{ "apiVersion": "v1", "items": [ { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/ibm-cloud-managed": "true" }, "creationTimestamp": "2026-05-05T17:13:15Z", "generation": 1, "labels": { "name": "cluster-samples-operator", "pod-template-hash": "695d9bb6bd" }, "name": "cluster-samples-operator-695d9bb6bd", "namespace": "openshift-cluster-samples-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-samples-operator", "uid": "1f8b4afa-8484-44e9-ac47-85023d4fc3db" } ], "resourceVersion": "11858", "uid": "d1ee5cf0-623f-4770-9fab-22f8facaab46" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "cluster-samples-operator", "pod-template-hash": "695d9bb6bd" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "cluster-samples-operator", "pod-template-hash": "695d9bb6bd" } }, "spec": { "containers": [ { "command": [ "cluster-samples-operator" ], "env": [ { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "OPERATOR_NAME", "value": "cluster-samples-operator" }, { "name": "RELEASE_VERSION", "value": "4.18.9" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d09ac899f3001937771c6cadd50802a983e7c833fa2e0bde1958e134458c76ae", "imagePullPolicy": "IfNotPresent", "name": "cluster-samples-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/secrets", "name": "samples-operator-tls" } ] }, { "args": [ "--namespace=openshift-cluster-samples-operator", "--process-name=cluster-samples-operator", "--termination-grace-period=30s", "--files=/etc/secrets/tls.crt,/etc/secrets/tls.key" ], "command": [ "cluster-samples-operator-watch", "file-watcher-watchdog" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d09ac899f3001937771c6cadd50802a983e7c833fa2e0bde1958e134458c76ae", "imagePullPolicy": "IfNotPresent", "name": "cluster-samples-operator-watch", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cluster-samples-operator", "serviceAccountName": "cluster-samples-operator", "shareProcessNamespace": true, "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "samples-operator-tls", "secret": { "defaultMode": 420, "secretName": "samples-operator-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "config.openshift.io/inject-proxy": "console-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true" }, "creationTimestamp": "2026-05-05T17:13:15Z", "generation": 1, "labels": { "name": "console-operator", "pod-template-hash": "7d4ddc79d6" }, "name": "console-operator-7d4ddc79d6", "namespace": "openshift-console-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console-operator", "uid": "3c2d809c-d300-4eef-a0b5-4df938978f21" } ], "resourceVersion": "12440", "uid": "21c60207-b9d6-4395-974e-5f0e41a45a9d" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "console-operator", "pod-template-hash": "7d4ddc79d6" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "console-operator", "pod-template-hash": "7d4ddc79d6" } }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/controller-config.yaml" ], "command": [ "console", "operator" ], "env": [ { "name": "CONSOLE_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7b84f135cfa446962ac6a1a03888a874e2e0ddedeefe32a30a70f535dcd2c721" }, { "name": "DOWNLOADS_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cdba3ca6e2b89d411b5ef466468bc8d91a07bf4bd14238baa65fb4397f54257d" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.9" }, { "name": "OPERATOR_NAME", "value": "console-operator" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:41029e57ece558b2e0b12174ce924647fd9d5c5d83aadf4bba03d6916d3f9f54", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "console-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca" } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console-operator", "serviceAccountName": "console-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "console-operator-config" }, "name": "config" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca" }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "12644", "console.openshift.io/console-config-version": "14744", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7b84f135cfa446962ac6a1a03888a874e2e0ddedeefe32a30a70f535dcd2c721", "console.openshift.io/infrastructure-config-version": "1414", "console.openshift.io/oauth-secret-version": "12707", "console.openshift.io/proxy-config-version": "1425", "console.openshift.io/service-ca-config-version": "12869", "console.openshift.io/trusted-ca-config-version": "12936", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "3", "operator.openshift.io/spec-hash": "91aec248435295fbcae3c28549490a08a00e8cf35d6810286a611bad16fe343c" }, "creationTimestamp": "2026-05-05T17:28:54Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "5d7f59b4d8" }, "name": "console-5d7f59b4d8", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "cadb612a-ad23-4c7e-a7b2-56a77136ae66" } ], "resourceVersion": "16551", "uid": "497edb6e-79d5-4f49-968e-56a910ad93a3" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "5d7f59b4d8" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "12644", "console.openshift.io/console-config-version": "14744", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7b84f135cfa446962ac6a1a03888a874e2e0ddedeefe32a30a70f535dcd2c721", "console.openshift.io/infrastructure-config-version": "1414", "console.openshift.io/oauth-secret-version": "12707", "console.openshift.io/proxy-config-version": "1425", "console.openshift.io/service-ca-config-version": "12869", "console.openshift.io/trusted-ca-config-version": "12936", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "5d7f59b4d8" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7b84f135cfa446962ac6a1a03888a874e2e0ddedeefe32a30a70f535dcd2c721", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "12644", "console.openshift.io/console-config-version": "12815", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7b84f135cfa446962ac6a1a03888a874e2e0ddedeefe32a30a70f535dcd2c721", "console.openshift.io/infrastructure-config-version": "1414", "console.openshift.io/oauth-secret-version": "12707", "console.openshift.io/proxy-config-version": "1425", "console.openshift.io/service-ca-config-version": "12868", "console.openshift.io/trusted-ca-config-version": "12886", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "44887faf367c2af6a5a1e6910a50e4c2defa66d64ee78146de4395992b1e9d35" }, "creationTimestamp": "2026-05-05T17:27:30Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "6cdbbf496c" }, "name": "console-6cdbbf496c", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "cadb612a-ad23-4c7e-a7b2-56a77136ae66" } ], "resourceVersion": "13903", "uid": "f1856f91-b122-4575-beee-1aee9c6ed3ea" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "6cdbbf496c" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "12644", "console.openshift.io/console-config-version": "12815", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7b84f135cfa446962ac6a1a03888a874e2e0ddedeefe32a30a70f535dcd2c721", "console.openshift.io/infrastructure-config-version": "1414", "console.openshift.io/oauth-secret-version": "12707", "console.openshift.io/proxy-config-version": "1425", "console.openshift.io/service-ca-config-version": "12868", "console.openshift.io/trusted-ca-config-version": "12886", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "6cdbbf496c" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7b84f135cfa446962ac6a1a03888a874e2e0ddedeefe32a30a70f535dcd2c721", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "12644", "console.openshift.io/console-config-version": "16196", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7b84f135cfa446962ac6a1a03888a874e2e0ddedeefe32a30a70f535dcd2c721", "console.openshift.io/infrastructure-config-version": "1414", "console.openshift.io/oauth-secret-version": "12707", "console.openshift.io/proxy-config-version": "1425", "console.openshift.io/service-ca-config-version": "12869", "console.openshift.io/trusted-ca-config-version": "12936", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "4", "operator.openshift.io/spec-hash": "20dbcb123385305b8b6bcf220544f19775fc5626d3ffbdbb8b83118dc9bb9507" }, "creationTimestamp": "2026-05-05T17:31:02Z", "generation": 1, "labels": { "app": "console", "component": "ui", "pod-template-hash": "d97fbbcc7" }, "name": "console-d97fbbcc7", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "cadb612a-ad23-4c7e-a7b2-56a77136ae66" } ], "resourceVersion": "17831", "uid": "035d829d-e1ce-4eae-8518-2e880e2a061f" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "d97fbbcc7" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "12644", "console.openshift.io/console-config-version": "16196", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7b84f135cfa446962ac6a1a03888a874e2e0ddedeefe32a30a70f535dcd2c721", "console.openshift.io/infrastructure-config-version": "1414", "console.openshift.io/oauth-secret-version": "12707", "console.openshift.io/proxy-config-version": "1425", "console.openshift.io/service-ca-config-version": "12869", "console.openshift.io/trusted-ca-config-version": "12936", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "d97fbbcc7" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7b84f135cfa446962ac6a1a03888a874e2e0ddedeefe32a30a70f535dcd2c721", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "12644", "console.openshift.io/console-config-version": "13627", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7b84f135cfa446962ac6a1a03888a874e2e0ddedeefe32a30a70f535dcd2c721", "console.openshift.io/infrastructure-config-version": "1414", "console.openshift.io/oauth-secret-version": "12707", "console.openshift.io/proxy-config-version": "1425", "console.openshift.io/service-ca-config-version": "12869", "console.openshift.io/trusted-ca-config-version": "12936", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "2", "operator.openshift.io/spec-hash": "eec8a5a7ca0711ddbe3d953a7480871e5b263e3b90df0c22f1c6054ceb368ead" }, "creationTimestamp": "2026-05-05T17:27:35Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "f84dddb97" }, "name": "console-f84dddb97", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "cadb612a-ad23-4c7e-a7b2-56a77136ae66" } ], "resourceVersion": "14892", "uid": "e8bdb645-b112-4946-9be1-d84ab8fa2369" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "f84dddb97" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "12644", "console.openshift.io/console-config-version": "13627", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7b84f135cfa446962ac6a1a03888a874e2e0ddedeefe32a30a70f535dcd2c721", "console.openshift.io/infrastructure-config-version": "1414", "console.openshift.io/oauth-secret-version": "12707", "console.openshift.io/proxy-config-version": "1425", "console.openshift.io/service-ca-config-version": "12869", "console.openshift.io/trusted-ca-config-version": "12936", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "f84dddb97" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7b84f135cfa446962ac6a1a03888a874e2e0ddedeefe32a30a70f535dcd2c721", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "d5a0ecafbc6da39b11300e610cad32356dc1fb7aedd0f02976153facbcd526a7" }, "creationTimestamp": "2026-05-05T17:27:27Z", "generation": 1, "labels": { "app": "console", "component": "downloads", "pod-template-hash": "6d4c9b4b6c" }, "name": "downloads-6d4c9b4b6c", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "downloads", "uid": "31365246-eb2b-4d51-a4b9-11090fd12bb0" } ], "resourceVersion": "14210", "uid": "4de7d1d7-b533-4ba0-86f9-c58ff8af4d95" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "console", "component": "downloads", "pod-template-hash": "6d4c9b4b6c" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "downloads", "pod-template-hash": "6d4c9b4b6c" }, "name": "downloads" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "downloads" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "-c", "cat \u003c\u003cEOF \u003e\u003e/tmp/serve.py\nimport errno, http.server, os, re, signal, socket, sys, tarfile, tempfile, threading, time, zipfile\n\nsignal.signal(signal.SIGTERM, lambda signum, frame: sys.exit(0))\n\ndef write_index(path, message):\n with open(path, 'wb') as f:\n f.write('\\n'.join([\n '\u003c!doctype html\u003e',\n '\u003chtml lang=\"en\"\u003e',\n '\u003chead\u003e',\n ' \u003cmeta charset=\"utf-8\"\u003e',\n '\u003c/head\u003e',\n '\u003cbody\u003e',\n ' {}'.format(message),\n '\u003c/body\u003e',\n '\u003c/html\u003e',\n '',\n ]).encode('utf-8'))\n\n# Launch multiple listeners as threads\nclass Thread(threading.Thread):\n def __init__(self, i, socket):\n threading.Thread.__init__(self)\n self.i = i\n self.socket = socket\n self.daemon = True\n self.start()\n\n def run(self):\n server = http.server.SimpleHTTPRequestHandler\n server.server_version = \"OpenShift Downloads Server\"\n server.sys_version = \"\"\n httpd = http.server.HTTPServer(addr, server, False)\n\n # Prevent the HTTP server from re-binding every handler.\n # https://stackoverflow.com/questions/46210672/\n httpd.socket = self.socket\n httpd.server_bind = self.server_close = lambda self: None\n\n httpd.serve_forever()\n\ntemp_dir = tempfile.mkdtemp()\nprint('serving from {}'.format(temp_dir))\nos.chdir(temp_dir)\nfor arch in ['amd64', 'arm64', 'ppc64le', 's390x']:\n os.mkdir(arch)\ncontent = ['\u003ca href=\"oc-license\"\u003elicense\u003c/a\u003e']\nos.symlink('/usr/share/openshift/LICENSE', 'oc-license')\n\nfor arch, operating_system, path in [\n ('amd64', 'linux', '/usr/share/openshift/linux_amd64/oc'),\n ('amd64', 'mac', '/usr/share/openshift/mac/oc'),\n ('amd64', 'windows', '/usr/share/openshift/windows/oc.exe'),\n ('arm64', 'linux', '/usr/share/openshift/linux_arm64/oc'),\n ('arm64', 'mac', '/usr/share/openshift/mac_arm64/oc'),\n ('ppc64le', 'linux', '/usr/share/openshift/linux_ppc64le/oc'),\n ('s390x', 'linux', '/usr/share/openshift/linux_s390x/oc'),\n ]:\n basename = os.path.basename(path)\n target_path = os.path.join(arch, operating_system, basename)\n os.mkdir(os.path.join(arch, operating_system))\n os.symlink(path, target_path)\n base_root, _ = os.path.splitext(basename)\n archive_path_root = os.path.join(arch, operating_system, base_root)\n with tarfile.open('{}.tar'.format(archive_path_root), 'w') as tar:\n tar.add(path, basename)\n with zipfile.ZipFile('{}.zip'.format(archive_path_root), 'w') as zip:\n zip.write(path, basename)\n content.append(\n '\u003ca href=\"{0}\"\u003eoc ({1} {2})\u003c/a\u003e (\u003ca href=\"{3}.tar\"\u003etar\u003c/a\u003e \u003ca href=\"{3}.zip\"\u003ezip\u003c/a\u003e)'.format(\n target_path, arch, operating_system, archive_path_root\n )\n )\n\nfor root, directories, filenames in os.walk(temp_dir):\n root_link = os.path.relpath(temp_dir, os.path.join(root, 'child')).replace(os.path.sep, '/')\n for directory in directories:\n write_index(\n path=os.path.join(root, directory, 'index.html'),\n message='\u003cp\u003eDirectory listings are disabled. See \u003ca href=\"{}\"\u003ehere\u003c/a\u003e for available content.\u003c/p\u003e'.format(root_link),\n )\n\nwrite_index(\n path=os.path.join(temp_dir, 'index.html'),\n message='\\n'.join(\n ['\u003cul\u003e'] +\n [' \u003cli\u003e{}\u003c/li\u003e'.format(entry) for entry in content] +\n ['\u003c/ul\u003e']\n ),\n)\n\n# Create socket\n# IPv6 should handle IPv4 passively so long as it is not bound to a\n# specific address or set to IPv6_ONLY\n# https://stackoverflow.com/questions/25817848/python-3-does-http-server-support-ipv6\ntry:\n addr = ('::', 8080)\n sock = socket.socket(socket.AF_INET6, socket.SOCK_STREAM)\nexcept socket.error as err:\n # errno.EAFNOSUPPORT is \"socket.error: [Errno 97] Address family not supported by protocol\"\n # When IPv6 is disabled, socket will bind using IPv4.\n if err.errno == errno.EAFNOSUPPORT:\n addr = ('', 8080)\n sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)\n else:\n raise \nsock.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)\nsock.bind(addr)\nsock.listen(5)\n\n[Thread(i, socket=sock) for i in range(100)]\ntime.sleep(9e9)\nEOF\nexec python3 /tmp/serve.py\n" ], "command": [ "/bin/sh" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cdba3ca6e2b89d411b5ef466468bc8d91a07bf4bd14238baa65fb4397f54257d", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "download-server", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 0, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-05-05T17:29:52Z", "generation": 1, "labels": { "app": "deployment-validation-operator", "name": "deployment-validation-operator", "pod-template-hash": "56d8559945" }, "name": "deployment-validation-operator-56d8559945", "namespace": "openshift-deployment-validation-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "deployment-validation-operator", "uid": "abf52e77-dbbb-48a5-a9c4-47ae86ba36bb" } ], "resourceVersion": "15417", "uid": "f0b9e088-d883-4e62-b0ac-0e85f2a0fd0d" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "deployment-validation-operator", "pod-template-hash": "56d8559945" } }, "template": { "metadata": { "annotations": { "capabilities": "Basic Install", "categories": "Application Runtime, Monitoring, Security", "certified": "false", "containerImage": "quay.io/app-sre/deployment-validation-operator:0.1.595-gbf89fe8", "createdAt": "2026-04-24T10:27:15Z", "description": "The deployment validation operator", "olm.operatorGroup": "deployment-validation-operator-og", "olm.operatorNamespace": "openshift-deployment-validation-operator", "olm.targetNamespaces": "openshift-deployment-validation-operator", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.package\",\"value\":{\"packageName\":\"deployment-validation-operator\",\"version\":\"0.1.595-gbf89fe8\"}}]}", "repository": "https://github.com/app-sre/deployment-validation-operator", "support": "Best Effort" }, "creationTimestamp": null, "labels": { "app": "deployment-validation-operator", "name": "deployment-validation-operator", "pod-template-hash": "56d8559945" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "deployment-validation-operator" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "--config /config/deployment-validation-operator-config.yaml" ], "env": [ { "name": "WATCH_NAMESPACE" }, { "name": "OPERATOR_NAME", "value": "deployment-validation-operator" }, { "name": "NAMESPACE_IGNORE_PATTERN", "value": "^(openshift.*|kube-.*|default|dedicated-admin|redhat-.*|acm|addon-dba-operator|codeready-.*|prow)$" }, { "name": "RESOURCES_PER_LIST_QUERY", "value": "5" }, { "name": "VALIDATION_CHECK_INTERVAL", "value": "2m" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "OPERATOR_CONDITION_NAME", "value": "deployment-validation-operator.v0.1.595-gbf89fe8" } ], "image": "quay.io/app-sre/deployment-validation-operator:0.1.595-gbf89fe8", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "deployment-validation-operator", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "resources": { "limits": { "memory": "600Mi" }, "requests": { "cpu": "50m", "memory": "400Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/config", "name": "dvo-config" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/arch": "amd64" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "deployment-validation-operator", "serviceAccountName": "deployment-validation-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/infra", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "deployment-validation-operator-config", "optional": true }, "name": "dvo-config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:24:52Z", "generation": 2, "labels": { "app": "deployment-validation-operator", "name": "deployment-validation-operator", "pod-template-hash": "c549d6698" }, "name": "deployment-validation-operator-c549d6698", "namespace": "openshift-deployment-validation-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "deployment-validation-operator", "uid": "abf52e77-dbbb-48a5-a9c4-47ae86ba36bb" } ], "resourceVersion": "15428", "uid": "d460f86e-0a7e-4dee-8756-54884e24dd89" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "deployment-validation-operator", "pod-template-hash": "c549d6698" } }, "template": { "metadata": { "annotations": { "capabilities": "Basic Install", "categories": "Application Runtime, Monitoring, Security", "certified": "false", "containerImage": "quay.io/app-sre/deployment-validation-operator:0.1.595-gbf89fe8", "createdAt": "2026-04-24T10:27:15Z", "description": "The deployment validation operator", "olm.operatorGroup": "deployment-validation-operator-og", "olm.operatorNamespace": "openshift-deployment-validation-operator", "olm.targetNamespaces": "openshift-deployment-validation-operator", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.package\",\"value\":{\"packageName\":\"deployment-validation-operator\",\"version\":\"0.1.595-gbf89fe8\"}}]}", "repository": "https://github.com/app-sre/deployment-validation-operator", "support": "Best Effort" }, "creationTimestamp": null, "labels": { "app": "deployment-validation-operator", "name": "deployment-validation-operator", "pod-template-hash": "c549d6698" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "node-role.kubernetes.io/infra", "operator": "Exists" } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "deployment-validation-operator" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "--config /config/deployment-validation-operator-config.yaml" ], "env": [ { "name": "WATCH_NAMESPACE" }, { "name": "OPERATOR_NAME", "value": "deployment-validation-operator" }, { "name": "NAMESPACE_IGNORE_PATTERN", "value": "openshift.*|kube-.+|open-cluster-management-.*|default|dedicated-admin" }, { "name": "RESOURCES_PER_LIST_QUERY", "value": "5" }, { "name": "VALIDATION_CHECK_INTERVAL", "value": "2m" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "OPERATOR_CONDITION_NAME", "value": "deployment-validation-operator.v0.1.595-gbf89fe8" } ], "image": "quay.io/app-sre/deployment-validation-operator:0.1.595-gbf89fe8", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "deployment-validation-operator", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "resources": { "limits": { "memory": "600Mi" }, "requests": { "cpu": "50m", "memory": "400Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/config", "name": "dvo-config" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/arch": "amd64" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "deployment-validation-operator", "serviceAccountName": "deployment-validation-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/infra", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "deployment-validation-operator-config", "optional": true }, "name": "dvo-config" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:31:45Z", "generation": 1, "labels": { "app.kubernetes.io/name": "cluster", "openshift.io/required-scc": "restricted-v2", "pod-template-hash": "85dc69c6f" }, "name": "cluster-85dc69c6f", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster", "uid": "0d06b277-7634-4428-8d60-511b6fd7f218" } ], "resourceVersion": "19785", "uid": "365cabea-9eb1-4c58-ae44-4eed71403405" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "cluster", "pod-template-hash": "85dc69c6f" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "cluster", "openshift.io/required-scc": "restricted-v2", "pod-template-hash": "85dc69c6f" } }, "spec": { "containers": [ { "env": [ { "name": "INSECURE", "value": "true" } ], "image": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:b99249048d27ba66aeda10386226569f125b88dae577505a474b1b861fe6e3ec", "imagePullPolicy": "IfNotPresent", "name": "cluster", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/gitops/ssl", "name": "backend-ssl", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "gitops-service-cluster", "serviceAccountName": "gitops-service-cluster", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "backend-ssl", "secret": { "defaultMode": 420, "secretName": "cluster" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:31:45Z", "generation": 1, "labels": { "app": "gitops-plugin", "pod-template-hash": "6c56dc4668" }, "name": "gitops-plugin-6c56dc4668", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "gitops-plugin", "uid": "625f1306-bd7d-4738-baa2-f78c377a4616" } ], "resourceVersion": "20135", "uid": "c9e5d76a-c3ff-42fd-ae23-7aca94270380" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "gitops-plugin", "pod-template-hash": "6c56dc4668" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "gitops-plugin", "pod-template-hash": "6c56dc4668" } }, "spec": { "containers": [ { "image": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:2b96f4a736457f646c6adc457f5679cf2143982dab6929bf695c6e55e40b5461", "imagePullPolicy": "IfNotPresent", "name": "gitops-plugin", "ports": [ { "containerPort": 9001, "name": "http", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/httpd-ssl/certs/tls.crt", "name": "console-serving-cert", "readOnly": true, "subPath": "tls.crt" }, { "mountPath": "/etc/httpd-ssl/private/tls.key", "name": "console-serving-cert", "readOnly": true, "subPath": "tls.key" }, { "mountPath": "/etc/httpd-cfg/httpd.conf", "name": "httpd-cfg", "readOnly": true, "subPath": "httpd.conf" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "httpd-cfg" }, "name": "httpd-cfg" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:31:47Z", "generation": 1, "labels": { "app.kubernetes.io/name": "openshift-gitops-applicationset-controller", "pod-template-hash": "6cc7f66df" }, "name": "openshift-gitops-applicationset-controller-6cc7f66df", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-gitops-applicationset-controller", "uid": "404306b5-4f3d-4c97-ba5a-e46d08e47168" } ], "resourceVersion": "20121", "uid": "284e69aa-8f86-404a-97b0-f9bbe0fde83b" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "openshift-gitops-applicationset-controller", "pod-template-hash": "6cc7f66df" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "openshift-gitops-applicationset-controller", "pod-template-hash": "6cc7f66df" } }, "spec": { "containers": [ { "command": [ "entrypoint.sh", "argocd-applicationset-controller", "--argocd-repo-server", "openshift-gitops-repo-server.openshift-gitops.svc.cluster.local:8081", "--loglevel", "info", "--logformat", "text" ], "env": [ { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cf3031bb2ed6b19384e996afe598a002893fd70ac0ce14491ff868069c53fc84", "imagePullPolicy": "IfNotPresent", "name": "argocd-applicationset-controller", "ports": [ { "containerPort": 7000, "name": "webhook", "protocol": "TCP" }, { "containerPort": 8080, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "2", "memory": "1Gi" }, "requests": { "cpu": "250m", "memory": "512Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/ssh", "name": "ssh-known-hosts" }, { "mountPath": "/app/config/tls", "name": "tls-certs" }, { "mountPath": "/app/config/gpg/source", "name": "gpg-keys" }, { "mountPath": "/app/config/gpg/keys", "name": "gpg-keyring" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-gitops-applicationset-controller", "serviceAccountName": "openshift-gitops-applicationset-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "argocd-ssh-known-hosts-cm" }, "name": "ssh-known-hosts" }, { "configMap": { "defaultMode": 420, "name": "argocd-tls-certs-cm" }, "name": "tls-certs" }, { "configMap": { "defaultMode": 420, "name": "argocd-gpg-keys-cm" }, "name": "gpg-keys" }, { "emptyDir": {}, "name": "gpg-keyring" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-05-05T17:31:48Z", "generation": 1, "labels": { "app.kubernetes.io/name": "openshift-gitops-dex-server", "dex.config.changed": "05052026-173126-UTC", "pod-template-hash": "67d4c56c46" }, "name": "openshift-gitops-dex-server-67d4c56c46", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-gitops-dex-server", "uid": "0577056b-c1d3-4df1-b8d7-f6bb20f66481" } ], "resourceVersion": "19929", "uid": "86e98c2f-6933-445f-9162-7c7707f2248a" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "openshift-gitops-dex-server", "pod-template-hash": "67d4c56c46" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "openshift-gitops-dex-server", "dex.config.changed": "05052026-173126-UTC", "pod-template-hash": "67d4c56c46" } }, "spec": { "containers": [ { "command": [ "/shared/argocd-dex", "rundex" ], "image": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:19bd8a22a9877e1527f8e1ba59d9682aaea3f9b2b7cb4959b4be3f956e19716b", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/live", "port": 5558, "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "dex", "ports": [ { "containerPort": 5556, "name": "http", "protocol": "TCP" }, { "containerPort": 5557, "name": "grpc", "protocol": "TCP" }, { "containerPort": 5558, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "static-files" }, { "mountPath": "/tmp", "name": "dexconfig" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "cp", "-n", "/usr/local/bin/argocd", "/shared/argocd-dex" ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cf3031bb2ed6b19384e996afe598a002893fd70ac0ce14491ff868069c53fc84", "imagePullPolicy": "IfNotPresent", "name": "copyutil", "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "static-files" }, { "mountPath": "/tmp", "name": "dexconfig" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-gitops-argocd-dex-server", "serviceAccountName": "openshift-gitops-argocd-dex-server", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "static-files" }, { "emptyDir": {}, "name": "dexconfig" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:31:46Z", "generation": 2, "labels": { "app.kubernetes.io/name": "openshift-gitops-dex-server", "pod-template-hash": "6dc6974d99" }, "name": "openshift-gitops-dex-server-6dc6974d99", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-gitops-dex-server", "uid": "0577056b-c1d3-4df1-b8d7-f6bb20f66481" } ], "resourceVersion": "19952", "uid": "577248e6-d6ed-40c5-af67-9a2fe30995c6" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/name": "openshift-gitops-dex-server", "pod-template-hash": "6dc6974d99" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "openshift-gitops-dex-server", "pod-template-hash": "6dc6974d99" } }, "spec": { "containers": [ { "command": [ "/shared/argocd-dex", "rundex" ], "image": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:19bd8a22a9877e1527f8e1ba59d9682aaea3f9b2b7cb4959b4be3f956e19716b", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/live", "port": 5558, "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "dex", "ports": [ { "containerPort": 5556, "name": "http", "protocol": "TCP" }, { "containerPort": 5557, "name": "grpc", "protocol": "TCP" }, { "containerPort": 5558, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "static-files" }, { "mountPath": "/tmp", "name": "dexconfig" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "cp", "-n", "/usr/local/bin/argocd", "/shared/argocd-dex" ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cf3031bb2ed6b19384e996afe598a002893fd70ac0ce14491ff868069c53fc84", "imagePullPolicy": "IfNotPresent", "name": "copyutil", "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "static-files" }, { "mountPath": "/tmp", "name": "dexconfig" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-gitops-argocd-dex-server", "serviceAccountName": "openshift-gitops-argocd-dex-server", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "static-files" }, { "emptyDir": {}, "name": "dexconfig" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:31:47Z", "generation": 1, "labels": { "app.kubernetes.io/name": "openshift-gitops-redis", "pod-template-hash": "84779fc6c8" }, "name": "openshift-gitops-redis-84779fc6c8", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-gitops-redis", "uid": "c8f2e3d6-41ac-4adf-aa78-50b786fd0955" } ], "resourceVersion": "19833", "uid": "342e4b45-91e8-48d5-9f8a-af9c0bdfd95d" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "openshift-gitops-redis", "pod-template-hash": "84779fc6c8" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "openshift-gitops-redis", "pod-template-hash": "84779fc6c8" } }, "spec": { "containers": [ { "args": [ "redis-server", "--protected-mode", "no", "--save", "", "--appendonly", "no", "--requirepass $(REDIS_PASSWORD)" ], "env": [ { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "admin.password", "name": "openshift-gitops-redis-initial-password" } } } ], "image": "registry.redhat.io/rhel9/redis-7@sha256:3d31c0cfaf4219f5bd1c52882b603215d1cb4aaef5b8d1a128d0174e090f96f3", "imagePullPolicy": "IfNotPresent", "name": "redis", "ports": [ { "containerPort": 6379, "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/redis/tls", "name": "argocd-operator-redis-tls" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-gitops-argocd-redis", "serviceAccountName": "openshift-gitops-argocd-redis", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "argocd-operator-redis-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-operator-redis-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:31:47Z", "generation": 1, "labels": { "app.kubernetes.io/name": "openshift-gitops-repo-server", "pod-template-hash": "56b488fdb" }, "name": "openshift-gitops-repo-server-56b488fdb", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-gitops-repo-server", "uid": "d457fe03-d4bc-4217-9ec7-a3b01761f831" } ], "resourceVersion": "20388", "uid": "1f249bec-04a5-4f98-a27e-24ed6b9b11a0" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "openshift-gitops-repo-server", "pod-template-hash": "56b488fdb" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "openshift-gitops-repo-server", "pod-template-hash": "56b488fdb" } }, "spec": { "automountServiceAccountToken": false, "containers": [ { "command": [ "uid_entrypoint.sh", "argocd-repo-server", "--redis", "openshift-gitops-redis.openshift-gitops.svc.cluster.local:6379", "--loglevel", "info", "--logformat", "text" ], "env": [ { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "admin.password", "name": "openshift-gitops-redis-initial-password" } } } ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cf3031bb2ed6b19384e996afe598a002893fd70ac0ce14491ff868069c53fc84", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "name": "argocd-repo-server", "ports": [ { "containerPort": 8081, "name": "server", "protocol": "TCP" }, { "containerPort": 8084, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "1Gi" }, "requests": { "cpu": "250m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/ssh", "name": "ssh-known-hosts" }, { "mountPath": "/app/config/tls", "name": "tls-certs" }, { "mountPath": "/app/config/gpg/source", "name": "gpg-keys" }, { "mountPath": "/app/config/gpg/keys", "name": "gpg-keyring" }, { "mountPath": "/app/config/reposerver/tls", "name": "argocd-repo-server-tls" }, { "mountPath": "/app/config/reposerver/tls/redis", "name": "argocd-operator-redis-tls" }, { "mountPath": "/home/argocd/cmp-server/plugins", "name": "plugins" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "cp", "-n", "/usr/local/bin/argocd-cmp-server", "/var/run/argocd/argocd-cmp-server" ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cf3031bb2ed6b19384e996afe598a002893fd70ac0ce14491ff868069c53fc84", "imagePullPolicy": "IfNotPresent", "name": "copyutil", "resources": { "limits": { "cpu": "1", "memory": "1Gi" }, "requests": { "cpu": "250m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/argocd", "name": "var-files" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "argocd-ssh-known-hosts-cm" }, "name": "ssh-known-hosts" }, { "configMap": { "defaultMode": 420, "name": "argocd-tls-certs-cm" }, "name": "tls-certs" }, { "configMap": { "defaultMode": 420, "name": "argocd-gpg-keys-cm" }, "name": "gpg-keys" }, { "emptyDir": {}, "name": "gpg-keyring" }, { "name": "argocd-repo-server-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-repo-server-tls" } }, { "name": "argocd-operator-redis-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-operator-redis-tls" } }, { "emptyDir": {}, "name": "var-files" }, { "emptyDir": {}, "name": "plugins" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:31:47Z", "generation": 1, "labels": { "app.kubernetes.io/name": "openshift-gitops-server", "pod-template-hash": "55fff69899" }, "name": "openshift-gitops-server-55fff69899", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-gitops-server", "uid": "0151b385-9ad7-43fd-a2b8-60b324274c90" } ], "resourceVersion": "20785", "uid": "9708ad11-f8c8-4c35-bfc2-9468b3e1fe02" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "openshift-gitops-server", "pod-template-hash": "55fff69899" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "openshift-gitops-server", "pod-template-hash": "55fff69899" } }, "spec": { "containers": [ { "command": [ "argocd-server", "--staticassets", "/shared/app", "--dex-server", "https://openshift-gitops-dex-server.openshift-gitops.svc.cluster.local:5556", "--repo-server", "openshift-gitops-repo-server.openshift-gitops.svc.cluster.local:8081", "--redis", "openshift-gitops-redis.openshift-gitops.svc.cluster.local:6379", "--loglevel", "info", "--logformat", "text" ], "env": [ { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "admin.password", "name": "openshift-gitops-redis-initial-password" } } } ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cf3031bb2ed6b19384e996afe598a002893fd70ac0ce14491ff868069c53fc84", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 3, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "argocd-server", "ports": [ { "containerPort": 8080, "protocol": "TCP" }, { "containerPort": 8083, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 3, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "125m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/ssh", "name": "ssh-known-hosts" }, { "mountPath": "/app/config/tls", "name": "tls-certs" }, { "mountPath": "/app/config/server/tls", "name": "argocd-repo-server-tls" }, { "mountPath": "/app/config/server/tls/redis", "name": "argocd-operator-redis-tls" }, { "mountPath": "/home/argocd", "name": "plugins-home" }, { "mountPath": "/home/argocd/params", "name": "argocd-cmd-params-cm" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-gitops-argocd-server", "serviceAccountName": "openshift-gitops-argocd-server", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "argocd-ssh-known-hosts-cm" }, "name": "ssh-known-hosts" }, { "configMap": { "defaultMode": 420, "name": "argocd-tls-certs-cm" }, "name": "tls-certs" }, { "name": "argocd-repo-server-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-repo-server-tls" } }, { "name": "argocd-operator-redis-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-operator-redis-tls" } }, { "emptyDir": {}, "name": "plugins-home" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "server.profile.enabled", "path": "profiler.enabled" } ], "name": "argocd-cmd-params-cm", "optional": true }, "name": "argocd-cmd-params-cm" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "imageregistry.operator.openshift.io/checksum": "sha256:afaf2bf226eddb03448967dbd0bb949658065685083580d7e8dd1c150beb79df", "operator.openshift.io/spec-hash": "726b0a2b441c0b74785f88584e0289c12cf38b9f0b74753290843d3a48ba509b", "release.openshift.io/version": "4.18.9" }, "creationTimestamp": "2026-05-05T17:13:15Z", "generation": 3, "labels": { "docker-registry": "default", "pod-template-hash": "56c8c94dd6" }, "name": "image-registry-56c8c94dd6", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "image-registry", "uid": "064c83c9-ac8f-471b-94b2-9f0732bd4ca2" } ], "resourceVersion": "11488", "uid": "eb75e958-8efc-4200-9e09-10d469a39497" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "docker-registry": "default", "pod-template-hash": "56c8c94dd6" } }, "template": { "metadata": { "annotations": { "imageregistry.operator.openshift.io/dependencies-checksum": "sha256:1409961432d66276542c6ec00f09d4e59f02a679ae3727b60930022a32c4bec9", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "docker-registry": "default", "pod-template-hash": "56c8c94dd6" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "namespaces": [ "openshift-image-registry" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/sh", "-c", "mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem \u0026\u0026 update-ca-trust extract --output /etc/pki/ca-trust/extracted/ \u0026\u0026 exec /usr/bin/dockerregistry" ], "env": [ { "name": "REGISTRY_STORAGE", "value": "s3" }, { "name": "REGISTRY_STORAGE_S3_BUCKET", "value": "2q3t9oik04caie2ahempfbvrkfd2li1v-image-registry-us-east-1-mquw" }, { "name": "REGISTRY_STORAGE_S3_REGION", "value": "us-east-1" }, { "name": "REGISTRY_STORAGE_S3_ENCRYPT", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_FORCEPATHSTYLE", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH", "value": "/var/run/secrets/cloud/credentials" }, { "name": "REGISTRY_STORAGE_S3_USEDUALSTACK", "value": "true" }, { "name": "REGISTRY_HTTP_ADDR", "value": ":5000" }, { "name": "REGISTRY_HTTP_NET", "value": "tcp" }, { "name": "REGISTRY_HTTP_SECRET", "value": "0ca2ce4a629b10a91cf72a52ac1a465aab0d146ad8604879e1ffc732dc3592b194072603ff4de7f26e76168e56f9591a40e47a494534c84b8a18ddfa419ec3b9" }, { "name": "REGISTRY_LOG_LEVEL", "value": "info" }, { "name": "REGISTRY_OPENSHIFT_QUOTA_ENABLED", "value": "true" }, { "name": "REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR", "value": "inmemory" }, { "name": "REGISTRY_STORAGE_DELETE_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL", "value": "10s" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD", "value": "1" }, { "name": "REGISTRY_OPENSHIFT_METRICS_ENABLED", "value": "true" }, { "name": "REGISTRY_OPENSHIFT_SERVER_ADDR", "value": "image-registry.openshift-image-registry.svc:5000" }, { "name": "REGISTRY_HTTP_TLS_CERTIFICATE", "value": "/etc/secrets/tls.crt" }, { "name": "REGISTRY_HTTP_TLS_KEY", "value": "/etc/secrets/tls.key" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0242cefbf0bb876101c4d67ab4e07401cb0ba6c02be2b73a4f17ba33b2960005", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "registry", "ports": [ { "containerPort": 5000, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/cloud", "name": "image-registry-private-configuration", "readOnly": true }, { "mountPath": "/etc/secrets", "name": "registry-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted", "name": "ca-trust-extracted" }, { "mountPath": "/etc/pki/ca-trust/source/anchors", "name": "registry-certificates" }, { "mountPath": "/usr/share/pki/ca-trust-source", "name": "trusted-ca" }, { "mountPath": "/var/lib/kubelet/", "name": "installation-pull-secrets" }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 1000290000, "fsGroupChangePolicy": "OnRootMismatch" }, "serviceAccount": "registry", "serviceAccountName": "registry", "terminationGracePeriodSeconds": 55, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "kubernetes.io/hostname", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "node-role.kubernetes.io/worker", "whenUnsatisfiable": "DoNotSchedule" } ], "volumes": [ { "name": "image-registry-private-configuration", "secret": { "defaultMode": 420, "optional": false, "secretName": "image-registry-private-configuration" } }, { "name": "registry-tls", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "image-registry-tls" } } ] } }, { "emptyDir": {}, "name": "ca-trust-extracted" }, { "configMap": { "defaultMode": 420, "name": "image-registry-certificates" }, "name": "registry-certificates" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "anchors/ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "name": "installation-pull-secrets", "secret": { "defaultMode": 420, "items": [ { "key": ".dockerconfigjson", "path": "config.json" } ], "optional": true, "secretName": "installation-pull-secrets" } }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "4", "imageregistry.operator.openshift.io/checksum": "sha256:24e8696de7ad194839e8d84674cfa1f47d6db53b5779d47f2a280e9677a2826f", "operator.openshift.io/spec-hash": "e8932dc9e76dd4aa171fb87269bc0d19cc270caa345399674e5cc57f59a0aee1", "release.openshift.io/version": "4.18.9" }, "creationTimestamp": "2026-05-05T17:27:12Z", "generation": 2, "labels": { "docker-registry": "default", "pod-template-hash": "5777fd669c" }, "name": "image-registry-5777fd669c", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "image-registry", "uid": "064c83c9-ac8f-471b-94b2-9f0732bd4ca2" } ], "resourceVersion": "14067", "uid": "c32e0a66-3ab8-475e-b773-a1634963adce" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "docker-registry": "default", "pod-template-hash": "5777fd669c" } }, "template": { "metadata": { "annotations": { "imageregistry.operator.openshift.io/dependencies-checksum": "sha256:1444cfad36c8002f62e1f731a998932c473575a8631d11f91f4286558a6c3f16", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "docker-registry": "default", "pod-template-hash": "5777fd669c" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "namespaces": [ "openshift-image-registry" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/sh", "-c", "mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem \u0026\u0026 update-ca-trust extract --output /etc/pki/ca-trust/extracted/ \u0026\u0026 exec /usr/bin/dockerregistry" ], "env": [ { "name": "REGISTRY_STORAGE", "value": "s3" }, { "name": "REGISTRY_STORAGE_S3_BUCKET", "value": "2q3t9oik04caie2ahempfbvrkfd2li1v-image-registry-us-east-1-mquw" }, { "name": "REGISTRY_STORAGE_S3_REGION", "value": "us-east-1" }, { "name": "REGISTRY_STORAGE_S3_ENCRYPT", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_FORCEPATHSTYLE", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH", "value": "/var/run/secrets/cloud/credentials" }, { "name": "REGISTRY_STORAGE_S3_USEDUALSTACK", "value": "true" }, { "name": "REGISTRY_HTTP_ADDR", "value": ":5000" }, { "name": "REGISTRY_HTTP_NET", "value": "tcp" }, { "name": "REGISTRY_HTTP_SECRET", "value": "0ca2ce4a629b10a91cf72a52ac1a465aab0d146ad8604879e1ffc732dc3592b194072603ff4de7f26e76168e56f9591a40e47a494534c84b8a18ddfa419ec3b9" }, { "name": "REGISTRY_LOG_LEVEL", "value": "info" }, { "name": "REGISTRY_OPENSHIFT_QUOTA_ENABLED", "value": "true" }, { "name": "REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR", "value": "inmemory" }, { "name": "REGISTRY_STORAGE_DELETE_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL", "value": "10s" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD", "value": "1" }, { "name": "REGISTRY_OPENSHIFT_METRICS_ENABLED", "value": "true" }, { "name": "REGISTRY_OPENSHIFT_SERVER_ADDR", "value": "image-registry.openshift-image-registry.svc:5000" }, { "name": "REGISTRY_HTTP_TLS_CERTIFICATE", "value": "/etc/secrets/tls.crt" }, { "name": "REGISTRY_HTTP_TLS_KEY", "value": "/etc/secrets/tls.key" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0242cefbf0bb876101c4d67ab4e07401cb0ba6c02be2b73a4f17ba33b2960005", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "registry", "ports": [ { "containerPort": 5000, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/cloud", "name": "image-registry-private-configuration", "readOnly": true }, { "mountPath": "/etc/secrets", "name": "registry-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted", "name": "ca-trust-extracted" }, { "mountPath": "/etc/pki/ca-trust/source/anchors", "name": "registry-certificates" }, { "mountPath": "/usr/share/pki/ca-trust-source", "name": "trusted-ca" }, { "mountPath": "/var/lib/kubelet/", "name": "installation-pull-secrets" }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 1000290000, "fsGroupChangePolicy": "OnRootMismatch" }, "serviceAccount": "registry", "serviceAccountName": "registry", "terminationGracePeriodSeconds": 55, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "kubernetes.io/hostname", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "node-role.kubernetes.io/worker", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "DoNotSchedule" } ], "volumes": [ { "name": "image-registry-private-configuration", "secret": { "defaultMode": 420, "optional": false, "secretName": "image-registry-private-configuration" } }, { "name": "registry-tls", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "image-registry-tls" } } ] } }, { "emptyDir": {}, "name": "ca-trust-extracted" }, { "configMap": { "defaultMode": 420, "name": "image-registry-certificates" }, "name": "registry-certificates" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "anchors/ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "name": "installation-pull-secrets", "secret": { "defaultMode": 420, "items": [ { "key": ".dockerconfigjson", "path": "config.json" } ], "optional": true, "secretName": "installation-pull-secrets" } }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 2, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "3", "imageregistry.operator.openshift.io/checksum": "sha256:82f53ab91965fe2134b263b013249f3280752059fc21f76ae79141bd57e13e97", "operator.openshift.io/spec-hash": "ae5af6dbe9a829c9358e290be15100df41d0ab2b22eab267c77f955692512ff8", "release.openshift.io/version": "4.18.9" }, "creationTimestamp": "2026-05-05T17:26:53Z", "generation": 4, "labels": { "docker-registry": "default", "pod-template-hash": "65d8479d5f" }, "name": "image-registry-65d8479d5f", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "image-registry", "uid": "064c83c9-ac8f-471b-94b2-9f0732bd4ca2" } ], "resourceVersion": "13593", "uid": "afdd03cd-592a-4bba-929b-f9588ea3a1d8" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "docker-registry": "default", "pod-template-hash": "65d8479d5f" } }, "template": { "metadata": { "annotations": { "imageregistry.operator.openshift.io/dependencies-checksum": "sha256:f517c430abbe29b03fe82559665bb0376b893a7ec9cbf56b6a3f79c361834632", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "docker-registry": "default", "pod-template-hash": "65d8479d5f" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "namespaces": [ "openshift-image-registry" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/sh", "-c", "mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem \u0026\u0026 update-ca-trust extract --output /etc/pki/ca-trust/extracted/ \u0026\u0026 exec /usr/bin/dockerregistry" ], "env": [ { "name": "REGISTRY_STORAGE", "value": "s3" }, { "name": "REGISTRY_STORAGE_S3_BUCKET", "value": "2q3t9oik04caie2ahempfbvrkfd2li1v-image-registry-us-east-1-mquw" }, { "name": "REGISTRY_STORAGE_S3_REGION", "value": "us-east-1" }, { "name": "REGISTRY_STORAGE_S3_ENCRYPT", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_FORCEPATHSTYLE", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH", "value": "/var/run/secrets/cloud/credentials" }, { "name": "REGISTRY_STORAGE_S3_USEDUALSTACK", "value": "true" }, { "name": "REGISTRY_HTTP_ADDR", "value": ":5000" }, { "name": "REGISTRY_HTTP_NET", "value": "tcp" }, { "name": "REGISTRY_HTTP_SECRET", "value": "0ca2ce4a629b10a91cf72a52ac1a465aab0d146ad8604879e1ffc732dc3592b194072603ff4de7f26e76168e56f9591a40e47a494534c84b8a18ddfa419ec3b9" }, { "name": "REGISTRY_LOG_LEVEL", "value": "info" }, { "name": "REGISTRY_OPENSHIFT_QUOTA_ENABLED", "value": "true" }, { "name": "REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR", "value": "inmemory" }, { "name": "REGISTRY_STORAGE_DELETE_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL", "value": "10s" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD", "value": "1" }, { "name": "REGISTRY_OPENSHIFT_METRICS_ENABLED", "value": "true" }, { "name": "REGISTRY_OPENSHIFT_SERVER_ADDR", "value": "image-registry.openshift-image-registry.svc:5000" }, { "name": "REGISTRY_HTTP_TLS_CERTIFICATE", "value": "/etc/secrets/tls.crt" }, { "name": "REGISTRY_HTTP_TLS_KEY", "value": "/etc/secrets/tls.key" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0242cefbf0bb876101c4d67ab4e07401cb0ba6c02be2b73a4f17ba33b2960005", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "registry", "ports": [ { "containerPort": 5000, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/cloud", "name": "image-registry-private-configuration", "readOnly": true }, { "mountPath": "/etc/secrets", "name": "registry-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted", "name": "ca-trust-extracted" }, { "mountPath": "/etc/pki/ca-trust/source/anchors", "name": "registry-certificates" }, { "mountPath": "/usr/share/pki/ca-trust-source", "name": "trusted-ca" }, { "mountPath": "/var/lib/kubelet/", "name": "installation-pull-secrets" }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 1000290000, "fsGroupChangePolicy": "OnRootMismatch" }, "serviceAccount": "registry", "serviceAccountName": "registry", "terminationGracePeriodSeconds": 55, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "kubernetes.io/hostname", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "node-role.kubernetes.io/worker", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "DoNotSchedule" } ], "volumes": [ { "name": "image-registry-private-configuration", "secret": { "defaultMode": 420, "optional": false, "secretName": "image-registry-private-configuration" } }, { "name": "registry-tls", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "image-registry-tls" } } ] } }, { "emptyDir": {}, "name": "ca-trust-extracted" }, { "configMap": { "defaultMode": 420, "name": "image-registry-certificates" }, "name": "registry-certificates" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "anchors/ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "name": "installation-pull-secrets", "secret": { "defaultMode": 420, "items": [ { "key": ".dockerconfigjson", "path": "config.json" } ], "optional": true, "secretName": "installation-pull-secrets" } }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "2", "imageregistry.operator.openshift.io/checksum": "sha256:766d6ffc53b4181a0b6ad35d110568b42244b22d5be5b42d40e7fec62071625f", "operator.openshift.io/spec-hash": "183805311edd0666368e06e0ce2b66e49a483d9344f8f93336d1f270db19cf55", "release.openshift.io/version": "4.18.9" }, "creationTimestamp": "2026-05-05T17:22:17Z", "generation": 4, "labels": { "docker-registry": "default", "pod-template-hash": "84f9898b45" }, "name": "image-registry-84f9898b45", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "image-registry", "uid": "064c83c9-ac8f-471b-94b2-9f0732bd4ca2" } ], "resourceVersion": "11915", "uid": "f05841c9-1eba-4b37-ac83-aec9ea749bc3" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "docker-registry": "default", "pod-template-hash": "84f9898b45" } }, "template": { "metadata": { "annotations": { "imageregistry.operator.openshift.io/dependencies-checksum": "sha256:1409961432d66276542c6ec00f09d4e59f02a679ae3727b60930022a32c4bec9", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "docker-registry": "default", "pod-template-hash": "84f9898b45" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "namespaces": [ "openshift-image-registry" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/sh", "-c", "mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem \u0026\u0026 update-ca-trust extract --output /etc/pki/ca-trust/extracted/ \u0026\u0026 exec /usr/bin/dockerregistry" ], "env": [ { "name": "REGISTRY_STORAGE", "value": "s3" }, { "name": "REGISTRY_STORAGE_S3_BUCKET", "value": "2q3t9oik04caie2ahempfbvrkfd2li1v-image-registry-us-east-1-mquw" }, { "name": "REGISTRY_STORAGE_S3_REGION", "value": "us-east-1" }, { "name": "REGISTRY_STORAGE_S3_ENCRYPT", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_FORCEPATHSTYLE", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH", "value": "/var/run/secrets/cloud/credentials" }, { "name": "REGISTRY_STORAGE_S3_USEDUALSTACK", "value": "true" }, { "name": "REGISTRY_HTTP_ADDR", "value": ":5000" }, { "name": "REGISTRY_HTTP_NET", "value": "tcp" }, { "name": "REGISTRY_HTTP_SECRET", "value": "0ca2ce4a629b10a91cf72a52ac1a465aab0d146ad8604879e1ffc732dc3592b194072603ff4de7f26e76168e56f9591a40e47a494534c84b8a18ddfa419ec3b9" }, { "name": "REGISTRY_LOG_LEVEL", "value": "info" }, { "name": "REGISTRY_OPENSHIFT_QUOTA_ENABLED", "value": "true" }, { "name": "REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR", "value": "inmemory" }, { "name": "REGISTRY_STORAGE_DELETE_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL", "value": "10s" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD", "value": "1" }, { "name": "REGISTRY_OPENSHIFT_METRICS_ENABLED", "value": "true" }, { "name": "REGISTRY_OPENSHIFT_SERVER_ADDR", "value": "image-registry.openshift-image-registry.svc:5000" }, { "name": "REGISTRY_HTTP_TLS_CERTIFICATE", "value": "/etc/secrets/tls.crt" }, { "name": "REGISTRY_HTTP_TLS_KEY", "value": "/etc/secrets/tls.key" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0242cefbf0bb876101c4d67ab4e07401cb0ba6c02be2b73a4f17ba33b2960005", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "registry", "ports": [ { "containerPort": 5000, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/cloud", "name": "image-registry-private-configuration", "readOnly": true }, { "mountPath": "/etc/secrets", "name": "registry-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted", "name": "ca-trust-extracted" }, { "mountPath": "/etc/pki/ca-trust/source/anchors", "name": "registry-certificates" }, { "mountPath": "/usr/share/pki/ca-trust-source", "name": "trusted-ca" }, { "mountPath": "/var/lib/kubelet/", "name": "installation-pull-secrets" }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 1000290000, "fsGroupChangePolicy": "OnRootMismatch" }, "serviceAccount": "registry", "serviceAccountName": "registry", "terminationGracePeriodSeconds": 55, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "kubernetes.io/hostname", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "node-role.kubernetes.io/worker", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "DoNotSchedule" } ], "volumes": [ { "name": "image-registry-private-configuration", "secret": { "defaultMode": 420, "optional": false, "secretName": "image-registry-private-configuration" } }, { "name": "registry-tls", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "image-registry-tls" } } ] } }, { "emptyDir": {}, "name": "ca-trust-extracted" }, { "configMap": { "defaultMode": 420, "name": "image-registry-certificates" }, "name": "registry-certificates" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "anchors/ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "name": "installation-pull-secrets", "secret": { "defaultMode": 420, "items": [ { "key": ".dockerconfigjson", "path": "config.json" } ], "optional": true, "secretName": "installation-pull-secrets" } }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-05-05T17:16:21Z", "generation": 2, "labels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "ingresscontroller.operator.openshift.io/hash": "6dd8b66fbf", "pod-template-hash": "6d86b7587c" }, "name": "router-default-6d86b7587c", "namespace": "openshift-ingress", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "router-default", "uid": "664694b0-92cb-4107-93d6-1bc19c1ba146" } ], "resourceVersion": "13860", "uid": "779f2f8c-da8b-4161-b108-d9230e0382ae" }, "spec": { "minReadySeconds": 30, "replicas": 2, "selector": { "matchLabels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "pod-template-hash": "6d86b7587c" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "ingresscontroller.operator.openshift.io/hash": "6dd8b66fbf", "pod-template-hash": "6d86b7587c" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "node.openshift.io/remote-worker", "operator": "NotIn", "values": [ "" ] } ] } ] } }, "podAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/deployment-ingresscontroller", "operator": "In", "values": [ "default" ] }, { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "NotIn", "values": [ "6dd8b66fbf" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] }, "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/deployment-ingresscontroller", "operator": "In", "values": [ "default" ] }, { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "In", "values": [ "6dd8b66fbf" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "env": [ { "name": "DEFAULT_CERTIFICATE_DIR", "value": "/etc/pki/tls/private" }, { "name": "DEFAULT_DESTINATION_CA_PATH", "value": "/var/run/configmaps/service-ca/service-ca.crt" }, { "name": "RELOAD_INTERVAL", "value": "5s" }, { "name": "ROUTER_ALLOW_WILDCARD_ROUTES", "value": "false" }, { "name": "ROUTER_CANONICAL_HOSTNAME", "value": "router-default.apps.rosa.kx-18393292b9.l4c0.p3.openshiftapps.com" }, { "name": "ROUTER_CIPHERS", "value": "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384" }, { "name": "ROUTER_CIPHERSUITES", "value": "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256" }, { "name": "ROUTER_DISABLE_HTTP2", "value": "true" }, { "name": "ROUTER_DISABLE_NAMESPACE_OWNERSHIP_CHECK", "value": "false" }, { "name": "ROUTER_DOMAIN", "value": "apps.rosa.kx-18393292b9.l4c0.p3.openshiftapps.com" }, { "name": "ROUTER_IDLE_CLOSE_ON_RESPONSE", "value": "true" }, { "name": "ROUTER_LOAD_BALANCE_ALGORITHM", "value": "random" }, { "name": "ROUTER_METRICS_TLS_CERT_FILE", "value": "/etc/pki/tls/metrics-certs/tls.crt" }, { "name": "ROUTER_METRICS_TLS_KEY_FILE", "value": "/etc/pki/tls/metrics-certs/tls.key" }, { "name": "ROUTER_METRICS_TYPE", "value": "haproxy" }, { "name": "ROUTER_SERVICE_NAME", "value": "default" }, { "name": "ROUTER_SERVICE_NAMESPACE", "value": "openshift-ingress" }, { "name": "ROUTER_SET_FORWARDED_HEADERS", "value": "append" }, { "name": "ROUTER_TCP_BALANCE_SCHEME", "value": "source" }, { "name": "ROUTER_THREADS", "value": "4" }, { "name": "SSL_MIN_VERSION", "value": "TLSv1.2" }, { "name": "STATS_PASSWORD_FILE", "value": "/var/lib/haproxy/conf/metrics-auth/statsPassword" }, { "name": "STATS_PORT", "value": "1936" }, { "name": "STATS_USERNAME_FILE", "value": "/var/lib/haproxy/conf/metrics-auth/statsUsername" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0c1abef76d6d2832ddcff31e950ffafeb4e0f6fad80a5f5dca94591de0fc9581", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "terminationGracePeriodSeconds": 10, "timeoutSeconds": 1 }, "name": "router", "ports": [ { "containerPort": 80, "name": "http", "protocol": "TCP" }, { "containerPort": 443, "name": "https", "protocol": "TCP" }, { "containerPort": 1936, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/ready", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": true, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 120, "httpGet": { "path": "/healthz/ready", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 1, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/tls/private", "name": "default-certificate", "readOnly": true }, { "mountPath": "/var/run/configmaps/service-ca", "name": "service-ca-bundle", "readOnly": true }, { "mountPath": "/var/lib/haproxy/conf/metrics-auth", "name": "stats-auth", "readOnly": true }, { "mountPath": "/etc/pki/tls/metrics-certs", "name": "metrics-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/worker": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "router", "serviceAccountName": "router", "terminationGracePeriodSeconds": 3600, "tolerations": [ { "effect": "NoExecute", "key": "kubernetes.io/e2e-evict-taint-key", "operator": "Equal", "value": "evictTaintVal" } ], "topologySpreadConstraints": [ { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "In", "values": [ "6dd8b66fbf" ] } ] }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "ScheduleAnyway" } ], "volumes": [ { "name": "default-certificate", "secret": { "defaultMode": 420, "secretName": "2q3t9oik04caie2ahempfbvrkfd2li1v-primary-cert-bundle-secret" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "service-ca-bundle", "optional": false }, "name": "service-ca-bundle" }, { "name": "stats-auth", "secret": { "defaultMode": 420, "secretName": "router-stats-default" } }, { "name": "metrics-certs", "secret": { "defaultMode": 420, "secretName": "router-metrics-certs-default" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 2, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:12:45Z", "generation": 3, "labels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "ingresscontroller.operator.openshift.io/hash": "65879f88cf", "pod-template-hash": "cf86bf95" }, "name": "router-default-cf86bf95", "namespace": "openshift-ingress", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "router-default", "uid": "664694b0-92cb-4107-93d6-1bc19c1ba146" } ], "resourceVersion": "13873", "uid": "60b5570f-9262-465d-a16c-97de6825b285" }, "spec": { "minReadySeconds": 30, "replicas": 0, "selector": { "matchLabels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "pod-template-hash": "cf86bf95" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "ingresscontroller.operator.openshift.io/hash": "65879f88cf", "pod-template-hash": "cf86bf95" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "node.openshift.io/remote-worker", "operator": "NotIn", "values": [ "" ] } ] } ] } }, "podAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/deployment-ingresscontroller", "operator": "In", "values": [ "default" ] }, { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "NotIn", "values": [ "65879f88cf" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] }, "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/deployment-ingresscontroller", "operator": "In", "values": [ "default" ] }, { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "In", "values": [ "65879f88cf" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "env": [ { "name": "DEFAULT_CERTIFICATE_DIR", "value": "/etc/pki/tls/private" }, { "name": "DEFAULT_DESTINATION_CA_PATH", "value": "/var/run/configmaps/service-ca/service-ca.crt" }, { "name": "RELOAD_INTERVAL", "value": "5s" }, { "name": "ROUTER_ALLOW_WILDCARD_ROUTES", "value": "false" }, { "name": "ROUTER_CANONICAL_HOSTNAME", "value": "router-default.apps.rosa.kx-18393292b9.l4c0.p3.openshiftapps.com" }, { "name": "ROUTER_CIPHERS", "value": "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384" }, { "name": "ROUTER_CIPHERSUITES", "value": "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256" }, { "name": "ROUTER_DISABLE_HTTP2", "value": "true" }, { "name": "ROUTER_DISABLE_NAMESPACE_OWNERSHIP_CHECK", "value": "false" }, { "name": "ROUTER_DOMAIN", "value": "apps.rosa.kx-18393292b9.l4c0.p3.openshiftapps.com" }, { "name": "ROUTER_IDLE_CLOSE_ON_RESPONSE", "value": "true" }, { "name": "ROUTER_LOAD_BALANCE_ALGORITHM", "value": "random" }, { "name": "ROUTER_METRICS_TLS_CERT_FILE", "value": "/etc/pki/tls/metrics-certs/tls.crt" }, { "name": "ROUTER_METRICS_TLS_KEY_FILE", "value": "/etc/pki/tls/metrics-certs/tls.key" }, { "name": "ROUTER_METRICS_TYPE", "value": "haproxy" }, { "name": "ROUTER_SERVICE_NAME", "value": "default" }, { "name": "ROUTER_SERVICE_NAMESPACE", "value": "openshift-ingress" }, { "name": "ROUTER_SET_FORWARDED_HEADERS", "value": "append" }, { "name": "ROUTER_TCP_BALANCE_SCHEME", "value": "source" }, { "name": "ROUTER_THREADS", "value": "4" }, { "name": "SSL_MIN_VERSION", "value": "TLSv1.2" }, { "name": "STATS_PASSWORD_FILE", "value": "/var/lib/haproxy/conf/metrics-auth/statsPassword" }, { "name": "STATS_PORT", "value": "1936" }, { "name": "STATS_USERNAME_FILE", "value": "/var/lib/haproxy/conf/metrics-auth/statsUsername" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0c1abef76d6d2832ddcff31e950ffafeb4e0f6fad80a5f5dca94591de0fc9581", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "terminationGracePeriodSeconds": 10, "timeoutSeconds": 1 }, "name": "router", "ports": [ { "containerPort": 80, "name": "http", "protocol": "TCP" }, { "containerPort": 443, "name": "https", "protocol": "TCP" }, { "containerPort": 1936, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/ready", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": true, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 120, "httpGet": { "path": "/healthz/ready", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 1, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/tls/private", "name": "default-certificate", "readOnly": true }, { "mountPath": "/var/run/configmaps/service-ca", "name": "service-ca-bundle", "readOnly": true }, { "mountPath": "/var/lib/haproxy/conf/metrics-auth", "name": "stats-auth", "readOnly": true }, { "mountPath": "/etc/pki/tls/metrics-certs", "name": "metrics-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/worker": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "router", "serviceAccountName": "router", "terminationGracePeriodSeconds": 3600, "tolerations": [ { "effect": "NoExecute", "key": "kubernetes.io/e2e-evict-taint-key", "operator": "Equal", "value": "evictTaintVal" } ], "topologySpreadConstraints": [ { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "In", "values": [ "65879f88cf" ] } ] }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "ScheduleAnyway" } ], "volumes": [ { "name": "default-certificate", "secret": { "defaultMode": 420, "secretName": "default-ingress-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "service-ca-bundle", "optional": false }, "name": "service-ca-bundle" }, { "name": "stats-auth", "secret": { "defaultMode": 420, "secretName": "router-stats-default" } }, { "name": "metrics-certs", "secret": { "defaultMode": 420, "secretName": "router-metrics-certs-default" } } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "config.openshift.io/inject-proxy": "insights-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true" }, "creationTimestamp": "2026-05-05T17:13:15Z", "generation": 1, "labels": { "app": "insights-operator", "pod-template-hash": "6fd96f47fd" }, "name": "insights-operator-6fd96f47fd", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "insights-operator", "uid": "16097062-06b7-4458-a1f1-968053c6fe16" } ], "resourceVersion": "14139", "uid": "f1696c7a-71f4-43d4-a081-955e971a86be" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "insights-operator", "pod-template-hash": "6fd96f47fd" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "insights-operator", "pod-template-hash": "6fd96f47fd" } }, "spec": { "containers": [ { "args": [ "start", "--config=/etc/insights-operator/server.yaml" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "RELEASE_VERSION", "value": "4.18.9" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bb83c9ed575eb45b3d1b046c430011e8ab5172d8bd61ba20309aa8157b65a8d7", "imagePullPolicy": "IfNotPresent", "name": "insights-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "54Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/insights-operator", "name": "snapshots" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/run/configmaps/service-ca-bundle", "name": "service-ca-bundle", "readOnly": true }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "operator", "serviceAccountName": "operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 900 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 900 } ], "volumes": [ { "emptyDir": {}, "name": "snapshots" }, { "configMap": { "defaultMode": 420, "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "service-ca-bundle", "optional": true }, "name": "service-ca-bundle" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "openshift-insights-serving-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true" }, "creationTimestamp": "2026-05-05T17:13:15Z", "generation": 1, "labels": { "app": "kube-storage-version-migrator-operator", "pod-template-hash": "66d58888b9" }, "name": "kube-storage-version-migrator-operator-66d58888b9", "namespace": "openshift-kube-storage-version-migrator-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kube-storage-version-migrator-operator", "uid": "3dd6744c-6725-4ede-96e3-27c544fb8711" } ], "resourceVersion": "14287", "uid": "e736da3b-ac49-4e9a-8e5b-bf2028f4d4c6" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "kube-storage-version-migrator-operator", "pod-template-hash": "66d58888b9" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "kube-storage-version-migrator-operator", "pod-template-hash": "66d58888b9" }, "name": "kube-storage-version-migrator-operator" }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml" ], "command": [ "cluster-kube-storage-version-migrator-operator", "start" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e6ebfeb84922f87603af2498ef3bf8a4665127b28ddc87209a0fc48c229b1448" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9428a5c3cc3a3e5f5a250abcd306499ffb0983a9a7cd064ae5c11dd0cf4fa98c" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.9" }, { "name": "OPERAND_IMAGE_VERSION", "value": "4.18.9" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9428a5c3cc3a3e5f5a250abcd306499ffb0983a9a7cd064ae5c11dd0cf4fa98c", "imagePullPolicy": "IfNotPresent", "name": "kube-storage-version-migrator-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "kube-storage-version-migrator-operator", "serviceAccountName": "kube-storage-version-migrator-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "82b034ec71c9941cc8c82ccb033622ff17b75ab250e2c3077a900d8831871090" }, "creationTimestamp": "2026-05-05T17:26:46Z", "generation": 1, "labels": { "app": "migrator", "pod-template-hash": "6cf78d8f89" }, "name": "migrator-6cf78d8f89", "namespace": "openshift-kube-storage-version-migrator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "migrator", "uid": "4555d635-4338-4b35-b471-142ef9369265" } ], "resourceVersion": "11364", "uid": "0a7e9b2a-2966-4a7b-9782-17b764de1f0a" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "migrator", "pod-template-hash": "6cf78d8f89" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "migrator", "pod-template-hash": "6cf78d8f89" } }, "spec": { "containers": [ { "args": [ "trap 'echo \"Termination signal received, but ignored. Continuing...\"; sleep infinity' TERM\nmigrator \"$@\" \u0026 wait $!", "bash", "--alsologtostderr", "--v=2" ], "command": [ "/bin/bash", "-c" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e6ebfeb84922f87603af2498ef3bf8a4665127b28ddc87209a0fc48c229b1448", "imagePullPolicy": "IfNotPresent", "name": "migrator", "resources": { "requests": { "cpu": "10m", "memory": "200Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "trap 'echo \"Gracefully sleeping for 25s to let another pod start...\"; sleep 25; exit' EXIT\nwhile true; do echo \"Waiting for termination...\"; sleep 3600 \u0026 wait $!; done" ], "command": [ "/bin/bash", "-c" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e6ebfeb84922f87603af2498ef3bf8a4665127b28ddc87209a0fc48c229b1448", "imagePullPolicy": "IfNotPresent", "name": "graceful-termination", "resources": { "requests": { "cpu": "1m", "memory": "1Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "kube-storage-version-migrator-sa", "serviceAccountName": "kube-storage-version-migrator-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/ibm-cloud-managed": "true" }, "creationTimestamp": "2026-05-05T17:12:37Z", "generation": 1, "labels": { "app": "cluster-monitoring-operator", "app.kubernetes.io/name": "cluster-monitoring-operator", "pod-template-hash": "5bfb944964" }, "name": "cluster-monitoring-operator-5bfb944964", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-monitoring-operator", "uid": "d7657a1a-6cce-41e3-827a-925f98627095" } ], "resourceVersion": "12266", "uid": "4a8200d2-4390-4d72-a97a-9107d490d9ad" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "cluster-monitoring-operator", "pod-template-hash": "5bfb944964" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "cluster-monitoring-operator", "app.kubernetes.io/name": "cluster-monitoring-operator", "pod-template-hash": "5bfb944964" } }, "spec": { "containers": [ { "args": [ "-namespace=openshift-monitoring", "-namespace-user-workload=openshift-user-workload-monitoring", "-configmap=cluster-monitoring-config", "-release-version=$(RELEASE_VERSION)", "-v=2", "-cert-file=/etc/tls/private/tls.crt", "-key-file=/etc/tls/private/tls.key", "-images=prometheus-operator=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8c1fac1dd497afa5ea5d8f89d3cce6f30fef8c9cde34940058fc8d98dad38692", "-images=prometheus-config-reloader=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8e158c83ec12b3e0237fab9a221630bd691e79c079a111f346354ff43b8199df", "-images=prometheus-operator-admission-webhook=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:221622a101db9797df0622b4534e3e42c4498df458f355a8a02fad8d65f8e3f2", "-images=configmap-reloader=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a5af62b7c675b596035059ce47d76d499b419fa482305a1c3099a990415dbed8", "-images=prometheus=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c8ba3078651d566566f7855c51c53baedfe6b6c743d316275e81b6e9d242bfb6", "-images=alertmanager=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:753017c5c3fd579e45e9c112b3473b8d9f49bd9b137ee86c196c61e59a8ad213", "-images=node-exporter=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:68abf16a3b6c33fdd22a823c7d00f96aaaa8015d370116962a5835984908645a", "-images=kube-state-metrics=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cbcaf981e14fc28664f280f59a0953e3bf2a70f09c25d4433730951684fbdb59", "-images=openshift-state-metrics=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:09b3e9e6a4f382fb4bbdb67bc945bcf19d66f604b7c8ffd66d4d4a2c94224248", "-images=kube-rbac-proxy=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "-images=telemeter-client=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:70f4702845ec5b627d49504a53a13d997c0578630cddffb89aba5cfebe04fc25", "-images=prom-label-proxy=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2897724cec17bc13acc133181f64ccb8d54ce5dc9582f9cecf704c2540e15600", "-images=thanos=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8f34d18e3a237f96e2b9e9a071e5bf159c04f978ed12af457f1d065e6796220d", "-images=monitoring-plugin=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cf34884c4154c8b470328a8f1fd45ad5f250b8899c57b897bfa0af41fa6efe18", "-images=kube-metrics-server=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6c12532a36e461e69227c6d5266dce4506e963567ec689a8cf6fd2e70ae20bf4" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.9" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:30ff5e5b72f274598704ca69f1832eba1040cc25da47386004fd59500b6e4c55", "imagePullPolicy": "IfNotPresent", "name": "cluster-monitoring-operator", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "75Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "cluster-monitoring-operator-tls", "readOnly": true }, { "mountPath": "/etc/cluster-monitoring-operator/telemetry", "name": "telemetry-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cluster-monitoring-operator", "serviceAccountName": "cluster-monitoring-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node.kubernetes.io/memory-pressure", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "telemetry-config" }, "name": "telemetry-config" }, { "name": "cluster-monitoring-operator-tls", "secret": { "defaultMode": 420, "secretName": "cluster-monitoring-operator-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:27:27Z", "generation": 1, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "kube-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.13.0", "pod-template-hash": "748c6b784b" }, "name": "kube-state-metrics-748c6b784b", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kube-state-metrics", "uid": "cb78ca2b-7743-48da-8500-d2b0ef763117" } ], "resourceVersion": "12891", "uid": "e7a0432d-b61d-4409-8eaa-c077a16afb89" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/name": "kube-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "748c6b784b" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "kube-state-metrics", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "kube-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.13.0", "pod-template-hash": "748c6b784b" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--host=127.0.0.1", "--port=8081", "--telemetry-host=127.0.0.1", "--telemetry-port=8082", "--metric-denylist=\n^kube_secret_labels$,\n^kube_.+_annotations$\n^kube_customresource_.+_annotations_info$,\n^kube_customresource_.+_labels_info$,\n", "--metric-labels-allowlist=pods=[*],nodes=[*],namespaces=[*],persistentvolumes=[*],persistentvolumeclaims=[*],poddisruptionbudgets=[*]", "--metric-denylist=\n^kube_.+_created$,\n^kube_.+_metadata_resource_version$,\n^kube_replicaset_metadata_generation$,\n^kube_replicaset_status_observed_generation$,\n^kube_pod_restart_policy$,\n^kube_pod_init_container_status_terminated$,\n^kube_pod_init_container_status_running$,\n^kube_pod_container_status_terminated$,\n^kube_pod_container_status_running$,\n^kube_pod_completion_time$,\n^kube_pod_status_scheduled$\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cbcaf981e14fc28664f280f59a0953e3bf2a70f09c25d4433730951684fbdb59", "imagePullPolicy": "IfNotPresent", "name": "kube-state-metrics", "resources": { "requests": { "cpu": "2m", "memory": "80Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp", "name": "volume-directive-shadow" }, { "mountPath": "/etc/kube-state-metrics", "name": "kube-state-metrics-custom-resource-state-configmap", "readOnly": true } ] }, { "args": [ "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8081/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-main", "ports": [ { "containerPort": 8443, "name": "https-main", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "kube-state-metrics-tls" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca" }, { "mountPath": "/etc/kube-rbac-policy", "name": "kube-state-metrics-kube-rbac-proxy-config", "readOnly": true } ] }, { "args": [ "--secure-listen-address=:9443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8082/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-self", "ports": [ { "containerPort": 9443, "name": "https-self", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "kube-state-metrics-tls" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca" }, { "mountPath": "/etc/kube-rbac-policy", "name": "kube-state-metrics-kube-rbac-proxy-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kube-state-metrics", "serviceAccountName": "kube-state-metrics", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "volume-directive-shadow" }, { "name": "kube-state-metrics-tls", "secret": { "defaultMode": 420, "secretName": "kube-state-metrics-tls" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "name": "kube-state-metrics-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "kube-state-metrics-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "kube-state-metrics-custom-resource-state-configmap" }, "name": "kube-state-metrics-custom-resource-state-configmap" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:27:32Z", "generation": 1, "labels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "65bdcf6864" }, "name": "metrics-server-65bdcf6864", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "metrics-server", "uid": "46c28d4f-ed81-4187-b947-00eb012d71fb" } ], "resourceVersion": "14307", "uid": "cb5ebb68-838a-431d-9b18-245e8d34c606" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "65bdcf6864" } }, "template": { "metadata": { "annotations": { "monitoring.openshift.io/kubelet-serving-ca-bundle-hash": "9f5tn9ia1s7rs", "monitoring.openshift.io/metrics-client-cert-hash": "9vlees4v7najh", "monitoring.openshift.io/serving-ca-secret-hash": "eld2sa1kk3trb", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "65bdcf6864" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--secure-port=10250", "--kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname", "--kubelet-use-node-status-port", "--metric-resolution=15s", "--kubelet-certificate-authority=/etc/tls/kubelet-serving-ca-bundle/ca-bundle.crt", "--kubelet-client-certificate=/etc/tls/metrics-client-certs/tls.crt", "--kubelet-client-key=/etc/tls/metrics-client-certs/tls.key", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--shutdown-send-retry-after=true", "--shutdown-delay-duration=150s", "--disable-http2-serving=true", "--tls-min-version=VersionTLS12", "--client-ca-file=/etc/client-ca-bundle/client-ca-file", "--requestheader-client-ca-file=/etc/client-ca-bundle/requestheader-client-ca-file", "--requestheader-allowed-names=kube-apiserver-proxy,system:kube-apiserver-proxy,system:openshift-aggregator", "--requestheader-extra-headers-prefix=X-Remote-Extra-", "--requestheader-group-headers=X-Remote-Group", "--requestheader-username-headers=X-Remote-User", "--audit-policy-file=/etc/audit/metadata-profile.yaml", "--audit-log-path=/var/log/metrics-server/audit.log", "--audit-log-maxsize=100", "--audit-log-maxbackup=5", "--audit-log-compress=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6c12532a36e461e69227c6d5266dce4506e963567ec689a8cf6fd2e70ae20bf4", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/livez", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "metrics-server", "ports": [ { "containerPort": 10250, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 6, "httpGet": { "path": "/readyz", "port": "https", "scheme": "HTTPS" }, "initialDelaySeconds": 20, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1m", "memory": "40Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-metrics-server-tls" }, { "mountPath": "/etc/tls/metrics-client-certs", "name": "secret-metrics-client-certs" }, { "mountPath": "/etc/tls/kubelet-serving-ca-bundle", "name": "configmap-kubelet-serving-ca-bundle" }, { "mountPath": "/etc/audit", "name": "metrics-server-audit-profiles", "readOnly": true }, { "mountPath": "/var/log/metrics-server", "name": "audit-log" }, { "mountPath": "/etc/client-ca-bundle", "name": "client-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "metrics-server", "serviceAccountName": "metrics-server", "terminationGracePeriodSeconds": 170, "volumes": [ { "name": "secret-metrics-client-certs", "secret": { "defaultMode": 420, "secretName": "metrics-client-certs" } }, { "name": "secret-metrics-server-tls", "secret": { "defaultMode": 420, "secretName": "metrics-server-tls" } }, { "configMap": { "defaultMode": 420, "name": "kubelet-serving-ca-bundle" }, "name": "configmap-kubelet-serving-ca-bundle" }, { "emptyDir": {}, "name": "audit-log" }, { "configMap": { "defaultMode": 420, "name": "metrics-server-audit-profiles" }, "name": "metrics-server-audit-profiles" }, { "name": "client-ca-bundle", "secret": { "defaultMode": 420, "secretName": "metrics-server-7enii33s4bec" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:27:32Z", "generation": 1, "labels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "65bf488d45" }, "name": "monitoring-plugin-65bf488d45", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "monitoring-plugin", "uid": "df2a727e-0075-4ea3-afe2-452ad30a192c" } ], "resourceVersion": "13682", "uid": "ce29bd06-fc62-4458-afe2-048e16fa9435" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "65bf488d45" } }, "template": { "metadata": { "annotations": { "monitoring.openshift.io/cert-hash": "9u5johalmd4b2", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "65bf488d45" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "automountServiceAccountToken": false, "containers": [ { "args": [ "-config-path=/opt/app-root/web/dist", "-static-path=/opt/app-root/web/dist", "-cert=/var/cert/tls.crt", "-key=/var/cert/tls.key" ], "command": [ "/opt/app-root/plugin-backend" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cf34884c4154c8b470328a8f1fd45ad5f250b8899c57b897bfa0af41fa6efe18", "imagePullPolicy": "IfNotPresent", "name": "monitoring-plugin", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/cert", "name": "monitoring-plugin-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "monitoring-plugin-cert", "secret": { "defaultMode": 420, "secretName": "monitoring-plugin-cert" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:27:26Z", "generation": 1, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "openshift-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "774bc9686d" }, "name": "openshift-state-metrics-774bc9686d", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-state-metrics", "uid": "ebd775f8-7dbe-41a7-99f4-0533308dfb3a" } ], "resourceVersion": "12810", "uid": "4cc66a0b-c3f3-40fa-97de-637e0cd01b53" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/name": "openshift-state-metrics", "pod-template-hash": "774bc9686d" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "openshift-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "774bc9686d" } }, "spec": { "containers": [ { "args": [ "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8081/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-policy/config.yaml", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-main", "ports": [ { "containerPort": 8443, "name": "https-main", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "openshift-state-metrics-tls" }, { "mountPath": "/etc/kube-rbac-policy", "name": "openshift-state-metrics-kube-rbac-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] }, { "args": [ "--secure-listen-address=:9443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8082/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-policy/config.yaml", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-self", "ports": [ { "containerPort": 9443, "name": "https-self", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "openshift-state-metrics-tls" }, { "mountPath": "/etc/kube-rbac-policy", "name": "openshift-state-metrics-kube-rbac-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] }, { "args": [ "--host=127.0.0.1", "--port=8081", "--telemetry-host=127.0.0.1", "--telemetry-port=8082" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:09b3e9e6a4f382fb4bbdb67bc945bcf19d66f604b7c8ffd66d4d4a2c94224248", "imagePullPolicy": "IfNotPresent", "name": "openshift-state-metrics", "resources": { "requests": { "cpu": "1m", "memory": "32Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-state-metrics", "serviceAccountName": "openshift-state-metrics", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "openshift-state-metrics-tls", "secret": { "defaultMode": 420, "secretName": "openshift-state-metrics-tls" } }, { "name": "openshift-state-metrics-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "openshift-state-metrics-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:27:17Z", "generation": 1, "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.78.1", "pod-template-hash": "6995c4db54" }, "name": "prometheus-operator-6995c4db54", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "prometheus-operator", "uid": "05b604f8-9981-4725-acd8-37b4b9979638" } ], "resourceVersion": "12210", "uid": "6d9d39ac-b08b-41a8-bf4c-ac1f10f6d397" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/name": "prometheus-operator", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "6995c4db54" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "prometheus-operator", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.78.1", "pod-template-hash": "6995c4db54" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--kubelet-service=kube-system/kubelet", "--prometheus-config-reloader=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8e158c83ec12b3e0237fab9a221630bd691e79c079a111f346354ff43b8199df", "--kubelet-endpoints=true", "--kubelet-endpointslice=false", "--prometheus-instance-namespaces=openshift-monitoring", "--thanos-ruler-instance-namespaces=openshift-monitoring", "--alertmanager-instance-namespaces=openshift-monitoring", "--config-reloader-cpu-limit=0", "--config-reloader-memory-limit=0", "--config-reloader-cpu-request=1m", "--config-reloader-memory-request=10Mi", "--web.listen-address=127.0.0.1:8080", "--controller-id=openshift-monitoring/prometheus-operator" ], "env": [ { "name": "GOGC", "value": "30" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8c1fac1dd497afa5ea5d8f89d3cce6f30fef8c9cde34940058fc8d98dad38692", "imagePullPolicy": "IfNotPresent", "name": "prometheus-operator", "resources": { "requests": { "cpu": "5m", "memory": "150Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://localhost:8080/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "prometheus-operator-tls", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true }, { "mountPath": "/etc/kube-rbac-policy", "name": "prometheus-operator-kube-rbac-proxy-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "prometheus-operator", "serviceAccountName": "prometheus-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "prometheus-operator-tls", "secret": { "defaultMode": 420, "secretName": "prometheus-operator-tls" } }, { "name": "prometheus-operator-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "prometheus-operator-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:27:12Z", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.78.1", "pod-template-hash": "7d979c648b" }, "name": "prometheus-operator-admission-webhook-7d979c648b", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "prometheus-operator-admission-webhook", "uid": "bb0ad17d-5029-4c6f-9dce-9dfaefe38d1d" } ], "resourceVersion": "12151", "uid": "5a83d9e6-311d-49c4-b8b7-abc4a62ff834" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "7d979c648b" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "prometheus-operator-admission-webhook", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.78.1", "pod-template-hash": "7d979c648b" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "automountServiceAccountToken": false, "containers": [ { "args": [ "--web.enable-tls=true", "--web.cert-file=/etc/tls/private/tls.crt", "--web.key-file=/etc/tls/private/tls.key", "--web.tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--web.tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:221622a101db9797df0622b4534e3e42c4498df458f355a8a02fad8d65f8e3f2", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "prometheus-operator-admission-webhook", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "5m", "memory": "30Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "tls-certificates", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "prometheus-operator-admission-webhook", "serviceAccountName": "prometheus-operator-admission-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls-certificates", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "prometheus-operator-admission-webhook-tls" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:28:51Z", "generation": 1, "labels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "telemeter-client", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "87f7df849" }, "name": "telemeter-client-87f7df849", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "telemeter-client", "uid": "5acf02b7-fd3c-406f-9623-c0009a6f67ac" } ], "resourceVersion": "14738", "uid": "327a01d9-dac9-4122-a73f-576f6200dddd" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/name": "telemeter-client", "pod-template-hash": "87f7df849" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}", "telemeter-token-hash": "3gof03q7c3qkv" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "telemeter-client", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "87f7df849" } }, "spec": { "containers": [ { "command": [ "/usr/bin/telemeter-client", "--id=$(ID)", "--from=$(FROM)", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--from-ca-file=/etc/serving-certs-ca-bundle/service-ca.crt", "--from-token-file=/var/run/secrets/kubernetes.io/serviceaccount/token", "--to=$(TO)", "--to-token-file=/etc/telemeter/token", "--listen=localhost:8080", "--anonymize-salt-file=/etc/telemeter/salt", "--anonymize-labels=$(ANONYMIZE_LABELS)", "--match={__name__=~\"cluster:usage:.*\"}", "--match={__name__=\"count:up0\"}", "--match={__name__=\"count:up1\"}", "--match={__name__=\"cluster_version\"}", "--match={__name__=\"cluster_version_available_updates\"}", "--match={__name__=\"cluster_version_capability\"}", "--match={__name__=\"cluster_operator_up\"}", "--match={__name__=\"cluster_operator_conditions\"}", "--match={__name__=\"cluster_version_payload\"}", "--match={__name__=\"cluster_installer\"}", "--match={__name__=\"cluster_infrastructure_provider\"}", "--match={__name__=\"cluster_feature_set\"}", "--match={__name__=\"instance:etcd_object_counts:sum\"}", "--match={__name__=\"ALERTS\",alertstate=\"firing\",severity=~\"critical|warning|info|none\"}", "--match={__name__=\"code:apiserver_request_total:rate:sum\"}", "--match={__name__=\"cluster:capacity_cpu_cores:sum\"}", "--match={__name__=\"cluster:capacity_memory_bytes:sum\"}", "--match={__name__=\"cluster:cpu_usage_cores:sum\"}", "--match={__name__=\"cluster:memory_usage_bytes:sum\"}", "--match={__name__=\"openshift:cpu_usage_cores:sum\"}", "--match={__name__=\"openshift:memory_usage_bytes:sum\"}", "--match={__name__=\"workload:cpu_usage_cores:sum\"}", "--match={__name__=\"workload:memory_usage_bytes:sum\"}", "--match={__name__=\"cluster:virt_platform_nodes:sum\"}", "--match={__name__=\"cluster:node_instance_type_count:sum\"}", "--match={__name__=\"cnv:vmi_status_running:count\"}", "--match={__name__=\"cnv_abnormal\", reason=~\"memory_working_set_delta_from_request|memory_rss_delta_from_request\"}", "--match={__name__=\"cluster:vmi_request_cpu_cores:sum\"}", "--match={__name__=\"node_role_os_version_machine:cpu_capacity_cores:sum\"}", "--match={__name__=\"node_role_os_version_machine:cpu_capacity_sockets:sum\"}", "--match={__name__=\"subscription_sync_total\"}", "--match={__name__=\"olm_resolution_duration_seconds\"}", "--match={__name__=\"csv_succeeded\"}", "--match={__name__=\"csv_abnormal\"}", "--match={__name__=\"cluster:kube_persistentvolumeclaim_resource_requests_storage_bytes:provisioner:sum\"}", "--match={__name__=\"cluster:kubelet_volume_stats_used_bytes:provisioner:sum\"}", "--match={__name__=\"ceph_cluster_total_bytes\"}", "--match={__name__=\"ceph_cluster_total_used_raw_bytes\"}", "--match={__name__=\"ceph_health_status\"}", "--match={__name__=\"odf_system_raw_capacity_total_bytes\"}", "--match={__name__=\"odf_system_raw_capacity_used_bytes\"}", "--match={__name__=\"odf_system_health_status\"}", "--match={__name__=\"job:ceph_osd_metadata:count\"}", "--match={__name__=\"job:kube_pv:count\"}", "--match={__name__=\"job:odf_system_pvs:count\"}", "--match={__name__=\"job:ceph_pools_iops:total\"}", "--match={__name__=\"job:ceph_pools_iops_bytes:total\"}", "--match={__name__=\"job:ceph_versions_running:count\"}", "--match={__name__=\"job:noobaa_total_unhealthy_buckets:sum\"}", "--match={__name__=\"job:noobaa_bucket_count:sum\"}", "--match={__name__=\"job:noobaa_total_object_count:sum\"}", "--match={__name__=\"odf_system_bucket_count\", system_type=\"OCS\", system_vendor=\"Red Hat\"}", "--match={__name__=\"odf_system_objects_total\", system_type=\"OCS\", system_vendor=\"Red Hat\"}", "--match={__name__=\"noobaa_accounts_num\"}", "--match={__name__=\"noobaa_total_usage\"}", "--match={__name__=\"console_url\"}", "--match={__name__=\"cluster:console_auth_login_requests_total:sum\"}", "--match={__name__=\"cluster:console_auth_login_successes_total:sum\"}", "--match={__name__=\"cluster:console_auth_login_failures_total:sum\"}", "--match={__name__=\"cluster:console_auth_logout_requests_total:sum\"}", "--match={__name__=\"cluster:console_usage_users:max\"}", "--match={__name__=\"cluster:console_plugins_info:max\"}", "--match={__name__=\"cluster:console_customization_perspectives_info:max\"}", "--match={__name__=\"cluster:ovnkube_controller_egress_routing_via_host:max\"}", "--match={__name__=\"cluster:ovnkube_controller_admin_network_policies_db_objects:max\",table_name=~\"ACL|Address_Set\"}", "--match={__name__=\"cluster:ovnkube_controller_baseline_admin_network_policies_db_objects:max\",table_name=~\"ACL|Address_Set\"}", "--match={__name__=\"cluster:ovnkube_controller_admin_network_policies_rules:max\",direction=~\"Ingress|Egress\",action=~\"Pass|Allow|Deny\"}", "--match={__name__=\"cluster:ovnkube_controller_baseline_admin_network_policies_rules:max\",direction=~\"Ingress|Egress\",action=~\"Allow|Deny\"}", "--match={__name__=\"cluster:network_attachment_definition_instances:max\"}", "--match={__name__=\"cluster:network_attachment_definition_enabled_instance_up:max\"}", "--match={__name__=\"cluster:ingress_controller_aws_nlb_active:sum\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:min\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:max\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:avg\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:median\"}", "--match={__name__=\"cluster:openshift_route_info:tls_termination:sum\"}", "--match={__name__=\"insightsclient_request_send_total\"}", "--match={__name__=\"cam_app_workload_migrations\"}", "--match={__name__=\"cluster:apiserver_current_inflight_requests:sum:max_over_time:2m\"}", "--match={__name__=\"cluster:alertmanager_integrations:max\"}", "--match={__name__=\"cluster:telemetry_selected_series:count\"}", "--match={__name__=\"openshift:prometheus_tsdb_head_series:sum\"}", "--match={__name__=\"openshift:prometheus_tsdb_head_samples_appended_total:sum\"}", "--match={__name__=\"monitoring:container_memory_working_set_bytes:sum\"}", "--match={__name__=\"namespace_job:scrape_series_added:topk3_sum1h\"}", "--match={__name__=\"namespace_job:scrape_samples_post_metric_relabeling:topk3\"}", "--match={__name__=\"monitoring:haproxy_server_http_responses_total:sum\"}", "--match={__name__=\"profile:cluster_monitoring_operator_collection_profile:max\"}", "--match={__name__=\"vendor_model:node_accelerator_cards:sum\",vendor=~\"NVIDIA|AMD|GAUDI|INTEL|QUALCOMM\"}", "--match={__name__=\"rhmi_status\"}", "--match={__name__=\"status:upgrading:version:rhoam_state:max\"}", "--match={__name__=\"state:rhoam_critical_alerts:max\"}", "--match={__name__=\"state:rhoam_warning_alerts:max\"}", "--match={__name__=\"rhoam_7d_slo_percentile:max\"}", "--match={__name__=\"rhoam_7d_slo_remaining_error_budget:max\"}", "--match={__name__=\"cluster_legacy_scheduler_policy\"}", "--match={__name__=\"cluster_master_schedulable\"}", "--match={__name__=\"che_workspace_status\"}", "--match={__name__=\"che_workspace_started_total\"}", "--match={__name__=\"che_workspace_failure_total\"}", "--match={__name__=\"che_workspace_start_time_seconds_sum\"}", "--match={__name__=\"che_workspace_start_time_seconds_count\"}", "--match={__name__=\"cco_credentials_mode\"}", "--match={__name__=\"cluster:kube_persistentvolume_plugin_type_counts:sum\"}", "--match={__name__=\"acm_managed_cluster_info\"}", "--match={__name__=\"acm_managed_cluster_worker_cores:max\"}", "--match={__name__=\"acm_console_page_count:sum\", page=~\"overview-classic|overview-fleet|search|search-details|clusters|application|governance\"}", "--match={__name__=\"cluster:vsphere_vcenter_info:sum\"}", "--match={__name__=\"cluster:vsphere_esxi_version_total:sum\"}", "--match={__name__=\"cluster:vsphere_node_hw_version_total:sum\"}", "--match={__name__=\"openshift:build_by_strategy:sum\"}", "--match={__name__=\"rhods_aggregate_availability\"}", "--match={__name__=\"rhods_total_users\"}", "--match={__name__=\"instance:etcd_disk_wal_fsync_duration_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"instance:etcd_mvcc_db_total_size_in_bytes:sum\"}", "--match={__name__=\"instance:etcd_network_peer_round_trip_time_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"instance:etcd_mvcc_db_total_size_in_use_in_bytes:sum\"}", "--match={__name__=\"instance:etcd_disk_backend_commit_duration_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"jaeger_operator_instances_storage_types\"}", "--match={__name__=\"jaeger_operator_instances_strategies\"}", "--match={__name__=\"jaeger_operator_instances_agent_strategies\"}", "--match={__name__=\"type:tempo_operator_tempostack_storage_backend:sum\",type=~\"azure|gcs|s3\"}", "--match={__name__=\"state:tempo_operator_tempostack_managed:sum\",state=~\"Managed|Unmanaged\"}", "--match={__name__=\"type:tempo_operator_tempostack_multi_tenancy:sum\",type=~\"enabled|disabled\"}", "--match={__name__=\"enabled:tempo_operator_tempostack_jaeger_ui:sum\",enabled=~\"true|false\"}", "--match={__name__=\"type:opentelemetry_collector_receivers:sum\",type=~\"jaegerreceiver|hostmetricsreceiver|opencensusreceiver|prometheusreceiver|zipkinreceiver|kafkareceiver|filelogreceiver|journaldreceiver|k8seventsreceiver|kubeletstatsreceiver|k8sclusterreceiver|k8sobjectsreceiver\"}", "--match={__name__=\"type:opentelemetry_collector_exporters:sum\",type=~\"debugexporter|loggingexporter|otlpexporter|otlphttpexporter|prometheusexporter|lokiexporter|kafkaexporter|awscloudwatchlogsexporter|loadbalancingexporter\"}", "--match={__name__=\"type:opentelemetry_collector_processors:sum\",type=~\"batchprocessor|memorylimiterprocessor|attributesprocessor|resourceprocessor|spanprocessor|k8sattributesprocessor|resourcedetectionprocessor|filterprocessor|routingprocessor|cumulativetodeltaprocessor|groupbyattrsprocessor\"}", "--match={__name__=\"type:opentelemetry_collector_extensions:sum\",type=~\"zpagesextension|ballastextension|memorylimiterextension|jaegerremotesampling|healthcheckextension|pprofextension|oauth2clientauthextension|oidcauthextension|bearertokenauthextension|filestorage\"}", "--match={__name__=\"type:opentelemetry_collector_connectors:sum\",type=~\"spanmetricsconnector|forwardconnector\"}", "--match={__name__=\"type:opentelemetry_collector_info:sum\",type=~\"deployment|daemonset|sidecar|statefulset\"}", "--match={__name__=\"appsvcs:cores_by_product:sum\"}", "--match={__name__=\"nto_custom_profiles:count\"}", "--match={__name__=\"openshift_csi_share_configmap\"}", "--match={__name__=\"openshift_csi_share_secret\"}", "--match={__name__=\"openshift_csi_share_mount_failures_total\"}", "--match={__name__=\"openshift_csi_share_mount_requests_total\"}", "--match={__name__=\"eo_es_storage_info\"}", "--match={__name__=\"eo_es_redundancy_policy_info\"}", "--match={__name__=\"eo_es_defined_delete_namespaces_total\"}", "--match={__name__=\"eo_es_misconfigured_memory_resources_info\"}", "--match={__name__=\"cluster:eo_es_data_nodes_total:max\"}", "--match={__name__=\"cluster:eo_es_documents_created_total:sum\"}", "--match={__name__=\"cluster:eo_es_documents_deleted_total:sum\"}", "--match={__name__=\"pod:eo_es_shards_total:max\"}", "--match={__name__=\"eo_es_cluster_management_state_info\"}", "--match={__name__=\"imageregistry:imagestreamtags_count:sum\"}", "--match={__name__=\"imageregistry:operations_count:sum\"}", "--match={__name__=\"log_logging_info\"}", "--match={__name__=\"log_collector_error_count_total\"}", "--match={__name__=\"log_forwarder_pipeline_info\"}", "--match={__name__=\"log_forwarder_input_info\"}", "--match={__name__=\"log_forwarder_output_info\"}", "--match={__name__=\"cluster:log_collected_bytes_total:sum\"}", "--match={__name__=\"cluster:log_logged_bytes_total:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_pipelines:sum\"}", "--match={__name__=\"openshift_logging:log_forwarders:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_input_type:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_output_type:sum\"}", "--match={__name__=\"openshift_logging:vector_component_received_bytes_total:rate5m\"}", "--match={__name__=\"cluster:kata_monitor_running_shim_count:sum\"}", "--match={__name__=\"platform:hypershift_hostedclusters:max\"}", "--match={__name__=\"platform:hypershift_nodepools:max\"}", "--match={__name__=\"cluster_name:hypershift_nodepools_size:sum\"}", "--match={__name__=\"cluster_name:hypershift_nodepools_available_replicas:sum\"}", "--match={__name__=\"namespace:noobaa_unhealthy_bucket_claims:max\"}", "--match={__name__=\"namespace:noobaa_buckets_claims:max\"}", "--match={__name__=\"namespace:noobaa_unhealthy_namespace_resources:max\"}", "--match={__name__=\"namespace:noobaa_namespace_resources:max\"}", "--match={__name__=\"namespace:noobaa_unhealthy_namespace_buckets:max\"}", "--match={__name__=\"namespace:noobaa_namespace_buckets:max\"}", "--match={__name__=\"namespace:noobaa_accounts:max\"}", "--match={__name__=\"namespace:noobaa_usage:max\"}", "--match={__name__=\"namespace:noobaa_system_health_status:max\"}", "--match={__name__=\"ocs_advanced_feature_usage\"}", "--match={__name__=\"os_image_url_override:sum\"}", "--match={__name__=\"cluster:vsphere_topology_tags:max\"}", "--match={__name__=\"cluster:vsphere_infrastructure_failure_domains:max\"}", "--match={__name__=\"apiserver_list_watch_request_success_total:rate:sum\", verb=~\"LIST|WATCH\"}", "--match={__name__=\"rhacs:telemetry:rox_central_info\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_clusters\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_nodes\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_vcpus\"}", "--match={__name__=\"rhacs:telemetry:rox_sensor_info\"}", "--match={__name__=\"cluster:volume_manager_selinux_pod_context_mismatch_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volume_context_mismatch_warnings_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volume_context_mismatch_errors_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volumes_admitted_total\"}", "--match={__name__=\"ols:provider_model_configuration\"}", "--match={__name__=\"ols:rest_api_query_calls_total:2xx\"}", "--match={__name__=\"ols:rest_api_query_calls_total:4xx\"}", "--match={__name__=\"ols:rest_api_query_calls_total:5xx\"}", "--match={__name__=\"openshift:openshift_network_operator_ipsec_state:info\"}", "--match={__name__=\"cluster:health:group_severity:count\", severity=~\"critical|warning|info|none\"}", "--limit-bytes=5242880" ], "env": [ { "name": "ANONYMIZE_LABELS" }, { "name": "FROM", "value": "https://prometheus-k8s.openshift-monitoring.svc:9091" }, { "name": "ID", "value": "91f7018b-a7a3-4d5d-be99-6a79597fa906" }, { "name": "TO", "value": "https://infogw.api.openshift.com/" }, { "name": "HTTP_PROXY" }, { "name": "HTTPS_PROXY" }, { "name": "NO_PROXY" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:70f4702845ec5b627d49504a53a13d997c0578630cddffb89aba5cfebe04fc25", "imagePullPolicy": "IfNotPresent", "name": "telemeter-client", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "40Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/serving-certs-ca-bundle", "name": "serving-certs-ca-bundle" }, { "mountPath": "/etc/telemeter", "name": "secret-telemeter-client" }, { "mountPath": "/etc/tls/private", "name": "federate-client-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem/", "name": "telemeter-trusted-ca-bundle", "readOnly": true } ] }, { "args": [ "--reload-url=http://localhost:8080/-/reload", "--watched-dir=/etc/serving-certs-ca-bundle" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8e158c83ec12b3e0237fab9a221630bd691e79c079a111f346354ff43b8199df", "imagePullPolicy": "IfNotPresent", "name": "reload", "resources": { "requests": { "cpu": "1m", "memory": "10Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/serving-certs-ca-bundle", "name": "serving-certs-ca-bundle" } ] }, { "args": [ "--secure-listen-address=:8443", "--upstream=http://127.0.0.1:8080/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--config-file=/etc/kube-rbac-policy/config.yaml", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "telemeter-client-tls" }, { "mountPath": "/etc/kube-rbac-policy", "name": "secret-telemeter-client-kube-rbac-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "telemeter-client", "serviceAccountName": "telemeter-client", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "telemeter-client-serving-certs-ca-bundle" }, "name": "serving-certs-ca-bundle" }, { "name": "secret-telemeter-client", "secret": { "defaultMode": 420, "secretName": "telemeter-client" } }, { "name": "telemeter-client-tls", "secret": { "defaultMode": 420, "secretName": "telemeter-client-tls" } }, { "name": "federate-client-tls", "secret": { "defaultMode": 420, "secretName": "federate-client-certs" } }, { "name": "secret-telemeter-client-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "telemeter-client-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "telemeter-trusted-ca-bundle-56c9b9fa8d9gs", "optional": true }, "name": "telemeter-trusted-ca-bundle" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:27:30Z", "generation": 1, "labels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.36.1", "pod-template-hash": "6f9c7bb9c9" }, "name": "thanos-querier-6f9c7bb9c9", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "thanos-querier", "uid": "cf2616c7-1cf3-4335-b65c-455348854baa" } ], "resourceVersion": "13793", "uid": "f6c552e1-d283-4cd9-9ea0-57d8910ad213" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "6f9c7bb9c9" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.36.1", "pod-template-hash": "6f9c7bb9c9" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "query", "--grpc-address=127.0.0.1:10901", "--http-address=127.0.0.1:9090", "--log.format=logfmt", "--query.replica-label=prometheus_replica", "--query.replica-label=thanos_ruler_replica", "--endpoint=dnssrv+_grpc._tcp.prometheus-operated.openshift-monitoring.svc.cluster.local", "--query.auto-downsampling", "--store.sd-dns-resolver=miekgdns", "--grpc-client-tls-secure", "--grpc-client-tls-cert=/etc/tls/grpc/client.crt", "--grpc-client-tls-key=/etc/tls/grpc/client.key", "--grpc-client-tls-ca=/etc/tls/grpc/ca.crt", "--grpc-client-server-name=prometheus-grpc", "--rule=dnssrv+_grpc._tcp.prometheus-operated.openshift-monitoring.svc.cluster.local", "--target=dnssrv+_grpc._tcp.prometheus-operated.openshift-monitoring.svc.cluster.local", "--web.disable-cors" ], "env": [ { "name": "HOST_IP_ADDRESS", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "status.hostIP" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8f34d18e3a237f96e2b9e9a071e5bf159c04f978ed12af457f1d065e6796220d", "imagePullPolicy": "IfNotPresent", "name": "thanos-query", "ports": [ { "containerPort": 9090, "name": "http", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "12Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/grpc", "name": "secret-grpc-tls" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9091", "--upstream=http://127.0.0.1:9090", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--ignore-paths=/-/healthy,/-/ready", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 4, "httpGet": { "path": "/-/healthy", "port": 9091, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "kube-rbac-proxy-web", "ports": [ { "containerPort": 9091, "name": "web", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 20, "httpGet": { "path": "/-/ready", "port": 9091, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy-web" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9092", "--upstream=http://127.0.0.1:9095", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--allow-paths=/api/v1/query,/api/v1/query_range,/api/v1/labels,/api/v1/label/*/values,/api/v1/series", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9092, "name": "tenancy", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy" } ] }, { "args": [ "--insecure-listen-address=127.0.0.1:9095", "--upstream=http://127.0.0.1:9090", "--label=namespace", "--enable-label-apis", "--error-on-replace", "--rules-with-active-alerts" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2897724cec17bc13acc133181f64ccb8d54ce5dc9582f9cecf704c2540e15600", "imagePullPolicy": "IfNotPresent", "name": "prom-label-proxy", "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--secure-listen-address=0.0.0.0:9093", "--upstream=http://127.0.0.1:9095", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--allow-paths=/api/v1/rules,/api/v1/alerts", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-rules", "ports": [ { "containerPort": 9093, "name": "tenancy-rules", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy-rules" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9094", "--upstream=http://127.0.0.1:9090", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--client-ca-file=/etc/tls/client/client-ca.crt", "--allow-paths=/metrics", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1c7c24111f1709d7648156873ced09462638aa4b3cf7e7aee13297e51bcdfb3e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-metrics", "ports": [ { "containerPort": 9094, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy-metrics" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "thanos-querier", "serviceAccountName": "thanos-querier", "terminationGracePeriodSeconds": 120, "volumes": [ { "name": "secret-thanos-querier-tls", "secret": { "defaultMode": 420, "secretName": "thanos-querier-tls" } }, { "name": "secret-thanos-querier-kube-rbac-proxy", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy" } }, { "name": "secret-thanos-querier-kube-rbac-proxy-web", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy-web" } }, { "name": "secret-thanos-querier-kube-rbac-proxy-rules", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy-rules" } }, { "name": "secret-thanos-querier-kube-rbac-proxy-metrics", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy-metrics" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "name": "secret-grpc-tls", "secret": { "defaultMode": 420, "secretName": "thanos-querier-grpc-tls-9tld89h8e72hm" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "kubernetes.io/description": "This deployment deploys the Networking console plugin pod which serves\nthe contents of the Networking section in OpenShift Console\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.18.9" }, "creationTimestamp": "2026-05-05T17:13:23Z", "generation": 1, "labels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator", "pod-template-hash": "6d95f7dc7" }, "name": "networking-console-plugin-6d95f7dc7", "namespace": "openshift-network-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "networking-console-plugin", "uid": "70dc9586-25dd-43a4-8ef2-d6a191a9e9a9" } ], "resourceVersion": "12124", "uid": "e7148814-c564-43ca-be4c-7d6fda8f954a" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator", "pod-template-hash": "6d95f7dc7" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator", "pod-template-hash": "6d95f7dc7" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator" } }, "namespaces": [ "openshift-network-console" ], "topologyKey": "kubernetes.io/hostname" }, "weight": 90 } ] } }, "automountServiceAccountToken": false, "containers": [ { "command": [ "/bin/sh", "-c", "if echo \"$POD_IP\" | grep -qE '^([0-9]{1,3}\\.){3}[0-9]{1,3}$'; then\n LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME=\"9443\"\nelse\n LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME=\"[::]:9443\"\nfi\nsed \"s/LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME/$LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME/g\" /etc/nginx/nginx.conf \u003e /tmp/nginx.conf\nexec nginx -c /tmp/nginx.conf -g 'daemon off;'\n" ], "env": [ { "name": "POD_IP", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "status.podIP" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13aabbaf260d634ff0e9ac1af88af075b5ba671fd51313e33e74d7d2f7e54128", "imagePullPolicy": "IfNotPresent", "name": "networking-console-plugin", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/cert", "name": "networking-console-plugin-cert", "readOnly": true }, { "mountPath": "/etc/nginx/nginx.conf", "name": "nginx-conf", "readOnly": true, "subPath": "nginx.conf" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "networking-console-plugin" }, "name": "nginx-conf" }, { "name": "networking-console-plugin-cert", "secret": { "defaultMode": 420, "secretName": "networking-console-plugin-cert" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "kubernetes.io/description": "This deployment deploys the network-check-source pod that performs\npod network connectivity checks\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.18.9" }, "creationTimestamp": "2026-05-05T17:13:19Z", "generation": 1, "labels": { "app": "network-check-source", "kubernetes.io/os": "linux", "pod-template-hash": "658d84f764" }, "name": "network-check-source-658d84f764", "namespace": "openshift-network-diagnostics", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "network-check-source", "uid": "c3efed7a-587a-4f94-a5d8-61e351f822d9" } ], "resourceVersion": "11085", "uid": "5f2a86b7-39be-4734-a445-57c0ef81a10f" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "network-check-source", "pod-template-hash": "658d84f764" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "network-check-source", "kubernetes.io/os": "linux", "pod-template-hash": "658d84f764" } }, "spec": { "containers": [ { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)" ], "command": [ "cluster-network-check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:894452e6587de55d04e37163d3da53e11fced8fb08bd0acf61e6d49f7964284e", "imagePullPolicy": "IfNotPresent", "name": "check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "40Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "network-diagnostics", "serviceAccountName": "network-diagnostics", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:31:39Z", "generation": 1, "labels": { "control-plane": "gitops-operator", "pod-template-hash": "667b5f7494" }, "name": "openshift-gitops-operator-controller-manager-667b5f7494", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-gitops-operator-controller-manager", "uid": "04f9d7fb-0a81-43a0-8926-58af544ea41d" } ], "resourceVersion": "19062", "uid": "7586212b-9823-4ac1-a8f2-f6e244c9844e" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "gitops-operator", "pod-template-hash": "667b5f7494" } }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"argoproj.io/v1alpha1\",\n \"kind\": \"AppProject\",\n \"metadata\": {\n \"name\": \"example\"\n },\n \"spec\": null\n },\n {\n \"apiVersion\": \"argoproj.io/v1alpha1\",\n \"kind\": \"Application\",\n \"metadata\": {\n \"name\": \"example\"\n },\n \"spec\": null\n },\n {\n \"apiVersion\": \"argoproj.io/v1alpha1\",\n \"kind\": \"ApplicationSet\",\n \"metadata\": {\n \"name\": \"example\"\n },\n \"spec\": null\n },\n {\n \"apiVersion\": \"argoproj.io/v1alpha1\",\n \"kind\": \"NotificationsConfiguration\",\n \"metadata\": {\n \"name\": \"default-notifications-configuration\"\n },\n \"spec\": {\n \"templates\": {\n \"template.app-created\": \"email:\\n subject: Application {{.app.metadata.name}} has been created.\\nmessage: Application {{.app.metadata.name}} has been created.\\nteams:\\n title: Application {{.app.metadata.name}} has been created.\",\n \"template.app-deleted\": \"email:\\n subject: Application {{.app.metadata.name}} has been deleted.\\nmessage: Application {{.app.metadata.name}} has been deleted.\\nteams:\\n title: Application {{.app.metadata.name}} has been deleted.\",\n \"template.app-deployed\": \"email:\\n subject: New version of an application {{.app.metadata.name}} is up and running.\\nmessage: |\\n {{if eq .serviceType \\\"slack\\\"}}:white_check_mark:{{end}} Application {{.app.metadata.name}} is now running new version of deployments manifests.\\nslack:\\n attachments: |\\n [{\\n \\\"title\\\": \\\"{{ .app.metadata.name}}\\\",\\n \\\"title_link\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\",\\n \\\"color\\\": \\\"#18be52\\\",\\n \\\"fields\\\": [\\n {\\n \\\"title\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\",\\n \\\"short\\\": true\\n },\\n {\\n \\\"title\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\",\\n \\\"short\\\": true\\n },\\n {\\n \\\"title\\\": \\\"Revision\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.revision}}\\\",\\n \\\"short\\\": true\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"title\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\",\\n \\\"short\\\": true\\n }\\n {{end}}\\n ]\\n }]\\n deliveryPolicy: Post\\n groupingKey: \\\"\\\"\\n notifyBroadcast: false\\nteams:\\n facts: |\\n [{\\n \\\"name\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Revision\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.revision}}\\\"\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"name\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\"\\n }\\n {{end}}\\n ]\\n potentialAction: |-\\n [{\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Operation Application\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\"\\n }]\\n },\\n {\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Repository\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.app.spec.source.repoURL | call .repo.RepoURLToHTTPS}}\\\"\\n }]\\n }]\\n themeColor: '#000080'\\n title: New version of an application {{.app.metadata.name}} is up and running.\",\n \"template.app-health-degraded\": \"email:\\n subject: Application {{.app.metadata.name}} has degraded.\\nmessage: |\\n {{if eq .serviceType \\\"slack\\\"}}:exclamation:{{end}} Application {{.app.metadata.name}} has degraded.\\n Application details: {{.context.argocdUrl}}/applications/{{.app.metadata.name}}.\\nslack:\\n attachments: |\\n [{\\n \\\"title\\\": \\\"{{ .app.metadata.name}}\\\",\\n \\\"title_link\\\": \\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\",\\n \\\"color\\\": \\\"#f4c030\\\",\\n \\\"fields\\\": [\\n {\\n \\\"title\\\": \\\"Health Status\\\",\\n \\\"value\\\": \\\"{{.app.status.health.status}}\\\",\\n \\\"short\\\": true\\n },\\n {\\n \\\"title\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\",\\n \\\"short\\\": true\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"title\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\",\\n \\\"short\\\": true\\n }\\n {{end}}\\n ]\\n }]\\n deliveryPolicy: Post\\n groupingKey: \\\"\\\"\\n notifyBroadcast: false\\nteams:\\n facts: |\\n [{\\n \\\"name\\\": \\\"Health Status\\\",\\n \\\"value\\\": \\\"{{.app.status.health.status}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\"\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"name\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\"\\n }\\n {{end}}\\n ]\\n potentialAction: |\\n [{\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Application\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\"\\n }]\\n },\\n {\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Repository\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.app.spec.source.repoURL | call .repo.RepoURLToHTTPS}}\\\"\\n }]\\n }]\\n themeColor: '#FF0000'\\n title: Application {{.app.metadata.name}} has degraded.\",\n \"template.app-sync-failed\": \"email:\\n subject: Failed to sync application {{.app.metadata.name}}.\\nmessage: |\\n {{if eq .serviceType \\\"slack\\\"}}:exclamation:{{end}} The sync operation of application {{.app.metadata.name}} has failed at {{.app.status.operationState.finishedAt}} with the following error: {{.app.status.operationState.message}}\\n Sync operation details are available at: {{.context.argocdUrl}}/applications/{{.app.metadata.name}}?operation=true .\\nslack:\\n attachments: |\\n [{\\n \\\"title\\\": \\\"{{ .app.metadata.name}}\\\",\\n \\\"title_link\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\",\\n \\\"color\\\": \\\"#E96D76\\\",\\n \\\"fields\\\": [\\n {\\n \\\"title\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\",\\n \\\"short\\\": true\\n },\\n {\\n \\\"title\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\",\\n \\\"short\\\": true\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"title\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\",\\n \\\"short\\\": true\\n }\\n {{end}}\\n ]\\n }]\\n deliveryPolicy: Post\\n groupingKey: \\\"\\\"\\n notifyBroadcast: false\\nteams:\\n facts: |\\n [{\\n \\\"name\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Failed at\\\",\\n \\\"value\\\": \\\"{{.app.status.operationState.finishedAt}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\"\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"name\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\"\\n }\\n {{end}}\\n ]\\n potentialAction: |-\\n [{\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Operation\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}?operation=true\\\"\\n }]\\n },\\n {\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Repository\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.app.spec.source.repoURL | call .repo.RepoURLToHTTPS}}\\\"\\n }]\\n }]\\n themeColor: '#FF0000'\\n title: Failed to sync application {{.app.metadata.name}}.\",\n \"template.app-sync-running\": \"email:\\n subject: Start syncing application {{.app.metadata.name}}.\\nmessage: |\\n The sync operation of application {{.app.metadata.name}} has started at {{.app.status.operationState.startedAt}}.\\n Sync operation details are available at: {{.context.argocdUrl}}/applications/{{.app.metadata.name}}?operation=true .\\nslack:\\n attachments: |\\n [{\\n \\\"title\\\": \\\"{{ .app.metadata.name}}\\\",\\n \\\"title_link\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\",\\n \\\"color\\\": \\\"#0DADEA\\\",\\n \\\"fields\\\": [\\n {\\n \\\"title\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\",\\n \\\"short\\\": true\\n },\\n {\\n \\\"title\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\",\\n \\\"short\\\": true\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"title\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\",\\n \\\"short\\\": true\\n }\\n {{end}}\\n ]\\n }]\\n deliveryPolicy: Post\\n groupingKey: \\\"\\\"\\n notifyBroadcast: false\\nteams:\\n facts: |\\n [{\\n \\\"name\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Started at\\\",\\n \\\"value\\\": \\\"{{.app.status.operationState.startedAt}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\"\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"name\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\"\\n }\\n {{end}}\\n ]\\n potentialAction: |-\\n [{\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Operation\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}?operation=true\\\"\\n }]\\n },\\n {\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Repository\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.app.spec.source.repoURL | call .repo.RepoURLToHTTPS}}\\\"\\n }]\\n }]\\n title: Start syncing application {{.app.metadata.name}}.\",\n \"template.app-sync-status-unknown\": \"email:\\n subject: Application {{.app.metadata.name}} sync status is 'Unknown'\\nmessage: |\\n {{if eq .serviceType \\\"slack\\\"}}:exclamation:{{end}} Application {{.app.metadata.name}} sync is 'Unknown'.\\n Application details: {{.context.argocdUrl}}/applications/{{.app.metadata.name}}.\\n {{if ne .serviceType \\\"slack\\\"}}\\n {{range $c := .app.status.conditions}}\\n * {{$c.message}}\\n {{end}}\\n {{end}}\\nslack:\\n attachments: |\\n [{\\n \\\"title\\\": \\\"{{ .app.metadata.name}}\\\",\\n \\\"title_link\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\",\\n \\\"color\\\": \\\"#E96D76\\\",\\n \\\"fields\\\": [\\n {\\n \\\"title\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\",\\n \\\"short\\\": true\\n },\\n {\\n \\\"title\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\",\\n \\\"short\\\": true\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"title\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\",\\n \\\"short\\\": true\\n }\\n {{end}}\\n ]\\n }]\\n deliveryPolicy: Post\\n groupingKey: \\\"\\\"\\n notifyBroadcast: false\\nteams:\\n facts: |\\n [{\\n \\\"name\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\"\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"name\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\"\\n }\\n {{end}}\\n ]\\n potentialAction: |-\\n [{\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Application\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\"\\n }]\\n },\\n {\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Repository\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.app.spec.source.repoURL | call .repo.RepoURLToHTTPS}}\\\"\\n }]\\n }]\\n title: Application {{.app.metadata.name}} sync status is 'Unknown'\",\n \"template.app-sync-succeeded\": \"email:\\n subject: Application {{.app.metadata.name}} has been successfully synced.\\nmessage: |\\n {{if eq .serviceType \\\"slack\\\"}}:white_check_mark:{{end}} Application {{.app.metadata.name}} has been successfully synced at {{.app.status.operationState.finishedAt}}.\\n Sync operation details are available at: {{.context.argocdUrl}}/applications/{{.app.metadata.name}}?operation=true .\\nslack:\\n attachments: |\\n [{\\n \\\"title\\\": \\\"{{ .app.metadata.name}}\\\",\\n \\\"title_link\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\",\\n \\\"color\\\": \\\"#18be52\\\",\\n \\\"fields\\\": [\\n {\\n \\\"title\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\",\\n \\\"short\\\": true\\n },\\n {\\n \\\"title\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\",\\n \\\"short\\\": true\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"title\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\",\\n \\\"short\\\": true\\n }\\n {{end}}\\n ]\\n }]\\n deliveryPolicy: Post\\n groupingKey: \\\"\\\"\\n notifyBroadcast: false\\nteams:\\n facts: |\\n [{\\n \\\"name\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Synced at\\\",\\n \\\"value\\\": \\\"{{.app.status.operationState.finishedAt}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\"\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"name\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\"\\n }\\n {{end}}\\n ]\\n potentialAction: |-\\n [{\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Operation Details\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}?operation=true\\\"\\n }]\\n },\\n {\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Repository\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.app.spec.source.repoURL | call .repo.RepoURLToHTTPS}}\\\"\\n }]\\n }]\\n themeColor: '#000080'\\n title: Application {{.app.metadata.name}} has been successfully synced\"\n },\n \"triggers\": {\n \"trigger.on-created\": \"- description: Application is created.\\n oncePer: app.metadata.name\\n send:\\n - app-created\\n when: \\\"true\\\"\",\n \"trigger.on-deleted\": \"- description: Application is deleted.\\n oncePer: app.metadata.name\\n send:\\n - app-deleted\\n when: app.metadata.deletionTimestamp != nil\",\n \"trigger.on-deployed\": \"- description: Application is synced and healthy. Triggered once per commit.\\n oncePer: app.status.operationState.syncResult.revision\\n send:\\n - app-deployed\\n when: app.status.operationState.phase in ['Succeeded'] and app.status.health.status\\n == 'Healthy'\",\n \"trigger.on-health-degraded\": \"- description: Application has degraded\\n send:\\n - app-health-degraded\\n when: app.status.health.status == 'Degraded'\",\n \"trigger.on-sync-failed\": \"- description: Application syncing has failed\\n send:\\n - app-sync-failed\\n when: app.status.operationState.phase in ['Error', 'Failed']\",\n \"trigger.on-sync-running\": \"- description: Application is being synced\\n send:\\n - app-sync-running\\n when: app.status.operationState.phase in ['Running']\",\n \"trigger.on-sync-status-unknown\": \"- description: Application status is 'Unknown'\\n send:\\n - app-sync-status-unknown\\n when: app.status.sync.status == 'Unknown'\",\n \"trigger.on-sync-succeeded\": \"- description: Application syncing has succeeded\\n send:\\n - app-sync-succeeded\\n when: app.status.operationState.phase in ['Succeeded']\"\n }\n }\n },\n {\n \"apiVersion\": \"argoproj.io/v1alpha1\",\n \"kind\": \"Rollout\",\n \"metadata\": {\n \"name\": \"example\"\n },\n \"spec\": null\n },\n {\n \"apiVersion\": \"argoproj.io/v1alpha1\",\n \"kind\": \"RolloutManager\",\n \"metadata\": {\n \"name\": \"example\"\n },\n \"spec\": null\n },\n {\n \"apiVersion\": \"argoproj.io/v1beta1\",\n \"kind\": \"ArgoCD\",\n \"metadata\": {\n \"name\": \"argocd\"\n },\n \"spec\": {\n \"controller\": {\n \"resources\": {\n \"limits\": {\n \"cpu\": \"2000m\",\n \"memory\": \"2048Mi\"\n },\n \"requests\": {\n \"cpu\": \"250m\",\n \"memory\": \"1024Mi\"\n }\n }\n },\n \"ha\": {\n \"enabled\": false,\n \"resources\": {\n \"limits\": {\n \"cpu\": \"500m\",\n \"memory\": \"256Mi\"\n },\n \"requests\": {\n \"cpu\": \"250m\",\n \"memory\": \"128Mi\"\n }\n }\n },\n \"rbac\": {\n \"defaultPolicy\": \"\",\n \"policy\": \"g, system:cluster-admins, role:admin\\n\",\n \"scopes\": \"[groups]\"\n },\n \"redis\": {\n \"resources\": {\n \"limits\": {\n \"cpu\": \"500m\",\n \"memory\": \"256Mi\"\n },\n \"requests\": {\n \"cpu\": \"250m\",\n \"memory\": \"128Mi\"\n }\n }\n },\n \"repo\": {\n \"resources\": {\n \"limits\": {\n \"cpu\": \"1000m\",\n \"memory\": \"1024Mi\"\n },\n \"requests\": {\n \"cpu\": \"250m\",\n \"memory\": \"256Mi\"\n }\n }\n },\n \"resourceExclusions\": \"- apiGroups:\\n - \\\"\\\"\\n - discovery.k8s.io\\n kinds:\\n - Endpoints\\n - EndpointSlice\\n- apiGroups:\\n - apiregistration.k8s.io\\n kinds:\\n - APIService\\n- apiGroups:\\n - coordination.k8s.io\\n kinds:\\n - Lease\\n- apiGroups:\\n - authentication.k8s.io\\n - authorization.k8s.io\\n kinds:\\n - SelfSubjectReview\\n - TokenReview\\n - LocalSubjectAccessReview\\n - SelfSubjectAccessReview\\n - SelfSubjectRulesReview\\n - SubjectAccessReview\\n- apiGroups:\\n - certificates.k8s.io\\n kinds:\\n - CertificateSigningRequest\\n- apiGroups:\\n - cert-manager.io\\n kinds:\\n - CertificateRequest\\n- apiGroups:\\n - cilium.io\\n kinds:\\n - CiliumIdentity\\n - CiliumEndpoint\\n - CiliumEndpointSlice\\n- apiGroups:\\n - kyverno.io\\n - reports.kyverno.io\\n - wgpolicyk8s.io\\n kinds:\\n - PolicyReport\\n - ClusterPolicyReport\\n - EphemeralReport\\n - ClusterEphemeralReport\\n - AdmissionReport\\n - ClusterAdmissionReport\\n - BackgroundScanReport\\n - ClusterBackgroundScanReport\\n - UpdateRequest\\n- apiGroups:\\n - tekton.dev\\n clusters:\\n - '*'\\n kinds:\\n - TaskRun\\n - PipelineRun\\n\",\n \"server\": {\n \"resources\": {\n \"limits\": {\n \"cpu\": \"500m\",\n \"memory\": \"256Mi\"\n },\n \"requests\": {\n \"cpu\": \"125m\",\n \"memory\": \"128Mi\"\n }\n },\n \"route\": {\n \"enabled\": true\n }\n },\n \"sso\": {\n \"dex\": {\n \"openShiftOAuth\": true,\n \"resources\": {\n \"limits\": {\n \"cpu\": \"500m\",\n \"memory\": \"256Mi\"\n },\n \"requests\": {\n \"cpu\": \"250m\",\n \"memory\": \"128Mi\"\n }\n }\n },\n \"provider\": \"dex\"\n }\n }\n },\n {\n \"apiVersion\": \"pipelines.openshift.io/v1alpha1\",\n \"kind\": \"GitopsService\",\n \"metadata\": {\n \"name\": \"gitopsservice-sample\"\n },\n \"spec\": null\n }\n]", "capabilities": "Deep Insights", "console.openshift.io/plugins": "[\"gitops-plugin\"]", "containerImage": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:73b844f2dd5f2e2749c66024801ed59539aa363aa18052018b8b80ede0ea544e", "createdAt": "2026-03-04T06:59:29Z", "description": "Enables teams to adopt GitOps principles for managing cluster configurations and application delivery across hybrid multi-cluster Kubernetes environments.", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "true", "features.operators.openshift.io/proxy-aware": "true", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "kubectl.kubernetes.io/default-container": "manager", "olm.operatorGroup": "global-operators", "olm.operatorNamespace": "openshift-operators", "olm.skipRange": "", "olm.targetNamespaces": "", "olmcahash": "9fb8bd064f89d32b6d24050d9a84d79a5bb93da5bc66eb3fb81dcb0aa5d3ddc9", "operatorframework.io/cluster-monitoring": "true", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argocd-image-updater.argoproj.io\",\"kind\":\"ImageUpdater\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"AnalysisRun\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"AnalysisTemplate\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"AppProject\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"Application\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"ApplicationSet\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"ArgoCD\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"ArgoCD\",\"version\":\"v1beta1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"ClusterAnalysisTemplate\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"Experiment\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"NamespaceManagement\",\"version\":\"v1beta1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"NotificationsConfiguration\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"Rollout\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"RolloutManager\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"pipelines.openshift.io\",\"kind\":\"GitopsService\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"openshift-gitops-operator\",\"version\":\"1.20.3\"}}]}", "operatorframework.io/suggested-namespace": "openshift-gitops-operator", "operators.openshift.io/infrastructure-features": "[\"disconnected\"]", "operators.openshift.io/must-gather-image": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9c27f8c025b8cb7e22f33537449773286d97c5475d31cefca8559c04a4249c43", "operators.openshift.io/valid-subscription": "[\"OpenShift Container Platform\", \"OpenShift Platform Plus\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.35.0", "operators.operatorframework.io/internal-objects": "[\"gitopsservices.pipelines.openshift.io\"]", "operators.operatorframework.io/project_layout": "go.kubebuilder.io/v4", "repository": "https://github.com/redhat-developer/gitops-operator", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "control-plane": "gitops-operator", "pod-template-hash": "667b5f7494" } }, "spec": { "containers": [ { "args": [ "--health-probe-bind-address=:8081", "--metrics-bind-address=127.0.0.1:8080", "--leader-elect" ], "command": [ "/usr/local/bin/manager" ], "env": [ { "name": "ARGOCD_CLUSTER_CONFIG_NAMESPACES", "value": "openshift-gitops,tssc-gitops" }, { "name": "CLUSTER_SCOPED_ARGO_ROLLOUTS_NAMESPACES", "value": "openshift-gitops" }, { "name": "OPERATOR_NAME", "value": "gitops-operator" }, { "name": "LABEL_SELECTOR" }, { "name": "ENABLE_CONVERSION_WEBHOOK", "value": "true" }, { "name": "RELATED_IMAGE_ARGOCD_DEX_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:19bd8a22a9877e1527f8e1ba59d9682aaea3f9b2b7cb4959b4be3f956e19716b" }, { "name": "ARGOCD_DEX_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:19bd8a22a9877e1527f8e1ba59d9682aaea3f9b2b7cb4959b4be3f956e19716b" }, { "name": "RELATED_IMAGE_BACKEND_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:b99249048d27ba66aeda10386226569f125b88dae577505a474b1b861fe6e3ec" }, { "name": "BACKEND_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:b99249048d27ba66aeda10386226569f125b88dae577505a474b1b861fe6e3ec" }, { "name": "RELATED_IMAGE_ARGOCD_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cf3031bb2ed6b19384e996afe598a002893fd70ac0ce14491ff868069c53fc84" }, { "name": "ARGOCD_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cf3031bb2ed6b19384e996afe598a002893fd70ac0ce14491ff868069c53fc84" }, { "name": "ARGOCD_REPOSERVER_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cf3031bb2ed6b19384e996afe598a002893fd70ac0ce14491ff868069c53fc84" }, { "name": "RELATED_IMAGE_ARGOCD_REDIS_IMAGE", "value": "registry.redhat.io/rhel9/redis-7@sha256:3d31c0cfaf4219f5bd1c52882b603215d1cb4aaef5b8d1a128d0174e090f96f3" }, { "name": "ARGOCD_REDIS_IMAGE", "value": "registry.redhat.io/rhel9/redis-7@sha256:3d31c0cfaf4219f5bd1c52882b603215d1cb4aaef5b8d1a128d0174e090f96f3" }, { "name": "ARGOCD_REDIS_HA_IMAGE", "value": "registry.redhat.io/rhel9/redis-7@sha256:3d31c0cfaf4219f5bd1c52882b603215d1cb4aaef5b8d1a128d0174e090f96f3" }, { "name": "RELATED_IMAGE_ARGOCD_REDIS_HA_PROXY_IMAGE", "value": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:f83f1a5094075596f1b02cc8d99baa44be80f69f58864e925ede0b4f63f94fe3" }, { "name": "ARGOCD_REDIS_HA_PROXY_IMAGE", "value": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:f83f1a5094075596f1b02cc8d99baa44be80f69f58864e925ede0b4f63f94fe3" }, { "name": "RELATED_IMAGE_GITOPS_CONSOLE_PLUGIN_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:2b96f4a736457f646c6adc457f5679cf2143982dab6929bf695c6e55e40b5461" }, { "name": "GITOPS_CONSOLE_PLUGIN_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:2b96f4a736457f646c6adc457f5679cf2143982dab6929bf695c6e55e40b5461" }, { "name": "RELATED_IMAGE_ARGOCD_EXTENSION_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6280c601c0ddf094c05e6a66163096af7dd20e0800f80ed25ac6c0d93a33fafd" }, { "name": "ARGOCD_EXTENSION_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:6280c601c0ddf094c05e6a66163096af7dd20e0800f80ed25ac6c0d93a33fafd" }, { "name": "RELATED_IMAGE_ARGO_ROLLOUTS_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8e8cc0a8ce7d6225374a718b8507e128d78338b5f3db25c741bef7da4a03afcf" }, { "name": "ARGO_ROLLOUTS_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:8e8cc0a8ce7d6225374a718b8507e128d78338b5f3db25c741bef7da4a03afcf" }, { "name": "RELATED_IMAGE_MUST_GATHER_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:9c27f8c025b8cb7e22f33537449773286d97c5475d31cefca8559c04a4249c43" }, { "name": "RELATED_IMAGE_KUBE_RBAC_PROXY_IMAGE", "value": "registry.redhat.io/openshift4/ose-kube-rbac-proxy-rhel9@sha256:b473bb5efee9fb78c1e654ef94da9213e29a8eccfda2e8359b7c1b6b4049b554" }, { "name": "ARGOCD_PRINCIPAL_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:6a9128c0407b2d126f2d6aa9ea4854b7ff345fb11099bdb9633cf0686b8060d2" }, { "name": "RELATED_IMAGE_ARGOCD_PRINCIPAL_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:6a9128c0407b2d126f2d6aa9ea4854b7ff345fb11099bdb9633cf0686b8060d2" }, { "name": "ARGOCD_AGENT_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:6a9128c0407b2d126f2d6aa9ea4854b7ff345fb11099bdb9633cf0686b8060d2" }, { "name": "RELATED_IMAGE_ARGOCD_AGENT_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:6a9128c0407b2d126f2d6aa9ea4854b7ff345fb11099bdb9633cf0686b8060d2" }, { "name": "ARGOCD_IMAGE_UPDATER_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:c5057bf64edd2461e10aeb8ad71fa12f31d375baabf3ee3fba117a4fc22d91ff" }, { "name": "RELATED_IMAGE_ARGOCD_IMAGE_UPDATER_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:c5057bf64edd2461e10aeb8ad71fa12f31d375baabf3ee3fba117a4fc22d91ff" }, { "name": "OPERATOR_CONDITION_NAME", "value": "openshift-gitops-operator.v1.20.3" } ], "image": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:73b844f2dd5f2e2749c66024801ed59539aa363aa18052018b8b80ede0ea544e", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/apiserver.local.config/certificates", "name": "apiservice-cert" }, { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "webhook-cert" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:8443", "--upstream=http://127.0.0.1:8080", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--logtostderr=true", "--allow-paths=/metrics", "--http2-disable" ], "env": [ { "name": "ARGOCD_CLUSTER_CONFIG_NAMESPACES", "value": "openshift-gitops,tssc-gitops" }, { "name": "OPERATOR_CONDITION_NAME", "value": "openshift-gitops-operator.v1.20.3" } ], "image": "registry.redhat.io/openshift4/ose-kube-rbac-proxy-rhel9@sha256:b473bb5efee9fb78c1e654ef94da9213e29a8eccfda2e8359b7c1b6b4049b554", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "128Mi" }, "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "kube-rbac-proxy-tls", "readOnly": true }, { "mountPath": "/apiserver.local.config/certificates", "name": "apiservice-cert" }, { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "webhook-cert" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "openshift-gitops-operator-controller-manager", "serviceAccountName": "openshift-gitops-operator-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "name": "kube-rbac-proxy-tls", "secret": { "defaultMode": 420, "secretName": "kube-rbac-proxy-tls" } }, { "name": "apiservice-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "apiserver.crt" }, { "key": "tls.key", "path": "apiserver.key" } ], "secretName": "openshift-gitops-operator-controller-manager-service-cert" } }, { "name": "webhook-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "openshift-gitops-operator-controller-manager-service-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:31:43Z", "generation": 1, "labels": { "app": "openshift-pipelines-operator", "name": "openshift-pipelines-operator", "pod-template-hash": "6fdb6bcc9f" }, "name": "openshift-pipelines-operator-6fdb6bcc9f", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-pipelines-operator", "uid": "744c363d-131d-46d9-abb6-e2a8898d4d32" } ], "resourceVersion": "19213", "uid": "271cc6ec-5bb5-408d-a474-1221f9696ba9" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "openshift-pipelines-operator", "pod-template-hash": "6fdb6bcc9f" } }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"ManualApprovalGate\",\n \"metadata\": {\n \"name\": \"manual-approval-gate\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"OpenShiftPipelinesAsCode\",\n \"metadata\": {\n \"name\": \"pipelines-as-code\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonAddon\",\n \"metadata\": {\n \"name\": \"addon\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonChain\",\n \"metadata\": {\n \"name\": \"chain\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonConfig\",\n \"metadata\": {\n \"name\": \"config\"\n },\n \"spec\": {\n \"addon\": {\n \"params\": [\n {\n \"name\": \"pipelineTemplates\",\n \"value\": \"true\"\n },\n {\n \"name\": \"resolverTasks\",\n \"value\": \"true\"\n },\n {\n \"name\": \"resolverStepActions\",\n \"value\": \"true\"\n },\n {\n \"name\": \"communityResolverTasks\",\n \"value\": \"true\"\n }\n ]\n },\n \"params\": [\n {\n \"name\": \"createRbacResource\",\n \"value\": \"true\"\n },\n {\n \"name\": \"legacyPipelineRbac\",\n \"value\": \"true\"\n },\n {\n \"name\": \"createCABundleConfigMaps\",\n \"value\": \"true\"\n }\n ],\n \"profile\": \"all\",\n \"pruner\": {\n \"keep\": 100,\n \"resources\": [\n \"pipelinerun\",\n \"taskrun\"\n ],\n \"schedule\": \"0 8 * * *\"\n },\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonHub\",\n \"metadata\": {\n \"name\": \"hub\"\n },\n \"spec\": {\n \"api\": {\n \"catalogRefreshInterval\": \"30m\"\n },\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonInstallerSet\",\n \"metadata\": {\n \"name\": \"foo\"\n },\n \"spec\": {\n \"manifests\": []\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonPipeline\",\n \"metadata\": {\n \"name\": \"pipeline\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonPruner\",\n \"metadata\": {\n \"name\": \"pruner\"\n },\n \"spec\": {\n \"disabled\": true,\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonResult\",\n \"metadata\": {\n \"name\": \"result\"\n },\n \"spec\": {\n \"auth_disable\": true,\n \"db_enable_auto_migration\": true,\n \"db_host\": \"tekton-results-postgres-service.openshift-pipelines.svc.cluster.local\",\n \"db_port\": 5432,\n \"log_level\": \"debug\",\n \"logging_pvc_name\": \"tekton-logs\",\n \"logs_api\": true,\n \"logs_buffer_size\": 32768,\n \"logs_path\": \"/logs\",\n \"logs_type\": \"File\",\n \"prometheus_port\": 9090,\n \"server_port\": 8080,\n \"targetNamespace\": \"openshift-pipelines\",\n \"tls_hostname_override\": \"tekton-results-api-service.openshift-pipelines.svc.cluster.local\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonTrigger\",\n \"metadata\": {\n \"name\": \"trigger\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n }\n]", "capabilities": "Full Lifecycle", "categories": "Developer Tools, Integration \u0026 Delivery", "certified": "false", "console.openshift.io/plugins": "[\"pipelines-console-plugin\"]", "description": "Red Hat OpenShift Pipelines is a cloud-native CI/CD solution for building pipelines using Tekton concepts which run natively on OpenShift and Kubernetes.", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "true", "features.operators.openshift.io/proxy-aware": "true", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "olm.operatorGroup": "global-operators", "olm.operatorNamespace": "openshift-operators", "olm.skipRange": "\u003e=1.20.0 \u003c1.21.1", "olm.targetNamespaces": "", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"ManualApprovalGate\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"OpenShiftPipelinesAsCode\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonAddon\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonChain\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonConfig\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonHub\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonInstallerSet\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonPipeline\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonPruner\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonResult\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonTrigger\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"openshift-pipelines-operator-rh\",\"version\":\"1.21.1\"}}]}", "operators.openshift.io/valid-subscription": "[\"OpenShift Container Platform\", \"OpenShift Platform Plus\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.37.0", "operators.operatorframework.io/internal-objects": "[\"tektoninstallersets.operator.tekton.dev\", \"tektonconfigs.operator.tekton.dev\",\"tektonpipelines.operator.tekton.dev\",\"tektontriggers.operator.tekton.dev\",\"tektonaddons.operator.tekton.dev\", \"tektonhubs.operator.tekton.dev\", \"tektonresults.operator.tekton.dev\", \"tektonchains.operator.tekton.dev\", \"openshiftpipelinesascodes.operator.tekton.dev\", \"manualapprovalgates.operator.tekton.dev\",\"tektonpruners.operator.tekton.dev\"]", "operators.operatorframework.io/project_layout": "unknown", "repository": "https://github.com/tektoncd/operator", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "app": "openshift-pipelines-operator", "name": "openshift-pipelines-operator", "pod-template-hash": "6fdb6bcc9f" } }, "spec": { "containers": [ { "args": [ "-controllers", "tektonconfig,tektonpipeline,tektontrigger,tektonhub,tektonchain,tektonaddon,tektonresult,openshiftpipelinesascode,manualapprovalgate,tektonpruner", "-unique-process-name", "tekton-operator-lifecycle" ], "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "PLATFORM", "value": "openshift" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "redhat-openshift-pipelines-operator" }, { "name": "IMAGE_PIPELINES_PROXY", "value": "registry.redhat.io/openshift-pipelines/pipelines-operator-proxy-rhel9@sha256:4747a491c6fd2de939e00dbd9fb12ac4f813bce077c8dfe4463be1e72634602b" }, { "name": "IMAGE_JOB_PRUNER_TKN", "value": "registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:d437b27347de52003798e4dadfa3827f078792795c3d3a683fcdcb59b6b1db1d" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "VERSION", "value": "1.21.1" }, { "name": "AUTOINSTALL_COMPONENTS", "value": "false" }, { "name": "DEFAULT_TARGET_NAMESPACE", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_TARGET_NAMESPACE", "name": "tekton-config-defaults" } } }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-config-observability" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-controller-config-leader-election" }, { "name": "IMAGE_HUB_TEKTON_HUB_DB", "value": "registry.redhat.io/rhel9/postgresql-15@sha256:90ec347a35ab8a5d530c8d09f5347b13cc71df04f3b994bfa8b1a409b1171d59" }, { "name": "IMAGE_ADDONS_PARAM_BUILDER_IMAGE", "value": "registry.redhat.io/rhel9/buildah@sha256:4e604d18fc609d25b2fc99814281944acaac78e8cd5e47b8359709b8b505db86" }, { "name": "IMAGE_ADDONS_PARAM_KN_IMAGE", "value": "registry.redhat.io/openshift-serverless-1/kn-client-kn-rhel9@sha256:e213fd263772c5286aa560132cd8c043cf2946f04f96eedf18cd240859bd8a48" }, { "name": "IMAGE_ADDONS_MVN_SETTINGS", "value": "registry.redhat.io/ubi9/ubi-minimal@sha256:61d5ad475048c2e655cd46d0a55dfeaec182cc3faa6348cb85989a7c9e196483" }, { "name": "IMAGE_ADDONS_SKOPEO_COPY", "value": "registry.redhat.io/rhel9/skopeo@sha256:3c1d54513adc2998955731da23ec354a15942fa7dd2e37dc818f85a947f400d4" }, { "name": "IMAGE_ADDONS_GENERATE", "value": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:bc10e7d6122ede5cf4f2882c200447683255465a1080e826761e90bfb983506e" }, { "name": "IMAGE_ADDONS_GEN_ENV_FILE", "value": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:bc10e7d6122ede5cf4f2882c200447683255465a1080e826761e90bfb983506e" }, { "name": "IMAGE_ADDONS_PARAM_MAVEN_IMAGE", "value": "registry.redhat.io/ubi9/openjdk-17@sha256:d334d3c36867a1eef7daa598af10b5f620394ca0234b12e71b8b7e99bda9224e" }, { "name": "IMAGE_ADDONS_OC", "value": "image-registry.openshift-image-registry.svc:5000/openshift/cli:latest" }, { "name": "IMAGE_PIPELINES_TEKTON_PIPELINES_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-controller-rhel9@sha256:862f686cb10b000d301bb4b49af39eefb046d6abb7fd2187ef8c59925736c932" }, { "name": "IMAGE_PIPELINES_WEBHOOK", "value": "registry.redhat.io/openshift-pipelines/pipelines-webhook-rhel9@sha256:7ce8fca678919af6ad687d11858ecce0d392f478da4e6b57a5ea3e736008341e" }, { "name": "IMAGE_PIPELINES_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-resolvers-rhel9@sha256:15cd02433813f9809c7bdb16707636f2a4336fe501ac4663abc38ee7cdfeb917" }, { "name": "IMAGE_PIPELINES_TEKTON_EVENTS_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-events-rhel9@sha256:34a30986fb4cdc8edfbb5f39619013ea623fb2f633ee83a384d3b98e4bc133cc" }, { "name": "IMAGE_PIPELINES_ARG__ENTRYPOINT_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel9@sha256:fd9f6bc408772348ae540701c6bf2b178028362801acb748e1dde80c06eba70d" }, { "name": "IMAGE_PIPELINES_ARG__GIT_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel9@sha256:800678e319e2c32d73acde7862ec9e7803a8c9210597ef4e99ea324945e89447" }, { "name": "IMAGE_ADDONS_PARAM_GITINITIMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel9@sha256:800678e319e2c32d73acde7862ec9e7803a8c9210597ef4e99ea324945e89447" }, { "name": "IMAGE_ADDONS_GIT_RUN", "value": "registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel9@sha256:800678e319e2c32d73acde7862ec9e7803a8c9210597ef4e99ea324945e89447" }, { "name": "IMAGE_ADDONS_REPORT", "value": "registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel9@sha256:800678e319e2c32d73acde7862ec9e7803a8c9210597ef4e99ea324945e89447" }, { "name": "IMAGE_ADDONS_GIT_CLONE", "value": "registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel9@sha256:800678e319e2c32d73acde7862ec9e7803a8c9210597ef4e99ea324945e89447" }, { "name": "IMAGE_ADDONS_PREPARE_AND_RUN", "value": "registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel9@sha256:800678e319e2c32d73acde7862ec9e7803a8c9210597ef4e99ea324945e89447" }, { "name": "IMAGE_ADDONS_CACHE_UPLOAD", "value": "registry.redhat.io/openshift-pipelines/pipelines-cache-rhel9@sha256:82ba1d7a148765c8e51a56ab07f8044556ec86212add03fd422f19f8202b5de7" }, { "name": "IMAGE_ADDONS_CACHE_FETCH", "value": "registry.redhat.io/openshift-pipelines/pipelines-cache-rhel9@sha256:82ba1d7a148765c8e51a56ab07f8044556ec86212add03fd422f19f8202b5de7" }, { "name": "IMAGE_PIPELINES_ARG__WORKINGDIRINIT_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-workingdirinit-rhel9@sha256:5e4adc0c5619537d0c15175208883e3405d92dcd48566a40c59422905fcac30e" }, { "name": "IMAGE_PIPELINES_ARG__SIDECARLOGRESULTS_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-sidecarlogresults-rhel9@sha256:b5e859d02a515139f799f0fce9446333393461c845ee1cf638747960dc382064" }, { "name": "IMAGE_PIPELINES_ARG__NOP_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-nop-rhel9@sha256:ea0574a3ee9e6be79189c65b589b6b6d666459a80b8c87ec10653d210dbe510d" }, { "name": "IMAGE_PIPELINES_ARG__SHELL_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel9@sha256:fd9f6bc408772348ae540701c6bf2b178028362801acb748e1dde80c06eba70d" }, { "name": "IMAGE_TRIGGERS_TEKTON_TRIGGERS_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-triggers-controller-rhel9@sha256:68b3df2abb2eb76d8acc58ecd1872ccb85e76177d9d895fb9c1e722354d090dd" }, { "name": "IMAGE_TRIGGERS_WEBHOOK", "value": "registry.redhat.io/openshift-pipelines/pipelines-triggers-webhook-rhel9@sha256:c30b1378603e087951a70484ad015d2cc066de6d61f0d8def27f042ff80802f0" }, { "name": "IMAGE_TRIGGERS_TEKTON_TRIGGERS_CORE_INTERCEPTORS", "value": "registry.redhat.io/openshift-pipelines/pipelines-triggers-core-interceptors-rhel9@sha256:1662f3da4827b60da673f6362d7fbe9673a945d965b3556d61e31951a93eb3ee" }, { "name": "IMAGE_TRIGGERS_ARG__EL_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-triggers-eventlistenersink-rhel9@sha256:df87d4d8bad3d7df88ef56cc89eef6d4af76e5d442f0778c52d67582ed952a74" }, { "name": "IMAGE_ADDONS_KN", "value": "registry.redhat.io/openshift-serverless-1/kn-client-kn-rhel9@sha256:e213fd263772c5286aa560132cd8c043cf2946f04f96eedf18cd240859bd8a48" }, { "name": "IMAGE_ADDONS_OPC", "value": "registry.redhat.io/openshift-pipelines/pipelines-opc-rhel9@sha256:e9c148d7532ece3e679fa6d13e75b003e8058489e8059bd611ca537bc61622d5" }, { "name": "IMAGE_ADDONS_SKOPEO_RESULTS", "value": "registry.redhat.io/rhel9/skopeo@sha256:3c1d54513adc2998955731da23ec354a15942fa7dd2e37dc818f85a947f400d4" }, { "name": "IMAGE_ADDONS_BUILD", "value": "registry.redhat.io/rhel9/buildah@sha256:4e604d18fc609d25b2fc99814281944acaac78e8cd5e47b8359709b8b505db86" }, { "name": "IMAGE_ADDONS_S2I_BUILD", "value": "registry.redhat.io/rhel9/buildah@sha256:4e604d18fc609d25b2fc99814281944acaac78e8cd5e47b8359709b8b505db86" }, { "name": "IMAGE_ADDONS_S2I_GENERATE", "value": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:bc10e7d6122ede5cf4f2882c200447683255465a1080e826761e90bfb983506e" }, { "name": "IMAGE_ADDONS_LOAD_SCRIPTS", "value": "registry.redhat.io/ubi9/ubi-minimal@sha256:61d5ad475048c2e655cd46d0a55dfeaec182cc3faa6348cb85989a7c9e196483" }, { "name": "IMAGE_ADDONS_MAVEN_GENERATE", "value": "registry.redhat.io/ubi9/ubi-minimal@sha256:61d5ad475048c2e655cd46d0a55dfeaec182cc3faa6348cb85989a7c9e196483" }, { "name": "IMAGE_ADDONS_PREPARE", "value": "registry.redhat.io/ubi9/ubi-minimal@sha256:61d5ad475048c2e655cd46d0a55dfeaec182cc3faa6348cb85989a7c9e196483" }, { "name": "IMAGE_ADDONS_PARAM_TKN_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:d437b27347de52003798e4dadfa3827f078792795c3d3a683fcdcb59b6b1db1d" }, { "name": "IMAGE_ADDONS_TKN", "value": "registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:d437b27347de52003798e4dadfa3827f078792795c3d3a683fcdcb59b6b1db1d" }, { "name": "IMAGE_ADDONS_TKN_CLI_SERVE", "value": "registry.redhat.io/openshift-pipelines/pipelines-serve-tkn-cli-rhel9@sha256:5566ebbc75f2a2a911f3cc884f969a3c45104341a99e51a795c6bc31ce43e625" }, { "name": "IMAGE_ADDONS_TKN_CLI_SERVE_INIT_CONFIG", "value": "registry.redhat.io/openshift-pipelines/pipelines-serve-tkn-cli-rhel9@sha256:5566ebbc75f2a2a911f3cc884f969a3c45104341a99e51a795c6bc31ce43e625" }, { "name": "IMAGE_CHAINS_TEKTON_CHAINS_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:77751c15706d768514ad33f2c360ce7e342e9462d5ebde420cb20b2fe4e1de78" }, { "name": "IMAGE_RESULTS_POSTGRES", "value": "registry.redhat.io/rhel9/postgresql-15@sha256:90ec347a35ab8a5d530c8d09f5347b13cc71df04f3b994bfa8b1a409b1171d59" }, { "name": "IMAGE_HUB_TEKTON_HUB_DB_MIGRATION", "value": "registry.redhat.io/openshift-pipelines/pipelines-hub-db-migration-rhel9@sha256:ea102b77de3b59ac56c9ea8543c5553e3cf1d712a7169acf83f52bb4616d9e36" }, { "name": "IMAGE_HUB_TEKTON_HUB_API", "value": "registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel9@sha256:89e90575bdafa605b0b196f98bcab56828325a953e74fcb7d1787e0c4242165d" }, { "name": "IMAGE_HUB_TEKTON_HUB_UI", "value": "registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel9@sha256:f8692bb593354b163f674c4c53b766697b076dec36460c1b9b58d30b10e5bf3a" }, { "name": "IMAGE_MAG_TEKTON_TASKGROUP_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-controller-rhel9@sha256:d9c4f719c84f09e3e5d17be3545fc71a87dfeb6d8e10b01fb6bf3ebb104f841e" }, { "name": "IMAGE_MAG_MANUAL_APPROVAL", "value": "registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-webhook-rhel9@sha256:19b256464b54b825d7c2c3fe07b3807e1daf9e29680f9d7ce9b134f0ff007497" }, { "name": "IMAGE_PRUNER_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-pruner-controller-rhel9@sha256:ca3f17907c0f31a6cf2b9d58f53f97078ad189e1eadfe0671262a3a616360207" }, { "name": "IMAGE_PRUNER_WEBHOOK", "value": "registry.redhat.io/openshift-pipelines/pipelines-pruner-webhook-rhel9@sha256:32860b6284883d1c0d8d73333ac930c8ccdb34a94048f31c7aab4f879892a3a6" }, { "name": "IMAGE_PAC_PAC_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-controller-rhel9@sha256:03656ac687c2f3ba6dfd72f7373c6fb67169660a07a579b009c8d8f89b7c0576" }, { "name": "IMAGE_PAC_PAC_WEBHOOK", "value": "registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-webhook-rhel9@sha256:d489fcc781d7ea7017d10297458c19414ce1415fdd0aa41c2e614359c7f6304f" }, { "name": "IMAGE_PAC_PAC_WATCHER", "value": "registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel9@sha256:ab8152479af7d6fe719c90de7de5b7c97c409f8649db724f51e99dec57cb171b" }, { "name": "IMAGE_PAC_PAC_CLI", "value": "registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-cli-rhel9@sha256:4512fbe386db96e9bf873f2321a748984946df77c8d9cee65252647d9da02636" }, { "name": "IMAGE_RESULTS_WATCHER", "value": "registry.redhat.io/openshift-pipelines/pipelines-results-watcher-rhel9@sha256:41427cc1b6689f776e95574529ef9b22a6dde840f23c2b78103416ab37cc5800" }, { "name": "IMAGE_RESULTS_API", "value": "registry.redhat.io/openshift-pipelines/pipelines-results-api-rhel9@sha256:803e2eeb32b2cc79f4ed8a34f9b1c4ef35c750c3b1cc9352dd0f690dd75ae177" }, { "name": "IMAGE_RESULTS_RETENTION_POLICY_AGENT", "value": "registry.redhat.io/openshift-pipelines/pipelines-results-retention-policy-agent-rhel9@sha256:a70f1da59119c9bb43362b87e5bc2b05113e8796b8ca8e1ff0439b66772a7244" }, { "name": "IMAGE_ADDONS_MAVEN_GOALS", "value": "registry.redhat.io/ubi9/openjdk-17@sha256:d334d3c36867a1eef7daa598af10b5f620394ca0234b12e71b8b7e99bda9224e" }, { "name": "IMAGE_PIPELINES_CONSOLE_PLUGIN", "value": "registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel9@sha256:7be2fe2114db1ec77293b48dc1e940f8809f7cb668f2415c1d73c3f9ba9ddbb0" }, { "name": "OPERATOR_CONDITION_NAME", "value": "openshift-pipelines-operator-rh.v1.21.1" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-rhel9-operator@sha256:382b0a75f78315937335f73a0f841738e3d08a893789c7156314d6cdaaa54417", "imagePullPolicy": "Always", "name": "openshift-pipelines-operator-lifecycle", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" }, { "args": [ "-controllers", "tektoninstallerset", "-unique-process-name", "tekton-operator-cluster-operations" ], "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "redhat-openshift-pipelines-operator" }, { "name": "PROFILING_PORT", "value": "9009" }, { "name": "VERSION", "value": "v0.78.1" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-controller-config-leader-election" }, { "name": "AUTOINSTALL_COMPONENTS", "value": "false" }, { "name": "OPERATOR_CONDITION_NAME", "value": "openshift-pipelines-operator-rh.v1.21.1" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-rhel9-operator@sha256:382b0a75f78315937335f73a0f841738e3d08a893789c7156314d6cdaaa54417", "imagePullPolicy": "Always", "name": "openshift-pipelines-operator-cluster-operations", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-pipelines-operator", "serviceAccountName": "openshift-pipelines-operator", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:31:22Z", "generation": 1, "labels": { "app": "rhdh-operator", "app.kubernetes.io/component": "rhdh-operator", "control-plane": "controller-manager", "pod-template-hash": "6ff9ffcd44" }, "name": "rhdh-operator-6ff9ffcd44", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "rhdh-operator", "uid": "5754ea62-2e36-446f-9cdb-58d2408ee6a4" } ], "resourceVersion": "17445", "uid": "d88cb360-8ec7-4cb7-bb50-ca7a57e6ca06" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "rhdh-operator", "pod-template-hash": "6ff9ffcd44" } }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"rhdh.redhat.com/v1alpha3\",\n \"kind\": \"Backstage\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/name\": \"backstage\"\n },\n \"name\": \"developer-hub\"\n }\n },\n {\n \"apiVersion\": \"rhdh.redhat.com/v1alpha4\",\n \"kind\": \"Backstage\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/name\": \"backstage\"\n },\n \"name\": \"developer-hub\"\n }\n },\n {\n \"apiVersion\": \"rhdh.redhat.com/v1alpha5\",\n \"kind\": \"Backstage\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/name\": \"backstage\"\n },\n \"name\": \"developer-hub\"\n }\n }\n]", "capabilities": "Seamless Upgrades", "categories": "Developer Tools", "certified": "true", "containerImage": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:799b20079de2ac021317c2a54404a2241097e4194d5adc85ec1ebcbe4c2dec57", "createdAt": "2026-04-30T21:15:24Z", "description": "Red Hat Developer Hub is a Red Hat supported version of Backstage. It comes with pre-built plug-ins and configuration settings, supports use of an external database, and can help streamline the process of setting up a self-managed internal developer portal for adopters who are just starting out.", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "false", "features.operators.openshift.io/proxy-aware": "false", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "kubectl.kubernetes.io/default-container": "manager", "olm.operatorGroup": "global-operators", "olm.operatorNamespace": "openshift-operators", "olm.targetNamespaces": "", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhdh.redhat.com\",\"kind\":\"Backstage\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhdh.redhat.com\",\"kind\":\"Backstage\",\"version\":\"v1alpha2\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhdh.redhat.com\",\"kind\":\"Backstage\",\"version\":\"v1alpha3\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhdh.redhat.com\",\"kind\":\"Backstage\",\"version\":\"v1alpha4\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhdh.redhat.com\",\"kind\":\"Backstage\",\"version\":\"v1alpha5\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"rhdh\",\"version\":\"1.9.4\"}}]}", "operatorframework.io/suggested-namespace": "rhdh-operator", "operators.openshift.io/valid-subscription": "[\"Red Hat Developer Hub\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.37.0", "operators.operatorframework.io/project_layout": "go.kubebuilder.io/v4", "repository": "https://gitlab.cee.redhat.com/rhidp/rhdh/", "skipRange": "\u003e=1.0.0 \u003c1.9.4", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "app": "rhdh-operator", "app.kubernetes.io/component": "rhdh-operator", "control-plane": "controller-manager", "pod-template-hash": "6ff9ffcd44" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/arch", "operator": "In", "values": [ "amd64" ] }, { "key": "kubernetes.io/os", "operator": "In", "values": [ "linux" ] } ] } ] } } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--health-probe-bind-address=:8081", "--metrics-bind-address=:8443", "--metrics-secure=true", "--leader-elect" ], "command": [ "/manager" ], "env": [ { "name": "OPERATOR_NAME", "value": "rhdh-operator" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "RELATED_IMAGE_postgresql", "value": "registry.redhat.io/rhel9/postgresql-15@sha256:7355b65f7e5f30da8f5bec1983ef9d46cbd1a940eb264b9f82ed2abee28e2283" }, { "name": "RELATED_IMAGE_backstage", "value": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:60be744e3e34e14da8505030d0223f35234d5bbfe1dd0f4332aa0dadc23d3b8f" }, { "name": "RELATED_IMAGE_catalog_index", "value": "registry.access.redhat.com/rhdh/plugin-catalog-index@sha256:05ca260c6511bc49f619535f7ea56d58bb7bc5336daf6d5cff5b2f03e970fb44" }, { "name": "OPERATOR_CONDITION_NAME", "value": "rhdh-operator.v1.9.4" } ], "image": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:799b20079de2ac021317c2a54404a2241097e4194d5adc85ec1ebcbe4c2dec57", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "health", "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 8081, "name": "health", "protocol": "TCP" }, { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": "health", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "ephemeral-storage": "20Mi", "memory": "1Gi" }, "requests": { "cpu": "10m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/default-config", "name": "default-config" }, { "mountPath": "/plugin-deps", "name": "plugin-deps" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "rhdh-controller-manager", "serviceAccountName": "rhdh-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "configMap": { "defaultMode": 420, "name": "rhdh-default-config" }, "name": "default-config" }, { "configMap": { "defaultMode": 420, "name": "rhdh-plugin-deps", "optional": true }, "name": "plugin-deps" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:31:29Z", "generation": 1, "labels": { "control-plane": "operator-controller-manager", "pod-template-hash": "78bffc549d" }, "name": "rhtas-operator-controller-manager-78bffc549d", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "rhtas-operator-controller-manager", "uid": "52698b1b-521d-496d-9652-c69d352a7dbe" } ], "resourceVersion": "17906", "uid": "6c66e9d3-24a2-437a-8c21-7c25da3987ea" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "operator-controller-manager", "pod-template-hash": "78bffc549d" } }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"rhtas.redhat.com/v1alpha1\",\n \"kind\": \"CTlog\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/instance\": \"securesign-sample\",\n \"app.kubernetes.io/name\": \"securesign-sample\",\n \"app.kubernetes.io/part-of\": \"trusted-artifact-signer\"\n },\n \"name\": \"ctlog-sample\"\n },\n \"spec\": {}\n },\n {\n \"apiVersion\": \"rhtas.redhat.com/v1alpha1\",\n \"kind\": \"Fulcio\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/instance\": \"securesign-sample\",\n \"app.kubernetes.io/name\": \"securesign-sample\",\n \"app.kubernetes.io/part-of\": \"trusted-artifact-signer\"\n },\n \"name\": \"fulcio-sample\"\n },\n \"spec\": {\n \"certificate\": {\n \"commonName\": \"fulcio.hostname\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n },\n \"config\": {\n \"OIDCIssuers\": [\n {\n \"ClientID\": \"trusted-artifact-signer\",\n \"Issuer\": \"https://your-oidc-issuer-url\",\n \"IssuerURL\": \"https://your-oidc-issuer-url\",\n \"Type\": \"email\"\n }\n ]\n },\n \"externalAccess\": {\n \"enabled\": true\n }\n }\n },\n {\n \"apiVersion\": \"rhtas.redhat.com/v1alpha1\",\n \"kind\": \"Rekor\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/instance\": \"securesign-sample\",\n \"app.kubernetes.io/name\": \"securesign-sample\",\n \"app.kubernetes.io/part-of\": \"trusted-artifact-signer\"\n },\n \"name\": \"rekor-sample\"\n },\n \"spec\": {\n \"externalAccess\": {\n \"enabled\": true\n }\n }\n },\n {\n \"apiVersion\": \"rhtas.redhat.com/v1alpha1\",\n \"kind\": \"Securesign\",\n \"metadata\": {\n \"annotations\": {\n \"rhtas.redhat.com/metrics\": \"true\"\n },\n \"labels\": {\n \"app.kubernetes.io/instance\": \"securesign-sample\",\n \"app.kubernetes.io/name\": \"securesign-sample\",\n \"app.kubernetes.io/part-of\": \"trusted-artifact-signer\"\n },\n \"name\": \"securesign-sample\"\n },\n \"spec\": {\n \"ctlog\": {\n \"monitoring\": {\n \"enabled\": true\n }\n },\n \"fulcio\": {\n \"certificate\": {\n \"commonName\": \"fulcio.hostname\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n },\n \"config\": {\n \"OIDCIssuers\": [\n {\n \"ClientID\": \"trusted-artifact-signer\",\n \"Issuer\": \"https://your-oidc-issuer-url\",\n \"IssuerURL\": \"https://your-oidc-issuer-url\",\n \"Type\": \"email\"\n }\n ]\n },\n \"externalAccess\": {\n \"enabled\": true\n },\n \"monitoring\": {\n \"enabled\": true\n }\n },\n \"rekor\": {\n \"externalAccess\": {\n \"enabled\": true\n },\n \"monitoring\": {\n \"enabled\": true\n }\n },\n \"trillian\": {\n \"database\": {\n \"create\": true\n },\n \"monitoring\": {\n \"enabled\": true\n }\n },\n \"tsa\": {\n \"externalAccess\": {\n \"enabled\": true\n },\n \"monitoring\": {\n \"enabled\": true\n },\n \"ntpMonitoring\": {\n \"enabled\": true\n },\n \"signer\": {\n \"certificateChain\": {\n \"intermediateCA\": [\n {\n \"commonName\": \"tsa.hostname-intermediate\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n }\n ],\n \"leafCA\": {\n \"commonName\": \"tsa.hostname-leaf\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n },\n \"rootCA\": {\n \"commonName\": \"tsa.hostname-root\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n }\n }\n }\n },\n \"tuf\": {\n \"externalAccess\": {\n \"enabled\": true\n },\n \"keys\": [\n {\n \"name\": \"rekor.pub\"\n },\n {\n \"name\": \"ctfe.pub\"\n },\n {\n \"name\": \"fulcio_v1.crt.pem\"\n },\n {\n \"name\": \"tsa.certchain.pem\"\n }\n ],\n \"pvc\": {\n \"accessModes\": [\n \"ReadWriteOnce\"\n ],\n \"retain\": true,\n \"size\": \"100Mi\"\n },\n \"rootKeySecretRef\": {\n \"name\": \"tuf-root-keys\"\n }\n }\n }\n },\n {\n \"apiVersion\": \"rhtas.redhat.com/v1alpha1\",\n \"kind\": \"TimestampAuthority\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/created-by\": \"rhtas-operator\",\n \"app.kubernetes.io/instance\": \"timestampauthority-sample\",\n \"app.kubernetes.io/managed-by\": \"kustomize\",\n \"app.kubernetes.io/name\": \"timestampauthority\",\n \"app.kubernetes.io/part-of\": \"rhtas-operator\"\n },\n \"name\": \"timestampauthority-sample\"\n },\n \"spec\": {\n \"externalAccess\": {\n \"enabled\": true\n },\n \"monitoring\": {\n \"enabled\": true\n },\n \"ntpMonitoring\": {\n \"enabled\": true\n },\n \"signer\": {\n \"certificateChain\": {\n \"intermediateCA\": [\n {\n \"commonName\": \"tsa.hostname-intermediate\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n }\n ],\n \"leafCA\": {\n \"commonName\": \"tsa.hostname-leaf\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n },\n \"rootCA\": {\n \"commonName\": \"tsa.hostname-root\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n }\n }\n }\n }\n },\n {\n \"apiVersion\": \"rhtas.redhat.com/v1alpha1\",\n \"kind\": \"Trillian\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/instance\": \"securesign-sample\",\n \"app.kubernetes.io/name\": \"securesign-sample\",\n \"app.kubernetes.io/part-of\": \"trusted-artifact-signer\"\n },\n \"name\": \"trillian-sample\"\n },\n \"spec\": {\n \"database\": {\n \"create\": true\n },\n \"server\": {\n \"replicas\": 1\n },\n \"signer\": {\n \"replicas\": 1\n }\n }\n },\n {\n \"apiVersion\": \"rhtas.redhat.com/v1alpha1\",\n \"kind\": \"Tuf\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/instance\": \"securesign-sample\",\n \"app.kubernetes.io/name\": \"securesign-sample\",\n \"app.kubernetes.io/part-of\": \"trusted-artifact-signer\"\n },\n \"name\": \"tuf-sample\"\n },\n \"spec\": {\n \"externalAccess\": {\n \"enabled\": true\n },\n \"keys\": [\n {\n \"name\": \"rekor.pub\",\n \"secretRef\": {\n \"key\": \"public\",\n \"name\": \"rekor-pub-key\"\n }\n },\n {\n \"name\": \"fulcio_v1.crt.pem\",\n \"secretRef\": {\n \"key\": \"cert\",\n \"name\": \"fulcio-pub-key\"\n }\n },\n {\n \"name\": \"ctfe.pub\",\n \"secretRef\": {\n \"key\": \"public\",\n \"name\": \"ctlog-pub-key\"\n }\n },\n {\n \"name\": \"tsa.certchain.pem\",\n \"secretRef\": {\n \"key\": \"certificateChain\",\n \"name\": \"tsa-cert-chain\"\n }\n }\n ],\n \"pvc\": {\n \"accessModes\": [\n \"ReadWriteMany\"\n ],\n \"retain\": true,\n \"size\": \"100Mi\"\n }\n }\n }\n]", "capabilities": "Seamless Upgrades", "containerImage": "registry.redhat.io/rhtas/rhtas-rhel9-operator@sha256:1d97e631c15e5b2f10de5c394e207f0f110a4720f3fbb8986b90932cd3059f93", "createdAt": "2026-04-16T14:50:18Z", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "false", "features.operators.openshift.io/proxy-aware": "true", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "kubectl.kubernetes.io/default-container": "manager", "olm.operatorGroup": "global-operators", "olm.operatorNamespace": "openshift-operators", "olm.targetNamespaces": "", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtas.redhat.com\",\"kind\":\"CTlog\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtas.redhat.com\",\"kind\":\"Fulcio\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtas.redhat.com\",\"kind\":\"Rekor\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtas.redhat.com\",\"kind\":\"Securesign\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtas.redhat.com\",\"kind\":\"TimestampAuthority\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtas.redhat.com\",\"kind\":\"Trillian\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtas.redhat.com\",\"kind\":\"Tuf\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"rhtas-operator\",\"version\":\"1.3.4\"}}]}", "operators.openshift.io/valid-subscription": "[\"Red Hat Trusted Artifact Signer\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.36.1-ocp", "operators.operatorframework.io/project_layout": "go.kubebuilder.io/v4", "repository": "https://github.com/securesign/secure-sign-operator", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "control-plane": "operator-controller-manager", "pod-template-hash": "78bffc549d" } }, "spec": { "containers": [ { "args": [ "--leader-elect", "--metrics-bind-address=0.0.0.0:8080" ], "command": [ "/manager" ], "env": [ { "name": "OPENSHIFT", "value": "true" }, { "name": "RELATED_IMAGE_TRILLIAN_LOG_SIGNER", "value": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:f211db01228530de8ed46b05189c492e6c3629df1098da57d31f2765a22ef014" }, { "name": "RELATED_IMAGE_TRILLIAN_LOG_SERVER", "value": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:523fa259ebf067ac3076748d4f5c86e01e5b1960034c0876add5d67b0ca21b0b" }, { "name": "RELATED_IMAGE_TRILLIAN_DB", "value": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:ab5c3e921b58d17bf6b596d2d7acf64a28b34f3f3a66720c1a07e6555ed9e0b8" }, { "name": "RELATED_IMAGE_TRILLIAN_NETCAT", "value": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:15692e0deea2ee5ef374514639030317a5b033c1bd1778673329a9745feb41d1" }, { "name": "RELATED_IMAGE_CREATETREE", "value": "registry.redhat.io/rhtas/createtree-rhel9@sha256:163edb41ea7f64afc8333ee14d4b28161f7017285afcca6ca12238732c77b98d" }, { "name": "RELATED_IMAGE_FULCIO_SERVER", "value": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:2d478c389bc89afc6b331bc662a84dfc1bbb9da2681ab6dc5ad36f44c346699a" }, { "name": "RELATED_IMAGE_REKOR_MONITOR", "value": "registry.redhat.io/rhtas/rekor-monitor-rhel9@sha256:5f9cefb77c78ded0062fda73b6589767813de9448a845fe91e72cfe22df1f386" }, { "name": "RELATED_IMAGE_REKOR_REDIS", "value": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:22b8cfd123fdd66827b81f2431903198e33579906102b2f6295276cf3eb197a6" }, { "name": "RELATED_IMAGE_REKOR_SERVER", "value": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:b4a5a2c2518dba5f7812c8b4112e25a0f867a4b187c23adfc727395f871c8ca6" }, { "name": "RELATED_IMAGE_REKOR_SEARCH_UI", "value": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:204dc28f6182267851d39eff08649e921877e2771d2c39acb798aa7896f5bcef" }, { "name": "RELATED_IMAGE_BACKFILL_REDIS", "value": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:35b00d6cc82f90b4577af0d2c15153e255d6bb946349bb85f175216cefad1d07" }, { "name": "RELATED_IMAGE_TUF", "value": "registry.redhat.io/rhtas/tuffer-rhel9@sha256:3516168bd98b02eec2b6ffc247549a04dbb4483e7be4d08b63569f469e4a1f66" }, { "name": "RELATED_IMAGE_CTLOG", "value": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:95b5aefafd17dd44794f6d5d1e75278faa5a74f2472db667409d1c88caaef1f1" }, { "name": "RELATED_IMAGE_HTTP_SERVER", "value": "registry.redhat.io/ubi9/httpd-24@sha256:7a48172cdda2a565001998fac2f3aeaa65677f080dd9cb3f9e26ef0963afdef0" }, { "name": "RELATED_IMAGE_SEGMENT_REPORTING", "value": "registry.redhat.io/rhtas/segment-reporting-rhel9@sha256:5d9f194515a383a350f0f7f610de9d9b5e555b792cc1e1b3577cf84bcfd82499" }, { "name": "RELATED_IMAGE_TIMESTAMP_AUTHORITY", "value": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:a4aae20d4d24fc780fd7f613a54c6587538007b23e2a84b826c6812a19abd9ed" }, { "name": "RELATED_IMAGE_CLIENT_SERVER", "value": "registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72" }, { "name": "OPERATOR_CONDITION_NAME", "value": "rhtas-operator.v1.3.4" } ], "image": "registry.redhat.io/rhtas/rhtas-rhel9-operator@sha256:1d97e631c15e5b2f10de5c394e207f0f110a4720f3fbb8986b90932cd3059f93", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 8080, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "rhtas-operator-controller-manager", "serviceAccountName": "rhtas-operator-controller-manager", "terminationGracePeriodSeconds": 10 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:31:43Z", "generation": 1, "labels": { "app": "tekton-operator", "name": "tekton-operator-webhook", "pod-template-hash": "6c8b8979cd" }, "name": "tekton-operator-webhook-6c8b8979cd", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-operator-webhook", "uid": "44ea8020-9f98-4210-aec7-b513f1d6d1b7" } ], "resourceVersion": "18986", "uid": "7a267f54-5b11-45c1-b3c1-6fd353427376" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "tekton-operator-webhook", "pod-template-hash": "6c8b8979cd" } }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"ManualApprovalGate\",\n \"metadata\": {\n \"name\": \"manual-approval-gate\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"OpenShiftPipelinesAsCode\",\n \"metadata\": {\n \"name\": \"pipelines-as-code\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonAddon\",\n \"metadata\": {\n \"name\": \"addon\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonChain\",\n \"metadata\": {\n \"name\": \"chain\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonConfig\",\n \"metadata\": {\n \"name\": \"config\"\n },\n \"spec\": {\n \"addon\": {\n \"params\": [\n {\n \"name\": \"pipelineTemplates\",\n \"value\": \"true\"\n },\n {\n \"name\": \"resolverTasks\",\n \"value\": \"true\"\n },\n {\n \"name\": \"resolverStepActions\",\n \"value\": \"true\"\n },\n {\n \"name\": \"communityResolverTasks\",\n \"value\": \"true\"\n }\n ]\n },\n \"params\": [\n {\n \"name\": \"createRbacResource\",\n \"value\": \"true\"\n },\n {\n \"name\": \"legacyPipelineRbac\",\n \"value\": \"true\"\n },\n {\n \"name\": \"createCABundleConfigMaps\",\n \"value\": \"true\"\n }\n ],\n \"profile\": \"all\",\n \"pruner\": {\n \"keep\": 100,\n \"resources\": [\n \"pipelinerun\",\n \"taskrun\"\n ],\n \"schedule\": \"0 8 * * *\"\n },\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonHub\",\n \"metadata\": {\n \"name\": \"hub\"\n },\n \"spec\": {\n \"api\": {\n \"catalogRefreshInterval\": \"30m\"\n },\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonInstallerSet\",\n \"metadata\": {\n \"name\": \"foo\"\n },\n \"spec\": {\n \"manifests\": []\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonPipeline\",\n \"metadata\": {\n \"name\": \"pipeline\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonPruner\",\n \"metadata\": {\n \"name\": \"pruner\"\n },\n \"spec\": {\n \"disabled\": true,\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonResult\",\n \"metadata\": {\n \"name\": \"result\"\n },\n \"spec\": {\n \"auth_disable\": true,\n \"db_enable_auto_migration\": true,\n \"db_host\": \"tekton-results-postgres-service.openshift-pipelines.svc.cluster.local\",\n \"db_port\": 5432,\n \"log_level\": \"debug\",\n \"logging_pvc_name\": \"tekton-logs\",\n \"logs_api\": true,\n \"logs_buffer_size\": 32768,\n \"logs_path\": \"/logs\",\n \"logs_type\": \"File\",\n \"prometheus_port\": 9090,\n \"server_port\": 8080,\n \"targetNamespace\": \"openshift-pipelines\",\n \"tls_hostname_override\": \"tekton-results-api-service.openshift-pipelines.svc.cluster.local\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonTrigger\",\n \"metadata\": {\n \"name\": \"trigger\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n }\n]", "capabilities": "Full Lifecycle", "categories": "Developer Tools, Integration \u0026 Delivery", "certified": "false", "console.openshift.io/plugins": "[\"pipelines-console-plugin\"]", "description": "Red Hat OpenShift Pipelines is a cloud-native CI/CD solution for building pipelines using Tekton concepts which run natively on OpenShift and Kubernetes.", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "true", "features.operators.openshift.io/proxy-aware": "true", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "olm.operatorGroup": "global-operators", "olm.operatorNamespace": "openshift-operators", "olm.skipRange": "\u003e=1.20.0 \u003c1.21.1", "olm.targetNamespaces": "", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"ManualApprovalGate\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"OpenShiftPipelinesAsCode\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonAddon\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonChain\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonConfig\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonHub\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonInstallerSet\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonPipeline\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonPruner\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonResult\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonTrigger\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"openshift-pipelines-operator-rh\",\"version\":\"1.21.1\"}}]}", "operators.openshift.io/valid-subscription": "[\"OpenShift Container Platform\", \"OpenShift Platform Plus\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.37.0", "operators.operatorframework.io/internal-objects": "[\"tektoninstallersets.operator.tekton.dev\", \"tektonconfigs.operator.tekton.dev\",\"tektonpipelines.operator.tekton.dev\",\"tektontriggers.operator.tekton.dev\",\"tektonaddons.operator.tekton.dev\", \"tektonhubs.operator.tekton.dev\", \"tektonresults.operator.tekton.dev\", \"tektonchains.operator.tekton.dev\", \"openshiftpipelinesascodes.operator.tekton.dev\", \"manualapprovalgates.operator.tekton.dev\",\"tektonpruners.operator.tekton.dev\"]", "operators.operatorframework.io/project_layout": "unknown", "repository": "https://github.com/tektoncd/operator", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "app": "tekton-operator", "name": "tekton-operator-webhook", "pod-template-hash": "6c8b8979cd" } }, "spec": { "containers": [ { "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-webhook-config-leader-election" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-operator-webhook" }, { "name": "WEBHOOK_SECRET_NAME", "value": "tekton-operator-webhook-certs" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "PLATFORM", "value": "openshift" }, { "name": "AUTOINSTALL_COMPONENTS", "value": "false" }, { "name": "OPERATOR_CONDITION_NAME", "value": "openshift-pipelines-operator-rh.v1.21.1" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-operator-webhook-rhel9@sha256:7d79d27acad66cc8b34f0a38c7ad1f9663b80c4712e7659b1637cda597ff7248", "imagePullPolicy": "IfNotPresent", "name": "tekton-operator-webhook", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-pipelines-operator", "serviceAccountName": "openshift-pipelines-operator", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:37:46Z", "generation": 1, "labels": { "app": "pipelines-as-code-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/deployment-spec-applied-hash": "fa2cfb68cc1b2a80c7adc6a689630221", "pod-template-hash": "7d958d5d5d" }, "name": "pipelines-as-code-controller-7d958d5d5d", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-as-code-controller", "uid": "41b661c1-682b-499c-b42a-2e09a27cc9d1" } ], "resourceVersion": "27668", "uid": "19e5b391-5421-4db6-9973-b944d8be3369" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "pod-template-hash": "7d958d5d5d" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-as-code-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/deployment-spec-applied-hash": "fa2cfb68cc1b2a80c7adc6a689630221", "pod-template-hash": "7d958d5d5d" } }, "spec": { "containers": [ { "command": [ "/ko-app/pipelines-as-code-controller" ], "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "K_METRICS_CONFIG", "value": "{\"Domain\":\"pipelinesascode.tekton.dev/controller\",\"Component\":\"pac_controller\",\"PrometheusPort\":9090,\"ConfigMap\":{\"name\":\"pipelines-as-code-config-observability\"}}" }, { "name": "K_SINK_TIMEOUT", "value": "30" }, { "name": "K_TRACING_CONFIG", "value": "{\"backend\":\"prometheus\",\"debug\":\"false\",\"sample-rate\":\"0\"}" }, { "name": "PAC_CONTROLLER_CONFIGMAP", "value": "pipelines-as-code" }, { "name": "PAC_CONTROLLER_LABEL", "value": "default" }, { "name": "PAC_CONTROLLER_SECRET", "value": "pipelines-as-code-secret" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TLS_CERT", "value": "cert" }, { "name": "TLS_KEY", "value": "key" }, { "name": "TLS_SECRET_NAME", "value": "pipelines-as-code-tls-secret" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-controller-rhel9@sha256:03656ac687c2f3ba6dfd72f7373c6fb67169660a07a579b009c8d8f89b7c0576", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "api", "scheme": "HTTP" }, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "pac-controller", "ports": [ { "containerPort": 8082, "name": "api", "protocol": "TCP" }, { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "api", "scheme": "HTTP" }, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/pipelines-as-code/tls", "name": "tls", "readOnly": true }, { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-controller", "serviceAccountName": "pipelines-as-code-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "pipelines-as-code-tls-secret" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:37:46Z", "generation": 1, "labels": { "app": "pipelines-as-code-watcher", "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/deployment-spec-applied-hash": "8258d02df45cdbf20a1640da7b5bc1b4", "pod-template-hash": "7c997594c4" }, "name": "pipelines-as-code-watcher-7c997594c4", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-as-code-watcher", "uid": "c1bc9e06-f83d-482c-a58d-72d76e161ad6" } ], "resourceVersion": "27701", "uid": "3e020796-e0d3-441f-afe0-af9fa609f5c6" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "pod-template-hash": "7c997594c4" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-as-code-watcher", "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/deployment-spec-applied-hash": "8258d02df45cdbf20a1640da7b5bc1b4", "pod-template-hash": "7c997594c4" } }, "spec": { "containers": [ { "command": [ "/ko-app/pipelines-as-code-watcher" ], "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "pac-watcher-config-leader-election" }, { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "pipelines-as-code-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipelinesascode" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel9@sha256:ab8152479af7d6fe719c90de7de5b7c97c409f8649db724f51e99dec57cb171b", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "pac-watcher", "ports": [ { "containerPort": 8080, "name": "probes", "protocol": "TCP" }, { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-watcher", "serviceAccountName": "pipelines-as-code-watcher", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:37:46Z", "generation": 1, "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/deployment-spec-applied-hash": "41e51166a122e3e803f896a8c4485f12", "pod-template-hash": "78d8f488c" }, "name": "pipelines-as-code-webhook-78d8f488c", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-as-code-webhook", "uid": "3c773bae-271a-42aa-b06f-16bd77851946" } ], "resourceVersion": "27587", "uid": "09e3342e-86fa-4eb8-a871-7aeae0483173" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "pod-template-hash": "78d8f488c" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/deployment-spec-applied-hash": "41e51166a122e3e803f896a8c4485f12", "pod-template-hash": "78d8f488c" } }, "spec": { "containers": [ { "command": [ "/ko-app/pipelines-as-code-webhook" ], "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "pac-webhook-config-leader-election" }, { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipelinesascode" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SECRET_NAME", "value": "pipelines-as-code-webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "pipelines-as-code-webhook" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-webhook-rhel9@sha256:d489fcc781d7ea7017d10297458c19414ce1415fdd0aa41c2e614359c7f6304f", "imagePullPolicy": "IfNotPresent", "name": "pac-webhook", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-webhook", "serviceAccountName": "pipelines-as-code-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:37:57Z", "generation": 1, "labels": { "app": "pipelines-console-plugin", "app.kubernetes.io/part-of": "tekton-config", "name": "pipelines-console-plugin", "pod-template-hash": "59df77ccc8" }, "name": "pipelines-console-plugin-59df77ccc8", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-console-plugin", "uid": "3114d6ba-06be-4612-9ad5-e124054256d7" } ], "resourceVersion": "27943", "uid": "2ba6dc60-ba11-4fb9-ac54-7e4b7a5c3ef8" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "pipelines-console-plugin", "name": "pipelines-console-plugin", "pod-template-hash": "59df77ccc8" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-console-plugin", "app.kubernetes.io/part-of": "tekton-config", "name": "pipelines-console-plugin", "pod-template-hash": "59df77ccc8" } }, "spec": { "containers": [ { "image": "registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel9@sha256:7be2fe2114db1ec77293b48dc1e940f8809f7cb668f2415c1d73c3f9ba9ddbb0", "imagePullPolicy": "Always", "name": "pipelines-console-plugin", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/cert", "name": "pipelines-console-plugin-cert", "readOnly": true }, { "mountPath": "/etc/nginx/nginx.conf", "name": "nginx-conf", "readOnly": true, "subPath": "nginx.conf" }, { "mountPath": "/var/lib/nginx/tmp", "name": "nginx-tmp" }, { "mountPath": "/var/cache/nginx", "name": "nginx-cache" }, { "mountPath": "/var/run", "name": "nginx-run" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "pipelines-console-plugin-cert", "secret": { "defaultMode": 420, "secretName": "pipelines-console-plugin-cert" } }, { "configMap": { "defaultMode": 420, "name": "pipelines-console-plugin" }, "name": "nginx-conf" }, { "emptyDir": {}, "name": "nginx-tmp" }, { "emptyDir": {}, "name": "nginx-cache" }, { "emptyDir": {}, "name": "nginx-run" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:36:39Z", "generation": 1, "labels": { "app": "tekton-chains-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "e6df66e7c28d2f03648160282f14b74a", "pipeline.tekton.dev/release": "v0.26.2", "pod-template-hash": "5c59b754bc", "version": "v0.26.2" }, "name": "tekton-chains-controller-5c59b754bc", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-chains-controller", "uid": "99fb1f1f-5dac-4b9d-b87c-a17061de6e8b" } ], "resourceVersion": "25763", "uid": "4e3d0cb0-39e9-407c-b26e-065289591d67" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "pod-template-hash": "5c59b754bc" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-chains-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "e6df66e7c28d2f03648160282f14b74a", "pipeline.tekton.dev/release": "v0.26.2", "pod-template-hash": "5c59b754bc", "version": "v0.26.2" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-chains-config-leader-election" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-chains-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/chains" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:77751c15706d768514ad33f2c360ce7e342e9462d5ebde420cb20b2fe4e1de78", "imagePullPolicy": "IfNotPresent", "name": "tekton-chains-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/signing-secrets", "name": "signing-secrets" }, { "mountPath": "/var/run/sigstore/cosign", "name": "oidc-info" }, { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-chains-controller", "serviceAccountName": "tekton-chains-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "signing-secrets", "secret": { "defaultMode": 420, "secretName": "signing-secrets" } }, { "name": "oidc-info", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "sigstore", "expirationSeconds": 600, "path": "oidc-token" } } ] } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:36:03Z", "generation": 1, "labels": { "app": "tekton-events-controller", "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.6.1", "operator.tekton.dev/deployment-spec-applied-hash": "173ec50dbc8530bcfa30448ca1cc490d", "pipeline.tekton.dev/release": "v1.6.1", "pod-template-hash": "7f5b66d8fd", "version": "v1.6.1" }, "name": "tekton-events-controller-7f5b66d8fd", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-events-controller", "uid": "d8df7929-ab43-44f0-8d65-5d04dcca6173" } ], "resourceVersion": "24813", "uid": "81e78770-2199-4b28-8180-ba15c776843c" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "7f5b66d8fd" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-events-controller", "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.6.1", "operator.tekton.dev/deployment-spec-applied-hash": "173ec50dbc8530bcfa30448ca1cc490d", "pipeline.tekton.dev/release": "v1.6.1", "pod-template-hash": "7f5b66d8fd", "version": "v1.6.1" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } } }, "containers": [ { "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-events" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SSL_CERT_DIR", "value": "/etc/ssl/certs" }, { "name": "SSL_CERT_FILE", "value": "/etc/config-registry-cert/cert" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-events-rhel9@sha256:34a30986fb4cdc8edfbb5f39619013ea623fb2f633ee83a384d3b98e4bc133cc", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "tekton-events-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config-logging", "name": "config-logging" }, { "mountPath": "/etc/config-registry-cert", "name": "config-registry-cert" }, { "mountPath": "/etc/ssl/certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/etc/ssl/certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-events-controller", "serviceAccountName": "tekton-events-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "config-logging" }, "name": "config-logging" }, { "configMap": { "defaultMode": 420, "name": "config-registry-cert" }, "name": "config-registry-cert" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:36:03Z", "generation": 1, "labels": { "app": "tekton-operator", "name": "tekton-operator", "operator.tekton.dev/deployment-spec-applied-hash": "691f32c8ee88be653a0bc77734ee2834", "pod-template-hash": "6b596b4bd8" }, "name": "tekton-operator-proxy-webhook-6b596b4bd8", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-operator-proxy-webhook", "uid": "6aa51ad4-19b9-42c7-a4e0-8c55cd3f3554" } ], "resourceVersion": "24941", "uid": "116842d8-181a-422a-8bb1-68e650e19e4d" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "tekton-operator", "pod-template-hash": "6b596b4bd8" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-operator", "name": "tekton-operator", "operator.tekton.dev/deployment-spec-applied-hash": "691f32c8ee88be653a0bc77734ee2834", "pod-template-hash": "6b596b4bd8" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-proxy-webhook-config-leader-election" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SECRET_NAME", "value": "proxy-webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-operator-proxy-webhook" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-operator-proxy-rhel9@sha256:4747a491c6fd2de939e00dbd9fb12ac4f813bce077c8dfe4463be1e72634602b", "imagePullPolicy": "IfNotPresent", "name": "proxy", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "500Mi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-operators-proxy-webhook", "serviceAccountName": "tekton-operators-proxy-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:36:02Z", "generation": 1, "labels": { "app": "tekton-pipelines-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.6.1", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "6e033dba5687d6a92015681e75e280b1", "pipeline.tekton.dev/release": "v1.6.1", "pod-template-hash": "bb5b59f54", "version": "v1.6.1" }, "name": "tekton-pipelines-controller-bb5b59f54", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-pipelines-controller", "uid": "cc8179f0-71d7-4d7c-bfc1-a8d807836926" } ], "resourceVersion": "24798", "uid": "2901c8ce-6413-4cbe-b081-39ae74664321" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "bb5b59f54" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.6.1", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "6e033dba5687d6a92015681e75e280b1", "pipeline.tekton.dev/release": "v1.6.1", "pod-template-hash": "bb5b59f54", "version": "v1.6.1" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-entrypoint-image", "registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel9@sha256:fd9f6bc408772348ae540701c6bf2b178028362801acb748e1dde80c06eba70d", "-nop-image", "registry.redhat.io/openshift-pipelines/pipelines-nop-rhel9@sha256:ea0574a3ee9e6be79189c65b589b6b6d666459a80b8c87ec10653d210dbe510d", "-sidecarlogresults-image", "registry.redhat.io/openshift-pipelines/pipelines-sidecarlogresults-rhel9@sha256:b5e859d02a515139f799f0fce9446333393461c845ee1cf638747960dc382064", "-workingdirinit-image", "registry.redhat.io/openshift-pipelines/pipelines-workingdirinit-rhel9@sha256:5e4adc0c5619537d0c15175208883e3405d92dcd48566a40c59422905fcac30e", "-shell-image", "registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel9@sha256:fd9f6bc408772348ae540701c6bf2b178028362801acb748e1dde80c06eba70d", "-shell-image-win", "mcr.microsoft.com/powershell:nanoserver@sha256:b6d5ff841b78bdf2dfed7550000fd4f3437385b8fa686ec0f010be24777654d6", "-disable-ha=false" ], "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults" }, { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-controller" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "CONFIG_SPIRE", "value": "config-spire" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipeline" }, { "name": "SSL_CERT_DIR", "value": "/etc/ssl/certs" }, { "name": "SSL_CERT_FILE", "value": "/etc/config-registry-cert/cert" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-controller-rhel9@sha256:862f686cb10b000d301bb4b49af39eefb046d6abb7fd2187ef8c59925736c932", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "tekton-pipelines-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config-logging", "name": "config-logging" }, { "mountPath": "/etc/config-registry-cert", "name": "config-registry-cert" }, { "mountPath": "/etc/ssl/certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/etc/ssl/certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-controller", "serviceAccountName": "tekton-pipelines-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "config-logging" }, "name": "config-logging" }, { "configMap": { "defaultMode": 420, "name": "config-registry-cert" }, "name": "config-registry-cert" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:36:03Z", "generation": 1, "labels": { "app": "tekton-pipelines-resolvers", "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.6.1", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "7b855a5f254ef58a66d5c00940807af2", "pipeline.tekton.dev/release": "v1.6.1", "pod-template-hash": "cd44fc77", "version": "v1.6.1" }, "name": "tekton-pipelines-remote-resolvers-cd44fc77", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-pipelines-remote-resolvers", "uid": "afe2b5ca-df43-456b-8363-54095cf273de" } ], "resourceVersion": "24745", "uid": "5b70feb8-3aab-47a0-bbf3-9b008726ddb3" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "cd44fc77" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-resolvers", "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.6.1", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "7b855a5f254ef58a66d5c00940807af2", "pipeline.tekton.dev/release": "v1.6.1", "pod-template-hash": "cd44fc77", "version": "v1.6.1" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "command": [ "/sbin/tini", "--", "/ko-app/resolvers" ], "env": [ { "name": "ARTIFACT_HUB_API", "value": "https://artifacthub.io/" }, { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-resolvers" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/resolution" }, { "name": "PROBES_PORT", "value": "8080" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TEKTON_HUB_API" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-resolvers-rhel9@sha256:15cd02433813f9809c7bdb16707636f2a4336fe501ac4663abc38ee7cdfeb917", "imagePullPolicy": "IfNotPresent", "name": "controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "1", "memory": "4Gi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp-clone-volume" }, { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-resolvers", "serviceAccountName": "tekton-pipelines-resolvers", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": { "sizeLimit": "4Gi" }, "name": "tmp-clone-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:36:03Z", "generation": 3, "labels": { "app": "tekton-pipelines-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.6.1", "operator.tekton.dev/deployment-spec-applied-hash": "28a6c479f3f830e710ab5a08517751f4", "pipeline.tekton.dev/release": "v1.6.1", "pod-template-hash": "bd7fdc457", "version": "v1.6.1" }, "name": "tekton-pipelines-webhook-bd7fdc457", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-pipelines-webhook", "uid": "678adbaa-439d-474d-a12b-4daacdf770c3" } ], "resourceVersion": "43016", "uid": "86422c8a-f752-4da9-8c7c-f63214589b14" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "bd7fdc457" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.6.1", "operator.tekton.dev/deployment-spec-applied-hash": "28a6c479f3f830e710ab5a08517751f4", "pipeline.tekton.dev/release": "v1.6.1", "pod-template-hash": "bd7fdc457", "version": "v1.6.1" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-webhook" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipeline" }, { "name": "PROBES_PORT", "value": "8080" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_ADMISSION_CONTROLLER_NAME", "value": "webhook.pipeline.tekton.dev" }, { "name": "WEBHOOK_PORT", "value": "8443" }, { "name": "WEBHOOK_SECRET_NAME", "value": "webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-pipelines-webhook" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-webhook-rhel9@sha256:7ce8fca678919af6ad687d11858ecce0d392f478da4e6b57a5ea3e736008341e", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "webhook", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "cpu": "500m", "memory": "500Mi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-webhook", "serviceAccountName": "tekton-pipelines-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 3, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:36:47Z", "generation": 1, "labels": { "app": "tekton-results-api", "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.17.2", "operator.tekton.dev/deployment-spec-applied-hash": "585fffc85382a3bb1066f56ff6cc4f6c", "pod-template-hash": "7bc79b54bf" }, "name": "tekton-results-api-7bc79b54bf", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-results-api", "uid": "bb799963-c3b2-4d37-86d2-a11c6533f224" } ], "resourceVersion": "26514", "uid": "ef8c9838-977b-4643-836e-a24eb0712eda" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.17.2", "pod-template-hash": "7bc79b54bf" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-results-api", "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.17.2", "operator.tekton.dev/deployment-spec-applied-hash": "585fffc85382a3bb1066f56ff6cc4f6c", "pod-template-hash": "7bc79b54bf" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.17.2" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "DB_HOST", "value": "tekton-results-postgres-service.openshift-pipelines.svc.cluster.local" }, { "name": "DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_PASSWORD", "name": "tekton-results-postgres" } } }, { "name": "DB_USER", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_USER", "name": "tekton-results-postgres" } } }, { "name": "IS_EXTERNAL_DB", "value": "false" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "LOGGING_PLUGIN_TLS_VERIFICATION_DISABLE", "value": "false" }, { "name": "ROUTE_ENABLED", "value": "true" }, { "name": "ROUTE_TLS_TERMINATION", "value": "edge" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-results-api-rhel9@sha256:803e2eeb32b2cc79f4ed8a34f9b1c4ef35c750c3b1cc9352dd0f690dd75ae177", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "api", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "startupProbe": { "failureThreshold": 10, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tekton/results", "name": "config", "readOnly": true }, { "mountPath": "/etc/tls", "name": "tls", "readOnly": true }, { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-results-api", "serviceAccountName": "tekton-results-api", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "tekton-results-api-config" }, "name": "config" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:36:47Z", "generation": 1, "labels": { "app": "tekton-results-retention-policy-agent", "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/version": "v0.17.2", "operator.tekton.dev/deployment-spec-applied-hash": "a5ce2114bfbf8041d5092ce0540ef7b4", "pod-template-hash": "747bc489d" }, "name": "tekton-results-retention-policy-agent-747bc489d", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-results-retention-policy-agent", "uid": "b260255e-c7df-475f-8dbe-e8376b8b5e61" } ], "resourceVersion": "26041", "uid": "1572c221-3924-4bd9-aad5-6f58f134a751" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/version": "v0.17.2", "pod-template-hash": "747bc489d" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-results-retention-policy-agent", "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/version": "v0.17.2", "operator.tekton.dev/deployment-spec-applied-hash": "a5ce2114bfbf8041d5092ce0540ef7b4", "pod-template-hash": "747bc489d" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "tekton-results-config-logging" }, { "name": "DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_PASSWORD", "name": "tekton-results-postgres" } } }, { "name": "DB_USER", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_USER", "name": "tekton-results-postgres" } } }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-results-retention-policy-agent-rhel9@sha256:a70f1da59119c9bb43362b87e5bc2b05113e8796b8ca8e1ff0439b66772a7244", "imagePullPolicy": "IfNotPresent", "name": "retention-policy-agent", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tekton/results", "name": "config", "readOnly": true }, { "mountPath": "/etc/tls", "name": "tls", "readOnly": true }, { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-results-watcher", "serviceAccountName": "tekton-results-watcher", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "tekton-results-api-config" }, "name": "config" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:36:48Z", "generation": 1, "labels": { "app": "tekton-results-watcher", "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.17.2", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "ff0a5cf8350df4c2d44bf2ec024250f8", "pod-template-hash": "6574987ffc" }, "name": "tekton-results-watcher-6574987ffc", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-results-watcher", "uid": "6b10b3ba-aaad-4c11-ab40-c6cf3a4c7ccb" } ], "resourceVersion": "26056", "uid": "43dc22fc-c8a7-4edd-b95e-a645e889ffd0" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.17.2", "pod-template-hash": "6574987ffc" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-results-watcher", "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.17.2", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "ff0a5cf8350df4c2d44bf2ec024250f8", "pod-template-hash": "6574987ffc" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.17.2" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-api_addr", "$(TEKTON_RESULTS_API_SERVICE)", "-auth_mode", "$(AUTH_MODE)" ], "env": [ { "name": "AUTH_MODE", "value": "token" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-results-config-leader-election" }, { "name": "CONFIG_LOGGING_NAME", "value": "tekton-results-config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-results-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/results" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TEKTON_RESULTS_API_SERVICE", "value": "tekton-results-api-service.openshift-pipelines.svc.cluster.local:8080" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-results-watcher-rhel9@sha256:41427cc1b6689f776e95574529ef9b22a6dde840f23c2b78103416ab37cc5800", "imagePullPolicy": "IfNotPresent", "name": "watcher", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tls", "name": "tls", "readOnly": true }, { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-results-watcher", "serviceAccountName": "tekton-results-watcher", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:36:26Z", "generation": 1, "labels": { "app": "tekton-triggers-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.34.0", "operator.tekton.dev/deployment-spec-applied-hash": "2f54ebefd857020d5d8c532df23ee9b7", "pod-template-hash": "c769879ff", "triggers.tekton.dev/release": "v0.34.0", "version": "v0.34.0" }, "name": "tekton-triggers-controller-c769879ff", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-triggers-controller", "uid": "149f963f-2111-4934-9170-f1e600c7fea9" } ], "resourceVersion": "25409", "uid": "0581040b-3c36-46f9-9b90-c94a73ff645d" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers", "pod-template-hash": "c769879ff" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.34.0", "operator.tekton.dev/deployment-spec-applied-hash": "2f54ebefd857020d5d8c532df23ee9b7", "pod-template-hash": "c769879ff", "triggers.tekton.dev/release": "v0.34.0", "version": "v0.34.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-logtostderr", "-stderrthreshold", "INFO", "-el-image", "registry.redhat.io/openshift-pipelines/pipelines-triggers-eventlistenersink-rhel9@sha256:df87d4d8bad3d7df88ef56cc89eef6d4af76e5d442f0778c52d67582ed952a74", "-el-port", "8080", "-el-security-context=true", "-el-read-only-root-filesystem=true", "-el-events", "enable", "-el-readtimeout", "5", "-el-writetimeout", "40", "-el-idletimeout", "120", "-el-timeouthandler", "30", "-el-httpclient-readtimeout", "30", "-el-httpclient-keep-alive", "30", "-el-httpclient-tlshandshaketimeout", "10", "-el-httpclient-responseheadertimeout", "10", "-el-httpclient-expectcontinuetimeout", "1", "-period-seconds", "10", "-failure-threshold", "3" ], "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults-triggers" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-triggers-controllers" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability-triggers" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "METRICS_PROMETHEUS_PORT", "value": "9000" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-triggers-controller-rhel9@sha256:68b3df2abb2eb76d8acc58ecd1872ccb85e76177d9d895fb9c1e722354d090dd", "imagePullPolicy": "IfNotPresent", "name": "tekton-triggers-controller", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-controller", "serviceAccountName": "tekton-triggers-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:36:26Z", "generation": 1, "labels": { "app": "tekton-triggers-core-interceptors", "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.34.0", "operator.tekton.dev/deployment-spec-applied-hash": "627d37671a8eaaa776b716cbfd3f9729", "pod-template-hash": "dd9ffc4d5", "triggers.tekton.dev/release": "v0.34.0", "version": "v0.34.0" }, "name": "tekton-triggers-core-interceptors-dd9ffc4d5", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-triggers-core-interceptors", "uid": "98de19d6-6b19-4e26-aa4f-b966e16e2253" } ], "resourceVersion": "25530", "uid": "c5a1497f-e6f6-4f83-8c26-44975323e9fe" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers", "pod-template-hash": "dd9ffc4d5" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-core-interceptors", "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.34.0", "operator.tekton.dev/deployment-spec-applied-hash": "627d37671a8eaaa776b716cbfd3f9729", "pod-template-hash": "dd9ffc4d5", "triggers.tekton.dev/release": "v0.34.0", "version": "v0.34.0" } }, "spec": { "containers": [ { "args": [ "-logtostderr", "-stderrthreshold", "INFO" ], "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability-triggers" }, { "name": "INTERCEPTOR_TLS_SECRET_NAME", "value": "tekton-triggers-core-interceptors-certs" }, { "name": "INTERCEPTOR_TLS_SVC_NAME", "value": "tekton-triggers-core-interceptors" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-triggers-core-interceptors-rhel9@sha256:1662f3da4827b60da673f6362d7fbe9673a945d965b3556d61e31951a93eb3ee", "imagePullPolicy": "IfNotPresent", "name": "tekton-triggers-core-interceptors", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-core-interceptors", "serviceAccountName": "tekton-triggers-core-interceptors", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:36:26Z", "generation": 1, "labels": { "app": "tekton-triggers-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.34.0", "operator.tekton.dev/deployment-spec-applied-hash": "3214376621786fd6f100c2bfc8559d73", "pod-template-hash": "56c9d7d56", "triggers.tekton.dev/release": "v0.34.0", "version": "v0.34.0" }, "name": "tekton-triggers-webhook-56c9d7d56", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-triggers-webhook", "uid": "afa2afac-1d47-4d5a-bc19-eb9a5ba851cf" } ], "resourceVersion": "25337", "uid": "e374e521-7ade-4364-9583-245036f91cc3" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers", "pod-template-hash": "56c9d7d56" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.34.0", "operator.tekton.dev/deployment-spec-applied-hash": "3214376621786fd6f100c2bfc8559d73", "pod-template-hash": "56c9d7d56", "triggers.tekton.dev/release": "v0.34.0", "version": "v0.34.0" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-triggers-webhook" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SECRET_NAME", "value": "triggers-webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-triggers-webhook" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-triggers-webhook-rhel9@sha256:c30b1378603e087951a70484ad015d2cc066de6d61f0d8def27f042ff80802f0", "imagePullPolicy": "IfNotPresent", "name": "webhook", "ports": [ { "containerPort": 9000, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-webhook", "serviceAccountName": "tekton-triggers-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:37:24Z", "generation": 1, "labels": { "app": "tkn-cli-serve", "pod-template-hash": "6c5976cb68" }, "name": "tkn-cli-serve-6c5976cb68", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tkn-cli-serve", "uid": "7bef13ef-faa9-4dc1-9ca6-6801fbe8937e" } ], "resourceVersion": "27313", "uid": "e1f42e86-9b8e-4515-8780-f68f2aa1abc5" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "tkn-cli-serve", "pod-template-hash": "6c5976cb68" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tkn-cli-serve", "pod-template-hash": "6c5976cb68" } }, "spec": { "containers": [ { "image": "registry.redhat.io/openshift-pipelines/pipelines-serve-tkn-cli-rhel9@sha256:5566ebbc75f2a2a911f3cc884f969a3c45104341a99e51a795c6bc31ce43e625", "imagePullPolicy": "IfNotPresent", "name": "tkn-cli-serve", "ports": [ { "containerPort": 8080, "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/httpd", "name": "httpd-config" }, { "mountPath": "/var/log/httpd", "name": "httpd-logs" }, { "mountPath": "/opt/app-root", "name": "app-root" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "cp -rL /etc/httpd/* /httpd-config/ 2\u003e/dev/null || true\nfind /httpd-config -type f -exec chmod u+w {} \\;\ncp -rL /opt/app-root/* /app-root/ 2\u003e/dev/null || true\nfind /app-root -type f -exec chmod u+w {} \\;\n" ], "image": "registry.redhat.io/openshift-pipelines/pipelines-serve-tkn-cli-rhel9@sha256:5566ebbc75f2a2a911f3cc884f969a3c45104341a99e51a795c6bc31ce43e625", "imagePullPolicy": "IfNotPresent", "name": "tkn-cli-serve-init-config", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/httpd-config", "name": "httpd-config" }, { "mountPath": "/app-root", "name": "app-root" } ] } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "httpd-config" }, { "emptyDir": {}, "name": "httpd-logs" }, { "emptyDir": {}, "name": "app-root" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true" }, "creationTimestamp": "2026-05-05T17:13:15Z", "generation": 1, "labels": { "app": "service-ca-operator", "pod-template-hash": "565f7cf679" }, "name": "service-ca-operator-565f7cf679", "namespace": "openshift-service-ca-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "service-ca-operator", "uid": "0286b683-42fe-4044-8276-70ff425fb917" } ], "resourceVersion": "14281", "uid": "a5ef903c-5d60-4abe-9337-ea2cd27915e2" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "service-ca-operator", "pod-template-hash": "565f7cf679" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "service-ca-operator", "pod-template-hash": "565f7cf679" }, "name": "service-ca-operator" }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/operator-config.yaml", "-v=2" ], "command": [ "service-ca-operator", "operator" ], "env": [ { "name": "CONTROLLER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:957cb9c76d75144d15108d4e8f4c7fc231e61e86f6cf5f377346e2bc313ec720" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.9" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:957cb9c76d75144d15108d4e8f4c7fc231e61e86f6cf5f377346e2bc313ec720", "imagePullPolicy": "IfNotPresent", "name": "service-ca-operator", "resources": { "requests": { "cpu": "10m", "memory": "80Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsGroup": 1001, "runAsNonRoot": true, "runAsUser": 1001, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "service-ca-operator", "serviceAccountName": "service-ca-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "service-ca-operator-config" }, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "8d19f1043e1c8f2bd251e902ecbbf1162e6cff7d8d8edb590baca710beaf6507" }, "creationTimestamp": "2026-05-05T17:26:48Z", "generation": 1, "labels": { "app": "service-ca", "pod-template-hash": "6549cb95df", "service-ca": "true" }, "name": "service-ca-6549cb95df", "namespace": "openshift-service-ca", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "service-ca", "uid": "eba4d0e1-f5db-43ff-94a8-4506aea0ea3e" } ], "resourceVersion": "11328", "uid": "65ee93b7-f4d8-4ba3-8bfb-18b9c79e3f2d" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "service-ca", "pod-template-hash": "6549cb95df", "service-ca": "true" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "service-ca", "pod-template-hash": "6549cb95df", "service-ca": "true" }, "name": "service-ca" }, "spec": { "containers": [ { "args": [ "-v=2" ], "command": [ "service-ca-operator", "controller" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:957cb9c76d75144d15108d4e8f4c7fc231e61e86f6cf5f377346e2bc313ec720", "imagePullPolicy": "IfNotPresent", "name": "service-ca-controller", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "120Mi" } }, "securityContext": { "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/signing-key", "name": "signing-key" }, { "mountPath": "/var/run/configmaps/signing-cabundle", "name": "signing-cabundle" } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "service-ca", "serviceAccountName": "service-ca", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "signing-key", "secret": { "defaultMode": 420, "secretName": "signing-key" } }, { "configMap": { "defaultMode": 420, "name": "signing-cabundle" }, "name": "signing-cabundle" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:31:28Z", "generation": 1, "labels": { "name": "rhbk-operator", "pod-template-hash": "759b8bf9b5" }, "name": "rhbk-operator-759b8bf9b5", "namespace": "rhbk-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "rhbk-operator", "uid": "53bfcc1e-63d7-4c34-b3bc-bf722e065519" } ], "resourceVersion": "17575", "uid": "b755891a-e344-4143-a272-2d495d8ee7c7" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "rhbk-operator", "pod-template-hash": "759b8bf9b5" } }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"k8s.keycloak.org/v2alpha1\",\n \"kind\": \"Keycloak\",\n \"metadata\": {\n \"name\": \"example-keycloak\",\n \"labels\": {\n \"app\": \"sso\"\n }\n },\n \"spec\": {\n \"instances\": 1,\n \"hostname\": {\n \"hostname\": \"example.org\"\n },\n \"http\": {\n \"tlsSecret\": \"my-tls-secret\"\n }\n }\n },\n {\n \"apiVersion\": \"k8s.keycloak.org/v2alpha1\",\n \"kind\": \"KeycloakRealmImport\",\n \"metadata\": {\n \"name\": \"example-keycloak-realm-import\",\n \"labels\": {\n \"app\": \"sso\"\n }\n },\n \"spec\": {\n \"keycloakCRName\": \"example-keycloak\",\n \"realm\": {}\n }\n }\n]", "capabilities": "Deep Insights", "categories": "Security", "certified": "false", "containerImage": "registry.redhat.io/rhbk/keycloak-rhel9-operator@sha256:27cc3e86042a74b64351e2fab9e9bbaf10c632affafc404ea96e4707dbe2ab93", "createdAt": "2026-03-26T22:02:28Z", "description": "An Operator for installing and managing Keycloak", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "false", "features.operators.openshift.io/proxy-aware": "false", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "olm.operatorGroup": "rhbk-operator", "olm.operatorNamespace": "rhbk-operator", "olm.targetNamespaces": "tssc-keycloak", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"k8s.keycloak.org\",\"kind\":\"Keycloak\",\"version\":\"v2alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"k8s.keycloak.org\",\"kind\":\"KeycloakRealmImport\",\"version\":\"v2alpha1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"rhbk-operator\",\"version\":\"26.4.11-opr.1\"}}]}", "operators.openshift.io/valid-subscription": "[\"OpenShift Container Platform\", \"OpenShift Platform Plus\"]", "repository": "https://github.com/keycloak/keycloak", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "name": "rhbk-operator", "pod-template-hash": "759b8bf9b5" } }, "spec": { "containers": [ { "env": [ { "name": "RELATED_IMAGE_KEYCLOAK", "value": "registry.redhat.io/rhbk/keycloak-rhel9@sha256:a8ec9cc9b21641635ffc88656680601fb8fc2bc043e57b3feff4fb0f6cc0dbc2" }, { "name": "QUARKUS_OPERATOR_SDK_CONTROLLERS_KEYCLOAKREALMIMPORTCONTROLLER_NAMESPACES", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.annotations['olm.targetNamespaces']" } } }, { "name": "QUARKUS_OPERATOR_SDK_CONTROLLERS_KEYCLOAKCONTROLLER_NAMESPACES", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.annotations['olm.targetNamespaces']" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "rhbk-operator" }, { "name": "OPERATOR_CONDITION_NAME", "value": "rhbk-operator.v26.4.11-opr.1" } ], "image": "registry.redhat.io/rhbk/keycloak-rhel9-operator@sha256:27cc3e86042a74b64351e2fab9e9bbaf10c632affafc404ea96e4707dbe2ab93", "imagePullPolicy": "Always", "name": "rhbk-operator", "resources": { "limits": { "cpu": "700m", "memory": "450Mi" }, "requests": { "cpu": "300m", "memory": "450Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "rhbk-operator", "serviceAccountName": "rhbk-operator", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:31:33Z", "generation": 1, "labels": { "app.kubernetes.io/component": "client-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "f6d595f96" }, "name": "cli-server-f6d595f96", "namespace": "trusted-artifact-signer", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cli-server", "uid": "c7447dbc-aac7-488f-b7a6-2eb3c21728b3" } ], "resourceVersion": "18236", "uid": "2564d4dc-a9bf-4692-852c-4545656e9f8a" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "client-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "f6d595f96" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "client-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "f6d595f96" } }, "spec": { "containers": [ { "image": "registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72", "imagePullPolicy": "Always", "name": "cli-server", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "e2e-tests-go-flpputcr-development:apps/Deployment:tssc-app-development/e2e-tests-go-flpputcr", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "tad.gitops.get/image": ".spec.template.spec.containers[0].image", "tad.gitops.get/replicas": ".spec.replicas", "tad.gitops.set/image": ".spec.template.spec.containers[0].image", "tad.gitops.set/replicas": ".spec.replicas" }, "creationTimestamp": "2026-05-05T17:45:27Z", "generation": 2, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-flpputcr", "app.kubernetes.io/part-of": "e2e-tests-go-flpputcr", "argocd/app-name": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-id": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-flpputcr", "pod-template-hash": "57957d4445" }, "name": "e2e-tests-go-flpputcr-57957d4445", "namespace": "tssc-app-development", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "e2e-tests-go-flpputcr", "uid": "6598dbbd-587f-4947-874d-d69e9a05fc54" } ], "resourceVersion": "37470", "uid": "f1859f7d-80f8-45e6-9701-1c1e755125f4" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/instance": "e2e-tests-go-flpputcr", "app.kubernetes.io/part-of": "e2e-tests-go-flpputcr", "argocd/app-name": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-id": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-flpputcr", "pod-template-hash": "57957d4445" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-flpputcr", "app.kubernetes.io/part-of": "e2e-tests-go-flpputcr", "argocd/app-name": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-id": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-flpputcr", "pod-template-hash": "57957d4445" } }, "spec": { "containers": [ { "env": [ { "name": "GIT_REPO", "value": "https://github.com/rhtap-rhdh-qe/e2e-tests-go-flpputcr-gitops" } ], "image": "quay.io/redhat-tssc/task-runner:1.9", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "container-image", "ports": [ { "containerPort": 8081, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "512Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "imagePullSecrets": [ { "name": "tssc-image-registry-auth" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30 } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "e2e-tests-go-flpputcr-development:apps/Deployment:tssc-app-development/e2e-tests-go-flpputcr", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2", "tad.gitops.get/image": ".spec.template.spec.containers[0].image", "tad.gitops.get/replicas": ".spec.replicas", "tad.gitops.set/image": ".spec.template.spec.containers[0].image", "tad.gitops.set/replicas": ".spec.replicas" }, "creationTimestamp": "2026-05-05T17:48:32Z", "generation": 2, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-flpputcr", "app.kubernetes.io/part-of": "e2e-tests-go-flpputcr", "argocd/app-name": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-id": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-flpputcr", "pod-template-hash": "6b847dc659" }, "name": "e2e-tests-go-flpputcr-6b847dc659", "namespace": "tssc-app-development", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "e2e-tests-go-flpputcr", "uid": "6598dbbd-587f-4947-874d-d69e9a05fc54" } ], "resourceVersion": "40058", "uid": "9056604c-5f8e-4fb5-b050-c5612b653105" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/instance": "e2e-tests-go-flpputcr", "app.kubernetes.io/part-of": "e2e-tests-go-flpputcr", "argocd/app-name": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-id": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-flpputcr", "pod-template-hash": "6b847dc659" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-flpputcr", "app.kubernetes.io/part-of": "e2e-tests-go-flpputcr", "argocd/app-name": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-id": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-flpputcr", "pod-template-hash": "6b847dc659" } }, "spec": { "containers": [ { "env": [ { "name": "GIT_REPO", "value": "https://github.com/rhtap-rhdh-qe/e2e-tests-go-flpputcr-gitops" } ], "image": "quay.io/rhtap_qe/e2e-tests-go-flpputcr:744d559d60ca38d7ab83ef71ef404bbecd83848c", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "container-image", "ports": [ { "containerPort": 8081, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "512Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "imagePullSecrets": [ { "name": "tssc-image-registry-auth" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30 } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "e2e-tests-go-flpputcr-development:apps/Deployment:tssc-app-development/e2e-tests-go-flpputcr", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "3", "tad.gitops.get/image": ".spec.template.spec.containers[0].image", "tad.gitops.get/replicas": ".spec.replicas", "tad.gitops.set/image": ".spec.template.spec.containers[0].image", "tad.gitops.set/replicas": ".spec.replicas" }, "creationTimestamp": "2026-05-05T17:51:11Z", "generation": 1, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-flpputcr", "app.kubernetes.io/part-of": "e2e-tests-go-flpputcr", "argocd/app-name": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-id": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-flpputcr", "pod-template-hash": "d6787f75b" }, "name": "e2e-tests-go-flpputcr-d6787f75b", "namespace": "tssc-app-development", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "e2e-tests-go-flpputcr", "uid": "6598dbbd-587f-4947-874d-d69e9a05fc54" } ], "resourceVersion": "40048", "uid": "6eb7f1c7-4981-461a-9955-2ed4a2c1bfe4" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/instance": "e2e-tests-go-flpputcr", "app.kubernetes.io/part-of": "e2e-tests-go-flpputcr", "argocd/app-name": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-id": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-flpputcr", "pod-template-hash": "d6787f75b" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-flpputcr", "app.kubernetes.io/part-of": "e2e-tests-go-flpputcr", "argocd/app-name": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-id": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-flpputcr", "pod-template-hash": "d6787f75b" } }, "spec": { "containers": [ { "env": [ { "name": "GIT_REPO", "value": "https://github.com/rhtap-rhdh-qe/e2e-tests-go-flpputcr-gitops" } ], "image": "quay.io/rhtap_qe/e2e-tests-go-flpputcr:e72a1fc727f27d6511659c9f47e2867edb63990a", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "container-image", "ports": [ { "containerPort": 8081, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "512Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "imagePullSecrets": [ { "name": "tssc-image-registry-auth" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "e2e-tests-go-ruytgkoq-development:apps/Deployment:tssc-app-development/e2e-tests-go-ruytgkoq", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "tad.gitops.get/image": ".spec.template.spec.containers[0].image", "tad.gitops.get/replicas": ".spec.replicas", "tad.gitops.set/image": ".spec.template.spec.containers[0].image", "tad.gitops.set/replicas": ".spec.replicas" }, "creationTimestamp": "2026-05-05T17:45:30Z", "generation": 2, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-ruytgkoq", "app.kubernetes.io/part-of": "e2e-tests-go-ruytgkoq", "argocd/app-name": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-id": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-ruytgkoq", "pod-template-hash": "786468744d" }, "name": "e2e-tests-go-ruytgkoq-786468744d", "namespace": "tssc-app-development", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "e2e-tests-go-ruytgkoq", "uid": "0e9da816-1899-4d46-a48e-f05e7f22689e" } ], "resourceVersion": "43369", "uid": "054c0d37-875b-412a-adda-27965d72bb76" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/instance": "e2e-tests-go-ruytgkoq", "app.kubernetes.io/part-of": "e2e-tests-go-ruytgkoq", "argocd/app-name": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-id": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-ruytgkoq", "pod-template-hash": "786468744d" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-ruytgkoq", "app.kubernetes.io/part-of": "e2e-tests-go-ruytgkoq", "argocd/app-name": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-id": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-ruytgkoq", "pod-template-hash": "786468744d" } }, "spec": { "containers": [ { "env": [ { "name": "GIT_REPO", "value": "https://gitlab.com/rhtap-qe/e2e-tests-go-ruytgkoq-gitops" } ], "image": "quay.io/redhat-tssc/task-runner:1.9", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "container-image", "ports": [ { "containerPort": 8081, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "512Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "imagePullSecrets": [ { "name": "tssc-image-registry-auth" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30 } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "e2e-tests-go-ruytgkoq-development:apps/Deployment:tssc-app-development/e2e-tests-go-ruytgkoq", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2", "tad.gitops.get/image": ".spec.template.spec.containers[0].image", "tad.gitops.get/replicas": ".spec.replicas", "tad.gitops.set/image": ".spec.template.spec.containers[0].image", "tad.gitops.set/replicas": ".spec.replicas" }, "creationTimestamp": "2026-05-05T17:54:45Z", "generation": 1, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-ruytgkoq", "app.kubernetes.io/part-of": "e2e-tests-go-ruytgkoq", "argocd/app-name": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-id": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-ruytgkoq", "pod-template-hash": "7bc4595785" }, "name": "e2e-tests-go-ruytgkoq-7bc4595785", "namespace": "tssc-app-development", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "e2e-tests-go-ruytgkoq", "uid": "0e9da816-1899-4d46-a48e-f05e7f22689e" } ], "resourceVersion": "43359", "uid": "015df0ae-36f7-4dcf-bbac-497dd2a2b46d" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/instance": "e2e-tests-go-ruytgkoq", "app.kubernetes.io/part-of": "e2e-tests-go-ruytgkoq", "argocd/app-name": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-id": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-ruytgkoq", "pod-template-hash": "7bc4595785" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-ruytgkoq", "app.kubernetes.io/part-of": "e2e-tests-go-ruytgkoq", "argocd/app-name": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-id": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-ruytgkoq", "pod-template-hash": "7bc4595785" } }, "spec": { "containers": [ { "env": [ { "name": "GIT_REPO", "value": "https://gitlab.com/rhtap-qe/e2e-tests-go-ruytgkoq-gitops" } ], "image": "nexus-docker-nexus.apps.rosa.rhtap-services.xmdt.p3.openshiftapps.com/rhtap/e2e-tests-go-ruytgkoq:gitlab-20ac37045cf07d06afcd40f7e78ede1308f86422", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "container-image", "ports": [ { "containerPort": 8081, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "512Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "imagePullSecrets": [ { "name": "tssc-image-registry-auth" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "e2e-tests-go-yvzaajxw-development:apps/Deployment:tssc-app-development/e2e-tests-go-yvzaajxw", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "3", "deployment.kubernetes.io/revision-history": "1", "tad.gitops.get/image": ".spec.template.spec.containers[0].image", "tad.gitops.get/replicas": ".spec.replicas", "tad.gitops.set/image": ".spec.template.spec.containers[0].image", "tad.gitops.set/replicas": ".spec.replicas" }, "creationTimestamp": "2026-05-05T17:45:30Z", "generation": 2, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-yvzaajxw", "app.kubernetes.io/part-of": "e2e-tests-go-yvzaajxw", "argocd/app-name": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-id": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-yvzaajxw", "pod-template-hash": "589948b6b9" }, "name": "e2e-tests-go-yvzaajxw-589948b6b9", "namespace": "tssc-app-development", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "e2e-tests-go-yvzaajxw", "uid": "c514ae97-3b2e-4b51-8c76-4a495a75f9cb" } ], "resourceVersion": "36675", "uid": "1f42f255-bf58-4fc4-b7b9-bccbd64dbe42" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/instance": "e2e-tests-go-yvzaajxw", "app.kubernetes.io/part-of": "e2e-tests-go-yvzaajxw", "argocd/app-name": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-id": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-yvzaajxw", "pod-template-hash": "589948b6b9" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-yvzaajxw", "app.kubernetes.io/part-of": "e2e-tests-go-yvzaajxw", "argocd/app-name": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-id": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-yvzaajxw", "pod-template-hash": "589948b6b9" } }, "spec": { "containers": [ { "env": [ { "name": "GIT_REPO", "value": "https://github.com/rhtap-rhdh-qe/e2e-tests-go-yvzaajxw-gitops" } ], "image": "quay.io/redhat-tssc/task-runner:1.9", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "container-image", "ports": [ { "containerPort": 8081, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "512Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "imagePullSecrets": [ { "name": "tssc-image-registry-auth" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30 } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "e2e-tests-go-yvzaajxw-development:apps/Deployment:tssc-app-development/e2e-tests-go-yvzaajxw", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "4", "deployment.kubernetes.io/revision-history": "2", "tad.gitops.get/image": ".spec.template.spec.containers[0].image", "tad.gitops.get/replicas": ".spec.replicas", "tad.gitops.set/image": ".spec.template.spec.containers[0].image", "tad.gitops.set/replicas": ".spec.replicas" }, "creationTimestamp": "2026-05-05T17:48:07Z", "generation": 3, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-yvzaajxw", "app.kubernetes.io/part-of": "e2e-tests-go-yvzaajxw", "argocd/app-name": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-id": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-yvzaajxw", "pod-template-hash": "6ddcb94cdc" }, "name": "e2e-tests-go-yvzaajxw-6ddcb94cdc", "namespace": "tssc-app-development", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "e2e-tests-go-yvzaajxw", "uid": "c514ae97-3b2e-4b51-8c76-4a495a75f9cb" } ], "resourceVersion": "36665", "uid": "958f6a6e-bd98-4753-8665-c93cc2e102d1" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/instance": "e2e-tests-go-yvzaajxw", "app.kubernetes.io/part-of": "e2e-tests-go-yvzaajxw", "argocd/app-name": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-id": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-yvzaajxw", "pod-template-hash": "6ddcb94cdc" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-yvzaajxw", "app.kubernetes.io/part-of": "e2e-tests-go-yvzaajxw", "argocd/app-name": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-id": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-yvzaajxw", "pod-template-hash": "6ddcb94cdc" } }, "spec": { "containers": [ { "env": [ { "name": "GIT_REPO", "value": "https://github.com/rhtap-rhdh-qe/e2e-tests-go-yvzaajxw-gitops" } ], "image": "artifactory-docker-artifactory-jcr2.apps.rosa.rhtap-services.xmdt.p3.openshiftapps.com/rhtap/e2e-tests-go-yvzaajxw:github-9da8462c28bbde8ef1017062a0752fb208c66641", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "container-image", "ports": [ { "containerPort": 8081, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "512Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "imagePullSecrets": [ { "name": "tssc-image-registry-auth" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 3, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "e2e-tests-go-flpputcr-prod:apps/Deployment:tssc-app-prod/e2e-tests-go-flpputcr", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "tad.gitops.get/image": ".spec.template.spec.containers[0].image", "tad.gitops.get/replicas": ".spec.replicas", "tad.gitops.set/image": ".spec.template.spec.containers[0].image", "tad.gitops.set/replicas": ".spec.replicas" }, "creationTimestamp": "2026-05-05T17:45:28Z", "generation": 2, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-flpputcr", "app.kubernetes.io/part-of": "e2e-tests-go-flpputcr", "argocd/app-name": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-id": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-flpputcr", "pod-template-hash": "57957d4445" }, "name": "e2e-tests-go-flpputcr-57957d4445", "namespace": "tssc-app-prod", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "e2e-tests-go-flpputcr", "uid": "b05afe27-8fb9-46e8-9cf2-67ca62693d67" } ], "resourceVersion": "43506", "uid": "8b698ca0-a4a9-49b4-a0d9-c8e3275539e1" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/instance": "e2e-tests-go-flpputcr", "app.kubernetes.io/part-of": "e2e-tests-go-flpputcr", "argocd/app-name": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-id": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-flpputcr", "pod-template-hash": "57957d4445" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-flpputcr", "app.kubernetes.io/part-of": "e2e-tests-go-flpputcr", "argocd/app-name": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-id": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-flpputcr", "pod-template-hash": "57957d4445" } }, "spec": { "containers": [ { "env": [ { "name": "GIT_REPO", "value": "https://github.com/rhtap-rhdh-qe/e2e-tests-go-flpputcr-gitops" } ], "image": "quay.io/redhat-tssc/task-runner:1.9", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "container-image", "ports": [ { "containerPort": 8081, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "512Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "imagePullSecrets": [ { "name": "tssc-image-registry-auth" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30 } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "e2e-tests-go-flpputcr-prod:apps/Deployment:tssc-app-prod/e2e-tests-go-flpputcr", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2", "tad.gitops.get/image": ".spec.template.spec.containers[0].image", "tad.gitops.get/replicas": ".spec.replicas", "tad.gitops.set/image": ".spec.template.spec.containers[0].image", "tad.gitops.set/replicas": ".spec.replicas" }, "creationTimestamp": "2026-05-05T17:54:44Z", "generation": 1, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-flpputcr", "app.kubernetes.io/part-of": "e2e-tests-go-flpputcr", "argocd/app-name": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-id": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-flpputcr", "pod-template-hash": "d6787f75b" }, "name": "e2e-tests-go-flpputcr-d6787f75b", "namespace": "tssc-app-prod", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "e2e-tests-go-flpputcr", "uid": "b05afe27-8fb9-46e8-9cf2-67ca62693d67" } ], "resourceVersion": "43496", "uid": "79f132ee-48f4-4ebf-b4b7-9b9d34f0aca1" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/instance": "e2e-tests-go-flpputcr", "app.kubernetes.io/part-of": "e2e-tests-go-flpputcr", "argocd/app-name": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-id": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-flpputcr", "pod-template-hash": "d6787f75b" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-flpputcr", "app.kubernetes.io/part-of": "e2e-tests-go-flpputcr", "argocd/app-name": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-id": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-flpputcr", "pod-template-hash": "d6787f75b" } }, "spec": { "containers": [ { "env": [ { "name": "GIT_REPO", "value": "https://github.com/rhtap-rhdh-qe/e2e-tests-go-flpputcr-gitops" } ], "image": "quay.io/rhtap_qe/e2e-tests-go-flpputcr:e72a1fc727f27d6511659c9f47e2867edb63990a", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "container-image", "ports": [ { "containerPort": 8081, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "512Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "imagePullSecrets": [ { "name": "tssc-image-registry-auth" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "e2e-tests-go-ruytgkoq-prod:apps/Deployment:tssc-app-prod/e2e-tests-go-ruytgkoq", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "tad.gitops.get/image": ".spec.template.spec.containers[0].image", "tad.gitops.get/replicas": ".spec.replicas", "tad.gitops.set/image": ".spec.template.spec.containers[0].image", "tad.gitops.set/replicas": ".spec.replicas" }, "creationTimestamp": "2026-05-05T17:45:30Z", "generation": 2, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-ruytgkoq", "app.kubernetes.io/part-of": "e2e-tests-go-ruytgkoq", "argocd/app-name": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-id": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-ruytgkoq", "pod-template-hash": "786468744d" }, "name": "e2e-tests-go-ruytgkoq-786468744d", "namespace": "tssc-app-prod", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "e2e-tests-go-ruytgkoq", "uid": "a717b9dd-e7dc-4200-b798-eb19baca3338" } ], "resourceVersion": "48917", "uid": "ae5b5329-4212-4c2f-b5dd-32d2548d446b" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/instance": "e2e-tests-go-ruytgkoq", "app.kubernetes.io/part-of": "e2e-tests-go-ruytgkoq", "argocd/app-name": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-id": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-ruytgkoq", "pod-template-hash": "786468744d" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-ruytgkoq", "app.kubernetes.io/part-of": "e2e-tests-go-ruytgkoq", "argocd/app-name": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-id": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-ruytgkoq", "pod-template-hash": "786468744d" } }, "spec": { "containers": [ { "env": [ { "name": "GIT_REPO", "value": "https://gitlab.com/rhtap-qe/e2e-tests-go-ruytgkoq-gitops" } ], "image": "quay.io/redhat-tssc/task-runner:1.9", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "container-image", "ports": [ { "containerPort": 8081, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "512Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "imagePullSecrets": [ { "name": "tssc-image-registry-auth" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30 } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "e2e-tests-go-ruytgkoq-prod:apps/Deployment:tssc-app-prod/e2e-tests-go-ruytgkoq", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2", "tad.gitops.get/image": ".spec.template.spec.containers[0].image", "tad.gitops.get/replicas": ".spec.replicas", "tad.gitops.set/image": ".spec.template.spec.containers[0].image", "tad.gitops.set/replicas": ".spec.replicas" }, "creationTimestamp": "2026-05-05T18:02:25Z", "generation": 1, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-ruytgkoq", "app.kubernetes.io/part-of": "e2e-tests-go-ruytgkoq", "argocd/app-name": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-id": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-ruytgkoq", "pod-template-hash": "7bc4595785" }, "name": "e2e-tests-go-ruytgkoq-7bc4595785", "namespace": "tssc-app-prod", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "e2e-tests-go-ruytgkoq", "uid": "a717b9dd-e7dc-4200-b798-eb19baca3338" } ], "resourceVersion": "48905", "uid": "3481e878-eef9-413f-a581-d38def097a1a" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/instance": "e2e-tests-go-ruytgkoq", "app.kubernetes.io/part-of": "e2e-tests-go-ruytgkoq", "argocd/app-name": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-id": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-ruytgkoq", "pod-template-hash": "7bc4595785" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-ruytgkoq", "app.kubernetes.io/part-of": "e2e-tests-go-ruytgkoq", "argocd/app-name": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-id": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-ruytgkoq", "pod-template-hash": "7bc4595785" } }, "spec": { "containers": [ { "env": [ { "name": "GIT_REPO", "value": "https://gitlab.com/rhtap-qe/e2e-tests-go-ruytgkoq-gitops" } ], "image": "nexus-docker-nexus.apps.rosa.rhtap-services.xmdt.p3.openshiftapps.com/rhtap/e2e-tests-go-ruytgkoq:gitlab-20ac37045cf07d06afcd40f7e78ede1308f86422", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "container-image", "ports": [ { "containerPort": 8081, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "512Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "imagePullSecrets": [ { "name": "tssc-image-registry-auth" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "e2e-tests-go-yvzaajxw-prod:apps/Deployment:tssc-app-prod/e2e-tests-go-yvzaajxw", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "tad.gitops.get/image": ".spec.template.spec.containers[0].image", "tad.gitops.get/replicas": ".spec.replicas", "tad.gitops.set/image": ".spec.template.spec.containers[0].image", "tad.gitops.set/replicas": ".spec.replicas" }, "creationTimestamp": "2026-05-05T17:45:28Z", "generation": 2, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-yvzaajxw", "app.kubernetes.io/part-of": "e2e-tests-go-yvzaajxw", "argocd/app-name": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-id": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-yvzaajxw", "pod-template-hash": "589948b6b9" }, "name": "e2e-tests-go-yvzaajxw-589948b6b9", "namespace": "tssc-app-prod", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "e2e-tests-go-yvzaajxw", "uid": "b559c98b-accc-48a4-88d7-d7182fab8b21" } ], "resourceVersion": "40794", "uid": "b29c53f6-62de-4817-ae6e-66b9c4860522" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/instance": "e2e-tests-go-yvzaajxw", "app.kubernetes.io/part-of": "e2e-tests-go-yvzaajxw", "argocd/app-name": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-id": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-yvzaajxw", "pod-template-hash": "589948b6b9" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-yvzaajxw", "app.kubernetes.io/part-of": "e2e-tests-go-yvzaajxw", "argocd/app-name": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-id": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-yvzaajxw", "pod-template-hash": "589948b6b9" } }, "spec": { "containers": [ { "env": [ { "name": "GIT_REPO", "value": "https://github.com/rhtap-rhdh-qe/e2e-tests-go-yvzaajxw-gitops" } ], "image": "quay.io/redhat-tssc/task-runner:1.9", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "container-image", "ports": [ { "containerPort": 8081, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "512Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "imagePullSecrets": [ { "name": "tssc-image-registry-auth" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30 } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "e2e-tests-go-yvzaajxw-prod:apps/Deployment:tssc-app-prod/e2e-tests-go-yvzaajxw", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2", "tad.gitops.get/image": ".spec.template.spec.containers[0].image", "tad.gitops.get/replicas": ".spec.replicas", "tad.gitops.set/image": ".spec.template.spec.containers[0].image", "tad.gitops.set/replicas": ".spec.replicas" }, "creationTimestamp": "2026-05-05T17:52:07Z", "generation": 1, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-yvzaajxw", "app.kubernetes.io/part-of": "e2e-tests-go-yvzaajxw", "argocd/app-name": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-id": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-yvzaajxw", "pod-template-hash": "6ddcb94cdc" }, "name": "e2e-tests-go-yvzaajxw-6ddcb94cdc", "namespace": "tssc-app-prod", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "e2e-tests-go-yvzaajxw", "uid": "b559c98b-accc-48a4-88d7-d7182fab8b21" } ], "resourceVersion": "40784", "uid": "b31b786d-dc26-4ff1-859a-28cbd9be82e0" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/instance": "e2e-tests-go-yvzaajxw", "app.kubernetes.io/part-of": "e2e-tests-go-yvzaajxw", "argocd/app-name": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-id": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-yvzaajxw", "pod-template-hash": "6ddcb94cdc" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-yvzaajxw", "app.kubernetes.io/part-of": "e2e-tests-go-yvzaajxw", "argocd/app-name": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-id": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-yvzaajxw", "pod-template-hash": "6ddcb94cdc" } }, "spec": { "containers": [ { "env": [ { "name": "GIT_REPO", "value": "https://github.com/rhtap-rhdh-qe/e2e-tests-go-yvzaajxw-gitops" } ], "image": "artifactory-docker-artifactory-jcr2.apps.rosa.rhtap-services.xmdt.p3.openshiftapps.com/rhtap/e2e-tests-go-yvzaajxw:github-9da8462c28bbde8ef1017062a0752fb208c66641", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "container-image", "ports": [ { "containerPort": 8081, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "512Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "imagePullSecrets": [ { "name": "tssc-image-registry-auth" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "e2e-tests-go-flpputcr-stage:apps/Deployment:tssc-app-stage/e2e-tests-go-flpputcr", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "tad.gitops.get/image": ".spec.template.spec.containers[0].image", "tad.gitops.get/replicas": ".spec.replicas", "tad.gitops.set/image": ".spec.template.spec.containers[0].image", "tad.gitops.set/replicas": ".spec.replicas" }, "creationTimestamp": "2026-05-05T17:45:27Z", "generation": 2, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-flpputcr", "app.kubernetes.io/part-of": "e2e-tests-go-flpputcr", "argocd/app-name": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-id": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-flpputcr", "pod-template-hash": "57957d4445" }, "name": "e2e-tests-go-flpputcr-57957d4445", "namespace": "tssc-app-stage", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "e2e-tests-go-flpputcr", "uid": "f7735e1d-a546-4471-8570-0e1eaf0d2592" } ], "resourceVersion": "41810", "uid": "ef72c5ea-d3e8-4a29-bbd5-7e4d869da796" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/instance": "e2e-tests-go-flpputcr", "app.kubernetes.io/part-of": "e2e-tests-go-flpputcr", "argocd/app-name": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-id": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-flpputcr", "pod-template-hash": "57957d4445" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-flpputcr", "app.kubernetes.io/part-of": "e2e-tests-go-flpputcr", "argocd/app-name": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-id": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-flpputcr", "pod-template-hash": "57957d4445" } }, "spec": { "containers": [ { "env": [ { "name": "GIT_REPO", "value": "https://github.com/rhtap-rhdh-qe/e2e-tests-go-flpputcr-gitops" } ], "image": "quay.io/redhat-tssc/task-runner:1.9", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "container-image", "ports": [ { "containerPort": 8081, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "512Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "imagePullSecrets": [ { "name": "tssc-image-registry-auth" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30 } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "e2e-tests-go-flpputcr-stage:apps/Deployment:tssc-app-stage/e2e-tests-go-flpputcr", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2", "tad.gitops.get/image": ".spec.template.spec.containers[0].image", "tad.gitops.get/replicas": ".spec.replicas", "tad.gitops.set/image": ".spec.template.spec.containers[0].image", "tad.gitops.set/replicas": ".spec.replicas" }, "creationTimestamp": "2026-05-05T17:53:02Z", "generation": 1, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-flpputcr", "app.kubernetes.io/part-of": "e2e-tests-go-flpputcr", "argocd/app-name": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-id": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-flpputcr", "pod-template-hash": "d6787f75b" }, "name": "e2e-tests-go-flpputcr-d6787f75b", "namespace": "tssc-app-stage", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "e2e-tests-go-flpputcr", "uid": "f7735e1d-a546-4471-8570-0e1eaf0d2592" } ], "resourceVersion": "41800", "uid": "7d1b6dd2-c95d-4f7f-bae6-d753c69b4d79" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/instance": "e2e-tests-go-flpputcr", "app.kubernetes.io/part-of": "e2e-tests-go-flpputcr", "argocd/app-name": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-id": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-flpputcr", "pod-template-hash": "d6787f75b" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-flpputcr", "app.kubernetes.io/part-of": "e2e-tests-go-flpputcr", "argocd/app-name": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-id": "e2e-tests-go-flpputcr", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-flpputcr", "pod-template-hash": "d6787f75b" } }, "spec": { "containers": [ { "env": [ { "name": "GIT_REPO", "value": "https://github.com/rhtap-rhdh-qe/e2e-tests-go-flpputcr-gitops" } ], "image": "quay.io/rhtap_qe/e2e-tests-go-flpputcr:e72a1fc727f27d6511659c9f47e2867edb63990a", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "container-image", "ports": [ { "containerPort": 8081, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "512Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "imagePullSecrets": [ { "name": "tssc-image-registry-auth" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "e2e-tests-go-ruytgkoq-stage:apps/Deployment:tssc-app-stage/e2e-tests-go-ruytgkoq", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "tad.gitops.get/image": ".spec.template.spec.containers[0].image", "tad.gitops.get/replicas": ".spec.replicas", "tad.gitops.set/image": ".spec.template.spec.containers[0].image", "tad.gitops.set/replicas": ".spec.replicas" }, "creationTimestamp": "2026-05-05T17:45:30Z", "generation": 2, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-ruytgkoq", "app.kubernetes.io/part-of": "e2e-tests-go-ruytgkoq", "argocd/app-name": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-id": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-ruytgkoq", "pod-template-hash": "786468744d" }, "name": "e2e-tests-go-ruytgkoq-786468744d", "namespace": "tssc-app-stage", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "e2e-tests-go-ruytgkoq", "uid": "08b5a89e-49d5-4769-9532-adf97b7e522e" } ], "resourceVersion": "46095", "uid": "7b1058ad-7c38-48da-a2e9-c48fc7ecafb4" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/instance": "e2e-tests-go-ruytgkoq", "app.kubernetes.io/part-of": "e2e-tests-go-ruytgkoq", "argocd/app-name": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-id": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-ruytgkoq", "pod-template-hash": "786468744d" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-ruytgkoq", "app.kubernetes.io/part-of": "e2e-tests-go-ruytgkoq", "argocd/app-name": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-id": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-ruytgkoq", "pod-template-hash": "786468744d" } }, "spec": { "containers": [ { "env": [ { "name": "GIT_REPO", "value": "https://gitlab.com/rhtap-qe/e2e-tests-go-ruytgkoq-gitops" } ], "image": "quay.io/redhat-tssc/task-runner:1.9", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "container-image", "ports": [ { "containerPort": 8081, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "512Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "imagePullSecrets": [ { "name": "tssc-image-registry-auth" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30 } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "e2e-tests-go-ruytgkoq-stage:apps/Deployment:tssc-app-stage/e2e-tests-go-ruytgkoq", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2", "tad.gitops.get/image": ".spec.template.spec.containers[0].image", "tad.gitops.get/replicas": ".spec.replicas", "tad.gitops.set/image": ".spec.template.spec.containers[0].image", "tad.gitops.set/replicas": ".spec.replicas" }, "creationTimestamp": "2026-05-05T17:58:35Z", "generation": 1, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-ruytgkoq", "app.kubernetes.io/part-of": "e2e-tests-go-ruytgkoq", "argocd/app-name": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-id": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-ruytgkoq", "pod-template-hash": "7bc4595785" }, "name": "e2e-tests-go-ruytgkoq-7bc4595785", "namespace": "tssc-app-stage", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "e2e-tests-go-ruytgkoq", "uid": "08b5a89e-49d5-4769-9532-adf97b7e522e" } ], "resourceVersion": "46085", "uid": "5b203bca-ceae-4eb8-83bc-2313ac3c851f" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/instance": "e2e-tests-go-ruytgkoq", "app.kubernetes.io/part-of": "e2e-tests-go-ruytgkoq", "argocd/app-name": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-id": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-ruytgkoq", "pod-template-hash": "7bc4595785" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-ruytgkoq", "app.kubernetes.io/part-of": "e2e-tests-go-ruytgkoq", "argocd/app-name": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-id": "e2e-tests-go-ruytgkoq", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-ruytgkoq", "pod-template-hash": "7bc4595785" } }, "spec": { "containers": [ { "env": [ { "name": "GIT_REPO", "value": "https://gitlab.com/rhtap-qe/e2e-tests-go-ruytgkoq-gitops" } ], "image": "nexus-docker-nexus.apps.rosa.rhtap-services.xmdt.p3.openshiftapps.com/rhtap/e2e-tests-go-ruytgkoq:gitlab-20ac37045cf07d06afcd40f7e78ede1308f86422", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "container-image", "ports": [ { "containerPort": 8081, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "512Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "imagePullSecrets": [ { "name": "tssc-image-registry-auth" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "e2e-tests-go-yvzaajxw-stage:apps/Deployment:tssc-app-stage/e2e-tests-go-yvzaajxw", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "tad.gitops.get/image": ".spec.template.spec.containers[0].image", "tad.gitops.get/replicas": ".spec.replicas", "tad.gitops.set/image": ".spec.template.spec.containers[0].image", "tad.gitops.set/replicas": ".spec.replicas" }, "creationTimestamp": "2026-05-05T17:45:29Z", "generation": 2, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-yvzaajxw", "app.kubernetes.io/part-of": "e2e-tests-go-yvzaajxw", "argocd/app-name": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-id": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-yvzaajxw", "pod-template-hash": "589948b6b9" }, "name": "e2e-tests-go-yvzaajxw-589948b6b9", "namespace": "tssc-app-stage", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "e2e-tests-go-yvzaajxw", "uid": "e4e1c0bb-c24b-4101-8440-d9db0d696540" } ], "resourceVersion": "38932", "uid": "51ff1f06-c4e6-4a6b-bff5-fd32878e086c" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/instance": "e2e-tests-go-yvzaajxw", "app.kubernetes.io/part-of": "e2e-tests-go-yvzaajxw", "argocd/app-name": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-id": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-yvzaajxw", "pod-template-hash": "589948b6b9" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-yvzaajxw", "app.kubernetes.io/part-of": "e2e-tests-go-yvzaajxw", "argocd/app-name": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-id": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-yvzaajxw", "pod-template-hash": "589948b6b9" } }, "spec": { "containers": [ { "env": [ { "name": "GIT_REPO", "value": "https://github.com/rhtap-rhdh-qe/e2e-tests-go-yvzaajxw-gitops" } ], "image": "quay.io/redhat-tssc/task-runner:1.9", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "container-image", "ports": [ { "containerPort": 8081, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "512Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "imagePullSecrets": [ { "name": "tssc-image-registry-auth" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30 } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "e2e-tests-go-yvzaajxw-stage:apps/Deployment:tssc-app-stage/e2e-tests-go-yvzaajxw", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2", "tad.gitops.get/image": ".spec.template.spec.containers[0].image", "tad.gitops.get/replicas": ".spec.replicas", "tad.gitops.set/image": ".spec.template.spec.containers[0].image", "tad.gitops.set/replicas": ".spec.replicas" }, "creationTimestamp": "2026-05-05T17:50:11Z", "generation": 1, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-yvzaajxw", "app.kubernetes.io/part-of": "e2e-tests-go-yvzaajxw", "argocd/app-name": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-id": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-yvzaajxw", "pod-template-hash": "6ddcb94cdc" }, "name": "e2e-tests-go-yvzaajxw-6ddcb94cdc", "namespace": "tssc-app-stage", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "e2e-tests-go-yvzaajxw", "uid": "e4e1c0bb-c24b-4101-8440-d9db0d696540" } ], "resourceVersion": "38918", "uid": "6ea18d6e-7515-4c7e-9ec0-e280704ddb06" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/instance": "e2e-tests-go-yvzaajxw", "app.kubernetes.io/part-of": "e2e-tests-go-yvzaajxw", "argocd/app-name": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-id": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-yvzaajxw", "pod-template-hash": "6ddcb94cdc" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/instance": "e2e-tests-go-yvzaajxw", "app.kubernetes.io/part-of": "e2e-tests-go-yvzaajxw", "argocd/app-name": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-id": "e2e-tests-go-yvzaajxw", "backstage.io/kubernetes-namespace": "tssc-app", "janus-idp.io/tekton": "e2e-tests-go-yvzaajxw", "pod-template-hash": "6ddcb94cdc" } }, "spec": { "containers": [ { "env": [ { "name": "GIT_REPO", "value": "https://github.com/rhtap-rhdh-qe/e2e-tests-go-yvzaajxw-gitops" } ], "image": "artifactory-docker-artifactory-jcr2.apps.rosa.rhtap-services.xmdt.p3.openshiftapps.com/rhtap/e2e-tests-go-yvzaajxw:github-9da8462c28bbde8ef1017062a0752fb208c66641", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "container-image", "ports": [ { "containerPort": 8081, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "512Mi" }, "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "imagePullSecrets": [ { "name": "tssc-image-registry-auth" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:38:06Z", "generation": 1, "labels": { "pod-template-hash": "66c5c5dfb8", "rhdh.redhat.com/app": "backstage-developer-hub" }, "name": "backstage-developer-hub-66c5c5dfb8", "namespace": "tssc-dh", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "backstage-developer-hub", "uid": "3d6e1bd7-7b59-433c-9eda-e3db8b98e674" } ], "resourceVersion": "31997", "uid": "9d7cb60b-023d-423a-bd39-5e12a25558f1" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "pod-template-hash": "66c5c5dfb8", "rhdh.redhat.com/app": "backstage-developer-hub" } }, "template": { "metadata": { "annotations": { "rhdh.redhat.com/ext-config-hash": "9cd51eeb234ff4fd53ddbc560cbe3de77b1345fd7d0330acd396efa05eda7677" }, "creationTimestamp": null, "labels": { "pod-template-hash": "66c5c5dfb8", "rhdh.redhat.com/app": "backstage-developer-hub" } }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "--config", "dynamic-plugins-root/app-config.dynamic-plugins.yaml", "--config", "/opt/app-root/src/default.app-config.yaml", "--config", "/opt/app-root/src/app-config.tssc.yaml" ], "env": [ { "name": "APP_CONFIG_backend_listen_port", "value": "7007" } ], "envFrom": [ { "secretRef": { "name": "backstage-psql-secret-developer-hub" } }, { "secretRef": { "name": "tssc-developer-hub-env" } } ], "image": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:60be744e3e34e14da8505030d0223f35234d5bbfe1dd0f4332aa0dadc23d3b8f", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/.backstage/health/v1/liveness", "port": "backend", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 4 }, "name": "backstage-backend", "ports": [ { "containerPort": 7007, "name": "backend", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/.backstage/health/v1/readiness", "port": "backend", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 2, "timeoutSeconds": 4 }, "resources": { "limits": { "cpu": "4", "ephemeral-storage": "5Gi", "memory": "2560Mi" }, "requests": { "cpu": "250m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "startupProbe": { "failureThreshold": 3, "httpGet": { "path": "/.backstage/health/v1/liveness", "port": "backend", "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 4 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/opt/app-root/src/dynamic-plugins-root", "name": "dynamic-plugins-root" }, { "mountPath": "/extensions", "name": "extensions-catalog" }, { "mountPath": "/tmp", "name": "temp" }, { "mountPath": "/opt/app-root/src/default.app-config.yaml", "name": "backstage-appconfig-developer-hub", "readOnly": true, "subPath": "default.app-config.yaml" }, { "mountPath": "/opt/app-root/src/app-config.tssc.yaml", "name": "tssc-developer-hub-app-config", "readOnly": true, "subPath": "app-config.tssc.yaml" } ], "workingDir": "/opt/app-root/src" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "./install-dynamic-plugins.sh", "/dynamic-plugins-root" ], "env": [ { "name": "NPM_CONFIG_USERCONFIG", "value": "/opt/app-root/src/.npmrc.dynamic-plugins/.npmrc" }, { "name": "MAX_ENTRY_SIZE", "value": "30000000" }, { "name": "CATALOG_INDEX_IMAGE", "value": "registry.access.redhat.com/rhdh/plugin-catalog-index@sha256:05ca260c6511bc49f619535f7ea56d58bb7bc5336daf6d5cff5b2f03e970fb44" }, { "name": "CATALOG_ENTITIES_EXTRACT_DIR", "value": "/extensions" } ], "image": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:60be744e3e34e14da8505030d0223f35234d5bbfe1dd0f4332aa0dadc23d3b8f", "imagePullPolicy": "IfNotPresent", "name": "install-dynamic-plugins", "resources": { "limits": { "cpu": "1", "ephemeral-storage": "5Gi", "memory": "2560Mi" }, "requests": { "cpu": "250m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/dynamic-plugins-root", "name": "dynamic-plugins-root" }, { "mountPath": "/extensions", "name": "extensions-catalog" }, { "mountPath": "/opt/app-root/src/.config/containers", "name": "dynamic-plugins-registry-auth", "readOnly": true }, { "mountPath": "/opt/app-root/src/.npm/_cacache", "name": "npmcacache" }, { "mountPath": "/tmp", "name": "temp" }, { "mountPath": "/opt/app-root/src/.npmrc.dynamic-plugins", "name": "backstage-files-developer-hub" }, { "mountPath": "/opt/app-root/src/dynamic-plugins.yaml", "name": "backstage-dynamic-plugins-developer-hub", "readOnly": true, "subPath": "dynamic-plugins.yaml" } ], "workingDir": "/opt/app-root/src" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "dynamic-plugins-root", "persistentVolumeClaim": { "claimName": "developer-hub-dynamic-plugins-root" } }, { "name": "dynamic-plugins-registry-auth", "secret": { "defaultMode": 416, "optional": true, "secretName": "dynamic-plugins-registry-auth" } }, { "emptyDir": {}, "name": "extensions-catalog" }, { "emptyDir": {}, "name": "npmcacache" }, { "emptyDir": {}, "name": "temp" }, { "configMap": { "defaultMode": 420, "name": "backstage-appconfig-developer-hub", "optional": false }, "name": "backstage-appconfig-developer-hub" }, { "name": "backstage-files-developer-hub", "secret": { "defaultMode": 420, "optional": false, "secretName": "backstage-files-developer-hub" } }, { "configMap": { "defaultMode": 420, "name": "tssc-developer-hub-app-config", "optional": false }, "name": "tssc-developer-hub-app-config" }, { "configMap": { "defaultMode": 420, "name": "backstage-dynamic-plugins-developer-hub", "optional": false }, "name": "backstage-dynamic-plugins-developer-hub" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:31:46Z", "generation": 1, "labels": { "app.kubernetes.io/name": "tssc-gitops-applicationset-controller", "pod-template-hash": "6bd7cb5dc7" }, "name": "tssc-gitops-applicationset-controller-6bd7cb5dc7", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tssc-gitops-applicationset-controller", "uid": "6d7e685f-9769-45b5-808d-2f9f1cce1878" } ], "resourceVersion": "20127", "uid": "38756971-0cca-4c56-bbd3-75a297b4b1d0" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tssc-gitops-applicationset-controller", "pod-template-hash": "6bd7cb5dc7" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "tssc-gitops-applicationset-controller", "pod-template-hash": "6bd7cb5dc7" } }, "spec": { "containers": [ { "command": [ "entrypoint.sh", "argocd-applicationset-controller", "--argocd-repo-server", "tssc-gitops-repo-server.tssc-gitops.svc.cluster.local:8081", "--loglevel", "info", "--logformat", "text" ], "env": [ { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cf3031bb2ed6b19384e996afe598a002893fd70ac0ce14491ff868069c53fc84", "imagePullPolicy": "IfNotPresent", "name": "argocd-applicationset-controller", "ports": [ { "containerPort": 7000, "name": "webhook", "protocol": "TCP" }, { "containerPort": 8080, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "250m", "memory": "1Gi" }, "requests": { "cpu": "125m", "memory": "512Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/ssh", "name": "ssh-known-hosts" }, { "mountPath": "/app/config/tls", "name": "tls-certs" }, { "mountPath": "/app/config/gpg/source", "name": "gpg-keys" }, { "mountPath": "/app/config/gpg/keys", "name": "gpg-keyring" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tssc-gitops-applicationset-controller", "serviceAccountName": "tssc-gitops-applicationset-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "argocd-ssh-known-hosts-cm" }, "name": "ssh-known-hosts" }, { "configMap": { "defaultMode": 420, "name": "argocd-tls-certs-cm" }, "name": "tls-certs" }, { "configMap": { "defaultMode": 420, "name": "argocd-gpg-keys-cm" }, "name": "gpg-keys" }, { "emptyDir": {}, "name": "gpg-keyring" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-05-05T17:31:48Z", "generation": 1, "labels": { "app.kubernetes.io/name": "tssc-gitops-dex-server", "dex.config.changed": "05052026-173126-UTC", "pod-template-hash": "6488b6997" }, "name": "tssc-gitops-dex-server-6488b6997", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tssc-gitops-dex-server", "uid": "17e5b91a-a954-48d0-a2a5-dc89baa4371e" } ], "resourceVersion": "20518", "uid": "bdcf201f-41dd-4f9b-9c59-88cae2b0ad85" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tssc-gitops-dex-server", "pod-template-hash": "6488b6997" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "tssc-gitops-dex-server", "dex.config.changed": "05052026-173126-UTC", "pod-template-hash": "6488b6997" } }, "spec": { "containers": [ { "command": [ "/shared/argocd-dex", "rundex" ], "image": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:19bd8a22a9877e1527f8e1ba59d9682aaea3f9b2b7cb4959b4be3f956e19716b", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/live", "port": 5558, "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "dex", "ports": [ { "containerPort": 5556, "name": "http", "protocol": "TCP" }, { "containerPort": 5557, "name": "grpc", "protocol": "TCP" }, { "containerPort": 5558, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "250m", "memory": "256Mi" }, "requests": { "cpu": "125m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "static-files" }, { "mountPath": "/tmp", "name": "dexconfig" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "cp", "-n", "/usr/local/bin/argocd", "/shared/argocd-dex" ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cf3031bb2ed6b19384e996afe598a002893fd70ac0ce14491ff868069c53fc84", "imagePullPolicy": "IfNotPresent", "name": "copyutil", "resources": { "limits": { "cpu": "250m", "memory": "256Mi" }, "requests": { "cpu": "125m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "static-files" }, { "mountPath": "/tmp", "name": "dexconfig" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tssc-gitops-argocd-dex-server", "serviceAccountName": "tssc-gitops-argocd-dex-server", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "static-files" }, { "emptyDir": {}, "name": "dexconfig" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:31:45Z", "generation": 2, "labels": { "app.kubernetes.io/name": "tssc-gitops-dex-server", "pod-template-hash": "856695cc74" }, "name": "tssc-gitops-dex-server-856695cc74", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tssc-gitops-dex-server", "uid": "17e5b91a-a954-48d0-a2a5-dc89baa4371e" } ], "resourceVersion": "20531", "uid": "94838ad5-d524-451b-a97e-ee9a48cb4c11" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/name": "tssc-gitops-dex-server", "pod-template-hash": "856695cc74" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "tssc-gitops-dex-server", "pod-template-hash": "856695cc74" } }, "spec": { "containers": [ { "command": [ "/shared/argocd-dex", "rundex" ], "image": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:19bd8a22a9877e1527f8e1ba59d9682aaea3f9b2b7cb4959b4be3f956e19716b", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/live", "port": 5558, "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "dex", "ports": [ { "containerPort": 5556, "name": "http", "protocol": "TCP" }, { "containerPort": 5557, "name": "grpc", "protocol": "TCP" }, { "containerPort": 5558, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "250m", "memory": "256Mi" }, "requests": { "cpu": "125m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "static-files" }, { "mountPath": "/tmp", "name": "dexconfig" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "cp", "-n", "/usr/local/bin/argocd", "/shared/argocd-dex" ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cf3031bb2ed6b19384e996afe598a002893fd70ac0ce14491ff868069c53fc84", "imagePullPolicy": "IfNotPresent", "name": "copyutil", "resources": { "limits": { "cpu": "250m", "memory": "256Mi" }, "requests": { "cpu": "125m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "static-files" }, { "mountPath": "/tmp", "name": "dexconfig" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tssc-gitops-argocd-dex-server", "serviceAccountName": "tssc-gitops-argocd-dex-server", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "static-files" }, { "emptyDir": {}, "name": "dexconfig" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:31:46Z", "generation": 1, "labels": { "app.kubernetes.io/name": "tssc-gitops-redis", "pod-template-hash": "9b74744d6" }, "name": "tssc-gitops-redis-9b74744d6", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tssc-gitops-redis", "uid": "76135b9d-8dfe-4ed6-9912-19d74b88d29c" } ], "resourceVersion": "19827", "uid": "814223d9-ffb2-412c-b304-0586b856ad67" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tssc-gitops-redis", "pod-template-hash": "9b74744d6" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "tssc-gitops-redis", "pod-template-hash": "9b74744d6" } }, "spec": { "containers": [ { "args": [ "redis-server", "--protected-mode", "no", "--save", "", "--appendonly", "no", "--requirepass $(REDIS_PASSWORD)" ], "env": [ { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "admin.password", "name": "tssc-gitops-redis-initial-password" } } } ], "image": "registry.redhat.io/rhel9/redis-7@sha256:3d31c0cfaf4219f5bd1c52882b603215d1cb4aaef5b8d1a128d0174e090f96f3", "imagePullPolicy": "IfNotPresent", "name": "redis", "ports": [ { "containerPort": 6379, "protocol": "TCP" } ], "resources": { "limits": { "cpu": "250m", "memory": "256Mi" }, "requests": { "cpu": "125m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/redis/tls", "name": "argocd-operator-redis-tls" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tssc-gitops-argocd-redis", "serviceAccountName": "tssc-gitops-argocd-redis", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "argocd-operator-redis-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-operator-redis-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:31:46Z", "generation": 1, "labels": { "app.kubernetes.io/name": "tssc-gitops-repo-server", "pod-template-hash": "5b58465fcd" }, "name": "tssc-gitops-repo-server-5b58465fcd", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tssc-gitops-repo-server", "uid": "957cf556-abbf-490e-8a90-868c239fdfd7" } ], "resourceVersion": "20714", "uid": "d2ccb2de-2564-4292-86b4-f721fe121eff" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tssc-gitops-repo-server", "pod-template-hash": "5b58465fcd" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "tssc-gitops-repo-server", "pod-template-hash": "5b58465fcd" } }, "spec": { "automountServiceAccountToken": false, "containers": [ { "command": [ "uid_entrypoint.sh", "argocd-repo-server", "--redis", "tssc-gitops-redis.tssc-gitops.svc.cluster.local:6379", "--loglevel", "info", "--logformat", "text" ], "env": [ { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "admin.password", "name": "tssc-gitops-redis-initial-password" } } } ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cf3031bb2ed6b19384e996afe598a002893fd70ac0ce14491ff868069c53fc84", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "name": "argocd-repo-server", "ports": [ { "containerPort": 8081, "name": "server", "protocol": "TCP" }, { "containerPort": 8084, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "250m", "memory": "1Gi" }, "requests": { "cpu": "125m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/ssh", "name": "ssh-known-hosts" }, { "mountPath": "/app/config/tls", "name": "tls-certs" }, { "mountPath": "/app/config/gpg/source", "name": "gpg-keys" }, { "mountPath": "/app/config/gpg/keys", "name": "gpg-keyring" }, { "mountPath": "/app/config/reposerver/tls", "name": "argocd-repo-server-tls" }, { "mountPath": "/app/config/reposerver/tls/redis", "name": "argocd-operator-redis-tls" }, { "mountPath": "/home/argocd/cmp-server/plugins", "name": "plugins" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "cp", "-n", "/usr/local/bin/argocd-cmp-server", "/var/run/argocd/argocd-cmp-server" ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cf3031bb2ed6b19384e996afe598a002893fd70ac0ce14491ff868069c53fc84", "imagePullPolicy": "IfNotPresent", "name": "copyutil", "resources": { "limits": { "cpu": "250m", "memory": "1Gi" }, "requests": { "cpu": "125m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/argocd", "name": "var-files" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "argocd-ssh-known-hosts-cm" }, "name": "ssh-known-hosts" }, { "configMap": { "defaultMode": 420, "name": "argocd-tls-certs-cm" }, "name": "tls-certs" }, { "configMap": { "defaultMode": 420, "name": "argocd-gpg-keys-cm" }, "name": "gpg-keys" }, { "emptyDir": {}, "name": "gpg-keyring" }, { "name": "argocd-repo-server-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-repo-server-tls" } }, { "name": "argocd-operator-redis-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-operator-redis-tls" } }, { "emptyDir": {}, "name": "var-files" }, { "emptyDir": {}, "name": "plugins" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:31:46Z", "generation": 1, "labels": { "app.kubernetes.io/name": "tssc-gitops-server", "pod-template-hash": "c7df7478f" }, "name": "tssc-gitops-server-c7df7478f", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tssc-gitops-server", "uid": "8ea48ac3-efd9-4b05-822c-4053c7017bc5" } ], "resourceVersion": "20766", "uid": "aa0a919a-728a-40c2-ac27-031902407c6a" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tssc-gitops-server", "pod-template-hash": "c7df7478f" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "tssc-gitops-server", "pod-template-hash": "c7df7478f" } }, "spec": { "containers": [ { "command": [ "argocd-server", "--staticassets", "/shared/app", "--dex-server", "https://tssc-gitops-dex-server.tssc-gitops.svc.cluster.local:5556", "--repo-server", "tssc-gitops-repo-server.tssc-gitops.svc.cluster.local:8081", "--redis", "tssc-gitops-redis.tssc-gitops.svc.cluster.local:6379", "--loglevel", "info", "--logformat", "text" ], "env": [ { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "admin.password", "name": "tssc-gitops-redis-initial-password" } } } ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:cf3031bb2ed6b19384e996afe598a002893fd70ac0ce14491ff868069c53fc84", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 3, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "argocd-server", "ports": [ { "containerPort": 8080, "protocol": "TCP" }, { "containerPort": 8083, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 3, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "250m", "memory": "256Mi" }, "requests": { "cpu": "125m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/ssh", "name": "ssh-known-hosts" }, { "mountPath": "/app/config/tls", "name": "tls-certs" }, { "mountPath": "/app/config/server/tls", "name": "argocd-repo-server-tls" }, { "mountPath": "/app/config/server/tls/redis", "name": "argocd-operator-redis-tls" }, { "mountPath": "/home/argocd", "name": "plugins-home" }, { "mountPath": "/home/argocd/params", "name": "argocd-cmd-params-cm" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tssc-gitops-argocd-server", "serviceAccountName": "tssc-gitops-argocd-server", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "argocd-ssh-known-hosts-cm" }, "name": "ssh-known-hosts" }, { "configMap": { "defaultMode": 420, "name": "argocd-tls-certs-cm" }, "name": "tls-certs" }, { "name": "argocd-repo-server-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-repo-server-tls" } }, { "name": "argocd-operator-redis-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-operator-redis-tls" } }, { "emptyDir": {}, "name": "plugins-home" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "server.profile.enabled", "path": "profiler.enabled" } ], "name": "argocd-cmd-params-cm", "optional": true }, "name": "argocd-cmd-params-cm" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "app.kubernetes.io/part-of": "tssc", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "meta.helm.sh/release-name": "tssc-infrastructure", "meta.helm.sh/release-namespace": "tssc" }, "creationTimestamp": "2026-05-05T17:32:59Z", "generation": 1, "labels": { "app": "keycloak-pgsql-bee", "phase": "reference", "pod-template-hash": "7875bcd9bc" }, "name": "keycloak-pgsql-bee-7875bcd9bc", "namespace": "tssc-keycloak", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "keycloak-pgsql-bee", "uid": "2036d7a4-e446-49d6-a026-743b85de8519" } ], "resourceVersion": "22210", "uid": "b1e14ac0-1c81-4fe1-a35b-b3b57e8b5c67" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "keycloak-pgsql-bee", "pod-template-hash": "7875bcd9bc" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "keycloak-pgsql-bee", "phase": "reference", "pod-template-hash": "7875bcd9bc" } }, "spec": { "containers": [ { "env": [ { "name": "POSTGRESQL_USER", "valueFrom": { "secretKeyRef": { "key": "user", "name": "keycloak-pgsql-user" } } }, { "name": "POSTGRESQL_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "keycloak-pgsql-user" } } }, { "name": "POSTGRESQL_DATABASE", "valueFrom": { "secretKeyRef": { "key": "dbname", "name": "keycloak-pgsql-user" } } } ], "image": "registry.redhat.io/rhel9/postgresql-16:1-1754433677", "imagePullPolicy": "IfNotPresent", "name": "pgsql-bee", "ports": [ { "containerPort": 5432, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "tcpSocket": { "port": 5432 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "1Gi" }, "requests": { "cpu": "250m", "memory": "512Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/lib/pgsql/data", "name": "pgsql-storage" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "pgsql-storage", "persistentVolumeClaim": { "claimName": "keycloak-pgsql-data" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:36:05Z", "generation": 1, "labels": { "app.kubernetes.io/component": "ctlog", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "ctlog", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "85fc668cd6" }, "name": "ctlog-85fc668cd6", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "ctlog", "uid": "a63a9b93-355b-4dde-89b4-fde9a7ef0e7a" } ], "resourceVersion": "25233", "uid": "2da7c72b-d64e-45ea-a195-1098a3d83aa3" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "ctlog", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "ctlog", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "85fc668cd6" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "ctlog", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "ctlog", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "85fc668cd6" } }, "spec": { "containers": [ { "args": [ "--http_endpoint=0.0.0.0:6962", "--log_config=/ctfe-keys/config", "--alsologtostderr", "--max_cert_chain_size", "153600", "--tls_certificate", "/var/run/secrets/tas/tls.crt", "--tls_key", "/var/run/secrets/tas/tls.key", "--trillian_tls_ca_cert_file", "/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt" ], "env": [ { "name": "SSL_CERT_DIR", "value": "/var/run/configs/tas/ca-trust:/var/run/secrets/kubernetes.io/serviceaccount" } ], "image": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:95b5aefafd17dd44794f6d5d1e75278faa5a74f2472db667409d1c88caaef1f1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6962, "scheme": "HTTPS" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "ctlog", "ports": [ { "containerPort": 6962, "name": "server", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6962, "scheme": "HTTPS" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/ctfe-keys", "name": "keys", "readOnly": true }, { "mountPath": "/var/run/configs/tas/ca-trust", "name": "ca-trust", "readOnly": true }, { "mountPath": "/var/run/secrets/tas", "name": "tls-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "ctlog", "serviceAccountName": "ctlog", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "keys", "secret": { "defaultMode": 420, "secretName": "ctlog-config-trusted-artifact-signerrlzkc" } }, { "name": "ca-trust", "projected": { "defaultMode": 420, "sources": null } }, { "name": "tls-cert", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "tls.crt", "path": "tls.crt" } ], "name": "trusted-artifact-signer-ctlog-tls" } }, { "secret": { "items": [ { "key": "tls.key", "path": "tls.key" } ], "name": "trusted-artifact-signer-ctlog-tls" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:34:45Z", "generation": 1, "labels": { "app.kubernetes.io/component": "fulcio", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "fulcio-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "758db76c4b" }, "name": "fulcio-server-758db76c4b", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "fulcio-server", "uid": "5ffd525c-80ea-4db3-906a-0d7101a8cac9" } ], "resourceVersion": "23333", "uid": "574139a7-5c1e-4209-83f8-5ca020e5ca00" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "fulcio", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "fulcio-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "758db76c4b" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "fulcio", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "fulcio-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "758db76c4b" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "serve", "--port=5555", "--grpc-port=5554", "--log_type=prod", "--ca=fileca", "--fileca-key", "/var/run/fulcio-secrets/key.pem", "--fileca-cert", "/var/run/fulcio-secrets/cert.pem", "--ct-log-url=https://ctlog.tssc-tas.svc/trusted-artifact-signer", "--fileca-key-passwd", "$(PASSWORD)" ], "env": [ { "name": "PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "fulcio-cert-trusted-artifact-signer6qkst" } } }, { "name": "SSL_CERT_DIR", "value": "/var/run/configs/tas/ca-trust:/var/run/secrets/kubernetes.io/serviceaccount" } ], "image": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:2d478c389bc89afc6b331bc662a84dfc1bbb9da2681ab6dc5ad36f44c346699a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5555, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "fulcio-server", "ports": [ { "containerPort": 5555, "name": "http", "protocol": "TCP" }, { "containerPort": 5554, "name": "grpc", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5555, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/fulcio-secrets", "name": "fulcio-cert", "readOnly": true }, { "mountPath": "/etc/fulcio-config", "name": "fulcio-config" }, { "mountPath": "/var/run/fulcio", "name": "oidc-info" }, { "mountPath": "/var/run/configs/tas/ca-trust", "name": "ca-trust", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "fulcio", "serviceAccountName": "fulcio", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "fulcio-config-cdhlw" }, "name": "fulcio-config" }, { "name": "fulcio-cert", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "private", "path": "key.pem" } ], "name": "fulcio-cert-trusted-artifact-signer6qkst" } }, { "secret": { "items": [ { "key": "cert", "path": "cert.pem" } ], "name": "fulcio-cert-trusted-artifact-signer6qkst" } } ] } }, { "name": "oidc-info", "projected": { "defaultMode": 420, "sources": [ { "configMap": { "items": [ { "key": "ca.crt", "mode": 438, "path": "ca.crt" } ], "name": "kube-root-ca.crt" } } ] } }, { "name": "ca-trust", "projected": { "defaultMode": 420, "sources": null } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:35:46Z", "generation": 1, "labels": { "app.kubernetes.io/component": "rekor-redis", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-redis", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "5d88f99d54" }, "name": "rekor-redis-5d88f99d54", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "rekor-redis", "uid": "4cd1f6b9-1902-4bf3-8b67-73efb2213390" } ], "resourceVersion": "24350", "uid": "7ced74b5-d9d0-411d-a541-53a5e3b01a9c" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "rekor-redis", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-redis", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "5d88f99d54" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "rekor-redis", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-redis", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "5d88f99d54" } }, "spec": { "containers": [ { "env": [ { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "redis-password-trusted-artifact-signer5xv9g" } } }, { "name": "SSL_CERT_DIR", "value": "/var/run/configs/tas/ca-trust:/var/run/secrets/kubernetes.io/serviceaccount" }, { "name": "REDIS_CONF", "value": "/config/redis.conf" } ], "image": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:22b8cfd123fdd66827b81f2431903198e33579906102b2f6295276cf3eb197a6", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "exec": { "command": [ "/bin/sh", "-c", "-i", "test $(redis-cli --tls --cacert /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt -h 127.0.0.1 -a $REDIS_PASSWORD ping) = 'PONG'" ] }, "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "rekor-redis", "ports": [ { "containerPort": 6379, "name": "redis", "protocol": "TCP" } ], "readinessProbe": { "exec": { "command": [ "/bin/sh", "-c", "-i", "test $(redis-cli --tls --cacert /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt -h 127.0.0.1 -a $REDIS_PASSWORD ping) = 'PONG'" ] }, "failureThreshold": 3, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/data", "name": "storage" }, { "mountPath": "/var/run/configs/tas/ca-trust", "name": "ca-trust", "readOnly": true }, { "mountPath": "/var/run/secrets/tas", "name": "tls-cert", "readOnly": true }, { "mountPath": "/config", "name": "config" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "cp $REDIS_CONF /config/redis.conf\necho \"tls-port 6379\" \u003e\u003e /config/redis.conf\necho \"port 0\" \u003e\u003e /config/redis.conf\necho \"tls-cert-file /var/run/secrets/tas/tls.crt\" \u003e\u003e /config/redis.conf\necho \"tls-key-file /var/run/secrets/tas/tls.key\" \u003e\u003e /config/redis.conf\necho \"tls-ca-cert-file /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt\" \u003e\u003e /config/redis.conf\necho \"tls-auth-clients no\" \u003e\u003e /config/redis.conf\n" ], "command": [ "/bin/bash", "-c" ], "image": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:22b8cfd123fdd66827b81f2431903198e33579906102b2f6295276cf3eb197a6", "imagePullPolicy": "IfNotPresent", "name": "enable-tls", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/config", "name": "config" } ] } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "rekor-redis", "serviceAccountName": "rekor-redis", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "storage" }, { "name": "ca-trust", "projected": { "defaultMode": 420, "sources": null } }, { "name": "tls-cert", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "tls.crt", "path": "tls.crt" } ], "name": "trusted-artifact-signer-rekor-redis-tls" } }, { "secret": { "items": [ { "key": "tls.key", "path": "tls.key" } ], "name": "trusted-artifact-signer-rekor-redis-tls" } } ] } }, { "emptyDir": {}, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:35:47Z", "generation": 1, "labels": { "app.kubernetes.io/component": "rekor-ui", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-search-ui", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "5d676b6f9f" }, "name": "rekor-search-ui-5d676b6f9f", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "rekor-search-ui", "uid": "97500371-0eb3-4bbc-afdf-b70a6e742836" } ], "resourceVersion": "24723", "uid": "290a48b1-5b48-4735-b129-06fa52994a8a" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "rekor-ui", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-search-ui", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "5d676b6f9f" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "rekor-ui", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-search-ui", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "5d676b6f9f" } }, "spec": { "containers": [ { "env": [ { "name": "NEXT_PUBLIC_REKOR_DEFAULT_DOMAIN", "value": "https://rekor-server-tssc-tas.apps.rosa.kx-18393292b9.l4c0.p3.openshiftapps.com" } ], "image": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:204dc28f6182267851d39eff08649e921877e2771d2c39acb798aa7896f5bcef", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 3000, "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "rekor-search-ui", "ports": [ { "containerPort": 3000, "name": "3000-tcp", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 3000, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "rekor-ui", "serviceAccountName": "rekor-ui", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:35:46Z", "generation": 1, "labels": { "app.kubernetes.io/component": "rekor-server", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "5b4b44879f" }, "name": "rekor-server-5b4b44879f", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "rekor-server", "uid": "de206aae-e550-489a-814c-812fb35c3046" } ], "resourceVersion": "24879", "uid": "6c937850-348b-4145-bb55-035360d329df" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "rekor-server", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "5b4b44879f" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "rekor-server", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "5b4b44879f" } }, "spec": { "containers": [ { "args": [ "serve", "--trillian_log_server.address", "trillian-logserver.tssc-tas.svc", "--trillian_log_server.port", "8091", "--trillian_log_server.sharding_config", "/sharding/sharding-config.yaml", "--rekor_server.address", "0.0.0.0", "--enable_retrieve_api=true", "--trillian_log_server.tlog_id", "683079605169309617", "--log_type", "prod", "--rekor_server.signer", "/key/private", "--max_request_body_size", "10485760", "--search_index.storage_provider", "redis", "--redis_server.address", "rekor-redis.tssc-tas.svc", "--redis_server.port", "6379", "--redis_server.password", "$(REDIS_PASSWORD)", "--redis_server.enable-tls=true", "--enable_attestation_storage=true", "--attestation_storage_bucket", "file:///var/run/attestations?no_tmp_dir=true", "--max_attestation_size", "102400", "--trillian_log_server.tls=true" ], "env": [ { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "redis-password-trusted-artifact-signer5xv9g" } } }, { "name": "SSL_CERT_DIR", "value": "/var/run/configs/tas/ca-trust:/var/run/secrets/kubernetes.io/serviceaccount" } ], "image": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:b4a5a2c2518dba5f7812c8b4112e25a0f867a4b187c23adfc727395f871c8ca6", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ping", "port": 3000, "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "rekor-server", "ports": [ { "containerPort": 3000, "name": "rekor-server", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ping", "port": 3000, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/key", "name": "rekor-private-key-volume", "readOnly": true }, { "mountPath": "/sharding", "name": "rekor-sharding-config" }, { "mountPath": "/var/run/attestations", "name": "storage" }, { "mountPath": "/var/run/configs/tas/ca-trust", "name": "ca-trust", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroupChangePolicy": "OnRootMismatch", "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "rekor", "serviceAccountName": "rekor", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "rekor-private-key-volume", "secret": { "defaultMode": 420, "items": [ { "key": "private", "path": "private" } ], "secretName": "rekor-signer-trusted-artifact-signer-p5962" } }, { "configMap": { "defaultMode": 420, "name": "rekor-sharding-config-lvrrb" }, "name": "rekor-sharding-config" }, { "name": "storage", "persistentVolumeClaim": { "claimName": "rekor-trusted-artifact-signer-pvc" } }, { "name": "ca-trust", "projected": { "defaultMode": 420, "sources": null } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:34:45Z", "generation": 1, "labels": { "app.kubernetes.io/component": "trillian-db", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-db", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "cf46c69df" }, "name": "trillian-db-cf46c69df", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "trillian-db", "uid": "40fff2fa-5bbe-4c54-8219-2764bc99af01" } ], "resourceVersion": "23464", "uid": "05715ce1-fec7-490c-a20b-d192074d09cc" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "trillian-db", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-db", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "cf46c69df" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "trillian-db", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-db", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "cf46c69df" } }, "spec": { "containers": [ { "args": [ "--ssl-cert", "/var/run/secrets/tas/tls.crt", "--ssl-key", "/var/run/secrets/tas/tls.key" ], "command": [ "run-mysqld" ], "env": [ { "name": "MYSQL_USER", "valueFrom": { "secretKeyRef": { "key": "mysql-user", "name": "trillian-db-connection-tqx5r" } } }, { "name": "MYSQL_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "mysql-password", "name": "trillian-db-connection-tqx5r" } } }, { "name": "MYSQL_ROOT_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "mysql-root-password", "name": "trillian-db-connection-tqx5r" } } }, { "name": "MYSQL_PORT", "valueFrom": { "secretKeyRef": { "key": "mysql-port", "name": "trillian-db-connection-tqx5r" } } }, { "name": "MYSQL_DATABASE", "valueFrom": { "secretKeyRef": { "key": "mysql-database", "name": "trillian-db-connection-tqx5r" } } } ], "image": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:ab5c3e921b58d17bf6b596d2d7acf64a28b34f3f3a66720c1a07e6555ed9e0b8", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "exec": { "command": [ "bash", "-c", "mariadb-admin -u ${MYSQL_USER} -p${MYSQL_PASSWORD} ping --ssl" ] }, "failureThreshold": 3, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "trillian-db", "ports": [ { "containerPort": 3306, "name": "3306-tcp", "protocol": "TCP" } ], "readinessProbe": { "exec": { "command": [ "bash", "-c", "mariadb -u ${MYSQL_USER} -p${MYSQL_PASSWORD} -e \"SELECT 1;\" --ssl" ] }, "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/lib/mysql", "name": "storage" }, { "mountPath": "/var/run/secrets/tas", "name": "tls-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroupChangePolicy": "OnRootMismatch", "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "trillian-db", "serviceAccountName": "trillian-db", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "storage", "persistentVolumeClaim": { "claimName": "trillian-mysql" } }, { "name": "tls-cert", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "tls.crt", "path": "tls.crt" } ], "name": "trusted-artifact-signer-trillian-db-tls" } }, { "secret": { "items": [ { "key": "tls.key", "path": "tls.key" } ], "name": "trusted-artifact-signer-trillian-db-tls" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:34:45Z", "generation": 1, "labels": { "app.kubernetes.io/component": "trillian-logserver", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logserver", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "5687bd47bb" }, "name": "trillian-logserver-5687bd47bb", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "trillian-logserver", "uid": "88f6ec90-d42f-4661-aa4e-722c1487466d" } ], "resourceVersion": "23644", "uid": "33a6bbc2-ff2f-49b9-a1c2-5b6f51d4ad0a" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "trillian-logserver", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logserver", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "5687bd47bb" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "trillian-logserver", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logserver", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "5687bd47bb" } }, "spec": { "containers": [ { "args": [ "--storage_system=mysql", "--quota_system=mysql", "--mysql_uri=$(MYSQL_USER):$(MYSQL_PASSWORD)@tcp($(MYSQL_HOSTNAME):$(MYSQL_PORT))/$(MYSQL_DATABASE)", "--mysql_max_conns=30", "--mysql_max_idle_conns=10", "--rpc_endpoint=0.0.0.0:8091", "--http_endpoint=0.0.0.0:8090", "--alsologtostderr", "--max_msg_size_bytes", "153600", "--mysql_tls_ca", "/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt", "--mysql_server_name", "$(MYSQL_HOSTNAME).tssc-tas.svc", "--tls_cert_file", "/var/run/secrets/tas/tls.crt", "--tls_key_file", "/var/run/secrets/tas/tls.key" ], "env": [ { "name": "MYSQL_USER", "valueFrom": { "secretKeyRef": { "key": "mysql-user", "name": "trillian-db-connection-tqx5r" } } }, { "name": "MYSQL_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "mysql-password", "name": "trillian-db-connection-tqx5r" } } }, { "name": "MYSQL_HOSTNAME", "valueFrom": { "secretKeyRef": { "key": "mysql-host", "name": "trillian-db-connection-tqx5r" } } }, { "name": "MYSQL_PORT", "valueFrom": { "secretKeyRef": { "key": "mysql-port", "name": "trillian-db-connection-tqx5r" } } }, { "name": "MYSQL_DATABASE", "valueFrom": { "secretKeyRef": { "key": "mysql-database", "name": "trillian-db-connection-tqx5r" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "SSL_CERT_DIR", "value": "/var/run/configs/tas/ca-trust:/var/run/secrets/kubernetes.io/serviceaccount" } ], "image": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:523fa259ebf067ac3076748d4f5c86e01e5b1960034c0876add5d67b0ca21b0b", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8090, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "trillian-logserver", "ports": [ { "containerPort": 8091, "name": "8091-tcp", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8090, "scheme": "HTTPS" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/configs/tas/ca-trust", "name": "ca-trust", "readOnly": true }, { "mountPath": "/var/run/secrets/tas", "name": "tls-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "until nc -z -v -w30 $MYSQL_HOSTNAME $MYSQL_PORT; do echo \"Waiting for MySQL to start\"; sleep 5; done;" ], "env": [ { "name": "MYSQL_HOSTNAME", "valueFrom": { "secretKeyRef": { "key": "mysql-host", "name": "trillian-db-connection-tqx5r" } } }, { "name": "MYSQL_PORT", "valueFrom": { "secretKeyRef": { "key": "mysql-port", "name": "trillian-db-connection-tqx5r" } } } ], "image": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:15692e0deea2ee5ef374514639030317a5b033c1bd1778673329a9745feb41d1", "imagePullPolicy": "IfNotPresent", "name": "wait-for-trillian-db", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "trillian-logserver", "serviceAccountName": "trillian-logserver", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "ca-trust", "projected": { "defaultMode": 420, "sources": null } }, { "name": "tls-cert", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "tls.crt", "path": "tls.crt" } ], "name": "trusted-artifact-signer-trillian-logserver-tls" } }, { "secret": { "items": [ { "key": "tls.key", "path": "tls.key" } ], "name": "trusted-artifact-signer-trillian-logserver-tls" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:34:45Z", "generation": 1, "labels": { "app.kubernetes.io/component": "trillian-logsigner", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logsigner", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "9dc549c57" }, "name": "trillian-logsigner-9dc549c57", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "trillian-logsigner", "uid": "0308e251-b42f-4ac6-932f-886dfea378f7" } ], "resourceVersion": "23771", "uid": "d010e157-db0c-4ee9-8a4d-41d166ad6492" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "trillian-logsigner", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logsigner", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "9dc549c57" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "trillian-logsigner", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logsigner", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "9dc549c57" } }, "spec": { "containers": [ { "args": [ "--storage_system=mysql", "--quota_system=mysql", "--mysql_uri=$(MYSQL_USER):$(MYSQL_PASSWORD)@tcp($(MYSQL_HOSTNAME):$(MYSQL_PORT))/$(MYSQL_DATABASE)", "--mysql_max_conns=30", "--mysql_max_idle_conns=10", "--rpc_endpoint=0.0.0.0:8091", "--http_endpoint=0.0.0.0:8090", "--alsologtostderr", "--election_system=k8s", "--lock_namespace=$(NAMESPACE)", "--lock_holder_identity=$(POD_NAME)", "--master_hold_interval=5s", "--master_hold_jitter=15s", "--max_msg_size_bytes", "153600", "--mysql_tls_ca", "/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt", "--mysql_server_name", "$(MYSQL_HOSTNAME).tssc-tas.svc", "--tls_cert_file", "/var/run/secrets/tas/tls.crt", "--tls_key_file", "/var/run/secrets/tas/tls.key" ], "env": [ { "name": "MYSQL_USER", "valueFrom": { "secretKeyRef": { "key": "mysql-user", "name": "trillian-db-connection-tqx5r" } } }, { "name": "MYSQL_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "mysql-password", "name": "trillian-db-connection-tqx5r" } } }, { "name": "MYSQL_HOSTNAME", "valueFrom": { "secretKeyRef": { "key": "mysql-host", "name": "trillian-db-connection-tqx5r" } } }, { "name": "MYSQL_PORT", "valueFrom": { "secretKeyRef": { "key": "mysql-port", "name": "trillian-db-connection-tqx5r" } } }, { "name": "MYSQL_DATABASE", "valueFrom": { "secretKeyRef": { "key": "mysql-database", "name": "trillian-db-connection-tqx5r" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "SSL_CERT_DIR", "value": "/var/run/configs/tas/ca-trust:/var/run/secrets/kubernetes.io/serviceaccount" } ], "image": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:f211db01228530de8ed46b05189c492e6c3629df1098da57d31f2765a22ef014", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8090, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "trillian-logsigner", "ports": [ { "containerPort": 8091, "name": "8091-tcp", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8090, "scheme": "HTTPS" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/configs/tas/ca-trust", "name": "ca-trust", "readOnly": true }, { "mountPath": "/var/run/secrets/tas", "name": "tls-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "until nc -z -v -w30 $MYSQL_HOSTNAME $MYSQL_PORT; do echo \"Waiting for MySQL to start\"; sleep 5; done;" ], "env": [ { "name": "MYSQL_HOSTNAME", "valueFrom": { "secretKeyRef": { "key": "mysql-host", "name": "trillian-db-connection-tqx5r" } } }, { "name": "MYSQL_PORT", "valueFrom": { "secretKeyRef": { "key": "mysql-port", "name": "trillian-db-connection-tqx5r" } } } ], "image": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:15692e0deea2ee5ef374514639030317a5b033c1bd1778673329a9745feb41d1", "imagePullPolicy": "IfNotPresent", "name": "wait-for-trillian-db", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "trillian-logsigner", "serviceAccountName": "trillian-logsigner", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "ca-trust", "projected": { "defaultMode": 420, "sources": null } }, { "name": "tls-cert", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "tls.crt", "path": "tls.crt" } ], "name": "trusted-artifact-signer-trillian-logsigner-tls" } }, { "secret": { "items": [ { "key": "tls.key", "path": "tls.key" } ], "name": "trusted-artifact-signer-trillian-logsigner-tls" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:36:35Z", "generation": 1, "labels": { "app.kubernetes.io/component": "tuf", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "tuf", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "b4d8f6d89" }, "name": "tuf-b4d8f6d89", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tuf", "uid": "b70e39dd-8bd9-4859-8baa-e92c75674ce7" } ], "resourceVersion": "26361", "uid": "a5e0adca-6516-4681-8be2-cfa75f68cdb7" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "tuf", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "tuf", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "b4d8f6d89" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "tuf", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "tuf", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "b4d8f6d89" } }, "spec": { "containers": [ { "image": "registry.redhat.io/ubi9/httpd-24@sha256:7a48172cdda2a565001998fac2f3aeaa65677f080dd9cb3f9e26ef0963afdef0", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "exec": { "command": [ "curl", "localhost:8080" ] }, "failureThreshold": 3, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "tuf-server", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/root.json", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/www/html", "name": "repository" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroupChangePolicy": "OnRootMismatch", "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tuf", "serviceAccountName": "tuf", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "repository", "persistentVolumeClaim": { "claimName": "tuf" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "meta.helm.sh/release-name": "trustedprofileanalyzer", "meta.helm.sh/release-namespace": "tssc-tpa" }, "creationTimestamp": "2026-05-05T17:36:58Z", "generation": 1, "labels": { "app.kubernetes.io/component": "importer", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "importer", "pod-template-hash": "85dc587b5f" }, "name": "importer-85dc587b5f", "namespace": "tssc-tpa", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "importer", "uid": "b5d0f624-51ab-49cb-a384-534b8669f2a8" } ], "resourceVersion": "26679", "uid": "e31855ed-bcb8-4977-b0a1-411cbde53870" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "importer", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "importer", "pod-template-hash": "85dc587b5f" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "importer", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "importer", "pod-template-hash": "85dc587b5f" } }, "spec": { "affinity": { "podAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "server", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "server" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "importer", "--working-dir", "/data/workdir", "--concurrency", "1" ], "command": [ "/usr/local/bin/trustd" ], "env": [ { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "RUST_LOG", "value": "debug" }, { "name": "RUST_BACKTRACE", "value": "1" }, { "name": "INFRASTRUCTURE_ENABLED", "value": "true" }, { "name": "INFRASTRUCTURE_BIND", "value": "[::]:9010" }, { "name": "TRUSTD_DB_HOST", "valueFrom": { "secretKeyRef": { "key": "host", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_PORT", "valueFrom": { "secretKeyRef": { "key": "port", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_NAME", "valueFrom": { "secretKeyRef": { "key": "dbname", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_USER", "valueFrom": { "secretKeyRef": { "key": "user", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_SSLMODE", "value": "disable" }, { "name": "TRUSTD_STORAGE_STRATEGY", "value": "fs" }, { "name": "TRUSTD_STORAGE_FS_PATH", "value": "/data/storage" } ], "image": "registry.redhat.io/rhtpa/rhtpa-trustification-service-rhel9@sha256:c1fd3736f86667698e06b4b2fed5407867dd89dbe53f8e97a9aa23a87ce12909", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health/live", "port": 9010, "scheme": "HTTP" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "service", "ports": [ { "containerPort": 9010, "name": "infra", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health/ready", "port": 9010, "scheme": "HTTP" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1", "memory": "8Gi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/data/workdir", "name": "workdir" }, { "mountPath": "/data/storage", "name": "storage" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "ephemeral": { "volumeClaimTemplate": { "metadata": { "creationTimestamp": null, "labels": { "type": "importer-working-directory" } }, "spec": { "accessModes": [ "ReadWriteOnce" ], "resources": { "requests": { "storage": "32Gi" } }, "volumeMode": "Filesystem" } } }, "name": "workdir" }, { "name": "storage", "persistentVolumeClaim": { "claimName": "storage" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-05-05T17:31:10Z", "generation": 1, "labels": { "control-plane": "controller-manager", "pod-template-hash": "556f86dcbc" }, "name": "rhtpa-operator-controller-manager-556f86dcbc", "namespace": "tssc-tpa", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "rhtpa-operator-controller-manager", "uid": "2f8911c8-37b4-46ad-8ece-2c97eeaacab2" } ], "resourceVersion": "16796", "uid": "1974a288-9bbe-4d8c-a4da-9b349b4e29d8" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "controller-manager", "pod-template-hash": "556f86dcbc" } }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"rhtpa.io/v1\",\n \"kind\": \"TrustedProfileAnalyzer\",\n \"metadata\": {\n \"name\": \"trustedprofileanalyzer-sample\"\n },\n \"spec\": {\n \"appDomain\": \"change-me\",\n \"collector\": {},\n \"database\": {},\n \"image\": {},\n \"infrastructure\": {\n \"port\": 9010\n },\n \"ingress\": {},\n \"metrics\": {\n \"enabled\": false\n },\n \"modules\": {\n \"createDatabase\": {\n \"enabled\": false,\n \"image\": {}\n },\n \"createImporters\": {\n \"enabled\": false,\n \"image\": {},\n \"importers\": {}\n },\n \"importer\": {\n \"concurrency\": 1,\n \"enabled\": true,\n \"image\": {},\n \"infrastructure\": {},\n \"metrics\": {},\n \"replicas\": 1,\n \"resources\": {\n \"requests\": {\n \"cpu\": 1,\n \"memory\": \"8Gi\"\n }\n },\n \"rust\": {},\n \"tracing\": {},\n \"workingDirectory\": {\n \"size\": \"32Gi\"\n }\n },\n \"migrateDatabase\": {\n \"enabled\": false,\n \"image\": {}\n },\n \"server\": {\n \"enabled\": true,\n \"image\": {},\n \"infrastructure\": {},\n \"ingress\": {},\n \"metrics\": {},\n \"replicas\": 1,\n \"resources\": {\n \"requests\": {\n \"cpu\": 1,\n \"memory\": \"8Gi\"\n }\n },\n \"rust\": {},\n \"tracing\": {}\n }\n },\n \"oidc\": {\n \"clients\": {\n \"cli\": {\n \"clientSecret\": null\n },\n \"frontend\": {}\n }\n },\n \"openshift\": {\n \"useServiceCa\": true\n },\n \"partOf\": \"trustify\",\n \"replicas\": 1,\n \"rust\": {},\n \"storage\": {},\n \"tls\": {},\n \"tracing\": {\n \"enabled\": false\n }\n }\n }\n]", "capabilities": "Basic Install", "createdAt": "2025-11-04T12:03:15Z", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "false", "features.operators.openshift.io/fips-compliant": "false", "features.operators.openshift.io/proxy-aware": "false", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "kubectl.kubernetes.io/default-container": "manager", "olm.operatorGroup": "rhtpa-operator", "olm.operatorNamespace": "tssc-tpa", "olm.targetNamespaces": "tssc-tpa", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtpa.io\",\"kind\":\"TrustedProfileAnalyzer\",\"version\":\"v1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"rhtpa-operator\",\"version\":\"1.1.4\"}}]}", "operators.openshift.io/valid-subscription": "[\"Red Hat Trusted Profile Analyzer\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.42.0", "operators.operatorframework.io/project_layout": "helm.sdk.operatorframework.io/v1", "repository": "https://github.com/trustification/trusted-profile-analyzer-operator", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager", "pod-template-hash": "556f86dcbc" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8443", "--leader-elect", "--health-probe-bind-address=:8081" ], "env": [ { "name": "OPERATOR_CONDITION_NAME", "value": "rhtpa-operator.v1.1.4" } ], "image": "registry.redhat.io/rhtpa/rhtpa-rhel9-operator@sha256:95f5dcecd4c2f488420d608565bcac75909a65f2c9d443c34d93f7914f1cb1ef", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "rhtpa-operator-controller-manager", "serviceAccountName": "rhtpa-operator-controller-manager", "terminationGracePeriodSeconds": 10 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "meta.helm.sh/release-name": "trustedprofileanalyzer", "meta.helm.sh/release-namespace": "tssc-tpa" }, "creationTimestamp": "2026-05-05T17:36:58Z", "generation": 1, "labels": { "app.kubernetes.io/component": "server", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "server", "pod-template-hash": "f99d7699b" }, "name": "server-f99d7699b", "namespace": "tssc-tpa", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "server", "uid": "c20a606e-1e55-4ee7-b058-18297753f56f" } ], "resourceVersion": "26686", "uid": "8f72d37e-90a2-44f3-a9df-a4047ec46f19" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "server", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "server", "pod-template-hash": "f99d7699b" } }, "template": { "metadata": { "annotations": { "configHash/auth": "9280fea03836023ec97be32df9230244fd9f77ed5462ff4342d86f2df30a695e" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "server", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "server", "pod-template-hash": "f99d7699b" } }, "spec": { "affinity": { "podAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "server", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "server" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "api", "--auth-configuration", "/etc/config/auth.yaml" ], "command": [ "/usr/local/bin/trustd" ], "env": [ { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "RUST_LOG", "value": "debug" }, { "name": "RUST_BACKTRACE", "value": "1" }, { "name": "INFRASTRUCTURE_ENABLED", "value": "true" }, { "name": "INFRASTRUCTURE_BIND", "value": "[::]:9010" }, { "name": "HTTP_SERVER_BIND_ADDR", "value": "::" }, { "name": "HTTP_SERVER_TLS_ENABLED", "value": "true" }, { "name": "HTTP_SERVER_TLS_KEY_FILE", "value": "/etc/tls/tls.key" }, { "name": "HTTP_SERVER_TLS_CERTIFICATE_FILE", "value": "/etc/tls/tls.crt" }, { "name": "TRUSTD_DB_HOST", "valueFrom": { "secretKeyRef": { "key": "host", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_PORT", "valueFrom": { "secretKeyRef": { "key": "port", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_NAME", "valueFrom": { "secretKeyRef": { "key": "dbname", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_USER", "valueFrom": { "secretKeyRef": { "key": "user", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_SSLMODE", "value": "disable" }, { "name": "TRUSTD_STORAGE_STRATEGY", "value": "fs" }, { "name": "TRUSTD_STORAGE_FS_PATH", "value": "/data/storage" }, { "name": "SWAGGER_UI_OIDC_ISSUER_URL", "value": "https://tssc-sso.apps.rosa.kx-18393292b9.l4c0.p3.openshiftapps.com/realms/tssc-iam" }, { "name": "SWAGGER_UI_OIDC_CLIENT_ID", "value": "frontend" }, { "name": "SWAGGER_UI_OIDC_TLS_CA_CERTIFICATES", "value": "/var/run/secrets/kubernetes.io/serviceaccount/ca.crt" }, { "name": "UI_ISSUER_URL", "value": "https://tssc-sso.apps.rosa.kx-18393292b9.l4c0.p3.openshiftapps.com/realms/tssc-iam" }, { "name": "UI_CLIENT_ID", "value": "frontend" }, { "name": "UI_LOAD_USER", "value": "true" } ], "image": "registry.redhat.io/rhtpa/rhtpa-trustification-service-rhel9@sha256:c1fd3736f86667698e06b4b2fed5407867dd89dbe53f8e97a9aa23a87ce12909", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health/live", "port": 9010, "scheme": "HTTP" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "service", "ports": [ { "containerPort": 9010, "name": "infra", "protocol": "TCP" }, { "containerPort": 8080, "name": "endpoint", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health/ready", "port": 9010, "scheme": "HTTP" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1", "memory": "8Gi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tls", "name": "tls", "readOnly": true }, { "mountPath": "/etc/config/auth.yaml", "name": "config-auth", "subPath": "auth.yaml" }, { "mountPath": "/data/storage", "name": "storage" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "secretName": "server-tls" } }, { "configMap": { "defaultMode": 420, "name": "server-auth" }, "name": "config-auth" }, { "name": "storage", "persistentVolumeClaim": { "claimName": "storage" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "app.kubernetes.io/part-of": "tssc", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "meta.helm.sh/release-name": "tssc-infrastructure", "meta.helm.sh/release-namespace": "tssc" }, "creationTimestamp": "2026-05-05T17:32:59Z", "generation": 1, "labels": { "app": "tpa-pgsql-bee", "phase": "reference", "pod-template-hash": "7c6bf4d9f7" }, "name": "tpa-pgsql-bee-7c6bf4d9f7", "namespace": "tssc-tpa", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tpa-pgsql-bee", "uid": "222a929a-253a-416f-b582-3972189543e6" } ], "resourceVersion": "22049", "uid": "56cab229-bd60-439d-aa9f-ff43ecbcbf49" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "tpa-pgsql-bee", "pod-template-hash": "7c6bf4d9f7" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tpa-pgsql-bee", "phase": "reference", "pod-template-hash": "7c6bf4d9f7" } }, "spec": { "containers": [ { "env": [ { "name": "POSTGRESQL_USER", "valueFrom": { "secretKeyRef": { "key": "user", "name": "tpa-pgsql-user" } } }, { "name": "POSTGRESQL_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "tpa-pgsql-user" } } }, { "name": "POSTGRESQL_DATABASE", "valueFrom": { "secretKeyRef": { "key": "dbname", "name": "tpa-pgsql-user" } } } ], "image": "registry.redhat.io/rhel9/postgresql-16:1-1754433677", "imagePullPolicy": "IfNotPresent", "name": "pgsql-bee", "ports": [ { "containerPort": 5432, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "tcpSocket": { "port": 5432 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "1Gi" }, "requests": { "cpu": "250m", "memory": "512Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/lib/pgsql/data", "name": "pgsql-storage" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "pgsql-storage", "persistentVolumeClaim": { "claimName": "tpa-pgsql-data" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } } ], "kind": "List", "metadata": { "resourceVersion": "" } }