{ "apiVersion": "v1", "items": [ { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/liveness-port": "Keeping upstream configs", "ignore-check.kube-linter.io/readiness-port": "Keeping upstream configs" }, "creationTimestamp": "2026-07-02T15:21:34Z", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "kustomize", "app.kubernetes.io/name": "build-service", "control-plane": "controller-manager", "konflux.konflux-ci.dev/component": "build-service", "konflux.konflux-ci.dev/owner": "konflux-build-service" }, "name": "build-service-controller-manager", "namespace": "build-service", "ownerReferences": [ { "apiVersion": "konflux.konflux-ci.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "KonfluxBuildService", "name": "konflux-build-service", "uid": "ecc736aa-d77c-45cf-923d-1c05daef0475" } ], "resourceVersion": "7045", "uid": "5275e337-3449-429c-a5ec-b8f29544c488" }, "spec": { "progressDeadlineSeconds": 2147483647, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "control-plane": "controller-manager" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8443", "--leader-elect=false", "--health-probe-bind-address=:8081", "-webhook-config-path=/mnt/webhook-config.json" ], "command": [ "/manager" ], "env": [ { "name": "PAC_WEBHOOK_INSECURE_SSL", "value": "1" } ], "image": "quay.io/konflux-ci/build-service:40d2c83256e3cfe0905f827fbc47f20bc38b1bfc", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "30m", "memory": "128Mi" }, "requests": { "cpu": "30m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/ssl/certs/ca-custom-bundle.crt", "name": "trusted-ca", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/mnt", "name": "webhook-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "build-service-controller-manager", "serviceAccountName": "build-service-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "webhook-config.json", "path": "webhook-config.json" } ], "name": "webhook-config-01c0b13063", "optional": true }, "name": "webhook-config" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:21:52Z", "lastUpdateTime": "2026-07-02T15:21:52Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"cert-manager\",\"app.kubernetes.io/component\":\"controller\",\"app.kubernetes.io/instance\":\"cert-manager\",\"app.kubernetes.io/managed-by\":\"Helm\",\"app.kubernetes.io/name\":\"cert-manager\",\"app.kubernetes.io/version\":\"v1.20.3\",\"helm.sh/chart\":\"cert-manager-v1.20.3\"},\"name\":\"cert-manager\",\"namespace\":\"cert-manager\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"controller\",\"app.kubernetes.io/instance\":\"cert-manager\",\"app.kubernetes.io/name\":\"cert-manager\"}},\"template\":{\"metadata\":{\"annotations\":{\"prometheus.io/path\":\"/metrics\",\"prometheus.io/port\":\"9402\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"app\":\"cert-manager\",\"app.kubernetes.io/component\":\"controller\",\"app.kubernetes.io/instance\":\"cert-manager\",\"app.kubernetes.io/managed-by\":\"Helm\",\"app.kubernetes.io/name\":\"cert-manager\",\"app.kubernetes.io/version\":\"v1.20.3\",\"helm.sh/chart\":\"cert-manager-v1.20.3\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=2\",\"--cluster-resource-namespace=$(POD_NAMESPACE)\",\"--leader-election-namespace=kube-system\",\"--acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.20.3\",\"--max-concurrent-challenges=60\"],\"env\":[{\"name\":\"POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"quay.io/jetstack/cert-manager-controller:v1.20.3\",\"imagePullPolicy\":\"IfNotPresent\",\"livenessProbe\":{\"failureThreshold\":8,\"httpGet\":{\"path\":\"/livez\",\"port\":\"http-healthz\",\"scheme\":\"HTTP\"},\"initialDelaySeconds\":10,\"periodSeconds\":10,\"successThreshold\":1,\"timeoutSeconds\":15},\"name\":\"cert-manager-controller\",\"ports\":[{\"containerPort\":9402,\"name\":\"http-metrics\",\"protocol\":\"TCP\"},{\"containerPort\":9403,\"name\":\"http-healthz\",\"protocol\":\"TCP\"}],\"resources\":{\"limits\":{\"cpu\":\"120m\",\"memory\":\"120Mi\"},\"requests\":{\"cpu\":\"90m\",\"memory\":\"90Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true}}],\"enableServiceLinks\":false,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"securityContext\":{\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"cert-manager\"}}}}\n" }, "creationTimestamp": "2026-07-02T15:14:07Z", "generation": 1, "labels": { "app": "cert-manager", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "cert-manager", "app.kubernetes.io/version": "v1.20.3", "helm.sh/chart": "cert-manager-v1.20.3" }, "name": "cert-manager", "namespace": "cert-manager", "resourceVersion": "1231", "uid": "74fa16b9-65d0-4891-8177-b2cd010c5185" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "cert-manager" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "prometheus.io/path": "/metrics", "prometheus.io/port": "9402", "prometheus.io/scrape": "true" }, "creationTimestamp": null, "labels": { "app": "cert-manager", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "cert-manager", "app.kubernetes.io/version": "v1.20.3", "helm.sh/chart": "cert-manager-v1.20.3" } }, "spec": { "containers": [ { "args": [ "--v=2", "--cluster-resource-namespace=$(POD_NAMESPACE)", "--leader-election-namespace=kube-system", "--acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.20.3", "--max-concurrent-challenges=60" ], "env": [ { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/jetstack/cert-manager-controller:v1.20.3", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 8, "httpGet": { "path": "/livez", "port": "http-healthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 15 }, "name": "cert-manager-controller", "ports": [ { "containerPort": 9402, "name": "http-metrics", "protocol": "TCP" }, { "containerPort": 9403, "name": "http-healthz", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "120m", "memory": "120Mi" }, "requests": { "cpu": "90m", "memory": "90Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cert-manager", "serviceAccountName": "cert-manager", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:14:11Z", "lastUpdateTime": "2026-07-02T15:14:11Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:14:07Z", "lastUpdateTime": "2026-07-02T15:14:11Z", "message": "ReplicaSet \"cert-manager-68b9f6fc76\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"cainjector\",\"app.kubernetes.io/component\":\"cainjector\",\"app.kubernetes.io/instance\":\"cert-manager\",\"app.kubernetes.io/managed-by\":\"Helm\",\"app.kubernetes.io/name\":\"cainjector\",\"app.kubernetes.io/version\":\"v1.20.3\",\"helm.sh/chart\":\"cert-manager-v1.20.3\"},\"name\":\"cert-manager-cainjector\",\"namespace\":\"cert-manager\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"cainjector\",\"app.kubernetes.io/instance\":\"cert-manager\",\"app.kubernetes.io/name\":\"cainjector\"}},\"template\":{\"metadata\":{\"annotations\":{\"prometheus.io/path\":\"/metrics\",\"prometheus.io/port\":\"9402\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"app\":\"cainjector\",\"app.kubernetes.io/component\":\"cainjector\",\"app.kubernetes.io/instance\":\"cert-manager\",\"app.kubernetes.io/managed-by\":\"Helm\",\"app.kubernetes.io/name\":\"cainjector\",\"app.kubernetes.io/version\":\"v1.20.3\",\"helm.sh/chart\":\"cert-manager-v1.20.3\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=2\",\"--leader-election-namespace=kube-system\"],\"env\":[{\"name\":\"POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"quay.io/jetstack/cert-manager-cainjector:v1.20.3\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"cert-manager-cainjector\",\"ports\":[{\"containerPort\":9402,\"name\":\"http-metrics\",\"protocol\":\"TCP\"}],\"resources\":{\"limits\":{\"cpu\":\"120m\",\"memory\":\"120Mi\"},\"requests\":{\"cpu\":\"90m\",\"memory\":\"90Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true}}],\"enableServiceLinks\":false,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"securityContext\":{\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"cert-manager-cainjector\"}}}}\n" }, "creationTimestamp": "2026-07-02T15:14:07Z", "generation": 1, "labels": { "app": "cainjector", "app.kubernetes.io/component": "cainjector", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "cainjector", "app.kubernetes.io/version": "v1.20.3", "helm.sh/chart": "cert-manager-v1.20.3" }, "name": "cert-manager-cainjector", "namespace": "cert-manager", "resourceVersion": "1226", "uid": "c4dc00d3-6b79-4666-a1b0-cee53b4079b3" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "cainjector", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "cainjector" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "prometheus.io/path": "/metrics", "prometheus.io/port": "9402", "prometheus.io/scrape": "true" }, "creationTimestamp": null, "labels": { "app": "cainjector", "app.kubernetes.io/component": "cainjector", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "cainjector", "app.kubernetes.io/version": "v1.20.3", "helm.sh/chart": "cert-manager-v1.20.3" } }, "spec": { "containers": [ { "args": [ "--v=2", "--leader-election-namespace=kube-system" ], "env": [ { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/jetstack/cert-manager-cainjector:v1.20.3", "imagePullPolicy": "IfNotPresent", "name": "cert-manager-cainjector", "ports": [ { "containerPort": 9402, "name": "http-metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "120m", "memory": "120Mi" }, "requests": { "cpu": "90m", "memory": "90Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cert-manager-cainjector", "serviceAccountName": "cert-manager-cainjector", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:14:11Z", "lastUpdateTime": "2026-07-02T15:14:11Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:14:07Z", "lastUpdateTime": "2026-07-02T15:14:11Z", "message": "ReplicaSet \"cert-manager-cainjector-74ffc7888d\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"webhook\",\"app.kubernetes.io/component\":\"webhook\",\"app.kubernetes.io/instance\":\"cert-manager\",\"app.kubernetes.io/managed-by\":\"Helm\",\"app.kubernetes.io/name\":\"webhook\",\"app.kubernetes.io/version\":\"v1.20.3\",\"helm.sh/chart\":\"cert-manager-v1.20.3\"},\"name\":\"cert-manager-webhook\",\"namespace\":\"cert-manager\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"webhook\",\"app.kubernetes.io/instance\":\"cert-manager\",\"app.kubernetes.io/name\":\"webhook\"}},\"template\":{\"metadata\":{\"annotations\":{\"prometheus.io/path\":\"/metrics\",\"prometheus.io/port\":\"9402\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"app\":\"webhook\",\"app.kubernetes.io/component\":\"webhook\",\"app.kubernetes.io/instance\":\"cert-manager\",\"app.kubernetes.io/managed-by\":\"Helm\",\"app.kubernetes.io/name\":\"webhook\",\"app.kubernetes.io/version\":\"v1.20.3\",\"helm.sh/chart\":\"cert-manager-v1.20.3\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=2\",\"--secure-port=10250\",\"--dynamic-serving-ca-secret-namespace=$(POD_NAMESPACE)\",\"--dynamic-serving-ca-secret-name=cert-manager-webhook-ca\",\"--dynamic-serving-dns-names=cert-manager-webhook\",\"--dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE)\",\"--dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE).svc\"],\"env\":[{\"name\":\"POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"quay.io/jetstack/cert-manager-webhook:v1.20.3\",\"imagePullPolicy\":\"IfNotPresent\",\"livenessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/livez\",\"port\":\"healthcheck\",\"scheme\":\"HTTP\"},\"initialDelaySeconds\":60,\"periodSeconds\":10,\"successThreshold\":1,\"timeoutSeconds\":1},\"name\":\"cert-manager-webhook\",\"ports\":[{\"containerPort\":10250,\"name\":\"https\",\"protocol\":\"TCP\"},{\"containerPort\":6080,\"name\":\"healthcheck\",\"protocol\":\"TCP\"},{\"containerPort\":9402,\"name\":\"http-metrics\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/healthz\",\"port\":\"healthcheck\",\"scheme\":\"HTTP\"},\"initialDelaySeconds\":5,\"periodSeconds\":5,\"successThreshold\":1,\"timeoutSeconds\":1},\"resources\":{\"limits\":{\"cpu\":\"120m\",\"memory\":\"120Mi\"},\"requests\":{\"cpu\":\"90m\",\"memory\":\"90Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true}}],\"enableServiceLinks\":false,\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"securityContext\":{\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"cert-manager-webhook\"}}}}\n" }, "creationTimestamp": "2026-07-02T15:14:08Z", "generation": 1, "labels": { "app": "webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/version": "v1.20.3", "helm.sh/chart": "cert-manager-v1.20.3" }, "name": "cert-manager-webhook", "namespace": "cert-manager", "resourceVersion": "1247", "uid": "3217f710-75a9-42c2-82a9-fcb19cfd4ba0" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "webhook" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "prometheus.io/path": "/metrics", "prometheus.io/port": "9402", "prometheus.io/scrape": "true" }, "creationTimestamp": null, "labels": { "app": "webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/version": "v1.20.3", "helm.sh/chart": "cert-manager-v1.20.3" } }, "spec": { "containers": [ { "args": [ "--v=2", "--secure-port=10250", "--dynamic-serving-ca-secret-namespace=$(POD_NAMESPACE)", "--dynamic-serving-ca-secret-name=cert-manager-webhook-ca", "--dynamic-serving-dns-names=cert-manager-webhook", "--dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE)", "--dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE).svc" ], "env": [ { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/jetstack/cert-manager-webhook:v1.20.3", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/livez", "port": "healthcheck", "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "cert-manager-webhook", "ports": [ { "containerPort": 10250, "name": "https", "protocol": "TCP" }, { "containerPort": 6080, "name": "healthcheck", "protocol": "TCP" }, { "containerPort": 9402, "name": "http-metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "healthcheck", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "120m", "memory": "120Mi" }, "requests": { "cpu": "90m", "memory": "90Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cert-manager-webhook", "serviceAccountName": "cert-manager-webhook", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:14:17Z", "lastUpdateTime": "2026-07-02T15:14:17Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:14:08Z", "lastUpdateTime": "2026-07-02T15:14:17Z", "message": "ReplicaSet \"cert-manager-webhook-6b9796b569\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/readiness-port": "Keeping upstream configs", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"ignore-check.kube-linter.io/readiness-port\":\"Keeping upstream configs\"},\"labels\":{\"app.kubernetes.io/instance\":\"trust-manager\",\"app.kubernetes.io/managed-by\":\"Helm\",\"app.kubernetes.io/name\":\"trust-manager\",\"app.kubernetes.io/version\":\"v0.23.0\",\"helm.sh/chart\":\"trust-manager-v0.23.0\"},\"name\":\"trust-manager\",\"namespace\":\"cert-manager\"},\"spec\":{\"replicas\":1,\"revisionHistoryLimit\":10,\"selector\":{\"matchLabels\":{\"app\":\"trust-manager\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"trust-manager\",\"app.kubernetes.io/instance\":\"trust-manager\",\"app.kubernetes.io/managed-by\":\"Helm\",\"app.kubernetes.io/name\":\"trust-manager\",\"app.kubernetes.io/version\":\"v0.23.0\",\"helm.sh/chart\":\"trust-manager-v0.23.0\"}},\"spec\":{\"automountServiceAccountToken\":true,\"containers\":[{\"args\":[\"--log-format=text\",\"--log-level=1\",\"--metrics-port=9402\",\"--readiness-probe-port=6060\",\"--readiness-probe-path=/readyz\",\"--leader-elect=true\",\"--leader-election-lease-duration=15s\",\"--leader-election-renew-deadline=10s\",\"--trust-namespace=cert-manager\",\"--webhook-host=0.0.0.0\",\"--webhook-port=6443\",\"--webhook-certificate-dir=/tls\",\"--default-package-location=/packages/cert-manager-package-debian.json\"],\"image\":\"quay.io/jetstack/trust-manager:v0.23.0\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"trust-manager\",\"ports\":[{\"containerPort\":6443,\"name\":\"webhook\"},{\"containerPort\":9402,\"name\":\"metrics\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/readyz\",\"port\":6060},\"initialDelaySeconds\":3,\"periodSeconds\":7},\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"250Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"volumeMounts\":[{\"mountPath\":\"/tls\",\"name\":\"tls\",\"readOnly\":true},{\"mountPath\":\"/packages\",\"name\":\"packages\",\"readOnly\":true}]}],\"initContainers\":[{\"args\":[\"/copyandmaybepause\",\"/debian-package\",\"/packages\"],\"image\":\"quay.io/jetstack/trust-pkg-debian-trixie:20250419.1\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"cert-manager-package-debian\",\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"250Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"50Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"volumeMounts\":[{\"mountPath\":\"/packages\",\"name\":\"packages\",\"readOnly\":false}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"serviceAccountName\":\"trust-manager\",\"volumes\":[{\"emptyDir\":{\"sizeLimit\":\"50M\"},\"name\":\"packages\"},{\"name\":\"tls\",\"secret\":{\"defaultMode\":420,\"secretName\":\"trust-manager-tls\"}}]}}}}\n" }, "creationTimestamp": "2026-07-02T15:14:22Z", "generation": 1, "labels": { "app.kubernetes.io/instance": "trust-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "trust-manager", "app.kubernetes.io/version": "v0.23.0", "helm.sh/chart": "trust-manager-v0.23.0" }, "name": "trust-manager", "namespace": "cert-manager", "resourceVersion": "12706", "uid": "f3056b00-284e-4b59-b966-e8753c1f8af4" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "trust-manager" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "trust-manager", "app.kubernetes.io/instance": "trust-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "trust-manager", "app.kubernetes.io/version": "v0.23.0", "helm.sh/chart": "trust-manager-v0.23.0" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--log-format=text", "--log-level=1", "--metrics-port=9402", "--readiness-probe-port=6060", "--readiness-probe-path=/readyz", "--leader-elect=true", "--leader-election-lease-duration=15s", "--leader-election-renew-deadline=10s", "--trust-namespace=cert-manager", "--webhook-host=0.0.0.0", "--webhook-port=6443", "--webhook-certificate-dir=/tls", "--default-package-location=/packages/cert-manager-package-debian.json" ], "image": "quay.io/jetstack/trust-manager:v0.23.0", "imagePullPolicy": "IfNotPresent", "name": "trust-manager", "ports": [ { "containerPort": 6443, "name": "webhook", "protocol": "TCP" }, { "containerPort": 9402, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 6060, "scheme": "HTTP" }, "initialDelaySeconds": 3, "periodSeconds": 7, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "100m", "memory": "250Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tls", "name": "tls", "readOnly": true }, { "mountPath": "/packages", "name": "packages", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "/copyandmaybepause", "/debian-package", "/packages" ], "image": "quay.io/jetstack/trust-pkg-debian-trixie:20250419.1", "imagePullPolicy": "IfNotPresent", "name": "cert-manager-package-debian", "resources": { "limits": { "cpu": "100m", "memory": "250Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/packages", "name": "packages" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "trust-manager", "serviceAccountName": "trust-manager", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": { "sizeLimit": "50M" }, "name": "packages" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "trust-manager-tls" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:14:22Z", "lastUpdateTime": "2026-07-02T15:14:36Z", "message": "ReplicaSet \"trust-manager-56d6cb67ff\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-07-02T15:32:08Z", "lastUpdateTime": "2026-07-02T15:32:08Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-02T15:21:35Z", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "kustomize", "app.kubernetes.io/name": "image-controller", "control-plane": "controller-manager", "konflux.konflux-ci.dev/component": "image-controller", "konflux.konflux-ci.dev/owner": "konflux-image-controller" }, "name": "image-controller-controller-manager", "namespace": "image-controller", "ownerReferences": [ { "apiVersion": "konflux.konflux-ci.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "KonfluxImageController", "name": "konflux-image-controller", "uid": "8fd16d3e-73fe-428b-9565-9f83a0a30461" } ], "resourceVersion": "7167", "uid": "ff4a1c34-9522-4723-a22f-2a32cd28d46e" }, "spec": { "progressDeadlineSeconds": 2147483647, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "control-plane": "controller-manager" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8443", "--leader-elect=false", "--health-probe-bind-address=:8081" ], "command": [ "/manager" ], "image": "quay.io/redhat-user-workloads/rhtap-build-tenant/image-controller/image-controller@sha256:841be5c854374366ee4da5aeed79bfd359c48835d4614cfa1c1ec64403c6ba39", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 8081, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/ssl/certs/quay-ca", "name": "quay-ca-bundle", "readOnly": true }, { "mountPath": "/workspace", "name": "quaytoken", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "image-controller-controller-manager", "serviceAccountName": "image-controller-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "configMap": { "defaultMode": 420, "name": "quay-ca-bundle", "optional": true }, "name": "quay-ca-bundle" }, { "name": "quaytoken", "secret": { "defaultMode": 420, "secretName": "quaytoken" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:22:00Z", "lastUpdateTime": "2026-07-02T15:22:00Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-07-02T15:21:35Z", "generation": 2, "labels": { "control-plane": "controller-manager", "konflux.konflux-ci.dev/component": "integration", "konflux.konflux-ci.dev/owner": "konflux-integration-service" }, "name": "integration-service-controller-manager", "namespace": "integration-service", "ownerReferences": [ { "apiVersion": "konflux.konflux-ci.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "KonfluxIntegrationService", "name": "konflux-integration-service", "uid": "8faf2f7a-6ff3-4825-8d13-60f082fa3237" } ], "resourceVersion": "7221", "uid": "6c4f0df0-123e-48be-801d-b91330668d7e" }, "spec": { "progressDeadlineSeconds": 2147483647, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "control-plane": "controller-manager" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8080", "--leader-elect", "--lease-duration=30s", "--leader-renew-deadline=15s", "--leader-elector-retry-period=5s" ], "command": [ "/manager" ], "env": [ { "name": "CONSOLE_URL", "value": "https://localhost:9443/ns/{{ .Namespace }}/pipelinerun/{{ .PipelineRunName }}" } ], "image": "quay.io/konflux-ci/integration-service:3e5f7eb3051c8c044f8f617156edbd906ab32ded", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" }, { "containerPort": 8081, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "30m", "memory": "128Mi" }, "requests": { "cpu": "30m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "integration-service-controller-manager", "serviceAccountName": "integration-service-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "name": "cert", "secret": { "defaultMode": 420, "secretName": "webhook-server-cert" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:22:00Z", "lastUpdateTime": "2026-07-02T15:22:00Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 2, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/no-read-only-root-fs": "This component requires write permissions", "ignore-check.kube-linter.io/run-as-non-root": "This component requires root permissions" }, "creationTimestamp": "2026-07-02T15:21:34Z", "generation": 1, "labels": { "konflux.konflux-ci.dev/component": "registry", "konflux.konflux-ci.dev/owner": "konflux-internal-registry", "run": "registry" }, "name": "registry", "namespace": "kind-registry", "ownerReferences": [ { "apiVersion": "konflux.konflux-ci.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "KonfluxInternalRegistry", "name": "konflux-internal-registry", "uid": "03d64eae-a06e-4c64-b0fe-6f8dfd19099d" } ], "resourceVersion": "7081", "uid": "22119776-b36d-4488-b95e-9aac10642a14" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "run": "registry" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "run": "registry" } }, "spec": { "containers": [ { "args": [ "/etc/zot/config.json" ], "image": "quay.io/konflux-ci/zot@sha256:fec7a84e9865b6f86b1f44af5baadf4525ec75488409b16fef372398f2fd8e40", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "tcpSocket": { "port": 5000 }, "timeoutSeconds": 1 }, "name": "registry", "ports": [ { "containerPort": 5000, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 5000 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "100m", "memory": "250Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/certs", "name": "certs", "readOnly": true }, { "mountPath": "/etc/zot", "name": "zot-config", "readOnly": true }, { "mountPath": "/etc/zot/auth", "name": "zot-auth", "readOnly": true }, { "mountPath": "/var/lib/registry", "name": "storage" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "certs", "secret": { "defaultMode": 420, "secretName": "local-registry-tls" } }, { "configMap": { "defaultMode": 420, "name": "zot-config" }, "name": "zot-config" }, { "name": "zot-auth", "secret": { "defaultMode": 420, "secretName": "zot-htpasswd" } }, { "emptyDir": {}, "name": "storage" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:21:57Z", "lastUpdateTime": "2026-07-02T15:21:57Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:21:34Z", "lastUpdateTime": "2026-07-02T15:21:57Z", "message": "ReplicaSet \"registry-b489d9579\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-02T15:21:34Z", "generation": 1, "labels": { "app": "dex", "konflux.konflux-ci.dev/component": "ui", "konflux.konflux-ci.dev/owner": "konflux-ui" }, "name": "dex", "namespace": "konflux-ui", "ownerReferences": [ { "apiVersion": "konflux.konflux-ci.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "KonfluxUI", "name": "konflux-ui", "uid": "5ec9b446-b2b4-47ec-a9f2-d21b513d4378" } ], "resourceVersion": "7601", "uid": "eea4b1e5-f25a-443d-94ea-aefd18d6f031" }, "spec": { "progressDeadlineSeconds": 2147483647, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "dex" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "dex" } }, "spec": { "containers": [ { "command": [ "/usr/local/bin/run-dex.sh" ], "env": [ { "name": "TOKEN_PATH", "value": "/var/run/secrets/konflux-ci.dev/serviceaccount/token" }, { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_SERVICE_ACCOUNT", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.serviceAccountName" } } }, { "name": "CLIENT_SECRET", "valueFrom": { "secretKeyRef": { "key": "client-secret", "name": "oauth2-proxy-client-secret" } } } ], "image": "quay.io/konflux-ci/dex@sha256:d065a38902a0103383be31ea96329846b5e44693da349b1192297e087af3db44", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/ready", "port": "telemetry", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "dex", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" }, { "containerPort": 5558, "name": "telemetry", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/ready", "port": "telemetry", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "50m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp" }, { "mountPath": "/var/run/secrets/konflux-ci.dev/serviceaccount/", "name": "dex-token" }, { "mountPath": "/usr/local/bin/run-dex.sh", "name": "run-dex", "subPath": "run-dex.sh" }, { "mountPath": "/etc/dex/cfg", "name": "dex" }, { "mountPath": "/etc/dex/tls", "name": "tls" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "dex", "serviceAccountName": "dex", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": { "medium": "Memory" }, "name": "tmp" }, { "name": "dex-token", "projected": { "defaultMode": 288, "sources": [ { "serviceAccountToken": { "expirationSeconds": 600, "path": "token" } } ] } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "config.yaml", "path": "config.yaml" } ], "name": "dex-b17241f462" }, "name": "dex" }, { "configMap": { "defaultMode": 493, "items": [ { "key": "run-dex.sh", "path": "run-dex.sh" } ], "name": "run-dex-f654f6k7th" }, "name": "run-dex" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "dex-cert" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:22:48Z", "lastUpdateTime": "2026-07-02T15:22:48Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/no-anti-affinity": "Using topologySpreadConstraints" }, "creationTimestamp": "2026-07-02T15:21:34Z", "generation": 1, "labels": { "app": "proxy", "konflux.konflux-ci.dev/component": "ui", "konflux.konflux-ci.dev/owner": "konflux-ui" }, "name": "proxy", "namespace": "konflux-ui", "ownerReferences": [ { "apiVersion": "konflux.konflux-ci.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "KonfluxUI", "name": "konflux-ui", "uid": "5ec9b446-b2b4-47ec-a9f2-d21b513d4378" } ], "resourceVersion": "7825", "uid": "bdd3023c-2887-40c2-83a7-9c490ae2321c" }, "spec": { "minReadySeconds": 30, "progressDeadlineSeconds": 2147483647, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "proxy" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": 0 }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "proxy" } }, "spec": { "containers": [ { "command": [ "caddy", "run", "--config", "/etc/caddy/Caddyfile", "--adapter", "caddyfile" ], "image": "quay.io/konflux-ci/reverse-proxy@sha256:ecaabf6d6a5bbb0c4cadf50909277fba156c592283e562aa6130dd2fe260c660", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 60, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "reverse-proxy", "ports": [ { "containerPort": 9443, "name": "web-tls", "protocol": "TCP" }, { "containerPort": 2112, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "30m", "memory": "128Mi" }, "requests": { "cpu": "30m", "memory": "128Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/caddy/Caddyfile", "name": "proxy-caddyfile", "readOnly": true, "subPath": "Caddyfile" }, { "mountPath": "/mnt/serving-cert", "name": "serving-cert", "readOnly": true }, { "mountPath": "/var/run/secrets/konflux-ci.dev/serviceaccount", "name": "kube-api-token", "readOnly": true }, { "mountPath": "/var/run/secrets/konflux-ci.dev/backend", "name": "backend-token", "readOnly": true }, { "mountPath": "/mnt/caddy-snippets", "name": "caddy-snippets", "readOnly": true }, { "mountPath": "/mnt/cluster-ca", "name": "cluster-ca", "readOnly": true }, { "mountPath": "/mnt/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/opt/app-root/src/static-content", "name": "static-content" }, { "mountPath": "/opt/app-root/src/segment", "name": "segment-bridge-config" }, { "mountPath": "/mnt/watson-config", "name": "watson-config", "readOnly": true }, { "mountPath": "/data", "name": "caddy-data" }, { "mountPath": "/config", "name": "caddy-config" } ] }, { "env": [ { "name": "OAUTH2_PROXY_CLIENT_SECRET", "valueFrom": { "secretKeyRef": { "key": "client-secret", "name": "oauth2-proxy-client-secret" } } }, { "name": "OAUTH2_PROXY_COOKIE_SECRET", "valueFrom": { "secretKeyRef": { "key": "cookie-secret", "name": "oauth2-proxy-cookie-secret" } } }, { "name": "OAUTH2_PROXY_PROVIDER", "value": "oidc" }, { "name": "OAUTH2_PROXY_PROVIDER_DISPLAY_NAME", "value": "Dex OIDC" }, { "name": "OAUTH2_PROXY_CLIENT_ID", "value": "oauth2-proxy" }, { "name": "OAUTH2_PROXY_HTTP_ADDRESS", "value": "127.0.0.1:6000" }, { "name": "OAUTH2_PROXY_SKIP_PROVIDER_BUTTON", "value": "true" }, { "name": "OAUTH2_PROXY_PROMPT", "value": "login" }, { "name": "OAUTH2_PROXY_REDIRECT_URL", "value": "https://localhost:9443/oauth2/callback" }, { "name": "OAUTH2_PROXY_OIDC_ISSUER_URL", "value": "https://localhost:9443/idp/" }, { "name": "OAUTH2_PROXY_LOGIN_URL", "value": "https://localhost:9443/idp/auth" }, { "name": "OAUTH2_PROXY_SKIP_OIDC_DISCOVERY", "value": "true" }, { "name": "OAUTH2_PROXY_REDEEM_URL", "value": "https://dex.konflux-ui.svc.cluster.local:9443/idp/token" }, { "name": "OAUTH2_PROXY_OIDC_JWKS_URL", "value": "https://dex.konflux-ui.svc.cluster.local:9443/idp/keys" }, { "name": "OAUTH2_PROXY_COOKIE_SECURE", "value": "true" }, { "name": "OAUTH2_PROXY_COOKIE_NAME", "value": "__Host-konflux-ci-cookie" }, { "name": "OAUTH2_PROXY_EMAIL_DOMAINS", "value": "*" }, { "name": "OAUTH2_PROXY_SET_XAUTHREQUEST", "value": "true" }, { "name": "OAUTH2_PROXY_SKIP_JWT_BEARER_TOKENS", "value": "true" }, { "name": "OAUTH2_PROXY_SCOPE", "value": "openid email profile groups" }, { "name": "OAUTH2_PROXY_PROVIDER_CA_FILES", "value": "/etc/ssl/certs/ca-bundle.crt" }, { "name": "OAUTH2_PROXY_WHITELIST_DOMAINS", "value": "localhost:9443" } ], "image": "quay.io/konflux-ci/oauth2-proxy@sha256:fcc1d7a49b86e6aa1891ac173325f0c1c06b7c71c58dd5ed72fe688b2c251e18", "imagePullPolicy": "IfNotPresent", "name": "oauth2-proxy", "ports": [ { "containerPort": 6000, "name": "web", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "300m", "memory": "256Mi" }, "requests": { "cpu": "30m", "memory": "128Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/ssl/certs", "name": "ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "cp", "-R", "/opt/app-root/src/.", "/mnt/static-content/" ], "image": "quay.io/konflux-ci/konflux-ui@sha256:5730bfed253a4e7b33226c05195166f0adde81020df7bfbb7edd42376bf818ad", "imagePullPolicy": "IfNotPresent", "name": "copy-static-content", "resources": { "limits": { "cpu": "50m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/mnt/static-content", "name": "static-content" } ] }, { "command": [ "sh", "/var/run/scripts/konflux-ci.dev/generate-proxy-config.sh" ], "image": "quay.io/konflux-ci/konflux-ui@sha256:5730bfed253a4e7b33226c05195166f0adde81020df7bfbb7edd42376bf818ad", "imagePullPolicy": "IfNotPresent", "name": "generate-proxy-config", "resources": { "limits": { "cpu": "50m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/mnt/caddy-templates", "name": "caddy-templates", "readOnly": true }, { "mountPath": "/mnt/caddy-snippets", "name": "caddy-snippets" }, { "mountPath": "/var/run/scripts/konflux-ci.dev", "name": "generate-proxy-config-script", "readOnly": true }, { "mountPath": "/mnt/service-ca", "name": "service-ca", "readOnly": true } ] } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "proxy", "serviceAccountName": "proxy", "terminationGracePeriodSeconds": 30, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "app": "proxy" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "ScheduleAnyway" } ], "volumes": [ { "name": "ca-bundle", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "ca.crt", "path": "ca-bundle.crt" } ], "name": "oauth2-proxy-cert" } } ] } }, { "configMap": { "defaultMode": 488, "items": [ { "key": "generate-proxy-config.sh", "path": "generate-proxy-config.sh" } ], "name": "proxy-generate-config-thtfcb7h98" }, "name": "generate-proxy-config-script" }, { "name": "kube-api-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "expirationSeconds": 600, "path": "token" } } ] } }, { "name": "backend-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "konflux-backend", "expirationSeconds": 600, "path": "token" } } ] } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "Caddyfile", "path": "Caddyfile" } ], "name": "proxy-caddyfile-567h9kth9f" }, "name": "proxy-caddyfile" }, { "configMap": { "defaultMode": 420, "name": "proxy-caddy-templates-46ctfh6tk7" }, "name": "caddy-templates" }, { "emptyDir": {}, "name": "caddy-snippets" }, { "emptyDir": {}, "name": "caddy-data" }, { "emptyDir": {}, "name": "caddy-config" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "name": "cluster-ca", "secret": { "defaultMode": 420, "items": [ { "key": "ca.crt", "path": "ca-bundle.crt" } ], "secretName": "cluster-root-ref" } }, { "configMap": { "defaultMode": 420, "name": "openshift-service-ca.crt", "optional": true }, "name": "service-ca" }, { "emptyDir": {}, "name": "static-content" }, { "name": "segment-bridge-config", "secret": { "defaultMode": 420, "items": [ { "key": "key", "path": "key" }, { "key": "url", "path": "url" } ], "optional": true, "secretName": "segment-bridge-config" } }, { "name": "watson-config", "secret": { "defaultMode": 420, "optional": true, "secretName": "watson-config" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:23:12Z", "lastUpdateTime": "2026-07-02T15:23:12Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-07-02T15:09:14Z", "generation": 3, "labels": { "k8s-app": "kube-dns" }, "name": "coredns", "namespace": "kube-system", "resourceVersion": "798", "uid": "0ec1ef3c-ae33-4ef4-9806-1e82bd3a2e50" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 3, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "k8s-app": "kube-dns" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": 1 }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "k8s-app": "kube-dns" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "k8s-app", "operator": "In", "values": [ "kube-dns" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-conf", "/etc/coredns/Corefile" ], "image": "registry.k8s.io/coredns/coredns:v1.11.3", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/health", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "coredns", "ports": [ { "containerPort": 53, "name": "dns", "protocol": "UDP" }, { "containerPort": 53, "name": "dns-tcp", "protocol": "TCP" }, { "containerPort": 9153, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": 8181, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "memory": "512Mi" }, "requests": { "cpu": "200m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "add": [ "NET_BIND_SERVICE" ], "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/coredns", "name": "config-volume", "readOnly": true } ] } ], "dnsPolicy": "Default", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "coredns", "serviceAccountName": "coredns", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/control-plane" } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "Corefile", "path": "Corefile" } ], "name": "coredns" }, "name": "config-volume" } ] } } }, "status": { "availableReplicas": 3, "conditions": [ { "lastTransitionTime": "2026-07-02T15:09:37Z", "lastUpdateTime": "2026-07-02T15:09:37Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:09:19Z", "lastUpdateTime": "2026-07-02T15:10:13Z", "message": "ReplicaSet \"coredns-575f7c7846\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 3, "readyReplicas": 3, "replicas": 3, "updatedReplicas": 3 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "2", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"k8s-app\":\"metrics-server\"},\"name\":\"metrics-server\",\"namespace\":\"kube-system\"},\"spec\":{\"selector\":{\"matchLabels\":{\"k8s-app\":\"metrics-server\"}},\"strategy\":{\"rollingUpdate\":{\"maxUnavailable\":0}},\"template\":{\"metadata\":{\"labels\":{\"k8s-app\":\"metrics-server\"}},\"spec\":{\"containers\":[{\"args\":[\"--cert-dir=/tmp\",\"--secure-port=10250\",\"--kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname\",\"--kubelet-use-node-status-port\",\"--metric-resolution=15s\"],\"image\":\"registry.k8s.io/metrics-server/metrics-server:v0.8.1\",\"imagePullPolicy\":\"IfNotPresent\",\"livenessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/livez\",\"port\":\"https\",\"scheme\":\"HTTPS\"},\"periodSeconds\":10},\"name\":\"metrics-server\",\"ports\":[{\"containerPort\":10250,\"name\":\"https\",\"protocol\":\"TCP\"}],\"readinessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/readyz\",\"port\":\"https\",\"scheme\":\"HTTPS\"},\"initialDelaySeconds\":20,\"periodSeconds\":10},\"resources\":{\"requests\":{\"cpu\":\"100m\",\"memory\":\"200Mi\"}},\"securityContext\":{\"allowPrivilegeEscalation\":false,\"capabilities\":{\"drop\":[\"ALL\"]},\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true,\"runAsUser\":1000,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"volumeMounts\":[{\"mountPath\":\"/tmp\",\"name\":\"tmp-dir\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"priorityClassName\":\"system-cluster-critical\",\"serviceAccountName\":\"metrics-server\",\"volumes\":[{\"emptyDir\":{},\"name\":\"tmp-dir\"}]}}}}\n" }, "creationTimestamp": "2026-07-02T15:09:57Z", "generation": 2, "labels": { "k8s-app": "metrics-server" }, "name": "metrics-server", "namespace": "kube-system", "resourceVersion": "16590", "uid": "4bd31612-4c12-471b-8f47-d1bc06624386" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "k8s-app": "metrics-server" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": 0 }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "k8s-app": "metrics-server" } }, "spec": { "containers": [ { "args": [ "--cert-dir=/tmp", "--secure-port=10250", "--kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname", "--kubelet-use-node-status-port", "--metric-resolution=15s", "--kubelet-insecure-tls" ], "image": "registry.k8s.io/metrics-server/metrics-server:v0.8.1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/livez", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "metrics-server", "ports": [ { "containerPort": 10250, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": "https", "scheme": "HTTPS" }, "initialDelaySeconds": 20, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "runAsUser": 1000, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp-dir" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "metrics-server", "serviceAccountName": "metrics-server", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "tmp-dir" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:09:57Z", "lastUpdateTime": "2026-07-02T15:10:21Z", "message": "ReplicaSet \"metrics-server-56ff78d5b7\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-07-02T15:38:21Z", "lastUpdateTime": "2026-07-02T15:38:21Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 2, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-02T15:17:48Z", "generation": 1, "labels": { "app.kubernetes.io/component": "admission-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/name": "kyverno-admission-controller", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.18.1" }, "name": "kyverno-admission-controller", "namespace": "kyverno", "resourceVersion": "12697", "uid": "c9f0ca86-58a4-40a8-a909-8d0f3580fa95" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "admission-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno" } }, "strategy": { "rollingUpdate": { "maxSurge": 1, "maxUnavailable": "40%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "admission-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/name": "kyverno-admission-controller", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.18.1" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app.kubernetes.io/component", "operator": "In", "values": [ "admission-controller" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 1 } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--caSecretName=kyverno-svc.kyverno.svc.kyverno-tls-ca", "--tlsSecretName=kyverno-svc.kyverno.svc.kyverno-tls-pair", "--tlsKeyAlgorithm=RSA", "--backgroundServiceAccountName=system:serviceaccount:kyverno:kyverno-background-controller", "--reportsServiceAccountName=system:serviceaccount:kyverno:kyverno-reports-controller", "--servicePort=443", "--webhookServerPort=9443", "--resyncPeriod=15m", "--crdWatcher=false", "--disableMetrics=false", "--otelConfig=prometheus", "--metricsPort=8000", "--admissionReports=true", "--maxAdmissionReports=1000", "--autoUpdateWebhooks=true", "--enableConfigMapCaching=true", "--controllerRuntimeMetricsAddress=:8080", "--enableDeferredLoading=true", "--dumpPayload=false", "--forceFailurePolicyIgnore=false", "--generateValidatingAdmissionPolicy=true", "--generateMutatingAdmissionPolicy=false", "--dumpPatches=false", "--maxAPICallResponseLength=2000000", "--apiCallTimeout=30s", "--loggingFormat=text", "--v=2", "--omitEvents=PolicyApplied,PolicySkipped", "--enablePolicyException=false", "--protectManagedResources=false", "--allowInsecureRegistry=false", "--registryCredentialHelpers=default,google,amazon,azure,github", "--enableReporting=validate,mutate,mutateExisting,imageVerify,generate" ], "env": [ { "name": "INIT_CONFIG", "value": "kyverno" }, { "name": "METRICS_CONFIG", "value": "kyverno-metrics" }, { "name": "KYVERNO_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "KYVERNO_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "KYVERNO_SERVICEACCOUNT_NAME", "value": "kyverno-admission-controller" }, { "name": "KYVERNO_ROLE_NAME", "value": "kyverno:admission-controller" }, { "name": "KYVERNO_SVC", "value": "kyverno-svc" }, { "name": "TUF_ROOT", "value": "/.sigstore" }, { "name": "KYVERNO_DEPLOYMENT", "value": "kyverno-admission-controller" } ], "image": "reg.kyverno.io/kyverno/kyverno:v1.18.1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 2, "httpGet": { "path": "/health/liveness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "kyverno", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" }, { "containerPort": 8000, "name": "metrics-port", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 6, "httpGet": { "path": "/health/readiness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "memory": "384Mi" }, "requests": { "cpu": "1m", "memory": "1Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "startupProbe": { "failureThreshold": 20, "httpGet": { "path": "/health/liveness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 6, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/.sigstore", "name": "sigstore" }, { "mountPath": "/var/run/secrets/kyverno/apicall", "name": "apicall-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "--loggingFormat=text", "--v=2", "--openreportsEnabled=false" ], "env": [ { "name": "KYVERNO_SERVICEACCOUNT_NAME", "value": "kyverno-admission-controller" }, { "name": "KYVERNO_ROLE_NAME", "value": "kyverno:admission-controller" }, { "name": "INIT_CONFIG", "value": "kyverno" }, { "name": "METRICS_CONFIG", "value": "kyverno-metrics" }, { "name": "KYVERNO_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "KYVERNO_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "KYVERNO_DEPLOYMENT", "value": "kyverno-admission-controller" }, { "name": "KYVERNO_SVC", "value": "kyverno-svc" } ], "image": "reg.kyverno.io/kyverno/kyvernopre:v1.18.1", "imagePullPolicy": "IfNotPresent", "name": "kyverno-pre", "resources": { "limits": { "cpu": "100m", "memory": "256Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kyverno-admission-controller", "serviceAccountName": "kyverno-admission-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "sigstore" }, { "name": "apicall-token", "projected": { "defaultMode": 292, "sources": [ { "serviceAccountToken": { "audience": "kyverno-svc.kyverno.io", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:17:48Z", "lastUpdateTime": "2026-07-02T15:18:01Z", "message": "ReplicaSet \"kyverno-admission-controller-57c64f5f4d\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-07-02T15:32:08Z", "lastUpdateTime": "2026-07-02T15:32:08Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-02T15:17:48Z", "generation": 1, "labels": { "app.kubernetes.io/component": "background-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/name": "kyverno-background-controller", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.18.1" }, "name": "kyverno-background-controller", "namespace": "kyverno", "resourceVersion": "12612", "uid": "e33d0842-e6b4-4069-ada7-163f1f3871f5" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "background-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno" } }, "strategy": { "rollingUpdate": { "maxSurge": 1, "maxUnavailable": "40%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "background-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/name": "kyverno-background-controller", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.18.1" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app.kubernetes.io/component", "operator": "In", "values": [ "background-controller" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 1 } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--disableMetrics=false", "--otelConfig=prometheus", "--metricsPort=8000", "--resyncPeriod=15m", "--enableConfigMapCaching=true", "--controllerRuntimeMetricsAddress=:8080", "--enableDeferredLoading=true", "--maxAPICallResponseLength=2000000", "--apiCallTimeout=30s", "--loggingFormat=text", "--v=2", "--omitEvents=PolicyApplied,PolicySkipped", "--enablePolicyException=false", "--enableReporting=validate,mutate,mutateExisting,imageVerify,generate" ], "env": [ { "name": "KYVERNO_SERVICEACCOUNT_NAME", "value": "kyverno-background-controller" }, { "name": "KYVERNO_DEPLOYMENT", "value": "kyverno-background-controller" }, { "name": "INIT_CONFIG", "value": "kyverno" }, { "name": "METRICS_CONFIG", "value": "kyverno-metrics" }, { "name": "KYVERNO_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "KYVERNO_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "reg.kyverno.io/kyverno/background-controller:v1.18.1", "imagePullPolicy": "IfNotPresent", "name": "controller", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" }, { "containerPort": 8000, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "memory": "128Mi" }, "requests": { "cpu": "1m", "memory": "1Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/secrets/kyverno/apicall", "name": "apicall-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kyverno-background-controller", "serviceAccountName": "kyverno-background-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "apicall-token", "projected": { "defaultMode": 292, "sources": [ { "serviceAccountToken": { "audience": "kyverno-svc.kyverno.io", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:17:48Z", "lastUpdateTime": "2026-07-02T15:17:52Z", "message": "ReplicaSet \"kyverno-background-controller-6d8f5f4667\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" }, { "lastTransitionTime": "2026-07-02T15:31:59Z", "lastUpdateTime": "2026-07-02T15:31:59Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-02T15:17:48Z", "generation": 1, "labels": { "app.kubernetes.io/component": "cleanup-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/name": "kyverno-cleanup-controller", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.18.1" }, "name": "kyverno-cleanup-controller", "namespace": "kyverno", "resourceVersion": "4123", "uid": "408e9b58-9dd0-47c2-937c-0bda811b47de" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 0, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "cleanup-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno" } }, "strategy": { "rollingUpdate": { "maxSurge": 1, "maxUnavailable": "40%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "cleanup-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/name": "kyverno-cleanup-controller", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.18.1" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app.kubernetes.io/component", "operator": "In", "values": [ "cleanup-controller" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 1 } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--caSecretName=kyverno-cleanup-controller.kyverno.svc.kyverno-tls-ca", "--tlsSecretName=kyverno-cleanup-controller.kyverno.svc.kyverno-tls-pair", "--tlsKeyAlgorithm=RSA", "--servicePort=443", "--resyncPeriod=15m", "--cleanupServerPort=9443", "--disableMetrics=false", "--otelConfig=prometheus", "--metricsPort=8000", "--enableDeferredLoading=true", "--dumpPayload=false", "--maxAPICallResponseLength=2000000", "--apiCallTimeout=30s", "--loggingFormat=text", "--v=2", "--protectManagedResources=false", "--ttlReconciliationInterval=1m" ], "env": [ { "name": "KYVERNO_DEPLOYMENT", "value": "kyverno-cleanup-controller" }, { "name": "INIT_CONFIG", "value": "kyverno" }, { "name": "METRICS_CONFIG", "value": "kyverno-metrics" }, { "name": "KYVERNO_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "KYVERNO_SERVICEACCOUNT_NAME", "value": "kyverno-cleanup-controller" }, { "name": "KYVERNO_ROLE_NAME", "value": "kyverno:cleanup-controller" }, { "name": "KYVERNO_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "KYVERNO_SVC", "value": "kyverno-cleanup-controller" } ], "image": "reg.kyverno.io/kyverno/cleanup-controller:v1.18.1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 2, "httpGet": { "path": "/health/liveness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "controller", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" }, { "containerPort": 8000, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 6, "httpGet": { "path": "/health/readiness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "memory": "128Mi" }, "requests": { "cpu": "100m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsGroup": 65534, "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "startupProbe": { "failureThreshold": 20, "httpGet": { "path": "/health/liveness", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 6, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/secrets/kyverno/apicall", "name": "apicall-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kyverno-cleanup-controller", "serviceAccountName": "kyverno-cleanup-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "apicall-token", "projected": { "defaultMode": 292, "sources": [ { "serviceAccountToken": { "audience": "kyverno-svc.kyverno.io", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "conditions": [ { "lastTransitionTime": "2026-07-02T15:17:48Z", "lastUpdateTime": "2026-07-02T15:17:48Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:17:48Z", "lastUpdateTime": "2026-07-02T15:17:48Z", "message": "ReplicaSet \"kyverno-cleanup-controller-8fbd5fdcb\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-02T15:17:48Z", "generation": 1, "labels": { "app.kubernetes.io/component": "reports-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/name": "kyverno-reports-controller", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.18.1" }, "name": "kyverno-reports-controller", "namespace": "kyverno", "resourceVersion": "4128", "uid": "b269bc81-aa56-4c28-9ac3-4887b2153fb0" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 0, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "reports-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/part-of": "kyverno" } }, "strategy": { "rollingUpdate": { "maxSurge": 1, "maxUnavailable": "40%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "reports-controller", "app.kubernetes.io/instance": "kyverno", "app.kubernetes.io/name": "kyverno-reports-controller", "app.kubernetes.io/part-of": "kyverno", "app.kubernetes.io/version": "v1.18.1" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app.kubernetes.io/component", "operator": "In", "values": [ "reports-controller" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 1 } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--disableMetrics=false", "--openreportsEnabled=false", "--otelConfig=prometheus", "--metricsPort=8000", "--resyncPeriod=15m", "--admissionReports=true", "--aggregateReports=true", "--policyReports=true", "--validatingAdmissionPolicyReports=true", "--mutatingAdmissionPolicyReports=false", "--backgroundScan=true", "--backgroundScanWorkers=2", "--backgroundScanInterval=1h", "--skipResourceFilters=true", "--enableConfigMapCaching=true", "--enableDeferredLoading=true", "--maxAPICallResponseLength=2000000", "--apiCallTimeout=30s", "--loggingFormat=text", "--v=2", "--omitEvents=PolicyApplied,PolicySkipped", "--enablePolicyException=false", "--allowInsecureRegistry=false", "--registryCredentialHelpers=default,google,amazon,azure,github", "--enableReporting=validate,mutate,mutateExisting,imageVerify,generate" ], "env": [ { "name": "KYVERNO_SERVICEACCOUNT_NAME", "value": "kyverno-reports-controller" }, { "name": "KYVERNO_DEPLOYMENT", "value": "kyverno-reports-controller" }, { "name": "INIT_CONFIG", "value": "kyverno" }, { "name": "METRICS_CONFIG", "value": "kyverno-metrics" }, { "name": "KYVERNO_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "KYVERNO_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TUF_ROOT", "value": "/.sigstore" } ], "image": "reg.kyverno.io/kyverno/reports-controller:v1.18.1", "imagePullPolicy": "IfNotPresent", "name": "controller", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" }, { "containerPort": 8000, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "memory": "128Mi" }, "requests": { "cpu": "100m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsGroup": 65534, "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/.sigstore", "name": "sigstore" }, { "mountPath": "/var/run/secrets/kyverno/apicall", "name": "apicall-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kyverno-reports-controller", "serviceAccountName": "kyverno-reports-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "sigstore" }, { "name": "apicall-token", "projected": { "defaultMode": 292, "sources": [ { "serviceAccountToken": { "audience": "kyverno-svc.kyverno.io", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "conditions": [ { "lastTransitionTime": "2026-07-02T15:17:48Z", "lastUpdateTime": "2026-07-02T15:17:48Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:17:48Z", "lastUpdateTime": "2026-07-02T15:17:48Z", "message": "ReplicaSet \"kyverno-reports-controller-5664d4f95f\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"local-path-provisioner\",\"namespace\":\"local-path-storage\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"local-path-provisioner\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"local-path-provisioner\"}},\"spec\":{\"containers\":[{\"command\":[\"local-path-provisioner\",\"--debug\",\"start\",\"--helper-image\",\"docker.io/kindest/local-path-helper:v20241212-8ac705d0\",\"--config\",\"/etc/config/config.json\"],\"env\":[{\"name\":\"POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CONFIG_MOUNT_PATH\",\"value\":\"/etc/config/\"}],\"image\":\"docker.io/kindest/local-path-provisioner:v20250214-acbabc1a\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"local-path-provisioner\",\"volumeMounts\":[{\"mountPath\":\"/etc/config/\",\"name\":\"config-volume\"}]}],\"nodeSelector\":{\"kubernetes.io/os\":\"linux\"},\"serviceAccountName\":\"local-path-provisioner-service-account\",\"tolerations\":[{\"effect\":\"NoSchedule\",\"key\":\"node-role.kubernetes.io/control-plane\",\"operator\":\"Equal\"},{\"effect\":\"NoSchedule\",\"key\":\"node-role.kubernetes.io/master\",\"operator\":\"Equal\"}],\"volumes\":[{\"configMap\":{\"name\":\"local-path-config\"},\"name\":\"config-volume\"}]}}}}\n" }, "creationTimestamp": "2026-07-02T15:09:16Z", "generation": 1, "name": "local-path-provisioner", "namespace": "local-path-storage", "resourceVersion": "501", "uid": "fdaf325d-0418-44cf-a8b5-97ec73cc2172" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "local-path-provisioner" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "local-path-provisioner" } }, "spec": { "containers": [ { "command": [ "local-path-provisioner", "--debug", "start", "--helper-image", "docker.io/kindest/local-path-helper:v20241212-8ac705d0", "--config", "/etc/config/config.json" ], "env": [ { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "CONFIG_MOUNT_PATH", "value": "/etc/config/" } ], "image": "docker.io/kindest/local-path-provisioner:v20250214-acbabc1a", "imagePullPolicy": "IfNotPresent", "name": "local-path-provisioner", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config/", "name": "config-volume" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "local-path-provisioner-service-account", "serviceAccountName": "local-path-provisioner-service-account", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/control-plane", "operator": "Equal" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Equal" } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "local-path-config" }, "name": "config-volume" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:09:38Z", "lastUpdateTime": "2026-07-02T15:09:38Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:09:19Z", "lastUpdateTime": "2026-07-02T15:09:38Z", "message": "ReplicaSet \"local-path-provisioner-7dc846544d\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/no-anti-affinity": "Using topologySpreadConstraints" }, "creationTimestamp": "2026-07-02T15:21:34Z", "generation": 1, "labels": { "apps": "namespace-lister", "konflux.konflux-ci.dev/component": "namespace-lister", "konflux.konflux-ci.dev/owner": "konflux-namespace-lister" }, "name": "namespace-lister", "namespace": "namespace-lister", "ownerReferences": [ { "apiVersion": "konflux.konflux-ci.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "KonfluxNamespaceLister", "name": "konflux-namespace-lister", "uid": "80da28ed-fa76-4b65-8616-8e1d83bdac4b" } ], "resourceVersion": "6754", "uid": "26ef2f4d-f804-4ced-a68a-9502b9b7c38d" }, "spec": { "progressDeadlineSeconds": 2147483647, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "apps": "namespace-lister" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "apps": "namespace-lister" } }, "spec": { "containers": [ { "args": [ "-enable-tls", "-cert-path=/var/tls/tls.crt", "-key-path=/var/tls/tls.key" ], "env": [ { "name": "CACHE_NAMESPACE_LABELSELECTOR", "value": "konflux-ci.dev/type=tenant" }, { "name": "AUTH_USERNAME_HEADER", "value": "X-User" }, { "name": "AUTH_GROUPS_HEADER", "value": "X-Group" } ], "image": "quay.io/konflux-ci/namespace-lister@sha256:b6c41f9b5271e5cb061036854891b8ae7aaef569e0bc2ff89b8e36e07086bd2b", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 1, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "namespace-lister", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 1, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "100m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "namespace-lister", "serviceAccountName": "namespace-lister", "terminationGracePeriodSeconds": 60, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "apps": "namespace-lister" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "ScheduleAnyway" } ], "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "secretName": "namespace-lister-tls" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:21:39Z", "lastUpdateTime": "2026-07-02T15:21:39Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/env-var-secret": "This is the name of the secret rather than the secret", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"ignore-check.kube-linter.io/env-var-secret\":\"This is the name of the secret rather than the secret\"},\"labels\":{\"app.kubernetes.io/part-of\":\"pipelines-as-code\",\"app.kubernetes.io/version\":\"v0.48.0\"},\"name\":\"pipelines-as-code-controller\",\"namespace\":\"pipelines-as-code\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"controller\",\"app.kubernetes.io/instance\":\"default\",\"app.kubernetes.io/name\":\"controller\",\"app.kubernetes.io/part-of\":\"pipelines-as-code\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"pipelines-as-code-controller\",\"app.kubernetes.io/component\":\"controller\",\"app.kubernetes.io/instance\":\"default\",\"app.kubernetes.io/name\":\"controller\",\"app.kubernetes.io/part-of\":\"pipelines-as-code\",\"app.kubernetes.io/version\":\"v0.48.0\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"CONFIG_LOGGING_NAME\",\"value\":\"pac-config-logging\"},{\"name\":\"TLS_KEY\",\"value\":\"key\"},{\"name\":\"TLS_CERT\",\"value\":\"cert\"},{\"name\":\"TLS_SECRET_NAME\",\"value\":\"pipelines-as-code-tls-secret\"},{\"name\":\"SYSTEM_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"CONFIG_OBSERVABILITY_NAME\",\"value\":\"pipelines-as-code-config-observability\"},{\"name\":\"K_SINK_TIMEOUT\",\"value\":\"30\"},{\"name\":\"PAC_CONTROLLER_LABEL\",\"value\":\"default\"},{\"name\":\"PAC_CONTROLLER_SECRET\",\"value\":\"pipelines-as-code-secret\"},{\"name\":\"PAC_CONTROLLER_CONFIGMAP\",\"value\":\"pipelines-as-code\"},{\"name\":\"KUBERNETES_MIN_VERSION\",\"value\":\"v1.28.0\"},{\"name\":\"TLS_MIN_VERSION\",\"value\":\"\"},{\"name\":\"TLS_CIPHER_SUITES\",\"value\":\"TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256\"},{\"name\":\"TLS_CURVE_PREFERENCES\",\"value\":\"X25519,P256\"}],\"image\":\"ghcr.io/tektoncd/pipelines-as-code/pipelines-as-code-controller:v0.48.0\",\"imagePullPolicy\":\"Always\",\"livenessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/live\",\"port\":\"api\",\"scheme\":\"HTTP\"},\"periodSeconds\":15,\"successThreshold\":1,\"timeoutSeconds\":1},\"name\":\"pac-controller\",\"ports\":[{\"containerPort\":8082,\"name\":\"api\"},{\"containerPort\":9090,\"name\":\"metrics\"}],\"readinessProbe\":{\"failureThreshold\":3,\"httpGet\":{\"path\":\"/live\",\"port\":\"api\",\"scheme\":\"HTTP\"},\"periodSeconds\":15,\"successThreshold\":1,\"timeoutSeconds\":1},\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"50Mi\"}},\"securityContext\":{\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true},\"volumeMounts\":[{\"mountPath\":\"/etc/pipelines-as-code/tls\",\"name\":\"tls\",\"readOnly\":true}]}],\"securityContext\":{\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"pipelines-as-code-controller\",\"volumes\":[{\"name\":\"tls\",\"secret\":{\"optional\":true,\"secretName\":\"pipelines-as-code-tls-secret\"}}]}}}}\n" }, "creationTimestamp": "2026-07-02T15:17:03Z", "generation": 1, "labels": { "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.48.0" }, "name": "pipelines-as-code-controller", "namespace": "pipelines-as-code", "resourceVersion": "3595", "uid": "850f707b-fb95-46d2-8c9b-5147a0d1b552" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-as-code-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.48.0" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "TLS_KEY", "value": "key" }, { "name": "TLS_CERT", "value": "cert" }, { "name": "TLS_SECRET_NAME", "value": "pipelines-as-code-tls-secret" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "pipelines-as-code-config-observability" }, { "name": "K_SINK_TIMEOUT", "value": "30" }, { "name": "PAC_CONTROLLER_LABEL", "value": "default" }, { "name": "PAC_CONTROLLER_SECRET", "value": "pipelines-as-code-secret" }, { "name": "PAC_CONTROLLER_CONFIGMAP", "value": "pipelines-as-code" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.28.0" }, { "name": "TLS_MIN_VERSION" }, { "name": "TLS_CIPHER_SUITES", "value": "TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256" }, { "name": "TLS_CURVE_PREFERENCES", "value": "X25519,P256" } ], "image": "ghcr.io/tektoncd/pipelines-as-code/pipelines-as-code-controller:v0.48.0", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "api", "scheme": "HTTP" }, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "pac-controller", "ports": [ { "containerPort": 8082, "name": "api", "protocol": "TCP" }, { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "api", "scheme": "HTTP" }, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "50m", "memory": "50Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/pipelines-as-code/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-controller", "serviceAccountName": "pipelines-as-code-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "pipelines-as-code-tls-secret" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:17:06Z", "lastUpdateTime": "2026-07-02T15:17:06Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:17:03Z", "lastUpdateTime": "2026-07-02T15:17:06Z", "message": "ReplicaSet \"pipelines-as-code-controller-7cd9845f6f\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app.kubernetes.io/part-of\":\"pipelines-as-code\",\"app.kubernetes.io/version\":\"v0.48.0\"},\"name\":\"pipelines-as-code-watcher\",\"namespace\":\"pipelines-as-code\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"watcher\",\"app.kubernetes.io/instance\":\"default\",\"app.kubernetes.io/name\":\"watcher\",\"app.kubernetes.io/part-of\":\"pipelines-as-code\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"pipelines-as-code-watcher\",\"app.kubernetes.io/component\":\"watcher\",\"app.kubernetes.io/instance\":\"default\",\"app.kubernetes.io/name\":\"watcher\",\"app.kubernetes.io/part-of\":\"pipelines-as-code\",\"app.kubernetes.io/version\":\"v0.48.0\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"CONFIG_LOGGING_NAME\",\"value\":\"pac-config-logging\"},{\"name\":\"SYSTEM_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"METRICS_DOMAIN\",\"value\":\"tekton.dev/pipelinesascode\"},{\"name\":\"CONFIG_OBSERVABILITY_NAME\",\"value\":\"pipelines-as-code-config-observability\"},{\"name\":\"CONFIG_LEADERELECTION_NAME\",\"value\":\"pac-watcher-config-leader-election\"},{\"name\":\"KUBERNETES_MIN_VERSION\",\"value\":\"v1.28.0\"}],\"image\":\"ghcr.io/tektoncd/pipelines-as-code/pipelines-as-code-watcher:v0.48.0\",\"imagePullPolicy\":\"Always\",\"livenessProbe\":{\"httpGet\":{\"path\":\"/live\",\"port\":\"probes\",\"scheme\":\"HTTP\"},\"initialDelaySeconds\":5,\"periodSeconds\":10,\"timeoutSeconds\":5},\"name\":\"pac-watcher\",\"ports\":[{\"containerPort\":8080,\"name\":\"probes\"},{\"containerPort\":9090,\"name\":\"metrics\"}],\"readinessProbe\":{\"httpGet\":{\"path\":\"/live\",\"port\":\"probes\",\"scheme\":\"HTTP\"},\"initialDelaySeconds\":5,\"periodSeconds\":10,\"timeoutSeconds\":5},\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"50Mi\"}},\"securityContext\":{\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true}}],\"securityContext\":{\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"pipelines-as-code-watcher\"}}}}\n" }, "creationTimestamp": "2026-07-02T15:17:03Z", "generation": 1, "labels": { "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.48.0" }, "name": "pipelines-as-code-watcher", "namespace": "pipelines-as-code", "resourceVersion": "3681", "uid": "0177fbb4-0603-46a9-9ab2-df8d8ecbc09f" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-as-code-watcher", "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.48.0" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipelinesascode" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "pipelines-as-code-config-observability" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "pac-watcher-config-leader-election" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.28.0" } ], "image": "ghcr.io/tektoncd/pipelines-as-code/pipelines-as-code-watcher:v0.48.0", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "pac-watcher", "ports": [ { "containerPort": 8080, "name": "probes", "protocol": "TCP" }, { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "50m", "memory": "50Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-watcher", "serviceAccountName": "pipelines-as-code-watcher", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:17:17Z", "lastUpdateTime": "2026-07-02T15:17:17Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:17:03Z", "lastUpdateTime": "2026-07-02T15:17:17Z", "message": "ReplicaSet \"pipelines-as-code-watcher-64d9b6774f\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/env-var-secret": "This is the name of the secret rather than the secret", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"ignore-check.kube-linter.io/env-var-secret\":\"This is the name of the secret rather than the secret\"},\"labels\":{\"app.kubernetes.io/part-of\":\"pipelines-as-code\",\"app.kubernetes.io/version\":\"v0.48.0\"},\"name\":\"pipelines-as-code-webhook\",\"namespace\":\"pipelines-as-code\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app.kubernetes.io/component\":\"webhook\",\"app.kubernetes.io/instance\":\"default\",\"app.kubernetes.io/name\":\"webhook\",\"app.kubernetes.io/part-of\":\"pipelines-as-code\"}},\"template\":{\"metadata\":{\"labels\":{\"app.kubernetes.io/component\":\"webhook\",\"app.kubernetes.io/instance\":\"default\",\"app.kubernetes.io/name\":\"webhook\",\"app.kubernetes.io/part-of\":\"pipelines-as-code\",\"app.kubernetes.io/version\":\"v0.48.0\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"CONFIG_LOGGING_NAME\",\"value\":\"pac-config-logging\"},{\"name\":\"SYSTEM_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"WEBHOOK_SERVICE_NAME\",\"value\":\"pipelines-as-code-webhook\"},{\"name\":\"WEBHOOK_SECRET_NAME\",\"value\":\"pipelines-as-code-webhook-certs\"},{\"name\":\"METRICS_DOMAIN\",\"value\":\"tekton.dev/pipelinesascode\"},{\"name\":\"CONFIG_LEADERELECTION_NAME\",\"value\":\"pac-webhook-config-leader-election\"},{\"name\":\"KUBERNETES_MIN_VERSION\",\"value\":\"v1.28.0\"}],\"image\":\"ghcr.io/tektoncd/pipelines-as-code/pipelines-as-code-webhook:v0.48.0\",\"name\":\"pac-webhook\",\"ports\":[{\"containerPort\":8443,\"name\":\"https-webhook\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"50Mi\"}},\"securityContext\":{\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true}}],\"securityContext\":{\"runAsNonRoot\":true,\"seccompProfile\":{\"type\":\"RuntimeDefault\"}},\"serviceAccountName\":\"pipelines-as-code-webhook\"}}}}\n" }, "creationTimestamp": "2026-07-02T15:17:04Z", "generation": 1, "labels": { "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.48.0" }, "name": "pipelines-as-code-webhook", "namespace": "pipelines-as-code", "resourceVersion": "3557", "uid": "420ac15d-9dfa-4e34-afd5-3f9990941280" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.48.0" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SERVICE_NAME", "value": "pipelines-as-code-webhook" }, { "name": "WEBHOOK_SECRET_NAME", "value": "pipelines-as-code-webhook-certs" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipelinesascode" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "pac-webhook-config-leader-election" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.28.0" } ], "image": "ghcr.io/tektoncd/pipelines-as-code/pipelines-as-code-webhook:v0.48.0", "imagePullPolicy": "IfNotPresent", "name": "pac-webhook", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "50m", "memory": "50Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-webhook", "serviceAccountName": "pipelines-as-code-webhook", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:17:05Z", "lastUpdateTime": "2026-07-02T15:17:05Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:17:04Z", "lastUpdateTime": "2026-07-02T15:17:05Z", "message": "ReplicaSet \"pipelines-as-code-webhook-7bcf76977\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/liveness-port": "Keeping upstream configs", "ignore-check.kube-linter.io/readiness-port": "Keeping upstream configs" }, "creationTimestamp": "2026-07-02T15:21:36Z", "generation": 1, "labels": { "control-plane": "controller-manager", "konflux.konflux-ci.dev/component": "release", "konflux.konflux-ci.dev/owner": "konflux-release-service" }, "name": "release-service-controller-manager", "namespace": "release-service", "ownerReferences": [ { "apiVersion": "konflux.konflux-ci.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "KonfluxReleaseService", "name": "konflux-release-service", "uid": "59837965-d1a1-4f2a-b57f-6a0b41d7acb0" } ], "resourceVersion": "7176", "uid": "61a98d7c-14a4-4858-9b59-9db8eec29529" }, "spec": { "progressDeadlineSeconds": 2147483647, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "control-plane": "controller-manager" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8080", "--leader-elect=false" ], "command": [ "/manager" ], "env": [ { "name": "DEFAULT_RELEASE_PVC", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_RELEASE_PVC", "name": "release-service-manager-properties", "optional": true } } }, { "name": "DEFAULT_RELEASE_WORKSPACE_NAME", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_RELEASE_WORKSPACE_NAME", "name": "release-service-manager-properties", "optional": true } } }, { "name": "DEFAULT_RELEASE_WORKSPACE_SIZE", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_RELEASE_WORKSPACE_SIZE", "name": "release-service-manager-properties", "optional": true } } }, { "name": "MAX_CONCURRENT_RECONCILES", "value": "10" }, { "name": "SERVICE_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/konflux-ci/release-service:53e4d9f5616ef03c682833e162e5104c3d3b45b5", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "30m", "memory": "256Mi" }, "requests": { "cpu": "30m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "release-service-controller-manager", "serviceAccountName": "release-service-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "name": "cert", "secret": { "defaultMode": 420, "secretName": "webhook-server-cert" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:22:00Z", "lastUpdateTime": "2026-07-02T15:22:00Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"name\":\"gosmee-client\",\"namespace\":\"smee-client\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"gosmee-client\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"gosmee-client\"}},\"spec\":{\"containers\":[{\"args\":[\"client\",\"https://hook.pipelinesascode.com/FMPGBULUKAyF\",\"http://localhost:8080\"],\"image\":\"ghcr.io/chmouel/gosmee:v0.31.1\",\"imagePullPolicy\":\"Always\",\"livenessProbe\":{\"exec\":{\"command\":[\"/shared/check-smee-health.sh\"]},\"failureThreshold\":2,\"initialDelaySeconds\":20,\"periodSeconds\":30,\"timeoutSeconds\":10},\"name\":\"gosmee\",\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"32Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"32Mi\"}},\"securityContext\":{\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true},\"volumeMounts\":[{\"mountPath\":\"/shared\",\"name\":\"shared-health\"}]},{\"env\":[{\"name\":\"DOWNSTREAM_SERVICE_URL\",\"value\":\"http://pipelines-as-code-controller.pipelines-as-code:8180\"},{\"name\":\"SMEE_CHANNEL_URL\",\"value\":\"https://hook.pipelinesascode.com/FMPGBULUKAyF\"},{\"name\":\"INSECURE_SKIP_VERIFY\",\"value\":\"true\"},{\"name\":\"HEALTH_CHECK_TIMEOUT_SECONDS\",\"value\":\"20\"}],\"image\":\"quay.io/konflux-ci/smee-sidecar:latest@sha256:3bb961c2ddbf129ba5d480f7189c0fc702afa0406aafbc4e90da62b3614b66e9\",\"imagePullPolicy\":\"IfNotPresent\",\"livenessProbe\":{\"exec\":{\"command\":[\"/shared/check-sidecar-health.sh\"]},\"failureThreshold\":2,\"initialDelaySeconds\":10,\"periodSeconds\":30,\"timeoutSeconds\":10},\"name\":\"health-check-sidecar\",\"ports\":[{\"containerPort\":8080,\"name\":\"http\"},{\"containerPort\":9100,\"name\":\"metrics\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"32Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"32Mi\"}},\"securityContext\":{\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true},\"volumeMounts\":[{\"mountPath\":\"/shared\",\"name\":\"shared-health\"}]}],\"volumes\":[{\"emptyDir\":{},\"name\":\"shared-health\"}]}}}}\n" }, "creationTimestamp": "2026-07-02T15:17:40Z", "generation": 1, "name": "gosmee-client", "namespace": "smee-client", "resourceVersion": "4034", "uid": "3e693012-b33f-4d6b-9063-150e1730107c" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "gosmee-client" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "gosmee-client" } }, "spec": { "containers": [ { "args": [ "client", "https://hook.pipelinesascode.com/FMPGBULUKAyF", "http://localhost:8080" ], "image": "ghcr.io/chmouel/gosmee:v0.31.1", "imagePullPolicy": "Always", "livenessProbe": { "exec": { "command": [ "/shared/check-smee-health.sh" ] }, "failureThreshold": 2, "initialDelaySeconds": 20, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "gosmee", "resources": { "limits": { "cpu": "100m", "memory": "32Mi" }, "requests": { "cpu": "10m", "memory": "32Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "shared-health" } ] }, { "env": [ { "name": "DOWNSTREAM_SERVICE_URL", "value": "http://pipelines-as-code-controller.pipelines-as-code:8180" }, { "name": "SMEE_CHANNEL_URL", "value": "https://hook.pipelinesascode.com/FMPGBULUKAyF" }, { "name": "INSECURE_SKIP_VERIFY", "value": "true" }, { "name": "HEALTH_CHECK_TIMEOUT_SECONDS", "value": "20" } ], "image": "quay.io/konflux-ci/smee-sidecar:latest@sha256:3bb961c2ddbf129ba5d480f7189c0fc702afa0406aafbc4e90da62b3614b66e9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "exec": { "command": [ "/shared/check-sidecar-health.sh" ] }, "failureThreshold": 2, "initialDelaySeconds": 10, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "health-check-sidecar", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" }, { "containerPort": 9100, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "100m", "memory": "32Mi" }, "requests": { "cpu": "10m", "memory": "32Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "shared-health" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "shared-health" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:17:47Z", "lastUpdateTime": "2026-07-02T15:17:47Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:17:40Z", "lastUpdateTime": "2026-07-02T15:17:47Z", "message": "ReplicaSet \"gosmee-client-786556dc\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"operator.tekton.dev/release\":\"v0.80.0\",\"version\":\"v0.80.0\"},\"name\":\"tekton-operator\",\"namespace\":\"tekton-operator\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"name\":\"tekton-operator\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"tekton-operator\",\"name\":\"tekton-operator\"}},\"spec\":{\"containers\":[{\"args\":[\"-controllers\",\"tektonconfig,tektonpipeline,tektontrigger,tektonhub,tektonchain,tektonresult,tektondashboard,manualapprovalgate,tektonpruner,tektonscheduler,tektonmulticlusterproxyaae,openshiftpipelinesascode\",\"-unique-process-name\",\"tekton-operator-lifecycle\"],\"env\":[{\"name\":\"KUBERNETES_MIN_VERSION\",\"value\":\"v1.0.0\"},{\"name\":\"SYSTEM_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}},{\"name\":\"OPERATOR_NAME\",\"value\":\"tekton-operator\"},{\"name\":\"IMAGE_PIPELINES_PROXY\",\"value\":\"ghcr.io/tektoncd/operator/proxy-webhook-f6167da7bc41b96a27c5529f850e63d1:v0.80.0@sha256:2260f9bdf1699253a47e5d2664f70465f1a8c59ad7651cede2469a7586774341\"},{\"name\":\"IMAGE_JOB_PRUNER_TKN\",\"value\":\"ghcr.io/tektoncd/plumbing/tkn@sha256:233de6c8b8583a34c2379fa98d42dba739146c9336e8d41b66030484357481ed\"},{\"name\":\"METRICS_DOMAIN\",\"value\":\"tekton.dev/operator\"},{\"name\":\"VERSION\",\"value\":\"v0.80.0\"},{\"name\":\"CONFIG_OBSERVABILITY_NAME\",\"value\":\"tekton-config-observability\"},{\"name\":\"CONFIG_LEADERELECTION_NAME\",\"value\":\"tekton-operator-controller-config-leader-election\"},{\"name\":\"AUTOINSTALL_COMPONENTS\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"AUTOINSTALL_COMPONENTS\",\"name\":\"tekton-config-defaults\"}}},{\"name\":\"DEFAULT_TARGET_NAMESPACE\",\"valueFrom\":{\"configMapKeyRef\":{\"key\":\"DEFAULT_TARGET_NAMESPACE\",\"name\":\"tekton-config-defaults\"}}}],\"image\":\"ghcr.io/tektoncd/operator/operator-303303c315a48490ba6517859ef65b77:v0.80.0@sha256:49f9f258920f77ca9db8031f8ee93b6abef0ff6a1a23254d937fd347601f4853\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"tekton-operator-lifecycle\",\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"securityContext\":{\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true}},{\"args\":[\"-controllers\",\"tektoninstallerset\",\"-unique-process-name\",\"tekton-operator-cluster-operations\"],\"env\":[{\"name\":\"KUBERNETES_MIN_VERSION\",\"value\":\"v1.0.0\"},{\"name\":\"SYSTEM_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}},{\"name\":\"OPERATOR_NAME\",\"value\":\"tekton-operator\"},{\"name\":\"PROFILING_PORT\",\"value\":\"9009\"},{\"name\":\"VERSION\",\"value\":\"v0.80.0\"},{\"name\":\"METRICS_DOMAIN\",\"value\":\"tekton.dev/operator\"},{\"name\":\"CONFIG_LEADERELECTION_NAME\",\"value\":\"tekton-operator-controller-config-leader-election\"}],\"image\":\"ghcr.io/tektoncd/operator/operator-303303c315a48490ba6517859ef65b77:v0.80.0@sha256:49f9f258920f77ca9db8031f8ee93b6abef0ff6a1a23254d937fd347601f4853\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"tekton-operator-cluster-operations\",\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"securityContext\":{\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true}}],\"serviceAccountName\":\"tekton-operator\"}}}}\n" }, "creationTimestamp": "2026-07-02T15:14:44Z", "generation": 1, "labels": { "operator.tekton.dev/release": "v0.80.0", "version": "v0.80.0" }, "name": "tekton-operator", "namespace": "tekton-operator", "resourceVersion": "1507", "uid": "2bbf07f3-29dc-4a7d-9e83-4e8b7efdd71a" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "name": "tekton-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-operator", "name": "tekton-operator" } }, "spec": { "containers": [ { "args": [ "-controllers", "tektonconfig,tektonpipeline,tektontrigger,tektonhub,tektonchain,tektonresult,tektondashboard,manualapprovalgate,tektonpruner,tektonscheduler,tektonmulticlusterproxyaae,openshiftpipelinesascode", "-unique-process-name", "tekton-operator-lifecycle" ], "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "tekton-operator" }, { "name": "IMAGE_PIPELINES_PROXY", "value": "ghcr.io/tektoncd/operator/proxy-webhook-f6167da7bc41b96a27c5529f850e63d1:v0.80.0@sha256:2260f9bdf1699253a47e5d2664f70465f1a8c59ad7651cede2469a7586774341" }, { "name": "IMAGE_JOB_PRUNER_TKN", "value": "ghcr.io/tektoncd/plumbing/tkn@sha256:233de6c8b8583a34c2379fa98d42dba739146c9336e8d41b66030484357481ed" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "VERSION", "value": "v0.80.0" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-config-observability" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-controller-config-leader-election" }, { "name": "AUTOINSTALL_COMPONENTS", "valueFrom": { "configMapKeyRef": { "key": "AUTOINSTALL_COMPONENTS", "name": "tekton-config-defaults" } } }, { "name": "DEFAULT_TARGET_NAMESPACE", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_TARGET_NAMESPACE", "name": "tekton-config-defaults" } } } ], "image": "ghcr.io/tektoncd/operator/operator-303303c315a48490ba6517859ef65b77:v0.80.0@sha256:49f9f258920f77ca9db8031f8ee93b6abef0ff6a1a23254d937fd347601f4853", "imagePullPolicy": "IfNotPresent", "name": "tekton-operator-lifecycle", "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" }, { "args": [ "-controllers", "tektoninstallerset", "-unique-process-name", "tekton-operator-cluster-operations" ], "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "tekton-operator" }, { "name": "PROFILING_PORT", "value": "9009" }, { "name": "VERSION", "value": "v0.80.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-controller-config-leader-election" } ], "image": "ghcr.io/tektoncd/operator/operator-303303c315a48490ba6517859ef65b77:v0.80.0@sha256:49f9f258920f77ca9db8031f8ee93b6abef0ff6a1a23254d937fd347601f4853", "imagePullPolicy": "IfNotPresent", "name": "tekton-operator-cluster-operations", "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "tekton-operator", "serviceAccountName": "tekton-operator", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:14:48Z", "lastUpdateTime": "2026-07-02T15:14:48Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:14:44Z", "lastUpdateTime": "2026-07-02T15:14:48Z", "message": "ReplicaSet \"tekton-operator-6cbfd9684\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/env-var-secret": "This is the name of the secret rather than the secret", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{\"ignore-check.kube-linter.io/env-var-secret\":\"This is the name of the secret rather than the secret\"},\"labels\":{\"operator.tekton.dev/release\":\"v0.80.0\",\"version\":\"v0.80.0\"},\"name\":\"tekton-operator-webhook\",\"namespace\":\"tekton-operator\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"name\":\"tekton-operator-webhook\"}},\"template\":{\"metadata\":{\"labels\":{\"app\":\"tekton-operator\",\"name\":\"tekton-operator-webhook\"}},\"spec\":{\"containers\":[{\"env\":[{\"name\":\"KUBERNETES_MIN_VERSION\",\"value\":\"v1.0.0\"},{\"name\":\"SYSTEM_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}},{\"name\":\"WEBHOOK_POD_NAME\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.name\"}}},{\"name\":\"CONFIG_LOGGING_NAME\",\"value\":\"config-logging\"},{\"name\":\"CONFIG_LEADERELECTION_NAME\",\"value\":\"tekton-operator-webhook-config-leader-election\"},{\"name\":\"WEBHOOK_SERVICE_NAME\",\"value\":\"tekton-operator-webhook\"},{\"name\":\"WEBHOOK_SECRET_NAME\",\"value\":\"tekton-operator-webhook-certs\"},{\"name\":\"METRICS_DOMAIN\",\"value\":\"tekton.dev/operator\"}],\"image\":\"ghcr.io/tektoncd/operator/webhook-f2bb711aa8f0c0892856a4cbf6d9ddd8:v0.80.0@sha256:e4ec282861616a364dd8ad02cadec0fdabe26087605852ec85de3b7c084e5c50\",\"name\":\"tekton-operator-webhook\",\"ports\":[{\"containerPort\":8443,\"name\":\"https-webhook\"}],\"resources\":{\"limits\":{\"cpu\":\"100m\",\"memory\":\"100Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"10Mi\"}},\"securityContext\":{\"readOnlyRootFilesystem\":true,\"runAsNonRoot\":true}}],\"serviceAccountName\":\"tekton-operator\"}}}}\n" }, "creationTimestamp": "2026-07-02T15:14:44Z", "generation": 1, "labels": { "operator.tekton.dev/release": "v0.80.0", "version": "v0.80.0" }, "name": "tekton-operator-webhook", "namespace": "tekton-operator", "resourceVersion": "1505", "uid": "63a53d03-9867-4659-8395-f48561cb4c36" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "name": "tekton-operator-webhook" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-operator", "name": "tekton-operator-webhook" } }, "spec": { "containers": [ { "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-webhook-config-leader-election" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-operator-webhook" }, { "name": "WEBHOOK_SECRET_NAME", "value": "tekton-operator-webhook-certs" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" } ], "image": "ghcr.io/tektoncd/operator/webhook-f2bb711aa8f0c0892856a4cbf6d9ddd8:v0.80.0@sha256:e4ec282861616a364dd8ad02cadec0fdabe26087605852ec85de3b7c084e5c50", "imagePullPolicy": "IfNotPresent", "name": "tekton-operator-webhook", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "tekton-operator", "serviceAccountName": "tekton-operator", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:14:48Z", "lastUpdateTime": "2026-07-02T15:14:48Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:14:44Z", "lastUpdateTime": "2026-07-02T15:14:48Z", "message": "ReplicaSet \"tekton-operator-webhook-679cb94c97\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-02T15:16:30Z", "generation": 1, "labels": { "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.48.0", "operator.tekton.dev/operand-name": "openshift-pipeline-as-code" }, "name": "pipelines-as-code-controller", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-deployment-6qttz", "uid": "89a720fa-0518-4fe8-9a90-b448ff703a64" } ], "resourceVersion": "3089", "uid": "5945facd-c44d-41e1-8338-f2aa66115c3f" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-as-code-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.48.0", "operator.tekton.dev/deployment-spec-applied-hash": "7635d0108c1fc3f49269aa63ec697cee" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "pipelines-as-code-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "K_SINK_TIMEOUT", "value": "30" }, { "name": "PAC_CONTROLLER_CONFIGMAP", "value": "pipelines-as-code" }, { "name": "PAC_CONTROLLER_LABEL", "value": "default" }, { "name": "PAC_CONTROLLER_SECRET", "value": "pipelines-as-code-secret" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TLS_CERT", "value": "cert" }, { "name": "TLS_CIPHER_SUITES", "value": "TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256" }, { "name": "TLS_CURVE_PREFERENCES", "value": "X25519,P256" }, { "name": "TLS_KEY", "value": "key" }, { "name": "TLS_MIN_VERSION" }, { "name": "TLS_SECRET_NAME", "value": "pipelines-as-code-tls-secret" } ], "image": "ghcr.io/tektoncd/pipelines-as-code/pipelines-as-code-controller:v0.48.0", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "api", "scheme": "HTTP" }, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "pac-controller", "ports": [ { "containerPort": 8082, "name": "api", "protocol": "TCP" }, { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "api", "scheme": "HTTP" }, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/pipelines-as-code/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-controller", "serviceAccountName": "pipelines-as-code-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "pipelines-as-code-tls-secret" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:16:36Z", "lastUpdateTime": "2026-07-02T15:16:36Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:16:30Z", "lastUpdateTime": "2026-07-02T15:16:36Z", "message": "ReplicaSet \"pipelines-as-code-controller-654fdf5c96\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-02T15:16:30Z", "generation": 1, "labels": { "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.48.0", "operator.tekton.dev/operand-name": "openshift-pipeline-as-code" }, "name": "pipelines-as-code-watcher", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-deployment-6qttz", "uid": "89a720fa-0518-4fe8-9a90-b448ff703a64" } ], "resourceVersion": "3159", "uid": "8d4bcbc4-527e-4e43-b9ad-3f287d8ad9ec" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-as-code-watcher", "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.48.0", "operator.tekton.dev/deployment-spec-applied-hash": "e55d5e999615e1ed290ae06d64611ecf" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "pac-watcher-config-leader-election" }, { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "pipelines-as-code-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipelinesascode" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/pipelines-as-code/pipelines-as-code-watcher:v0.48.0", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "pac-watcher", "ports": [ { "containerPort": 8080, "name": "probes", "protocol": "TCP" }, { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-watcher", "serviceAccountName": "pipelines-as-code-watcher", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:16:46Z", "lastUpdateTime": "2026-07-02T15:16:46Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:16:30Z", "lastUpdateTime": "2026-07-02T15:16:46Z", "message": "ReplicaSet \"pipelines-as-code-watcher-547c9bc698\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-02T15:16:31Z", "generation": 1, "labels": { "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.48.0", "operator.tekton.dev/operand-name": "openshift-pipeline-as-code" }, "name": "pipelines-as-code-webhook", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "openshiftpipelinesascode-main-deployment-6qttz", "uid": "89a720fa-0518-4fe8-9a90-b448ff703a64" } ], "resourceVersion": "3056", "uid": "53c32a26-9478-41be-8042-57950c53a222" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.48.0", "operator.tekton.dev/deployment-spec-applied-hash": "d7d629b8f2c7aeed2f23a9439131967d" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "pac-webhook-config-leader-election" }, { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipelinesascode" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SECRET_NAME", "value": "pipelines-as-code-webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "pipelines-as-code-webhook" } ], "image": "ghcr.io/tektoncd/pipelines-as-code/pipelines-as-code-webhook:v0.48.0", "imagePullPolicy": "IfNotPresent", "name": "pac-webhook", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-webhook", "serviceAccountName": "pipelines-as-code-webhook", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:16:35Z", "lastUpdateTime": "2026-07-02T15:16:35Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:16:31Z", "lastUpdateTime": "2026-07-02T15:16:35Z", "message": "ReplicaSet \"pipelines-as-code-webhook-84cfcb758c\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-07-02T15:15:52Z", "generation": 2, "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "operator.tekton.dev/operand-name": "tektoncd-chains", "pipeline.tekton.dev/release": "v0.27.1", "version": "v0.27.1" }, "name": "tekton-chains-controller", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "chain-xhppj", "uid": "55755f89-deff-4086-96b0-2d39cddd185b" } ], "resourceVersion": "3464", "uid": "77a7a7e5-e0f7-4ce9-b3cc-e13795f130af" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-chains-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "e0d7139663f1bd447c5bc99bb86a8eb4", "pipeline.tekton.dev/release": "v0.27.1", "version": "v0.27.1" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-chains-config-leader-election" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-chains-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/chains" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/chains/github.com/tektoncd/chains/cmd/controller:v0.27.1@sha256:2011424841784c67b7fe9f5a103304859ebd9bb809b3326de6698528b548be17", "imagePullPolicy": "IfNotPresent", "name": "tekton-chains-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsUser": 65532 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/signing-secrets", "name": "signing-secrets" }, { "mountPath": "/var/run/sigstore/cosign", "name": "oidc-info" }, { "mountPath": "/etc/ssl/certs", "name": "trusted-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-chains-controller", "serviceAccountName": "tekton-chains-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "signing-secrets", "secret": { "defaultMode": 420, "secretName": "signing-secrets" } }, { "name": "oidc-info", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "sigstore", "expirationSeconds": 600, "path": "oidc-token" } } ] } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:15:57Z", "lastUpdateTime": "2026-07-02T15:15:57Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:15:52Z", "lastUpdateTime": "2026-07-02T15:17:02Z", "message": "ReplicaSet \"tekton-chains-controller-8675f95777\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 2, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-02T15:15:11Z", "generation": 1, "labels": { "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.12.0", "operator.tekton.dev/operand-name": "tektoncd-pipelines", "pipeline.tekton.dev/release": "v1.12.0", "version": "v1.12.0" }, "name": "tekton-events-controller", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-deployment-v6ppq", "uid": "9738f3f0-9024-4f3c-bdbb-386ad8cbb2dd" } ], "resourceVersion": "2019", "uid": "55110466-b50f-4506-8f81-e9fbda606a5a" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-events-controller", "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.12.0", "operator.tekton.dev/deployment-spec-applied-hash": "040b9773514d95c4cac51c38f552404d", "pipeline.tekton.dev/release": "v1.12.0", "version": "v1.12.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } } }, "containers": [ { "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-events" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SSL_CERT_DIR", "value": "/etc/ssl/certs" }, { "name": "SSL_CERT_FILE", "value": "/etc/config-registry-cert/cert" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/pipeline/events-a9042f7efb0cbade2a868a1ee5ddd52c:v1.12.0@sha256:d5d5869215a58fea01ce627d605786090949a324969102ab1fd25716adde10e9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "tekton-events-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config-logging", "name": "config-logging" }, { "mountPath": "/etc/config-registry-cert", "name": "config-registry-cert" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-events-controller", "serviceAccountName": "tekton-events-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "config-logging" }, "name": "config-logging" }, { "configMap": { "defaultMode": 420, "name": "config-registry-cert" }, "name": "config-registry-cert" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:15:26Z", "lastUpdateTime": "2026-07-02T15:15:26Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:15:11Z", "lastUpdateTime": "2026-07-02T15:15:26Z", "message": "ReplicaSet \"tekton-events-controller-d578b6f8d\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-02T15:15:12Z", "generation": 1, "labels": { "operator.tekton.dev/operand-name": "tektoncd-pipelines", "operator.tekton.dev/release": "devel", "version": "devel" }, "name": "tekton-operator-proxy-webhook", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-deployment-v6ppq", "uid": "9738f3f0-9024-4f3c-bdbb-386ad8cbb2dd" } ], "resourceVersion": "1921", "uid": "cb20a35d-a5ce-45d4-ac18-223b14e74a25" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "name": "tekton-operator" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-operator", "name": "tekton-operator", "operator.tekton.dev/deployment-spec-applied-hash": "b3b023e44c12741e64724118ef3926db" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-proxy-webhook-config-leader-election" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SECRET_NAME", "value": "proxy-webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-operator-proxy-webhook" } ], "image": "ghcr.io/tektoncd/operator/proxy-webhook-f6167da7bc41b96a27c5529f850e63d1:v0.80.0@sha256:2260f9bdf1699253a47e5d2664f70465f1a8c59ad7651cede2469a7586774341", "imagePullPolicy": "IfNotPresent", "name": "proxy", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "500Mi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-operators-proxy-webhook", "serviceAccountName": "tekton-operators-proxy-webhook", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:15:15Z", "lastUpdateTime": "2026-07-02T15:15:15Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:15:12Z", "lastUpdateTime": "2026-07-02T15:15:15Z", "message": "ReplicaSet \"tekton-operator-proxy-webhook-6df58545d8\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-02T15:15:11Z", "generation": 1, "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.12.0", "operator.tekton.dev/operand-name": "tektoncd-pipelines", "pipeline.tekton.dev/release": "v1.12.0", "version": "v1.12.0" }, "name": "tekton-pipelines-controller", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-deployment-v6ppq", "uid": "9738f3f0-9024-4f3c-bdbb-386ad8cbb2dd" } ], "resourceVersion": "2001", "uid": "bbb1d72d-24b1-4124-a9a4-8ff65886fd77" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.12.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "28a8f6a6b377353ba5fc122beee45d27", "pipeline.tekton.dev/release": "v1.12.0", "version": "v1.12.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-entrypoint-image", "ghcr.io/tektoncd/pipeline/entrypoint-bff0a22da108bc2f16c818c97641a296:v1.12.0@sha256:3ec960b07abd85604242e146092e72f11be8787452c2a20d12a37fdee4a666e2", "-nop-image", "ghcr.io/tektoncd/pipeline/nop-8eac7c133edad5df719dc37b36b62482:v1.12.0@sha256:f89fb760b05fdef6895290e524d992b66ede72546622d5028b0406a9bea36d2f", "-sidecarlogresults-image", "ghcr.io/tektoncd/pipeline/sidecarlogresults-7501c6a20d741631510a448b48ab098f:v1.12.0@sha256:8b61bdcad62a99e7b15f9dc92690ea39f49be2c5a1c9f428a0aac712f349543d", "-workingdirinit-image", "ghcr.io/tektoncd/pipeline/workingdirinit-0c558922ec6a1b739e550e349f2d5fc1:v1.12.0@sha256:11031cbed2b8ddbb5af0947a5e0c997ba7cd3da5f309ddfa76e58f5418868d71", "-shell-image", "cgr.dev/chainguard/busybox@sha256:19f02276bf8dbdd62f069b922f10c65262cc34b710eea26ff928129a736be791", "-shell-image-win", "mcr.microsoft.com/powershell:nanoserver@sha256:b6d5ff841b78bdf2dfed7550000fd4f3437385b8fa686ec0f010be24777654d6", "-disable-ha=false" ], "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults" }, { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-controller" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "CONFIG_SPIRE", "value": "config-spire" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipeline" }, { "name": "SSL_CERT_DIR", "value": "/etc/ssl/certs" }, { "name": "SSL_CERT_FILE", "value": "/etc/config-registry-cert/cert" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/pipeline/controller-10a3e32792f33651396d02b6855a6e36:v1.12.0@sha256:8d5f900677386b8fe5371429e9c1461b25de47e5e34736c7f99e82e2c279ebbc", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "tekton-pipelines-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config-logging", "name": "config-logging" }, { "mountPath": "/etc/config-registry-cert", "name": "config-registry-cert" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-controller", "serviceAccountName": "tekton-pipelines-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "config-logging" }, "name": "config-logging" }, { "configMap": { "defaultMode": 420, "name": "config-registry-cert" }, "name": "config-registry-cert" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:15:25Z", "lastUpdateTime": "2026-07-02T15:15:25Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:15:11Z", "lastUpdateTime": "2026-07-02T15:15:25Z", "message": "ReplicaSet \"tekton-pipelines-controller-7d9c98c49f\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-07-02T15:15:11Z", "generation": 2, "labels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.12.0", "operator.tekton.dev/operand-name": "tektoncd-pipelines", "pipeline.tekton.dev/release": "v1.12.0", "version": "v1.12.0" }, "name": "tekton-pipelines-remote-resolvers", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-deployment-v6ppq", "uid": "9738f3f0-9024-4f3c-bdbb-386ad8cbb2dd" } ], "resourceVersion": "3327", "uid": "9e11fedb-2596-4fdc-a35c-387635499d05" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-resolvers", "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.12.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "739880a215725d1224d3aab1d9bf9221", "pipeline.tekton.dev/release": "v1.12.0", "version": "v1.12.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "command": [ "/sbin/tini", "--", "/ko-app/resolvers" ], "env": [ { "name": "ARTIFACT_HUB_API", "value": "https://artifacthub.io/" }, { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-resolvers" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "GIT_SSL_CAINFO", "value": "/etc/ssl/certs/ca-bundle.crt" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/resolution" }, { "name": "PROBES_PORT", "value": "8080" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TEKTON_HUB_API" } ], "image": "ghcr.io/tektoncd/pipeline/resolvers-ff86b24f130c42b88983d3c13993056d:v1.12.0@sha256:b1f06197342ed946b23efd1ce124d7c17d50678b461733a6cc0912b07a4943e7", "imagePullPolicy": "IfNotPresent", "name": "controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "1", "memory": "4Gi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp-clone-volume" }, { "mountPath": "/etc/ssl/certs", "name": "trusted-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-resolvers", "serviceAccountName": "tekton-pipelines-resolvers", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": { "sizeLimit": "4Gi" }, "name": "tmp-clone-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:15:15Z", "lastUpdateTime": "2026-07-02T15:15:15Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:15:11Z", "lastUpdateTime": "2026-07-02T15:16:59Z", "message": "ReplicaSet \"tekton-pipelines-remote-resolvers-d47c498f6\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 2, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-02T15:15:11Z", "generation": 1, "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.12.0", "operator.tekton.dev/operand-name": "tektoncd-pipelines", "pipeline.tekton.dev/release": "v1.12.0", "version": "v1.12.0" }, "name": "tekton-pipelines-webhook", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "pipeline-main-deployment-v6ppq", "uid": "9738f3f0-9024-4f3c-bdbb-386ad8cbb2dd" } ], "resourceVersion": "2018", "uid": "3a3b10a9-f030-41d9-afcc-f278d791ed08" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.12.0", "operator.tekton.dev/deployment-spec-applied-hash": "964112982901c592d25f97da311c00b9", "pipeline.tekton.dev/release": "v1.12.0", "version": "v1.12.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-webhook" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipeline" }, { "name": "PROBES_PORT", "value": "8080" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_ADMISSION_CONTROLLER_NAME", "value": "webhook.pipeline.tekton.dev" }, { "name": "WEBHOOK_PORT", "value": "8443" }, { "name": "WEBHOOK_SECRET_NAME", "value": "webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-pipelines-webhook" } ], "image": "ghcr.io/tektoncd/pipeline/webhook-d4749e605405422fd87700164e31b2d1:v1.12.0@sha256:1e4eded1773f6fa8ec67c9348f84bed0d39666a9698ebd1ffb4eaed88b38f7d4", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "webhook", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "cpu": "500m", "memory": "500Mi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-webhook", "serviceAccountName": "tekton-pipelines-webhook", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:15:26Z", "lastUpdateTime": "2026-07-02T15:15:26Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:15:11Z", "lastUpdateTime": "2026-07-02T15:15:26Z", "message": "ReplicaSet \"tekton-pipelines-webhook-7c4b4cc6cc\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-02T15:15:59Z", "generation": 1, "labels": { "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/part-of": "tekton-results", "app.kubernetes.io/version": "v0.18.0", "operator.tekton.dev/operand-name": "tektoncd-results" }, "name": "tekton-results-api", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "result-vffsz", "uid": "4575a9c3-2f32-424d-917c-aae493d27468" } ], "resourceVersion": "2769", "uid": "46a62558-b7a2-4548-8ddd-d3af15ec469a" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.18.0" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-results-api", "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.18.0", "operator.tekton.dev/deployment-spec-applied-hash": "838696220902b7002ae70f40be548d81" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.18.0" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "DB_HOST", "value": "tekton-results-postgres-service.tekton-pipelines.svc.cluster.local" }, { "name": "DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_PASSWORD", "name": "tekton-results-postgres" } } }, { "name": "DB_USER", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_USER", "name": "tekton-results-postgres" } } }, { "name": "IS_EXTERNAL_DB", "value": "false" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "LOGGING_PLUGIN_TLS_VERIFICATION_DISABLE", "value": "false" }, { "name": "ROUTE_ENABLED", "value": "false" }, { "name": "ROUTE_TLS_TERMINATION", "value": "edge" } ], "image": "ghcr.io/tektoncd/results/api-b1b7ffa9ba32f7c3020c3b68830b30a8:v0.18.0@sha256:72833d31749615fe45d4f7b7a3d4964e5da1cc2966e983fd31f67720d5c22720", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "api", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "startupProbe": { "failureThreshold": 10, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tekton/results", "name": "config", "readOnly": true }, { "mountPath": "/etc/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-results-api", "serviceAccountName": "tekton-results-api", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "tekton-results-api-config" }, "name": "config" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:16:19Z", "lastUpdateTime": "2026-07-02T15:16:19Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:15:59Z", "lastUpdateTime": "2026-07-02T15:16:19Z", "message": "ReplicaSet \"tekton-results-api-7848bbb98d\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-02T15:15:59Z", "generation": 1, "labels": { "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/part-of": "tekton-results", "app.kubernetes.io/version": "v0.18.0", "operator.tekton.dev/operand-name": "tektoncd-results" }, "name": "tekton-results-retention-policy-agent", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "result-vffsz", "uid": "4575a9c3-2f32-424d-917c-aae493d27468" } ], "resourceVersion": "2637", "uid": "0707f2e3-0dd9-40e9-8764-4ca1c47b184b" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/version": "v0.18.0" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-results-retention-policy-agent", "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/version": "v0.18.0", "operator.tekton.dev/deployment-spec-applied-hash": "5c42c04867c4e2a1d28ac486319efd76" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "tekton-results-config-logging" }, { "name": "DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_PASSWORD", "name": "tekton-results-postgres" } } }, { "name": "DB_USER", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_USER", "name": "tekton-results-postgres" } } }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/results/retention-policy-agent-07427b345034d96a9a27896ebb138518:v0.18.0@sha256:b523e3d2bc70fbf8089b8b5ee42b506ccd335f10c633e7f975ec0d250e0d2aea", "imagePullPolicy": "IfNotPresent", "name": "retention-policy-agent", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tekton/results", "name": "config", "readOnly": true }, { "mountPath": "/etc/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-results-watcher", "serviceAccountName": "tekton-results-watcher", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "tekton-results-api-config" }, "name": "config" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:16:04Z", "lastUpdateTime": "2026-07-02T15:16:04Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:15:59Z", "lastUpdateTime": "2026-07-02T15:16:04Z", "message": "ReplicaSet \"tekton-results-retention-policy-agent-ddb78fc\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-02T15:15:59Z", "generation": 1, "labels": { "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/part-of": "tekton-results", "app.kubernetes.io/version": "v0.18.0", "operator.tekton.dev/operand-name": "tektoncd-results" }, "name": "tekton-results-watcher", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "result-vffsz", "uid": "4575a9c3-2f32-424d-917c-aae493d27468" } ], "resourceVersion": "2650", "uid": "e58c8a9e-0812-4e5f-a74f-0fe47b61991b" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.18.0" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-results-watcher", "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.18.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "9a11b42bd89d802d811ef5ffa7a13653" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.18.0" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-api_addr", "$(TEKTON_RESULTS_API_SERVICE)", "-auth_mode", "$(AUTH_MODE)" ], "env": [ { "name": "AUTH_MODE", "value": "token" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-results-config-leader-election" }, { "name": "CONFIG_LOGGING_NAME", "value": "tekton-results-config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-results-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/results" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TEKTON_RESULTS_API_SERVICE", "value": "tekton-results-api-service.tekton-pipelines.svc.cluster.local:8080" } ], "image": "ghcr.io/tektoncd/results/watcher-83f971ea227fb24157c0c699b824a628:v0.18.0@sha256:4b50291457cb63028e5f9e2acb921b852d9ad0f265562ea0fa83bafc8a58b367", "imagePullPolicy": "IfNotPresent", "name": "watcher", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-results-watcher", "serviceAccountName": "tekton-results-watcher", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } } ] } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:16:05Z", "lastUpdateTime": "2026-07-02T15:16:05Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:15:59Z", "lastUpdateTime": "2026-07-02T15:16:05Z", "message": "ReplicaSet \"tekton-results-watcher-64bbfbc954\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-02T15:15:33Z", "generation": 1, "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.36.0", "operator.tekton.dev/operand-name": "tektoncd-triggers", "triggers.tekton.dev/release": "v0.36.0" }, "name": "tekton-triggers-controller", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "trigger-main-deployment-2wgfl", "uid": "b5865f24-c48a-48a9-843b-bd9a506e1a79" } ], "resourceVersion": "2219", "uid": "26a8a91d-6f2a-4709-8275-562ef8785742" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.36.0", "operator.tekton.dev/deployment-spec-applied-hash": "09ef2ba4f41841583f11cfc031ba634a", "triggers.tekton.dev/release": "v0.36.0", "version": "v0.36.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-logtostderr", "-stderrthreshold", "INFO", "-el-image", "ghcr.io/tektoncd/triggers/eventlistenersink-7ad1faa98cddbcb0c24990303b220bb8:v0.36.0@sha256:ca044dc8b45cb5f5089faf553b4cbd5f0f8e05fcf8d66db7a703c88a40163a73", "-el-port", "8080", "-el-security-context=true", "-el-read-only-root-filesystem=true", "-el-events", "disable", "-el-readtimeout", "5", "-el-writetimeout", "40", "-el-idletimeout", "120", "-el-timeouthandler", "30", "-el-httpclient-readtimeout", "30", "-el-httpclient-keep-alive", "30", "-el-httpclient-tlshandshaketimeout", "10", "-el-httpclient-responseheadertimeout", "10", "-el-httpclient-expectcontinuetimeout", "1", "-period-seconds", "10", "-failure-threshold", "3" ], "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults-triggers" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-triggers-controllers" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability-triggers" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "METRICS_PROMETHEUS_PORT", "value": "9000" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/triggers/controller-f656ca31de179ab913fa76abc255c315:v0.36.0@sha256:03f192f4aebeb3471db9d390d0532ab4d49e5aeeb70327df91be445f3629e859", "imagePullPolicy": "IfNotPresent", "name": "tekton-triggers-controller", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-controller", "serviceAccountName": "tekton-triggers-controller", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:15:37Z", "lastUpdateTime": "2026-07-02T15:15:37Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:15:33Z", "lastUpdateTime": "2026-07-02T15:15:37Z", "message": "ReplicaSet \"tekton-triggers-controller-5564644d6f\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-02T15:15:33Z", "generation": 1, "labels": { "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.36.0", "operator.tekton.dev/operand-name": "tektoncd-triggers", "triggers.tekton.dev/release": "v0.36.0" }, "name": "tekton-triggers-core-interceptors", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "trigger-main-deployment-2wgfl", "uid": "b5865f24-c48a-48a9-843b-bd9a506e1a79" } ], "resourceVersion": "2352", "uid": "b4c215e3-a1d8-48d6-a97a-cef84abfd433" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-core-interceptors", "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.36.0", "operator.tekton.dev/deployment-spec-applied-hash": "423beb53dbfae5abeaf1765d3fa44c30", "triggers.tekton.dev/release": "v0.36.0", "version": "v0.36.0" } }, "spec": { "containers": [ { "args": [ "-logtostderr", "-stderrthreshold", "INFO" ], "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability-triggers" }, { "name": "INTERCEPTOR_TLS_SECRET_NAME", "value": "tekton-triggers-core-interceptors-certs" }, { "name": "INTERCEPTOR_TLS_SVC_NAME", "value": "tekton-triggers-core-interceptors" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/triggers/interceptors-3176d6a3f314c3655b30bfd36e421dd5:v0.36.0@sha256:35e9444ce57aed35f378b18d75e71483d81c41dc7fb6bf44119c5730d617ce54", "imagePullPolicy": "IfNotPresent", "name": "tekton-triggers-core-interceptors", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-core-interceptors", "serviceAccountName": "tekton-triggers-core-interceptors", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:15:51Z", "lastUpdateTime": "2026-07-02T15:15:51Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:15:33Z", "lastUpdateTime": "2026-07-02T15:15:51Z", "message": "ReplicaSet \"tekton-triggers-core-interceptors-55d64dcb67\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "Deployment", "metadata": { "annotations": { "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-07-02T15:15:33Z", "generation": 1, "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.36.0", "operator.tekton.dev/operand-name": "tektoncd-triggers", "triggers.tekton.dev/release": "v0.36.0" }, "name": "tekton-triggers-webhook", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "trigger-main-deployment-2wgfl", "uid": "b5865f24-c48a-48a9-843b-bd9a506e1a79" } ], "resourceVersion": "2230", "uid": "67acd974-f7d1-4a34-b799-38a73a5afe07" }, "spec": { "progressDeadlineSeconds": 600, "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers" } }, "strategy": { "rollingUpdate": { "maxSurge": "25%", "maxUnavailable": "25%" }, "type": "RollingUpdate" }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.36.0", "operator.tekton.dev/deployment-spec-applied-hash": "93c477c73830a9d593bc653f3d9c072e", "triggers.tekton.dev/release": "v0.36.0", "version": "v0.36.0" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-triggers-webhook" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SECRET_NAME", "value": "triggers-webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-triggers-webhook" } ], "image": "ghcr.io/tektoncd/triggers/webhook-dd1edc925ee1772a9f76e2c1bc291ef6:v0.36.0@sha256:02d25a89d4b58e7cf341ea32c44d4938eaa3a43b6eafb61d88b9abb0d8a6f67d", "imagePullPolicy": "IfNotPresent", "name": "webhook", "ports": [ { "containerPort": 9000, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-webhook", "serviceAccountName": "tekton-triggers-webhook", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "conditions": [ { "lastTransitionTime": "2026-07-02T15:15:38Z", "lastUpdateTime": "2026-07-02T15:15:38Z", "message": "Deployment has minimum availability.", "reason": "MinimumReplicasAvailable", "status": "True", "type": "Available" }, { "lastTransitionTime": "2026-07-02T15:15:33Z", "lastUpdateTime": "2026-07-02T15:15:38Z", "message": "ReplicaSet \"tekton-triggers-webhook-64c5979d4c\" has successfully progressed.", "reason": "NewReplicaSetAvailable", "status": "True", "type": "Progressing" } ], "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updatedReplicas": 1 } } ], "kind": "List", "metadata": { "resourceVersion": "" } }