{ "apiVersion": "v1", "items": [ { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/liveness-port": "Keeping upstream configs", "ignore-check.kube-linter.io/readiness-port": "Keeping upstream configs" }, "creationTimestamp": "2026-08-20T07:41:25Z", "generation": 1, "labels": { "control-plane": "controller-manager", "pod-template-hash": "78ffd59f5d" }, "name": "build-service-controller-manager-78ffd59f5d", "namespace": "build-service", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "build-service-controller-manager", "uid": "d360a846-1771-4ab2-83b5-e68351a48583" } ], "resourceVersion": "7838", "uid": "f4c3bef1-c3b5-4da1-b16f-cb6f33351ecf" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "controller-manager", "pod-template-hash": "78ffd59f5d" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager", "pod-template-hash": "78ffd59f5d" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8443", "--leader-elect=false", "--health-probe-bind-address=:8081", "-webhook-config-path=/mnt/webhook-config.json" ], "command": [ "/manager" ], "env": [ { "name": "PAC_NAMESPACE", "value": "tekton-pipelines" }, { "name": "PAC_WEBHOOK_URL", "value": "http://pipelines-as-code-controller.tekton-pipelines.svc.cluster.local:8080" } ], "image": "quay.io/konflux-ci/build-service:7e1a8b2cf9c580a3f3a111c75be36cd739166d5a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "1Gi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/ssl/certs/ca-custom-bundle.crt", "name": "trusted-ca", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/mnt", "name": "webhook-config", "readOnly": true }, { "mountPath": "/tmp/k8s-metrics-server/serving-certs", "name": "metrics-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "build-service-controller-manager", "serviceAccountName": "build-service-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "webhook-config.json", "path": "webhook-config.json" } ], "name": "webhook-config-44136fa355", "optional": true }, "name": "webhook-config" }, { "name": "metrics-certs", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "optional": false, "secretName": "metrics-server-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-08-20T07:29:21Z", "generation": 1, "labels": { "app": "cert-manager", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "cert-manager", "app.kubernetes.io/version": "v1.21.1", "helm.sh/chart": "cert-manager-v1.21.1", "pod-template-hash": "7f5c74cffd" }, "name": "cert-manager-7f5c74cffd", "namespace": "cert-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cert-manager", "uid": "71a99542-7f46-4688-bd49-74fed6decfac" } ], "resourceVersion": "900", "uid": "84ae60c3-fb68-4c9c-88fb-f461ec9fe5af" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "cert-manager", "pod-template-hash": "7f5c74cffd" } }, "template": { "metadata": { "annotations": { "prometheus.io/path": "/metrics", "prometheus.io/port": "9402", "prometheus.io/scrape": "true" }, "creationTimestamp": null, "labels": { "app": "cert-manager", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "cert-manager", "app.kubernetes.io/version": "v1.21.1", "helm.sh/chart": "cert-manager-v1.21.1", "pod-template-hash": "7f5c74cffd" } }, "spec": { "containers": [ { "args": [ "--v=2", "--cluster-resource-namespace=$(POD_NAMESPACE)", "--leader-election-namespace=kube-system", "--acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.21.1", "--max-concurrent-challenges=60" ], "env": [ { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/jetstack/cert-manager-controller:v1.21.1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 8, "httpGet": { "path": "/livez", "port": "http-healthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 15 }, "name": "cert-manager-controller", "ports": [ { "containerPort": 9402, "name": "http-metrics", "protocol": "TCP" }, { "containerPort": 9403, "name": "http-healthz", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "120m", "memory": "120Mi" }, "requests": { "cpu": "90m", "memory": "90Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cert-manager", "serviceAccountName": "cert-manager", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-08-20T07:29:22Z", "generation": 1, "labels": { "app": "cainjector", "app.kubernetes.io/component": "cainjector", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "cainjector", "app.kubernetes.io/version": "v1.21.1", "helm.sh/chart": "cert-manager-v1.21.1", "pod-template-hash": "67fbc9d897" }, "name": "cert-manager-cainjector-67fbc9d897", "namespace": "cert-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cert-manager-cainjector", "uid": "20a0d4d6-6d11-4c6e-9771-56cabf4c5170" } ], "resourceVersion": "914", "uid": "81874067-e7c8-4889-bee6-99696b9d8e41" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "cainjector", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "cainjector", "pod-template-hash": "67fbc9d897" } }, "template": { "metadata": { "annotations": { "prometheus.io/path": "/metrics", "prometheus.io/port": "9402", "prometheus.io/scrape": "true" }, "creationTimestamp": null, "labels": { "app": "cainjector", "app.kubernetes.io/component": "cainjector", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "cainjector", "app.kubernetes.io/version": "v1.21.1", "helm.sh/chart": "cert-manager-v1.21.1", "pod-template-hash": "67fbc9d897" } }, "spec": { "containers": [ { "args": [ "--v=2", "--leader-election-namespace=kube-system" ], "env": [ { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/jetstack/cert-manager-cainjector:v1.21.1", "imagePullPolicy": "IfNotPresent", "name": "cert-manager-cainjector", "ports": [ { "containerPort": 9402, "name": "http-metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "120m", "memory": "120Mi" }, "requests": { "cpu": "90m", "memory": "90Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cert-manager-cainjector", "serviceAccountName": "cert-manager-cainjector", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-08-20T07:29:22Z", "generation": 1, "labels": { "app": "webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/version": "v1.21.1", "helm.sh/chart": "cert-manager-v1.21.1", "pod-template-hash": "5bd9cd75b" }, "name": "cert-manager-webhook-5bd9cd75b", "namespace": "cert-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cert-manager-webhook", "uid": "71eeffa9-2197-4229-8490-b26d5eff35d4" } ], "resourceVersion": "948", "uid": "5fd6cab0-cf3c-4a36-85f9-ada2fdfdcc3e" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "webhook", "pod-template-hash": "5bd9cd75b" } }, "template": { "metadata": { "annotations": { "prometheus.io/path": "/metrics", "prometheus.io/port": "9402", "prometheus.io/scrape": "true" }, "creationTimestamp": null, "labels": { "app": "webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/version": "v1.21.1", "helm.sh/chart": "cert-manager-v1.21.1", "pod-template-hash": "5bd9cd75b" } }, "spec": { "containers": [ { "args": [ "--v=2", "--secure-port=10250", "--dynamic-serving-ca-secret-namespace=$(POD_NAMESPACE)", "--dynamic-serving-ca-secret-name=cert-manager-webhook-ca", "--dynamic-serving-dns-names=cert-manager-webhook", "--dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE)", "--dynamic-serving-dns-names=cert-manager-webhook.$(POD_NAMESPACE).svc" ], "env": [ { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/jetstack/cert-manager-webhook:v1.21.1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/livez", "port": "healthcheck", "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "cert-manager-webhook", "ports": [ { "containerPort": 10250, "name": "https", "protocol": "TCP" }, { "containerPort": 6080, "name": "healthcheck", "protocol": "TCP" }, { "containerPort": 9402, "name": "http-metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "healthcheck", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "120m", "memory": "120Mi" }, "requests": { "cpu": "90m", "memory": "90Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cert-manager-webhook", "serviceAccountName": "cert-manager-webhook", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/readiness-port": "Keeping upstream configs" }, "creationTimestamp": "2026-08-20T07:29:52Z", "generation": 1, "labels": { "app": "trust-manager", "app.kubernetes.io/instance": "trust-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "trust-manager", "app.kubernetes.io/version": "v0.24.0", "helm.sh/chart": "trust-manager-v0.24.0", "pod-template-hash": "6c4ff96554" }, "name": "trust-manager-6c4ff96554", "namespace": "cert-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "trust-manager", "uid": "26f0c420-0cf0-4a9c-b7d9-fe5939c6d1d3" } ], "resourceVersion": "1105", "uid": "19a9179d-980c-4eb4-90e6-6f5fcda42fcb" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "trust-manager", "pod-template-hash": "6c4ff96554" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "trust-manager", "app.kubernetes.io/instance": "trust-manager", "app.kubernetes.io/managed-by": "Helm", "app.kubernetes.io/name": "trust-manager", "app.kubernetes.io/version": "v0.24.0", "helm.sh/chart": "trust-manager-v0.24.0", "pod-template-hash": "6c4ff96554" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--log-format=text", "--log-level=1", "--metrics-port=9402", "--readiness-probe-port=6060", "--readiness-probe-path=/readyz", "--leader-elect=true", "--leader-election-lease-duration=15s", "--leader-election-renew-deadline=10s", "--trust-namespace=cert-manager", "--webhook-host=0.0.0.0", "--webhook-port=6443", "--webhook-certificate-dir=/tls", "--default-package-location=/packages/cert-manager-package-debian.json" ], "image": "quay.io/jetstack/trust-manager:v0.24.0", "imagePullPolicy": "IfNotPresent", "name": "trust-manager", "ports": [ { "containerPort": 6443, "name": "webhook", "protocol": "TCP" }, { "containerPort": 9402, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 6060, "scheme": "HTTP" }, "initialDelaySeconds": 3, "periodSeconds": 7, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "100m", "memory": "250Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tls", "name": "tls", "readOnly": true }, { "mountPath": "/packages", "name": "packages", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "/copyandmaybepause", "/debian-package", "/packages" ], "image": "quay.io/jetstack/trust-pkg-debian-trixie:20250419.1", "imagePullPolicy": "IfNotPresent", "name": "cert-manager-package-debian", "resources": { "limits": { "cpu": "100m", "memory": "250Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/packages", "name": "packages" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "trust-manager", "serviceAccountName": "trust-manager", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": { "sizeLimit": "50M" }, "name": "packages" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "trust-manager-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-08-20T07:41:28Z", "generation": 2, "labels": { "control-plane": "controller-manager", "pod-template-hash": "744746bf58" }, "name": "integration-service-controller-manager-744746bf58", "namespace": "integration-service", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "integration-service-controller-manager", "uid": "e1d388f8-25f0-4b3e-ba35-e74ce2ba904f" } ], "resourceVersion": "8086", "uid": "c1a45321-3b18-4b04-9c76-39916e2613d4" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "control-plane": "controller-manager", "pod-template-hash": "744746bf58" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager", "pod-template-hash": "744746bf58" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8443", "--metrics-secure=true", "--leader-elect", "--lease-duration=30s", "--leader-renew-deadline=15s", "--leader-elector-retry-period=5s" ], "command": [ "/manager" ], "env": [ { "name": "CONSOLE_URL" }, { "name": "CONSOLE_URL_TASKLOG" } ], "image": "quay.io/konflux-ci/integration-service:2db971488b15ae57a5ce66c89e64f4229c84152b", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" }, { "containerPort": 8081, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/ssl/certs/ca-custom-bundle.crt", "name": "trusted-ca", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "cert", "readOnly": true }, { "mountPath": "/tmp/k8s-metrics-server/serving-certs", "name": "metrics-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "integration-service-controller-manager", "serviceAccountName": "integration-service-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "name": "cert", "secret": { "defaultMode": 420, "secretName": "webhook-server-cert" } }, { "name": "metrics-certs", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "optional": false, "secretName": "metrics-server-cert" } } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-08-20T07:41:37Z", "generation": 1, "labels": { "control-plane": "controller-manager", "pod-template-hash": "bf44c7469" }, "name": "integration-service-controller-manager-bf44c7469", "namespace": "integration-service", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "integration-service-controller-manager", "uid": "e1d388f8-25f0-4b3e-ba35-e74ce2ba904f" } ], "resourceVersion": "8073", "uid": "7652562c-7f4f-4edd-97f9-be9c42c4ab59" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "controller-manager", "pod-template-hash": "bf44c7469" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager", "pod-template-hash": "bf44c7469" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8443", "--metrics-secure=true", "--leader-elect", "--lease-duration=30s", "--leader-renew-deadline=15s", "--leader-elector-retry-period=5s" ], "command": [ "/manager" ], "env": [ { "name": "CONSOLE_URL", "value": "https://localhost:9443/ns/{{ .Namespace }}/pipelinerun/{{ .PipelineRunName }}" }, { "name": "CONSOLE_URL_TASKLOG", "value": "https://localhost:9443/ns/{{ .Namespace }}/pipelinerun/{{ .PipelineRunName }}/logs/{{ .TaskName }}" } ], "image": "quay.io/konflux-ci/integration-service:2db971488b15ae57a5ce66c89e64f4229c84152b", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" }, { "containerPort": 8081, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/ssl/certs/ca-custom-bundle.crt", "name": "trusted-ca", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "cert", "readOnly": true }, { "mountPath": "/tmp/k8s-metrics-server/serving-certs", "name": "metrics-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "integration-service-controller-manager", "serviceAccountName": "integration-service-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "name": "cert", "secret": { "defaultMode": 420, "secretName": "webhook-server-cert" } }, { "name": "metrics-certs", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "optional": false, "secretName": "metrics-server-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/no-read-only-root-fs": "This component requires write permissions", "ignore-check.kube-linter.io/run-as-non-root": "This component requires root permissions" }, "creationTimestamp": "2026-08-20T07:41:24Z", "generation": 1, "labels": { "pod-template-hash": "7b5b98f8dc", "run": "registry" }, "name": "registry-7b5b98f8dc", "namespace": "kind-registry", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "registry", "uid": "118bfb6b-54f3-441c-a774-42f3557b28f3" } ], "resourceVersion": "7789", "uid": "9e810c5e-be57-4a99-9cec-ac7187527d42" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "pod-template-hash": "7b5b98f8dc", "run": "registry" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "pod-template-hash": "7b5b98f8dc", "run": "registry" } }, "spec": { "containers": [ { "args": [ "/etc/zot/config.json" ], "image": "quay.io/konflux-ci/zot@sha256:61591f866e659aee0f60ec4a470d62cbc63d9ebddfd62ef3c6d81c936f4405cb", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "tcpSocket": { "port": 5000 }, "timeoutSeconds": 1 }, "name": "registry", "ports": [ { "containerPort": 5000, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 5000 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "100m", "memory": "250Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/certs", "name": "certs", "readOnly": true }, { "mountPath": "/etc/zot", "name": "zot-config", "readOnly": true }, { "mountPath": "/etc/zot/auth", "name": "zot-auth", "readOnly": true }, { "mountPath": "/var/lib/registry", "name": "storage" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "certs", "secret": { "defaultMode": 420, "secretName": "local-registry-tls" } }, { "configMap": { "defaultMode": 420, "name": "zot-config" }, "name": "zot-config" }, { "name": "zot-auth", "secret": { "defaultMode": 420, "secretName": "zot-htpasswd" } }, { "emptyDir": {}, "name": "storage" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-08-20T07:41:26Z", "generation": 1, "labels": { "app": "dex", "pod-template-hash": "cd47487ff" }, "name": "dex-cd47487ff", "namespace": "konflux-ui", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "dex", "uid": "2804df56-d02d-4d0d-9922-166f7aab6094" } ], "resourceVersion": "8005", "uid": "81f98576-c1c9-4a2e-8626-e364ccfff797" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "dex", "pod-template-hash": "cd47487ff" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "dex", "pod-template-hash": "cd47487ff" } }, "spec": { "containers": [ { "command": [ "/usr/local/bin/run-dex.sh" ], "env": [ { "name": "TOKEN_PATH", "value": "/var/run/secrets/konflux-ci.dev/serviceaccount/token" }, { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_SERVICE_ACCOUNT", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.serviceAccountName" } } }, { "name": "CLIENT_SECRET", "valueFrom": { "secretKeyRef": { "key": "client-secret", "name": "oauth2-proxy-client-secret" } } } ], "image": "quay.io/konflux-ci/dex@sha256:1872ae4a4d481763acce6a66e3e1f0423909a9927797dd27fe9e5c53ae2bb5dd", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/ready", "port": "telemetry", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "dex", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" }, { "containerPort": 5558, "name": "telemetry", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/ready", "port": "telemetry", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "50m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp" }, { "mountPath": "/var/run/secrets/konflux-ci.dev/serviceaccount/", "name": "dex-token" }, { "mountPath": "/usr/local/bin/run-dex.sh", "name": "run-dex", "subPath": "run-dex.sh" }, { "mountPath": "/etc/dex/cfg", "name": "dex" }, { "mountPath": "/etc/dex/tls", "name": "tls" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "dex", "serviceAccountName": "dex", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": { "medium": "Memory" }, "name": "tmp" }, { "name": "dex-token", "projected": { "defaultMode": 288, "sources": [ { "serviceAccountToken": { "expirationSeconds": 600, "path": "token" } } ] } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "config.yaml", "path": "config.yaml" } ], "name": "dex-a1e0d64847" }, "name": "dex" }, { "configMap": { "defaultMode": 493, "items": [ { "key": "run-dex.sh", "path": "run-dex.sh" } ], "name": "run-dex-f654f6k7th" }, "name": "run-dex" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "dex-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/no-anti-affinity": "Using topologySpreadConstraints" }, "creationTimestamp": "2026-08-20T07:41:26Z", "generation": 1, "labels": { "app": "proxy", "pod-template-hash": "5dbf69d95d" }, "name": "proxy-5dbf69d95d", "namespace": "konflux-ui", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "proxy", "uid": "77b47fce-db6f-4205-855c-22f1568b3bd4" } ], "resourceVersion": "8553", "uid": "e1746d8e-5389-421b-a0a0-6b711b236e28" }, "spec": { "minReadySeconds": 30, "replicas": 1, "selector": { "matchLabels": { "app": "proxy", "pod-template-hash": "5dbf69d95d" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "proxy", "pod-template-hash": "5dbf69d95d" } }, "spec": { "containers": [ { "command": [ "caddy", "run", "--config", "/etc/caddy/Caddyfile", "--adapter", "caddyfile" ], "image": "quay.io/konflux-ci/reverse-proxy@sha256:5fbb9e25501aa025693dccdd13f954a38a261cb6febeb74cea1893a3d8edf172", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 60, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "reverse-proxy", "ports": [ { "containerPort": 9443, "name": "web-tls", "protocol": "TCP" }, { "containerPort": 2112, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "300m", "memory": "256Mi" }, "requests": { "cpu": "30m", "memory": "128Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/caddy/Caddyfile", "name": "proxy-caddyfile", "readOnly": true, "subPath": "Caddyfile" }, { "mountPath": "/mnt/serving-cert", "name": "serving-cert", "readOnly": true }, { "mountPath": "/var/run/secrets/konflux-ci.dev/serviceaccount", "name": "kube-api-token", "readOnly": true }, { "mountPath": "/var/run/secrets/konflux-ci.dev/backend", "name": "backend-token", "readOnly": true }, { "mountPath": "/mnt/caddy-snippets", "name": "caddy-snippets", "readOnly": true }, { "mountPath": "/mnt/cluster-ca", "name": "cluster-ca", "readOnly": true }, { "mountPath": "/mnt/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/opt/app-root/src/static-content", "name": "static-content" }, { "mountPath": "/opt/app-root/src/segment", "name": "segment-bridge-config" }, { "mountPath": "/mnt/watson-config", "name": "watson-config", "readOnly": true }, { "mountPath": "/data", "name": "caddy-data" }, { "mountPath": "/config", "name": "caddy-config" } ] }, { "env": [ { "name": "OAUTH2_PROXY_CLIENT_SECRET", "valueFrom": { "secretKeyRef": { "key": "client-secret", "name": "oauth2-proxy-client-secret" } } }, { "name": "OAUTH2_PROXY_COOKIE_SECRET", "valueFrom": { "secretKeyRef": { "key": "cookie-secret", "name": "oauth2-proxy-cookie-secret" } } }, { "name": "OAUTH2_PROXY_PROVIDER", "value": "oidc" }, { "name": "OAUTH2_PROXY_PROVIDER_DISPLAY_NAME", "value": "Dex OIDC" }, { "name": "OAUTH2_PROXY_CLIENT_ID", "value": "oauth2-proxy" }, { "name": "OAUTH2_PROXY_HTTP_ADDRESS", "value": "127.0.0.1:6000" }, { "name": "OAUTH2_PROXY_SKIP_PROVIDER_BUTTON", "value": "true" }, { "name": "OAUTH2_PROXY_PROMPT", "value": "login" }, { "name": "OAUTH2_PROXY_REDIRECT_URL", "value": "https://localhost:9443/oauth2/callback" }, { "name": "OAUTH2_PROXY_OIDC_ISSUER_URL", "value": "https://localhost:9443/idp/" }, { "name": "OAUTH2_PROXY_LOGIN_URL", "value": "https://localhost:9443/idp/auth" }, { "name": "OAUTH2_PROXY_SKIP_OIDC_DISCOVERY", "value": "true" }, { "name": "OAUTH2_PROXY_REDEEM_URL", "value": "https://dex.konflux-ui.svc.cluster.local:9443/idp/token" }, { "name": "OAUTH2_PROXY_OIDC_JWKS_URL", "value": "https://dex.konflux-ui.svc.cluster.local:9443/idp/keys" }, { "name": "OAUTH2_PROXY_COOKIE_SECURE", "value": "true" }, { "name": "OAUTH2_PROXY_COOKIE_NAME", "value": "__Host-konflux-ci-cookie" }, { "name": "OAUTH2_PROXY_EMAIL_DOMAINS", "value": "*" }, { "name": "OAUTH2_PROXY_SET_XAUTHREQUEST", "value": "true" }, { "name": "OAUTH2_PROXY_SKIP_JWT_BEARER_TOKENS", "value": "true" }, { "name": "OAUTH2_PROXY_SCOPE", "value": "openid email profile groups" }, { "name": "OAUTH2_PROXY_PROVIDER_CA_FILES", "value": "/etc/ssl/certs/ca-bundle.crt" }, { "name": "OAUTH2_PROXY_WHITELIST_DOMAINS", "value": "localhost:9443" } ], "image": "registry.access.redhat.com/hi/oauth2-proxy@sha256:fa9885ad56745ae92ff8d28f4decba59c39be01396ff71a3a0e0f5689a91554d", "imagePullPolicy": "IfNotPresent", "name": "oauth2-proxy", "ports": [ { "containerPort": 6000, "name": "web", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "300m", "memory": "256Mi" }, "requests": { "cpu": "30m", "memory": "128Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/ssl/certs", "name": "ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "cp", "-R", "/opt/app-root/src/.", "/mnt/static-content/" ], "image": "quay.io/konflux-ci/konflux-ui@sha256:d96400f379cc5e3c01beb3016fa746b4c448955ad95632c6f4b055a6c81c6a9f", "imagePullPolicy": "IfNotPresent", "name": "copy-static-content", "resources": { "limits": { "cpu": "50m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/mnt/static-content", "name": "static-content" } ] }, { "command": [ "sh", "/var/run/scripts/konflux-ci.dev/generate-proxy-config.sh" ], "image": "quay.io/konflux-ci/konflux-ui@sha256:d96400f379cc5e3c01beb3016fa746b4c448955ad95632c6f4b055a6c81c6a9f", "imagePullPolicy": "IfNotPresent", "name": "generate-proxy-config", "resources": { "limits": { "cpu": "50m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/mnt/caddy-templates", "name": "caddy-templates", "readOnly": true }, { "mountPath": "/mnt/caddy-snippets", "name": "caddy-snippets" }, { "mountPath": "/var/run/scripts/konflux-ci.dev", "name": "generate-proxy-config-script", "readOnly": true }, { "mountPath": "/mnt/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/opt/app-root/src/static-content", "name": "static-content" } ] } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "proxy", "serviceAccountName": "proxy", "terminationGracePeriodSeconds": 30, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "app": "proxy" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "ScheduleAnyway" } ], "volumes": [ { "name": "ca-bundle", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "ca.crt", "path": "ca-bundle.crt" } ], "name": "oauth2-proxy-cert" } } ] } }, { "configMap": { "defaultMode": 488, "items": [ { "key": "generate-proxy-config.sh", "path": "generate-proxy-config.sh" } ], "name": "proxy-generate-config-hf55g9gkh2" }, "name": "generate-proxy-config-script" }, { "name": "kube-api-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "expirationSeconds": 600, "path": "token" } } ] } }, { "name": "backend-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "konflux-backend", "expirationSeconds": 600, "path": "token" } } ] } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "Caddyfile", "path": "Caddyfile" } ], "name": "proxy-caddyfile-45hm8d8b52" }, "name": "proxy-caddyfile" }, { "configMap": { "defaultMode": 420, "name": "proxy-caddy-templates-46ctfh6tk7" }, "name": "caddy-templates" }, { "emptyDir": {}, "name": "caddy-snippets" }, { "emptyDir": {}, "name": "caddy-data" }, { "emptyDir": {}, "name": "caddy-config" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "name": "cluster-ca", "secret": { "defaultMode": 420, "items": [ { "key": "ca.crt", "path": "ca-bundle.crt" } ], "secretName": "cluster-root-ref" } }, { "configMap": { "defaultMode": 420, "name": "openshift-service-ca.crt", "optional": true }, "name": "service-ca" }, { "emptyDir": {}, "name": "static-content" }, { "name": "segment-bridge-config", "secret": { "defaultMode": 420, "items": [ { "key": "key", "path": "key" }, { "key": "url", "path": "url" } ], "optional": true, "secretName": "segment-bridge-config" } }, { "name": "watson-config", "secret": { "defaultMode": 420, "optional": true, "secretName": "watson-config" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-08-20T07:25:56Z", "generation": 1, "labels": { "k8s-app": "kube-dns", "pod-template-hash": "668d6bf9bc" }, "name": "coredns-668d6bf9bc", "namespace": "kube-system", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "coredns", "uid": "8d1a4be6-8eab-45d4-b2ef-a908de4f8f9d" } ], "resourceVersion": "459", "uid": "f72a4e10-9fa9-4909-a9b7-4d374a0e774d" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "k8s-app": "kube-dns", "pod-template-hash": "668d6bf9bc" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "k8s-app": "kube-dns", "pod-template-hash": "668d6bf9bc" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "k8s-app", "operator": "In", "values": [ "kube-dns" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-conf", "/etc/coredns/Corefile" ], "image": "registry.k8s.io/coredns/coredns:v1.11.3", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/health", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "coredns", "ports": [ { "containerPort": 53, "name": "dns", "protocol": "UDP" }, { "containerPort": 53, "name": "dns-tcp", "protocol": "TCP" }, { "containerPort": 9153, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": 8181, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "memory": "170Mi" }, "requests": { "cpu": "100m", "memory": "70Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "add": [ "NET_BIND_SERVICE" ], "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/coredns", "name": "config-volume", "readOnly": true } ] } ], "dnsPolicy": "Default", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "coredns", "serviceAccountName": "coredns", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/control-plane" } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "Corefile", "path": "Corefile" } ], "name": "coredns" }, "name": "config-volume" } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-08-20T07:25:56Z", "generation": 1, "labels": { "app": "local-path-provisioner", "pod-template-hash": "7dc846544d" }, "name": "local-path-provisioner-7dc846544d", "namespace": "local-path-storage", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "local-path-provisioner", "uid": "521d6117-5aed-4443-81b4-a67752eda3dc" } ], "resourceVersion": "450", "uid": "9d21ce73-ae49-4126-b3c4-f4f880811cfb" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "local-path-provisioner", "pod-template-hash": "7dc846544d" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "local-path-provisioner", "pod-template-hash": "7dc846544d" } }, "spec": { "containers": [ { "command": [ "local-path-provisioner", "--debug", "start", "--helper-image", "docker.io/kindest/local-path-helper:v20241212-8ac705d0", "--config", "/etc/config/config.json" ], "env": [ { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "CONFIG_MOUNT_PATH", "value": "/etc/config/" } ], "image": "docker.io/kindest/local-path-provisioner:v20250214-acbabc1a", "imagePullPolicy": "IfNotPresent", "name": "local-path-provisioner", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config/", "name": "config-volume" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "local-path-provisioner-service-account", "serviceAccountName": "local-path-provisioner-service-account", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/control-plane", "operator": "Equal" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Equal" } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "local-path-config" }, "name": "config-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/no-anti-affinity": "Using topologySpreadConstraints" }, "creationTimestamp": "2026-08-20T07:41:24Z", "generation": 1, "labels": { "apps": "namespace-lister", "pod-template-hash": "69cb5765d" }, "name": "namespace-lister-69cb5765d", "namespace": "namespace-lister", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "namespace-lister", "uid": "e83e8ff8-3311-4930-9b94-f0b447d7f3f2" } ], "resourceVersion": "7465", "uid": "65d53458-f910-41d7-bd77-ce3cb8f2a085" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "apps": "namespace-lister", "pod-template-hash": "69cb5765d" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "apps": "namespace-lister", "pod-template-hash": "69cb5765d" } }, "spec": { "containers": [ { "args": [ "-enable-tls", "-cert-path=/var/tls/tls.crt", "-key-path=/var/tls/tls.key" ], "env": [ { "name": "CACHE_NAMESPACE_LABELSELECTOR", "value": "konflux-ci.dev/type=tenant" }, { "name": "AUTH_USERNAME_HEADER", "value": "X-User" }, { "name": "AUTH_GROUPS_HEADER", "value": "X-Group" } ], "image": "quay.io/konflux-ci/namespace-lister@sha256:c845afc8047de98d4c5bcaaa1429a7dceeae1e344c4cebba680c40a164f1c134", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 1, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "namespace-lister", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 1, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "200m", "memory": "256Mi" }, "requests": { "cpu": "20m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "namespace-lister", "serviceAccountName": "namespace-lister", "terminationGracePeriodSeconds": 60, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "apps": "namespace-lister" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "ScheduleAnyway" } ], "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "secretName": "namespace-lister-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/liveness-port": "Keeping upstream configs", "ignore-check.kube-linter.io/readiness-port": "Keeping upstream configs" }, "creationTimestamp": "2026-08-20T07:41:31Z", "generation": 1, "labels": { "control-plane": "controller-manager", "pod-template-hash": "74987597b" }, "name": "release-service-controller-manager-74987597b", "namespace": "release-service", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "release-service-controller-manager", "uid": "51ffddcc-fd8c-491b-bb9a-134afa99ac80" } ], "resourceVersion": "8110", "uid": "83d37cbe-2481-4b68-9ad6-6663836621ca" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "controller-manager", "pod-template-hash": "74987597b" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager", "pod-template-hash": "74987597b" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8443", "--metrics-secure=true", "--leader-elect=false" ], "command": [ "/manager" ], "env": [ { "name": "DEFAULT_RELEASE_PVC", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_RELEASE_PVC", "name": "release-service-manager-properties", "optional": true } } }, { "name": "DEFAULT_RELEASE_WORKSPACE_NAME", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_RELEASE_WORKSPACE_NAME", "name": "release-service-manager-properties", "optional": true } } }, { "name": "DEFAULT_RELEASE_WORKSPACE_SIZE", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_RELEASE_WORKSPACE_SIZE", "name": "release-service-manager-properties", "optional": true } } }, { "name": "MAX_CONCURRENT_RECONCILES", "value": "10" }, { "name": "SERVICE_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "GITHUB_TOKEN", "valueFrom": { "secretKeyRef": { "key": "token", "name": "release-service-github-token", "optional": true } } } ], "image": "quay.io/redhat-user-workloads/rhtap-release-2-tenant/release-service/release-service:on-pr-831d30663f6567e11c9f39d78b3f0cffb6a43463", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "cert", "readOnly": true }, { "mountPath": "/tmp/k8s-metrics-server/serving-certs", "name": "metrics-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "release-service-controller-manager", "serviceAccountName": "release-service-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "name": "cert", "secret": { "defaultMode": 420, "secretName": "webhook-server-cert" } }, { "name": "metrics-certs", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "optional": false, "secretName": "metrics-server-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-08-20T07:37:02Z", "generation": 1, "labels": { "app": "gosmee-client", "pod-template-hash": "7d67747785" }, "name": "gosmee-client-7d67747785", "namespace": "smee-client", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "gosmee-client", "uid": "ebbf2ce5-cddf-4465-809d-2fc93009b478" } ], "resourceVersion": "4956", "uid": "2173b7cd-2276-4a86-9292-fccdf84ff266" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "gosmee-client", "pod-template-hash": "7d67747785" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "gosmee-client", "pod-template-hash": "7d67747785" } }, "spec": { "containers": [ { "args": [ "client", "https://smee.io/zGozGrEl6kOiNinw3FUp9Wl6x1ijZleBAsVKAj3i", "http://localhost:8080" ], "image": "ghcr.io/chmouel/gosmee:v0.32.0", "imagePullPolicy": "Always", "livenessProbe": { "exec": { "command": [ "/shared/check-smee-health.sh" ] }, "failureThreshold": 2, "initialDelaySeconds": 20, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "gosmee", "resources": { "limits": { "cpu": "100m", "memory": "32Mi" }, "requests": { "cpu": "10m", "memory": "32Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "shared-health" } ] }, { "env": [ { "name": "DOWNSTREAM_SERVICE_URL", "value": "http://pipelines-as-code-controller.tekton-pipelines:8080" }, { "name": "SMEE_CHANNEL_URL", "value": "https://smee.io/zGozGrEl6kOiNinw3FUp9Wl6x1ijZleBAsVKAj3i" }, { "name": "INSECURE_SKIP_VERIFY", "value": "true" }, { "name": "HEALTH_CHECK_TIMEOUT_SECONDS", "value": "20" } ], "image": "quay.io/konflux-ci/smee-sidecar:latest@sha256:15e35903b492a4669fafe3045693801451599561643ed7efaf2935c0140d20cc", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "exec": { "command": [ "/shared/check-sidecar-health.sh" ] }, "failureThreshold": 2, "initialDelaySeconds": 10, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "health-check-sidecar", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" }, { "containerPort": 9100, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "100m", "memory": "32Mi" }, "requests": { "cpu": "10m", "memory": "32Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "shared-health" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "shared-health" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-08-20T07:30:31Z", "generation": 1, "labels": { "app": "tekton-operator", "name": "tekton-operator", "pod-template-hash": "65cb65856f" }, "name": "tekton-operator-65cb65856f", "namespace": "tekton-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-operator", "uid": "098e9fb3-b5fa-4b21-bba2-38348b605eab" } ], "resourceVersion": "1282", "uid": "6981e92b-1183-4034-b072-387850cda017" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "tekton-operator", "pod-template-hash": "65cb65856f" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-operator", "name": "tekton-operator", "pod-template-hash": "65cb65856f" } }, "spec": { "containers": [ { "args": [ "-controllers", "tektonconfig,tektonpipeline,tektontrigger,tektonchain,tektonresult,tektondashboard,manualapprovalgate,tektonpruner,tektonscheduler,tektonmulticlusterproxyaae,openshiftpipelinesascode", "-unique-process-name", "tekton-operator-lifecycle" ], "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "tekton-operator" }, { "name": "IMAGE_PIPELINES_PROXY", "value": "ghcr.io/tektoncd/operator/proxy-webhook-f6167da7bc41b96a27c5529f850e63d1:v0.81.0@sha256:b7c7de05756e63f38968e81b111d5d5727ca6803fc61463a56e9f73dde9ae42d" }, { "name": "IMAGE_JOB_PRUNER_TKN", "value": "ghcr.io/tektoncd/plumbing/tkn@sha256:233de6c8b8583a34c2379fa98d42dba739146c9336e8d41b66030484357481ed" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "VERSION", "value": "v0.81.0" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-config-observability" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-controller-config-leader-election" }, { "name": "AUTOINSTALL_COMPONENTS", "valueFrom": { "configMapKeyRef": { "key": "AUTOINSTALL_COMPONENTS", "name": "tekton-config-defaults" } } }, { "name": "DEFAULT_TARGET_NAMESPACE", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_TARGET_NAMESPACE", "name": "tekton-config-defaults" } } } ], "image": "ghcr.io/tektoncd/operator/operator-303303c315a48490ba6517859ef65b77:v0.81.0@sha256:a2559d7f9289ba3974f587c219d161c4f3cc9d41bc2876233415874077b6c55e", "imagePullPolicy": "IfNotPresent", "name": "tekton-operator-lifecycle", "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" }, { "args": [ "-controllers", "tektoninstallerset", "-unique-process-name", "tekton-operator-cluster-operations" ], "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "tekton-operator" }, { "name": "PROFILING_PORT", "value": "9009" }, { "name": "VERSION", "value": "v0.81.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-controller-config-leader-election" } ], "image": "ghcr.io/tektoncd/operator/operator-303303c315a48490ba6517859ef65b77:v0.81.0@sha256:a2559d7f9289ba3974f587c219d161c4f3cc9d41bc2876233415874077b6c55e", "imagePullPolicy": "IfNotPresent", "name": "tekton-operator-cluster-operations", "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "tekton-operator", "serviceAccountName": "tekton-operator", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/env-var-secret": "This is the name of the secret rather than the secret" }, "creationTimestamp": "2026-08-20T07:30:31Z", "generation": 1, "labels": { "app": "tekton-operator", "name": "tekton-operator-webhook", "pod-template-hash": "5ddf9c7846" }, "name": "tekton-operator-webhook-5ddf9c7846", "namespace": "tekton-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-operator-webhook", "uid": "daa1c2df-00ea-42fd-bf6c-d426083f6c91" } ], "resourceVersion": "1671", "uid": "d9a5ce44-2315-405a-b023-8652972b5d67" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "tekton-operator-webhook", "pod-template-hash": "5ddf9c7846" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-operator", "name": "tekton-operator-webhook", "pod-template-hash": "5ddf9c7846" } }, "spec": { "containers": [ { "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-webhook-config-leader-election" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-operator-webhook" }, { "name": "WEBHOOK_SECRET_NAME", "value": "tekton-operator-webhook-certs" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" } ], "image": "ghcr.io/tektoncd/operator/webhook-f2bb711aa8f0c0892856a4cbf6d9ddd8:v0.81.0@sha256:3f513319e5c79bb5dae64772d1629565a64cdf5a257005aac0bb5ca2ab6c9c5e", "imagePullPolicy": "IfNotPresent", "name": "tekton-operator-webhook", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "100m", "memory": "100Mi" }, "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "tekton-operator", "serviceAccountName": "tekton-operator", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-08-20T07:35:12Z", "generation": 1, "labels": { "app": "pipelines-as-code-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.50.0", "operator.tekton.dev/deployment-spec-applied-hash": "e0503010c9652edffc36f142c2f3f6ce", "pod-template-hash": "7bf898c4bf" }, "name": "pipelines-as-code-controller-7bf898c4bf", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-as-code-controller", "uid": "af58c164-2139-43da-892b-ac4f592d6f66" } ], "resourceVersion": "3962", "uid": "00b09232-bee6-46e7-ade8-71d1bbd53cb3" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "pod-template-hash": "7bf898c4bf" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-as-code-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.50.0", "operator.tekton.dev/deployment-spec-applied-hash": "e0503010c9652edffc36f142c2f3f6ce", "pod-template-hash": "7bf898c4bf" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "pipelines-as-code-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "K_SINK_TIMEOUT", "value": "30" }, { "name": "PAC_CONTROLLER_CONFIGMAP", "value": "pipelines-as-code" }, { "name": "PAC_CONTROLLER_LABEL", "value": "default" }, { "name": "PAC_CONTROLLER_SECRET", "value": "pipelines-as-code-secret" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TLS_CERT", "value": "cert" }, { "name": "TLS_CIPHER_SUITES", "value": "TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256" }, { "name": "TLS_CURVE_PREFERENCES", "value": "X25519,P256" }, { "name": "TLS_KEY", "value": "key" }, { "name": "TLS_MIN_VERSION" }, { "name": "TLS_SECRET_NAME", "value": "pipelines-as-code-tls-secret" } ], "image": "ghcr.io/tektoncd/pipelines-as-code/pipelines-as-code-controller:v0.50.0", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "api", "scheme": "HTTP" }, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "pac-controller", "ports": [ { "containerPort": 8082, "name": "api", "protocol": "TCP" }, { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "api", "scheme": "HTTP" }, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/pipelines-as-code/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-controller", "serviceAccountName": "pipelines-as-code-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "pipelines-as-code-tls-secret" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-08-20T07:35:13Z", "generation": 1, "labels": { "app": "pipelines-as-code-watcher", "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.50.0", "operator.tekton.dev/deployment-spec-applied-hash": "bfc83fb04aef8b99681533990b1ec942", "pod-template-hash": "6d99b47db" }, "name": "pipelines-as-code-watcher-6d99b47db", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-as-code-watcher", "uid": "3ba3ec37-4a37-43f0-8358-6f7e5eb423b6" } ], "resourceVersion": "4119", "uid": "096e5b5e-ae19-47d5-a2b5-7ffa1f7eb91b" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "pod-template-hash": "6d99b47db" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-as-code-watcher", "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.50.0", "operator.tekton.dev/deployment-spec-applied-hash": "bfc83fb04aef8b99681533990b1ec942", "pod-template-hash": "6d99b47db" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "pac-watcher-config-leader-election" }, { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "pipelines-as-code-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipelinesascode" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/pipelines-as-code/pipelines-as-code-watcher:v0.50.0", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "pac-watcher", "ports": [ { "containerPort": 8080, "name": "probes", "protocol": "TCP" }, { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-watcher", "serviceAccountName": "pipelines-as-code-watcher", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-08-20T07:35:13Z", "generation": 1, "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.50.0", "operator.tekton.dev/deployment-spec-applied-hash": "461f82a085db12e094d7f9cbb9552030", "pod-template-hash": "74485c5886" }, "name": "pipelines-as-code-webhook-74485c5886", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-as-code-webhook", "uid": "be0ad1fe-51d7-4a8d-9b60-13c2e58338f3" } ], "resourceVersion": "4105", "uid": "4ae0fa48-2b0b-41c4-a2ac-9d375adbd709" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "pod-template-hash": "74485c5886" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.50.0", "operator.tekton.dev/deployment-spec-applied-hash": "461f82a085db12e094d7f9cbb9552030", "pod-template-hash": "74485c5886" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "pac-webhook-config-leader-election" }, { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipelinesascode" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SECRET_NAME", "value": "pipelines-as-code-webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "pipelines-as-code-webhook" } ], "image": "ghcr.io/tektoncd/pipelines-as-code/pipelines-as-code-webhook:v0.50.0", "imagePullPolicy": "IfNotPresent", "name": "pac-webhook", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" }, { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-webhook", "serviceAccountName": "pipelines-as-code-webhook", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-08-20T07:36:19Z", "generation": 1, "labels": { "app": "tekton-chains-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "28dfb38995d18a3da3bb995c2a1d10d4", "pipeline.tekton.dev/release": "v0.29.0", "pod-template-hash": "54fbc45b4", "version": "v0.29.0" }, "name": "tekton-chains-controller-54fbc45b4", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-chains-controller", "uid": "e4ff0482-a40f-410b-b2c6-4f22e2752b44" } ], "resourceVersion": "4476", "uid": "c543fa46-3d98-44aa-aac9-1dffc8ed84ef" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "pod-template-hash": "54fbc45b4" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-chains-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "28dfb38995d18a3da3bb995c2a1d10d4", "pipeline.tekton.dev/release": "v0.29.0", "pod-template-hash": "54fbc45b4", "version": "v0.29.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-chains-config-leader-election" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-chains-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/chains" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TUF_ROOT", "value": "/home/nonroot/.sigstore/root" } ], "image": "ghcr.io/tektoncd/chains/github.com/tektoncd/chains/cmd/controller:v0.29.0@sha256:b1f1e5790243d13e2026e5a1af88ad3e7b798a9cddd2dcbef23289261f385421", "imagePullPolicy": "IfNotPresent", "name": "tekton-chains-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsUser": 65532 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/signing-secrets", "name": "signing-secrets" }, { "mountPath": "/var/run/sigstore/cosign", "name": "oidc-info" }, { "mountPath": "/home/nonroot/.sigstore", "name": "sigstore-cache" }, { "mountPath": "/etc/ssl/certs", "name": "trusted-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-chains-controller", "serviceAccountName": "tekton-chains-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "signing-secrets", "secret": { "defaultMode": 420, "secretName": "signing-secrets" } }, { "emptyDir": { "medium": "Memory", "sizeLimit": "50Mi" }, "name": "sigstore-cache" }, { "name": "oidc-info", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "sigstore", "expirationSeconds": 600, "path": "oidc-token" } } ] } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-08-20T07:33:31Z", "generation": 2, "labels": { "app": "tekton-chains-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "747aa814d88060292faf54221205bce9", "pipeline.tekton.dev/release": "v0.29.0", "pod-template-hash": "5c76df8bb5", "version": "v0.29.0" }, "name": "tekton-chains-controller-5c76df8bb5", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-chains-controller", "uid": "e4ff0482-a40f-410b-b2c6-4f22e2752b44" } ], "resourceVersion": "4487", "uid": "fd89d737-c81f-4781-8070-e0d1abaa8c61" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "pod-template-hash": "5c76df8bb5" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-chains-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "747aa814d88060292faf54221205bce9", "pipeline.tekton.dev/release": "v0.29.0", "pod-template-hash": "5c76df8bb5", "version": "v0.29.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-chains-config-leader-election" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-chains-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/chains" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TUF_ROOT", "value": "/home/nonroot/.sigstore/root" } ], "image": "ghcr.io/tektoncd/chains/github.com/tektoncd/chains/cmd/controller:v0.29.0@sha256:b1f1e5790243d13e2026e5a1af88ad3e7b798a9cddd2dcbef23289261f385421", "imagePullPolicy": "IfNotPresent", "name": "tekton-chains-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsUser": 65532 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/signing-secrets", "name": "signing-secrets" }, { "mountPath": "/var/run/sigstore/cosign", "name": "oidc-info" }, { "mountPath": "/home/nonroot/.sigstore", "name": "sigstore-cache" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-chains-controller", "serviceAccountName": "tekton-chains-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "signing-secrets", "secret": { "defaultMode": 420, "secretName": "signing-secrets" } }, { "emptyDir": { "medium": "Memory", "sizeLimit": "50Mi" }, "name": "sigstore-cache" }, { "name": "oidc-info", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "sigstore", "expirationSeconds": 600, "path": "oidc-token" } } ] } } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-08-20T07:31:05Z", "generation": 1, "labels": { "app": "tekton-events-controller", "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.15.0", "operator.tekton.dev/deployment-spec-applied-hash": "8f28b2cdea98dac626dc9329bc33c9d0", "pipeline.tekton.dev/release": "v1.15.0", "pod-template-hash": "755b9f7c89", "version": "v1.15.0" }, "name": "tekton-events-controller-755b9f7c89", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-events-controller", "uid": "0f6b501c-73b5-4b7b-967d-972726d8beee" } ], "resourceVersion": "1888", "uid": "f3703d2a-c4ac-4fcf-b2f2-d3276f43c6d0" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "755b9f7c89" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-events-controller", "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.15.0", "operator.tekton.dev/deployment-spec-applied-hash": "8f28b2cdea98dac626dc9329bc33c9d0", "pipeline.tekton.dev/release": "v1.15.0", "pod-template-hash": "755b9f7c89", "version": "v1.15.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } } }, "containers": [ { "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-events" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SSL_CERT_DIR", "value": "/etc/ssl/certs" }, { "name": "SSL_CERT_FILE", "value": "/etc/config-registry-cert/cert" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/pipeline/events-a9042f7efb0cbade2a868a1ee5ddd52c:v1.15.0@sha256:050f4ae0fee5d2f9b9a9b9a6270b131c0b0ecd8a1c24707746aa18d10b435604", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "tekton-events-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config-logging", "name": "config-logging" }, { "mountPath": "/etc/config-registry-cert", "name": "config-registry-cert" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-events-controller", "serviceAccountName": "tekton-events-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "config-logging" }, "name": "config-logging" }, { "configMap": { "defaultMode": 420, "name": "config-registry-cert" }, "name": "config-registry-cert" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-08-20T07:31:05Z", "generation": 1, "labels": { "app": "tekton-operator", "name": "tekton-operator-proxy-webhook", "operator.tekton.dev/deployment-spec-applied-hash": "78cd2631dce112f361012756ece58b11", "pod-template-hash": "6cdcc669c5" }, "name": "tekton-operator-proxy-webhook-6cdcc669c5", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-operator-proxy-webhook", "uid": "32aaf994-0af3-414a-a4a3-80d519a3ac70" } ], "resourceVersion": "2099", "uid": "6e894484-7468-4e7f-bd26-4f1bcc54f8a8" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "tekton-operator-proxy-webhook", "pod-template-hash": "6cdcc669c5" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-operator", "name": "tekton-operator-proxy-webhook", "operator.tekton.dev/deployment-spec-applied-hash": "78cd2631dce112f361012756ece58b11", "pod-template-hash": "6cdcc669c5" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-proxy-webhook-config-leader-election" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SECRET_NAME", "value": "proxy-webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-operator-proxy-webhook" } ], "image": "ghcr.io/tektoncd/operator/proxy-webhook-f6167da7bc41b96a27c5529f850e63d1:v0.81.0@sha256:b7c7de05756e63f38968e81b111d5d5727ca6803fc61463a56e9f73dde9ae42d", "imagePullPolicy": "IfNotPresent", "name": "proxy", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "500Mi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-operators-proxy-webhook", "serviceAccountName": "tekton-operators-proxy-webhook", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-08-20T07:31:05Z", "generation": 1, "labels": { "app": "tekton-pipelines-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.15.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "5a38e6922ff8abdf10cc974d535dbf1a", "pipeline.tekton.dev/release": "v1.15.0", "pod-template-hash": "6cf754ffdf", "version": "v1.15.0" }, "name": "tekton-pipelines-controller-6cf754ffdf", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-pipelines-controller", "uid": "56fab3a2-5b31-4957-964c-06bb57725e7b" } ], "resourceVersion": "1825", "uid": "fb9749fd-6416-4460-8160-44e87754ffe2" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "6cf754ffdf" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.15.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "5a38e6922ff8abdf10cc974d535dbf1a", "pipeline.tekton.dev/release": "v1.15.0", "pod-template-hash": "6cf754ffdf", "version": "v1.15.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-entrypoint-image", "ghcr.io/tektoncd/pipeline/entrypoint-bff0a22da108bc2f16c818c97641a296:v1.15.0@sha256:1ae5944a51f5c5f19e575de5abf268ea7a49a3a54bdad411cf27e3142af5f5c0", "-nop-image", "ghcr.io/tektoncd/pipeline/nop-8eac7c133edad5df719dc37b36b62482:v1.15.0@sha256:f49260b33c3142f8224d26d6204b15b96b312997a169bc79fe4792981af9580c", "-sidecarlogresults-image", "ghcr.io/tektoncd/pipeline/sidecarlogresults-7501c6a20d741631510a448b48ab098f:v1.15.0@sha256:9dbe5ed48cce1324daa49784c6fc729d8b62a7c0d15c9656126bdada1a870b98", "-workingdirinit-image", "ghcr.io/tektoncd/pipeline/workingdirinit-0c558922ec6a1b739e550e349f2d5fc1:v1.15.0@sha256:fc38f8bc3c196e8f7cc2c22ea19194afd093175a23c9ab1b900cb150fd38307f", "-shell-image", "cgr.dev/chainguard/busybox@sha256:19f02276bf8dbdd62f069b922f10c65262cc34b710eea26ff928129a736be791", "-shell-image-win", "mcr.microsoft.com/powershell:nanoserver@sha256:b6d5ff841b78bdf2dfed7550000fd4f3437385b8fa686ec0f010be24777654d6", "-disable-ha=false" ], "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults" }, { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-controller" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "CONFIG_SPIRE", "value": "config-spire" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipeline" }, { "name": "SSL_CERT_DIR", "value": "/etc/ssl/certs" }, { "name": "SSL_CERT_FILE", "value": "/etc/config-registry-cert/cert" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/pipeline/controller-10a3e32792f33651396d02b6855a6e36:v1.15.0@sha256:ed33d9696b882716ab58062ec928828d5c15f4f9bac94661fb6b76ea5d27ff17", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "tekton-pipelines-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config-logging", "name": "config-logging" }, { "mountPath": "/etc/config-registry-cert", "name": "config-registry-cert" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-controller", "serviceAccountName": "tekton-pipelines-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "config-logging" }, "name": "config-logging" }, { "configMap": { "defaultMode": 420, "name": "config-registry-cert" }, "name": "config-registry-cert" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-08-20T07:31:05Z", "generation": 2, "labels": { "app": "tekton-pipelines-resolvers", "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.15.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "04bc02223f3631d849a6237885ed0465", "pipeline.tekton.dev/release": "v1.15.0", "pod-template-hash": "6bb6b969d", "version": "v1.15.0" }, "name": "tekton-pipelines-remote-resolvers-6bb6b969d", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-pipelines-remote-resolvers", "uid": "8f8a2501-297c-4134-b803-4db0d6fa415e" } ], "resourceVersion": "4357", "uid": "32e5695a-69a7-49c1-bf3f-96252eab40a2" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "6bb6b969d" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-resolvers", "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.15.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "04bc02223f3631d849a6237885ed0465", "pipeline.tekton.dev/release": "v1.15.0", "pod-template-hash": "6bb6b969d", "version": "v1.15.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "command": [ "/sbin/tini", "--", "/ko-app/resolvers" ], "env": [ { "name": "ARTIFACT_HUB_API", "value": "https://artifacthub.io/" }, { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-resolvers" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/resolution" }, { "name": "PROBES_PORT", "value": "8080" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TEKTON_HUB_API" } ], "image": "ghcr.io/tektoncd/pipeline/resolvers-ff86b24f130c42b88983d3c13993056d:v1.15.0@sha256:fac274d8185ad9f3ef14ab8f1a316d92c478254c7d17efa52bc60f1899a889d2", "imagePullPolicy": "IfNotPresent", "name": "controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "1", "memory": "4Gi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp-clone-volume" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-resolvers", "serviceAccountName": "tekton-pipelines-resolvers", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": { "sizeLimit": "4Gi" }, "name": "tmp-clone-volume" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-08-20T07:36:15Z", "generation": 1, "labels": { "app": "tekton-pipelines-resolvers", "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.15.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "ed746f12727c4d581633fa7e08da890b", "pipeline.tekton.dev/release": "v1.15.0", "pod-template-hash": "7964cbf5d7", "version": "v1.15.0" }, "name": "tekton-pipelines-remote-resolvers-7964cbf5d7", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-pipelines-remote-resolvers", "uid": "8f8a2501-297c-4134-b803-4db0d6fa415e" } ], "resourceVersion": "4347", "uid": "70550a70-519e-495a-9c71-4f04a836c94d" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "7964cbf5d7" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-resolvers", "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.15.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "ed746f12727c4d581633fa7e08da890b", "pipeline.tekton.dev/release": "v1.15.0", "pod-template-hash": "7964cbf5d7", "version": "v1.15.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "command": [ "/sbin/tini", "--", "/ko-app/resolvers" ], "env": [ { "name": "ARTIFACT_HUB_API", "value": "https://artifacthub.io/" }, { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-resolvers" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "GIT_SSL_CAINFO", "value": "/etc/ssl/certs/ca-bundle.crt" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/resolution" }, { "name": "PROBES_PORT", "value": "8080" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TEKTON_HUB_API" } ], "image": "ghcr.io/tektoncd/pipeline/resolvers-ff86b24f130c42b88983d3c13993056d:v1.15.0@sha256:fac274d8185ad9f3ef14ab8f1a316d92c478254c7d17efa52bc60f1899a889d2", "imagePullPolicy": "IfNotPresent", "name": "controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "1", "memory": "4Gi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp-clone-volume" }, { "mountPath": "/etc/ssl/certs", "name": "trusted-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-resolvers", "serviceAccountName": "tekton-pipelines-resolvers", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": { "sizeLimit": "4Gi" }, "name": "tmp-clone-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-08-20T07:31:05Z", "generation": 1, "labels": { "app": "tekton-pipelines-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.15.0", "operator.tekton.dev/deployment-spec-applied-hash": "2210799cdd44bc90f27d8cf52b359262", "pipeline.tekton.dev/release": "v1.15.0", "pod-template-hash": "64d4dd64fc", "version": "v1.15.0" }, "name": "tekton-pipelines-webhook-64d4dd64fc", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-pipelines-webhook", "uid": "2467ef69-ab06-4ffd-946d-4435f02dc9f9" } ], "resourceVersion": "1990", "uid": "7938000d-7291-4a2c-bd15-9398c9365787" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "64d4dd64fc" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.15.0", "operator.tekton.dev/deployment-spec-applied-hash": "2210799cdd44bc90f27d8cf52b359262", "pipeline.tekton.dev/release": "v1.15.0", "pod-template-hash": "64d4dd64fc", "version": "v1.15.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-webhook" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipeline" }, { "name": "PROBES_PORT", "value": "8080" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_ADMISSION_CONTROLLER_NAME", "value": "webhook.pipeline.tekton.dev" }, { "name": "WEBHOOK_PORT", "value": "8443" }, { "name": "WEBHOOK_SECRET_NAME", "value": "webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-pipelines-webhook" } ], "image": "ghcr.io/tektoncd/pipeline/webhook-d4749e605405422fd87700164e31b2d1:v1.15.0@sha256:660a4a3bc55eaafcf8672d2c8c2469d9cf0e6090cd367a3d4bac82f834487947", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "webhook", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "cpu": "500m", "memory": "500Mi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-webhook", "serviceAccountName": "tekton-pipelines-webhook", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-08-20T07:34:08Z", "generation": 1, "labels": { "app": "tekton-results-api", "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.20.0", "operator.tekton.dev/deployment-spec-applied-hash": "551d3697b25a84105d01f92fb8e95ddf", "pod-template-hash": "654cbb8f67" }, "name": "tekton-results-api-654cbb8f67", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-results-api", "uid": "666cc72e-3d86-4bbc-97c0-78def8878d30" } ], "resourceVersion": "3487", "uid": "6f175ff7-311a-47af-93fc-bafb1758317a" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.20.0", "pod-template-hash": "654cbb8f67" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-results-api", "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.20.0", "operator.tekton.dev/deployment-spec-applied-hash": "551d3697b25a84105d01f92fb8e95ddf", "pod-template-hash": "654cbb8f67" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.20.0" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "DB_HOST", "value": "tekton-results-postgres-service.tekton-pipelines.svc.cluster.local" }, { "name": "DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_PASSWORD", "name": "tekton-results-postgres" } } }, { "name": "DB_USER", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_USER", "name": "tekton-results-postgres" } } }, { "name": "IS_EXTERNAL_DB", "value": "false" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "LOGGING_PLUGIN_TLS_VERIFICATION_DISABLE", "value": "false" }, { "name": "ROUTE_ENABLED", "value": "false" }, { "name": "ROUTE_TLS_TERMINATION", "value": "edge" } ], "image": "ghcr.io/tektoncd/results/api-b1b7ffa9ba32f7c3020c3b68830b30a8:v0.20.0@sha256:b0d55e887a79d195d9964f42c3a1dc7967fb08f5307c350ab51905f9897a34ff", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "api", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "startupProbe": { "failureThreshold": 10, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tekton/results", "name": "config", "readOnly": true }, { "mountPath": "/etc/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-results-api", "serviceAccountName": "tekton-results-api", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "tekton-results-api-config" }, "name": "config" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-08-20T07:34:08Z", "generation": 1, "labels": { "app": "tekton-results-retention-policy-agent", "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/version": "v0.20.0", "operator.tekton.dev/deployment-spec-applied-hash": "fe2602d19f7c378769a5dbfd9bcd0bc3", "pod-template-hash": "76797c9c78" }, "name": "tekton-results-retention-policy-agent-76797c9c78", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-results-retention-policy-agent", "uid": "62b73851-3a74-4af7-b79e-25f35a15ceb3" } ], "resourceVersion": "3230", "uid": "b403e324-da62-4cb0-9829-8c67cfae068f" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/version": "v0.20.0", "pod-template-hash": "76797c9c78" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-results-retention-policy-agent", "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/version": "v0.20.0", "operator.tekton.dev/deployment-spec-applied-hash": "fe2602d19f7c378769a5dbfd9bcd0bc3", "pod-template-hash": "76797c9c78" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "tekton-results-config-logging" }, { "name": "DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_PASSWORD", "name": "tekton-results-postgres" } } }, { "name": "DB_USER", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_USER", "name": "tekton-results-postgres" } } }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/results/retention-policy-agent-07427b345034d96a9a27896ebb138518:v0.20.0@sha256:59a1fdde49bdbc6a26e5f3e630cbb86641a1848dd25ed587678c519aa6ea0c0f", "imagePullPolicy": "IfNotPresent", "name": "retention-policy-agent", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tekton/results", "name": "config", "readOnly": true }, { "mountPath": "/etc/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-results-watcher", "serviceAccountName": "tekton-results-watcher", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "tekton-results-api-config" }, "name": "config" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-08-20T07:34:08Z", "generation": 1, "labels": { "app": "tekton-results-watcher", "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.20.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "6c0818c79d458a6e2f5f9bd70cd27732", "pod-template-hash": "bfd67c666" }, "name": "tekton-results-watcher-bfd67c666", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-results-watcher", "uid": "8998b77d-3fb6-4372-aefd-ec869529aaeb" } ], "resourceVersion": "3294", "uid": "e3b3d701-780e-4d98-9302-1b14564daba4" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.20.0", "pod-template-hash": "bfd67c666" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-results-watcher", "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.20.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "6c0818c79d458a6e2f5f9bd70cd27732", "pod-template-hash": "bfd67c666" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.20.0" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-api_addr", "$(TEKTON_RESULTS_API_SERVICE)", "-auth_mode", "$(AUTH_MODE)" ], "env": [ { "name": "AUTH_MODE", "value": "token" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-results-config-leader-election" }, { "name": "CONFIG_LOGGING_NAME", "value": "tekton-results-config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-results-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/results" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TEKTON_RESULTS_API_SERVICE", "value": "tekton-results-api-service.tekton-pipelines.svc.cluster.local:8080" } ], "image": "ghcr.io/tektoncd/results/watcher-83f971ea227fb24157c0c699b824a628:v0.20.0@sha256:a5fb2d24d5c455c62fda7ce80c36b39af1e50d482a4bfdd289f436287f3c21c9", "imagePullPolicy": "IfNotPresent", "name": "watcher", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-results-watcher", "serviceAccountName": "tekton-results-watcher", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-08-20T07:32:38Z", "generation": 1, "labels": { "app": "tekton-triggers-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.37.0", "operator.tekton.dev/deployment-spec-applied-hash": "46fbdcc1329fc2115a6eee7f7c97fcdc", "pod-template-hash": "94fc9985b", "triggers.tekton.dev/release": "v0.37.0", "version": "v0.37.0" }, "name": "tekton-triggers-controller-94fc9985b", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-triggers-controller", "uid": "3c1eecfc-d904-4223-b13d-a2c0365611ce" } ], "resourceVersion": "2451", "uid": "b47e5554-2455-4771-9956-1fb9051e85b8" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers", "pod-template-hash": "94fc9985b" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.37.0", "operator.tekton.dev/deployment-spec-applied-hash": "46fbdcc1329fc2115a6eee7f7c97fcdc", "pod-template-hash": "94fc9985b", "triggers.tekton.dev/release": "v0.37.0", "version": "v0.37.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-logtostderr", "-stderrthreshold", "INFO", "-el-image", "ghcr.io/tektoncd/triggers/eventlistenersink-7ad1faa98cddbcb0c24990303b220bb8:v0.37.0@sha256:1fa445623620dbf01496306b29eb824ee00030b71d2337e3c43297a1fc286355", "-el-port", "8080", "-el-security-context=true", "-el-read-only-root-filesystem=true", "-el-events", "disable", "-el-readtimeout", "5", "-el-writetimeout", "40", "-el-idletimeout", "120", "-el-timeouthandler", "30", "-el-httpclient-readtimeout", "30", "-el-httpclient-keep-alive", "30", "-el-httpclient-tlshandshaketimeout", "10", "-el-httpclient-responseheadertimeout", "10", "-el-httpclient-expectcontinuetimeout", "1", "-period-seconds", "10", "-failure-threshold", "3" ], "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults-triggers" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-triggers-controllers" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability-triggers" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "METRICS_PROMETHEUS_PORT", "value": "9000" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/triggers/controller-f656ca31de179ab913fa76abc255c315:v0.37.0@sha256:72cfb3e11b906f5cd92c8e84f7b05662520f3e0d669f7db3c6b8fd39867985e9", "imagePullPolicy": "IfNotPresent", "name": "tekton-triggers-controller", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-controller", "serviceAccountName": "tekton-triggers-controller", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-08-20T07:32:38Z", "generation": 1, "labels": { "app": "tekton-triggers-core-interceptors", "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.37.0", "operator.tekton.dev/deployment-spec-applied-hash": "c335247244b525bcc29463f7ce5368fc", "pod-template-hash": "5cf79bf99f", "triggers.tekton.dev/release": "v0.37.0", "version": "v0.37.0" }, "name": "tekton-triggers-core-interceptors-5cf79bf99f", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-triggers-core-interceptors", "uid": "656ef009-dcc8-41e4-b031-2040af1a312b" } ], "resourceVersion": "2660", "uid": "5f29de26-f9ba-40f0-83a8-6b1885b1447a" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers", "pod-template-hash": "5cf79bf99f" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-core-interceptors", "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.37.0", "operator.tekton.dev/deployment-spec-applied-hash": "c335247244b525bcc29463f7ce5368fc", "pod-template-hash": "5cf79bf99f", "triggers.tekton.dev/release": "v0.37.0", "version": "v0.37.0" } }, "spec": { "containers": [ { "args": [ "-logtostderr", "-stderrthreshold", "INFO" ], "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability-triggers" }, { "name": "INTERCEPTOR_TLS_SECRET_NAME", "value": "tekton-triggers-core-interceptors-certs" }, { "name": "INTERCEPTOR_TLS_SVC_NAME", "value": "tekton-triggers-core-interceptors" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "ghcr.io/tektoncd/triggers/interceptors-3176d6a3f314c3655b30bfd36e421dd5:v0.37.0@sha256:df3a692bb96010a52a3a9cb64a762bbfdce467b3393fbee28235b341c73b35ae", "imagePullPolicy": "IfNotPresent", "name": "tekton-triggers-core-interceptors", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-core-interceptors", "serviceAccountName": "tekton-triggers-core-interceptors", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-08-20T07:32:38Z", "generation": 1, "labels": { "app": "tekton-triggers-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.37.0", "operator.tekton.dev/deployment-spec-applied-hash": "d77739204889bb95ad7396d42bcffcab", "pod-template-hash": "75d6848b6f", "triggers.tekton.dev/release": "v0.37.0", "version": "v0.37.0" }, "name": "tekton-triggers-webhook-75d6848b6f", "namespace": "tekton-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-triggers-webhook", "uid": "d955dd24-d94e-40c2-ae5e-a49931117e19" } ], "resourceVersion": "2522", "uid": "1c15935a-22c4-40b5-9640-62b10ec05821" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers", "pod-template-hash": "75d6848b6f" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.37.0", "operator.tekton.dev/deployment-spec-applied-hash": "d77739204889bb95ad7396d42bcffcab", "pod-template-hash": "75d6848b6f", "triggers.tekton.dev/release": "v0.37.0", "version": "v0.37.0" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-triggers-webhook" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SECRET_NAME", "value": "triggers-webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-triggers-webhook" } ], "image": "ghcr.io/tektoncd/triggers/webhook-dd1edc925ee1772a9f76e2c1bc291ef6:v0.37.0@sha256:88766079716ddd8fc21754bd750919138bf352a1f6a2fe50c175720fd18c57a2", "imagePullPolicy": "IfNotPresent", "name": "webhook", "ports": [ { "containerPort": 9000, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "runAsUser": 65532, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-webhook", "serviceAccountName": "tekton-triggers-webhook", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } } ], "kind": "List", "metadata": { "resourceVersion": "" } }