{
    "apiVersion": "v1",
    "items": [
        {
            "apiVersion": "apps/v1",
            "kind": "StatefulSet",
            "metadata": {
                "creationTimestamp": "2026-04-25T08:16:52Z",
                "generation": 1,
                "labels": {
                    "app.kubernetes.io/component": "application-controller",
                    "app.kubernetes.io/managed-by": "openshift-gitops",
                    "app.kubernetes.io/name": "openshift-gitops-application-controller",
                    "app.kubernetes.io/part-of": "argocd"
                },
                "name": "openshift-gitops-application-controller",
                "namespace": "openshift-gitops",
                "ownerReferences": [
                    {
                        "apiVersion": "argoproj.io/v1beta1",
                        "blockOwnerDeletion": true,
                        "controller": true,
                        "kind": "ArgoCD",
                        "name": "openshift-gitops",
                        "uid": "921ec00f-ec49-4ed1-95a8-b6dbc40438ae"
                    }
                ],
                "resourceVersion": "21409",
                "uid": "1a5f03a3-6f59-41de-9daa-330af19328b3"
            },
            "spec": {
                "persistentVolumeClaimRetentionPolicy": {
                    "whenDeleted": "Retain",
                    "whenScaled": "Retain"
                },
                "podManagementPolicy": "OrderedReady",
                "replicas": 1,
                "revisionHistoryLimit": 10,
                "selector": {
                    "matchLabels": {
                        "app.kubernetes.io/name": "openshift-gitops-application-controller"
                    }
                },
                "serviceName": "openshift-gitops-application-controller",
                "template": {
                    "metadata": {
                        "creationTimestamp": null,
                        "labels": {
                            "app.kubernetes.io/name": "openshift-gitops-application-controller"
                        }
                    },
                    "spec": {
                        "affinity": {
                            "podAntiAffinity": {
                                "preferredDuringSchedulingIgnoredDuringExecution": [
                                    {
                                        "podAffinityTerm": {
                                            "labelSelector": {
                                                "matchLabels": {
                                                    "app.kubernetes.io/name": "openshift-gitops-argocd-application-controller"
                                                }
                                            },
                                            "topologyKey": "kubernetes.io/hostname"
                                        },
                                        "weight": 100
                                    },
                                    {
                                        "podAffinityTerm": {
                                            "labelSelector": {
                                                "matchLabels": {
                                                    "app.kubernetes.io/part-of": "argocd"
                                                }
                                            },
                                            "topologyKey": "kubernetes.io/hostname"
                                        },
                                        "weight": 5
                                    }
                                ]
                            }
                        },
                        "containers": [
                            {
                                "command": [
                                    "argocd-application-controller",
                                    "--operation-processors",
                                    "10",
                                    "--redis",
                                    "openshift-gitops-redis.openshift-gitops.svc.cluster.local:6379",
                                    "--repo-server",
                                    "openshift-gitops-repo-server.openshift-gitops.svc.cluster.local:8081",
                                    "--status-processors",
                                    "20",
                                    "--kubectl-parallelism-limit",
                                    "10",
                                    "--loglevel",
                                    "info",
                                    "--logformat",
                                    "text",
                                    "--persist-resource-health"
                                ],
                                "env": [
                                    {
                                        "name": "ARGOCD_CONTROLLER_RESOURCE_HEALTH_PERSIST",
                                        "valueFrom": {
                                            "configMapKeyRef": {
                                                "key": "controller.resource.health.persist",
                                                "name": "argocd-cmd-params-cm"
                                            }
                                        }
                                    },
                                    {
                                        "name": "ARGOCD_RECONCILIATION_TIMEOUT",
                                        "valueFrom": {
                                            "configMapKeyRef": {
                                                "key": "timeout.reconciliation",
                                                "name": "argocd-cm",
                                                "optional": true
                                            }
                                        }
                                    },
                                    {
                                        "name": "HOME",
                                        "value": "/home/argocd"
                                    },
                                    {
                                        "name": "REDIS_PASSWORD",
                                        "valueFrom": {
                                            "secretKeyRef": {
                                                "key": "admin.password",
                                                "name": "openshift-gitops-redis-initial-password"
                                            }
                                        }
                                    }
                                ],
                                "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77",
                                "imagePullPolicy": "IfNotPresent",
                                "name": "argocd-application-controller",
                                "ports": [
                                    {
                                        "containerPort": 8082,
                                        "protocol": "TCP"
                                    }
                                ],
                                "readinessProbe": {
                                    "failureThreshold": 3,
                                    "httpGet": {
                                        "path": "/healthz",
                                        "port": 8082,
                                        "scheme": "HTTP"
                                    },
                                    "initialDelaySeconds": 5,
                                    "periodSeconds": 10,
                                    "successThreshold": 1,
                                    "timeoutSeconds": 1
                                },
                                "resources": {
                                    "limits": {
                                        "cpu": "2",
                                        "memory": "2Gi"
                                    },
                                    "requests": {
                                        "cpu": "250m",
                                        "memory": "1Gi"
                                    }
                                },
                                "securityContext": {
                                    "allowPrivilegeEscalation": false,
                                    "capabilities": {
                                        "drop": [
                                            "ALL"
                                        ]
                                    },
                                    "readOnlyRootFilesystem": true,
                                    "runAsNonRoot": true,
                                    "seccompProfile": {
                                        "type": "RuntimeDefault"
                                    }
                                },
                                "terminationMessagePath": "/dev/termination-log",
                                "terminationMessagePolicy": "File",
                                "volumeMounts": [
                                    {
                                        "mountPath": "/app/config/controller/tls",
                                        "name": "argocd-repo-server-tls"
                                    },
                                    {
                                        "mountPath": "/app/config/controller/tls/redis",
                                        "name": "argocd-operator-redis-tls"
                                    },
                                    {
                                        "mountPath": "/home/argocd",
                                        "name": "argocd-home"
                                    },
                                    {
                                        "mountPath": "/home/argocd/params",
                                        "name": "argocd-cmd-params-cm"
                                    },
                                    {
                                        "mountPath": "/tmp",
                                        "name": "argocd-application-controller-tmp"
                                    }
                                ]
                            }
                        ],
                        "dnsPolicy": "ClusterFirst",
                        "nodeSelector": {
                            "kubernetes.io/os": "linux"
                        },
                        "restartPolicy": "Always",
                        "schedulerName": "default-scheduler",
                        "securityContext": {
                            "seccompProfile": {
                                "type": "RuntimeDefault"
                            }
                        },
                        "serviceAccount": "openshift-gitops-argocd-application-controller",
                        "serviceAccountName": "openshift-gitops-argocd-application-controller",
                        "terminationGracePeriodSeconds": 30,
                        "volumes": [
                            {
                                "name": "argocd-repo-server-tls",
                                "secret": {
                                    "defaultMode": 420,
                                    "optional": true,
                                    "secretName": "argocd-repo-server-tls"
                                }
                            },
                            {
                                "name": "argocd-operator-redis-tls",
                                "secret": {
                                    "defaultMode": 420,
                                    "optional": true,
                                    "secretName": "argocd-operator-redis-tls"
                                }
                            },
                            {
                                "emptyDir": {},
                                "name": "argocd-home"
                            },
                            {
                                "configMap": {
                                    "defaultMode": 420,
                                    "items": [
                                        {
                                            "key": "controller.profile.enabled",
                                            "path": "profiler.enabled"
                                        },
                                        {
                                            "key": "controller.resource.health.persist",
                                            "path": "controller.resource.health.persist"
                                        }
                                    ],
                                    "name": "argocd-cmd-params-cm",
                                    "optional": true
                                },
                                "name": "argocd-cmd-params-cm"
                            },
                            {
                                "emptyDir": {},
                                "name": "argocd-application-controller-tmp"
                            }
                        ]
                    }
                },
                "updateStrategy": {
                    "rollingUpdate": {
                        "partition": 0
                    },
                    "type": "RollingUpdate"
                }
            },
            "status": {
                "availableReplicas": 1,
                "collisionCount": 0,
                "currentReplicas": 1,
                "currentRevision": "openshift-gitops-application-controller-5d7fb7dc66",
                "observedGeneration": 1,
                "readyReplicas": 1,
                "replicas": 1,
                "updateRevision": "openshift-gitops-application-controller-5d7fb7dc66",
                "updatedReplicas": 1
            }
        },
        {
            "apiVersion": "apps/v1",
            "kind": "StatefulSet",
            "metadata": {
                "annotations": {
                    "operator.prometheus.io/controller-id": "openshift-monitoring/prometheus-operator",
                    "prometheus-operator-input-hash": "7034333924008571970"
                },
                "creationTimestamp": "2026-04-25T08:08:46Z",
                "generation": 2,
                "labels": {
                    "app.kubernetes.io/component": "alert-router",
                    "app.kubernetes.io/instance": "main",
                    "app.kubernetes.io/managed-by": "cluster-monitoring-operator",
                    "app.kubernetes.io/name": "alertmanager",
                    "app.kubernetes.io/part-of": "openshift-monitoring",
                    "app.kubernetes.io/version": "0.28.1",
                    "managed-by": "prometheus-operator"
                },
                "name": "alertmanager-main",
                "namespace": "openshift-monitoring",
                "ownerReferences": [
                    {
                        "apiVersion": "monitoring.coreos.com/v1",
                        "blockOwnerDeletion": true,
                        "controller": true,
                        "kind": "Alertmanager",
                        "name": "main",
                        "uid": "e718cdc7-0d8c-4807-b7cc-16d4ee2ef1dc"
                    }
                ],
                "resourceVersion": "15362",
                "uid": "576a85a2-9655-49ed-96dc-b8b3d492fc9e"
            },
            "spec": {
                "persistentVolumeClaimRetentionPolicy": {
                    "whenDeleted": "Retain",
                    "whenScaled": "Retain"
                },
                "podManagementPolicy": "Parallel",
                "replicas": 2,
                "revisionHistoryLimit": 10,
                "selector": {
                    "matchLabels": {
                        "alertmanager": "main",
                        "app.kubernetes.io/instance": "main",
                        "app.kubernetes.io/managed-by": "prometheus-operator",
                        "app.kubernetes.io/name": "alertmanager"
                    }
                },
                "serviceName": "alertmanager-operated",
                "template": {
                    "metadata": {
                        "annotations": {
                            "kubectl.kubernetes.io/default-container": "alertmanager",
                            "openshift.io/required-scc": "nonroot",
                            "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}"
                        },
                        "creationTimestamp": null,
                        "labels": {
                            "alertmanager": "main",
                            "app.kubernetes.io/component": "alert-router",
                            "app.kubernetes.io/instance": "main",
                            "app.kubernetes.io/managed-by": "prometheus-operator",
                            "app.kubernetes.io/name": "alertmanager",
                            "app.kubernetes.io/part-of": "openshift-monitoring",
                            "app.kubernetes.io/version": "0.28.1"
                        }
                    },
                    "spec": {
                        "affinity": {
                            "podAntiAffinity": {
                                "requiredDuringSchedulingIgnoredDuringExecution": [
                                    {
                                        "labelSelector": {
                                            "matchLabels": {
                                                "app.kubernetes.io/component": "alert-router",
                                                "app.kubernetes.io/instance": "main",
                                                "app.kubernetes.io/name": "alertmanager",
                                                "app.kubernetes.io/part-of": "openshift-monitoring"
                                            }
                                        },
                                        "namespaces": [
                                            "openshift-monitoring"
                                        ],
                                        "topologyKey": "kubernetes.io/hostname"
                                    }
                                ]
                            }
                        },
                        "automountServiceAccountToken": true,
                        "containers": [
                            {
                                "args": [
                                    "--config.file=/etc/alertmanager/config_out/alertmanager.env.yaml",
                                    "--storage.path=/alertmanager",
                                    "--data.retention=120h",
                                    "--cluster.listen-address=[$(POD_IP)]:9094",
                                    "--web.listen-address=127.0.0.1:9093",
                                    "--web.external-url=https://console-openshift-console.apps.rosa.kx-5d206a0529.sg2q.p3.openshiftapps.com/monitoring",
                                    "--web.route-prefix=/",
                                    "--cluster.label=openshift-monitoring/main",
                                    "--cluster.peer=alertmanager-main-0.alertmanager-operated:9094",
                                    "--cluster.peer=alertmanager-main-1.alertmanager-operated:9094",
                                    "--cluster.reconnect-timeout=5m",
                                    "--web.config.file=/etc/alertmanager/web_config/web-config.yaml"
                                ],
                                "env": [
                                    {
                                        "name": "HTTP_PROXY"
                                    },
                                    {
                                        "name": "HTTPS_PROXY"
                                    },
                                    {
                                        "name": "NO_PROXY"
                                    },
                                    {
                                        "name": "POD_IP",
                                        "valueFrom": {
                                            "fieldRef": {
                                                "apiVersion": "v1",
                                                "fieldPath": "status.podIP"
                                            }
                                        }
                                    }
                                ],
                                "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8cd08f0f48933436f3a468a54b2b149f009575ee8216438fcbb0928fdbc318cf",
                                "imagePullPolicy": "IfNotPresent",
                                "name": "alertmanager",
                                "ports": [
                                    {
                                        "containerPort": 9094,
                                        "name": "mesh-tcp",
                                        "protocol": "TCP"
                                    },
                                    {
                                        "containerPort": 9094,
                                        "name": "mesh-udp",
                                        "protocol": "UDP"
                                    }
                                ],
                                "resources": {
                                    "requests": {
                                        "cpu": "4m",
                                        "memory": "40Mi"
                                    }
                                },
                                "securityContext": {
                                    "allowPrivilegeEscalation": false,
                                    "capabilities": {
                                        "drop": [
                                            "ALL"
                                        ]
                                    },
                                    "readOnlyRootFilesystem": true
                                },
                                "startupProbe": {
                                    "exec": {
                                        "command": [
                                            "sh",
                                            "-c",
                                            "exec curl --fail http://localhost:9093/-/ready"
                                        ]
                                    },
                                    "failureThreshold": 40,
                                    "initialDelaySeconds": 20,
                                    "periodSeconds": 10,
                                    "successThreshold": 1,
                                    "timeoutSeconds": 3
                                },
                                "terminationMessagePath": "/dev/termination-log",
                                "terminationMessagePolicy": "FallbackToLogsOnError",
                                "volumeMounts": [
                                    {
                                        "mountPath": "/etc/alertmanager/config",
                                        "name": "config-volume"
                                    },
                                    {
                                        "mountPath": "/etc/alertmanager/config_out",
                                        "name": "config-out",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/alertmanager/certs",
                                        "name": "tls-assets",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/alertmanager",
                                        "name": "alertmanager-main-db"
                                    },
                                    {
                                        "mountPath": "/etc/alertmanager/secrets/alertmanager-main-tls",
                                        "name": "secret-alertmanager-main-tls",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy",
                                        "name": "secret-alertmanager-kube-rbac-proxy",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-metric",
                                        "name": "secret-alertmanager-kube-rbac-proxy-metric",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-web",
                                        "name": "secret-alertmanager-kube-rbac-proxy-web",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/pki/ca-trust/extracted/pem/",
                                        "name": "alertmanager-trusted-ca-bundle"
                                    },
                                    {
                                        "mountPath": "/etc/alertmanager/web_config/web-config.yaml",
                                        "name": "web-config",
                                        "readOnly": true,
                                        "subPath": "web-config.yaml"
                                    },
                                    {
                                        "mountPath": "/etc/alertmanager/cluster_tls_config/cluster-tls-config.yaml",
                                        "name": "cluster-tls-config",
                                        "readOnly": true,
                                        "subPath": "cluster-tls-config.yaml"
                                    }
                                ]
                            },
                            {
                                "args": [
                                    "--listen-address=localhost:8080",
                                    "--web-config-file=/etc/alertmanager/web_config/web-config.yaml",
                                    "--reload-url=http://localhost:9093/-/reload",
                                    "--config-file=/etc/alertmanager/config/alertmanager.yaml.gz",
                                    "--config-envsubst-file=/etc/alertmanager/config_out/alertmanager.env.yaml",
                                    "--watched-dir=/etc/alertmanager/config",
                                    "--watched-dir=/etc/alertmanager/secrets/alertmanager-main-tls",
                                    "--watched-dir=/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy",
                                    "--watched-dir=/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-metric",
                                    "--watched-dir=/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-web"
                                ],
                                "command": [
                                    "/bin/prometheus-config-reloader"
                                ],
                                "env": [
                                    {
                                        "name": "POD_NAME",
                                        "valueFrom": {
                                            "fieldRef": {
                                                "apiVersion": "v1",
                                                "fieldPath": "metadata.name"
                                            }
                                        }
                                    },
                                    {
                                        "name": "SHARD",
                                        "value": "-1"
                                    }
                                ],
                                "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b3bd3daa79dba6bf63f8be5ed9856ba8c8041f36b16d73c4b920cfec7c4b2fd4",
                                "imagePullPolicy": "IfNotPresent",
                                "name": "config-reloader",
                                "resources": {
                                    "requests": {
                                        "cpu": "1m",
                                        "memory": "10Mi"
                                    }
                                },
                                "securityContext": {
                                    "allowPrivilegeEscalation": false,
                                    "capabilities": {
                                        "drop": [
                                            "ALL"
                                        ]
                                    },
                                    "readOnlyRootFilesystem": true
                                },
                                "terminationMessagePath": "/dev/termination-log",
                                "terminationMessagePolicy": "FallbackToLogsOnError",
                                "volumeMounts": [
                                    {
                                        "mountPath": "/etc/alertmanager/config",
                                        "name": "config-volume",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/alertmanager/config_out",
                                        "name": "config-out"
                                    },
                                    {
                                        "mountPath": "/etc/alertmanager/secrets/alertmanager-main-tls",
                                        "name": "secret-alertmanager-main-tls",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy",
                                        "name": "secret-alertmanager-kube-rbac-proxy",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-metric",
                                        "name": "secret-alertmanager-kube-rbac-proxy-metric",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-web",
                                        "name": "secret-alertmanager-kube-rbac-proxy-web",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/alertmanager/web_config/web-config.yaml",
                                        "name": "web-config",
                                        "readOnly": true,
                                        "subPath": "web-config.yaml"
                                    }
                                ]
                            },
                            {
                                "args": [
                                    "--secure-listen-address=0.0.0.0:9095",
                                    "--upstream=http://127.0.0.1:9093",
                                    "--config-file=/etc/kube-rbac-proxy/config.yaml",
                                    "--tls-cert-file=/etc/tls/private/tls.crt",
                                    "--tls-private-key-file=/etc/tls/private/tls.key",
                                    "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
                                    "--ignore-paths=/-/healthy,/-/ready",
                                    "--tls-min-version=VersionTLS12"
                                ],
                                "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ccdda82b4adfa8ee4a84b3bad19693be6a42a9881a7b83788d835912129c49a4",
                                "imagePullPolicy": "IfNotPresent",
                                "name": "kube-rbac-proxy-web",
                                "ports": [
                                    {
                                        "containerPort": 9095,
                                        "name": "web",
                                        "protocol": "TCP"
                                    }
                                ],
                                "resources": {
                                    "requests": {
                                        "cpu": "1m",
                                        "memory": "20Mi"
                                    }
                                },
                                "terminationMessagePath": "/dev/termination-log",
                                "terminationMessagePolicy": "FallbackToLogsOnError",
                                "volumeMounts": [
                                    {
                                        "mountPath": "/etc/kube-rbac-proxy",
                                        "name": "secret-alertmanager-kube-rbac-proxy-web",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/tls/private",
                                        "name": "secret-alertmanager-main-tls",
                                        "readOnly": true
                                    }
                                ]
                            },
                            {
                                "args": [
                                    "--secure-listen-address=0.0.0.0:9092",
                                    "--upstream=http://127.0.0.1:9096",
                                    "--config-file=/etc/kube-rbac-proxy/config.yaml",
                                    "--tls-cert-file=/etc/tls/private/tls.crt",
                                    "--tls-private-key-file=/etc/tls/private/tls.key",
                                    "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
                                    "--tls-min-version=VersionTLS12"
                                ],
                                "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ccdda82b4adfa8ee4a84b3bad19693be6a42a9881a7b83788d835912129c49a4",
                                "imagePullPolicy": "IfNotPresent",
                                "name": "kube-rbac-proxy",
                                "ports": [
                                    {
                                        "containerPort": 9092,
                                        "name": "tenancy",
                                        "protocol": "TCP"
                                    }
                                ],
                                "resources": {
                                    "requests": {
                                        "cpu": "1m",
                                        "memory": "15Mi"
                                    }
                                },
                                "terminationMessagePath": "/dev/termination-log",
                                "terminationMessagePolicy": "FallbackToLogsOnError",
                                "volumeMounts": [
                                    {
                                        "mountPath": "/etc/kube-rbac-proxy",
                                        "name": "secret-alertmanager-kube-rbac-proxy"
                                    },
                                    {
                                        "mountPath": "/etc/tls/private",
                                        "name": "secret-alertmanager-main-tls"
                                    }
                                ]
                            },
                            {
                                "args": [
                                    "--secure-listen-address=0.0.0.0:9097",
                                    "--upstream=http://127.0.0.1:9093",
                                    "--config-file=/etc/kube-rbac-proxy/config.yaml",
                                    "--tls-cert-file=/etc/tls/private/tls.crt",
                                    "--tls-private-key-file=/etc/tls/private/tls.key",
                                    "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
                                    "--client-ca-file=/etc/tls/client/client-ca.crt",
                                    "--allow-paths=/metrics",
                                    "--tls-min-version=VersionTLS12"
                                ],
                                "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ccdda82b4adfa8ee4a84b3bad19693be6a42a9881a7b83788d835912129c49a4",
                                "imagePullPolicy": "IfNotPresent",
                                "name": "kube-rbac-proxy-metric",
                                "ports": [
                                    {
                                        "containerPort": 9097,
                                        "name": "metrics",
                                        "protocol": "TCP"
                                    }
                                ],
                                "resources": {
                                    "requests": {
                                        "cpu": "1m",
                                        "memory": "15Mi"
                                    }
                                },
                                "terminationMessagePath": "/dev/termination-log",
                                "terminationMessagePolicy": "FallbackToLogsOnError",
                                "volumeMounts": [
                                    {
                                        "mountPath": "/etc/kube-rbac-proxy",
                                        "name": "secret-alertmanager-kube-rbac-proxy-metric",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/tls/private",
                                        "name": "secret-alertmanager-main-tls",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/tls/client",
                                        "name": "metrics-client-ca",
                                        "readOnly": true
                                    }
                                ]
                            },
                            {
                                "args": [
                                    "--insecure-listen-address=127.0.0.1:9096",
                                    "--upstream=http://127.0.0.1:9093",
                                    "--label=namespace",
                                    "--error-on-replace"
                                ],
                                "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:68d39341b7b34498859118847deb8e8f1d624927bfa84f7a6a5aaacc452d688a",
                                "imagePullPolicy": "IfNotPresent",
                                "name": "prom-label-proxy",
                                "resources": {
                                    "requests": {
                                        "cpu": "1m",
                                        "memory": "20Mi"
                                    }
                                },
                                "terminationMessagePath": "/dev/termination-log",
                                "terminationMessagePolicy": "FallbackToLogsOnError"
                            }
                        ],
                        "dnsPolicy": "ClusterFirst",
                        "initContainers": [
                            {
                                "args": [
                                    "--watch-interval=0",
                                    "--listen-address=:8081",
                                    "--config-file=/etc/alertmanager/config/alertmanager.yaml.gz",
                                    "--config-envsubst-file=/etc/alertmanager/config_out/alertmanager.env.yaml",
                                    "--watched-dir=/etc/alertmanager/config",
                                    "--watched-dir=/etc/alertmanager/secrets/alertmanager-main-tls",
                                    "--watched-dir=/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy",
                                    "--watched-dir=/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-metric",
                                    "--watched-dir=/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-web"
                                ],
                                "command": [
                                    "/bin/prometheus-config-reloader"
                                ],
                                "env": [
                                    {
                                        "name": "POD_NAME",
                                        "valueFrom": {
                                            "fieldRef": {
                                                "apiVersion": "v1",
                                                "fieldPath": "metadata.name"
                                            }
                                        }
                                    },
                                    {
                                        "name": "SHARD",
                                        "value": "-1"
                                    }
                                ],
                                "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b3bd3daa79dba6bf63f8be5ed9856ba8c8041f36b16d73c4b920cfec7c4b2fd4",
                                "imagePullPolicy": "IfNotPresent",
                                "name": "init-config-reloader",
                                "ports": [
                                    {
                                        "containerPort": 8081,
                                        "name": "reloader-web",
                                        "protocol": "TCP"
                                    }
                                ],
                                "resources": {
                                    "requests": {
                                        "cpu": "1m",
                                        "memory": "10Mi"
                                    }
                                },
                                "securityContext": {
                                    "allowPrivilegeEscalation": false,
                                    "capabilities": {
                                        "drop": [
                                            "ALL"
                                        ]
                                    },
                                    "readOnlyRootFilesystem": true
                                },
                                "terminationMessagePath": "/dev/termination-log",
                                "terminationMessagePolicy": "FallbackToLogsOnError",
                                "volumeMounts": [
                                    {
                                        "mountPath": "/etc/alertmanager/config",
                                        "name": "config-volume",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/alertmanager/config_out",
                                        "name": "config-out"
                                    },
                                    {
                                        "mountPath": "/etc/alertmanager/secrets/alertmanager-main-tls",
                                        "name": "secret-alertmanager-main-tls",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy",
                                        "name": "secret-alertmanager-kube-rbac-proxy",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-metric",
                                        "name": "secret-alertmanager-kube-rbac-proxy-metric",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-web",
                                        "name": "secret-alertmanager-kube-rbac-proxy-web",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/alertmanager/web_config/web-config.yaml",
                                        "name": "web-config",
                                        "readOnly": true,
                                        "subPath": "web-config.yaml"
                                    }
                                ]
                            }
                        ],
                        "nodeSelector": {
                            "kubernetes.io/os": "linux"
                        },
                        "priorityClassName": "system-cluster-critical",
                        "restartPolicy": "Always",
                        "schedulerName": "default-scheduler",
                        "securityContext": {
                            "fsGroup": 65534,
                            "runAsNonRoot": true,
                            "runAsUser": 65534
                        },
                        "serviceAccount": "alertmanager-main",
                        "serviceAccountName": "alertmanager-main",
                        "terminationGracePeriodSeconds": 120,
                        "volumes": [
                            {
                                "name": "config-volume",
                                "secret": {
                                    "defaultMode": 420,
                                    "secretName": "alertmanager-main-generated"
                                }
                            },
                            {
                                "name": "tls-assets",
                                "projected": {
                                    "defaultMode": 420,
                                    "sources": [
                                        {
                                            "secret": {
                                                "name": "alertmanager-main-tls-assets-0"
                                            }
                                        }
                                    ]
                                }
                            },
                            {
                                "emptyDir": {
                                    "medium": "Memory"
                                },
                                "name": "config-out"
                            },
                            {
                                "name": "secret-alertmanager-main-tls",
                                "secret": {
                                    "defaultMode": 420,
                                    "secretName": "alertmanager-main-tls"
                                }
                            },
                            {
                                "name": "secret-alertmanager-kube-rbac-proxy",
                                "secret": {
                                    "defaultMode": 420,
                                    "secretName": "alertmanager-kube-rbac-proxy"
                                }
                            },
                            {
                                "name": "secret-alertmanager-kube-rbac-proxy-metric",
                                "secret": {
                                    "defaultMode": 420,
                                    "secretName": "alertmanager-kube-rbac-proxy-metric"
                                }
                            },
                            {
                                "name": "secret-alertmanager-kube-rbac-proxy-web",
                                "secret": {
                                    "defaultMode": 420,
                                    "secretName": "alertmanager-kube-rbac-proxy-web"
                                }
                            },
                            {
                                "name": "web-config",
                                "secret": {
                                    "defaultMode": 420,
                                    "secretName": "alertmanager-main-web-config"
                                }
                            },
                            {
                                "name": "cluster-tls-config",
                                "secret": {
                                    "defaultMode": 420,
                                    "secretName": "alertmanager-main-cluster-tls-config"
                                }
                            },
                            {
                                "emptyDir": {},
                                "name": "alertmanager-main-db"
                            },
                            {
                                "configMap": {
                                    "defaultMode": 420,
                                    "name": "metrics-client-ca"
                                },
                                "name": "metrics-client-ca"
                            },
                            {
                                "configMap": {
                                    "defaultMode": 420,
                                    "items": [
                                        {
                                            "key": "ca-bundle.crt",
                                            "path": "tls-ca-bundle.pem"
                                        }
                                    ],
                                    "name": "alertmanager-trusted-ca-bundle"
                                },
                                "name": "alertmanager-trusted-ca-bundle"
                            }
                        ]
                    }
                },
                "updateStrategy": {
                    "type": "RollingUpdate"
                }
            },
            "status": {
                "availableReplicas": 2,
                "collisionCount": 0,
                "currentReplicas": 2,
                "currentRevision": "alertmanager-main-5c47cdbd65",
                "observedGeneration": 2,
                "readyReplicas": 2,
                "replicas": 2,
                "updateRevision": "alertmanager-main-5c47cdbd65",
                "updatedReplicas": 2
            }
        },
        {
            "apiVersion": "apps/v1",
            "kind": "StatefulSet",
            "metadata": {
                "annotations": {
                    "operator.prometheus.io/controller-id": "openshift-monitoring/prometheus-operator",
                    "prometheus-operator-input-hash": "12699825056486378717"
                },
                "creationTimestamp": "2026-04-25T08:08:51Z",
                "generation": 2,
                "labels": {
                    "app.kubernetes.io/component": "prometheus",
                    "app.kubernetes.io/instance": "k8s",
                    "app.kubernetes.io/managed-by": "cluster-monitoring-operator",
                    "app.kubernetes.io/name": "prometheus",
                    "app.kubernetes.io/part-of": "openshift-monitoring",
                    "app.kubernetes.io/version": "3.2.1",
                    "managed-by": "prometheus-operator",
                    "operator.prometheus.io/mode": "server",
                    "operator.prometheus.io/name": "k8s",
                    "operator.prometheus.io/shard": "0"
                },
                "name": "prometheus-k8s",
                "namespace": "openshift-monitoring",
                "ownerReferences": [
                    {
                        "apiVersion": "monitoring.coreos.com/v1",
                        "blockOwnerDeletion": true,
                        "controller": true,
                        "kind": "Prometheus",
                        "name": "k8s",
                        "uid": "da8cc91a-6b4b-4bda-9995-8749d16c672b"
                    }
                ],
                "resourceVersion": "15741",
                "uid": "a29ded1f-270b-466d-a58d-336eaf4072c9"
            },
            "spec": {
                "persistentVolumeClaimRetentionPolicy": {
                    "whenDeleted": "Retain",
                    "whenScaled": "Retain"
                },
                "podManagementPolicy": "Parallel",
                "replicas": 2,
                "revisionHistoryLimit": 10,
                "selector": {
                    "matchLabels": {
                        "app.kubernetes.io/instance": "k8s",
                        "app.kubernetes.io/managed-by": "prometheus-operator",
                        "app.kubernetes.io/name": "prometheus",
                        "operator.prometheus.io/name": "k8s",
                        "operator.prometheus.io/shard": "0",
                        "prometheus": "k8s"
                    }
                },
                "serviceName": "prometheus-operated",
                "template": {
                    "metadata": {
                        "annotations": {
                            "kubectl.kubernetes.io/default-container": "prometheus",
                            "openshift.io/required-scc": "nonroot",
                            "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}"
                        },
                        "creationTimestamp": null,
                        "labels": {
                            "app.kubernetes.io/component": "prometheus",
                            "app.kubernetes.io/instance": "k8s",
                            "app.kubernetes.io/managed-by": "prometheus-operator",
                            "app.kubernetes.io/name": "prometheus",
                            "app.kubernetes.io/part-of": "openshift-monitoring",
                            "app.kubernetes.io/version": "3.2.1",
                            "operator.prometheus.io/name": "k8s",
                            "operator.prometheus.io/shard": "0",
                            "prometheus": "k8s"
                        }
                    },
                    "spec": {
                        "affinity": {
                            "podAntiAffinity": {
                                "requiredDuringSchedulingIgnoredDuringExecution": [
                                    {
                                        "labelSelector": {
                                            "matchLabels": {
                                                "app.kubernetes.io/component": "prometheus",
                                                "app.kubernetes.io/instance": "k8s",
                                                "app.kubernetes.io/name": "prometheus",
                                                "app.kubernetes.io/part-of": "openshift-monitoring"
                                            }
                                        },
                                        "namespaces": [
                                            "openshift-monitoring"
                                        ],
                                        "topologyKey": "kubernetes.io/hostname"
                                    }
                                ]
                            }
                        },
                        "automountServiceAccountToken": true,
                        "containers": [
                            {
                                "args": [
                                    "--web.console.templates=/etc/prometheus/consoles",
                                    "--web.console.libraries=/etc/prometheus/console_libraries",
                                    "--config.file=/etc/prometheus/config_out/prometheus.env.yaml",
                                    "--web.enable-lifecycle",
                                    "--enable-feature=delayed-compaction",
                                    "--web.external-url=https://console-openshift-console.apps.rosa.kx-5d206a0529.sg2q.p3.openshiftapps.com/monitoring",
                                    "--web.route-prefix=/",
                                    "--web.listen-address=127.0.0.1:9090",
                                    "--storage.tsdb.retention.time=15d",
                                    "--storage.tsdb.path=/prometheus",
                                    "--web.config.file=/etc/prometheus/web_config/web-config.yaml",
                                    "--scrape.timestamp-tolerance=15ms"
                                ],
                                "env": [
                                    {
                                        "name": "HTTP_PROXY"
                                    },
                                    {
                                        "name": "HTTPS_PROXY"
                                    },
                                    {
                                        "name": "NO_PROXY"
                                    }
                                ],
                                "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:46c2c396ca651699738c3f26b79b10af2922123dd27c2e32382d2a31a87e92c7",
                                "imagePullPolicy": "IfNotPresent",
                                "livenessProbe": {
                                    "exec": {
                                        "command": [
                                            "sh",
                                            "-c",
                                            "if [ -x \"$(command -v curl)\" ]; then exec curl --fail http://localhost:9090/-/healthy; elif [ -x \"$(command -v wget)\" ]; then exec wget -q -O /dev/null http://localhost:9090/-/healthy; else exit 1; fi"
                                        ]
                                    },
                                    "failureThreshold": 6,
                                    "periodSeconds": 5,
                                    "successThreshold": 1,
                                    "timeoutSeconds": 3
                                },
                                "name": "prometheus",
                                "readinessProbe": {
                                    "exec": {
                                        "command": [
                                            "sh",
                                            "-c",
                                            "if [ -x \"$(command -v curl)\" ]; then exec curl --fail http://localhost:9090/-/ready; elif [ -x \"$(command -v wget)\" ]; then exec wget -q -O /dev/null http://localhost:9090/-/ready; else exit 1; fi"
                                        ]
                                    },
                                    "failureThreshold": 3,
                                    "periodSeconds": 5,
                                    "successThreshold": 1,
                                    "timeoutSeconds": 3
                                },
                                "resources": {
                                    "requests": {
                                        "cpu": "70m",
                                        "memory": "1Gi"
                                    }
                                },
                                "securityContext": {
                                    "allowPrivilegeEscalation": false,
                                    "capabilities": {
                                        "drop": [
                                            "ALL"
                                        ]
                                    },
                                    "readOnlyRootFilesystem": true
                                },
                                "startupProbe": {
                                    "exec": {
                                        "command": [
                                            "sh",
                                            "-c",
                                            "if [ -x \"$(command -v curl)\" ]; then exec curl --fail http://localhost:9090/-/ready; elif [ -x \"$(command -v wget)\" ]; then exec wget -q -O /dev/null http://localhost:9090/-/ready; else exit 1; fi"
                                        ]
                                    },
                                    "failureThreshold": 60,
                                    "periodSeconds": 60,
                                    "successThreshold": 1,
                                    "timeoutSeconds": 3
                                },
                                "terminationMessagePath": "/dev/termination-log",
                                "terminationMessagePolicy": "FallbackToLogsOnError",
                                "volumeMounts": [
                                    {
                                        "mountPath": "/etc/pki/ca-trust/extracted/pem/",
                                        "name": "prometheus-trusted-ca-bundle"
                                    },
                                    {
                                        "mountPath": "/etc/prometheus/config_out",
                                        "name": "config-out",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/prometheus/certs",
                                        "name": "tls-assets",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/prometheus",
                                        "name": "prometheus-k8s-db"
                                    },
                                    {
                                        "mountPath": "/etc/prometheus/secrets/prometheus-k8s-tls",
                                        "name": "secret-prometheus-k8s-tls",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/prometheus/secrets/prometheus-k8s-thanos-sidecar-tls",
                                        "name": "secret-prometheus-k8s-thanos-sidecar-tls",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/prometheus/secrets/kube-rbac-proxy",
                                        "name": "secret-kube-rbac-proxy",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/prometheus/secrets/prometheus-k8s-kube-rbac-proxy-web",
                                        "name": "secret-prometheus-k8s-kube-rbac-proxy-web",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/prometheus/secrets/metrics-client-certs",
                                        "name": "secret-metrics-client-certs",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/prometheus/configmaps/serving-certs-ca-bundle",
                                        "name": "configmap-serving-certs-ca-bundle",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/prometheus/configmaps/kubelet-serving-ca-bundle",
                                        "name": "configmap-kubelet-serving-ca-bundle",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/prometheus/configmaps/metrics-client-ca",
                                        "name": "configmap-metrics-client-ca",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/prometheus/rules/prometheus-k8s-rulefiles-0",
                                        "name": "prometheus-k8s-rulefiles-0"
                                    },
                                    {
                                        "mountPath": "/etc/prometheus/web_config/web-config.yaml",
                                        "name": "web-config",
                                        "readOnly": true,
                                        "subPath": "web-config.yaml"
                                    }
                                ]
                            },
                            {
                                "args": [
                                    "--listen-address=localhost:8080",
                                    "--web-config-file=/etc/prometheus/web_config/web-config.yaml",
                                    "--reload-url=http://localhost:9090/-/reload",
                                    "--config-file=/etc/prometheus/config/prometheus.yaml.gz",
                                    "--config-envsubst-file=/etc/prometheus/config_out/prometheus.env.yaml",
                                    "--watched-dir=/etc/prometheus/rules/prometheus-k8s-rulefiles-0"
                                ],
                                "command": [
                                    "/bin/prometheus-config-reloader"
                                ],
                                "env": [
                                    {
                                        "name": "POD_NAME",
                                        "valueFrom": {
                                            "fieldRef": {
                                                "apiVersion": "v1",
                                                "fieldPath": "metadata.name"
                                            }
                                        }
                                    },
                                    {
                                        "name": "SHARD",
                                        "value": "0"
                                    }
                                ],
                                "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b3bd3daa79dba6bf63f8be5ed9856ba8c8041f36b16d73c4b920cfec7c4b2fd4",
                                "imagePullPolicy": "IfNotPresent",
                                "name": "config-reloader",
                                "resources": {
                                    "requests": {
                                        "cpu": "1m",
                                        "memory": "10Mi"
                                    }
                                },
                                "securityContext": {
                                    "allowPrivilegeEscalation": false,
                                    "capabilities": {
                                        "drop": [
                                            "ALL"
                                        ]
                                    },
                                    "readOnlyRootFilesystem": true
                                },
                                "terminationMessagePath": "/dev/termination-log",
                                "terminationMessagePolicy": "FallbackToLogsOnError",
                                "volumeMounts": [
                                    {
                                        "mountPath": "/etc/prometheus/config",
                                        "name": "config"
                                    },
                                    {
                                        "mountPath": "/etc/prometheus/config_out",
                                        "name": "config-out"
                                    },
                                    {
                                        "mountPath": "/etc/prometheus/web_config/web-config.yaml",
                                        "name": "web-config",
                                        "readOnly": true,
                                        "subPath": "web-config.yaml"
                                    },
                                    {
                                        "mountPath": "/etc/prometheus/rules/prometheus-k8s-rulefiles-0",
                                        "name": "prometheus-k8s-rulefiles-0"
                                    }
                                ]
                            },
                            {
                                "args": [
                                    "sidecar",
                                    "--prometheus.url=http://localhost:9090/",
                                    "--tsdb.path=/prometheus",
                                    "--http-address=127.0.0.1:10902",
                                    "--grpc-server-tls-cert=/etc/tls/grpc/server.crt",
                                    "--grpc-server-tls-key=/etc/tls/grpc/server.key",
                                    "--grpc-server-tls-client-ca=/etc/tls/grpc/ca.crt"
                                ],
                                "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d74692f1f8ed2943454038de065291d8c0f628c7d6606ac5d443b043d0822a5f",
                                "imagePullPolicy": "IfNotPresent",
                                "name": "thanos-sidecar",
                                "ports": [
                                    {
                                        "containerPort": 10902,
                                        "name": "http",
                                        "protocol": "TCP"
                                    },
                                    {
                                        "containerPort": 10901,
                                        "name": "grpc",
                                        "protocol": "TCP"
                                    }
                                ],
                                "resources": {
                                    "requests": {
                                        "cpu": "1m",
                                        "memory": "25Mi"
                                    }
                                },
                                "securityContext": {
                                    "allowPrivilegeEscalation": false,
                                    "capabilities": {
                                        "drop": [
                                            "ALL"
                                        ]
                                    },
                                    "readOnlyRootFilesystem": true
                                },
                                "terminationMessagePath": "/dev/termination-log",
                                "terminationMessagePolicy": "FallbackToLogsOnError",
                                "volumeMounts": [
                                    {
                                        "mountPath": "/etc/tls/grpc",
                                        "name": "secret-grpc-tls"
                                    },
                                    {
                                        "mountPath": "/etc/thanos/config",
                                        "name": "thanos-prometheus-http-client-file"
                                    }
                                ]
                            },
                            {
                                "args": [
                                    "--secure-listen-address=0.0.0.0:9091",
                                    "--upstream=http://127.0.0.1:9090",
                                    "--config-file=/etc/kube-rbac-proxy/config.yaml",
                                    "--tls-cert-file=/etc/tls/private/tls.crt",
                                    "--tls-private-key-file=/etc/tls/private/tls.key",
                                    "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
                                    "--ignore-paths=/-/healthy,/-/ready",
                                    "--tls-min-version=VersionTLS12"
                                ],
                                "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ccdda82b4adfa8ee4a84b3bad19693be6a42a9881a7b83788d835912129c49a4",
                                "imagePullPolicy": "IfNotPresent",
                                "name": "kube-rbac-proxy-web",
                                "ports": [
                                    {
                                        "containerPort": 9091,
                                        "name": "web",
                                        "protocol": "TCP"
                                    }
                                ],
                                "resources": {
                                    "requests": {
                                        "cpu": "1m",
                                        "memory": "15Mi"
                                    }
                                },
                                "securityContext": {
                                    "allowPrivilegeEscalation": false,
                                    "capabilities": {
                                        "drop": [
                                            "ALL"
                                        ]
                                    }
                                },
                                "terminationMessagePath": "/dev/termination-log",
                                "terminationMessagePolicy": "FallbackToLogsOnError",
                                "volumeMounts": [
                                    {
                                        "mountPath": "/etc/tls/private",
                                        "name": "secret-prometheus-k8s-tls"
                                    },
                                    {
                                        "mountPath": "/etc/kube-rbac-proxy",
                                        "name": "secret-prometheus-k8s-kube-rbac-proxy-web"
                                    }
                                ]
                            },
                            {
                                "args": [
                                    "--secure-listen-address=0.0.0.0:9092",
                                    "--upstream=http://127.0.0.1:9090",
                                    "--allow-paths=/metrics,/federate",
                                    "--config-file=/etc/kube-rbac-proxy/config.yaml",
                                    "--tls-cert-file=/etc/tls/private/tls.crt",
                                    "--tls-private-key-file=/etc/tls/private/tls.key",
                                    "--client-ca-file=/etc/tls/client/client-ca.crt",
                                    "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
                                    "--tls-min-version=VersionTLS12"
                                ],
                                "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ccdda82b4adfa8ee4a84b3bad19693be6a42a9881a7b83788d835912129c49a4",
                                "imagePullPolicy": "IfNotPresent",
                                "name": "kube-rbac-proxy",
                                "ports": [
                                    {
                                        "containerPort": 9092,
                                        "name": "metrics",
                                        "protocol": "TCP"
                                    }
                                ],
                                "resources": {
                                    "requests": {
                                        "cpu": "1m",
                                        "memory": "15Mi"
                                    }
                                },
                                "terminationMessagePath": "/dev/termination-log",
                                "terminationMessagePolicy": "FallbackToLogsOnError",
                                "volumeMounts": [
                                    {
                                        "mountPath": "/etc/tls/private",
                                        "name": "secret-prometheus-k8s-tls"
                                    },
                                    {
                                        "mountPath": "/etc/tls/client",
                                        "name": "configmap-metrics-client-ca",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/kube-rbac-proxy",
                                        "name": "secret-kube-rbac-proxy"
                                    }
                                ]
                            },
                            {
                                "args": [
                                    "--secure-listen-address=[$(POD_IP)]:10903",
                                    "--upstream=http://127.0.0.1:10902",
                                    "--tls-cert-file=/etc/tls/private/tls.crt",
                                    "--tls-private-key-file=/etc/tls/private/tls.key",
                                    "--client-ca-file=/etc/tls/client/client-ca.crt",
                                    "--config-file=/etc/kube-rbac-proxy/config.yaml",
                                    "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
                                    "--allow-paths=/metrics",
                                    "--tls-min-version=VersionTLS12"
                                ],
                                "env": [
                                    {
                                        "name": "POD_IP",
                                        "valueFrom": {
                                            "fieldRef": {
                                                "apiVersion": "v1",
                                                "fieldPath": "status.podIP"
                                            }
                                        }
                                    }
                                ],
                                "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ccdda82b4adfa8ee4a84b3bad19693be6a42a9881a7b83788d835912129c49a4",
                                "imagePullPolicy": "IfNotPresent",
                                "name": "kube-rbac-proxy-thanos",
                                "ports": [
                                    {
                                        "containerPort": 10903,
                                        "name": "thanos-proxy",
                                        "protocol": "TCP"
                                    }
                                ],
                                "resources": {
                                    "requests": {
                                        "cpu": "1m",
                                        "memory": "10Mi"
                                    }
                                },
                                "terminationMessagePath": "/dev/termination-log",
                                "terminationMessagePolicy": "FallbackToLogsOnError",
                                "volumeMounts": [
                                    {
                                        "mountPath": "/etc/tls/private",
                                        "name": "secret-prometheus-k8s-thanos-sidecar-tls",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/kube-rbac-proxy",
                                        "name": "secret-kube-rbac-proxy",
                                        "readOnly": true
                                    },
                                    {
                                        "mountPath": "/etc/tls/client",
                                        "name": "configmap-metrics-client-ca",
                                        "readOnly": true
                                    }
                                ]
                            }
                        ],
                        "dnsPolicy": "ClusterFirst",
                        "initContainers": [
                            {
                                "args": [
                                    "--watch-interval=0",
                                    "--listen-address=:8081",
                                    "--config-file=/etc/prometheus/config/prometheus.yaml.gz",
                                    "--config-envsubst-file=/etc/prometheus/config_out/prometheus.env.yaml",
                                    "--watched-dir=/etc/prometheus/rules/prometheus-k8s-rulefiles-0"
                                ],
                                "command": [
                                    "/bin/prometheus-config-reloader"
                                ],
                                "env": [
                                    {
                                        "name": "POD_NAME",
                                        "valueFrom": {
                                            "fieldRef": {
                                                "apiVersion": "v1",
                                                "fieldPath": "metadata.name"
                                            }
                                        }
                                    },
                                    {
                                        "name": "SHARD",
                                        "value": "0"
                                    }
                                ],
                                "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b3bd3daa79dba6bf63f8be5ed9856ba8c8041f36b16d73c4b920cfec7c4b2fd4",
                                "imagePullPolicy": "IfNotPresent",
                                "name": "init-config-reloader",
                                "ports": [
                                    {
                                        "containerPort": 8081,
                                        "name": "reloader-web",
                                        "protocol": "TCP"
                                    }
                                ],
                                "resources": {
                                    "requests": {
                                        "cpu": "1m",
                                        "memory": "10Mi"
                                    }
                                },
                                "securityContext": {
                                    "allowPrivilegeEscalation": false,
                                    "capabilities": {
                                        "drop": [
                                            "ALL"
                                        ]
                                    },
                                    "readOnlyRootFilesystem": true
                                },
                                "terminationMessagePath": "/dev/termination-log",
                                "terminationMessagePolicy": "FallbackToLogsOnError",
                                "volumeMounts": [
                                    {
                                        "mountPath": "/etc/prometheus/config",
                                        "name": "config"
                                    },
                                    {
                                        "mountPath": "/etc/prometheus/config_out",
                                        "name": "config-out"
                                    },
                                    {
                                        "mountPath": "/etc/prometheus/web_config/web-config.yaml",
                                        "name": "web-config",
                                        "readOnly": true,
                                        "subPath": "web-config.yaml"
                                    },
                                    {
                                        "mountPath": "/etc/prometheus/rules/prometheus-k8s-rulefiles-0",
                                        "name": "prometheus-k8s-rulefiles-0"
                                    }
                                ]
                            }
                        ],
                        "nodeSelector": {
                            "kubernetes.io/os": "linux"
                        },
                        "priorityClassName": "system-cluster-critical",
                        "restartPolicy": "Always",
                        "schedulerName": "default-scheduler",
                        "securityContext": {
                            "fsGroup": 65534,
                            "runAsNonRoot": true,
                            "runAsUser": 65534
                        },
                        "serviceAccount": "prometheus-k8s",
                        "serviceAccountName": "prometheus-k8s",
                        "shareProcessNamespace": false,
                        "terminationGracePeriodSeconds": 600,
                        "volumes": [
                            {
                                "name": "config",
                                "secret": {
                                    "defaultMode": 420,
                                    "secretName": "prometheus-k8s"
                                }
                            },
                            {
                                "name": "tls-assets",
                                "projected": {
                                    "defaultMode": 420,
                                    "sources": [
                                        {
                                            "secret": {
                                                "name": "prometheus-k8s-tls-assets-0"
                                            }
                                        }
                                    ]
                                }
                            },
                            {
                                "emptyDir": {
                                    "medium": "Memory"
                                },
                                "name": "config-out"
                            },
                            {
                                "name": "secret-prometheus-k8s-tls",
                                "secret": {
                                    "defaultMode": 420,
                                    "secretName": "prometheus-k8s-tls"
                                }
                            },
                            {
                                "name": "secret-prometheus-k8s-thanos-sidecar-tls",
                                "secret": {
                                    "defaultMode": 420,
                                    "secretName": "prometheus-k8s-thanos-sidecar-tls"
                                }
                            },
                            {
                                "name": "secret-kube-rbac-proxy",
                                "secret": {
                                    "defaultMode": 420,
                                    "secretName": "kube-rbac-proxy"
                                }
                            },
                            {
                                "name": "secret-prometheus-k8s-kube-rbac-proxy-web",
                                "secret": {
                                    "defaultMode": 420,
                                    "secretName": "prometheus-k8s-kube-rbac-proxy-web"
                                }
                            },
                            {
                                "name": "secret-metrics-client-certs",
                                "secret": {
                                    "defaultMode": 420,
                                    "secretName": "metrics-client-certs"
                                }
                            },
                            {
                                "configMap": {
                                    "defaultMode": 420,
                                    "name": "serving-certs-ca-bundle"
                                },
                                "name": "configmap-serving-certs-ca-bundle"
                            },
                            {
                                "configMap": {
                                    "defaultMode": 420,
                                    "name": "kubelet-serving-ca-bundle"
                                },
                                "name": "configmap-kubelet-serving-ca-bundle"
                            },
                            {
                                "configMap": {
                                    "defaultMode": 420,
                                    "name": "metrics-client-ca"
                                },
                                "name": "configmap-metrics-client-ca"
                            },
                            {
                                "configMap": {
                                    "defaultMode": 420,
                                    "name": "prometheus-k8s-rulefiles-0"
                                },
                                "name": "prometheus-k8s-rulefiles-0"
                            },
                            {
                                "name": "web-config",
                                "secret": {
                                    "defaultMode": 420,
                                    "secretName": "prometheus-k8s-web-config"
                                }
                            },
                            {
                                "name": "thanos-prometheus-http-client-file",
                                "secret": {
                                    "defaultMode": 420,
                                    "secretName": "prometheus-k8s-thanos-prometheus-http-client-file"
                                }
                            },
                            {
                                "emptyDir": {},
                                "name": "prometheus-k8s-db"
                            },
                            {
                                "configMap": {
                                    "defaultMode": 420,
                                    "items": [
                                        {
                                            "key": "ca-bundle.crt",
                                            "path": "tls-ca-bundle.pem"
                                        }
                                    ],
                                    "name": "prometheus-trusted-ca-bundle"
                                },
                                "name": "prometheus-trusted-ca-bundle"
                            },
                            {
                                "name": "secret-grpc-tls",
                                "secret": {
                                    "defaultMode": 420,
                                    "secretName": "prometheus-k8s-grpc-tls-6ah5jr6ojk80"
                                }
                            }
                        ]
                    }
                },
                "updateStrategy": {
                    "type": "RollingUpdate"
                }
            },
            "status": {
                "availableReplicas": 2,
                "collisionCount": 0,
                "currentReplicas": 2,
                "currentRevision": "prometheus-k8s-6dd956b59",
                "observedGeneration": 2,
                "readyReplicas": 2,
                "replicas": 2,
                "updateRevision": "prometheus-k8s-6dd956b59",
                "updatedReplicas": 2
            }
        },
        {
            "apiVersion": "apps/v1",
            "kind": "StatefulSet",
            "metadata": {
                "creationTimestamp": "2026-04-25T08:16:50Z",
                "generation": 1,
                "labels": {
                    "app.kubernetes.io/component": "application-controller",
                    "app.kubernetes.io/managed-by": "tssc-gitops",
                    "app.kubernetes.io/name": "tssc-gitops-application-controller",
                    "app.kubernetes.io/part-of": "argocd"
                },
                "name": "tssc-gitops-application-controller",
                "namespace": "tssc-gitops",
                "ownerReferences": [
                    {
                        "apiVersion": "argoproj.io/v1beta1",
                        "blockOwnerDeletion": true,
                        "controller": true,
                        "kind": "ArgoCD",
                        "name": "tssc-gitops",
                        "uid": "fa7d5e6a-e468-4cc0-b8b5-1c1bc9675167"
                    }
                ],
                "resourceVersion": "21093",
                "uid": "11767f7b-d6f0-4ae9-a0ef-231f062953f4"
            },
            "spec": {
                "persistentVolumeClaimRetentionPolicy": {
                    "whenDeleted": "Retain",
                    "whenScaled": "Retain"
                },
                "podManagementPolicy": "OrderedReady",
                "replicas": 1,
                "revisionHistoryLimit": 10,
                "selector": {
                    "matchLabels": {
                        "app.kubernetes.io/name": "tssc-gitops-application-controller"
                    }
                },
                "serviceName": "tssc-gitops-application-controller",
                "template": {
                    "metadata": {
                        "creationTimestamp": null,
                        "labels": {
                            "app.kubernetes.io/name": "tssc-gitops-application-controller"
                        }
                    },
                    "spec": {
                        "affinity": {
                            "podAntiAffinity": {
                                "preferredDuringSchedulingIgnoredDuringExecution": [
                                    {
                                        "podAffinityTerm": {
                                            "labelSelector": {
                                                "matchLabels": {
                                                    "app.kubernetes.io/name": "tssc-gitops-argocd-application-controller"
                                                }
                                            },
                                            "topologyKey": "kubernetes.io/hostname"
                                        },
                                        "weight": 100
                                    },
                                    {
                                        "podAffinityTerm": {
                                            "labelSelector": {
                                                "matchLabels": {
                                                    "app.kubernetes.io/part-of": "argocd"
                                                }
                                            },
                                            "topologyKey": "kubernetes.io/hostname"
                                        },
                                        "weight": 5
                                    }
                                ]
                            }
                        },
                        "containers": [
                            {
                                "command": [
                                    "argocd-application-controller",
                                    "--operation-processors",
                                    "10",
                                    "--redis",
                                    "tssc-gitops-redis.tssc-gitops.svc.cluster.local:6379",
                                    "--repo-server",
                                    "tssc-gitops-repo-server.tssc-gitops.svc.cluster.local:8081",
                                    "--status-processors",
                                    "20",
                                    "--kubectl-parallelism-limit",
                                    "10",
                                    "--loglevel",
                                    "info",
                                    "--logformat",
                                    "text",
                                    "--persist-resource-health"
                                ],
                                "env": [
                                    {
                                        "name": "ARGOCD_CONTROLLER_RESOURCE_HEALTH_PERSIST",
                                        "valueFrom": {
                                            "configMapKeyRef": {
                                                "key": "controller.resource.health.persist",
                                                "name": "argocd-cmd-params-cm"
                                            }
                                        }
                                    },
                                    {
                                        "name": "ARGOCD_RECONCILIATION_TIMEOUT",
                                        "valueFrom": {
                                            "configMapKeyRef": {
                                                "key": "timeout.reconciliation",
                                                "name": "argocd-cm",
                                                "optional": true
                                            }
                                        }
                                    },
                                    {
                                        "name": "HOME",
                                        "value": "/home/argocd"
                                    },
                                    {
                                        "name": "REDIS_PASSWORD",
                                        "valueFrom": {
                                            "secretKeyRef": {
                                                "key": "admin.password",
                                                "name": "tssc-gitops-redis-initial-password"
                                            }
                                        }
                                    }
                                ],
                                "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77",
                                "imagePullPolicy": "IfNotPresent",
                                "name": "argocd-application-controller",
                                "ports": [
                                    {
                                        "containerPort": 8082,
                                        "protocol": "TCP"
                                    }
                                ],
                                "readinessProbe": {
                                    "failureThreshold": 3,
                                    "httpGet": {
                                        "path": "/healthz",
                                        "port": 8082,
                                        "scheme": "HTTP"
                                    },
                                    "initialDelaySeconds": 5,
                                    "periodSeconds": 10,
                                    "successThreshold": 1,
                                    "timeoutSeconds": 1
                                },
                                "resources": {
                                    "limits": {
                                        "memory": "6Gi"
                                    },
                                    "requests": {
                                        "memory": "3Gi"
                                    }
                                },
                                "securityContext": {
                                    "allowPrivilegeEscalation": false,
                                    "capabilities": {
                                        "drop": [
                                            "ALL"
                                        ]
                                    },
                                    "readOnlyRootFilesystem": true,
                                    "runAsNonRoot": true,
                                    "seccompProfile": {
                                        "type": "RuntimeDefault"
                                    }
                                },
                                "terminationMessagePath": "/dev/termination-log",
                                "terminationMessagePolicy": "File",
                                "volumeMounts": [
                                    {
                                        "mountPath": "/app/config/controller/tls",
                                        "name": "argocd-repo-server-tls"
                                    },
                                    {
                                        "mountPath": "/app/config/controller/tls/redis",
                                        "name": "argocd-operator-redis-tls"
                                    },
                                    {
                                        "mountPath": "/home/argocd",
                                        "name": "argocd-home"
                                    },
                                    {
                                        "mountPath": "/home/argocd/params",
                                        "name": "argocd-cmd-params-cm"
                                    },
                                    {
                                        "mountPath": "/tmp",
                                        "name": "argocd-application-controller-tmp"
                                    }
                                ]
                            }
                        ],
                        "dnsPolicy": "ClusterFirst",
                        "nodeSelector": {
                            "kubernetes.io/os": "linux"
                        },
                        "restartPolicy": "Always",
                        "schedulerName": "default-scheduler",
                        "securityContext": {
                            "seccompProfile": {
                                "type": "RuntimeDefault"
                            }
                        },
                        "serviceAccount": "tssc-gitops-argocd-application-controller",
                        "serviceAccountName": "tssc-gitops-argocd-application-controller",
                        "terminationGracePeriodSeconds": 30,
                        "volumes": [
                            {
                                "name": "argocd-repo-server-tls",
                                "secret": {
                                    "defaultMode": 420,
                                    "optional": true,
                                    "secretName": "argocd-repo-server-tls"
                                }
                            },
                            {
                                "name": "argocd-operator-redis-tls",
                                "secret": {
                                    "defaultMode": 420,
                                    "optional": true,
                                    "secretName": "argocd-operator-redis-tls"
                                }
                            },
                            {
                                "emptyDir": {},
                                "name": "argocd-home"
                            },
                            {
                                "configMap": {
                                    "defaultMode": 420,
                                    "items": [
                                        {
                                            "key": "controller.profile.enabled",
                                            "path": "profiler.enabled"
                                        },
                                        {
                                            "key": "controller.resource.health.persist",
                                            "path": "controller.resource.health.persist"
                                        }
                                    ],
                                    "name": "argocd-cmd-params-cm",
                                    "optional": true
                                },
                                "name": "argocd-cmd-params-cm"
                            },
                            {
                                "emptyDir": {},
                                "name": "argocd-application-controller-tmp"
                            }
                        ]
                    }
                },
                "updateStrategy": {
                    "rollingUpdate": {
                        "partition": 0
                    },
                    "type": "RollingUpdate"
                }
            },
            "status": {
                "availableReplicas": 1,
                "collisionCount": 0,
                "currentReplicas": 1,
                "currentRevision": "tssc-gitops-application-controller-7b8d4dd45c",
                "observedGeneration": 1,
                "readyReplicas": 1,
                "replicas": 1,
                "updateRevision": "tssc-gitops-application-controller-7b8d4dd45c",
                "updatedReplicas": 1
            }
        }
    ],
    "kind": "List",
    "metadata": {
        "resourceVersion": ""
    }
}
