--- apiVersion: v1 items: - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIIULf2CH45qjYwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMDE3NDczNloX DTM2MTAyNzE3NDczNlowJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDf50LaSsQHN MC8DnustLV3WV8xiLDkoyCVgFBRjDPtv/0+iOLQuXfrobphNMLqEgbZp38XA5zNF 2jaYGJUCr6zuxAbzDFMaVbbbdCMDXavVLbawVLmFl1kahvF+N73k3sTMEm2g7b6D Q29RJIcG8/vM/FMIUg8Rvih+hwy6OvLVYezdorBoTgrmz6PLghp870ZTmiI7gFSH 7HfYZnvyNKCMx51KOENeZuryM9I9lbKC0AKOlpcJMr+xGa9wniJp+6PG6NRpMhcT suyAye/pDYQ7R7B+ClVrYac26qtQIrIXrSkSYHZtTatabpG+OiMiYcCQsCE2zK6a +P3Xt9HIlwIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRA+umw4nRLLWKaD4XWrLnnjKe2lB7B4Oz8S2ykcpPZakk1KV+d TtkI1/0vM7WyDIY6s86G59IouwczHFfWyKrKxjANBgkqhkiG9w0BAQsFAAOCAQEA vIAsJhVYfVuU3CZFI0Vdglu+g5DTmIyL28rwZD9fJQ6AthlODYjDPZ8ozZgM7IPg a4nmtxaOd+uMc4YP441cGMHmcS3lK2RdMfpuWIFHpMGIxQxlHN9RMtiCd7tFpPxs aubIszlxgpjuNTEo5iQnSWb0ijiME5CwxHezKcpwgO3ps39+UB4fj5TtjtBVZtsk hl3GgiFBODkty+uY+pAgHeUZOpPTv6+wasKL6wOPJX9cy7CXjVThufPArq5Z2ioG d0DG+Woa8IumY6RQweQ+/i8eFFxCjtYmjok5SaGAeWeZ+VO4n9JV4Cq04BEtvu0F izvz/qBShqKDjvygn0xGlg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIIRATQy9zCQKswDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMDE3NDc1MVoX DTI3MTAzMDE3NDc1MVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOlqpPKS846qsHpxCr4OnilHEPI79MScmKSI1sCjdFsd+2x6T2eGOM1mICrWn2BD 1/rtcA/TobWU+b9MRpY1tLkhe5f1XctL5yHAu4TSFoCD6U9nJHtQBp+olDL9H4LF 46sYcE1niFMdmBZTYJF6NWtx0poGLdPmmuYRf8D7Z1VI43uyDRocc1dIbNJfBpvc MmfADwEHDHmJa2oxfs89Zv76wE84pOU0hx5TRBVS21stE7z57xizlhtV8c9+4jBg P8JglUHQFCJlS6q2G8WeK4AFrDNia5K+zt4Uaxo9ks0wMIkulk4Tkxf7GOKoShT/ q9Jxvbu+wC6NmClY8VpPK7cCAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRAm326p6B4MAN1UjWSGYzU97f2t3W3qCryoGDXDY1GEGVFpktnTXwJlvjD ySMC8LoboEebdO1d3txU4bOaUDfBAjBLBgNVHSMERDBCgED66bDidEstYpoPhdas ueeMp7aUHsHg7PxLbKRyk9lqSTUpX51O2QjX/S8ztbIMhjqzzobn0ii7BzMcV9bI qsrGMD4GA1UdEQQ3MDWCMyouYXBwcy5jYWFkYjZlZmE2ZGExNGE2NjJhOS5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEAXjd/+MzPCEkj 4kOYlD4uv0r7g8YrUoDu9rwn0DNuNHFeFOwBuwe3OypkqJQcAUn8ugQ8p0t88ji0 VL8NAvQdsneI3F5Dwc08bUZIOYqBWq0g5//bUMwBYVU0h+6BfL4txOMfjmuhSrHn n4dy+OoRM2gfI7VIG3GCP3O2usGIJMaF6toXpQ+NoFpqikM+0BS1uAMOb+8Z/bZ5 UszdB/wzkaOWFIGLV1WDMSbw8+o+adXtagbZAA1WZtUqtazFR01MiS+ffUN436qI 2mHKrRWnyJQGbWYN2JKSSY/43+jq1x83ITPr6BrgXKszbklP82L9kfLcdp/erd92 S7M+hlcXKQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-10-30T18:09:35Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-10-30T18:09:35Z" name: kube-root-ca.crt namespace: openshift-operators-redhat resourceVersion: "15206" uid: af48bd6a-78cf-425c-84a2-8b3e4f87d5f9 - apiVersion: v1 data: controller_manager_config.yaml: | apiVersion: config.loki.grafana.com/v1 kind: ProjectConfig health: healthProbeBindAddress: :8081 metrics: bindAddress: :8443 secure: true webhook: port: 9443 leaderElection: leaderElect: true resourceName: loki-operator.grafana.com featureGates: # # Monitoring feature gates # serviceMonitors: true serviceMonitorTlsEndpoints: true lokiStackAlerts: true # # Encryption feature gates # httpEncryption: true grpcEncryption: true builtInCertManagement: enabled: true # CA certificate validity: 5 years caValidity: 43830h # CA certificate refresh at 80% of validity caRefresh: 35064h # Target certificate validity: 90d certValidity: 2160h # Target certificate refresh at 80% of validity certRefresh: 1728h # # Component feature gates # lokiStackGateway: true grafanaLabsUsageReport: false restrictedPodSecurityStandard: true defaultNodeAffinity: true # # Webhook feature gates # lokiStackWebhook: true alertingRuleWebhook: true recordingRuleWebhook: true rulerConfigWebhook: true # # OpenShift feature gates # openshift: enabled: true servingCertsService: true ruleExtendedValidation: true clusterTLSPolicy: true clusterProxy: true dashboards: true kind: ConfigMap metadata: creationTimestamp: "2026-10-30T18:09:50Z" labels: app.kubernetes.io/instance: loki-operator-0.1.0 app.kubernetes.io/managed-by: operator-lifecycle-manager app.kubernetes.io/name: loki-operator app.kubernetes.io/part-of: cluster-logging app.kubernetes.io/version: 0.1.0 olm.managed: "true" operators.coreos.com/loki-operator.openshift-operators-redhat: "" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:controller_manager_config.yaml: {} f:metadata: f:labels: .: {} f:app.kubernetes.io/instance: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:olm.managed: {} f:ownerReferences: .: {} k:{"uid":"27bb305f-1b1d-4e3d-955e-f62c8ca2d2d7"}: {} manager: catalog operation: Update time: "2026-10-30T18:09:50Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:operators.coreos.com/loki-operator.openshift-operators-redhat: {} manager: olm operation: Update time: "2026-10-30T18:10:05Z" name: loki-operator-manager-config namespace: openshift-operators-redhat ownerReferences: - apiVersion: operators.coreos.com/v1alpha1 blockOwnerDeletion: false controller: false kind: ClusterServiceVersion name: loki-operator.v6.6.2 uid: 27bb305f-1b1d-4e3d-955e-f62c8ca2d2d7 resourceVersion: "16631" uid: 3b806b91-0179-477a-aada-0f3b320341bc - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIYIkZoImXKlgwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzM4Mjk4MjAe Fw0yNjEwMzAxNzU2MjFaFw0yODEyMjgxNzU2MjJaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTMzODI5ODIwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Y/Pko4mK/soWw7HLFiqs29ythZvnCV7v a7u4YchQBGCGLybNZxIYPUA8JHlF30Sx9kxnTEs4dubrsezKfucR+K3PzL7rphCs RL7tWvCctJ7C1JfT/u0WKZaY+Nopo74Fyu87cksREzgXbiP7gmpfSpk/aIB1g8GD 1nsAdnR8C3wTemZPdmZoOEINQkR0T7h/3uWpdQB5icCx0rH9TxtCSRXh3/vfb7Nr rizxUXvgYQEb/LMDZeoP+xQ3qy9ssp9OfzM/vQeT2p6d2euw1ICPqEUpM8zw2RBB g2gK6XPlgJi/blqfqglP85jNm3y4sAntfK4jn1mLL2CGgNqx/sbFAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQZQmTY UzJ8jJQd9hR7n7OxVzH3ODAfBgNVHSMEGDAWgBQZQmTYUzJ8jJQd9hR7n7OxVzH3 ODANBgkqhkiG9w0BAQsFAAOCAQEAi3ac5QwQ7EGHKtKSnYXC9/7CBcBZyglYk7Wp J4Hwbmr5jjWaWUrcq53oq8pfCGj1JnUPFoUDYd+8DXiYZujOvh/g+QVrfHHz+MN4 m7SfjfPtMvDiIPTB+O0SbfFHZimp3JRCB8hPt0rIxH8wJwHzCR3eM/YH8StcwnIM JiWiKwSvzJETKwCN3NXh4wrxvo/ECB2HmJ+XbAcm5HcPbbsP4QIGjkBJF877SZXB UvCVH71/u7eiYyVsfNGfRA9G4p0FlFOuylsPJwauioAyMEd/qKWUfTbJbWNNeewR fV+v8kZgD9nMvB/nr7L9gJrN89ihPdaJmqddTsKRV39YRD/ajQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-10-30T18:09:35Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-10-30T18:09:35Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-10-30T18:09:35Z" name: openshift-service-ca.crt namespace: openshift-operators-redhat resourceVersion: "15222" uid: b166c20f-d623-43e1-8bac-2362b1d3a9d1 kind: ConfigMapList metadata: resourceVersion: "59998"