--- apiVersion: v1 kind: Pod metadata: annotations: internal.serving.kserve.io/logger: "true" internal.serving.kserve.io/logger-mode: all internal.serving.kserve.io/logger-sink-url: http://message-dumper-raw-cipn-predictor.kserve-ci-e2e-test.svc.cluster.local:8080 internal.serving.kserve.io/storage-initializer-sourceuri: gs://kfserving-examples/models/sklearn/1.0/model k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.133.0.28/23"],"mac_address":"0a:58:0a:85:00:1c","gateway_ips":["10.133.0.1"],"routes":[{"dest":"10.132.0.0/14","nextHop":"10.133.0.1"},{"dest":"172.31.0.0/16","nextHop":"10.133.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.133.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.133.0.1"}],"ip_address":"10.133.0.28/23","gateway_ip":"10.133.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.133.0.28" ], "mac": "0a:58:0a:85:00:1c", "default": true, "dns": {} }] openshift.io/scc: restricted-v2 prometheus.kserve.io/path: /metrics prometheus.kserve.io/port: "8080" seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user service.beta.openshift.io/serving-cert-secret-name: isvc-logger-raw-cipn-predictor-serving-cert serving.kserve.io/deploymentMode: Standard serving.kserve.io/enable-metric-aggregation: "false" serving.kserve.io/enable-prometheus-scraping: "false" creationTimestamp: "2026-09-05T02:43:42Z" deletionGracePeriodSeconds: 30 deletionTimestamp: "2026-09-05T02:45:47Z" generateName: isvc-logger-raw-cipn-predictor-84b648dc8b- generation: 2 labels: app: isvc.isvc-logger-raw-cipn-predictor component: predictor networking.kserve.io/visibility: exposed pod-template-hash: 84b648dc8b serving.kserve.io/inferenceservice: isvc-logger-raw-cipn managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.ovn.org/pod-networks: {} manager: ip-10-0-131-142 operation: Update subresource: status time: "2026-09-05T02:43:42Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:internal.serving.kserve.io/logger: {} f:internal.serving.kserve.io/logger-mode: {} f:internal.serving.kserve.io/logger-sink-url: {} f:internal.serving.kserve.io/storage-initializer-sourceuri: {} f:prometheus.kserve.io/path: {} f:prometheus.kserve.io/port: {} f:service.beta.openshift.io/serving-cert-secret-name: {} f:serving.kserve.io/deploymentMode: {} f:generateName: {} f:labels: .: {} f:app: {} f:component: {} f:networking.kserve.io/visibility: {} f:pod-template-hash: {} f:serving.kserve.io/inferenceservice: {} f:ownerReferences: .: {} k:{"uid":"de101a1e-589a-4533-a494-a63205ac9d8e"}: {} f:spec: f:automountServiceAccountToken: {} f:containers: k:{"name":"kserve-container"}: .: {} f:args: {} f:env: .: {} k:{"name":"INFERENCE_SERVICE_NAME"}: .: {} f:name: {} f:value: {} f:image: {} f:imagePullPolicy: {} f:name: {} f:readinessProbe: .: {} f:failureThreshold: {} f:periodSeconds: {} f:successThreshold: {} f:tcpSocket: .: {} f:port: {} f:timeoutSeconds: {} f:resources: .: {} f:limits: .: {} f:cpu: {} f:memory: {} f:requests: .: {} f:cpu: {} f:memory: {} f:securityContext: .: {} f:allowPrivilegeEscalation: {} f:capabilities: .: {} f:drop: {} f:privileged: {} f:runAsNonRoot: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/etc/tls/private"}: .: {} f:mountPath: {} f:name: {} k:{"name":"kube-rbac-proxy"}: .: {} f:args: {} f:image: {} f:imagePullPolicy: {} f:livenessProbe: .: {} f:failureThreshold: {} f:httpGet: .: {} f:path: {} f:port: {} f:scheme: {} f:initialDelaySeconds: {} f:periodSeconds: {} f:successThreshold: {} f:timeoutSeconds: {} f:name: {} f:ports: .: {} k:{"containerPort":8443,"protocol":"TCP"}: .: {} f:containerPort: {} f:name: {} f:protocol: {} k:{"containerPort":8643,"protocol":"TCP"}: .: {} f:containerPort: {} f:name: {} f:protocol: {} f:readinessProbe: .: {} f:failureThreshold: {} f:httpGet: .: {} f:path: {} f:port: {} f:scheme: {} f:initialDelaySeconds: {} f:periodSeconds: {} f:successThreshold: {} f:timeoutSeconds: {} f:resources: .: {} f:limits: .: {} f:cpu: {} f:memory: {} f:requests: .: {} f:cpu: {} f:memory: {} f:terminationMessagePath: {} f:terminationMessagePolicy: {} f:volumeMounts: .: {} k:{"mountPath":"/etc/kube-rbac-proxy"}: .: {} f:mountPath: {} f:name: {} f:readOnly: {} k:{"mountPath":"/etc/tls/private"}: .: {} f:mountPath: {} f:name: {} f:dnsPolicy: {} f:enableServiceLinks: {} f:restartPolicy: {} f:schedulerName: {} f:securityContext: {} f:terminationGracePeriodSeconds: {} f:volumes: .: {} k:{"name":"kube-rbac-proxy-sar-config"}: .: {} f:configMap: .: {} f:defaultMode: {} f:name: {} f:name: {} k:{"name":"proxy-tls"}: .: {} f:name: {} f:secret: .: {} f:defaultMode: {} f:secretName: {} manager: kube-controller-manager operation: Update time: "2026-09-05T02:43:42Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: f:k8s.v1.cni.cncf.io/network-status: {} manager: multus-daemon operation: Update subresource: status time: "2026-09-05T02:43:43Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: k:{"type":"ContainersReady"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:message: {} f:observedGeneration: {} f:reason: {} f:status: {} f:type: {} k:{"type":"Initialized"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodReadyToStartContainers"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:observedGeneration: {} f:status: {} f:type: {} k:{"type":"PodScheduled"}: f:observedGeneration: {} k:{"type":"Ready"}: .: {} f:lastProbeTime: {} f:lastTransitionTime: {} f:message: {} f:observedGeneration: {} f:reason: {} f:status: {} f:type: {} f:containerStatuses: {} f:hostIP: {} f:hostIPs: {} f:initContainerStatuses: {} f:observedGeneration: {} f:phase: {} f:podIP: {} f:podIPs: .: {} k:{"ip":"10.133.0.28"}: .: {} f:ip: {} f:startTime: {} manager: kubelet operation: Update subresource: status time: "2026-09-05T02:45:31Z" name: isvc-logger-raw-cipn-predictor-84b648dc8b-hj622 namespace: kserve-ci-e2e-test ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: isvc-logger-raw-cipn-predictor-84b648dc8b uid: de101a1e-589a-4533-a494-a63205ac9d8e resourceVersion: "24607" uid: 671a2933-dfe9-4df9-bda8-f4ba270b3c5f spec: automountServiceAccountToken: true containers: - args: - --model_name=isvc-logger-raw-cipn - --model_dir=/mnt/models - --http_port=8080 env: - name: INFERENCE_SERVICE_NAME value: isvc-logger-raw-cipn image: quay.io/opendatahub/sklearn-serving-runtime:odh-pr-1947 imagePullPolicy: IfNotPresent name: kserve-container readinessProbe: failureThreshold: 3 periodSeconds: 10 successThreshold: 1 tcpSocket: port: 8080 timeoutSeconds: 1 resources: limits: cpu: 100m memory: 256Mi requests: cpu: 10m memory: 128Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false runAsNonRoot: true runAsUser: 1000650000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/tls/private name: proxy-tls - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-ssdfz readOnly: true - mountPath: /mnt/models name: kserve-provision-location readOnly: true - args: - --secure-listen-address=:8443 - --proxy-endpoints-port=8643 - --upstream=http://localhost:9081 - --auth-header-fields-enabled=true - --tls-cert-file=/etc/tls/private/tls.crt - --tls-private-key-file=/etc/tls/private/tls.key - --config-file=/etc/kube-rbac-proxy/config-file.yaml - --v=4 image: quay.io/opendatahub/odh-kube-auth-proxy@sha256:dcb09fbabd8811f0956ef612a0c9ddd5236804b9bd6548a0647d2b531c9d01b3 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 httpGet: path: /healthz port: 8643 scheme: HTTPS initialDelaySeconds: 30 periodSeconds: 5 successThreshold: 1 timeoutSeconds: 1 name: kube-rbac-proxy ports: - containerPort: 8443 name: https protocol: TCP - containerPort: 8643 name: proxy protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /healthz port: 8643 scheme: HTTPS initialDelaySeconds: 5 periodSeconds: 5 successThreshold: 1 timeoutSeconds: 1 resources: limits: cpu: 200m memory: 128Mi requests: cpu: 100m memory: 64Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsNonRoot: true runAsUser: 1000650000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/tls/private name: proxy-tls - mountPath: /etc/kube-rbac-proxy name: kube-rbac-proxy-sar-config readOnly: true - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-ssdfz readOnly: true - args: - --log-url - http://message-dumper-raw-cipn-predictor.kserve-ci-e2e-test.svc.cluster.local:8080 - --source-uri - "" - --log-mode - all - --inference-service - isvc-logger-raw-cipn - --namespace - kserve-ci-e2e-test - --endpoint - "" - --component - predictor - --logger-tls-skip-verify - "false" - --component-port - "8080" env: - name: SERVING_READINESS_PROBE value: '{"tcpSocket":{"port":8080},"timeoutSeconds":1,"periodSeconds":10,"successThreshold":1,"failureThreshold":3}' - name: AWS_ACCESS_KEY_ID valueFrom: secretKeyRef: key: AWS_ACCESS_KEY_ID name: seaweedfs-s3-creds - name: AWS_SECRET_ACCESS_KEY valueFrom: secretKeyRef: key: AWS_SECRET_ACCESS_KEY name: seaweedfs-s3-creds - name: S3_USE_HTTPS value: "0" - name: S3_ENDPOINT value: s3-service.kserve:8333 - name: AWS_ENDPOINT_URL value: http://s3-service.kserve:8333 - name: S3_VERIFY_SSL value: "0" - name: AWS_CA_BUNDLE value: /etc/ssl/custom-certs/cabundle.crt - name: AWS_CA_BUNDLE_CONFIGMAP value: odh-kserve-custom-ca-bundle image: quay.io/opendatahub/kserve-agent@sha256:f4032031248ea217fb336a930cee0b43dfad133eb5dfde428dddf7e35cd320a4 imagePullPolicy: IfNotPresent name: agent ports: - containerPort: 9081 name: agent-port protocol: TCP readinessProbe: failureThreshold: 3 httpGet: httpHeaders: - name: K-Network-Probe value: queue path: / port: 9081 scheme: HTTP periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: limits: cpu: "1" memory: 1Gi requests: cpu: 100m memory: 100Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false runAsNonRoot: true runAsUser: 1000650000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-ssdfz readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: default-dockercfg-85bmm initContainers: - args: - gs://kfserving-examples/models/sklearn/1.0/model - /mnt/models env: - name: AWS_ACCESS_KEY_ID valueFrom: secretKeyRef: key: AWS_ACCESS_KEY_ID name: seaweedfs-s3-creds - name: AWS_SECRET_ACCESS_KEY valueFrom: secretKeyRef: key: AWS_SECRET_ACCESS_KEY name: seaweedfs-s3-creds - name: S3_USE_HTTPS value: "0" - name: S3_ENDPOINT value: s3-service.kserve:8333 - name: AWS_ENDPOINT_URL value: http://s3-service.kserve:8333 - name: S3_VERIFY_SSL value: "0" - name: AWS_CA_BUNDLE value: /etc/ssl/custom-certs/cabundle.crt - name: AWS_CA_BUNDLE_CONFIGMAP value: odh-kserve-custom-ca-bundle - name: CA_BUNDLE_CONFIGMAP_NAME value: odh-kserve-custom-ca-bundle - name: CA_BUNDLE_VOLUME_MOUNT_POINT value: /etc/ssl/custom-certs - name: HF_HUB_ENABLE_HF_TRANSFER value: "1" - name: HF_XET_HIGH_PERFORMANCE value: "1" - name: HF_XET_NUM_CONCURRENT_RANGE_GETS value: "8" image: quay.io/opendatahub/kserve-storage-initializer@sha256:10dce2bd6581ed3398139cc0e491de5addc169f1b70e0e912dc9be169495c7fb imagePullPolicy: IfNotPresent name: storage-initializer resources: limits: cpu: "1" memory: 24Gi requests: cpu: 100m memory: 100Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsNonRoot: true runAsUser: 1000650000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /mnt/models name: kserve-provision-location - mountPath: /etc/ssl/custom-certs name: cabundle-cert readOnly: true - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-ssdfz readOnly: true nodeName: ip-10-0-131-142.ec2.internal preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 1000650000 seLinuxOptions: level: s0:c26,c0 seccompProfile: type: RuntimeDefault serviceAccount: default serviceAccountName: default terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 - effect: NoSchedule key: node.kubernetes.io/memory-pressure operator: Exists volumes: - name: proxy-tls secret: defaultMode: 420 secretName: isvc-logger-raw-cipn-predictor-serving-cert - configMap: defaultMode: 420 name: isvc-logger-raw-cipn-kube-rbac-proxy-sar-config name: kube-rbac-proxy-sar-config - name: kube-api-access-ssdfz projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt - emptyDir: {} name: kserve-provision-location - configMap: defaultMode: 420 name: odh-kserve-custom-ca-bundle name: cabundle-cert status: conditions: - lastProbeTime: null lastTransitionTime: "2026-09-05T02:43:44Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-09-05T02:43:48Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-09-05T02:45:31Z" message: 'containers with unready status: [kube-rbac-proxy]' reason: ContainersNotReady status: "False" type: Ready - lastProbeTime: null lastTransitionTime: "2026-09-05T02:45:31Z" message: 'containers with unready status: [kube-rbac-proxy]' reason: ContainersNotReady status: "False" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-09-05T02:43:42Z" status: "True" type: PodScheduled containerStatuses: - allocatedResources: cpu: 100m memory: 100Mi containerID: cri-o://8a3a826348420d04268fc1018178f8383f2393b7f92088a8ddabcc2b2323fd86 image: quay.io/opendatahub/kserve-agent@sha256:f4032031248ea217fb336a930cee0b43dfad133eb5dfde428dddf7e35cd320a4 imageID: quay.io/opendatahub/kserve-agent@sha256:0fd4a84e424f41a7fcec82dccc319095f32aa53d44c74a144a4bb0e665ccdf63 lastState: {} name: agent ready: true resources: limits: cpu: "1" memory: 1Gi requests: cpu: 100m memory: 100Mi restartCount: 0 started: true state: running: startedAt: "2026-09-05T02:43:48Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000650000 uid: 1000650000 volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-ssdfz readOnly: true recursiveReadOnly: Disabled - allocatedResources: cpu: 10m memory: 128Mi containerID: cri-o://ff1ae0e7433d362457c024a3f16bca96d11553d3968ce0c2e9fc8d6de3f17b7b image: quay.io/opendatahub/sklearn-serving-runtime:odh-pr-1947 imageID: quay.io/opendatahub/sklearn-serving-runtime@sha256:c2325f513cd72abc78b2af6b316b48a7f74207788d31b6fff5f90e9884953cfe lastState: {} name: kserve-container ready: true resources: limits: cpu: 100m memory: 256Mi requests: cpu: 10m memory: 128Mi restartCount: 0 started: true state: running: startedAt: "2026-09-05T02:43:48Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000650000 uid: 1000650000 volumeMounts: - mountPath: /etc/tls/private name: proxy-tls - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-ssdfz readOnly: true recursiveReadOnly: Disabled - mountPath: /mnt/models name: kserve-provision-location readOnly: true recursiveReadOnly: Disabled - allocatedResources: cpu: 100m memory: 64Mi containerID: cri-o://5b45e1ea3829b5971e86ba10ebb901993bb8171680b4c20e76ceb4c5b1f99390 image: quay.io/opendatahub/odh-kube-auth-proxy@sha256:dcb09fbabd8811f0956ef612a0c9ddd5236804b9bd6548a0647d2b531c9d01b3 imageID: quay.io/opendatahub/odh-kube-auth-proxy@sha256:dcb09fbabd8811f0956ef612a0c9ddd5236804b9bd6548a0647d2b531c9d01b3 lastState: {} name: kube-rbac-proxy ready: false resources: limits: cpu: 200m memory: 128Mi requests: cpu: 100m memory: 64Mi restartCount: 0 started: true state: running: startedAt: "2026-09-05T02:43:48Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000650000 uid: 1000650000 volumeMounts: - mountPath: /etc/tls/private name: proxy-tls - mountPath: /etc/kube-rbac-proxy name: kube-rbac-proxy-sar-config readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-ssdfz readOnly: true recursiveReadOnly: Disabled hostIP: 10.0.131.142 hostIPs: - ip: 10.0.131.142 initContainerStatuses: - allocatedResources: cpu: 100m memory: 100Mi containerID: cri-o://16b80bb87577be6c742718930597dfcfd0e89768cabfd628a60659998b847dfa image: quay.io/opendatahub/kserve-storage-initializer@sha256:10dce2bd6581ed3398139cc0e491de5addc169f1b70e0e912dc9be169495c7fb imageID: quay.io/opendatahub/kserve-storage-initializer@sha256:10dce2bd6581ed3398139cc0e491de5addc169f1b70e0e912dc9be169495c7fb lastState: {} name: storage-initializer ready: true resources: limits: cpu: "1" memory: 24Gi requests: cpu: 100m memory: 100Mi restartCount: 0 started: false state: terminated: containerID: cri-o://16b80bb87577be6c742718930597dfcfd0e89768cabfd628a60659998b847dfa exitCode: 0 finishedAt: "2026-09-05T02:43:47Z" reason: Completed startedAt: "2026-09-05T02:43:43Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000650000 uid: 1000650000 volumeMounts: - mountPath: /mnt/models name: kserve-provision-location - mountPath: /etc/ssl/custom-certs name: cabundle-cert readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-ssdfz readOnly: true recursiveReadOnly: Disabled phase: Running podIP: 10.133.0.28 podIPs: - ip: 10.133.0.28 qosClass: Burstable startTime: "2026-09-05T02:43:42Z"