---
apiVersion: apps/v1
items:
- apiVersion: apps/v1
  kind: Deployment
  metadata:
    annotations:
      deployment.kubernetes.io/revision: "2"
    creationTimestamp: "2026-10-30T23:43:35Z"
    generation: 2
    labels:
      app.kubernetes.io/component: api
      app.kubernetes.io/name: maas-api
      app.kubernetes.io/part-of: models-as-a-service
      app.opendatahub.io/modelsasservice: "true"
      maas.opendatahub.io/tenant-name: models-as-a-service
      maas.opendatahub.io/tenant-namespace: models-as-a-service
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/name: {}
            f:app.kubernetes.io/part-of: {}
            f:app.opendatahub.io/modelsasservice: {}
            f:maas.opendatahub.io/tenant-name: {}
            f:maas.opendatahub.io/tenant-namespace: {}
          f:ownerReferences:
            k:{"uid":"8a730140-60af-4b45-b161-d7e97b2207a4"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:labels:
                f:app.kubernetes.io/component: {}
                f:app.kubernetes.io/name: {}
                f:app.kubernetes.io/part-of: {}
                f:maas.opendatahub.io/tenant-instance: {}
            f:spec:
              f:containers:
                k:{"name":"maas-api"}:
                  .: {}
                  f:env:
                    k:{"name":"API_KEY_DELETION_RETENTION_DAYS"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"API_KEY_MAX_EXPIRATION_DAYS"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"GATEWAY_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"GATEWAY_NAMESPACE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"LOG_FORMAT"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"MAAS_SUBSCRIPTION_NAMESPACE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"METRICS_CERT_DIR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"METRICS_PORT"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"METRICS_SECURE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"NAMESPACE"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        f:fieldRef: {}
                    k:{"name":"SECURE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"SSL_CERT_DIR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"TENANT_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"TLS_CERT"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"TLS_KEY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    f:failureThreshold: {}
                    f:httpGet:
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    k:{"containerPort":8443,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                    k:{"containerPort":9090,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:readinessProbe:
                    f:failureThreshold: {}
                    f:httpGet:
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:timeoutSeconds: {}
                  f:resources:
                    f:limits:
                      f:cpu: {}
                      f:memory: {}
                    f:requests:
                      f:cpu: {}
                      f:memory: {}
                  f:securityContext:
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      f:drop: {}
                    f:readOnlyRootFilesystem: {}
                    f:runAsNonRoot: {}
                    f:seccompProfile:
                      f:type: {}
                  f:volumeMounts:
                    k:{"mountPath":"/etc/maas-api/tls"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/ssl/certs/openshift-service-ca"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/tmp/k8s-metrics-server/metrics-certs"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:securityContext:
                f:runAsNonRoot: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                k:{"name":"maas-api-tls"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    f:secretName: {}
                k:{"name":"metrics-certs"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    f:defaultMode: {}
                    f:optional: {}
                    f:secretName: {}
                k:{"name":"openshift-service-ca"}:
                  .: {}
                  f:configMap:
                    f:name: {}
                  f:name: {}
      manager: maas-controller
      operation: Apply
      time: "2026-10-30T23:43:35Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:spec:
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:kubectl.kubernetes.io/restartedAt: {}
      manager: kubectl-rollout
      operation: Update
      time: "2026-10-30T23:43:46Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/revision: {}
        f:status:
          f:availableReplicas: {}
          f:conditions:
            .: {}
            k:{"type":"Available"}:
              .: {}
              f:lastTransitionTime: {}
              f:lastUpdateTime: {}
              f:message: {}
              f:reason: {}
              f:status: {}
              f:type: {}
            k:{"type":"Progressing"}:
              .: {}
              f:lastTransitionTime: {}
              f:lastUpdateTime: {}
              f:message: {}
              f:reason: {}
              f:status: {}
              f:type: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:terminatingReplicas: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-10-30T23:43:56Z"
    name: maas-api
    namespace: odh-ai-gateway-infra
    ownerReferences:
    - apiVersion: maas.opendatahub.io/v1alpha1
      blockOwnerDeletion: true
      controller: true
      kind: Config
      name: default
      uid: 8a730140-60af-4b45-b161-d7e97b2207a4
    resourceVersion: "19050"
    uid: 18d9fdf1-0137-4317-9ce3-d8946ffad389
  spec:
    progressDeadlineSeconds: 600
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app.kubernetes.io/component: api
        app.kubernetes.io/name: maas-api
        app.kubernetes.io/part-of: models-as-a-service
    strategy:
      rollingUpdate:
        maxSurge: 25%
        maxUnavailable: 25%
      type: RollingUpdate
    template:
      metadata:
        annotations:
          kubectl.kubernetes.io/restartedAt: "2026-10-30T23:43:46Z"
        labels:
          app.kubernetes.io/component: api
          app.kubernetes.io/name: maas-api
          app.kubernetes.io/part-of: models-as-a-service
          maas.opendatahub.io/tenant-instance: maas-api
      spec:
        containers:
        - env:
          - name: SECURE
            value: "true"
          - name: TLS_CERT
            value: /etc/maas-api/tls/tls.crt
          - name: TLS_KEY
            value: /etc/maas-api/tls/tls.key
          - name: SSL_CERT_DIR
            value: /etc/ssl/certs:/etc/ssl/certs/openshift-service-ca
          - name: METRICS_SECURE
            value: "true"
          - name: METRICS_PORT
            value: "9090"
          - name: METRICS_CERT_DIR
            value: /tmp/k8s-metrics-server/metrics-certs
          - name: NAMESPACE
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
          - name: LOG_FORMAT
            value: otel-json
          - name: MAAS_SUBSCRIPTION_NAMESPACE
            value: models-as-a-service
          - name: GATEWAY_NAMESPACE
            value: openshift-ingress
          - name: GATEWAY_NAME
            value: maas-default-gateway
          - name: API_KEY_MAX_EXPIRATION_DAYS
            value: "90"
          - name: API_KEY_DELETION_RETENTION_DAYS
            value: "90"
          - name: TENANT_NAME
            value: models-as-a-service
          image: quay.io/opendatahub/maas-api@sha256:18f65ca3d3ce8662856b32542a91dbee778a0dff68d986bb8a5e51f654ea353b
          imagePullPolicy: Always
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /health
              port: https
              scheme: HTTPS
            initialDelaySeconds: 30
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          name: maas-api
          ports:
          - containerPort: 8443
            name: https
            protocol: TCP
          - containerPort: 9090
            name: https-metrics
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /health
              port: https
              scheme: HTTPS
            initialDelaySeconds: 5
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 3
          resources:
            limits:
              cpu: 500m
              memory: 256Mi
            requests:
              cpu: 100m
              memory: 128Mi
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            readOnlyRootFilesystem: true
            runAsNonRoot: true
            seccompProfile:
              type: RuntimeDefault
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/maas-api/tls
            name: maas-api-tls
            readOnly: true
          - mountPath: /etc/ssl/certs/openshift-service-ca
            name: openshift-service-ca
            readOnly: true
          - mountPath: /tmp/k8s-metrics-server/metrics-certs
            name: metrics-certs
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          runAsNonRoot: true
        serviceAccount: maas-api
        serviceAccountName: maas-api
        terminationGracePeriodSeconds: 30
        volumes:
        - name: maas-api-tls
          secret:
            defaultMode: 420
            secretName: maas-api-serving-cert
        - configMap:
            defaultMode: 420
            name: openshift-service-ca.crt
          name: openshift-service-ca
        - name: metrics-certs
          secret:
            defaultMode: 420
            optional: false
            secretName: maas-api-metrics-tls
  status:
    availableReplicas: 1
    conditions:
    - lastTransitionTime: "2026-10-30T23:43:45Z"
      lastUpdateTime: "2026-10-30T23:43:45Z"
      message: Deployment has minimum availability.
      reason: MinimumReplicasAvailable
      status: "True"
      type: Available
    - lastTransitionTime: "2026-10-30T23:43:35Z"
      lastUpdateTime: "2026-10-30T23:43:56Z"
      message: ReplicaSet "maas-api-d4b948c8" has successfully progressed.
      reason: NewReplicaSetAvailable
      status: "True"
      type: Progressing
    observedGeneration: 2
    readyReplicas: 1
    replicas: 1
    terminatingReplicas: 0
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: Deployment
  metadata:
    annotations:
      deployment.kubernetes.io/revision: "1"
    creationTimestamp: "2026-10-30T23:45:14Z"
    generation: 1
    labels:
      ai-gateway-controller.opendatahub.io/consumer-portal-instance: models-as-a-service
      app.kubernetes.io/managed-by: ai-gateway-controller
      app.kubernetes.io/name: maas-consumer-portal-auth-proxy
      app.kubernetes.io/part-of: maas-consumer-portal
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            f:ai-gateway-controller.opendatahub.io/consumer-portal-instance: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/name: {}
            f:app.kubernetes.io/part-of: {}
        f:spec:
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                f:ai-gateway-controller.opendatahub.io/ca-bundle-hash: {}
                f:ai-gateway-controller.opendatahub.io/credentials-hash: {}
              f:labels:
                f:app.kubernetes.io/name: {}
                f:app.kubernetes.io/part-of: {}
            f:spec:
              f:automountServiceAccountToken: {}
              f:containers:
                k:{"name":"kube-auth-proxy"}:
                  .: {}
                  f:args: {}
                  f:env:
                    k:{"name":"OAUTH2_PROXY_CLIENT_ID"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        f:secretKeyRef: {}
                    k:{"name":"OAUTH2_PROXY_CLIENT_SECRET"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        f:secretKeyRef: {}
                    k:{"name":"OAUTH2_PROXY_COOKIE_SECRET"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        f:secretKeyRef: {}
                  f:image: {}
                  f:livenessProbe:
                    f:httpGet:
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                  f:name: {}
                  f:ports:
                    k:{"containerPort":4180,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                    k:{"containerPort":9000,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                  f:readinessProbe:
                    f:httpGet:
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                  f:resources:
                    f:limits:
                      f:memory: {}
                    f:requests:
                      f:cpu: {}
                      f:memory: {}
                  f:securityContext:
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      f:drop: {}
                    f:readOnlyRootFilesystem: {}
                    f:runAsNonRoot: {}
                  f:volumeMounts:
                    k:{"mountPath":"/etc/pki/odh-trusted-ca"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/tls/private"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/tmp"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:securityContext:
                f:runAsNonRoot: {}
                f:seccompProfile:
                  f:type: {}
              f:serviceAccountName: {}
              f:volumes:
                k:{"name":"tls"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    f:secretName: {}
                k:{"name":"tmp"}:
                  .: {}
                  f:emptyDir:
                    f:medium: {}
                    f:sizeLimit: {}
                  f:name: {}
                k:{"name":"trusted-ca"}:
                  .: {}
                  f:configMap:
                    f:name: {}
                    f:optional: {}
                  f:name: {}
      manager: ai-gateway-controller
      operation: Apply
      time: "2026-10-30T23:45:14Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/revision: {}
        f:status:
          f:conditions:
            .: {}
            k:{"type":"Available"}:
              .: {}
              f:lastTransitionTime: {}
              f:lastUpdateTime: {}
              f:message: {}
              f:reason: {}
              f:status: {}
              f:type: {}
            k:{"type":"Progressing"}:
              .: {}
              f:lastTransitionTime: {}
              f:lastUpdateTime: {}
              f:message: {}
              f:reason: {}
              f:status: {}
              f:type: {}
          f:observedGeneration: {}
          f:replicas: {}
          f:terminatingReplicas: {}
          f:unavailableReplicas: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-10-30T23:55:15Z"
    name: maas-consumer-portal-auth-proxy
    namespace: odh-ai-gateway-infra
    resourceVersion: "34024"
    uid: 3433f160-7bb5-4706-85e5-d50262c562da
  spec:
    progressDeadlineSeconds: 600
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app.kubernetes.io/name: maas-consumer-portal-auth-proxy
    strategy:
      rollingUpdate:
        maxSurge: 25%
        maxUnavailable: 25%
      type: RollingUpdate
    template:
      metadata:
        annotations:
          ai-gateway-controller.opendatahub.io/ca-bundle-hash: 9a9c1b798f6ae057
          ai-gateway-controller.opendatahub.io/credentials-hash: aeb108cbf2677db1
        labels:
          app.kubernetes.io/name: maas-consumer-portal-auth-proxy
          app.kubernetes.io/part-of: maas-consumer-portal
      spec:
        automountServiceAccountToken: false
        containers:
        - args:
          - --https-address=0.0.0.0:4180
          - --http-address=127.0.0.1:4181
          - --metrics-address=0.0.0.0:9000
          - --tls-cert-file=/etc/tls/private/tls.crt
          - --tls-key-file=/etc/tls/private/tls.key
          - --tls-min-version=TLS1.2
          - --provider=oidc
          - --oidc-issuer-url=https://keycloak.apps.21f1608424d0b6687efa.prod.konflux-ocp-ci.dev/realms/tenant-a
          - --scope=openid email profile
          - --oidc-email-claim=email
          - --oidc-groups-claim=groups
          - --email-domain=*
          - --upstream=static://200
          - --reverse-proxy=true
          - --skip-provider-button
          - --pass-access-token=true
          - --set-xauthrequest=true
          - --use-system-trust-store=true
          - --ssl-insecure-skip-verify=false
          - --redirect-url=https://maas.apps.21f1608424d0b6687efa.prod.konflux-ocp-ci.dev/oauth2/callback
          - --cookie-domain=maas.apps.21f1608424d0b6687efa.prod.konflux-ocp-ci.dev
          - --cookie-name=_maas_consumer_proxy
          - --cookie-expire=6h0m0s
          - --cookie-refresh=4m0s
          - --cookie-secure=true
          - --cookie-httponly=true
          - --cookie-samesite=lax
          - --provider-ca-file=/etc/pki/odh-trusted-ca/ca-bundle.crt
          env:
          - name: OAUTH2_PROXY_CLIENT_ID
            valueFrom:
              secretKeyRef:
                key: OAUTH2_PROXY_CLIENT_ID
                name: maas-consumer-portal-auth-proxy-creds
          - name: OAUTH2_PROXY_CLIENT_SECRET
            valueFrom:
              secretKeyRef:
                key: OAUTH2_PROXY_CLIENT_SECRET
                name: maas-consumer-portal-auth-proxy-creds
          - name: OAUTH2_PROXY_COOKIE_SECRET
            valueFrom:
              secretKeyRef:
                key: OAUTH2_PROXY_COOKIE_SECRET
                name: maas-consumer-portal-auth-proxy-creds
          image: quay.io/opendatahub/odh-kube-auth-proxy:odh-stable
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /ping
              port: https
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          name: kube-auth-proxy
          ports:
          - containerPort: 4180
            name: https
            protocol: TCP
          - containerPort: 9000
            name: metrics
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /ping
              port: https
              scheme: HTTPS
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          resources:
            limits:
              memory: 128Mi
            requests:
              cpu: 100m
              memory: 128Mi
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            readOnlyRootFilesystem: true
            runAsNonRoot: true
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/tls/private
            name: tls
            readOnly: true
          - mountPath: /etc/pki/odh-trusted-ca
            name: trusted-ca
            readOnly: true
          - mountPath: /tmp
            name: tmp
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          runAsNonRoot: true
          seccompProfile:
            type: RuntimeDefault
        serviceAccount: maas-consumer-portal-auth-proxy
        serviceAccountName: maas-consumer-portal-auth-proxy
        terminationGracePeriodSeconds: 30
        volumes:
        - name: tls
          secret:
            defaultMode: 420
            secretName: maas-consumer-portal-auth-proxy-tls
        - configMap:
            defaultMode: 420
            name: odh-trusted-ca-bundle
            optional: true
          name: trusted-ca
        - emptyDir:
            medium: Memory
            sizeLimit: 10Mi
          name: tmp
  status:
    conditions:
    - lastTransitionTime: "2026-10-30T23:45:14Z"
      lastUpdateTime: "2026-10-30T23:45:14Z"
      message: Deployment does not have minimum availability.
      reason: MinimumReplicasUnavailable
      status: "False"
      type: Available
    - lastTransitionTime: "2026-10-30T23:55:15Z"
      lastUpdateTime: "2026-10-30T23:55:15Z"
      message: ReplicaSet "maas-consumer-portal-auth-proxy-658b9c897" has timed out
        progressing.
      reason: ProgressDeadlineExceeded
      status: "False"
      type: Progressing
    observedGeneration: 1
    replicas: 1
    terminatingReplicas: 0
    unavailableReplicas: 1
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: Deployment
  metadata:
    annotations:
      deployment.kubernetes.io/revision: "1"
      kubectl.kubernetes.io/last-applied-configuration: |
        {"apiVersion":"apps/v1","kind":"Deployment","metadata":{"annotations":{},"labels":{"app":"postgres","purpose":"poc"},"name":"postgres","namespace":"odh-ai-gateway-infra"},"spec":{"replicas":1,"selector":{"matchLabels":{"app":"postgres"}},"template":{"metadata":{"labels":{"app":"postgres"}},"spec":{"containers":[{"env":[{"name":"POSTGRESQL_USER","valueFrom":{"secretKeyRef":{"key":"POSTGRES_USER","name":"postgres-creds"}}},{"name":"POSTGRESQL_PASSWORD","valueFrom":{"secretKeyRef":{"key":"POSTGRES_PASSWORD","name":"postgres-creds"}}},{"name":"POSTGRESQL_DATABASE","valueFrom":{"secretKeyRef":{"key":"POSTGRES_DB","name":"postgres-creds"}}}],"image":"registry.redhat.io/rhel9/postgresql-16:latest","name":"postgres","ports":[{"containerPort":5432}],"readinessProbe":{"exec":{"command":["/usr/libexec/check-container"]},"initialDelaySeconds":5,"periodSeconds":5},"resources":{"limits":{"cpu":"500m","memory":"512Mi"},"requests":{"cpu":"100m","memory":"256Mi"}},"volumeMounts":[{"mountPath":"/var/lib/pgsql/data","name":"data"}]}],"volumes":[{"emptyDir":{},"name":"data"}]}}}}
    creationTimestamp: "2026-10-30T23:41:40Z"
    generation: 1
    labels:
      app: postgres
      purpose: poc
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:kubectl.kubernetes.io/last-applied-configuration: {}
          f:labels:
            .: {}
            f:app: {}
            f:purpose: {}
        f:spec:
          f:progressDeadlineSeconds: {}
          f:replicas: {}
          f:revisionHistoryLimit: {}
          f:selector: {}
          f:strategy:
            f:rollingUpdate:
              .: {}
              f:maxSurge: {}
              f:maxUnavailable: {}
            f:type: {}
          f:template:
            f:metadata:
              f:labels:
                .: {}
                f:app: {}
            f:spec:
              f:containers:
                k:{"name":"postgres"}:
                  .: {}
                  f:env:
                    .: {}
                    k:{"name":"POSTGRESQL_DATABASE"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                    k:{"name":"POSTGRESQL_PASSWORD"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                    k:{"name":"POSTGRESQL_USER"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":5432,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:exec:
                      .: {}
                      f:command: {}
                    f:failureThreshold: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources:
                    .: {}
                    f:limits:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/pgsql/data"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"data"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
      manager: kubectl-client-side-apply
      operation: Update
      time: "2026-10-30T23:41:40Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:deployment.kubernetes.io/revision: {}
        f:status:
          f:availableReplicas: {}
          f:conditions:
            .: {}
            k:{"type":"Available"}:
              .: {}
              f:lastTransitionTime: {}
              f:lastUpdateTime: {}
              f:message: {}
              f:reason: {}
              f:status: {}
              f:type: {}
            k:{"type":"Progressing"}:
              .: {}
              f:lastTransitionTime: {}
              f:lastUpdateTime: {}
              f:message: {}
              f:reason: {}
              f:status: {}
              f:type: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
          f:terminatingReplicas: {}
          f:updatedReplicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-10-30T23:41:52Z"
    name: postgres
    namespace: odh-ai-gateway-infra
    resourceVersion: "16299"
    uid: fa4939ba-01d9-4433-ac5e-8d88fdb78237
  spec:
    progressDeadlineSeconds: 600
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app: postgres
    strategy:
      rollingUpdate:
        maxSurge: 25%
        maxUnavailable: 25%
      type: RollingUpdate
    template:
      metadata:
        labels:
          app: postgres
      spec:
        containers:
        - env:
          - name: POSTGRESQL_USER
            valueFrom:
              secretKeyRef:
                key: POSTGRES_USER
                name: postgres-creds
          - name: POSTGRESQL_PASSWORD
            valueFrom:
              secretKeyRef:
                key: POSTGRES_PASSWORD
                name: postgres-creds
          - name: POSTGRESQL_DATABASE
            valueFrom:
              secretKeyRef:
                key: POSTGRES_DB
                name: postgres-creds
          image: registry.redhat.io/rhel9/postgresql-16:latest
          imagePullPolicy: Always
          name: postgres
          ports:
          - containerPort: 5432
            protocol: TCP
          readinessProbe:
            exec:
              command:
              - /usr/libexec/check-container
            failureThreshold: 3
            initialDelaySeconds: 5
            periodSeconds: 5
            successThreshold: 1
            timeoutSeconds: 1
          resources:
            limits:
              cpu: 500m
              memory: 512Mi
            requests:
              cpu: 100m
              memory: 256Mi
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/pgsql/data
            name: data
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        terminationGracePeriodSeconds: 30
        volumes:
        - emptyDir: {}
          name: data
  status:
    availableReplicas: 1
    conditions:
    - lastTransitionTime: "2026-10-30T23:41:52Z"
      lastUpdateTime: "2026-10-30T23:41:52Z"
      message: Deployment has minimum availability.
      reason: MinimumReplicasAvailable
      status: "True"
      type: Available
    - lastTransitionTime: "2026-10-30T23:41:40Z"
      lastUpdateTime: "2026-10-30T23:41:52Z"
      message: ReplicaSet "postgres-7cdbf6dc44" has successfully progressed.
      reason: NewReplicaSetAvailable
      status: "True"
      type: Progressing
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    terminatingReplicas: 0
    updatedReplicas: 1
kind: DeploymentList
metadata:
  resourceVersion: "48477"