, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kyverno-cleanup-controller", "serviceAccountName": "kyverno-cleanup-controller", "terminationGracePeriodSeconds": 30 } } }, "status": { "observedGeneration": 1, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "0", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-03-29T00:07:13Z", "generation": 1, "labels": { "app.kubernetes.io/component": "reports-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.17.1", "pod-template-hash": "688567cb4" }, "name": "kyverno-reports-controller-688567cb4", "namespace": "kyverno", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kyverno-reports-controller", "uid": "2b970993-c60a-4b97-acb7-ec458c725956" } ], "resourceVersion": "3831", "uid": "a7c8951a-8f90-4e27-b3f9-8bc8fa712944" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/component": "reports-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "pod-template-hash": "688567cb4" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "reports-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.17.1", "pod-template-hash": "688567cb4" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app.kubernetes.io/component", "operator": "In", "values": [ "reports-controller" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 1 } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--disableMetrics=false", "--openreportsEnabled=false", "--otelConfig=prometheus", "--metricsPort=8000", "--resyncPeriod=15m", "--admissionReports=true", "--aggregateReports=true", "--policyReports=true", "--validatingAdmissionPolicyReports=true", "--mutatingAdmissionPolicyReports=false", "--backgroundScan=true", "--backgroundScanWorkers=2", "--backgroundScanInterval=1h", "--skipResourceFilters=true", "--enableConfigMapCaching=true", "--enableDeferredLoading=true", "--maxAPICallResponseLength=2000000", "--loggingFormat=text", "--v=2", "--omitEvents=PolicyApplied,PolicySkipped", "--enablePolicyException=false", "--allowInsecureRegistry=false", "--registryCredentialHelpers=default,google,amazon,azure,github", "--enableReporting=validate,mutate,mutateExisting,imageVerify,generate" ], "env": [ { "name": "KYVERNO_SERVICEACCOUNT_NAME", "value": "kyverno-reports-controller" }, { "name": "KYVERNO_DEPLOYMENT", "value": "kyverno-reports-controller" }, { "name": "INIT_CONFIG", "value": "kyverno" }, { "name": "METRICS_CONFIG", "value": "kyverno-metrics" }, { "name": "KYVERNO_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "KYVERNO_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TUF_ROOT", "value": "/.sigstore" } ], "image": "reg.kyverno.io/kyverno/reports-controller:v1.17.1", "imagePullPolicy": "IfNotPresent", "name": "controller", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" }, { "containerPort": 8000, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "memory": "128Mi" }, "requests": { "cpu": "100m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/.sigstore", "name": "sigstore" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kyverno-reports-controller", "serviceAccountName": "kyverno-reports-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "sigstore" } ] } } }, "status": { "observedGeneration": 1, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-03-29T00:02:20Z", "generation": 1, "labels": { "app": "local-path-provisioner", "pod-template-hash": "7dc846544d" }, "name": "local-path-provisioner-7dc846544d", "namespace": "local-path-storage", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "local-path-provisioner", "uid": "61929262-904c-4e5c-98d2-0e2ebdbf2396" } ], "resourceVersion": "473", "uid": "ec03d0a2-005e-44ed-a935-e37ed1f1beb8" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "local-path-provisioner", "pod-template-hash": "7dc846544d" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "local-path-provisioner", "pod-template-hash": "7dc846544d" } }, "spec": { "containers": [ { "command": [ "local-path-provisioner", "--debug", "start", "--helper-image", "docker.io/kindest/local-path-helper:v20241212-8ac705d0", "--config", "/etc/config/config.json" ], "env": [ { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "CONFIG_MOUNT_PATH", "value": "/etc/config/" } ], "image": "docker.io/kindest/local-path-provisioner:v20250214-acbabc1a", "imagePullPolicy": "IfNotPresent", "name": "local-path-provisioner", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config/", "name": "config-volume" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "local-path-provisioner-service-account", "serviceAccountName": "local-path-provisioner-service-account", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/control-plane", "operator": "Equal" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Equal" } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "local-path-config" }, "name": "config-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/no-anti-affinity": "Using topologySpreadConstraints" }, "creationTimestamp": "2026-03-29T00:08:19Z", "generation": 1, "labels": { "apps": "namespace-lister", "pod-template-hash": "584d4574c4" }, "name": "namespace-lister-584d4574c4", "namespace": "namespace-lister", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "namespace-lister", "uid": "ab29b973-b7e5-4d51-ad37-539739e7d4ec" } ], "resourceVersion": "5046", "uid": "0d56272b-70df-4503-bf22-cbb065222c27" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "apps": "namespace-lister", "pod-template-hash": "584d4574c4" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "apps": "namespace-lister", "pod-template-hash": "584d4574c4" } }, "spec": { "containers": [ { "args": [ "-enable-tls", "-cert-path=/var/tls/tls.crt", "-key-path=/var/tls/tls.key" ], "env": [ { "name": "LOG_LEVEL", "value": "0" }, { "name": "CACHE_RESYNC_PERIOD", "value": "10m" }, { "name": "CACHE_NAMESPACE_LABELSELECTOR", "value": "konflux-ci.dev/type=tenant" }, { "name": "AUTH_USERNAME_HEADER", "value": "Impersonate-User" } ], "image": "quay.io/konflux-ci/namespace-lister@sha256:e4bb09dfe4513cdbe349507495c7f4044623a3c2aff866b7946d941e82a7a639", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 1, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "namespace-lister", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 1, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "200m", "memory": "256Mi" }, "requests": { "cpu": "20m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "namespace-lister", "serviceAccountName": "namespace-lister", "terminationGracePeriodSeconds": 60, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "apps": "namespace-lister" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "ScheduleAnyway" } ], "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "secretName": "namespace-lister-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/env-var-secret": "This is the name of the secret rather than the secret" }, "creationTimestamp": "2026-03-29T00:06:17Z", "generation": 1, "labels": { "app": "pipelines-as-code-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.42.0", "pod-template-hash": "7df9d8cb9c" }, "name": "pipelines-as-code-controller-7df9d8cb9c", "namespace": "pipelines-as-code", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-as-code-controller", "uid": "70732605-bab0-4ef5-8eff-e78707dbda41" } ], "resourceVersion": "3143", "uid": "d4e243bf-9736-4f44-aaeb-ea327e6abaf8" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "pod-template-hash": "7df9d8cb9c" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-as-code-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.42.0", "pod-template-hash": "7df9d8cb9c" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "TLS_KEY", "value": "key" }, { "name": "TLS_CERT", "value": "cert" }, { "name": "TLS_SECRET_NAME", "value": "pipelines-as-code-tls-secret" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "K_METRICS_CONFIG", "value": "{\"Domain\":\"pipelinesascode.tekton.dev/controller\",\"Component\":\"pac_controller\",\"PrometheusPort\":9090,\"ConfigMap\":{\"name\":\"pipelines-as-code-config-observability\"}}" }, { "name": "K_TRACING_CONFIG", "value": "{\"backend\":\"prometheus\",\"debug\":\"false\",\"sample-rate\":\"0\"}" }, { "name": "K_SINK_TIMEOUT", "value": "30" }, { "name": "PAC_CONTROLLER_LABEL", "value": "default" }, { "name": "PAC_CONTROLLER_SECRET", "value": "pipelines-as-code-secret" }, { "name": "PAC_CONTROLLER_CONFIGMAP", "value": "pipelines-as-code" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.28.0" } ], "image": "ghcr.io/openshift-pipelines/pipelines-as-code/pipelines-as-code-controller:v0.42.0", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "api", "scheme": "HTTP" }, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "pac-controller", "ports": [ { "containerPort": 8082, "name": "api", "protocol": "TCP" }, { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "api", "scheme": "HTTP" }, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "50m", "memory": "50Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/pipelines-as-code/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-controller", "serviceAccountName": "pipelines-as-code-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "pipelines-as-code-tls-secret" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-03-29T00:06:17Z", "generation": 1, "labels": { "app": "pipelines-as-code-watcher", "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.42.0", "pod-template-hash": "7d557456b5" }, "name": "pipelines-as-code-watcher-7d557456b5", "namespace": "pipelines-as-code", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-as-code-watcher", "uid": "a2e323f1-b8a0-4a3f-b000-010fbfc970e1" } ], "resourceVersion": "3257", "uid": "91992516-79e1-4fe7-b518-446913b8f3d3" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "pod-template-hash": "7d557456b5" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-as-code-watcher", "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.42.0", "pod-template-hash": "7d557456b5" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipelinesascode" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "pipelines-as-code-config-observability" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "pac-watcher-config-leader-election" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.28.0" } ], "image": "ghcr.io/openshift-pipelines/pipelines-as-code/pipelines-as-code-watcher:v0.42.0", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "pac-watcher", "ports": [ { "containerPort": 8080, "name": "probes", "protocol": "TCP" }, { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "50m", "memory": "50Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-watcher", "serviceAccountName": "pipelines-as-code-watcher", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/env-var-secret": "This is the name of the secret rather than the secret" }, "creationTimestamp": "2026-03-29T00:06:17Z", "generation": 1, "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.42.0", "pod-template-hash": "f7b45c7ff" }, "name": "pipelines-as-code-webhook-f7b45c7ff", "namespace": "pipelines-as-code", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-as-code-webhook", "uid": "391cb2d7-269f-4dc5-92e7-a5f0f9b0a951" } ], "resourceVersion": "3187", "uid": "c7b42e26-8c1a-4905-888b-e423f701f185" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "pod-template-hash": "f7b45c7ff" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.42.0", "pod-template-hash": "f7b45c7ff" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SERVICE_NAME", "value": "pipelines-as-code-webhook" }, { "name": "WEBHOOK_SECRET_NAME", "value": "pipelines-as-code-webhook-certs" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipelinesascode" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "pac-webhook-config-leader-election" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.28.0" } ], "image": "ghcr.io/openshift-pipelines/pipelines-as-code/pipelines-as-code-webhook:v0.42.0", "imagePullPolicy": "IfNotPresent", "name": "pac-webhook", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "50m", "memory": "50Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-webhook", "serviceAccountName": "pipelines-as-code-webhook", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/liveness-port": "Keeping upstream configs", "ignore-check.kube-linter.io/readiness-port": "Keeping upstream configs" }, "creationTimestamp": "2026-03-29T00:07:55Z", "generation": 1, "labels": { "control-plane": "controller-manager", "pod-template-hash": "58b68ccd54" }, "name": "release-service-controller-manager-58b68ccd54", "namespace": "release-service", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "release-service-controller-manager", "uid": "3d0a7bc9-efbf-4a72-826c-9ae4f7202e43" } ], "resourceVersion": "4658", "uid": "f969ea7c-7705-4188-a0aa-c3f647fbdd5f" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "controller-manager", "pod-template-hash": "58b68ccd54" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager", "pod-template-hash": "58b68ccd54" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8080", "--leader-elect=false" ], "command": [ "/manager" ], "env": [ { "name": "DEFAULT_RELEASE_PVC", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_RELEASE_PVC", "name": "release-service-manager-properties", "optional": true } } }, { "name": "DEFAULT_RELEASE_WORKSPACE_NAME", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_RELEASE_WORKSPACE_NAME", "name": "release-service-manager-properties", "optional": true } } }, { "name": "DEFAULT_RELEASE_WORKSPACE_SIZE", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_RELEASE_WORKSPACE_SIZE", "name": "release-service-manager-properties", "optional": true } } }, { "name": "SERVICE_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/konflux-ci/release-service:5cb6469fa3fdd1246906170fab4ee7b28ee5d990", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "release-service-controller-manager", "serviceAccountName": "release-service-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "name": "cert", "secret": { "defaultMode": 420, "secretName": "webhook-server-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-03-29T00:07:04Z", "generation": 2, "labels": { "app": "gosmee-client", "pod-template-hash": "598fb95d9c" }, "name": "gosmee-client-598fb95d9c", "namespace": "smee-client", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "gosmee-client", "uid": "f23eecf0-71e7-422b-bbf0-a89e8d552cf8" } ], "resourceVersion": "6216", "uid": "63c6df1c-361f-474a-bf46-3d35fbcc16a6" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "gosmee-client", "pod-template-hash": "598fb95d9c" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "gosmee-client", "pod-template-hash": "598fb95d9c" } }, "spec": { "containers": [ { "args": [ "client", "https://smee.io/qwU7N2ZIdfIbXQSNHRbwyMrZRxLY7oWpolQb5Jr", "http://localhost:8080" ], "image": "ghcr.io/chmouel/gosmee:v0.29.0", "imagePullPolicy": "Always", "livenessProbe": { "exec": { "command": [ "/shared/check-smee-health.sh" ] }, "failureThreshold": 2, "initialDelaySeconds": 20, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "gosmee", "resources": { "limits": { "cpu": "100m", "memory": "32Mi" }, "requests": { "cpu": "10m", "memory": "32Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "shared-health" } ] }, { "env": [ { "name": "DOWNSTREAM_SERVICE_URL", "value": "http://35.164.181.12:8180" }, { "name": "SMEE_CHANNEL_URL", "value": "https://smee.io/qwU7N2ZIdfIbXQSNHRbwyMrZRxLY7oWpolQb5Jr" }, { "name": "INSECURE_SKIP_VERIFY", "value": "true" }, { "name": "HEALTH_CHECK_TIMEOUT_SECONDS", "value": "20" } ], "image": "quay.io/konflux-ci/smee-sidecar:latest@sha256:8daa8351192e1974f048683098806b1eec9c915a93dedbf93f16c422aa2c0eef", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "exec": { "command": [ "/shared/check-sidecar-health.sh" ] }, "failureThreshold": 2, "initialDelaySeconds": 10, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "health-check-sidecar", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" }, { "containerPort": 9100, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "100m", "memory": "32Mi" }, "requests": { "cpu": "10m", "memory": "32Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "shared-health" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "shared-health" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-03-29T00:10:39Z", "generation": 1, "labels": { "app": "gosmee-client", "pod-template-hash": "7db5bb6669" }, "name": "gosmee-client-7db5bb6669", "namespace": "smee-client", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "gosmee-client", "uid": "f23eecf0-71e7-422b-bbf0-a89e8d552cf8" } ], "resourceVersion": "6207", "uid": "4a956bce-0cc0-4fa4-a1e2-673100bcf71d" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "gosmee-client", "pod-template-hash": "7db5bb6669" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "gosmee-client", "pod-template-hash": "7db5bb6669" } }, "spec": { "containers": [ { "args": [ "client", "https://smee.io/eD7wVjSs9x6FJ", "http://localhost:8080" ], "image": "ghcr.io/chmouel/gosmee:v0.29.0", "imagePullPolicy": "Always", "livenessProbe": { "exec": { "command": [ "/shared/check-smee-health.sh" ] }, "failureThreshold": 2, "initialDelaySeconds": 20, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "gosmee", "resources": { "limits": { "cpu": "100m", "memory": "32Mi" }, "requests": { "cpu": "10m", "memory": "32Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "shared-health" } ] }, { "env": [ { "name": "DOWNSTREAM_SERVICE_URL", "value": "http://35.164.181.12:8180" }, { "name": "SMEE_CHANNEL_URL", "value": "https://smee.io/eD7wVjSs9x6FJ" }, { "name": "INSECURE_SKIP_VERIFY", "value": "true" }, { "name": "HEALTH_CHECK_TIMEOUT_SECONDS", "value": "20" } ], "image": "quay.io/konflux-ci/smee-sidecar:latest@sha256:8daa8351192e1974f048683098806b1eec9c915a93dedbf93f16c422aa2c0eef", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "exec": { "command": [ "/shared/check-sidecar-health.sh" ] }, "failureThreshold": 2, "initialDelaySeconds": 10, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "health-check-sidecar", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" }, { "containerPort": 9100, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "100m", "memory": "32Mi" }, "requests": { "cpu": "10m", "memory": "32Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "shared-health" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "shared-health" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-03-29T00:04:05Z", "generation": 1, "labels": { "app": "tekton-operator", "name": "tekton-operator", "pod-template-hash": "6b96d7c975" }, "name": "tekton-operator-6b96d7c975", "namespace": "tekton-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-operator", "uid": "2849a353-3d03-4f30-b195-f0f6e9179047" } ], "resourceVersion": "1101", "uid": "1eed3fa4-3212-4210-9ee8-f63067b22441" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "tekton-operator", "pod-template-hash": "6b96d7c975" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-operator", "name": "tekton-operator", "pod-template-hash": "6b96d7c975" } }, "spec": { "containers": [ { "args": [ "-controllers", "tektonconfig,tektonpipeline,tektontrigger,tektonhub,tektonchain,tektonresult,tektondashboard,manualapprovalgate,tektonpruner,tektonscheduler,tektonmulticlusterproxyaae", "-unique-process-name", "tekton-operator-lifecycle" ], "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "tekton-operator" }, { "name": "IMAGE_PIPELINES_PROXY", "value": "ghcr.io/tektoncd/operator/proxy-webhook-f6167da7bc41b96a27c5529f850e63d1:v0.79.0@sha256:fd1311731585e2be65571d04a6a6c5b822723236aa76a0768bb42f2477bee3f1" }, { "name": "IMAGE_JOB_PRUNER_TKN", "value": "ghcr.io/tektoncd/plumbing/tkn@sha256:233de6c8b8583a34c2379fa98d42dba739146c9336e8d41b66030484357481ed" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "VERSION", "value": "v0.79.0" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-config-observability" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-controller-config-leader-election" }, { "name": "AUTOINSTALL_COMPONENTS", "valueFrom": { "configMapKeyRef": { "key": "AUTOINSTALL_COMPONENTS", "name": "tekton-config-defaults" } } }, { "name": "DEFAULT_TARGET_NAMESPACE", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_TARGET_NAMESPACE", "name": "tekton-config-defaults" } } } ], "image": "ghcr.io/tektoncd/operator/operator-303303c315a48490ba6517859ef65b77:v0.79.0@sha256:bc90657a93a35b4046ef4fbfc236ecd38c0ea46feea20a44a69f44110731de01", "imagePullPolicy": "IfNotPresent", "name": "tekton-operator-lifecycle", "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" }, { "args": [ "-controllers", "tektoninstallerset", "-unique-process-name", "tekton-operator-cluster-operations" ], "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "tekton-operator" }, { "name": "PROFILING_PORT", "value": "9009" }, { "name": "VERSION", "value": "v0.79.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-controller-config-leader-election" } ], "image": "ghcr.io/tektoncd/operator/operator-303303c315a48490ba6517859ef65b77:v0.79.0@sha256:bc90657a93a35b4046ef4fbfc236ecd38c0ea46feea20a44a69f44110731de01", "imagePullPolicy": "IfNotPresent", "name": "tekton-operator-cluster-operations", "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "tekton-operator", "serviceAccountName": "tekton-operator", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/env-var-secret": "This is the name of the secret rather than the secret" }, "creationTimestamp": "2026-03-29T00:04:05Z", "generation": 1, "labels": { "app": "tekton-operator", "name": "tekton-operator-webhook", "pod-template-hash": "65d7569769" }, "name": "tekton-operator-webhook-65d7569769", "namespace": "tekton-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-operator-webhook", "uid": "3e33063a-c2e0-4050-baf9-db3feb6b0fa1" } ], "resourceVersion": "1118", "uid": "1d643c03-c60e-4964-9187-29c5382dcc60" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "tekton-operator-webhook", "pod-template-hash": "65d7569769" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-operator", "name": "tekton-operator-webhook", "pod-template-hash": "65d7569769" } }, "spec": { "containers": [ { "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-webhook-config-leader-election" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-operator-webhook" }, { "name": "WEBHOOK_SECRET_NAME", "value": "tekton-operator-webhook-certs" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" } ], "image": "ghcr.io/tektoncd/operator/webhook-f2bb711aa8f0c0892856a4cbf6d9ddd8:v0.79.0@sha256:1096920eeb1ad279f4f7e69cec6bf96d8b48a4f038b02f36f7b54ce073e6b0a5", "imagePullPolicy": "IfNotPresent", "name": "tekton-operator-webhook", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "tekton-operator", "serviceAccountName": "tekton-operator", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-03-29T00:05:22Z", "generation": 2, "labels": { "app": "tekton-chains-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "d2bf57519ecb9d9b99f2d61143730e93", "pipeline.tekton.dev/release": "v0.26.2", "pod-template-hash": "7f4b5668d4", "version": "v0.26.2" }, "name": "tekton-chains-controller-7f4b5668d4", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-chains-controller", "uid": "a5bc02c0-0a54-42ca-9a5f-62f040f2fe34" } ], "resourceVersion": "2894", "uid": "e21a834b-6f87-4430-b9ea-9d358c858078" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "pod-template-hash": "7f4b5668d4" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-chains-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "d2bf57519ecb9d9b99f2d61143730e93", "pipeline.tekton.dev/release": "v0.26.2", "pod-template-hash": "7f4b5668d4", "version": "v0.26.2" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-chains-config-leader-election" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-chains-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/chains" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/chains/controller-92006fd957c0afd31de6a40b3e33b39f:v0.26.2@sha256:dd86ef17259de205532bdda16cae3a12514785b3feeeae903ca1ddd1541ce7c5", "imagePullPolicy": "IfNotPresent", "name": "tekton-chains-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsUser": 65532 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/signing-secrets", "name": "signing-secrets" }, { "mountPath": "/var/run/sigstore/cosign", "name": "oidc-info" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-chains-controller", "serviceAccountName": "tekton-chains-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "signing-secrets", "secret": { "defaultMode": 420, "secretName": "signing-secrets" } }, { "name": "oidc-info", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "sigstore", "expirationSeconds": 600, "path": "oidc-token" } } ] } } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-03-29T00:06:14Z", "generation": 1, "labels": { "app": "tekton-chains-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "c928362b399530cb75d6f56d119ccac8", "pipeline.tekton.dev/release": "v0.26.2", "pod-template-hash": "d989c4cc6", "version": "v0.26.2" }, "name": "tekton-chains-controller-d989c4cc6", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-chains-controller", "uid": "a5bc02c0-0a54-42ca-9a5f-62f040f2fe34" } ], "resourceVersion": "2879", "uid": "b3fc6853-cf30-4482-b119-764282098729" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "pod-template-hash": "d989c4cc6" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-chains-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "c928362b399530cb75d6f56d119ccac8", "pipeline.tekton.dev/release": "v0.26.2", "pod-template-hash": "d989c4cc6", "version": "v0.26.2" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-chains-config-leader-election" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-chains-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/chains" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/chains/controller-92006fd957c0afd31de6a40b3e33b39f:v0.26.2@sha256:dd86ef17259de205532bdda16cae3a12514785b3feeeae903ca1ddd1541ce7c5", "imagePullPolicy": "IfNotPresent", "name": "tekton-chains-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsUser": 65532 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/signing-secrets", "name": "signing-secrets" }, { "mountPath": "/var/run/sigstore/cosign", "name": "oidc-info" }, { "mountPath": "/etc/ssl/certs", "name": "trusted-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-chains-controller", "serviceAccountName": "tekton-chains-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "signing-secrets", "secret": { "defaultMode": 420, "secretName": "signing-secrets" } }, { "name": "oidc-info", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "sigstore", "expirationSeconds": 600, "path": "oidc-token" } } ] } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-03-29T00:04:31Z", "generation": 1, "labels": { "app": "tekton-events-controller", "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.10.0", "operator.tekton.dev/deployment-spec-applied-hash": "e046087e0d789f0cdc0aa074b3fc01ba", "pipeline.tekton.dev/release": "v1.10.0", "pod-template-hash": "6d8db65c96", "version": "v1.10.0" }, "name": "tekton-events-controller-6d8db65c96", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-events-controller", "uid": "73aad3a1-07ea-47c0-b8d5-c7e4e9f6b8b8" } ], "resourceVersion": "1613", "uid": "89b29c35-4f6d-4807-8930-735b89c6374f" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "6d8db65c96" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-events-controller", "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.10.0", "operator.tekton.dev/deployment-spec-applied-hash": "e046087e0d789f0cdc0aa074b3fc01ba", "pipeline.tekton.dev/release": "v1.10.0", "pod-template-hash": "6d8db65c96", "version": "v1.10.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } } }, "containers": [ { "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-events" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SSL_CERT_DIR", "value": "/etc/ssl/certs" }, { "name": "SSL_CERT_FILE", "value": "/etc/config-registry-cert/cert" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/pipeline/events-a9042f7efb0cbade2a868a1ee5ddd52c:v1.10.0@sha256:7568e15a56155b455cdcf43732d7674b66e206b905e85baf5cb7d3c153ec7b63", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "tekton-events-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config-logging", "name": "config-logging" }, { "mountPath": "/etc/config-registry-cert", "name": "config-registry-cert" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-events-controller", "serviceAccountName": "tekton-events-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "config-logging" }, "name": "config-logging" }, { "configMap": { "defaultMode": 420, "name": "config-registry-cert" }, "name": "config-registry-cert" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-03-29T00:04:32Z", "generation": 1, "labels": { "app": "tekton-operator", "name": "tekton-operator", "operator.tekton.dev/deployment-spec-applied-hash": "d75cb20989c248fde7e8e421b4d1430c", "pod-template-hash": "6d6568fbcf" }, "name": "tekton-operator-proxy-webhook-6d6568fbcf", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-operator-proxy-webhook", "uid": "4a6e5a3d-b30e-4dc4-90de-f32ad36c1d73" } ], "resourceVersion": "1593", "uid": "bde3d24f-ede0-4b68-a2d5-0290f1953207" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "tekton-operator", "pod-template-hash": "6d6568fbcf" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-operator", "name": "tekton-operator", "operator.tekton.dev/deployment-spec-applied-hash": "d75cb20989c248fde7e8e421b4d1430c", "pod-template-hash": "6d6568fbcf" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-proxy-webhook-config-leader-election" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SECRET_NAME", "value": "proxy-webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-operator-proxy-webhook" } ], "image": "ghcr.io/tektoncd/operator/proxy-webhook-f6167da7bc41b96a27c5529f850e63d1:v0.79.0@sha256:fd1311731585e2be65571d04a6a6c5b822723236aa76a0768bb42f2477bee3f1", "imagePullPolicy": "IfNotPresent", "name": "proxy", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "500Mi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-operators-proxy-webhook", "serviceAccountName": "tekton-operators-proxy-webhook", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-03-29T00:04:31Z", "generation": 1, "labels": { "app": "tekton-pipelines-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.10.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "9c3422b5e459838a9f1409b2eb255c0c", "pipeline.tekton.dev/release": "v1.10.0", "pod-template-hash": "564cbddb6c", "version": "v1.10.0" }, "name": "tekton-pipelines-controller-564cbddb6c", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-pipelines-controller", "uid": "19ab625e-da84-4237-91ee-fd590d1d9e14" } ], "resourceVersion": "1600", "uid": "4dd4ea2a-5557-448b-874a-cec314eba6bd" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "564cbddb6c" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.10.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "9c3422b5e459838a9f1409b2eb255c0c", "pipeline.tekton.dev/release": "v1.10.0", "pod-template-hash": "564cbddb6c", "version": "v1.10.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-entrypoint-image", "ghcr.io/tektoncd/pipeline/entrypoint-bff0a22da108bc2f16c818c97641a296:v1.10.0@sha256:8d8b3c2ca74f4d0997d628a4fcce965d097bf147bc8c4a8fa086f59b79b5f60a", "-nop-image", "ghcr.io/tektoncd/pipeline/nop-8eac7c133edad5df719dc37b36b62482:v1.10.0@sha256:13adcca14894b55bf3b6e3c93d3929b1af0b34a7d83948ebdeb85198e53310e4", "-sidecarlogresults-image", "ghcr.io/tektoncd/pipeline/sidecarlogresults-7501c6a20d741631510a448b48ab098f:v1.10.0@sha256:8e3ccf82cc0d2f116568defa4cf9a0e6461ada7ce596685c2bb7a10df99f292c", "-workingdirinit-image", "ghcr.io/tektoncd/pipeline/workingdirinit-0c558922ec6a1b739e550e349f2d5fc1:v1.10.0@sha256:24cfc8896168be54a962b7dcdd8cfdd242372a71bcccd6ee4cc57ea25882eddc", "-shell-image", "cgr.dev/chainguard/busybox@sha256:19f02276bf8dbdd62f069b922f10c65262cc34b710eea26ff928129a736be791", "-shell-image-win", "mcr.microsoft.com/powershell:nanoserver@sha256:b6d5ff841b78bdf2dfed7550000fd4f3437385b8fa686ec0f010be24777654d6", "-disable-ha=false" ], "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults" }, { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-controller" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "CONFIG_SPIRE", "value": "config-spire" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipeline" }, { "name": "SSL_CERT_DIR", "value": "/etc/ssl/certs" }, { "name": "SSL_CERT_FILE", "value": "/etc/config-registry-cert/cert" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/pipeline/controller-10a3e32792f33651396d02b6855a6e36:v1.10.0@sha256:511c343b7f2c866a26a648b5b0fb3cb8f89e4a8e9591fa31b39d07a51a318914", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "tekton-pipelines-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config-logging", "name": "config-logging" }, { "mountPath": "/etc/config-registry-cert", "name": "config-registry-cert" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-controller", "serviceAccountName": "tekton-pipelines-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "config-logging" }, "name": "config-logging" }, { "configMap": { "defaultMode": 420, "name": "config-registry-cert" }, "name": "config-registry-cert" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-03-29T00:04:31Z", "generation": 2, "labels": { "app": "tekton-pipelines-resolvers", "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.10.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "abc78cb8148410c3f81e660a80576473", "pipeline.tekton.dev/release": "v1.10.0", "pod-template-hash": "59fd8985c5", "version": "v1.10.0" }, "name": "tekton-pipelines-remote-resolvers-59fd8985c5", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-pipelines-remote-resolvers", "uid": "a4a30492-5e3d-4155-b172-4a93cdf9aa09" } ], "resourceVersion": "2793", "uid": "1a603ae5-31ca-4b4b-9883-ee2d0325468f" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "59fd8985c5" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-resolvers", "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.10.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "abc78cb8148410c3f81e660a80576473", "pipeline.tekton.dev/release": "v1.10.0", "pod-template-hash": "59fd8985c5", "version": "v1.10.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "command": [ "/sbin/tini", "--", "/ko-app/resolvers" ], "env": [ { "name": "ARTIFACT_HUB_API", "value": "https://artifacthub.io/" }, { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-resolvers" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/resolution" }, { "name": "PROBES_PORT", "value": "8080" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TEKTON_HUB_API" } ], "image": "ghcr.io/tektoncd/pipeline/resolvers-ff86b24f130c42b88983d3c13993056d:v1.10.0@sha256:c4194e5138bf3567096f2e931e221ded4e3843ff0c10e39c50c470b4f96574bc", "imagePullPolicy": "IfNotPresent", "name": "controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "1", "memory": "4Gi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp-clone-volume" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-resolvers", "serviceAccountName": "tekton-pipelines-resolvers", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": { "sizeLimit": "4Gi" }, "name": "tmp-clone-volume" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-03-29T00:06:13Z", "generation": 1, "labels": { "app": "tekton-pipelines-resolvers", "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.10.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "c84fa4330278a0610570ab5057c0cb02", "pipeline.tekton.dev/release": "v1.10.0", "pod-template-hash": "5c749bd799", "version": "v1.10.0" }, "name": "tekton-pipelines-remote-resolvers-5c749bd799", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-pipelines-remote-resolvers", "uid": "a4a30492-5e3d-4155-b172-4a93cdf9aa09" } ], "resourceVersion": "2782", "uid": "01540ada-9749-41a9-b8ee-fb0bbad46e2e" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "5c749bd799" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-resolvers", "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.10.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "c84fa4330278a0610570ab5057c0cb02", "pipeline.tekton.dev/release": "v1.10.0", "pod-template-hash": "5c749bd799", "version": "v1.10.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "command": [ "/sbin/tini", "--", "/ko-app/resolvers" ], "env": [ { "name": "ARTIFACT_HUB_API", "value": "https://artifacthub.io/" }, { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-resolvers" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "GIT_SSL_CAINFO", "value": "/etc/ssl/certs/ca-bundle.crt" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/resolution" }, { "name": "PROBES_PORT", "value": "8080" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TEKTON_HUB_API" } ], "image": "ghcr.io/tektoncd/pipeline/resolvers-ff86b24f130c42b88983d3c13993056d:v1.10.0@sha256:c4194e5138bf3567096f2e931e221ded4e3843ff0c10e39c50c470b4f96574bc", "imagePullPolicy": "IfNotPresent", "name": "controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "1", "memory": "4Gi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp-clone-volume" }, { "mountPath": "/etc/ssl/certs", "name": "trusted-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-resolvers", "serviceAccountName": "tekton-pipelines-resolvers", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": { "sizeLimit": "4Gi" }, "name": "tmp-clone-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-03-29T00:04:32Z", "generation": 1, "labels": { "app": "tekton-pipelines-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.10.0", "operator.tekton.dev/deployment-spec-applied-hash": "83ff724c263de669ded3b9d9526836b1", "pipeline.tekton.dev/release": "v1.10.0", "pod-template-hash": "648cf4d468", "version": "v1.10.0" }, "name": "tekton-pipelines-webhook-648cf4d468", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-pipelines-webhook", "uid": "ef1a30cf-224a-4deb-adbc-e973207f9cb0" } ], "resourceVersion": "1651", "uid": "285f9eac-0f98-40d1-babd-4862955ee143" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "648cf4d468" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.10.0", "operator.tekton.dev/deployment-spec-applied-hash": "83ff724c263de669ded3b9d9526836b1", "pipeline.tekton.dev/release": "v1.10.0", "pod-template-hash": "648cf4d468", "version": "v1.10.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-webhook" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipeline" }, { "name": "PROBES_PORT", "value": "8080" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_ADMISSION_CONTROLLER_NAME", "value": "webhook.pipeline.tekton.dev" }, { "name": "WEBHOOK_PORT", "value": "8443" }, { "name": "WEBHOOK_SECRET_NAME", "value": "webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-pipelines-webhook" } ], "image": "ghcr.io/tektoncd/pipeline/webhook-d4749e605405422fd87700164e31b2d1:v1.10.0@sha256:92b99b48097f4fbc31423980bc2fa6eb9e232b868d1adc48eef9caee1909f1e1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "webhook", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "cpu": "500m", "memory": "500Mi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-webhook", "serviceAccountName": "tekton-pipelines-webhook", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-03-29T00:05:29Z", "generation": 1, "labels": { "app": "tekton-results-api", "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.18.0", "operator.tekton.dev/deployment-spec-applied-hash": "10cd0ac72a245c0487bada5455bd0cb3", "pod-template-hash": "5d849b788b" }, "name": "tekton-results-api-5d849b788b", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-results-api", "uid": "00ae66c7-92da-4044-a992-d3b31ff2d7d6" } ], "resourceVersion": "2513", "uid": "477ca25c-ae4a-4eac-84bb-fe87301192b7" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.18.0", "pod-template-hash": "5d849b788b" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-results-api", "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.18.0", "operator.tekton.dev/deployment-spec-applied-hash": "10cd0ac72a245c0487bada5455bd0cb3", "pod-template-hash": "5d849b788b" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.18.0" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "DB_HOST", "value": "tekton-results-postgres-service.tekton-pipelines.svc.cluster.local" }, { "name": "DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_PASSWORD", "name": "tekton-results-postgres" } } }, { "name": "DB_USER", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_USER", "name": "tekton-results-postgres" } } }, { "name": "IS_EXTERNAL_DB", "value": "false" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "LOGGING_PLUGIN_TLS_VERIFICATION_DISABLE", "value": "false" }, { "name": "ROUTE_ENABLED", "value": "false" }, { "name": "ROUTE_TLS_TERMINATION", "value": "edge" } ], "image": "ghcr.io/tektoncd/results/api-b1b7ffa9ba32f7c3020c3b68830b30a8:v0.18.0@sha256:72833d31749615fe45d4f7b7a3d4964e5da1cc2966e983fd31f67720d5c22720", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "api", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "startupProbe": { "failureThreshold": 10, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tekton/results", "name": "config", "readOnly": true }, { "mountPath": "/etc/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-results-api", "serviceAccountName": "tekton-results-api", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "tekton-results-api-config" }, "name": "config" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-03-29T00:05:29Z", "generation": 1, "labels": { "app": "tekton-results-retention-policy-agent", "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/version": "v0.18.0", "operator.tekton.dev/deployment-spec-applied-hash": "6b2d0da04e87227edb306ab1e06c3b8f", "pod-template-hash": "58d6f7bfd5" }, "name": "tekton-results-retention-policy-agent-58d6f7bfd5", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-results-retention-policy-agent", "uid": "d952771b-4a75-4b89-b6ce-d51157123d0a" } ], "resourceVersion": "2340", "uid": "dd80327a-87a4-425f-919f-a1e6a2e9e69d" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/version": "v0.18.0", "pod-template-hash": "58d6f7bfd5" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-results-retention-policy-agent", "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/version": "v0.18.0", "operator.tekton.dev/deployment-spec-applied-hash": "6b2d0da04e87227edb306ab1e06c3b8f", "pod-template-hash": "58d6f7bfd5" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "tekton-results-config-logging" }, { "name": "DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_PASSWORD", "name": "tekton-results-postgres" } } }, { "name": "DB_USER", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_USER", "name": "tekton-results-postgres" } } }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/results/retention-policy-agent-07427b345034d96a9a27896ebb138518:v0.18.0@sha256:b523e3d2bc70fbf8089b8b5ee42b506ccd335f10c633e7f975ec0d250e0d2aea", "imagePullPolicy": "IfNotPresent", "name": "retention-policy-agent", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tekton/results", "name": "config", "readOnly": true }, { "mountPath": "/etc/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-results-watcher", "serviceAccountName": "tekton-results-watcher", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "tekton-results-api-config" }, "name": "config" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-03-29T00:05:29Z", "generation": 1, "labels": { "app": "tekton-results-watcher", "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.18.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "6badf139127c1027d0f6adba536b2e59", "pod-template-hash": "79bd888d7b" }, "name": "tekton-results-watcher-79bd888d7b", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-results-watcher", "uid": "ec4f18fa-7f54-42b9-8d8d-1a856c58a079" } ], "resourceVersion": "2356", "uid": "f3223778-118b-4ae0-bff5-3f9e192242c6" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.18.0", "pod-template-hash": "79bd888d7b" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-results-watcher", "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.18.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "6badf139127c1027d0f6adba536b2e59", "pod-template-hash": "79bd888d7b" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.18.0" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-api_addr", "$(TEKTON_RESULTS_API_SERVICE)", "-auth_mode", "$(AUTH_MODE)" ], "env": [ { "name": "AUTH_MODE", "value": "token" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-results-config-leader-election" }, { "name": "CONFIG_LOGGING_NAME", "value": "tekton-results-config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-results-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/results" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TEKTON_RESULTS_API_SERVICE", "value": "tekton-results-api-service.tekton-pipelines.svc.cluster.local:8080" } ], "image": "ghcr.io/tektoncd/results/watcher-83f971ea227fb24157c0c699b824a628:v0.18.0@sha256:4b50291457cb63028e5f9e2acb921b852d9ad0f265562ea0fa83bafc8a58b367", "imagePullPolicy": "IfNotPresent", "name": "watcher", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-results-watcher", "serviceAccountName": "tekton-results-watcher", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-03-29T00:05:00Z", "generation": 1, "labels": { "app": "tekton-triggers-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.35.0", "operator.tekton.dev/deployment-spec-applied-hash": "48ff0a9441ad434f089ccea8093abce5", "pod-template-hash": "79bfcd5bfb", "triggers.tekton.dev/release": "v0.35.0", "version": "v0.35.0" }, "name": "tekton-triggers-controller-79bfcd5bfb", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-triggers-controller", "uid": "828ea094-ac5d-484c-97ee-56fe33e45843" } ], "resourceVersion": "1869", "uid": "baba5752-3491-4301-9841-57ca63931e09" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers", "pod-template-hash": "79bfcd5bfb" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.35.0", "operator.tekton.dev/deployment-spec-applied-hash": "48ff0a9441ad434f089ccea8093abce5", "pod-template-hash": "79bfcd5bfb", "triggers.tekton.dev/release": "v0.35.0", "version": "v0.35.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-logtostderr", "-stderrthreshold", "INFO", "-el-image", "ghcr.io/tektoncd/triggers/eventlistenersink-7ad1faa98cddbcb0c24990303b220bb8:v0.35.0@sha256:d4ddfc09a5389474452644826540973a53fea11be718abf7ab3d04159c29ed05", "-el-port", "8080", "-el-security-context=true", "-el-read-only-root-filesystem=true", "-el-events", "disable", "-el-readtimeout", "5", "-el-writetimeout", "40", "-el-idletimeout", "120", "-el-timeouthandler", "30", "-el-httpclient-readtimeout", "30", "-el-httpclient-keep-alive", "30", "-el-httpclient-tlshandshaketimeout", "10", "-el-httpclient-responseheadertimeout", "10", "-el-httpclient-expectcontinuetimeout", "1", "-period-seconds", "10", "-failure-threshold", "3" ], "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults-triggers" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-triggers-controllers" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability-triggers" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "METRICS_PROMETHEUS_PORT", "value": "9000" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/triggers/controller-f656ca31de179ab913fa76abc255c315:v0.35.0@sha256:59addf5899cd2cf1e74001ddf7ad30e0492b8c80b80857c351e2deac545d9555", "imagePullPolicy": "IfNotPresent", "name": "tekton-triggers-controller", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-controller", "serviceAccountName": "tekton-triggers-controller", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-03-29T00:05:01Z", "generation": 1, "labels": { "app": "tekton-triggers-core-interceptors", "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.35.0", "operator.tekton.dev/deployment-spec-applied-hash": "54518c322714c4ebcbc7b5e7be990e4e", "pod-template-hash": "668cbbb8c6", "triggers.tekton.dev/release": "v0.35.0", "version": "v0.35.0" }, "name": "tekton-triggers-core-interceptors-668cbbb8c6", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-triggers-core-interceptors", "uid": "bab86f49-3faa-4e0d-8609-664218cf72fa" } ], "resourceVersion": "2002", "uid": "f003acc7-7e2d-4629-92ce-33d264925c46" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers", "pod-template-hash": "668cbbb8c6" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-core-interceptors", "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.35.0", "operator.tekton.dev/deployment-spec-applied-hash": "54518c322714c4ebcbc7b5e7be990e4e", "pod-template-hash": "668cbbb8c6", "triggers.tekton.dev/release": "v0.35.0", "version": "v0.35.0" } }, "spec": { "containers": [ { "args": [ "-logtostderr", "-stderrthreshold", "INFO" ], "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability-triggers" }, { "name": "INTERCEPTOR_TLS_SECRET_NAME", "value": "tekton-triggers-core-interceptors-certs" }, { "name": "INTERCEPTOR_TLS_SVC_NAME", "value": "tekton-triggers-core-interceptors" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/triggers/interceptors-3176d6a3f314c3655b30bfd36e421dd5:v0.35.0@sha256:5666d72e68d9138fc1919a6758ea990424aa17c27c34e53bc69bcfb81ad121ea", "imagePullPolicy": "IfNotPresent", "name": "tekton-triggers-core-interceptors", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-core-interceptors", "serviceAccountName": "tekton-triggers-core-interceptors", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-03-29T00:05:01Z", "generation": 1, "labels": { "app": "tekton-triggers-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.35.0", "operator.tekton.dev/deployment-spec-applied-hash": "3ad7156fbb9ee902565fe484d9be9ef3", "pod-template-hash": "687fccdd66", "triggers.tekton.dev/release": "v0.35.0", "version": "v0.35.0" }, "name": "tekton-triggers-webhook-687fccdd66", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-triggers-webhook", "uid": "bf6a743d-9b29-41f3-845e-ad5380e56f35" } ], "resourceVersion": "1899", "uid": "2ff44f29-7e54-4f3c-a939-70d2909f4ab5" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers", "pod-template-hash": "687fccdd66" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.35.0", "operator.tekton.dev/deployment-spec-applied-hash": "3ad7156fbb9ee902565fe484d9be9ef3", "pod-template-hash": "687fccdd66", "triggers.tekton.dev/release": "v0.35.0", "version": "v0.35.0" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-triggers-webhook" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SECRET_NAME", "value": "triggers-webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-triggers-webhook" } ], "image": "ghcr.io/tektoncd/triggers/webhook-dd1edc925ee1772a9f76e2c1bc291ef6:v0.35.0@sha256:bc97fb4dd2e55b5723e3f2ee7c5a9a5beea4a1362c0a4b2fa40a2cf638cbd9c7", "imagePullPolicy": "IfNotPresent", "name": "webhook", "ports": [ { "containerPort": 9000, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-webhook", "serviceAccountName": "tekton-triggers-webhook", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } } ], "kind": "List", "metadata": { "resourceVersion": "" } }