---
apiVersion: apps/v1
items:
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "3"
    creationTimestamp: "2026-09-18T03:41:53Z"
    generation: 2
    labels:
      authorino-resource: authorino
      control-plane: controller-manager
      kuadrant.io/managed: "true"
      pod-template-hash: 557f876f69
      sidecar.istio.io/inject: "false"
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
          f:labels:
            .: {}
            f:authorino-resource: {}
            f:control-plane: {}
            f:kuadrant.io/managed: {}
            f:pod-template-hash: {}
            f:sidecar.istio.io/inject: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"9309dff1-f8a9-4a1d-a842-f0ebead99d57"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:labels:
                .: {}
                f:authorino-resource: {}
                f:control-plane: {}
                f:kuadrant.io/managed: {}
                f:pod-template-hash: {}
                f:sidecar.istio.io/inject: {}
            f:spec:
              f:containers:
                k:{"name":"authorino"}:
                  .: {}
                  f:args: {}
                  f:env:
                    .: {}
                    k:{"name":"REQUESTS_CA_BUNDLE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"SSL_CERT_FILE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-18T03:41:53Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:observedGeneration: {}
          f:replicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-09-18T03:41:53Z"
    name: authorino-557f876f69
    namespace: kuadrant-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: authorino
      uid: 9309dff1-f8a9-4a1d-a842-f0ebead99d57
    resourceVersion: "20782"
    uid: 792375e9-0ea9-4597-8001-f37872587171
  spec:
    replicas: 0
    selector:
      matchLabels:
        authorino-resource: authorino
        control-plane: controller-manager
        pod-template-hash: 557f876f69
    template:
      metadata:
        labels:
          authorino-resource: authorino
          control-plane: controller-manager
          kuadrant.io/managed: "true"
          pod-template-hash: 557f876f69
          sidecar.istio.io/inject: "false"
      spec:
        containers:
        - args:
          - --allow-superseding-host-subsets
          env:
          - name: SSL_CERT_FILE
            value: /etc/ssl/certs/openshift-service-ca/service-ca-bundle.crt
          - name: REQUESTS_CA_BUNDLE
            value: /etc/ssl/certs/openshift-service-ca/service-ca-bundle.crt
          image: registry.redhat.io/rhcl-1/authorino-rhel9@sha256:c4a5a8f911a5097293de58dde320e9b8e51783b8fd92121de73bc60f6672cdf0
          imagePullPolicy: Always
          name: authorino
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: authorino-authorino
        serviceAccountName: authorino-authorino
        terminationGracePeriodSeconds: 30
  status:
    observedGeneration: 2
    replicas: 0
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "6"
    creationTimestamp: "2026-09-18T03:45:42Z"
    generation: 1
    labels:
      authorino-resource: authorino
      control-plane: controller-manager
      kuadrant.io/managed: "true"
      pod-template-hash: 58dc94667
      sidecar.istio.io/inject: "false"
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
          f:labels:
            .: {}
            f:authorino-resource: {}
            f:control-plane: {}
            f:kuadrant.io/managed: {}
            f:pod-template-hash: {}
            f:sidecar.istio.io/inject: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"9309dff1-f8a9-4a1d-a842-f0ebead99d57"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:kubectl.kubernetes.io/restartedAt: {}
              f:labels:
                .: {}
                f:authorino-resource: {}
                f:control-plane: {}
                f:kuadrant.io/managed: {}
                f:pod-template-hash: {}
                f:sidecar.istio.io/inject: {}
            f:spec:
              f:containers:
                k:{"name":"authorino"}:
                  .: {}
                  f:args: {}
                  f:env:
                    .: {}
                    k:{"name":"REQUESTS_CA_BUNDLE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"SSL_CERT_FILE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/ssl/certs/tls.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/ssl/private/tls.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"tls-cert"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-18T03:45:42Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:fullyLabeledReplicas: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-09-18T03:45:44Z"
    name: authorino-58dc94667
    namespace: kuadrant-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: authorino
      uid: 9309dff1-f8a9-4a1d-a842-f0ebead99d57
    resourceVersion: "24825"
    uid: cbf8afd5-d719-47aa-9886-75f825b5f003
  spec:
    replicas: 1
    selector:
      matchLabels:
        authorino-resource: authorino
        control-plane: controller-manager
        pod-template-hash: 58dc94667
    template:
      metadata:
        annotations:
          kubectl.kubernetes.io/restartedAt: "2026-09-18T03:41:53Z"
        labels:
          authorino-resource: authorino
          control-plane: controller-manager
          kuadrant.io/managed: "true"
          pod-template-hash: 58dc94667
          sidecar.istio.io/inject: "false"
      spec:
        containers:
        - args:
          - --allow-superseding-host-subsets
          - --log-level=debug
          - --tls-cert=/etc/ssl/certs/tls.crt
          - --tls-cert-key=/etc/ssl/private/tls.key
          env:
          - name: SSL_CERT_FILE
            value: /etc/ssl/certs/openshift-service-ca/service-ca-bundle.crt
          - name: REQUESTS_CA_BUNDLE
            value: /etc/ssl/certs/openshift-service-ca/service-ca-bundle.crt
          image: registry.redhat.io/rhcl-1/authorino-rhel9@sha256:c4a5a8f911a5097293de58dde320e9b8e51783b8fd92121de73bc60f6672cdf0
          imagePullPolicy: Always
          name: authorino
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/ssl/certs/tls.crt
            name: tls-cert
            readOnly: true
            subPath: tls.crt
          - mountPath: /etc/ssl/private/tls.key
            name: tls-cert
            readOnly: true
            subPath: tls.key
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: authorino-authorino
        serviceAccountName: authorino-authorino
        terminationGracePeriodSeconds: 30
        volumes:
        - name: tls-cert
          secret:
            defaultMode: 420
            secretName: authorino-server-cert
  status:
    availableReplicas: 1
    fullyLabeledReplicas: 1
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "2"
    creationTimestamp: "2026-09-18T03:41:34Z"
    generation: 2
    labels:
      authorino-resource: authorino
      control-plane: controller-manager
      kuadrant.io/managed: "true"
      pod-template-hash: 59c974bd48
      sidecar.istio.io/inject: "false"
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
          f:labels:
            .: {}
            f:authorino-resource: {}
            f:control-plane: {}
            f:kuadrant.io/managed: {}
            f:pod-template-hash: {}
            f:sidecar.istio.io/inject: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"9309dff1-f8a9-4a1d-a842-f0ebead99d57"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:labels:
                .: {}
                f:authorino-resource: {}
                f:control-plane: {}
                f:kuadrant.io/managed: {}
                f:pod-template-hash: {}
                f:sidecar.istio.io/inject: {}
            f:spec:
              f:containers:
                k:{"name":"authorino"}:
                  .: {}
                  f:args: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-18T03:41:56Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:observedGeneration: {}
          f:replicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-09-18T03:41:56Z"
    name: authorino-59c974bd48
    namespace: kuadrant-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: authorino
      uid: 9309dff1-f8a9-4a1d-a842-f0ebead99d57
    resourceVersion: "20964"
    uid: 4f12c21a-45f9-4769-b7af-07c6f942f910
  spec:
    replicas: 0
    selector:
      matchLabels:
        authorino-resource: authorino
        control-plane: controller-manager
        pod-template-hash: 59c974bd48
    template:
      metadata:
        labels:
          authorino-resource: authorino
          control-plane: controller-manager
          kuadrant.io/managed: "true"
          pod-template-hash: 59c974bd48
          sidecar.istio.io/inject: "false"
      spec:
        containers:
        - args:
          - --allow-superseding-host-subsets
          image: registry.redhat.io/rhcl-1/authorino-rhel9@sha256:c4a5a8f911a5097293de58dde320e9b8e51783b8fd92121de73bc60f6672cdf0
          imagePullPolicy: Always
          name: authorino
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: authorino-authorino
        serviceAccountName: authorino-authorino
        terminationGracePeriodSeconds: 30
  status:
    observedGeneration: 2
    replicas: 0
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "4"
    creationTimestamp: "2026-09-18T03:41:53Z"
    generation: 3
    labels:
      authorino-resource: authorino
      control-plane: controller-manager
      kuadrant.io/managed: "true"
      pod-template-hash: 6d4dfc649f
      sidecar.istio.io/inject: "false"
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
          f:labels:
            .: {}
            f:authorino-resource: {}
            f:control-plane: {}
            f:kuadrant.io/managed: {}
            f:pod-template-hash: {}
            f:sidecar.istio.io/inject: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"9309dff1-f8a9-4a1d-a842-f0ebead99d57"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:labels:
                .: {}
                f:authorino-resource: {}
                f:control-plane: {}
                f:kuadrant.io/managed: {}
                f:pod-template-hash: {}
                f:sidecar.istio.io/inject: {}
            f:spec:
              f:containers:
                k:{"name":"authorino"}:
                  .: {}
                  f:args: {}
                  f:env:
                    .: {}
                    k:{"name":"REQUESTS_CA_BUNDLE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"SSL_CERT_FILE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/ssl/certs/tls.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/ssl/private/tls.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"tls-cert"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-18T03:41:53Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:observedGeneration: {}
          f:replicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-09-18T03:41:53Z"
    name: authorino-6d4dfc649f
    namespace: kuadrant-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: authorino
      uid: 9309dff1-f8a9-4a1d-a842-f0ebead99d57
    resourceVersion: "20823"
    uid: 682f2851-23e4-4bfa-82f4-b147a1c9f310
  spec:
    replicas: 0
    selector:
      matchLabels:
        authorino-resource: authorino
        control-plane: controller-manager
        pod-template-hash: 6d4dfc649f
    template:
      metadata:
        labels:
          authorino-resource: authorino
          control-plane: controller-manager
          kuadrant.io/managed: "true"
          pod-template-hash: 6d4dfc649f
          sidecar.istio.io/inject: "false"
      spec:
        containers:
        - args:
          - --allow-superseding-host-subsets
          - --tls-cert=/etc/ssl/certs/tls.crt
          - --tls-cert-key=/etc/ssl/private/tls.key
          env:
          - name: SSL_CERT_FILE
            value: /etc/ssl/certs/openshift-service-ca/service-ca-bundle.crt
          - name: REQUESTS_CA_BUNDLE
            value: /etc/ssl/certs/openshift-service-ca/service-ca-bundle.crt
          image: registry.redhat.io/rhcl-1/authorino-rhel9@sha256:c4a5a8f911a5097293de58dde320e9b8e51783b8fd92121de73bc60f6672cdf0
          imagePullPolicy: Always
          name: authorino
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/ssl/certs/tls.crt
            name: tls-cert
            readOnly: true
            subPath: tls.crt
          - mountPath: /etc/ssl/private/tls.key
            name: tls-cert
            readOnly: true
            subPath: tls.key
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: authorino-authorino
        serviceAccountName: authorino-authorino
        terminationGracePeriodSeconds: 30
        volumes:
        - name: tls-cert
          secret:
            defaultMode: 420
            secretName: authorino-server-cert
  status:
    observedGeneration: 3
    replicas: 0
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "5"
    creationTimestamp: "2026-09-18T03:41:53Z"
    generation: 3
    labels:
      authorino-resource: authorino
      control-plane: controller-manager
      kuadrant.io/managed: "true"
      pod-template-hash: 75fd986f6b
      sidecar.istio.io/inject: "false"
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
          f:labels:
            .: {}
            f:authorino-resource: {}
            f:control-plane: {}
            f:kuadrant.io/managed: {}
            f:pod-template-hash: {}
            f:sidecar.istio.io/inject: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"9309dff1-f8a9-4a1d-a842-f0ebead99d57"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:kubectl.kubernetes.io/restartedAt: {}
              f:labels:
                .: {}
                f:authorino-resource: {}
                f:control-plane: {}
                f:kuadrant.io/managed: {}
                f:pod-template-hash: {}
                f:sidecar.istio.io/inject: {}
            f:spec:
              f:containers:
                k:{"name":"authorino"}:
                  .: {}
                  f:args: {}
                  f:env:
                    .: {}
                    k:{"name":"REQUESTS_CA_BUNDLE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"SSL_CERT_FILE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/ssl/certs/tls.crt"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/ssl/private/tls.key"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"tls-cert"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-18T03:45:44Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:observedGeneration: {}
          f:replicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-09-18T03:45:44Z"
    name: authorino-75fd986f6b
    namespace: kuadrant-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: authorino
      uid: 9309dff1-f8a9-4a1d-a842-f0ebead99d57
    resourceVersion: "24843"
    uid: a1f5ae20-667e-45c0-8c24-af85c5f4c844
  spec:
    replicas: 0
    selector:
      matchLabels:
        authorino-resource: authorino
        control-plane: controller-manager
        pod-template-hash: 75fd986f6b
    template:
      metadata:
        annotations:
          kubectl.kubernetes.io/restartedAt: "2026-09-18T03:41:53Z"
        labels:
          authorino-resource: authorino
          control-plane: controller-manager
          kuadrant.io/managed: "true"
          pod-template-hash: 75fd986f6b
          sidecar.istio.io/inject: "false"
      spec:
        containers:
        - args:
          - --allow-superseding-host-subsets
          - --tls-cert=/etc/ssl/certs/tls.crt
          - --tls-cert-key=/etc/ssl/private/tls.key
          env:
          - name: SSL_CERT_FILE
            value: /etc/ssl/certs/openshift-service-ca/service-ca-bundle.crt
          - name: REQUESTS_CA_BUNDLE
            value: /etc/ssl/certs/openshift-service-ca/service-ca-bundle.crt
          image: registry.redhat.io/rhcl-1/authorino-rhel9@sha256:c4a5a8f911a5097293de58dde320e9b8e51783b8fd92121de73bc60f6672cdf0
          imagePullPolicy: Always
          name: authorino
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/ssl/certs/tls.crt
            name: tls-cert
            readOnly: true
            subPath: tls.crt
          - mountPath: /etc/ssl/private/tls.key
            name: tls-cert
            readOnly: true
            subPath: tls.key
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: authorino-authorino
        serviceAccountName: authorino-authorino
        terminationGracePeriodSeconds: 30
        volumes:
        - name: tls-cert
          secret:
            defaultMode: 420
            secretName: authorino-server-cert
  status:
    observedGeneration: 3
    replicas: 0
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "1"
    creationTimestamp: "2026-09-18T03:41:34Z"
    generation: 2
    labels:
      authorino-resource: authorino
      control-plane: controller-manager
      pod-template-hash: 7bcfd8f9cd
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
          f:labels:
            .: {}
            f:authorino-resource: {}
            f:control-plane: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"9309dff1-f8a9-4a1d-a842-f0ebead99d57"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:labels:
                .: {}
                f:authorino-resource: {}
                f:control-plane: {}
                f:pod-template-hash: {}
            f:spec:
              f:containers:
                k:{"name":"authorino"}:
                  .: {}
                  f:args: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-18T03:41:39Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:observedGeneration: {}
          f:replicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-09-18T03:41:39Z"
    name: authorino-7bcfd8f9cd
    namespace: kuadrant-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: authorino
      uid: 9309dff1-f8a9-4a1d-a842-f0ebead99d57
    resourceVersion: "19697"
    uid: a7bd4697-d6d7-422e-a84e-46b18dfa4d7c
  spec:
    replicas: 0
    selector:
      matchLabels:
        authorino-resource: authorino
        control-plane: controller-manager
        pod-template-hash: 7bcfd8f9cd
    template:
      metadata:
        labels:
          authorino-resource: authorino
          control-plane: controller-manager
          pod-template-hash: 7bcfd8f9cd
      spec:
        containers:
        - args:
          - --allow-superseding-host-subsets
          image: registry.redhat.io/rhcl-1/authorino-rhel9@sha256:c4a5a8f911a5097293de58dde320e9b8e51783b8fd92121de73bc60f6672cdf0
          imagePullPolicy: Always
          name: authorino
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: authorino-authorino
        serviceAccountName: authorino-authorino
        terminationGracePeriodSeconds: 30
  status:
    observedGeneration: 2
    replicas: 0
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "1"
    creationTimestamp: "2026-09-18T03:40:40Z"
    generation: 1
    labels:
      control-plane: authorino-operator
      pod-template-hash: 6c7cb5c9cb
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
          f:labels:
            .: {}
            f:control-plane: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"b9eaeef1-3b80-4950-9a5d-4bdd34d19aec"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:alm-examples: {}
                f:capabilities: {}
                f:categories: {}
                f:containerImage: {}
                f:createdAt: {}
                f:features.operators.openshift.io/cnf: {}
                f:features.operators.openshift.io/cni: {}
                f:features.operators.openshift.io/csi: {}
                f:features.operators.openshift.io/disconnected: {}
                f:features.operators.openshift.io/fips-compliant: {}
                f:features.operators.openshift.io/proxy-aware: {}
                f:features.operators.openshift.io/tls-profiles: {}
                f:features.operators.openshift.io/token-auth-aws: {}
                f:features.operators.openshift.io/token-auth-azure: {}
                f:features.operators.openshift.io/token-auth-gcp: {}
                f:olm.operatorGroup: {}
                f:olm.operatorNamespace: {}
                f:olm.targetNamespaces: {}
                f:operatorframework.io/properties: {}
                f:operators.openshift.io/valid-subscription: {}
                f:operators.operatorframework.io/builder: {}
                f:operators.operatorframework.io/project_layout: {}
                f:repository: {}
                f:support: {}
              f:labels:
                .: {}
                f:control-plane: {}
                f:pod-template-hash: {}
            f:spec:
              f:containers:
                k:{"name":"manager"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"OPERATOR_CONDITION_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RELATED_IMAGE_AUTHORINO"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":8080,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources:
                    .: {}
                    f:limits:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:readOnlyRootFilesystem: {}
                    f:seccompProfile:
                      .: {}
                      f:type: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:runAsNonRoot: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-18T03:40:40Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:fullyLabeledReplicas: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-09-18T03:40:54Z"
    name: authorino-operator-6c7cb5c9cb
    namespace: kuadrant-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: authorino-operator
      uid: b9eaeef1-3b80-4950-9a5d-4bdd34d19aec
    resourceVersion: "17366"
    uid: 01956c17-ac71-483a-b292-4d684d54793d
  spec:
    replicas: 1
    selector:
      matchLabels:
        control-plane: authorino-operator
        pod-template-hash: 6c7cb5c9cb
    template:
      metadata:
        annotations:
          alm-examples: |-
            [
              {
                "apiVersion": "authorino.kuadrant.io/v1beta3",
                "kind": "AuthConfig",
                "metadata": {
                  "name": "my-api-protection"
                },
                "spec": {
                  "authentication": {
                    "api-key-users": {
                      "apiKey": {
                        "selector": {
                          "matchLabels": {
                            "group": "friends"
                          }
                        }
                      },
                      "credentials": {
                        "authorizationHeader": {
                          "prefix": "APIKEY"
                        }
                      }
                    }
                  },
                  "hosts": [
                    "my-api.io"
                  ]
                }
              },
              {
                "apiVersion": "operator.authorino.kuadrant.io/v1beta1",
                "kind": "Authorino",
                "metadata": {
                  "name": "authorino-sample"
                },
                "spec": {
                  "listener": {
                    "tls": {
                      "enabled": false
                    }
                  },
                  "oidcServer": {
                    "tls": {
                      "enabled": false
                    }
                  }
                }
              }
            ]
          capabilities: Basic Install
          categories: Integration & Delivery
          containerImage: registry.redhat.io/rhcl-1/authorino-rhel9-operator@sha256:8a8cc5fb104032c23096f3c9cf2fbc3636d343ee7ee7974e51fe1f10d3a57589
          createdAt: "2026-08-27T13:57:12Z"
          features.operators.openshift.io/cnf: "false"
          features.operators.openshift.io/cni: "false"
          features.operators.openshift.io/csi: "false"
          features.operators.openshift.io/disconnected: "true"
          features.operators.openshift.io/fips-compliant: "true"
          features.operators.openshift.io/proxy-aware: "false"
          features.operators.openshift.io/tls-profiles: "false"
          features.operators.openshift.io/token-auth-aws: "false"
          features.operators.openshift.io/token-auth-azure: "false"
          features.operators.openshift.io/token-auth-gcp: "false"
          olm.operatorGroup: rhcl-operator
          olm.operatorNamespace: kuadrant-system
          olm.targetNamespaces: ""
          operatorframework.io/properties: '{"properties":[{"type":"olm.gvk","value":{"group":"authorino.kuadrant.io","kind":"AuthConfig","version":"v1beta2"}},{"type":"olm.gvk","value":{"group":"authorino.kuadrant.io","kind":"AuthConfig","version":"v1beta3"}},{"type":"olm.gvk","value":{"group":"operator.authorino.kuadrant.io","kind":"Authorino","version":"v1beta1"}},{"type":"olm.package","value":{"packageName":"authorino-operator","version":"1.4.3"}}]}'
          operators.openshift.io/valid-subscription: '["Red Hat Connectivity Link"]'
          operators.operatorframework.io/builder: operator-sdk-v1.32.0
          operators.operatorframework.io/project_layout: go.kubebuilder.io/v3
          repository: https://github.com/Kuadrant/authorino-operator
          support: kuadrant
        labels:
          control-plane: authorino-operator
          pod-template-hash: 6c7cb5c9cb
      spec:
        containers:
        - args:
          - --leader-elect
          command:
          - /manager
          env:
          - name: RELATED_IMAGE_AUTHORINO
            value: registry.redhat.io/rhcl-1/authorino-rhel9@sha256:c4a5a8f911a5097293de58dde320e9b8e51783b8fd92121de73bc60f6672cdf0
          - name: OPERATOR_CONDITION_NAME
            value: authorino-operator.v1.4.3
          image: registry.redhat.io/rhcl-1/authorino-rhel9-operator@sha256:8a8cc5fb104032c23096f3c9cf2fbc3636d343ee7ee7974e51fe1f10d3a57589
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthz
              port: 8081
              scheme: HTTP
            initialDelaySeconds: 15
            periodSeconds: 20
            successThreshold: 1
            timeoutSeconds: 1
          name: manager
          ports:
          - containerPort: 8080
            name: metrics
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /readyz
              port: 8081
              scheme: HTTP
            initialDelaySeconds: 5
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          resources:
            limits:
              cpu: 200m
              memory: 300Mi
            requests:
              cpu: 200m
              memory: 200Mi
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            readOnlyRootFilesystem: true
            seccompProfile:
              type: RuntimeDefault
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          runAsNonRoot: true
        serviceAccount: authorino-operator
        serviceAccountName: authorino-operator
        terminationGracePeriodSeconds: 10
  status:
    availableReplicas: 1
    fullyLabeledReplicas: 1
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "1"
    creationTimestamp: "2026-09-18T03:40:49Z"
    generation: 1
    labels:
      control-plane: dns-operator-controller-manager
      pod-template-hash: 7b449b7679
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
          f:labels:
            .: {}
            f:control-plane: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"07759b16-4228-4f5a-9efd-28929e1ba93f"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:alm-examples: {}
                f:capabilities: {}
                f:categories: {}
                f:containerImage: {}
                f:createdAt: {}
                f:description: {}
                f:features.operators.openshift.io/cnf: {}
                f:features.operators.openshift.io/cni: {}
                f:features.operators.openshift.io/csi: {}
                f:features.operators.openshift.io/disconnected: {}
                f:features.operators.openshift.io/fips-compliant: {}
                f:features.operators.openshift.io/proxy-aware: {}
                f:features.operators.openshift.io/tls-profiles: {}
                f:features.operators.openshift.io/token-auth-aws: {}
                f:features.operators.openshift.io/token-auth-azure: {}
                f:features.operators.openshift.io/token-auth-gcp: {}
                f:kubectl.kubernetes.io/default-container: {}
                f:olm.operatorGroup: {}
                f:olm.operatorNamespace: {}
                f:olm.targetNamespaces: {}
                f:operatorframework.io/properties: {}
                f:operators.openshift.io/valid-subscription: {}
                f:operators.operatorframework.io/builder: {}
                f:operators.operatorframework.io/project_layout: {}
                f:repository: {}
                f:support: {}
              f:labels:
                .: {}
                f:control-plane: {}
                f:pod-template-hash: {}
            f:spec:
              f:containers:
                k:{"name":"manager"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CLUSTER_SECRET_NAMESPACE"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"OPERATOR_CONDITION_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"WATCH_NAMESPACES"}:
                      .: {}
                      f:name: {}
                  f:envFrom: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":8080,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                    k:{"containerPort":8082,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources:
                    .: {}
                    f:limits:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:runAsNonRoot: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-18T03:40:49Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:fullyLabeledReplicas: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-09-18T03:41:03Z"
    name: dns-operator-controller-manager-7b449b7679
    namespace: kuadrant-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: dns-operator-controller-manager
      uid: 07759b16-4228-4f5a-9efd-28929e1ba93f
    resourceVersion: "17932"
    uid: e55812a7-a289-4a16-8284-985cea2e2d49
  spec:
    replicas: 1
    selector:
      matchLabels:
        control-plane: dns-operator-controller-manager
        pod-template-hash: 7b449b7679
    template:
      metadata:
        annotations:
          alm-examples: |-
            [
              {
                "apiVersion": "kuadrant.io/v1alpha1",
                "kind": "DNSHealthCheckProbe",
                "metadata": {
                  "name": "$NAME"
                },
                "spec": {
                  "additionalHeadersRef": {
                    "name": "headers"
                  },
                  "address": "192.168.0.16",
                  "allowInsecureCertificate": true,
                  "failureThreshold": 5,
                  "hostname": "test.com",
                  "interval": "60s",
                  "path": "/healthz",
                  "port": 443,
                  "protocol": "HTTPS"
                }
              },
              {
                "apiVersion": "kuadrant.io/v1alpha1",
                "kind": "DNSRecord",
                "metadata": {
                  "labels": {
                    "app.kubernetes.io/created-by": "dns-operator",
                    "app.kubernetes.io/instance": "dnsrecord-sample",
                    "app.kubernetes.io/managed-by": "kustomize",
                    "app.kubernetes.io/name": "dnsrecord",
                    "app.kubernetes.io/part-of": "dns-operator"
                  },
                  "name": "dnsrecord-sample"
                },
                "spec": {
                  "endpoints": [
                    {
                      "dnsName": "dnsrecord-simple.kuadrant.local",
                      "recordTTL": 60,
                      "recordType": "A",
                      "targets": [
                        "52.215.108.61",
                        "52.30.101.221"
                      ]
                    }
                  ],
                  "providerRef": {
                    "name": "dns-provider-credentials-inmemory"
                  },
                  "rootHost": "dnsrecord-simple.kuadrant.local"
                }
              }
            ]
          capabilities: Basic Install
          categories: Integration & Delivery
          containerImage: registry.redhat.io/rhcl-1/dns-rhel9-operator@sha256:d82688172d312a44d9978eacf7bd9e0402e9ba2967daf70b2ef30707f41faf4a
          createdAt: "2026-08-31T08:02:43Z"
          description: A Kubernetes Operator to manage the lifecycle of DNS resources
          features.operators.openshift.io/cnf: "false"
          features.operators.openshift.io/cni: "false"
          features.operators.openshift.io/csi: "false"
          features.operators.openshift.io/disconnected: "true"
          features.operators.openshift.io/fips-compliant: "true"
          features.operators.openshift.io/proxy-aware: "false"
          features.operators.openshift.io/tls-profiles: "false"
          features.operators.openshift.io/token-auth-aws: "false"
          features.operators.openshift.io/token-auth-azure: "false"
          features.operators.openshift.io/token-auth-gcp: "false"
          kubectl.kubernetes.io/default-container: manager
          olm.operatorGroup: rhcl-operator
          olm.operatorNamespace: kuadrant-system
          olm.targetNamespaces: ""
          operatorframework.io/properties: '{"properties":[{"type":"olm.gvk","value":{"group":"kuadrant.io","kind":"DNSHealthCheckProbe","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"kuadrant.io","kind":"DNSRecord","version":"v1alpha1"}},{"type":"olm.package","value":{"packageName":"dns-operator","version":"1.4.2"}}]}'
          operators.openshift.io/valid-subscription: '["Red Hat Connectivity Link"]'
          operators.operatorframework.io/builder: operator-sdk-v1.33.0
          operators.operatorframework.io/project_layout: go.kubebuilder.io/v4
          repository: https://github.com/Kuadrant/dns-operator
          support: kuadrant
        labels:
          control-plane: dns-operator-controller-manager
          pod-template-hash: 7b449b7679
      spec:
        containers:
        - args:
          - --metrics-bind-address=:8080
          - --leader-elect
          command:
          - /manager
          env:
          - name: WATCH_NAMESPACES
          - name: CLUSTER_SECRET_NAMESPACE
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
          - name: OPERATOR_CONDITION_NAME
            value: dns-operator.v1.4.2
          envFrom:
          - configMapRef:
              name: dns-operator-controller-env
          image: registry.redhat.io/rhcl-1/dns-rhel9-operator@sha256:d82688172d312a44d9978eacf7bd9e0402e9ba2967daf70b2ef30707f41faf4a
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthz
              port: 8081
              scheme: HTTP
            initialDelaySeconds: 15
            periodSeconds: 20
            successThreshold: 1
            timeoutSeconds: 1
          name: manager
          ports:
          - containerPort: 8080
            name: metrics
            protocol: TCP
          - containerPort: 8082
            name: pprof
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /readyz
              port: 8081
              scheme: HTTP
            initialDelaySeconds: 5
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          resources:
            limits:
              cpu: 200m
              memory: 128Mi
            requests:
              cpu: 10m
              memory: 64Mi
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          runAsNonRoot: true
        serviceAccount: dns-operator-controller-manager
        serviceAccountName: dns-operator-controller-manager
        terminationGracePeriodSeconds: 10
  status:
    availableReplicas: 1
    fullyLabeledReplicas: 1
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "1"
    creationTimestamp: "2026-09-18T03:41:33Z"
    generation: 1
    labels:
      app: kuadrant-console-plugin
      app.kubernetes.io/component: kuadrant-console-plugin
      app.kubernetes.io/instance: kuadrant-console-plugin
      app.kubernetes.io/managed-by: kuadrant-operator
      app.kubernetes.io/name: kuadrant-console-plugin
      app.kubernetes.io/part-of: kuadrant-console-plugin
      pod-template-hash: fbdd4f445
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
          f:labels:
            .: {}
            f:app: {}
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/instance: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/name: {}
            f:app.kubernetes.io/part-of: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"700ab277-dc06-47d2-89a9-9663bf2383c6"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:labels:
                .: {}
                f:app: {}
                f:app.kubernetes.io/component: {}
                f:app.kubernetes.io/instance: {}
                f:app.kubernetes.io/managed-by: {}
                f:app.kubernetes.io/name: {}
                f:app.kubernetes.io/part-of: {}
                f:pod-template-hash: {}
            f:spec:
              f:containers:
                k:{"name":"kuadrant-console-plugin"}:
                  .: {}
                  f:env:
                    .: {}
                    k:{"name":"TOPOLOGY_CONFIGMAP_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"TOPOLOGY_CONFIGMAP_NAMESPACE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":9443,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:protocol: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/nginx/nginx.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/serving-cert"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"nginx-conf"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"plugin-serving-cert"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-18T03:41:33Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:fullyLabeledReplicas: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-09-18T03:41:39Z"
    name: kuadrant-console-plugin-fbdd4f445
    namespace: kuadrant-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: kuadrant-console-plugin
      uid: 700ab277-dc06-47d2-89a9-9663bf2383c6
    resourceVersion: "19672"
    uid: 11cbc571-35de-4360-80d2-399b2e0a7cb2
  spec:
    replicas: 1
    selector:
      matchLabels:
        app: kuadrant-console-plugin
        app.kubernetes.io/component: kuadrant-console-plugin
        app.kubernetes.io/instance: kuadrant-console-plugin
        app.kubernetes.io/managed-by: kuadrant-operator
        app.kubernetes.io/name: kuadrant-console-plugin
        app.kubernetes.io/part-of: kuadrant-console-plugin
        pod-template-hash: fbdd4f445
    template:
      metadata:
        labels:
          app: kuadrant-console-plugin
          app.kubernetes.io/component: kuadrant-console-plugin
          app.kubernetes.io/instance: kuadrant-console-plugin
          app.kubernetes.io/managed-by: kuadrant-operator
          app.kubernetes.io/name: kuadrant-console-plugin
          app.kubernetes.io/part-of: kuadrant-console-plugin
          pod-template-hash: fbdd4f445
      spec:
        containers:
        - env:
          - name: TOPOLOGY_CONFIGMAP_NAME
            value: topology
          - name: TOPOLOGY_CONFIGMAP_NAMESPACE
            value: kuadrant-system
          image: registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:c8550de6790d58c5fa993bf83d41ef693d99a5739fcc0eed3fcaa8d5a7658044
          imagePullPolicy: Always
          name: kuadrant-console-plugin
          ports:
          - containerPort: 9443
            protocol: TCP
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/serving-cert
            name: plugin-serving-cert
            readOnly: true
          - mountPath: /etc/nginx/nginx.conf
            name: nginx-conf
            readOnly: true
            subPath: nginx.conf
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        terminationGracePeriodSeconds: 30
        volumes:
        - name: plugin-serving-cert
          secret:
            defaultMode: 420
            secretName: plugin-serving-cert
        - configMap:
            defaultMode: 420
            name: kuadrant-console-nginx-conf
          name: nginx-conf
  status:
    availableReplicas: 1
    fullyLabeledReplicas: 1
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "2"
    creationTimestamp: "2026-09-18T03:41:03Z"
    generation: 1
    labels:
      app: kuadrant
      control-plane: controller-manager
      pod-template-hash: 54b6d5c989
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
          f:labels:
            .: {}
            f:app: {}
            f:control-plane: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"bc40d530-c9db-4128-b6eb-0d72f1f5cf0a"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:alm-examples: {}
                f:capabilities: {}
                f:categories: {}
                f:console.openshift.io/plugins: {}
                f:containerImage: {}
                f:createdAt: {}
                f:description: {}
                f:features.operators.openshift.io/cnf: {}
                f:features.operators.openshift.io/cni: {}
                f:features.operators.openshift.io/csi: {}
                f:features.operators.openshift.io/disconnected: {}
                f:features.operators.openshift.io/fips-compliant: {}
                f:features.operators.openshift.io/proxy-aware: {}
                f:features.operators.openshift.io/tls-profiles: {}
                f:features.operators.openshift.io/token-auth-aws: {}
                f:features.operators.openshift.io/token-auth-azure: {}
                f:features.operators.openshift.io/token-auth-gcp: {}
                f:olm.operatorGroup: {}
                f:olm.operatorNamespace: {}
                f:olm.targetNamespaces: {}
                f:operatorframework.io/properties: {}
                f:operators.openshift.io/valid-subscription: {}
                f:operators.operatorframework.io/builder: {}
                f:operators.operatorframework.io/project_layout: {}
                f:repository: {}
                f:support: {}
              f:labels:
                .: {}
                f:app: {}
                f:control-plane: {}
                f:pod-template-hash: {}
            f:spec:
              f:containers:
                k:{"name":"manager"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"AUTH_SERVICE_TIMEOUT"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"EXTENSIONS_DESCRIPTOR_SERVICE_PORT"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"EXTENSIONS_DIR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"ISTIO_GATEWAY_CONTROLLER_NAMES"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OPERATOR_CONDITION_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OPERATOR_NAMESPACE"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"RATELIMIT_CHECK_SERVICE_FAILURE_MODE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RATELIMIT_REPORT_SERVICE_FAILURE_MODE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RELATED_IMAGE_CONSOLE_PLUGIN_LATEST"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RELATED_IMAGE_CONSOLE_PLUGIN_PF5"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RELATED_IMAGE_DEVELOPERPORTAL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RELATED_IMAGE_WASMSHIM"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":8080,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                    k:{"containerPort":8082,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                    k:{"containerPort":50051,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources:
                    .: {}
                    f:limits:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:readOnlyRootFilesystem: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/tmp/kuadrant"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:runAsNonRoot: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"extensions-socket-volume"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-18T03:41:03Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:fullyLabeledReplicas: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-09-18T03:41:14Z"
    name: kuadrant-operator-controller-manager-54b6d5c989
    namespace: kuadrant-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: kuadrant-operator-controller-manager
      uid: bc40d530-c9db-4128-b6eb-0d72f1f5cf0a
    resourceVersion: "18670"
    uid: 0c71bb3c-dadb-4603-b660-ea124e75fa3c
  spec:
    replicas: 1
    selector:
      matchLabels:
        app: kuadrant
        control-plane: controller-manager
        pod-template-hash: 54b6d5c989
    template:
      metadata:
        annotations:
          alm-examples: |-
            [
              {
                "apiVersion": "extensions.kuadrant.io/v1alpha1",
                "kind": "OIDCPolicy",
                "metadata": {
                  "name": "oidcpolicy-sample"
                },
                "spec": {
                  "provider": {
                    "cliendID": "exampleID",
                    "issuerURL": "https://idp.example.org/"
                  },
                  "targetRef": {
                    "group": "gateway.networking.k8s.io",
                    "kind": "HTTPRoute",
                    "name": "example-route"
                  }
                }
              },
              {
                "apiVersion": "extensions.kuadrant.io/v1alpha1",
                "kind": "PlanPolicy",
                "metadata": {
                  "labels": {
                    "app.kubernetes.io/created-by": "kuadrant-operator",
                    "app.kubernetes.io/instance": "planpolicy-sample",
                    "app.kubernetes.io/managed-by": "kustomize",
                    "app.kubernetes.io/name": "planpolicy",
                    "app.kubernetes.io/part-of": "kuadrant-operator"
                  },
                  "name": "planpolicy-sample"
                },
                "spec": {
                  "plans": [
                    {
                      "limits": {
                        "daily": 5
                      },
                      "predicate": "has(auth.identity) \u0026\u0026 auth.identity.metadata.annotations[\"secret.kuadrant.io/plan-id\"] == \"gold\"\n",
                      "tier": "gold"
                    },
                    {
                      "limits": {
                        "daily": 2
                      },
                      "predicate": "has(auth.identity) \u0026\u0026 auth.identity.metadata.annotations[\"secret.kuadrant.io/plan-id\"] == \"silver\"\n",
                      "tier": "silver"
                    },
                    {
                      "limits": {
                        "daily": 1
                      },
                      "predicate": "has(auth.identity) \u0026\u0026 auth.identity.metadata.annotations[\"secret.kuadrant.io/plan-id\"] == \"bronze\"\n",
                      "tier": "bronze"
                    }
                  ],
                  "targetRef": {
                    "group": "gateway.networking.k8s.io",
                    "kind": "HTTPRoute",
                    "name": "example-route"
                  }
                }
              },
              {
                "apiVersion": "kuadrant.io/v1",
                "kind": "AuthPolicy",
                "metadata": {
                  "name": "authpolicy-sample"
                },
                "spec": {
                  "rules": {
                    "authentication": {
                      "apikey": {
                        "apiKey": {
                          "selector": {}
                        },
                        "credentials": {
                          "authorizationHeader": {
                            "prefix": "APIKEY"
                          }
                        }
                      }
                    }
                  },
                  "targetRef": {
                    "group": "gateway.networking.k8s.io",
                    "kind": "HTTPRoute",
                    "name": "toystore"
                  }
                }
              },
              {
                "apiVersion": "kuadrant.io/v1",
                "kind": "DNSPolicy",
                "metadata": {
                  "name": "dnspolicy-sample"
                },
                "spec": {
                  "healthCheck": {
                    "protocol": "HTTP"
                  },
                  "providerRefs": [
                    {
                      "name": "provider-ref"
                    }
                  ],
                  "targetRef": {
                    "group": "gateway.networking.k8s.io",
                    "kind": "Gateway",
                    "name": "example-gateway"
                  }
                }
              },
              {
                "apiVersion": "kuadrant.io/v1",
                "kind": "RateLimitPolicy",
                "metadata": {
                  "name": "ratelimitpolicy-sample"
                },
                "spec": {
                  "limits": {
                    "toys": {
                      "rates": [
                        {
                          "limit": 50,
                          "window": "1m"
                        }
                      ]
                    }
                  },
                  "targetRef": {
                    "group": "gateway.networking.k8s.io",
                    "kind": "HTTPRoute",
                    "name": "toystore"
                  }
                }
              },
              {
                "apiVersion": "kuadrant.io/v1",
                "kind": "TLSPolicy",
                "metadata": {
                  "name": "tlspolicy-sample"
                },
                "spec": {
                  "issuerRef": {
                    "group": "cert-manager.io",
                    "kind": "ClusterIssuer",
                    "name": "self-signed-ca"
                  },
                  "targetRef": {
                    "group": "gateway.networking.k8s.io",
                    "kind": "Gateway",
                    "name": "example-gateway"
                  }
                }
              },
              {
                "apiVersion": "kuadrant.io/v1alpha1",
                "kind": "TokenRateLimitPolicy",
                "metadata": {
                  "name": "token-limit-free",
                  "namespace": "gateway-system"
                },
                "spec": {
                  "limits": {
                    "free": {
                      "counters": [
                        {
                          "expression": "auth.identity.userid"
                        }
                      ],
                      "rates": [
                        {
                          "limit": 20000,
                          "window": "1d"
                        }
                      ],
                      "when": [
                        {
                          "predicate": "request.auth.claims[\"kuadrant.io/groups\"].split(\",\").exists(g, g == \"free\")"
                        }
                      ]
                    },
                    "gold": {
                      "counters": [
                        {
                          "expression": "auth.identity.userid"
                        }
                      ],
                      "rates": [
                        {
                          "limit": 200000,
                          "window": "1d"
                        }
                      ],
                      "when": [
                        {
                          "predicate": "request.auth.claims[\"kuadrant.io/groups\"].split(\",\").exists(g, g == \"gold\")"
                        }
                      ]
                    }
                  },
                  "targetRef": {
                    "group": "gateway.networking.k8s.io",
                    "kind": "Gateway",
                    "name": "my-llm-gateway"
                  }
                }
              },
              {
                "apiVersion": "kuadrant.io/v1beta1",
                "kind": "Kuadrant",
                "metadata": {
                  "name": "kuadrant-sample"
                },
                "spec": {}
              }
            ]
          capabilities: Basic Install
          categories: Integration & Delivery
          console.openshift.io/plugins: '["kuadrant-console-plugin"]'
          containerImage: registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:cc2471e083a549afb80327aa87e1d32f05e40561c3f82275b0cdb88af5ee5e8e
          createdAt: "2026-08-28T09:40:12Z"
          description: A Kubernetes Operator to manage the lifecycle of the Kuadrant
            system
          features.operators.openshift.io/cnf: "false"
          features.operators.openshift.io/cni: "false"
          features.operators.openshift.io/csi: "false"
          features.operators.openshift.io/disconnected: "true"
          features.operators.openshift.io/fips-compliant: "true"
          features.operators.openshift.io/proxy-aware: "false"
          features.operators.openshift.io/tls-profiles: "false"
          features.operators.openshift.io/token-auth-aws: "false"
          features.operators.openshift.io/token-auth-azure: "false"
          features.operators.openshift.io/token-auth-gcp: "false"
          olm.operatorGroup: rhcl-operator
          olm.operatorNamespace: kuadrant-system
          olm.targetNamespaces: ""
          operatorframework.io/properties: '{"properties":[{"type":"olm.gvk","value":{"group":"devportal.kuadrant.io","kind":"APIKey","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"devportal.kuadrant.io","kind":"APIKeyApproval","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"devportal.kuadrant.io","kind":"APIKeyRequest","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"devportal.kuadrant.io","kind":"APIProduct","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"extensions.kuadrant.io","kind":"OIDCPolicy","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"extensions.kuadrant.io","kind":"PlanPolicy","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"extensions.kuadrant.io","kind":"TelemetryPolicy","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"kuadrant.io","kind":"AuthPolicy","version":"v1"}},{"type":"olm.gvk","value":{"group":"kuadrant.io","kind":"DNSPolicy","version":"v1"}},{"type":"olm.gvk","value":{"group":"kuadrant.io","kind":"Kuadrant","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"kuadrant.io","kind":"RateLimitPolicy","version":"v1"}},{"type":"olm.gvk","value":{"group":"kuadrant.io","kind":"TLSPolicy","version":"v1"}},{"type":"olm.gvk","value":{"group":"kuadrant.io","kind":"TokenRateLimitPolicy","version":"v1alpha1"}},{"type":"olm.package","value":{"packageName":"rhcl-operator","version":"1.4.3"}},{"type":"olm.package.required","value":{"packageName":"authorino-operator","versionRange":"1.4.3"}},{"type":"olm.package.required","value":{"packageName":"dns-operator","versionRange":"1.4.2"}},{"type":"olm.package.required","value":{"packageName":"limitador-operator","versionRange":"1.4.2"}},{"type":"olm.package.required","value":{"packageName":"authorino-operator","versionRange":"1.4.3"}},{"type":"olm.package.required","value":{"packageName":"dns-operator","versionRange":"1.4.2"}},{"type":"olm.package.required","value":{"packageName":"limitador-operator","versionRange":"1.4.2"}}]}'
          operators.openshift.io/valid-subscription: '["Red Hat Connectivity Link"]'
          operators.operatorframework.io/builder: operator-sdk-v1.33.0
          operators.operatorframework.io/project_layout: go.kubebuilder.io/v4
          repository: https://github.com/Kuadrant/kuadrant-operator
          support: kuadrant
        labels:
          app: kuadrant
          control-plane: controller-manager
          pod-template-hash: 54b6d5c989
      spec:
        containers:
        - args:
          - --leader-elect
          command:
          - /manager
          env:
          - name: EXTENSIONS_DIR
            value: /extensions
          - name: EXTENSIONS_DESCRIPTOR_SERVICE_PORT
            value: "50051"
          - name: RELATED_IMAGE_WASMSHIM
            value: registry.access.redhat.com/rhcl-1/wasm-shim-rhel9@sha256:08f3342bd305907f07ea8f9a356aeb6fbaa126564db2bebac05d2d5f56cd606c
          - name: RELATED_IMAGE_DEVELOPERPORTAL
            value: registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:b21df6569e5ae5e1fa97ba68750ad7cd6eeea25a631084663eaa8a03a41d7495
          - name: RELATED_IMAGE_CONSOLE_PLUGIN_LATEST
            value: registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:c8550de6790d58c5fa993bf83d41ef693d99a5739fcc0eed3fcaa8d5a7658044
          - name: RELATED_IMAGE_CONSOLE_PLUGIN_PF5
            value: registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:807a65ca558c3cf9ad5234f62ee085fcda364ff5c2b1e6c63ac9b8368a542529
          - name: OPERATOR_NAMESPACE
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
          - name: ISTIO_GATEWAY_CONTROLLER_NAMES
            value: istio.io/gateway-controller,openshift.io/gateway-controller/v1
          - name: RATELIMIT_CHECK_SERVICE_FAILURE_MODE
            value: deny
          - name: RATELIMIT_REPORT_SERVICE_FAILURE_MODE
            value: deny
          - name: AUTH_SERVICE_TIMEOUT
            value: 2s
          - name: OPERATOR_CONDITION_NAME
            value: rhcl-operator.v1.4.3
          image: registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:cc2471e083a549afb80327aa87e1d32f05e40561c3f82275b0cdb88af5ee5e8e
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthz
              port: 8081
              scheme: HTTP
            initialDelaySeconds: 15
            periodSeconds: 20
            successThreshold: 1
            timeoutSeconds: 1
          name: manager
          ports:
          - containerPort: 8080
            name: metrics
            protocol: TCP
          - containerPort: 50051
            name: grpc
            protocol: TCP
          - containerPort: 8082
            name: wasm
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /readyz
              port: 8081
              scheme: HTTP
            initialDelaySeconds: 5
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          resources:
            limits:
              cpu: 200m
              memory: 300Mi
            requests:
              cpu: 200m
              memory: 200Mi
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            readOnlyRootFilesystem: true
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /tmp/kuadrant
            name: extensions-socket-volume
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          runAsNonRoot: true
        serviceAccount: kuadrant-operator-controller-manager
        serviceAccountName: kuadrant-operator-controller-manager
        terminationGracePeriodSeconds: 10
        volumes:
        - emptyDir: {}
          name: extensions-socket-volume
  status:
    availableReplicas: 1
    fullyLabeledReplicas: 1
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "1"
    creationTimestamp: "2026-09-18T03:40:46Z"
    generation: 2
    labels:
      app: kuadrant
      control-plane: controller-manager
      pod-template-hash: 7cbf85f5f5
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
          f:labels:
            .: {}
            f:app: {}
            f:control-plane: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"bc40d530-c9db-4128-b6eb-0d72f1f5cf0a"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:alm-examples: {}
                f:capabilities: {}
                f:categories: {}
                f:console.openshift.io/plugins: {}
                f:containerImage: {}
                f:createdAt: {}
                f:description: {}
                f:features.operators.openshift.io/cnf: {}
                f:features.operators.openshift.io/cni: {}
                f:features.operators.openshift.io/csi: {}
                f:features.operators.openshift.io/disconnected: {}
                f:features.operators.openshift.io/fips-compliant: {}
                f:features.operators.openshift.io/proxy-aware: {}
                f:features.operators.openshift.io/tls-profiles: {}
                f:features.operators.openshift.io/token-auth-aws: {}
                f:features.operators.openshift.io/token-auth-azure: {}
                f:features.operators.openshift.io/token-auth-gcp: {}
                f:olm.operatorGroup: {}
                f:olm.operatorNamespace: {}
                f:olm.targetNamespaces: {}
                f:operatorframework.io/properties: {}
                f:operators.openshift.io/valid-subscription: {}
                f:operators.operatorframework.io/builder: {}
                f:operators.operatorframework.io/project_layout: {}
                f:repository: {}
                f:support: {}
              f:labels:
                .: {}
                f:app: {}
                f:control-plane: {}
                f:pod-template-hash: {}
            f:spec:
              f:containers:
                k:{"name":"manager"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"EXTENSIONS_DESCRIPTOR_SERVICE_PORT"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"EXTENSIONS_DIR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"ISTIO_GATEWAY_CONTROLLER_NAMES"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OPERATOR_CONDITION_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OPERATOR_NAMESPACE"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"RELATED_IMAGE_CONSOLE_PLUGIN_LATEST"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RELATED_IMAGE_CONSOLE_PLUGIN_PF5"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RELATED_IMAGE_DEVELOPERPORTAL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RELATED_IMAGE_WASMSHIM"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":8080,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                    k:{"containerPort":8082,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                    k:{"containerPort":50051,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources:
                    .: {}
                    f:limits:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:readOnlyRootFilesystem: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/tmp/kuadrant"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:runAsNonRoot: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"extensions-socket-volume"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-18T03:41:14Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:observedGeneration: {}
          f:replicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-09-18T03:41:14Z"
    name: kuadrant-operator-controller-manager-7cbf85f5f5
    namespace: kuadrant-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: kuadrant-operator-controller-manager
      uid: bc40d530-c9db-4128-b6eb-0d72f1f5cf0a
    resourceVersion: "18684"
    uid: fe6e6397-097a-4595-8c15-39c3f199bd28
  spec:
    replicas: 0
    selector:
      matchLabels:
        app: kuadrant
        control-plane: controller-manager
        pod-template-hash: 7cbf85f5f5
    template:
      metadata:
        annotations:
          alm-examples: |-
            [
              {
                "apiVersion": "extensions.kuadrant.io/v1alpha1",
                "kind": "OIDCPolicy",
                "metadata": {
                  "name": "oidcpolicy-sample"
                },
                "spec": {
                  "provider": {
                    "cliendID": "exampleID",
                    "issuerURL": "https://idp.example.org/"
                  },
                  "targetRef": {
                    "group": "gateway.networking.k8s.io",
                    "kind": "HTTPRoute",
                    "name": "example-route"
                  }
                }
              },
              {
                "apiVersion": "extensions.kuadrant.io/v1alpha1",
                "kind": "PlanPolicy",
                "metadata": {
                  "labels": {
                    "app.kubernetes.io/created-by": "kuadrant-operator",
                    "app.kubernetes.io/instance": "planpolicy-sample",
                    "app.kubernetes.io/managed-by": "kustomize",
                    "app.kubernetes.io/name": "planpolicy",
                    "app.kubernetes.io/part-of": "kuadrant-operator"
                  },
                  "name": "planpolicy-sample"
                },
                "spec": {
                  "plans": [
                    {
                      "limits": {
                        "daily": 5
                      },
                      "predicate": "has(auth.identity) \u0026\u0026 auth.identity.metadata.annotations[\"secret.kuadrant.io/plan-id\"] == \"gold\"\n",
                      "tier": "gold"
                    },
                    {
                      "limits": {
                        "daily": 2
                      },
                      "predicate": "has(auth.identity) \u0026\u0026 auth.identity.metadata.annotations[\"secret.kuadrant.io/plan-id\"] == \"silver\"\n",
                      "tier": "silver"
                    },
                    {
                      "limits": {
                        "daily": 1
                      },
                      "predicate": "has(auth.identity) \u0026\u0026 auth.identity.metadata.annotations[\"secret.kuadrant.io/plan-id\"] == \"bronze\"\n",
                      "tier": "bronze"
                    }
                  ],
                  "targetRef": {
                    "group": "gateway.networking.k8s.io",
                    "kind": "HTTPRoute",
                    "name": "example-route"
                  }
                }
              },
              {
                "apiVersion": "kuadrant.io/v1",
                "kind": "AuthPolicy",
                "metadata": {
                  "name": "authpolicy-sample"
                },
                "spec": {
                  "rules": {
                    "authentication": {
                      "apikey": {
                        "apiKey": {
                          "selector": {}
                        },
                        "credentials": {
                          "authorizationHeader": {
                            "prefix": "APIKEY"
                          }
                        }
                      }
                    }
                  },
                  "targetRef": {
                    "group": "gateway.networking.k8s.io",
                    "kind": "HTTPRoute",
                    "name": "toystore"
                  }
                }
              },
              {
                "apiVersion": "kuadrant.io/v1",
                "kind": "DNSPolicy",
                "metadata": {
                  "name": "dnspolicy-sample"
                },
                "spec": {
                  "healthCheck": {
                    "protocol": "HTTP"
                  },
                  "providerRefs": [
                    {
                      "name": "provider-ref"
                    }
                  ],
                  "targetRef": {
                    "group": "gateway.networking.k8s.io",
                    "kind": "Gateway",
                    "name": "example-gateway"
                  }
                }
              },
              {
                "apiVersion": "kuadrant.io/v1",
                "kind": "RateLimitPolicy",
                "metadata": {
                  "name": "ratelimitpolicy-sample"
                },
                "spec": {
                  "limits": {
                    "toys": {
                      "rates": [
                        {
                          "limit": 50,
                          "window": "1m"
                        }
                      ]
                    }
                  },
                  "targetRef": {
                    "group": "gateway.networking.k8s.io",
                    "kind": "HTTPRoute",
                    "name": "toystore"
                  }
                }
              },
              {
                "apiVersion": "kuadrant.io/v1",
                "kind": "TLSPolicy",
                "metadata": {
                  "name": "tlspolicy-sample"
                },
                "spec": {
                  "issuerRef": {
                    "group": "cert-manager.io",
                    "kind": "ClusterIssuer",
                    "name": "self-signed-ca"
                  },
                  "targetRef": {
                    "group": "gateway.networking.k8s.io",
                    "kind": "Gateway",
                    "name": "example-gateway"
                  }
                }
              },
              {
                "apiVersion": "kuadrant.io/v1alpha1",
                "kind": "TokenRateLimitPolicy",
                "metadata": {
                  "name": "token-limit-free",
                  "namespace": "gateway-system"
                },
                "spec": {
                  "limits": {
                    "free": {
                      "counters": [
                        {
                          "expression": "auth.identity.userid"
                        }
                      ],
                      "rates": [
                        {
                          "limit": 20000,
                          "window": "1d"
                        }
                      ],
                      "when": [
                        {
                          "predicate": "request.auth.claims[\"kuadrant.io/groups\"].split(\",\").exists(g, g == \"free\")"
                        }
                      ]
                    },
                    "gold": {
                      "counters": [
                        {
                          "expression": "auth.identity.userid"
                        }
                      ],
                      "rates": [
                        {
                          "limit": 200000,
                          "window": "1d"
                        }
                      ],
                      "when": [
                        {
                          "predicate": "request.auth.claims[\"kuadrant.io/groups\"].split(\",\").exists(g, g == \"gold\")"
                        }
                      ]
                    }
                  },
                  "targetRef": {
                    "group": "gateway.networking.k8s.io",
                    "kind": "Gateway",
                    "name": "my-llm-gateway"
                  }
                }
              },
              {
                "apiVersion": "kuadrant.io/v1beta1",
                "kind": "Kuadrant",
                "metadata": {
                  "name": "kuadrant-sample"
                },
                "spec": {}
              }
            ]
          capabilities: Basic Install
          categories: Integration & Delivery
          console.openshift.io/plugins: '["kuadrant-console-plugin"]'
          containerImage: registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:cc2471e083a549afb80327aa87e1d32f05e40561c3f82275b0cdb88af5ee5e8e
          createdAt: "2026-08-28T09:40:12Z"
          description: A Kubernetes Operator to manage the lifecycle of the Kuadrant
            system
          features.operators.openshift.io/cnf: "false"
          features.operators.openshift.io/cni: "false"
          features.operators.openshift.io/csi: "false"
          features.operators.openshift.io/disconnected: "true"
          features.operators.openshift.io/fips-compliant: "true"
          features.operators.openshift.io/proxy-aware: "false"
          features.operators.openshift.io/tls-profiles: "false"
          features.operators.openshift.io/token-auth-aws: "false"
          features.operators.openshift.io/token-auth-azure: "false"
          features.operators.openshift.io/token-auth-gcp: "false"
          olm.operatorGroup: rhcl-operator
          olm.operatorNamespace: kuadrant-system
          olm.targetNamespaces: ""
          operatorframework.io/properties: '{"properties":[{"type":"olm.gvk","value":{"group":"devportal.kuadrant.io","kind":"APIKey","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"devportal.kuadrant.io","kind":"APIKeyApproval","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"devportal.kuadrant.io","kind":"APIKeyRequest","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"devportal.kuadrant.io","kind":"APIProduct","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"extensions.kuadrant.io","kind":"OIDCPolicy","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"extensions.kuadrant.io","kind":"PlanPolicy","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"extensions.kuadrant.io","kind":"TelemetryPolicy","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"kuadrant.io","kind":"AuthPolicy","version":"v1"}},{"type":"olm.gvk","value":{"group":"kuadrant.io","kind":"DNSPolicy","version":"v1"}},{"type":"olm.gvk","value":{"group":"kuadrant.io","kind":"Kuadrant","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"kuadrant.io","kind":"RateLimitPolicy","version":"v1"}},{"type":"olm.gvk","value":{"group":"kuadrant.io","kind":"TLSPolicy","version":"v1"}},{"type":"olm.gvk","value":{"group":"kuadrant.io","kind":"TokenRateLimitPolicy","version":"v1alpha1"}},{"type":"olm.package","value":{"packageName":"rhcl-operator","version":"1.4.3"}},{"type":"olm.package.required","value":{"packageName":"authorino-operator","versionRange":"1.4.3"}},{"type":"olm.package.required","value":{"packageName":"dns-operator","versionRange":"1.4.2"}},{"type":"olm.package.required","value":{"packageName":"limitador-operator","versionRange":"1.4.2"}},{"type":"olm.package.required","value":{"packageName":"authorino-operator","versionRange":"1.4.3"}},{"type":"olm.package.required","value":{"packageName":"dns-operator","versionRange":"1.4.2"}},{"type":"olm.package.required","value":{"packageName":"limitador-operator","versionRange":"1.4.2"}}]}'
          operators.openshift.io/valid-subscription: '["Red Hat Connectivity Link"]'
          operators.operatorframework.io/builder: operator-sdk-v1.33.0
          operators.operatorframework.io/project_layout: go.kubebuilder.io/v4
          repository: https://github.com/Kuadrant/kuadrant-operator
          support: kuadrant
        labels:
          app: kuadrant
          control-plane: controller-manager
          pod-template-hash: 7cbf85f5f5
      spec:
        containers:
        - args:
          - --leader-elect
          command:
          - /manager
          env:
          - name: EXTENSIONS_DIR
            value: /extensions
          - name: EXTENSIONS_DESCRIPTOR_SERVICE_PORT
            value: "50051"
          - name: RELATED_IMAGE_WASMSHIM
            value: registry.access.redhat.com/rhcl-1/wasm-shim-rhel9@sha256:08f3342bd305907f07ea8f9a356aeb6fbaa126564db2bebac05d2d5f56cd606c
          - name: RELATED_IMAGE_DEVELOPERPORTAL
            value: registry.redhat.io/rhcl-1/developer-portal-controller-rhel9@sha256:b21df6569e5ae5e1fa97ba68750ad7cd6eeea25a631084663eaa8a03a41d7495
          - name: RELATED_IMAGE_CONSOLE_PLUGIN_LATEST
            value: registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:c8550de6790d58c5fa993bf83d41ef693d99a5739fcc0eed3fcaa8d5a7658044
          - name: RELATED_IMAGE_CONSOLE_PLUGIN_PF5
            value: registry.redhat.io/rhcl-1/rhcl-console-plugin-rhel9@sha256:807a65ca558c3cf9ad5234f62ee085fcda364ff5c2b1e6c63ac9b8368a542529
          - name: OPERATOR_NAMESPACE
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
          - name: ISTIO_GATEWAY_CONTROLLER_NAMES
            value: openshift.io/gateway-controller/v1
          - name: OPERATOR_CONDITION_NAME
            value: rhcl-operator.v1.4.3
          image: registry.redhat.io/rhcl-1/rhcl-rhel9-operator@sha256:cc2471e083a549afb80327aa87e1d32f05e40561c3f82275b0cdb88af5ee5e8e
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthz
              port: 8081
              scheme: HTTP
            initialDelaySeconds: 15
            periodSeconds: 20
            successThreshold: 1
            timeoutSeconds: 1
          name: manager
          ports:
          - containerPort: 8080
            name: metrics
            protocol: TCP
          - containerPort: 50051
            name: grpc
            protocol: TCP
          - containerPort: 8082
            name: wasm
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /readyz
              port: 8081
              scheme: HTTP
            initialDelaySeconds: 5
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          resources:
            limits:
              cpu: 200m
              memory: 300Mi
            requests:
              cpu: 200m
              memory: 200Mi
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            readOnlyRootFilesystem: true
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /tmp/kuadrant
            name: extensions-socket-volume
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          runAsNonRoot: true
        serviceAccount: kuadrant-operator-controller-manager
        serviceAccountName: kuadrant-operator-controller-manager
        terminationGracePeriodSeconds: 10
        volumes:
        - emptyDir: {}
          name: extensions-socket-volume
  status:
    observedGeneration: 2
    replicas: 0
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "2"
    creationTimestamp: "2026-09-18T03:41:33Z"
    generation: 1
    labels:
      app: limitador
      app.kubernetes.io/component: limitador
      app.kubernetes.io/instance: limitador
      app.kubernetes.io/managed-by: limitador-operator
      app.kubernetes.io/name: limitador
      app.kubernetes.io/part-of: kuadrant
      kuadrant.io/managed: "true"
      limitador-resource: limitador
      pod-template-hash: 84994f7ffc
      sidecar.istio.io/inject: "false"
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
          f:labels:
            .: {}
            f:app: {}
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/instance: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/name: {}
            f:app.kubernetes.io/part-of: {}
            f:kuadrant.io/managed: {}
            f:limitador-resource: {}
            f:pod-template-hash: {}
            f:sidecar.istio.io/inject: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"45cb0dd1-4239-4c21-a0ee-c0dac625d9a3"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:labels:
                .: {}
                f:app: {}
                f:app.kubernetes.io/component: {}
                f:app.kubernetes.io/instance: {}
                f:app.kubernetes.io/managed-by: {}
                f:app.kubernetes.io/name: {}
                f:app.kubernetes.io/part-of: {}
                f:kuadrant.io/managed: {}
                f:limitador-resource: {}
                f:pod-template-hash: {}
                f:sidecar.istio.io/inject: {}
            f:spec:
              f:containers:
                k:{"name":"limitador"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":8080,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                    k:{"containerPort":8081,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources:
                    .: {}
                    f:limits:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/home/limitador/etc"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"config-file"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-18T03:41:33Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:fullyLabeledReplicas: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-09-18T03:41:44Z"
    name: limitador-limitador-84994f7ffc
    namespace: kuadrant-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: limitador-limitador
      uid: 45cb0dd1-4239-4c21-a0ee-c0dac625d9a3
    resourceVersion: "20100"
    uid: 23481707-363a-49d1-ade5-183087149441
  spec:
    replicas: 1
    selector:
      matchLabels:
        app: limitador
        limitador-resource: limitador
        pod-template-hash: 84994f7ffc
    template:
      metadata:
        labels:
          app: limitador
          app.kubernetes.io/component: limitador
          app.kubernetes.io/instance: limitador
          app.kubernetes.io/managed-by: limitador-operator
          app.kubernetes.io/name: limitador
          app.kubernetes.io/part-of: kuadrant
          kuadrant.io/managed: "true"
          limitador-resource: limitador
          pod-template-hash: 84994f7ffc
          sidecar.istio.io/inject: "false"
      spec:
        containers:
        - args:
          - --http-port
          - "8080"
          - --rls-port
          - "8081"
          - --metric-labels-default
          - descriptors[1]
          - /home/limitador/etc/limitador-config.yaml
          - memory
          command:
          - limitador-server
          image: registry.redhat.io/rhcl-1/limitador-rhel9@sha256:793a38ce1b5690b99bc20fb7fca3304727d5fb21fcf440ab88f3e7af5778a751
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /status
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 5
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 2
          name: limitador
          ports:
          - containerPort: 8080
            name: http
            protocol: TCP
          - containerPort: 8081
            name: grpc
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /status
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 5
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          resources:
            limits:
              cpu: 500m
              memory: 64Mi
            requests:
              cpu: 250m
              memory: 32Mi
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /home/limitador/etc
            name: config-file
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            name: limitador-limits-config-limitador
          name: config-file
  status:
    availableReplicas: 1
    fullyLabeledReplicas: 1
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "1"
    creationTimestamp: "2026-09-18T03:41:33Z"
    generation: 2
    labels:
      app: limitador
      app.kubernetes.io/component: limitador
      app.kubernetes.io/instance: limitador
      app.kubernetes.io/managed-by: limitador-operator
      app.kubernetes.io/name: limitador
      app.kubernetes.io/part-of: kuadrant
      limitador-resource: limitador
      pod-template-hash: "8588749977"
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
          f:labels:
            .: {}
            f:app: {}
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/instance: {}
            f:app.kubernetes.io/managed-by: {}
            f:app.kubernetes.io/name: {}
            f:app.kubernetes.io/part-of: {}
            f:limitador-resource: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"45cb0dd1-4239-4c21-a0ee-c0dac625d9a3"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:labels:
                .: {}
                f:app: {}
                f:app.kubernetes.io/component: {}
                f:app.kubernetes.io/instance: {}
                f:app.kubernetes.io/managed-by: {}
                f:app.kubernetes.io/name: {}
                f:app.kubernetes.io/part-of: {}
                f:limitador-resource: {}
                f:pod-template-hash: {}
            f:spec:
              f:containers:
                k:{"name":"limitador"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":8080,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                    k:{"containerPort":8081,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources:
                    .: {}
                    f:limits:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/home/limitador/etc"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"config-file"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-18T03:41:44Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:observedGeneration: {}
          f:replicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-09-18T03:41:44Z"
    name: limitador-limitador-8588749977
    namespace: kuadrant-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: limitador-limitador
      uid: 45cb0dd1-4239-4c21-a0ee-c0dac625d9a3
    resourceVersion: "20115"
    uid: 9fc26ff9-7c94-437f-8c6c-e806ca2cd11c
  spec:
    replicas: 0
    selector:
      matchLabels:
        app: limitador
        limitador-resource: limitador
        pod-template-hash: "8588749977"
    template:
      metadata:
        labels:
          app: limitador
          app.kubernetes.io/component: limitador
          app.kubernetes.io/instance: limitador
          app.kubernetes.io/managed-by: limitador-operator
          app.kubernetes.io/name: limitador
          app.kubernetes.io/part-of: kuadrant
          limitador-resource: limitador
          pod-template-hash: "8588749977"
      spec:
        containers:
        - args:
          - --http-port
          - "8080"
          - --rls-port
          - "8081"
          - --metric-labels-default
          - descriptors[1]
          - /home/limitador/etc/limitador-config.yaml
          - memory
          command:
          - limitador-server
          image: registry.redhat.io/rhcl-1/limitador-rhel9@sha256:793a38ce1b5690b99bc20fb7fca3304727d5fb21fcf440ab88f3e7af5778a751
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /status
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 5
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 2
          name: limitador
          ports:
          - containerPort: 8080
            name: http
            protocol: TCP
          - containerPort: 8081
            name: grpc
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /status
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 5
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          resources:
            limits:
              cpu: 500m
              memory: 64Mi
            requests:
              cpu: 250m
              memory: 32Mi
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /home/limitador/etc
            name: config-file
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            name: limitador-limits-config-limitador
          name: config-file
  status:
    observedGeneration: 2
    replicas: 0
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "1"
    creationTimestamp: "2026-09-18T03:40:52Z"
    generation: 1
    labels:
      app: limitador-operator
      control-plane: controller-manager
      pod-template-hash: 6d9b9f85cb
    managedFields:
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:deployment.kubernetes.io/desired-replicas: {}
            f:deployment.kubernetes.io/max-replicas: {}
            f:deployment.kubernetes.io/revision: {}
          f:labels:
            .: {}
            f:app: {}
            f:control-plane: {}
            f:pod-template-hash: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"f953f077-fd96-46f1-8dff-154083078ece"}: {}
        f:spec:
          f:replicas: {}
          f:selector: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:alm-examples: {}
                f:capabilities: {}
                f:categories: {}
                f:containerImage: {}
                f:createdAt: {}
                f:description: {}
                f:features.operators.openshift.io/cnf: {}
                f:features.operators.openshift.io/cni: {}
                f:features.operators.openshift.io/csi: {}
                f:features.operators.openshift.io/disconnected: {}
                f:features.operators.openshift.io/fips-compliant: {}
                f:features.operators.openshift.io/proxy-aware: {}
                f:features.operators.openshift.io/tls-profiles: {}
                f:features.operators.openshift.io/token-auth-aws: {}
                f:features.operators.openshift.io/token-auth-azure: {}
                f:features.operators.openshift.io/token-auth-gcp: {}
                f:olm.operatorGroup: {}
                f:olm.operatorNamespace: {}
                f:olm.targetNamespaces: {}
                f:operatorframework.io/properties: {}
                f:operators.openshift.io/valid-subscription: {}
                f:operators.operatorframework.io/builder: {}
                f:operators.operatorframework.io/project_layout: {}
                f:repository: {}
                f:support: {}
              f:labels:
                .: {}
                f:app: {}
                f:control-plane: {}
                f:pod-template-hash: {}
            f:spec:
              f:containers:
                k:{"name":"manager"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"OPERATOR_CONDITION_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"RELATED_IMAGE_LIMITADOR"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:livenessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:name: {}
                  f:ports:
                    .: {}
                    k:{"containerPort":8080,"protocol":"TCP"}:
                      .: {}
                      f:containerPort: {}
                      f:name: {}
                      f:protocol: {}
                  f:readinessProbe:
                    .: {}
                    f:failureThreshold: {}
                    f:httpGet:
                      .: {}
                      f:path: {}
                      f:port: {}
                      f:scheme: {}
                    f:initialDelaySeconds: {}
                    f:periodSeconds: {}
                    f:successThreshold: {}
                    f:timeoutSeconds: {}
                  f:resources:
                    .: {}
                    f:limits:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                    f:requests:
                      .: {}
                      f:cpu: {}
                      f:memory: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:runAsNonRoot: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
      manager: kube-controller-manager
      operation: Update
      time: "2026-09-18T03:40:52Z"
    - apiVersion: apps/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:availableReplicas: {}
          f:fullyLabeledReplicas: {}
          f:observedGeneration: {}
          f:readyReplicas: {}
          f:replicas: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-09-18T03:41:06Z"
    name: limitador-operator-controller-manager-6d9b9f85cb
    namespace: kuadrant-system
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: limitador-operator-controller-manager
      uid: f953f077-fd96-46f1-8dff-154083078ece
    resourceVersion: "18225"
    uid: 5ebe9bb0-c113-4e95-b2b7-136ae2e71582
  spec:
    replicas: 1
    selector:
      matchLabels:
        control-plane: controller-manager
        pod-template-hash: 6d9b9f85cb
    template:
      metadata:
        annotations:
          alm-examples: |-
            [
              {
                "apiVersion": "limitador.kuadrant.io/v1alpha1",
                "kind": "Limitador",
                "metadata": {
                  "name": "limitador-sample"
                },
                "spec": {
                  "limits": [
                    {
                      "conditions": [
                        "get_toy == 'yes'"
                      ],
                      "max_value": 2,
                      "name": "toy_get_route",
                      "namespace": "toystore-app",
                      "seconds": 30,
                      "variables": []
                    }
                  ],
                  "listener": {
                    "grpc": {
                      "port": 8081
                    },
                    "http": {
                      "port": 8080
                    }
                  }
                }
              }
            ]
          capabilities: Basic Install
          categories: Integration & Delivery
          containerImage: registry.redhat.io/rhcl-1/limitador-rhel9-operator@sha256:7fdc92b22c7d74e68e71ebf54d1c680fc8dbd47198286dc4f7f87b3d4b31472e
          createdAt: "2026-08-27T12:29:43Z"
          description: The Limitador operator installs and maintains limitador instances
          features.operators.openshift.io/cnf: "false"
          features.operators.openshift.io/cni: "false"
          features.operators.openshift.io/csi: "false"
          features.operators.openshift.io/disconnected: "true"
          features.operators.openshift.io/fips-compliant: "true"
          features.operators.openshift.io/proxy-aware: "false"
          features.operators.openshift.io/tls-profiles: "false"
          features.operators.openshift.io/token-auth-aws: "false"
          features.operators.openshift.io/token-auth-azure: "false"
          features.operators.openshift.io/token-auth-gcp: "false"
          olm.operatorGroup: rhcl-operator
          olm.operatorNamespace: kuadrant-system
          olm.targetNamespaces: ""
          operatorframework.io/properties: '{"properties":[{"type":"olm.gvk","value":{"group":"limitador.kuadrant.io","kind":"Limitador","version":"v1alpha1"}},{"type":"olm.package","value":{"packageName":"limitador-operator","version":"1.4.2"}}]}'
          operators.openshift.io/valid-subscription: '["Red Hat Connectivity Link"]'
          operators.operatorframework.io/builder: operator-sdk-v1.32.0
          operators.operatorframework.io/project_layout: go.kubebuilder.io/v3
          repository: https://github.com/Kuadrant/limitador-operator
          support: kuadrant
        labels:
          app: limitador-operator
          control-plane: controller-manager
          pod-template-hash: 6d9b9f85cb
      spec:
        containers:
        - args:
          - --leader-elect
          command:
          - /manager
          env:
          - name: RELATED_IMAGE_LIMITADOR
            value: registry.redhat.io/rhcl-1/limitador-rhel9@sha256:793a38ce1b5690b99bc20fb7fca3304727d5fb21fcf440ab88f3e7af5778a751
          - name: OPERATOR_CONDITION_NAME
            value: limitador-operator.v1.4.2
          image: registry.redhat.io/rhcl-1/limitador-rhel9-operator@sha256:7fdc92b22c7d74e68e71ebf54d1c680fc8dbd47198286dc4f7f87b3d4b31472e
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthz
              port: 8081
              scheme: HTTP
            initialDelaySeconds: 15
            periodSeconds: 20
            successThreshold: 1
            timeoutSeconds: 1
          name: manager
          ports:
          - containerPort: 8080
            name: metrics
            protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /readyz
              port: 8081
              scheme: HTTP
            initialDelaySeconds: 5
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          resources:
            limits:
              cpu: 200m
              memory: 300Mi
            requests:
              cpu: 200m
              memory: 200Mi
          securityContext:
            allowPrivilegeEscalation: false
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext:
          runAsNonRoot: true
        serviceAccount: limitador-operator-controller-manager
        serviceAccountName: limitador-operator-controller-manager
        terminationGracePeriodSeconds: 10
  status:
    availableReplicas: 1
    fullyLabeledReplicas: 1
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
kind: ReplicaSetList
metadata:
  resourceVersion: "25502"