---
apiVersion: monitoring.coreos.com/v1
kind: Alertmanager
metadata:
  annotations:
    operator.prometheus.io/controller-id: openshift-monitoring/prometheus-operator
  creationTimestamp: "2026-02-17T12:49:33Z"
  generation: 2
  labels:
    app.kubernetes.io/component: alert-router
    app.kubernetes.io/instance: main
    app.kubernetes.io/managed-by: cluster-monitoring-operator
    app.kubernetes.io/name: alertmanager
    app.kubernetes.io/part-of: openshift-monitoring
    app.kubernetes.io/version: 0.28.1
  managedFields:
  - apiVersion: monitoring.coreos.com/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:availableReplicas: {}
        f:conditions:
          k:{"type":"Available"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:observedGeneration: {}
            f:reason: {}
            f:status: {}
            f:type: {}
          k:{"type":"Reconciled"}:
            .: {}
            f:lastTransitionTime: {}
            f:message: {}
            f:observedGeneration: {}
            f:reason: {}
            f:status: {}
            f:type: {}
        f:paused: {}
        f:replicas: {}
        f:selector: {}
        f:unavailableReplicas: {}
        f:updatedReplicas: {}
    manager: PrometheusOperator
    operation: Apply
    subresource: status
    time: "2026-02-17T12:50:57Z"
  - apiVersion: monitoring.coreos.com/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .: {}
          f:operator.prometheus.io/controller-id: {}
        f:labels:
          .: {}
          f:app.kubernetes.io/component: {}
          f:app.kubernetes.io/instance: {}
          f:app.kubernetes.io/managed-by: {}
          f:app.kubernetes.io/name: {}
          f:app.kubernetes.io/part-of: {}
          f:app.kubernetes.io/version: {}
      f:spec:
        .: {}
        f:alertmanagerConfigMatcherStrategy:
          .: {}
          f:type: {}
        f:automountServiceAccountToken: {}
        f:containers: {}
        f:externalUrl: {}
        f:image: {}
        f:listenLocal: {}
        f:nodeSelector:
          .: {}
          f:kubernetes.io/os: {}
        f:podMetadata:
          .: {}
          f:annotations:
            .: {}
            f:openshift.io/required-scc: {}
            f:target.workload.openshift.io/management: {}
          f:labels:
            .: {}
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/instance: {}
            f:app.kubernetes.io/name: {}
            f:app.kubernetes.io/part-of: {}
            f:app.kubernetes.io/version: {}
        f:portName: {}
        f:priorityClassName: {}
        f:replicas: {}
        f:resources:
          .: {}
          f:requests:
            .: {}
            f:cpu: {}
            f:memory: {}
        f:retention: {}
        f:secrets: {}
        f:securityContext:
          .: {}
          f:fsGroup: {}
          f:runAsNonRoot: {}
          f:runAsUser: {}
        f:serviceAccountName: {}
        f:version: {}
        f:volumeMounts: {}
        f:volumes: {}
        f:web:
          .: {}
          f:httpConfig:
            .: {}
            f:headers:
              .: {}
              f:contentSecurityPolicy: {}
    manager: operator
    operation: Update
    time: "2026-02-17T12:50:53Z"
  name: main
  namespace: openshift-monitoring
  resourceVersion: "10816"
  uid: 9df4eccf-2f11-432f-be69-135f8b134f39
spec:
  alertmanagerConfigMatcherStrategy:
    type: OnNamespace
  automountServiceAccountToken: true
  containers:
  - env:
    - name: HTTP_PROXY
    - name: HTTPS_PROXY
    - name: NO_PROXY
    name: alertmanager
    resources: {}
    terminationMessagePolicy: FallbackToLogsOnError
  - args:
    - --secure-listen-address=0.0.0.0:9095
    - --upstream=http://127.0.0.1:9093
    - --config-file=/etc/kube-rbac-proxy/config.yaml
    - --tls-cert-file=/etc/tls/private/tls.crt
    - --tls-private-key-file=/etc/tls/private/tls.key
    - --tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
    - --ignore-paths=/-/healthy,/-/ready
    - --tls-min-version=VersionTLS12
    image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:890bcb4e15a58b5fb9ee5641042ea42e78505f18f95d019e6d6582994151027e
    name: kube-rbac-proxy-web
    ports:
    - containerPort: 9095
      name: web
      protocol: TCP
    resources:
      requests:
        cpu: 1m
        memory: 20Mi
    terminationMessagePolicy: FallbackToLogsOnError
    volumeMounts:
    - mountPath: /etc/kube-rbac-proxy
      name: secret-alertmanager-kube-rbac-proxy-web
      readOnly: true
    - mountPath: /etc/tls/private
      name: secret-alertmanager-main-tls
      readOnly: true
  - args:
    - --secure-listen-address=0.0.0.0:9092
    - --upstream=http://127.0.0.1:9096
    - --config-file=/etc/kube-rbac-proxy/config.yaml
    - --tls-cert-file=/etc/tls/private/tls.crt
    - --tls-private-key-file=/etc/tls/private/tls.key
    - --tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
    - --tls-min-version=VersionTLS12
    image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:890bcb4e15a58b5fb9ee5641042ea42e78505f18f95d019e6d6582994151027e
    name: kube-rbac-proxy
    ports:
    - containerPort: 9092
      name: tenancy
      protocol: TCP
    resources:
      requests:
        cpu: 1m
        memory: 15Mi
    terminationMessagePolicy: FallbackToLogsOnError
    volumeMounts:
    - mountPath: /etc/kube-rbac-proxy
      name: secret-alertmanager-kube-rbac-proxy
    - mountPath: /etc/tls/private
      name: secret-alertmanager-main-tls
  - args:
    - --secure-listen-address=0.0.0.0:9097
    - --upstream=http://127.0.0.1:9093
    - --config-file=/etc/kube-rbac-proxy/config.yaml
    - --tls-cert-file=/etc/tls/private/tls.crt
    - --tls-private-key-file=/etc/tls/private/tls.key
    - --tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
    - --client-ca-file=/etc/tls/client/client-ca.crt
    - --allow-paths=/metrics
    - --tls-min-version=VersionTLS12
    image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:890bcb4e15a58b5fb9ee5641042ea42e78505f18f95d019e6d6582994151027e
    name: kube-rbac-proxy-metric
    ports:
    - containerPort: 9097
      name: metrics
      protocol: TCP
    resources:
      requests:
        cpu: 1m
        memory: 15Mi
    terminationMessagePolicy: FallbackToLogsOnError
    volumeMounts:
    - mountPath: /etc/kube-rbac-proxy
      name: secret-alertmanager-kube-rbac-proxy-metric
      readOnly: true
    - mountPath: /etc/tls/private
      name: secret-alertmanager-main-tls
      readOnly: true
    - mountPath: /etc/tls/client
      name: metrics-client-ca
      readOnly: true
  - args:
    - --insecure-listen-address=127.0.0.1:9096
    - --upstream=http://127.0.0.1:9093
    - --label=namespace
    - --error-on-replace
    image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9b1c1f46bf4a48a13074b0a6a3157d960a3358dc57bf030e4adca5d0fb47283e
    name: prom-label-proxy
    resources:
      requests:
        cpu: 1m
        memory: 20Mi
    terminationMessagePolicy: FallbackToLogsOnError
  externalUrl: https://console-openshift-console.apps.d48236af-1db7-45b0-a057-4fa21fadfc2f.prod.konfluxeaas.com/monitoring
  image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:da6e49a4346bd865028bcf7f1fea7fc2be3360338ec8f827d564dd16ac2f440b
  listenLocal: true
  nodeSelector:
    kubernetes.io/os: linux
  podMetadata:
    annotations:
      openshift.io/required-scc: nonroot
      target.workload.openshift.io/management: '{"effect": "PreferredDuringScheduling"}'
    labels:
      app.kubernetes.io/component: alert-router
      app.kubernetes.io/instance: main
      app.kubernetes.io/name: alertmanager
      app.kubernetes.io/part-of: openshift-monitoring
      app.kubernetes.io/version: 0.28.1
  portName: web
  priorityClassName: system-cluster-critical
  replicas: 1
  resources:
    requests:
      cpu: 4m
      memory: 40Mi
  retention: 120h
  secrets:
  - alertmanager-main-tls
  - alertmanager-kube-rbac-proxy
  - alertmanager-kube-rbac-proxy-metric
  - alertmanager-kube-rbac-proxy-web
  securityContext:
    fsGroup: 65534
    runAsNonRoot: true
    runAsUser: 65534
  serviceAccountName: alertmanager-main
  version: 0.28.1
  volumeMounts:
  - mountPath: /etc/pki/ca-trust/extracted/pem/
    name: alertmanager-trusted-ca-bundle
  volumes:
  - configMap:
      name: metrics-client-ca
    name: metrics-client-ca
  - configMap:
      items:
      - key: ca-bundle.crt
        path: tls-ca-bundle.pem
      name: alertmanager-trusted-ca-bundle
    name: alertmanager-trusted-ca-bundle
  web:
    httpConfig:
      headers:
        contentSecurityPolicy: frame-ancestors 'none'
status:
  availableReplicas: 1
  conditions:
  - lastTransitionTime: "2026-02-17T12:50:57Z"
    message: ""
    observedGeneration: 2
    reason: ""
    status: "True"
    type: Available
  - lastTransitionTime: "2026-02-17T12:49:33Z"
    message: ""
    observedGeneration: 2
    reason: ""
    status: "True"
    type: Reconciled
  paused: false
  replicas: 1
  selector: alertmanager=main,app.kubernetes.io/instance=main,app.kubernetes.io/managed-by=prometheus-operator,app.kubernetes.io/name=alertmanager
  unavailableReplicas: 0
  updatedReplicas: 1