--- apiVersion: v1 items: - apiVersion: v1 data: ca.crt: | -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIILXyiAzzCsTAwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMDIwMjczM1oX DTM2MTAyNzIwMjczM1owJjESMBAGA1UECxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdy b290LWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9z/RJPEb5MA QuyjnncVT6uZfBGopZL0J2Iuk+WMlSbN85docIJdm0uvQXyfQPmnhasLa53C0K7v 2b8bMgfZO1OgDM3973BEdnKPoUUSbEQE+pWzER5n5VeV8KrWdUsvFNaT/yjue3/+ /4WBrT8ruVlw4l9KYbbrt4LG5beiFbdf5udujyLjHzhTVdXNvT0+rrrqilqunkqo 2FkY2EuarnSsBjyj3x+072wzVZqLbJzDvnYVWkkNBdufjdRDd1DgtDGNje0FBg0O 74cll0zYSeGGttl/WNKGGFHRs1rtAqgbc3b0PEvO5PuRlku+vY0G8zILNm2m1KGN i4ITiJVcOQIDAQABo24wbDAOBgNVHQ8BAf8EBAMCAqQwDwYDVR0TAQH/BAUwAwEB /zBJBgNVHQ4EQgRA6o3LgWCHhJgdetQjzyptzIy/GrS1tdmx8yVLIyeiuPLj3120 znH9LpiEM/mfJvPu0wOu7u1AUFe6ZTHnpazqCzANBgkqhkiG9w0BAQsFAAOCAQEA GOytUnH2LQy94rBMQStAuBO9HBVHfEQfOvc9XLt9MWdaFaX/0kSs0wr4N43X59OP Bwe8Z0f2LqTA6ODHXqQDy7cbBo2Fo886m0oqJJy0qZntt/R5JbsljpQ1wCZPiSC4 NmfN5nj45ppV0vHwlS/Mwd/GQsog3WvYHlzSxDiauzqhqkcwSumBa9A7YrZ0NlFg p7jbyqQhtLjlqVrBdtPRAn6KDaP0fpThHj7VtNaqXbFc8UYqRdQb9aKrO2QtDjc/ ZJH7z+T3BonlKpD3yy/Gzl35e2JR9BJEFp7TXo4BkAtbLXOxlRa9msUBAv4hbK6B /aE/1TV8diqBUvp5dd8llw== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID8zCCAtugAwIBAgIIB7KU5tLV2GYwDQYJKoZIhvcNAQELBQAwJjESMBAGA1UE CxMJb3BlbnNoaWZ0MRAwDgYDVQQDEwdyb290LWNhMB4XDTI2MTAzMDIwMjc1NVoX DTI3MTAzMDIwMjc1NVowMDESMBAGA1UEChMJb3BlbnNoaWZ0MRowGAYDVQQDExFv cGVuc2hpZnQtaW5ncmVzczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMtYHduhVFdmMtRZLUahhZUtcQ6oHEP6/RwOllp4JcJufAEK6TZNVmPQaBL1ISsG A1eFGHpw+UALey5F5MHO7RuUXbDQiJUA0BEPEBoaY8KRho+ey3WSBPd1ApaLLe+3 2JQdK3o7i+SV0YgowDDyuGjYzt4PP6yf2nqJfMHdAjEh9uuqg7KWEX1mTudhY+bd r+4oXmVdpTZpu/iQVTTdaJdoWuiYNOqD+Dxk/53B1AmeA2QmBuas3/GQcb2tA27l UnzY+qOPTsXRxhIoV7AflHEvNkQdwlYe8mEI4PUfhflBGE8kZk13Zv+vxuvA7jp+ oU1eufymxtHRWbc2UsKv6wsCAwEAAaOCARkwggEVMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADBJBgNV HQ4EQgRACZ3QiJLYG2kFiPHp4z8qnRebOakGXlInoirbLpQ6fl6Fva1H48UTJDAT 5ody3581AqelM0AYi8G6ZzYLC45cXzBLBgNVHSMERDBCgEDqjcuBYIeEmB161CPP Km3MjL8atLW12bHzJUsjJ6K48uPfXbTOcf0umIQz+Z8m8+7TA67u7UBQV7plMeel rOoLMD4GA1UdEQQ3MDWCMyouYXBwcy5kYWZmOTk5YzM2MjEwMzc5NWRiZS5wcm9k LmtvbmZsdXgtb2NwLWNpLmRldjANBgkqhkiG9w0BAQsFAAOCAQEAVoSJiag/5oxy rimWeIZJoZvB82RKT/Sj9GADA0bThakU7UdySaLgVhh32GSTWIzBxzZlvH/q69dt 4Rr5eQzO8hgbarPRy1kb2NHRbFrgnzTVuF3S/M3L+EkO8dP6iRYfDltb2OJwxdYM scuRx0SRtvGio96DlPiMr/HmD22T8oAFGkM9P+MwEYvx3Z8HpPrKiPDaUEskjYzX RH8T28iOQ9QAWqLRFtFwngCuCv03drjae9DJP9KVSavY3n6voiDg8iptE87zjufR 0OGpO+0ae1seEKiXNiPCu0BnTUBUTkc06NiuLS0xqz+lTj7pnUyhM6AIpPrya/0X T3olhM8RSQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: kubernetes.io/description: Contains a CA bundle that can be used to verify the kube-apiserver when using internal endpoints such as the internal service IP or kubernetes.default.svc. No other usage is guaranteed across distributions of Kubernetes clusters. creationTimestamp: "2026-10-30T20:46:28Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:ca.crt: {} f:metadata: f:annotations: .: {} f:kubernetes.io/description: {} manager: kube-controller-manager operation: Update time: "2026-10-30T20:46:28Z" name: kube-root-ca.crt namespace: openshift-operators-redhat resourceVersion: "14573" uid: 6a331603-ab53-4512-b302-3cb4c948de33 - apiVersion: v1 data: controller_manager_config.yaml: | apiVersion: config.loki.grafana.com/v1 kind: ProjectConfig health: healthProbeBindAddress: :8081 metrics: bindAddress: :8443 secure: true webhook: port: 9443 leaderElection: leaderElect: true resourceName: loki-operator.grafana.com featureGates: # # Monitoring feature gates # serviceMonitors: true serviceMonitorTlsEndpoints: true lokiStackAlerts: true # # Encryption feature gates # httpEncryption: true grpcEncryption: true builtInCertManagement: enabled: true # CA certificate validity: 5 years caValidity: 43830h # CA certificate refresh at 80% of validity caRefresh: 35064h # Target certificate validity: 90d certValidity: 2160h # Target certificate refresh at 80% of validity certRefresh: 1728h # # Component feature gates # lokiStackGateway: true grafanaLabsUsageReport: false restrictedPodSecurityStandard: true defaultNodeAffinity: true # # Webhook feature gates # lokiStackWebhook: true alertingRuleWebhook: true recordingRuleWebhook: true rulerConfigWebhook: true # # OpenShift feature gates # openshift: enabled: true servingCertsService: true ruleExtendedValidation: true clusterTLSPolicy: true clusterProxy: true dashboards: true kind: ConfigMap metadata: creationTimestamp: "2026-10-30T20:46:40Z" labels: app.kubernetes.io/instance: loki-operator-0.1.0 app.kubernetes.io/managed-by: operator-lifecycle-manager app.kubernetes.io/name: loki-operator app.kubernetes.io/part-of: cluster-logging app.kubernetes.io/version: 0.1.0 olm.managed: "true" operators.coreos.com/loki-operator.openshift-operators-redhat: "" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:controller_manager_config.yaml: {} f:metadata: f:labels: .: {} f:app.kubernetes.io/instance: {} f:app.kubernetes.io/managed-by: {} f:app.kubernetes.io/name: {} f:app.kubernetes.io/part-of: {} f:app.kubernetes.io/version: {} f:olm.managed: {} f:ownerReferences: .: {} k:{"uid":"7d0c796d-2754-4596-9336-b30b5a02ade1"}: {} manager: catalog operation: Update time: "2026-10-30T20:46:40Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:operators.coreos.com/loki-operator.openshift-operators-redhat: {} manager: olm operation: Update time: "2026-10-30T20:46:49Z" name: loki-operator-manager-config namespace: openshift-operators-redhat ownerReferences: - apiVersion: operators.coreos.com/v1alpha1 blockOwnerDeletion: false controller: false kind: ClusterServiceVersion name: loki-operator.v6.6.2 uid: 7d0c796d-2754-4596-9336-b30b5a02ade1 resourceVersion: "15584" uid: 1be492e5-3c4e-4e77-9791-f68f360254ce - apiVersion: v1 data: service-ca.crt: | -----BEGIN CERTIFICATE----- MIIDUTCCAjmgAwIBAgIIKd6flK6wNoQwDQYJKoZIhvcNAQELBQAwNjE0MDIGA1UE Awwrb3BlbnNoaWZ0LXNlcnZpY2Utc2VydmluZy1zaWduZXJAMTc5MzM5MjU2OTAe Fw0yNjEwMzAyMDM2MDhaFw0yODEyMjgyMDM2MDlaMDYxNDAyBgNVBAMMK29wZW5z aGlmdC1zZXJ2aWNlLXNlcnZpbmctc2lnbmVyQDE3OTMzOTI1NjkwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoyQldfxkcF7e26bgCRHXNXMQS2dUxgsDL cvWDrXc5Kipa3/au2EE8mEPidZIu28TDryFpnaGC4PWWoKJwmZRYSexvWm5ivYF8 TNjcUSBZloUlqLXFBI7w9IDOxZuhYqgxpk+mah45RVBn0p1IR+87x2lEAV/htbXr aNUt5LN5cmQdjGB+el7pIC5knqAB4is2X2Y6hyWPJK6fdERW2P/iMobTO5hSV7O7 nvDc22a3BrmNHKEp4UNOJd74XTNR1YxaU4zNjcSoldaci3uf1vSMqWi94gcdxv0s by32A9QpIKDNHfALGUzgRiAQ8rQ3rT2ZnIyAGk3sBRcHWD5ttLqDAgMBAAGjYzBh MA4GA1UdDwEB/wQEAwICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSwTgvt jLxfVVKRgNVmLf5rKM1tfjAfBgNVHSMEGDAWgBSwTgvtjLxfVVKRgNVmLf5rKM1t fjANBgkqhkiG9w0BAQsFAAOCAQEAma5gTk6u//+/3LDLmloiK+MZYw2Mu+wpowA+ mcEUb+gH1qRPj6wtCmdFTnzwvO66Yi8kNQJ37ff8DdB2oSKRqAvMDsU2XT+ItDAw WIym1914GIIjHaX4oVezOnLcB9sNQegy4z2wM/75jfLGtqyAELnyNrPIhT2A9JjN OkjdupyX2VFPvjae/tvhqGiA5WVo0acqtP2bsajnBxvmedydqyF+zm1++AsRolhs y8B6q28MhwNyHmzDNXbnL2XHlGA7pmrzzd7Qjmq0mWsS/gsoE4KOmuXaQoZ9aAqd bz2JOK20e4GYlLd/Tu0EgSjy0CGRrmOcfHJbcP1bDjhvLcwRBQ== -----END CERTIFICATE----- kind: ConfigMap metadata: annotations: service.beta.openshift.io/inject-cabundle: "true" creationTimestamp: "2026-10-30T20:46:28Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: {} f:metadata: f:annotations: .: {} f:service.beta.openshift.io/inject-cabundle: {} manager: kube-controller-manager operation: Update time: "2026-10-30T20:46:28Z" - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:service-ca.crt: {} manager: service-ca-operator operation: Update time: "2026-10-30T20:46:28Z" name: openshift-service-ca.crt namespace: openshift-operators-redhat resourceVersion: "14600" uid: 116150d7-156c-4438-87e4-67ac880b6eb6 kind: ConfigMapList metadata: resourceVersion: "61031"