{ "apiVersion": "v1", "items": [ { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/liveness-port": "Keeping upstream configs", "ignore-check.kube-linter.io/readiness-port": "Keeping upstream configs" }, "creationTimestamp": "2026-04-24T15:30:40Z", "generation": 1, "labels": { "control-plane": "controller-manager", "pod-template-hash": "5bd6679b5d" }, "name": "build-service-controller-manager-5bd6679b5d", "namespace": "build-service", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "build-service-controller-manager", "uid": "50a10904-38f8-4611-a231-cc9e7b5a53e8" } ], "resourceVersion": "30790", "uid": "8fc857c9-e5b6-42b8-8b93-581bbd556e11" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "controller-manager", "pod-template-hash": "5bd6679b5d" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager", "pod-template-hash": "5bd6679b5d" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8443", "--leader-elect=false", "--health-probe-bind-address=:8081", "-webhook-config-path=/mnt/webhook-config.json" ], "command": [ "/manager" ], "image": "quay.io/konflux-ci/build-service:ca44d2b8386e0af3ce29d2dc2d639a4e8fae3199", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "1Gi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/ssl/certs/ca-custom-bundle.crt", "name": "trusted-ca", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/mnt", "name": "webhook-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "build-service-controller-manager", "serviceAccountName": "build-service-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "webhook-config.json", "path": "webhook-config.json" } ], "name": "webhook-config-44136fa355", "optional": true }, "name": "webhook-config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:26:10Z", "generation": 1, "labels": { "name": "cert-manager-operator", "pod-template-hash": "7846db775" }, "name": "cert-manager-operator-controller-manager-7846db775", "namespace": "cert-manager-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cert-manager-operator-controller-manager", "uid": "49b4687e-f633-4b1e-bf2e-05b39abb3318" } ], "resourceVersion": "20284", "uid": "d82f6e67-6ec7-4f34-a1d9-b14f7d106507" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "cert-manager-operator", "pod-template-hash": "7846db775" } }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"acme.cert-manager.io/v1\",\n \"kind\": \"Challenge\",\n \"metadata\": {\n \"name\": \"tls-cert-sample\",\n \"namespace\": \"default\"\n },\n \"spec\": {\n \"authorizationURL\": \"https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/XXXXX\",\n \"dnsName\": \"sample.dns.name\",\n \"issuerRef\": {\n \"kind\": \"Issuer\",\n \"name\": \"letsencrypt-staging\"\n },\n \"key\": \"XXX\",\n \"solver\": {\n \"dns01\": {\n \"route53\": {\n \"accessKeyID\": \"XXX\",\n \"hostedZoneID\": \"XXX\",\n \"region\": \"us-east-1\",\n \"secretAccessKeySecretRef\": {\n \"key\": \"awsSecretAccessKey\",\n \"name\": \"aws-secret\"\n }\n }\n },\n \"selector\": {\n \"dnsNames\": [\n \"sample.dns.name\"\n ]\n }\n },\n \"token\": \"XXX\",\n \"type\": \"DNS-01\",\n \"url\": \"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/XXXXXX/XXXXX\",\n \"wildcard\": false\n }\n },\n {\n \"apiVersion\": \"acme.cert-manager.io/v1\",\n \"kind\": \"Order\",\n \"metadata\": {\n \"annotations\": {\n \"cert-manager.io/certificate-name\": \"tls-cert\",\n \"cert-manager.io/certificate-revision\": \"1\",\n \"cert-manager.io/private-key-secret-name\": \"tls-cert-sample\"\n },\n \"name\": \"tls-cert-sample\",\n \"namespace\": \"default\"\n },\n \"spec\": {\n \"commonName\": \"sample.dns.name\",\n \"dnsNames\": [\n \"sample.dns.name\"\n ],\n \"issuerRef\": {\n \"kind\": \"Issuer\",\n \"name\": \"letsencrypt-staging\"\n },\n \"request\": \"XXX\"\n }\n },\n {\n \"apiVersion\": \"cert-manager.io/v1\",\n \"kind\": \"Certificate\",\n \"metadata\": {\n \"name\": \"selfsigned-ca\",\n \"namespace\": \"default\"\n },\n \"spec\": {\n \"commonName\": \"selfsigned-ca.dns.name\",\n \"isCA\": true,\n \"issuerRef\": {\n \"group\": \"cert-manager.io\",\n \"kind\": \"ClusterIssuer\",\n \"name\": \"ca-cluster-issuer\"\n },\n \"privateKey\": {\n \"algorithm\": \"ECDSA\",\n \"size\": 256\n },\n \"secretName\": \"ca-root-secret\"\n }\n },\n {\n \"apiVersion\": \"cert-manager.io/v1\",\n \"kind\": \"Certificate\",\n \"metadata\": {\n \"name\": \"tls-cert\",\n \"namespace\": \"default\"\n },\n \"spec\": {\n \"commonName\": \"sample.dns.name\",\n \"dnsNames\": [\n \"sample.dns.name\"\n ],\n \"isCA\": false,\n \"issuerRef\": {\n \"kind\": \"Issuer\",\n \"name\": \"letsencrypt-staging\"\n },\n \"secretName\": \"tls-cert\"\n }\n },\n {\n \"apiVersion\": \"cert-manager.io/v1\",\n \"kind\": \"CertificateRequest\",\n \"metadata\": {\n \"annotations\": {\n \"cert-manager.io/certificate-name\": \"tls-cert\",\n \"cert-manager.io/certificate-revision\": \"1\",\n \"cert-manager.io/private-key-secret-name\": \"tls-cert-sample\"\n },\n \"name\": \"tls-cert-sample\",\n \"namespace\": \"default\"\n },\n \"spec\": {\n \"groups\": [\n \"system:serviceaccounts\",\n \"system:serviceaccounts:cert-manager\",\n \"system:authenticated\"\n ],\n \"issuerRef\": {\n \"kind\": \"Issuer\",\n \"name\": \"letsencrypt-staging\"\n },\n \"request\": \"XXX\",\n \"username\": \"system:serviceaccount:cert-manager:cert-manager\"\n }\n },\n {\n \"apiVersion\": \"cert-manager.io/v1\",\n \"kind\": \"ClusterIssuer\",\n \"metadata\": {\n \"name\": \"ca-cluster-issuer\"\n },\n \"spec\": {\n \"ca\": {\n \"secretName\": \"ca-root-secret\"\n }\n }\n },\n {\n \"apiVersion\": \"cert-manager.io/v1\",\n \"kind\": \"Issuer\",\n \"metadata\": {\n \"name\": \"ca-issuer\",\n \"namespace\": \"default\"\n },\n \"spec\": {\n \"ca\": {\n \"secretName\": \"ca-root-secret\"\n }\n }\n },\n {\n \"apiVersion\": \"cert-manager.io/v1\",\n \"kind\": \"Issuer\",\n \"metadata\": {\n \"name\": \"letsencrypt-staging\",\n \"namespace\": \"default\"\n },\n \"spec\": {\n \"acme\": {\n \"email\": \"aos-ci-cd@redhat.com\",\n \"privateKeySecretRef\": {\n \"name\": \"letsencrypt-staging\"\n },\n \"server\": \"https://acme-staging-v02.api.letsencrypt.org/directory\",\n \"solvers\": [\n {\n \"dns01\": {\n \"route53\": {\n \"accessKeyID\": \"ACCESS_KEY_ID\",\n \"hostedZoneID\": \"HOSTED_ZONE_ID\",\n \"region\": \"AWS_REGION\",\n \"secretAccessKeySecretRef\": {\n \"key\": \"access-key\",\n \"name\": \"sample-aws-secret\"\n }\n }\n },\n \"selector\": {\n \"dnsNames\": [\n \"sample.dns.name\"\n ]\n }\n }\n ]\n }\n }\n },\n {\n \"apiVersion\": \"operator.openshift.io/v1alpha1\",\n \"kind\": \"CertManager\",\n \"metadata\": {\n \"name\": \"cluster\"\n },\n \"spec\": {\n \"logLevel\": \"Normal\",\n \"managementState\": \"Managed\"\n }\n },\n {\n \"apiVersion\": \"operator.openshift.io/v1alpha1\",\n \"kind\": \"IstioCSR\",\n \"metadata\": {\n \"annotations\": {\n \"kubernetes.io/description\": \"Resource behavior is managed through IstioCSR featuregate, which is enabled by default. Please refer to the cert-manager documentation for more information on the istio-csr feature.\"\n },\n \"name\": \"default\",\n \"namespace\": \"istio-csr\"\n },\n \"spec\": {\n \"istioCSRConfig\": {\n \"certManager\": {\n \"issuerRef\": {\n \"group\": \"cert-manager.io\",\n \"kind\": \"Issuer\",\n \"name\": \"istio-csr-issuer\"\n }\n },\n \"istio\": {\n \"namespace\": \"istio-system\"\n },\n \"istiodTLSConfig\": {\n \"trustDomain\": \"cluster.local\"\n }\n }\n }\n },\n {\n \"apiVersion\": \"operator.openshift.io/v1alpha1\",\n \"kind\": \"TrustManager\",\n \"metadata\": {\n \"name\": \"cluster\"\n },\n \"spec\": {\n \"trustManagerConfig\": {\n \"defaultCAPackage\": {\n \"policy\": \"Enabled\"\n },\n \"logFormat\": \"text\",\n \"logLevel\": 1,\n \"trustNamespace\": \"cert-manager\"\n }\n }\n },\n {\n \"apiVersion\": \"trust.cert-manager.io/v1alpha1\",\n \"kind\": \"Bundle\",\n \"metadata\": {\n \"name\": \"example-bundle\"\n },\n \"spec\": {\n \"sources\": [\n {\n \"useDefaultCAs\": true\n }\n ],\n \"target\": {\n \"configMap\": {\n \"key\": \"ca-certificates.crt\"\n }\n }\n }\n }\n]", "capabilities": "Seamless Upgrades", "categories": "Security", "console.openshift.io/disable-operand-delete": "true", "containerImage": "registry.redhat.io/cert-manager/cert-manager-operator-rhel9@sha256:484342520dc3babe0ff4a9360edc98816556f2bd1b9981ec3d5dbab09a7536a9", "createdAt": "2026-04-20T13:57:26", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "true", "features.operators.openshift.io/proxy-aware": "true", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "true", "features.operators.openshift.io/token-auth-azure": "true", "features.operators.openshift.io/token-auth-gcp": "true", "kubectl.kubernetes.io/default-container": "cert-manager-operator", "olm.operatorGroup": "openshift-cert-manager-operator", "olm.operatorNamespace": "cert-manager-operator", "olm.skipRange": "\u003e=1.18.0 \u003c1.19.0", "olm.targetNamespaces": "", "operator.openshift.io/uninstall-message": "The cert-manager Operator for Red Hat OpenShift will be removed from cert-manager-operator namespace. If your Operator configured any off-cluster resources, these will continue to run and require manual cleanup. All operands created by the operator will need to be manually cleaned up. Please refer to https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/cert-manager-operator-uninstall.html for additional steps.", "operatorframework.io/cluster-monitoring": "true", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"acme.cert-manager.io\",\"kind\":\"Challenge\",\"version\":\"v1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"acme.cert-manager.io\",\"kind\":\"Order\",\"version\":\"v1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"cert-manager.io\",\"kind\":\"Certificate\",\"version\":\"v1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"cert-manager.io\",\"kind\":\"CertificateRequest\",\"version\":\"v1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"cert-manager.io\",\"kind\":\"ClusterIssuer\",\"version\":\"v1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"cert-manager.io\",\"kind\":\"Issuer\",\"version\":\"v1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.openshift.io\",\"kind\":\"CertManager\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.openshift.io\",\"kind\":\"IstioCSR\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.openshift.io\",\"kind\":\"TrustManager\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"trust.cert-manager.io\",\"kind\":\"Bundle\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"openshift-cert-manager-operator\",\"version\":\"1.19.0\"}}]}", "operatorframework.io/suggested-namespace": "cert-manager-operator", "operators.openshift.io/valid-subscription": "[\"OpenShift Kubernetes Engine\", \"OpenShift Container Platform\", \"OpenShift Platform Plus\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.25.1", "operators.operatorframework.io/project_layout": "go.kubebuilder.io/v3", "repository": "https://github.com/openshift/cert-manager-operator", "support": "Red Hat, Inc." }, "creationTimestamp": null, "labels": { "name": "cert-manager-operator", "pod-template-hash": "7846db775" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/arch", "operator": "In", "values": [ "amd64", "arm64", "ppc64le", "s390x" ] }, { "key": "kubernetes.io/os", "operator": "In", "values": [ "linux" ] } ] } ] } } }, "containers": [ { "args": [ "start", "--v=$(OPERATOR_LOG_LEVEL)", "--trusted-ca-configmap=$(TRUSTED_CA_CONFIGMAP_NAME)", "--cloud-credentials-secret=$(CLOUD_CREDENTIALS_SECRET_NAME)", "--unsupported-addon-features=$(UNSUPPORTED_ADDON_FEATURES)" ], "command": [ "/usr/bin/cert-manager-operator" ], "env": [ { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.annotations['olm.targetNamespaces']" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "cert-manager-operator" }, { "name": "RELATED_IMAGE_CERT_MANAGER_WEBHOOK", "value": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:f0467f589027c52288f2707bab33d0ccd1c15410dcbc9010d0f948feb4e50dd0" }, { "name": "RELATED_IMAGE_CERT_MANAGER_CA_INJECTOR", "value": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:f0467f589027c52288f2707bab33d0ccd1c15410dcbc9010d0f948feb4e50dd0" }, { "name": "RELATED_IMAGE_CERT_MANAGER_CONTROLLER", "value": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:f0467f589027c52288f2707bab33d0ccd1c15410dcbc9010d0f948feb4e50dd0" }, { "name": "RELATED_IMAGE_CERT_MANAGER_ACMESOLVER", "value": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:2118a138033fa32afb314d697dc29d2690277a978c8a84b1eba4f152a6d59c1a" }, { "name": "RELATED_IMAGE_CERT_MANAGER_ISTIOCSR", "value": "registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:65711de646434e6462387113e80cf3fdc31736369a2a2046ea56eb59643e92fb" }, { "name": "RELATED_IMAGE_CERT_MANAGER_TRUST_MANAGER", "value": "registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9@sha256:d0834b140e53cb2b96d30f227b0c7dcab3463eeab80049df608582c45c792a82" }, { "name": "OPERAND_IMAGE_VERSION", "value": "1.19.4" }, { "name": "ISTIOCSR_OPERAND_IMAGE_VERSION", "value": "0.16.0" }, { "name": "TRUSTMANAGER_OPERAND_IMAGE_VERSION", "value": "0.20.3" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "1.19.0" }, { "name": "OPERATOR_LOG_LEVEL", "value": "2" }, { "name": "TRUSTED_CA_CONFIGMAP_NAME" }, { "name": "CLOUD_CREDENTIALS_SECRET_NAME" }, { "name": "UNSUPPORTED_ADDON_FEATURES" }, { "name": "OPERATOR_CONDITION_NAME", "value": "cert-manager-operator.v1.19.0" } ], "image": "registry.redhat.io/cert-manager/cert-manager-operator-rhel9@sha256:484342520dc3babe0ff4a9360edc98816556f2bd1b9981ec3d5dbab09a7536a9", "imagePullPolicy": "IfNotPresent", "name": "cert-manager-operator", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "32Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cert-manager-operator-controller-manager", "serviceAccountName": "cert-manager-operator-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "e0cfe42b11e4c00c3958876d2fcfda840899bb9ef0c78b4bf5e094dd508f9208" }, "creationTimestamp": "2026-04-24T15:26:15Z", "generation": 1, "labels": { "app": "cert-manager", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "cert-manager", "app.kubernetes.io/version": "v1.19.4", "pod-template-hash": "79c8d999ff" }, "name": "cert-manager-79c8d999ff", "namespace": "cert-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cert-manager", "uid": "fc03d47b-08a2-4293-9607-6c081d2e7f6a" } ], "resourceVersion": "21758", "uid": "f5378dff-5eb6-4cf8-bedc-8a64e70a631d" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "cert-manager", "pod-template-hash": "79c8d999ff" } }, "template": { "metadata": { "annotations": { "prometheus.io/path": "/metrics", "prometheus.io/port": "9402", "prometheus.io/scrape": "true" }, "creationTimestamp": null, "labels": { "app": "cert-manager", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "cert-manager", "app.kubernetes.io/version": "v1.19.4", "pod-template-hash": "79c8d999ff" } }, "spec": { "containers": [ { "args": [ "--acme-http01-solver-image=registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:2118a138033fa32afb314d697dc29d2690277a978c8a84b1eba4f152a6d59c1a", "--cluster-resource-namespace=$(POD_NAMESPACE)", "--feature-gates=ACMEHTTP01IngressPathTypeExact=false", "--leader-election-namespace=kube-system", "--max-concurrent-challenges=60", "--v=2" ], "command": [ "/app/cmd/controller/controller" ], "env": [ { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:f0467f589027c52288f2707bab33d0ccd1c15410dcbc9010d0f948feb4e50dd0", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 8, "httpGet": { "path": "/livez", "port": "http-healthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 15 }, "name": "cert-manager-controller", "ports": [ { "containerPort": 9402, "name": "http-metrics", "protocol": "TCP" }, { "containerPort": 9403, "name": "http-healthz", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cert-manager", "serviceAccountName": "cert-manager", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "b0785af9e2b017686006a1d8813cd8022446e253068ff763dbe024206f713b6b" }, "creationTimestamp": "2026-04-24T15:26:14Z", "generation": 1, "labels": { "app": "cainjector", "app.kubernetes.io/component": "cainjector", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "cainjector", "app.kubernetes.io/version": "v1.19.4", "pod-template-hash": "68b757865b" }, "name": "cert-manager-cainjector-68b757865b", "namespace": "cert-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cert-manager-cainjector", "uid": "af107eaf-2704-4522-aa7f-875db70e3498" } ], "resourceVersion": "21237", "uid": "f3e46673-94fb-4da0-9c77-c71198974328" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "cainjector", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "cainjector", "pod-template-hash": "68b757865b" } }, "template": { "metadata": { "annotations": { "prometheus.io/path": "/metrics", "prometheus.io/port": "9402", "prometheus.io/scrape": "true" }, "creationTimestamp": null, "labels": { "app": "cainjector", "app.kubernetes.io/component": "cainjector", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "cainjector", "app.kubernetes.io/version": "v1.19.4", "pod-template-hash": "68b757865b" } }, "spec": { "containers": [ { "args": [ "--leader-election-namespace=kube-system", "--v=2" ], "command": [ "/app/cmd/cainjector/cainjector" ], "env": [ { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:f0467f589027c52288f2707bab33d0ccd1c15410dcbc9010d0f948feb4e50dd0", "imagePullPolicy": "IfNotPresent", "name": "cert-manager-cainjector", "ports": [ { "containerPort": 9402, "name": "http-metrics", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cert-manager-cainjector", "serviceAccountName": "cert-manager-cainjector", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "e0a9b6fe303c7f02fb9370e5798d9fabe9a4b75436a991330a91392afae6d3d8" }, "creationTimestamp": "2026-04-24T15:26:13Z", "generation": 1, "labels": { "app": "webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/version": "v1.19.4", "pod-template-hash": "587ccfb98" }, "name": "cert-manager-webhook-587ccfb98", "namespace": "cert-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cert-manager-webhook", "uid": "4751ffdc-69ee-437f-bb4e-f7fefe22533f" } ], "resourceVersion": "21636", "uid": "35918530-c0f2-48eb-9126-aded4c9edcb7" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "webhook", "pod-template-hash": "587ccfb98" } }, "template": { "metadata": { "annotations": { "prometheus.io/path": "/metrics", "prometheus.io/port": "9402", "prometheus.io/scrape": "true" }, "creationTimestamp": null, "labels": { "app": "webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "cert-manager", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/version": "v1.19.4", "pod-template-hash": "587ccfb98" } }, "spec": { "containers": [ { "args": [ "--dynamic-serving-ca-secret-name=cert-manager-webhook-ca", "--dynamic-serving-ca-secret-namespace=$(POD_NAMESPACE)", "--dynamic-serving-dns-names=cert-manager-webhook,cert-manager-webhook.$(POD_NAMESPACE),cert-manager-webhook.$(POD_NAMESPACE).svc", "--secure-port=10250", "--v=2" ], "command": [ "/app/cmd/webhook/webhook" ], "env": [ { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:f0467f589027c52288f2707bab33d0ccd1c15410dcbc9010d0f948feb4e50dd0", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/livez", "port": "healthcheck", "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "cert-manager-webhook", "ports": [ { "containerPort": 10250, "name": "https", "protocol": "TCP" }, { "containerPort": 6080, "name": "healthcheck", "protocol": "TCP" }, { "containerPort": 9402, "name": "http-metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "healthcheck", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "enableServiceLinks": false, "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cert-manager-webhook", "serviceAccountName": "cert-manager-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:30:39Z", "generation": 1, "labels": { "control-plane": "controller-manager", "pod-template-hash": "84ff8464cd" }, "name": "image-controller-controller-manager-84ff8464cd", "namespace": "image-controller", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "image-controller-controller-manager", "uid": "b6bbc76d-5379-4590-9851-8191e91f24ce" } ], "resourceVersion": "30831", "uid": "7e4b0915-f0f4-45c5-a635-0b46584c08fe" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "controller-manager", "pod-template-hash": "84ff8464cd" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager", "pod-template-hash": "84ff8464cd" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8443", "--leader-elect=false", "--health-probe-bind-address=:8081" ], "command": [ "/manager" ], "image": "quay.io/konflux-ci/image-controller:89d8e83c82fc1dc88fcb12dd13db5ec2dbab7274", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 8081, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/ssl/certs/quay-ca", "name": "quay-ca-bundle", "readOnly": true }, { "mountPath": "/workspace", "name": "quaytoken", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "image-controller-controller-manager", "serviceAccountName": "image-controller-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "configMap": { "defaultMode": 420, "name": "quay-ca-bundle", "optional": true }, "name": "quay-ca-bundle" }, { "name": "quaytoken", "secret": { "defaultMode": 420, "secretName": "quaytoken" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:30:39Z", "generation": 2, "labels": { "control-plane": "controller-manager", "pod-template-hash": "867646c8cc" }, "name": "integration-service-controller-manager-867646c8cc", "namespace": "integration-service", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "integration-service-controller-manager", "uid": "9871f6f6-530d-4d45-b428-fd30ff09528d" } ], "resourceVersion": "31000", "uid": "7ad8e604-194c-4eac-bcbb-c044b7e9f247" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "control-plane": "controller-manager", "pod-template-hash": "867646c8cc" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager", "pod-template-hash": "867646c8cc" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8080", "--leader-elect", "--lease-duration=30s", "--leader-renew-deadline=15s", "--leader-elector-retry-period=5s" ], "command": [ "/manager" ], "env": [ { "name": "CONSOLE_URL" } ], "image": "quay.io/konflux-ci/integration-service:ef2610ecd344292fb85e01321f7b613c7e621ec5", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" }, { "containerPort": 8081, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "integration-service-controller-manager", "serviceAccountName": "integration-service-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "name": "cert", "secret": { "defaultMode": 420, "secretName": "webhook-server-cert" } } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-04-24T15:30:42Z", "generation": 1, "labels": { "control-plane": "controller-manager", "pod-template-hash": "b5bdcb68d" }, "name": "integration-service-controller-manager-b5bdcb68d", "namespace": "integration-service", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "integration-service-controller-manager", "uid": "9871f6f6-530d-4d45-b428-fd30ff09528d" } ], "resourceVersion": "30981", "uid": "a8d9187f-ac25-4e6f-b4db-ea4f2b0ec2a5" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "controller-manager", "pod-template-hash": "b5bdcb68d" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager", "pod-template-hash": "b5bdcb68d" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8080", "--leader-elect", "--lease-duration=30s", "--leader-renew-deadline=15s", "--leader-elector-retry-period=5s" ], "command": [ "/manager" ], "env": [ { "name": "CONSOLE_URL", "value": "https://konflux-ui-konflux-ui.apps.rosa.kx-ca29e7328e.u1a1.p3.openshiftapps.com/ns/{{ .Namespace }}/pipelinerun/{{ .PipelineRunName }}" } ], "image": "quay.io/konflux-ci/integration-service:ef2610ecd344292fb85e01321f7b613c7e621ec5", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" }, { "containerPort": 8081, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "integration-service-controller-manager", "serviceAccountName": "integration-service-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "name": "cert", "secret": { "defaultMode": 420, "secretName": "webhook-server-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:26:22Z", "generation": 1, "labels": { "app.kubernetes.io/name": "konflux-operator", "control-plane": "controller-manager", "pod-template-hash": "599686c89f" }, "name": "konflux-operator-controller-manager-599686c89f", "namespace": "konflux-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "konflux-operator-controller-manager", "uid": "88c80e82-2a7f-4c01-910f-ace15140a55f" } ], "resourceVersion": "22349", "uid": "86aedab5-ceb1-4c7b-b65a-118ac9f3c5da" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "konflux-operator", "control-plane": "controller-manager", "pod-template-hash": "599686c89f" } }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"konflux.konflux-ci.dev/v1alpha1\",\n \"kind\": \"Konflux\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/managed-by\": \"kustomize\",\n \"app.kubernetes.io/name\": \"konflux-operator\"\n },\n \"name\": \"konflux\"\n },\n \"spec\": {}\n },\n {\n \"apiVersion\": \"konflux.konflux-ci.dev/v1alpha1\",\n \"kind\": \"KonfluxApplicationAPI\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/managed-by\": \"kustomize\",\n \"app.kubernetes.io/name\": \"konflux-operator\"\n },\n \"name\": \"konflux-application-api\"\n },\n \"spec\": {}\n },\n {\n \"apiVersion\": \"konflux.konflux-ci.dev/v1alpha1\",\n \"kind\": \"KonfluxBuildService\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/managed-by\": \"kustomize\",\n \"app.kubernetes.io/name\": \"konflux-operator\"\n },\n \"name\": \"konflux-build-service\"\n },\n \"spec\": {\n \"buildControllerManager\": {\n \"manager\": {\n \"env\": [\n {\n \"name\": \"PAC_WEBHOOK_URL\",\n \"value\": \"http://pipelines-as-code-controller.pipelines-as-code.svc.cluster.local:8180\"\n },\n {\n \"name\": \"EXAMPLE_CUSTOM_CONFIG\",\n \"valueFrom\": {\n \"configMapKeyRef\": {\n \"key\": \"custom-config\",\n \"name\": \"build-service-config\"\n }\n }\n },\n {\n \"name\": \"EXAMPLE_SECRET_VALUE\",\n \"valueFrom\": {\n \"secretKeyRef\": {\n \"key\": \"secret-key\",\n \"name\": \"build-service-secret\"\n }\n }\n }\n ],\n \"resources\": {\n \"limits\": {\n \"cpu\": \"500m\",\n \"memory\": \"512Mi\"\n },\n \"requests\": {\n \"cpu\": \"100m\",\n \"memory\": \"256Mi\"\n }\n }\n },\n \"replicas\": 2\n }\n }\n },\n {\n \"apiVersion\": \"konflux.konflux-ci.dev/v1alpha1\",\n \"kind\": \"KonfluxCLI\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/managed-by\": \"kustomize\",\n \"app.kubernetes.io/name\": \"konflux-operator\"\n },\n \"name\": \"konflux-cli\"\n },\n \"spec\": {}\n },\n {\n \"apiVersion\": \"konflux.konflux-ci.dev/v1alpha1\",\n \"kind\": \"KonfluxCertManager\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/managed-by\": \"kustomize\",\n \"app.kubernetes.io/name\": \"konflux-operator\"\n },\n \"name\": \"konflux-cert-manager\"\n },\n \"spec\": {\n \"createClusterIssuer\": true\n }\n },\n {\n \"apiVersion\": \"konflux.konflux-ci.dev/v1alpha1\",\n \"kind\": \"KonfluxDefaultTenant\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/managed-by\": \"kustomize\",\n \"app.kubernetes.io/name\": \"konflux-operator\"\n },\n \"name\": \"konfluxdefaulttenant-sample\"\n },\n \"spec\": null\n },\n {\n \"apiVersion\": \"konflux.konflux-ci.dev/v1alpha1\",\n \"kind\": \"KonfluxEnterpriseContract\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/managed-by\": \"kustomize\",\n \"app.kubernetes.io/name\": \"konflux-operator\"\n },\n \"name\": \"konflux-enterprise-contract\"\n },\n \"spec\": {}\n },\n {\n \"apiVersion\": \"konflux.konflux-ci.dev/v1alpha1\",\n \"kind\": \"KonfluxImageController\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/managed-by\": \"kustomize\",\n \"app.kubernetes.io/name\": \"konflux-operator\"\n },\n \"name\": \"konflux-image-controller\"\n },\n \"spec\": {}\n },\n {\n \"apiVersion\": \"konflux.konflux-ci.dev/v1alpha1\",\n \"kind\": \"KonfluxInfo\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/managed-by\": \"kustomize\",\n \"app.kubernetes.io/name\": \"konflux-operator\"\n },\n \"name\": \"konflux-info\"\n },\n \"spec\": {\n \"banner\": {\n \"items\": [\n {\n \"summary\": \"Welcome to Konflux-CI! This is a production environment.\",\n \"type\": \"info\"\n },\n {\n \"dayOfWeek\": 1,\n \"endTime\": \"17:00\",\n \"startTime\": \"09:00\",\n \"summary\": \"**Scheduled Maintenance**: System maintenance will occur on Friday, March 15th from 2:00 AM to 4:00 AM EST.\",\n \"timeZone\": \"America/New_York\",\n \"type\": \"warning\"\n },\n {\n \"dayOfMonth\": 15,\n \"endTime\": \"18:00\",\n \"month\": 3,\n \"startTime\": \"14:00\",\n \"summary\": \"**CRITICAL**: Security patch deployment in progress. Some services may be temporarily unavailable.\",\n \"timeZone\": \"UTC\",\n \"type\": \"danger\",\n \"year\": 2025\n },\n {\n \"dayOfWeek\": 1,\n \"endTime\": \"11:00\",\n \"startTime\": \"09:00\",\n \"summary\": \"Weekly team standup reminder: Every Monday at 10:00 AM.\",\n \"timeZone\": \"America/Los_Angeles\",\n \"type\": \"info\"\n },\n {\n \"dayOfMonth\": 31,\n \"endTime\": \"23:59\",\n \"month\": 12,\n \"startTime\": \"00:00\",\n \"summary\": \"**Annual Review Period**: Performance reviews are due by end of month.\",\n \"timeZone\": \"UTC\",\n \"type\": \"warning\"\n },\n {\n \"endTime\": \"20:00\",\n \"startTime\": \"08:00\",\n \"summary\": \"**New Feature Available**:\\n\\n- Enhanced build pipeline visualization\\n- Improved security scanning\\n- [View Documentation](https://docs.konflux.example.com)\\n\",\n \"timeZone\": \"Europe/London\",\n \"type\": \"info\"\n }\n ]\n },\n \"publicInfo\": {\n \"environment\": \"production\",\n \"integrations\": {\n \"github\": {\n \"application_url\": \"https://github.com/apps/my-konflux-app/installations/new\"\n },\n \"image_controller\": {\n \"enabled\": true,\n \"notifications\": [\n {\n \"config\": {\n \"url\": \"https://webhook.example.com/build/complete\"\n },\n \"event\": \"build_complete\",\n \"method\": \"webhook\",\n \"title\": \"Build Complete Notification\"\n },\n {\n \"config\": {\n \"email\": \"devops-team@example.com\"\n },\n \"event\": \"repo_push\",\n \"method\": \"email\",\n \"title\": \"Repository Push Notification\"\n },\n {\n \"config\": {\n \"timeout\": \"30s\",\n \"url\": \"https://webhook.example.com/scan\"\n },\n \"event\": \"image_scan_complete\",\n \"method\": \"webhook\",\n \"title\": \"Image Scan Complete\"\n }\n ]\n },\n \"sbom_server\": {\n \"sbom_sha\": \"https://sbom.example.com/sha\",\n \"url\": \"https://sbom.example.com/content\"\n }\n },\n \"rbac\": [\n {\n \"description\": \"Full access to Konflux resources including secrets and administrative operations\",\n \"displayName\": \"Administrator\",\n \"name\": \"konflux-admin-user-actions\"\n },\n {\n \"description\": \"Manage workspace resources without access to sensitive or destructive actions\",\n \"name\": \"konflux-maintainer-user-actions\"\n },\n {\n \"description\": \"Read-only access to view CI results and workspace information\",\n \"displayName\": \"Viewer Role\",\n \"name\": \"konflux-viewer-user-actions\"\n },\n {\n \"description\": \"Custom role for specific use case with limited permissions\",\n \"name\": \"konflux-custom-role\"\n }\n ],\n \"statusPageUrl\": \"https://status.konflux.example.com\",\n \"visibility\": \"public\"\n }\n }\n },\n {\n \"apiVersion\": \"konflux.konflux-ci.dev/v1alpha1\",\n \"kind\": \"KonfluxIntegrationService\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/managed-by\": \"kustomize\",\n \"app.kubernetes.io/name\": \"konflux-operator\"\n },\n \"name\": \"konflux-integration-service\"\n },\n \"spec\": {\n \"integrationControllerManager\": {\n \"manager\": {\n \"env\": [\n {\n \"name\": \"EXAMPLE_CUSTOM_CONFIG\",\n \"valueFrom\": {\n \"configMapKeyRef\": {\n \"key\": \"custom-config\",\n \"name\": \"integration-service-config\"\n }\n }\n },\n {\n \"name\": \"EXAMPLE_SECRET_VALUE\",\n \"valueFrom\": {\n \"secretKeyRef\": {\n \"key\": \"secret-key\",\n \"name\": \"integration-service-secret\"\n }\n }\n }\n ],\n \"resources\": {\n \"limits\": {\n \"cpu\": \"512m\",\n \"memory\": \"1Gi\"\n },\n \"requests\": {\n \"cpu\": \"100m\",\n \"memory\": \"256Mi\"\n }\n }\n },\n \"replicas\": 3\n }\n }\n },\n {\n \"apiVersion\": \"konflux.konflux-ci.dev/v1alpha1\",\n \"kind\": \"KonfluxInternalRegistry\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/managed-by\": \"kustomize\",\n \"app.kubernetes.io/name\": \"konflux-operator\"\n },\n \"name\": \"konflux-internal-registry\"\n },\n \"spec\": null\n },\n {\n \"apiVersion\": \"konflux.konflux-ci.dev/v1alpha1\",\n \"kind\": \"KonfluxNamespaceLister\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/managed-by\": \"kustomize\",\n \"app.kubernetes.io/name\": \"konflux-operator\"\n },\n \"name\": \"konflux-namespace-lister\"\n },\n \"spec\": {\n \"namespaceLister\": {\n \"namespaceLister\": {\n \"env\": [\n {\n \"name\": \"LOG_LEVEL\",\n \"value\": \"0\"\n },\n {\n \"name\": \"CACHE_RESYNC_PERIOD\",\n \"value\": \"10m\"\n },\n {\n \"name\": \"EXAMPLE_CUSTOM_CONFIG\",\n \"valueFrom\": {\n \"configMapKeyRef\": {\n \"key\": \"custom-config\",\n \"name\": \"namespace-lister-config\"\n }\n }\n },\n {\n \"name\": \"EXAMPLE_SECRET_VALUE\",\n \"valueFrom\": {\n \"secretKeyRef\": {\n \"key\": \"secret-key\",\n \"name\": \"namespace-lister-secret\"\n }\n }\n }\n ],\n \"resources\": {\n \"limits\": {\n \"cpu\": \"512m\",\n \"memory\": \"1Gi\"\n },\n \"requests\": {\n \"cpu\": \"100m\",\n \"memory\": \"256Mi\"\n }\n }\n },\n \"replicas\": 3\n }\n }\n },\n {\n \"apiVersion\": \"konflux.konflux-ci.dev/v1alpha1\",\n \"kind\": \"KonfluxRBAC\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/managed-by\": \"kustomize\",\n \"app.kubernetes.io/name\": \"konflux-operator\"\n },\n \"name\": \"konflux-rbac\"\n },\n \"spec\": {}\n },\n {\n \"apiVersion\": \"konflux.konflux-ci.dev/v1alpha1\",\n \"kind\": \"KonfluxReleaseService\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/managed-by\": \"kustomize\",\n \"app.kubernetes.io/name\": \"konflux-operator\"\n },\n \"name\": \"konflux-release-service\"\n },\n \"spec\": {\n \"releaseControllerManager\": {\n \"manager\": {\n \"env\": [\n {\n \"name\": \"DEFAULT_RELEASE_PVC\",\n \"valueFrom\": {\n \"configMapKeyRef\": {\n \"key\": \"DEFAULT_RELEASE_PVC\",\n \"name\": \"release-service-manager-properties\"\n }\n }\n },\n {\n \"name\": \"EXAMPLE_CUSTOM_CONFIG\",\n \"valueFrom\": {\n \"configMapKeyRef\": {\n \"key\": \"custom-config\",\n \"name\": \"release-service-config\"\n }\n }\n },\n {\n \"name\": \"EXAMPLE_SECRET_VALUE\",\n \"valueFrom\": {\n \"secretKeyRef\": {\n \"key\": \"secret-key\",\n \"name\": \"release-service-secret\"\n }\n }\n }\n ],\n \"resources\": {\n \"limits\": {\n \"cpu\": \"100m\",\n \"memory\": \"256Mi\"\n },\n \"requests\": {\n \"cpu\": \"100m\",\n \"memory\": \"256Mi\"\n }\n }\n },\n \"replicas\": 3\n }\n }\n },\n {\n \"apiVersion\": \"konflux.konflux-ci.dev/v1alpha1\",\n \"kind\": \"KonfluxUI\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/managed-by\": \"kustomize\",\n \"app.kubernetes.io/name\": \"konflux-operator\"\n },\n \"name\": \"konflux-ui\"\n },\n \"spec\": {\n \"dex\": {\n \"config\": {\n \"configureLoginWithOpenShift\": true,\n \"connectors\": [\n {\n \"config\": {\n \"clientID\": \"$GITHUB_CLIENT_ID\",\n \"clientSecret\": \"$GITHUB_CLIENT_SECRET\",\n \"orgs\": [\n {\n \"name\": \"my-org\",\n \"teams\": [\n \"developers\",\n \"admins\"\n ]\n },\n {\n \"name\": \"another-org\",\n \"teams\": [\n \"contributors\"\n ]\n }\n ],\n \"redirectURI\": \"https://dex.example.com/idp/callback\"\n },\n \"id\": \"github\",\n \"name\": \"GitHub\",\n \"type\": \"github\"\n },\n {\n \"config\": {\n \"clientID\": \"$GOOGLE_CLIENT_ID\",\n \"clientSecret\": \"$GOOGLE_CLIENT_SECRET\",\n \"groups\": [\n \"admin@example.com\"\n ],\n \"issuer\": \"https://accounts.google.com\",\n \"redirectURI\": \"https://dex.example.com/idp/callback\"\n },\n \"id\": \"google\",\n \"name\": \"Google\",\n \"type\": \"oidc\"\n },\n {\n \"config\": {\n \"bindDN\": \"cn=admin,dc=example,dc=com\",\n \"bindPW\": \"$LDAP_BIND_PASSWORD\",\n \"groupSearch\": {\n \"baseDN\": \"ou=Groups,dc=example,dc=com\",\n \"filter\": \"(objectClass=groupOfNames)\",\n \"nameAttr\": \"cn\",\n \"userMatchers\": [\n {\n \"groupAttr\": \"member\",\n \"userAttr\": \"DN\"\n }\n ]\n },\n \"host\": \"ldap.example.com:636\",\n \"userSearch\": {\n \"baseDN\": \"ou=Users,dc=example,dc=com\",\n \"emailAttr\": \"mail\",\n \"filter\": \"(objectClass=person)\",\n \"idAttr\": \"uid\",\n \"nameAttr\": \"cn\",\n \"username\": \"uid\"\n }\n },\n \"id\": \"ldap\",\n \"name\": \"LDAP\",\n \"type\": \"ldap\"\n }\n ],\n \"enablePasswordDB\": true,\n \"hostname\": \"dex.example.com\",\n \"passwordConnector\": \"local\",\n \"port\": \"9443\",\n \"staticPasswords\": [\n {\n \"email\": \"user1@konflux.dev\",\n \"hash\": \"REDACTED\",\n \"userID\": \"7138d2fe-724e-4e86-af8a-db7c4b080e20\",\n \"username\": \"user1\"\n },\n {\n \"email\": \"user2@konflux.dev\",\n \"hash\": \"REDACTED\",\n \"userID\": \"ea8e8ee1-2283-4e03-83d4-b00f8b821b64\",\n \"username\": \"user2\"\n },\n {\n \"email\": \"admin@konflux.dev\",\n \"hash\": \"REDACTED\",\n \"userID\": \"admin-12345-67890-abcdef\",\n \"username\": \"admin\"\n }\n ]\n },\n \"dex\": {\n \"env\": [\n {\n \"name\": \"DEX_LOG_LEVEL\",\n \"value\": \"debug\"\n },\n {\n \"name\": \"DEX_STORAGE_TYPE\",\n \"value\": \"kubernetes\"\n }\n ],\n \"resources\": {\n \"limits\": {\n \"cpu\": \"500m\",\n \"memory\": \"512Mi\"\n },\n \"requests\": {\n \"cpu\": \"100m\",\n \"memory\": \"256Mi\"\n }\n }\n },\n \"replicas\": 2\n },\n \"ingress\": {\n \"annotations\": {\n \"cert-manager.io/cluster-issuer\": \"letsencrypt-prod\",\n \"nginx.ingress.kubernetes.io/force-ssl-redirect\": \"true\",\n \"nginx.ingress.kubernetes.io/proxy-body-size\": \"10m\",\n \"nginx.ingress.kubernetes.io/ssl-redirect\": \"true\"\n },\n \"enabled\": true,\n \"host\": \"konflux-ui.example.com\",\n \"ingressClassName\": \"nginx\",\n \"tlsSecretName\": \"konflux-ui-tls\"\n },\n \"proxy\": {\n \"nginx\": {\n \"env\": [\n {\n \"name\": \"NGINX_WORKER_PROCESSES\",\n \"value\": \"4\"\n },\n {\n \"name\": \"NGINX_WORKER_CONNECTIONS\",\n \"value\": \"1024\"\n },\n {\n \"name\": \"NGINX_KEEPALIVE_TIMEOUT\",\n \"value\": \"65\"\n }\n ],\n \"resources\": {\n \"limits\": {\n \"cpu\": \"500m\",\n \"memory\": \"512Mi\"\n },\n \"requests\": {\n \"cpu\": \"100m\",\n \"memory\": \"256Mi\"\n }\n }\n },\n \"oauth2Proxy\": {\n \"env\": [\n {\n \"name\": \"OAUTH2_PROXY_PROVIDER\",\n \"value\": \"oidc\"\n },\n {\n \"name\": \"OAUTH2_PROXY_OIDC_ISSUER_URL\",\n \"value\": \"https://dex.example.com/idp/\"\n },\n {\n \"name\": \"OAUTH2_PROXY_CLIENT_ID\",\n \"value\": \"oauth2-proxy\"\n },\n {\n \"name\": \"OAUTH2_PROXY_CLIENT_SECRET\",\n \"valueFrom\": {\n \"secretKeyRef\": {\n \"key\": \"client-secret\",\n \"name\": \"oauth2-proxy-secret\"\n }\n }\n }\n ],\n \"resources\": {\n \"limits\": {\n \"cpu\": \"200m\",\n \"memory\": \"256Mi\"\n },\n \"requests\": {\n \"cpu\": \"50m\",\n \"memory\": \"128Mi\"\n }\n }\n },\n \"replicas\": 3\n }\n }\n }\n]", "capabilities": "Full Lifecycle", "categories": "Integration \u0026 Delivery, Security, Developer Tools", "containerImage": "quay.io/konflux-ci/konflux-operator:release-sha-b47d5c5", "createdAt": "2026-04-21T13:38:39Z", "description": "Cloud native software factory focused on software supply chain security", "kubectl.kubernetes.io/default-container": "manager", "olm.operatorGroup": "konflux-operator", "olm.operatorNamespace": "konflux-operator", "olm.suggested-namespace": "konflux-operator", "olm.targetNamespaces": "", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"konflux.konflux-ci.dev\",\"kind\":\"Konflux\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"konflux.konflux-ci.dev\",\"kind\":\"KonfluxApplicationAPI\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"konflux.konflux-ci.dev\",\"kind\":\"KonfluxBuildService\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"konflux.konflux-ci.dev\",\"kind\":\"KonfluxCLI\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"konflux.konflux-ci.dev\",\"kind\":\"KonfluxCertManager\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"konflux.konflux-ci.dev\",\"kind\":\"KonfluxDefaultTenant\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"konflux.konflux-ci.dev\",\"kind\":\"KonfluxEnterpriseContract\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"konflux.konflux-ci.dev\",\"kind\":\"KonfluxImageController\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"konflux.konflux-ci.dev\",\"kind\":\"KonfluxInfo\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"konflux.konflux-ci.dev\",\"kind\":\"KonfluxIntegrationService\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"konflux.konflux-ci.dev\",\"kind\":\"KonfluxInternalRegistry\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"konflux.konflux-ci.dev\",\"kind\":\"KonfluxNamespaceLister\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"konflux.konflux-ci.dev\",\"kind\":\"KonfluxRBAC\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"konflux.konflux-ci.dev\",\"kind\":\"KonfluxReleaseService\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"konflux.konflux-ci.dev\",\"kind\":\"KonfluxSegmentBridge\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"konflux.konflux-ci.dev\",\"kind\":\"KonfluxUI\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"konflux-operator\",\"version\":\"0.1.10\"}}]}", "operators.operatorframework.io/builder": "operator-sdk-v1.42.0", "operators.operatorframework.io/project_layout": "go.kubebuilder.io/v4", "repository": "https://github.com/konflux-ci/konflux-ci", "support": "Konflux Community" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "konflux-operator", "control-plane": "controller-manager", "pod-template-hash": "599686c89f" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8443", "--leader-elect", "--health-probe-bind-address=:8081" ], "command": [ "/manager" ], "env": [ { "name": "OPERATOR_CONDITION_NAME", "value": "konflux-operator.v0.1.10" } ], "image": "quay.io/konflux-ci/konflux-operator:release-sha-b47d5c5", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 8081, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "512Mi" }, "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "konflux-operator-controller-manager", "serviceAccountName": "konflux-operator-controller-manager", "terminationGracePeriodSeconds": 10 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:30:39Z", "generation": 1, "labels": { "app": "dex", "pod-template-hash": "7797fbdf8" }, "name": "dex-7797fbdf8", "namespace": "konflux-ui", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "dex", "uid": "440a7fbf-0f19-4ba0-852b-dcc19c95ba1a" } ], "resourceVersion": "30938", "uid": "9a7d5300-b704-4c13-a7e4-9cea98a7e65a" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "dex", "pod-template-hash": "7797fbdf8" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "dex", "pod-template-hash": "7797fbdf8" } }, "spec": { "containers": [ { "command": [ "/usr/local/bin/dex", "serve", "/etc/dex/cfg/config.yaml" ], "env": [ { "name": "OPENSHIFT_OAUTH_CLIENT_SECRET", "valueFrom": { "secretKeyRef": { "key": "token", "name": "dex-client" } } }, { "name": "CLIENT_SECRET", "valueFrom": { "secretKeyRef": { "key": "client-secret", "name": "oauth2-proxy-client-secret" } } } ], "image": "quay.io/konflux-ci/dex@sha256:66fc2ec61bc94d16aef9a497a9fd98de912e012e3efdc99e8cdb99a26e7601b1", "imagePullPolicy": "IfNotPresent", "name": "dex", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" }, { "containerPort": 5558, "name": "telemetry", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/ready", "port": "telemetry", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "50m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/dex/cfg", "name": "dex" }, { "mountPath": "/etc/dex/tls", "name": "tls" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "dex", "serviceAccountName": "dex", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "config.yaml", "path": "config.yaml" } ], "name": "dex-8354a1af92" }, "name": "dex" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "dex-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/no-anti-affinity": "Using topologySpreadConstraints" }, "creationTimestamp": "2026-04-24T15:30:39Z", "generation": 2, "labels": { "app": "proxy", "pod-template-hash": "69b6694446" }, "name": "proxy-69b6694446", "namespace": "konflux-ui", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "proxy", "uid": "9723e60f-d024-487a-b88d-eefecd98b4f2" } ], "resourceVersion": "31743", "uid": "f19bfc70-e93a-4d3b-b11a-74ef1e38b848" }, "spec": { "minReadySeconds": 30, "replicas": 0, "selector": { "matchLabels": { "app": "proxy", "pod-template-hash": "69b6694446" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "proxy", "pod-template-hash": "69b6694446" } }, "spec": { "containers": [ { "command": [ "nginx", "-g", "daemon off;", "-c", "/etc/nginx/nginx.conf" ], "image": "registry.access.redhat.com/ubi9/nginx-124@sha256:a58ed1b3229e6fb750a8459b2c1bdd7a278aa4c65e96ae40957fc7fba37ca89f", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 60, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "nginx", "ports": [ { "containerPort": 8080, "name": "web", "protocol": "TCP" }, { "containerPort": 9443, "name": "web-tls", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "300m", "memory": "256Mi" }, "requests": { "cpu": "30m", "memory": "128Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/nginx/nginx.conf", "name": "proxy", "readOnly": true, "subPath": "nginx.conf" }, { "mountPath": "/var/log/nginx", "name": "logs" }, { "mountPath": "/var/lib/nginx/tmp", "name": "nginx-tmp" }, { "mountPath": "/run", "name": "run" }, { "mountPath": "/mnt", "name": "serving-cert" }, { "mountPath": "/mnt/nginx-generated-config", "name": "nginx-generated-config" }, { "mountPath": "/mnt/nginx-generated-location-config", "name": "nginx-generated-location-config" }, { "mountPath": "/opt/app-root/src/static-content", "name": "static-content" }, { "mountPath": "/opt/app-root/src/segment", "name": "segment-bridge-config" } ] }, { "env": [ { "name": "OAUTH2_PROXY_PROVIDER", "value": "oidc" }, { "name": "OAUTH2_PROXY_PROVIDER_DISPLAY_NAME", "value": "Dex OIDC" }, { "name": "OAUTH2_PROXY_CLIENT_ID", "value": "oauth2-proxy" }, { "name": "OAUTH2_PROXY_HTTP_ADDRESS", "value": "127.0.0.1:6000" }, { "name": "OAUTH2_PROXY_SKIP_PROVIDER_BUTTON", "value": "true" }, { "name": "OAUTH2_PROXY_PROMPT", "value": "login" }, { "name": "OAUTH2_PROXY_REDIRECT_URL", "value": "https://konflux-ui-konflux-ui.apps.rosa.kx-ca29e7328e.u1a1.p3.openshiftapps.com/oauth2/callback" }, { "name": "OAUTH2_PROXY_OIDC_ISSUER_URL", "value": "https://konflux-ui-konflux-ui.apps.rosa.kx-ca29e7328e.u1a1.p3.openshiftapps.com/idp/" }, { "name": "OAUTH2_PROXY_LOGIN_URL", "value": "https://konflux-ui-konflux-ui.apps.rosa.kx-ca29e7328e.u1a1.p3.openshiftapps.com/idp/auth" }, { "name": "OAUTH2_PROXY_SKIP_OIDC_DISCOVERY", "value": "true" }, { "name": "OAUTH2_PROXY_REDEEM_URL", "value": "https://dex.konflux-ui.svc.cluster.local:9443/idp/token" }, { "name": "OAUTH2_PROXY_OIDC_JWKS_URL", "value": "https://dex.konflux-ui.svc.cluster.local:9443/idp/keys" }, { "name": "OAUTH2_PROXY_COOKIE_SECURE", "value": "true" }, { "name": "OAUTH2_PROXY_COOKIE_NAME", "value": "__Host-konflux-ci-cookie" }, { "name": "OAUTH2_PROXY_EMAIL_DOMAINS", "value": "*" }, { "name": "OAUTH2_PROXY_SET_XAUTHREQUEST", "value": "true" }, { "name": "OAUTH2_PROXY_SKIP_JWT_BEARER_TOKENS", "value": "true" }, { "name": "OAUTH2_PROXY_PROVIDER_CA_FILES", "value": "/etc/ssl/certs/ca-bundle.crt" }, { "name": "OAUTH2_PROXY_WHITELIST_DOMAINS", "value": "konflux-ui-konflux-ui.apps.rosa.kx-ca29e7328e.u1a1.p3.openshiftapps.com" }, { "name": "OAUTH2_PROXY_INSECURE_OIDC_ALLOW_UNVERIFIED_EMAIL", "value": "true" }, { "name": "OAUTH2_PROXY_CLIENT_SECRET", "valueFrom": { "secretKeyRef": { "key": "client-secret", "name": "oauth2-proxy-client-secret" } } }, { "name": "OAUTH2_PROXY_COOKIE_SECRET", "valueFrom": { "secretKeyRef": { "key": "cookie-secret", "name": "oauth2-proxy-cookie-secret" } } } ], "image": "quay.io/konflux-ci/oauth2-proxy@sha256:1f4a37529de4f750099af18e113556bd995fe6922030c614b7d6d23eaa0bd318", "imagePullPolicy": "IfNotPresent", "name": "oauth2-proxy", "ports": [ { "containerPort": 6000, "name": "web", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "300m", "memory": "256Mi" }, "requests": { "cpu": "30m", "memory": "128Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/ssl/certs", "name": "ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "cp", "-R", "/opt/app-root/src/.", "/mnt/static-content/" ], "image": "quay.io/konflux-ci/konflux-ui@sha256:7b8aaf0564026876572b896a49c1574e92bd557c2704164db0bbfab485b412a7", "imagePullPolicy": "IfNotPresent", "name": "copy-static-content", "resources": { "limits": { "cpu": "50m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/mnt/static-content", "name": "static-content" } ] }, { "command": [ "sh", "-c", "set -e\n\n# Copy the auth.conf template and replace the bearer token\ntoken=$(cat /mnt/api-token/token)\nsed \"s/__BEARER_TOKEN__/$token/\" /mnt/nginx-templates/auth.conf \u003e /mnt/nginx-generated-config/auth.conf\nchmod 640 /mnt/nginx-generated-config/auth.conf\n\n# Resolve tekton-results hostname\nresults_hostname_k8s=tekton-results-api-service.tekton-pipelines.svc.cluster.local\nresults_hostname_openshift=tekton-results-api-service.openshift-pipelines.svc.cluster.local\nif nslookup $results_hostname_k8s \u003e /dev/null 2\u003e\u00261; then\n results_hostname=$results_hostname_k8s\nelif nslookup $results_hostname_openshift \u003e /dev/null 2\u003e\u00261; then\n results_hostname=$results_hostname_openshift\nelse\n echo \"Error: Could not resolve tekton-results hostname\"\n exit 1\nfi\nsed \"s/__TEKTON_RESULTS_HOSTNAME__/$results_hostname/\" /mnt/nginx-templates/tekton-results.conf \u003e /mnt/nginx-generated-location-config/tekton-results.conf\nchmod 640 /mnt/nginx-generated-location-config/tekton-results.conf\n" ], "image": "quay.io/konflux-ci/konflux-ui@sha256:7b8aaf0564026876572b896a49c1574e92bd557c2704164db0bbfab485b412a7", "imagePullPolicy": "IfNotPresent", "name": "generate-nginx-configs", "resources": { "limits": { "cpu": "50m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/mnt/nginx-generated-config", "name": "nginx-generated-config" }, { "mountPath": "/mnt/nginx-templates", "name": "nginx-templates" }, { "mountPath": "/mnt/api-token", "name": "api-token" }, { "mountPath": "/mnt/nginx-generated-location-config", "name": "nginx-generated-location-config" } ] } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "proxy", "serviceAccountName": "proxy", "terminationGracePeriodSeconds": 30, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "app": "proxy" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "ScheduleAnyway" } ], "volumes": [ { "name": "ca-bundle", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "ca.crt", "path": "ca-bundle.crt" } ], "name": "oauth2-proxy-cert" } } ] } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "nginx.conf", "path": "nginx.conf" } ], "name": "proxy-5f87fc6759" }, "name": "proxy" }, { "configMap": { "defaultMode": 420, "name": "proxy-nginx-templates-dt292585th" }, "name": "nginx-templates" }, { "emptyDir": {}, "name": "logs" }, { "emptyDir": {}, "name": "nginx-tmp" }, { "emptyDir": {}, "name": "run" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "emptyDir": {}, "name": "nginx-generated-config" }, { "emptyDir": {}, "name": "nginx-generated-location-config" }, { "name": "api-token", "secret": { "defaultMode": 420, "secretName": "proxy" } }, { "emptyDir": {}, "name": "static-content" }, { "name": "segment-bridge-config", "secret": { "defaultMode": 420, "items": [ { "key": "key", "path": "key" }, { "key": "url", "path": "url" } ], "optional": true, "secretName": "segment-bridge-config" } } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2", "ignore-check.kube-linter.io/no-anti-affinity": "Using topologySpreadConstraints" }, "creationTimestamp": "2026-04-24T15:30:41Z", "generation": 1, "labels": { "app": "proxy", "pod-template-hash": "774b6dcfd7" }, "name": "proxy-774b6dcfd7", "namespace": "konflux-ui", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "proxy", "uid": "9723e60f-d024-487a-b88d-eefecd98b4f2" } ], "resourceVersion": "31732", "uid": "2b124886-0f63-47e4-b556-6ceef658b41f" }, "spec": { "minReadySeconds": 30, "replicas": 1, "selector": { "matchLabels": { "app": "proxy", "pod-template-hash": "774b6dcfd7" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "proxy", "pod-template-hash": "774b6dcfd7" } }, "spec": { "containers": [ { "command": [ "nginx", "-g", "daemon off;", "-c", "/etc/nginx/nginx.conf" ], "image": "registry.access.redhat.com/ubi9/nginx-124@sha256:a58ed1b3229e6fb750a8459b2c1bdd7a278aa4c65e96ae40957fc7fba37ca89f", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 60, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "nginx", "ports": [ { "containerPort": 8080, "name": "web", "protocol": "TCP" }, { "containerPort": 9443, "name": "web-tls", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 9443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "300m", "memory": "256Mi" }, "requests": { "cpu": "30m", "memory": "128Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/nginx/nginx.conf", "name": "proxy", "readOnly": true, "subPath": "nginx.conf" }, { "mountPath": "/var/log/nginx", "name": "logs" }, { "mountPath": "/var/lib/nginx/tmp", "name": "nginx-tmp" }, { "mountPath": "/run", "name": "run" }, { "mountPath": "/mnt", "name": "serving-cert" }, { "mountPath": "/mnt/nginx-generated-config", "name": "nginx-generated-config" }, { "mountPath": "/mnt/nginx-generated-location-config", "name": "nginx-generated-location-config" }, { "mountPath": "/opt/app-root/src/static-content", "name": "static-content" }, { "mountPath": "/opt/app-root/src/segment", "name": "segment-bridge-config" } ] }, { "env": [ { "name": "OAUTH2_PROXY_PROVIDER", "value": "oidc" }, { "name": "OAUTH2_PROXY_PROVIDER_DISPLAY_NAME", "value": "Dex OIDC" }, { "name": "OAUTH2_PROXY_CLIENT_ID", "value": "oauth2-proxy" }, { "name": "OAUTH2_PROXY_HTTP_ADDRESS", "value": "127.0.0.1:6000" }, { "name": "OAUTH2_PROXY_SKIP_PROVIDER_BUTTON", "value": "true" }, { "name": "OAUTH2_PROXY_PROMPT", "value": "login" }, { "name": "OAUTH2_PROXY_REDIRECT_URL", "value": "https://konflux-ui-konflux-ui.apps.rosa.kx-ca29e7328e.u1a1.p3.openshiftapps.com/oauth2/callback" }, { "name": "OAUTH2_PROXY_OIDC_ISSUER_URL", "value": "https://konflux-ui-konflux-ui.apps.rosa.kx-ca29e7328e.u1a1.p3.openshiftapps.com/idp/" }, { "name": "OAUTH2_PROXY_LOGIN_URL", "value": "https://konflux-ui-konflux-ui.apps.rosa.kx-ca29e7328e.u1a1.p3.openshiftapps.com/idp/auth" }, { "name": "OAUTH2_PROXY_SKIP_OIDC_DISCOVERY", "value": "true" }, { "name": "OAUTH2_PROXY_REDEEM_URL", "value": "https://dex.konflux-ui.svc.cluster.local:9443/idp/token" }, { "name": "OAUTH2_PROXY_OIDC_JWKS_URL", "value": "https://dex.konflux-ui.svc.cluster.local:9443/idp/keys" }, { "name": "OAUTH2_PROXY_COOKIE_SECURE", "value": "true" }, { "name": "OAUTH2_PROXY_COOKIE_NAME", "value": "__Host-konflux-ci-cookie" }, { "name": "OAUTH2_PROXY_EMAIL_DOMAINS", "value": "*" }, { "name": "OAUTH2_PROXY_SET_XAUTHREQUEST", "value": "true" }, { "name": "OAUTH2_PROXY_SKIP_JWT_BEARER_TOKENS", "value": "true" }, { "name": "OAUTH2_PROXY_PROVIDER_CA_FILES", "value": "/etc/ssl/certs/ca-bundle.crt" }, { "name": "OAUTH2_PROXY_WHITELIST_DOMAINS", "value": "konflux-ui-konflux-ui.apps.rosa.kx-ca29e7328e.u1a1.p3.openshiftapps.com" }, { "name": "OAUTH2_PROXY_INSECURE_OIDC_ALLOW_UNVERIFIED_EMAIL", "value": "true" }, { "name": "OAUTH2_PROXY_CLIENT_SECRET", "valueFrom": { "secretKeyRef": { "key": "client-secret", "name": "oauth2-proxy-client-secret" } } }, { "name": "OAUTH2_PROXY_COOKIE_SECRET", "valueFrom": { "secretKeyRef": { "key": "cookie-secret", "name": "oauth2-proxy-cookie-secret" } } } ], "image": "quay.io/konflux-ci/oauth2-proxy@sha256:1f4a37529de4f750099af18e113556bd995fe6922030c614b7d6d23eaa0bd318", "imagePullPolicy": "IfNotPresent", "name": "oauth2-proxy", "ports": [ { "containerPort": 6000, "name": "web", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "300m", "memory": "256Mi" }, "requests": { "cpu": "30m", "memory": "128Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/ssl/certs", "name": "ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "cp", "-R", "/opt/app-root/src/.", "/mnt/static-content/" ], "image": "quay.io/konflux-ci/konflux-ui@sha256:7b8aaf0564026876572b896a49c1574e92bd557c2704164db0bbfab485b412a7", "imagePullPolicy": "IfNotPresent", "name": "copy-static-content", "resources": { "limits": { "cpu": "50m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/mnt/static-content", "name": "static-content" } ] }, { "command": [ "sh", "-c", "set -e\n\n# Copy the auth.conf template and replace the bearer token\ntoken=$(cat /mnt/api-token/token)\nsed \"s/__BEARER_TOKEN__/$token/\" /mnt/nginx-templates/auth.conf \u003e /mnt/nginx-generated-config/auth.conf\nchmod 640 /mnt/nginx-generated-config/auth.conf\n\n# Resolve tekton-results hostname\nresults_hostname_k8s=tekton-results-api-service.tekton-pipelines.svc.cluster.local\nresults_hostname_openshift=tekton-results-api-service.openshift-pipelines.svc.cluster.local\nif nslookup $results_hostname_k8s \u003e /dev/null 2\u003e\u00261; then\n results_hostname=$results_hostname_k8s\nelif nslookup $results_hostname_openshift \u003e /dev/null 2\u003e\u00261; then\n results_hostname=$results_hostname_openshift\nelse\n echo \"Error: Could not resolve tekton-results hostname\"\n exit 1\nfi\nsed \"s/__TEKTON_RESULTS_HOSTNAME__/$results_hostname/\" /mnt/nginx-templates/tekton-results.conf \u003e /mnt/nginx-generated-location-config/tekton-results.conf\nchmod 640 /mnt/nginx-generated-location-config/tekton-results.conf\n" ], "image": "quay.io/konflux-ci/konflux-ui@sha256:7b8aaf0564026876572b896a49c1574e92bd557c2704164db0bbfab485b412a7", "imagePullPolicy": "IfNotPresent", "name": "generate-nginx-configs", "resources": { "limits": { "cpu": "50m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/mnt/nginx-generated-config", "name": "nginx-generated-config" }, { "mountPath": "/mnt/nginx-templates", "name": "nginx-templates" }, { "mountPath": "/mnt/api-token", "name": "api-token" }, { "mountPath": "/mnt/nginx-generated-location-config", "name": "nginx-generated-location-config" } ] } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "proxy", "serviceAccountName": "proxy", "terminationGracePeriodSeconds": 30, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "app": "proxy" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "ScheduleAnyway" } ], "volumes": [ { "name": "ca-bundle", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "ca.crt", "path": "ca-bundle.crt" } ], "name": "oauth2-proxy-cert" } } ] } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "nginx.conf", "path": "nginx.conf" } ], "name": "proxy-5f87fc6759" }, "name": "proxy" }, { "configMap": { "defaultMode": 420, "name": "proxy-nginx-templates-dt292585th" }, "name": "nginx-templates" }, { "emptyDir": {}, "name": "logs" }, { "emptyDir": {}, "name": "nginx-tmp" }, { "emptyDir": {}, "name": "run" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "emptyDir": {}, "name": "nginx-generated-config" }, { "emptyDir": {}, "name": "nginx-generated-location-config" }, { "name": "api-token", "secret": { "defaultMode": 420, "secretName": "proxy" } }, { "emptyDir": {}, "name": "static-content" }, { "name": "segment-bridge-config", "secret": { "defaultMode": 420, "items": [ { "key": "key", "path": "key" }, { "key": "url", "path": "url" } ], "optional": true, "secretName": "segment-bridge-config-eb8c71e115" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/no-anti-affinity": "Using topologySpreadConstraints" }, "creationTimestamp": "2026-04-24T15:30:38Z", "generation": 1, "labels": { "apps": "namespace-lister", "pod-template-hash": "64f6bbdbd7" }, "name": "namespace-lister-64f6bbdbd7", "namespace": "namespace-lister", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "namespace-lister", "uid": "e0c24e58-c9d1-4932-a7c2-8e45e78ffdf1" } ], "resourceVersion": "30364", "uid": "94b8bf37-8753-46f1-9a4b-f726c7afbd50" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "apps": "namespace-lister", "pod-template-hash": "64f6bbdbd7" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "apps": "namespace-lister", "pod-template-hash": "64f6bbdbd7" } }, "spec": { "containers": [ { "args": [ "-enable-tls", "-cert-path=/var/tls/tls.crt", "-key-path=/var/tls/tls.key" ], "env": [ { "name": "LOG_LEVEL", "value": "0" }, { "name": "CACHE_RESYNC_PERIOD", "value": "10m" }, { "name": "CACHE_NAMESPACE_LABELSELECTOR", "value": "konflux-ci.dev/type=tenant" }, { "name": "AUTH_USERNAME_HEADER", "value": "X-User" }, { "name": "AUTH_GROUPS_HEADER", "value": "X-Group" } ], "image": "quay.io/konflux-ci/namespace-lister@sha256:8dc64178aa5ffe82a4ec5e70c425c0f486a60c495f80ef4d372ad8a185c730fa", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 1, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "namespace-lister", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 1, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "200m", "memory": "256Mi" }, "requests": { "cpu": "20m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/tls", "name": "tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "namespace-lister", "serviceAccountName": "namespace-lister", "terminationGracePeriodSeconds": 60, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "apps": "namespace-lister" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "ScheduleAnyway" } ], "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "secretName": "namespace-lister-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/ibm-cloud-managed": "true" }, "creationTimestamp": "2026-04-24T14:58:26Z", "generation": 1, "labels": { "name": "cluster-samples-operator", "pod-template-hash": "8696bc5b94" }, "name": "cluster-samples-operator-8696bc5b94", "namespace": "openshift-cluster-samples-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-samples-operator", "uid": "568d4982-a760-42d3-8102-be237c43935b" } ], "resourceVersion": "11206", "uid": "1c70bbf4-d8f5-489c-baee-55ba6549dcb7" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "cluster-samples-operator", "pod-template-hash": "8696bc5b94" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "cluster-samples-operator", "pod-template-hash": "8696bc5b94" } }, "spec": { "containers": [ { "command": [ "cluster-samples-operator" ], "env": [ { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "OPERATOR_NAME", "value": "cluster-samples-operator" }, { "name": "RELEASE_VERSION", "value": "4.20.8" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4556896f77307821531ef91b7b7faccb82b824ea695693b2989f597f0deca038", "imagePullPolicy": "IfNotPresent", "name": "cluster-samples-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/secrets", "name": "samples-operator-tls" } ] }, { "args": [ "--namespace=openshift-cluster-samples-operator", "--process-name=cluster-samples-operator", "--termination-grace-period=30s", "--files=/etc/secrets/tls.crt,/etc/secrets/tls.key" ], "command": [ "cluster-samples-operator-watch", "file-watcher-watchdog" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4556896f77307821531ef91b7b7faccb82b824ea695693b2989f597f0deca038", "imagePullPolicy": "IfNotPresent", "name": "cluster-samples-operator-watch", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cluster-samples-operator", "serviceAccountName": "cluster-samples-operator", "shareProcessNamespace": true, "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "samples-operator-tls", "secret": { "defaultMode": 420, "secretName": "samples-operator-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "79b241ba4ce6e551a9f13a2a3ada087ba6c81859eec63a9f4861b7290e185e76" }, "creationTimestamp": "2026-04-24T14:58:21Z", "generation": 1, "labels": { "name": "volume-data-source-validator", "openshift.storage.network-policy.api-server": "allow", "openshift.storage.network-policy.dns": "allow", "pod-template-hash": "6f8fd97467" }, "name": "volume-data-source-validator-6f8fd97467", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "volume-data-source-validator", "uid": "abb167ae-b4b4-49ed-8449-97e8f44f0b3d" } ], "resourceVersion": "10582", "uid": "5d381d3e-4bca-4f7d-988c-6ac0608d9f66" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "volume-data-source-validator", "pod-template-hash": "6f8fd97467" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "volume-data-source-validator", "openshift.storage.network-policy.api-server": "allow", "openshift.storage.network-policy.dns": "allow", "pod-template-hash": "6f8fd97467" } }, "spec": { "containers": [ { "args": [ "--v=2", "--http-endpoint=127.0.0.1:8443", "--leader-election=true", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-storage-operator" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:36b9e89c3cfcf1ab9ae500486e38afb6862cba48cb0b4d84a09508ab8f3d299f", "imagePullPolicy": "Always", "name": "volume-data-source-validator", "ports": [ { "containerPort": 8443, "name": "validator-http", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "volume-data-source-validator", "serviceAccountName": "volume-data-source-validator", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "config.openshift.io/inject-proxy": "console-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true" }, "creationTimestamp": "2026-04-24T14:58:28Z", "generation": 1, "labels": { "name": "console-operator", "pod-template-hash": "575cd97545" }, "name": "console-operator-575cd97545", "namespace": "openshift-console-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console-operator", "uid": "65aefb06-1e32-454b-84c9-86102935d788" } ], "resourceVersion": "11679", "uid": "ed95bdaf-8d58-4b69-a6ad-800f98f5d67a" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "console-operator", "pod-template-hash": "575cd97545" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "console-operator", "pod-template-hash": "575cd97545" } }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/controller-config.yaml" ], "command": [ "console", "operator" ], "env": [ { "name": "CONSOLE_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3d6ea9e1633f38070718a1357fcb80e6cb3932aafcc4d65e659795b186c5da15" }, { "name": "DOWNLOADS_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:32d4561d4bf1b3c4e3a7878f918f9c1422bab85bdf8711fbdf905d59692fee81" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.20.8" }, { "name": "OPERATOR_NAME", "value": "console-operator" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:653c666f842c13e0baae2e89a9b1efe0e2ef56f621ffb5b32005115d2a26ab8c", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "console-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca" } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console-operator", "serviceAccountName": "console-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "console-operator-config" }, "name": "config" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca" }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "11791", "console.openshift.io/console-config-version": "15823", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3d6ea9e1633f38070718a1357fcb80e6cb3932aafcc4d65e659795b186c5da15", "console.openshift.io/infrastructure-config-version": "1495", "console.openshift.io/oauth-secret-version": "11772", "console.openshift.io/proxy-config-version": "1506", "console.openshift.io/service-ca-config-version": "11924", "console.openshift.io/trusted-ca-config-version": "11948", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "4", "operator.openshift.io/spec-hash": "72c476db78fce168c5045adbe0d0c32969405cd784f562ff542a55f5ad134fd6" }, "creationTimestamp": "2026-04-24T15:17:34Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "5d68cc6567" }, "name": "console-5d68cc6567", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "bbcaaecd-8a2c-413e-b704-44115f1a2a8d" } ], "resourceVersion": "17369", "uid": "1ab211d4-8a54-433e-a85a-f0a7609320f8" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "5d68cc6567" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "11791", "console.openshift.io/console-config-version": "15823", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3d6ea9e1633f38070718a1357fcb80e6cb3932aafcc4d65e659795b186c5da15", "console.openshift.io/infrastructure-config-version": "1495", "console.openshift.io/oauth-secret-version": "11772", "console.openshift.io/proxy-config-version": "1506", "console.openshift.io/service-ca-config-version": "11924", "console.openshift.io/trusted-ca-config-version": "11948", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "5d68cc6567" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3d6ea9e1633f38070718a1357fcb80e6cb3932aafcc4d65e659795b186c5da15", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "11791", "console.openshift.io/console-config-version": "11919", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3d6ea9e1633f38070718a1357fcb80e6cb3932aafcc4d65e659795b186c5da15", "console.openshift.io/infrastructure-config-version": "1495", "console.openshift.io/oauth-secret-version": "11772", "console.openshift.io/proxy-config-version": "1506", "console.openshift.io/service-ca-config-version": "11924", "console.openshift.io/trusted-ca-config-version": "11948", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "2", "operator.openshift.io/spec-hash": "efbc1fcd85a68b338a62554dc7ce3d81ffc7fe0ab697056dff6e3d67966c5b30" }, "creationTimestamp": "2026-04-24T15:12:10Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "647ccd467c" }, "name": "console-647ccd467c", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "bbcaaecd-8a2c-413e-b704-44115f1a2a8d" } ], "resourceVersion": "15272", "uid": "8af3e88f-cb23-4408-b12a-93d3c4f51681" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "647ccd467c" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "11791", "console.openshift.io/console-config-version": "11919", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3d6ea9e1633f38070718a1357fcb80e6cb3932aafcc4d65e659795b186c5da15", "console.openshift.io/infrastructure-config-version": "1495", "console.openshift.io/oauth-secret-version": "11772", "console.openshift.io/proxy-config-version": "1506", "console.openshift.io/service-ca-config-version": "11924", "console.openshift.io/trusted-ca-config-version": "11948", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "647ccd467c" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3d6ea9e1633f38070718a1357fcb80e6cb3932aafcc4d65e659795b186c5da15", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "11791", "console.openshift.io/console-config-version": "17215", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3d6ea9e1633f38070718a1357fcb80e6cb3932aafcc4d65e659795b186c5da15", "console.openshift.io/infrastructure-config-version": "1495", "console.openshift.io/oauth-secret-version": "11772", "console.openshift.io/proxy-config-version": "1506", "console.openshift.io/service-ca-config-version": "11924", "console.openshift.io/trusted-ca-config-version": "11948", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "5", "operator.openshift.io/spec-hash": "5847f71a7eef42af9cb0e1479a43fe69ff22644787600176f69b0ca03b13bd03" }, "creationTimestamp": "2026-04-24T15:19:55Z", "generation": 1, "labels": { "app": "console", "component": "ui", "pod-template-hash": "64b945d754" }, "name": "console-64b945d754", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "bbcaaecd-8a2c-413e-b704-44115f1a2a8d" } ], "resourceVersion": "17534", "uid": "c2a2cf5f-7059-40fe-87cf-511583796d4c" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "64b945d754" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "11791", "console.openshift.io/console-config-version": "17215", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3d6ea9e1633f38070718a1357fcb80e6cb3932aafcc4d65e659795b186c5da15", "console.openshift.io/infrastructure-config-version": "1495", "console.openshift.io/oauth-secret-version": "11772", "console.openshift.io/proxy-config-version": "1506", "console.openshift.io/service-ca-config-version": "11924", "console.openshift.io/trusted-ca-config-version": "11948", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "64b945d754" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3d6ea9e1633f38070718a1357fcb80e6cb3932aafcc4d65e659795b186c5da15", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "11791", "console.openshift.io/console-config-version": "14689", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3d6ea9e1633f38070718a1357fcb80e6cb3932aafcc4d65e659795b186c5da15", "console.openshift.io/infrastructure-config-version": "1495", "console.openshift.io/oauth-secret-version": "11772", "console.openshift.io/proxy-config-version": "1506", "console.openshift.io/service-ca-config-version": "11924", "console.openshift.io/trusted-ca-config-version": "11948", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "3", "operator.openshift.io/spec-hash": "c06067d830b5d96b2fa3590c58849614c746d3db66b3da621655612814441007" }, "creationTimestamp": "2026-04-24T15:16:10Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "6986c8dd4" }, "name": "console-6986c8dd4", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "bbcaaecd-8a2c-413e-b704-44115f1a2a8d" } ], "resourceVersion": "16397", "uid": "00c96439-533e-4605-a99a-74cd4cc85ad8" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "6986c8dd4" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "11791", "console.openshift.io/console-config-version": "14689", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3d6ea9e1633f38070718a1357fcb80e6cb3932aafcc4d65e659795b186c5da15", "console.openshift.io/infrastructure-config-version": "1495", "console.openshift.io/oauth-secret-version": "11772", "console.openshift.io/proxy-config-version": "1506", "console.openshift.io/service-ca-config-version": "11924", "console.openshift.io/trusted-ca-config-version": "11948", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "6986c8dd4" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3d6ea9e1633f38070718a1357fcb80e6cb3932aafcc4d65e659795b186c5da15", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "11791", "console.openshift.io/console-config-version": "11919", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3d6ea9e1633f38070718a1357fcb80e6cb3932aafcc4d65e659795b186c5da15", "console.openshift.io/infrastructure-config-version": "1495", "console.openshift.io/oauth-secret-version": "11772", "console.openshift.io/proxy-config-version": "1506", "console.openshift.io/service-ca-config-version": "11922", "console.openshift.io/trusted-ca-config-version": "11923", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "7dd919bcaea592969c354720adda4591a3607b37b599a6e04a8cad3a5b94b705" }, "creationTimestamp": "2026-04-24T15:12:02Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "7b6d7cfd7f" }, "name": "console-7b6d7cfd7f", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "bbcaaecd-8a2c-413e-b704-44115f1a2a8d" } ], "resourceVersion": "14278", "uid": "c32cbc64-7192-48db-bafd-d68db8d07483" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "7b6d7cfd7f" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "11791", "console.openshift.io/console-config-version": "11919", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3d6ea9e1633f38070718a1357fcb80e6cb3932aafcc4d65e659795b186c5da15", "console.openshift.io/infrastructure-config-version": "1495", "console.openshift.io/oauth-secret-version": "11772", "console.openshift.io/proxy-config-version": "1506", "console.openshift.io/service-ca-config-version": "11922", "console.openshift.io/trusted-ca-config-version": "11923", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "7b6d7cfd7f" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3d6ea9e1633f38070718a1357fcb80e6cb3932aafcc4d65e659795b186c5da15", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "6acd44ea745ca7c165323fdf83fa823a66d73aec1e851d2161e081f0e044f6c9" }, "creationTimestamp": "2026-04-24T15:11:55Z", "generation": 1, "labels": { "app": "console", "component": "downloads", "pod-template-hash": "56cb7c9577" }, "name": "downloads-56cb7c9577", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "downloads", "uid": "d7298765-5d90-4566-a538-087e5d15ee10" } ], "resourceVersion": "15234", "uid": "c748720a-1ac4-405f-8557-29b284f43903" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "console", "component": "downloads", "pod-template-hash": "56cb7c9577" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "downloads", "pod-template-hash": "56cb7c9577" }, "name": "downloads" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "downloads" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "-c", "cat \u003c\u003cEOF \u003e\u003e/tmp/serve.py\nimport errno, http.server, os, re, signal, socket, sys, tarfile, tempfile, threading, time, zipfile\n\nsignal.signal(signal.SIGTERM, lambda signum, frame: sys.exit(0))\n\ndef write_index(path, message):\n with open(path, 'wb') as f:\n f.write('\\n'.join([\n '\u003c!doctype html\u003e',\n '\u003chtml lang=\"en\"\u003e',\n '\u003chead\u003e',\n ' \u003cmeta charset=\"utf-8\"\u003e',\n '\u003c/head\u003e',\n '\u003cbody\u003e',\n ' {}'.format(message),\n '\u003c/body\u003e',\n '\u003c/html\u003e',\n '',\n ]).encode('utf-8'))\n\n# Launch multiple listeners as threads\nclass Thread(threading.Thread):\n def __init__(self, i, socket):\n threading.Thread.__init__(self)\n self.i = i\n self.socket = socket\n self.daemon = True\n self.start()\n\n def run(self):\n server = http.server.SimpleHTTPRequestHandler\n server.server_version = \"OpenShift Downloads Server\"\n server.sys_version = \"\"\n httpd = http.server.HTTPServer(addr, server, False)\n\n # Prevent the HTTP server from re-binding every handler.\n # https://stackoverflow.com/questions/46210672/\n httpd.socket = self.socket\n httpd.server_bind = self.server_close = lambda self: None\n\n httpd.serve_forever()\n\ntemp_dir = tempfile.mkdtemp()\nprint('serving from {}'.format(temp_dir))\nos.chdir(temp_dir)\nfor arch in ['amd64', 'arm64', 'ppc64le', 's390x']:\n os.mkdir(arch)\ncontent = ['\u003ca href=\"oc-license\"\u003elicense\u003c/a\u003e']\nos.symlink('/usr/share/openshift/LICENSE', 'oc-license')\n\nfor arch, operating_system, path in [\n ('amd64', 'linux', '/usr/share/openshift/linux_amd64/oc'),\n ('amd64', 'mac', '/usr/share/openshift/mac/oc'),\n ('amd64', 'windows', '/usr/share/openshift/windows/oc.exe'),\n ('arm64', 'linux', '/usr/share/openshift/linux_arm64/oc'),\n ('arm64', 'mac', '/usr/share/openshift/mac_arm64/oc'),\n ('ppc64le', 'linux', '/usr/share/openshift/linux_ppc64le/oc'),\n ('s390x', 'linux', '/usr/share/openshift/linux_s390x/oc'),\n ]:\n basename = os.path.basename(path)\n target_path = os.path.join(arch, operating_system, basename)\n os.mkdir(os.path.join(arch, operating_system))\n os.symlink(path, target_path)\n base_root, _ = os.path.splitext(basename)\n archive_path_root = os.path.join(arch, operating_system, base_root)\n with tarfile.open('{}.tar'.format(archive_path_root), 'w') as tar:\n tar.add(path, basename)\n with zipfile.ZipFile('{}.zip'.format(archive_path_root), 'w') as zip:\n zip.write(path, basename)\n content.append(\n '\u003ca href=\"{0}\"\u003eoc ({1} {2})\u003c/a\u003e (\u003ca href=\"{3}.tar\"\u003etar\u003c/a\u003e \u003ca href=\"{3}.zip\"\u003ezip\u003c/a\u003e)'.format(\n target_path, arch, operating_system, archive_path_root\n )\n )\n\nfor root, directories, filenames in os.walk(temp_dir):\n root_link = os.path.relpath(temp_dir, os.path.join(root, 'child')).replace(os.path.sep, '/')\n for directory in directories:\n write_index(\n path=os.path.join(root, directory, 'index.html'),\n message='\u003cp\u003eDirectory listings are disabled. See \u003ca href=\"{}\"\u003ehere\u003c/a\u003e for available content.\u003c/p\u003e'.format(root_link),\n )\n\nwrite_index(\n path=os.path.join(temp_dir, 'index.html'),\n message='\\n'.join(\n ['\u003cul\u003e'] +\n [' \u003cli\u003e{}\u003c/li\u003e'.format(entry) for entry in content] +\n ['\u003c/ul\u003e']\n ),\n)\n\n# Create socket\n# IPv6 should handle IPv4 passively so long as it is not bound to a\n# specific address or set to IPv6_ONLY\n# https://stackoverflow.com/questions/25817848/python-3-does-http-server-support-ipv6\ntry:\n addr = ('::', 8080)\n sock = socket.socket(socket.AF_INET6, socket.SOCK_STREAM)\nexcept socket.error as err:\n # errno.EAFNOSUPPORT is \"socket.error: [Errno 97] Address family not supported by protocol\"\n # When IPv6 is disabled, socket will bind using IPv4.\n if err.errno == errno.EAFNOSUPPORT:\n addr = ('', 8080)\n sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)\n else:\n raise \nsock.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)\nsock.bind(addr)\nsock.listen(5)\n\n[Thread(i, socket=sock) for i in range(100)]\ntime.sleep(9e9)\nEOF\nexec python3 /tmp/serve.py\n" ], "command": [ "/bin/sh" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:32d4561d4bf1b3c4e3a7878f918f9c1422bab85bdf8711fbdf905d59692fee81", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "download-server", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 0, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:11:57Z", "generation": 2, "labels": { "app": "deployment-validation-operator", "name": "deployment-validation-operator", "pod-template-hash": "8467cb49c4" }, "name": "deployment-validation-operator-8467cb49c4", "namespace": "openshift-deployment-validation-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "deployment-validation-operator", "uid": "f9db6f15-1a31-4608-9d1d-1fdff7049076" } ], "resourceVersion": "15524", "uid": "510240fd-fa8f-4a95-a7e3-9bdd5711fba0" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "deployment-validation-operator", "pod-template-hash": "8467cb49c4" } }, "template": { "metadata": { "annotations": { "capabilities": "Basic Install", "categories": "Application Runtime, Monitoring, Security", "certified": "false", "containerImage": "quay.io/app-sre/deployment-validation-operator:0.1.595-gbf89fe8", "createdAt": "2026-04-24T10:27:15Z", "description": "The deployment validation operator", "olm.operatorGroup": "deployment-validation-operator-og", "olm.operatorNamespace": "openshift-deployment-validation-operator", "olm.targetNamespaces": "openshift-deployment-validation-operator", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.package\",\"value\":{\"packageName\":\"deployment-validation-operator\",\"version\":\"0.1.595-gbf89fe8\"}}]}", "repository": "https://github.com/app-sre/deployment-validation-operator", "support": "Best Effort" }, "creationTimestamp": null, "labels": { "app": "deployment-validation-operator", "name": "deployment-validation-operator", "pod-template-hash": "8467cb49c4" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "node-role.kubernetes.io/infra", "operator": "Exists" } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "deployment-validation-operator" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "--config /config/deployment-validation-operator-config.yaml" ], "env": [ { "name": "WATCH_NAMESPACE" }, { "name": "OPERATOR_NAME", "value": "deployment-validation-operator" }, { "name": "NAMESPACE_IGNORE_PATTERN", "value": "openshift.*|kube-.+|open-cluster-management-.*|default|dedicated-admin" }, { "name": "RESOURCES_PER_LIST_QUERY", "value": "5" }, { "name": "VALIDATION_CHECK_INTERVAL", "value": "2m" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "OPERATOR_CONDITION_NAME", "value": "deployment-validation-operator.v0.1.595-gbf89fe8" } ], "image": "quay.io/app-sre/deployment-validation-operator:0.1.595-gbf89fe8", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "deployment-validation-operator", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "resources": { "limits": { "memory": "600Mi" }, "requests": { "cpu": "50m", "memory": "400Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/config", "name": "dvo-config" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/arch": "amd64" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "deployment-validation-operator", "serviceAccountName": "deployment-validation-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/infra", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "deployment-validation-operator-config", "optional": true }, "name": "dvo-config" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-04-24T15:16:57Z", "generation": 1, "labels": { "app": "deployment-validation-operator", "name": "deployment-validation-operator", "pod-template-hash": "fd5f8d89c" }, "name": "deployment-validation-operator-fd5f8d89c", "namespace": "openshift-deployment-validation-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "deployment-validation-operator", "uid": "f9db6f15-1a31-4608-9d1d-1fdff7049076" } ], "resourceVersion": "15497", "uid": "752c9e76-c925-4164-b1a3-89506ab224f3" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "deployment-validation-operator", "pod-template-hash": "fd5f8d89c" } }, "template": { "metadata": { "annotations": { "capabilities": "Basic Install", "categories": "Application Runtime, Monitoring, Security", "certified": "false", "containerImage": "quay.io/app-sre/deployment-validation-operator:0.1.595-gbf89fe8", "createdAt": "2026-04-24T10:27:15Z", "description": "The deployment validation operator", "olm.operatorGroup": "deployment-validation-operator-og", "olm.operatorNamespace": "openshift-deployment-validation-operator", "olm.targetNamespaces": "openshift-deployment-validation-operator", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.package\",\"value\":{\"packageName\":\"deployment-validation-operator\",\"version\":\"0.1.595-gbf89fe8\"}}]}", "repository": "https://github.com/app-sre/deployment-validation-operator", "support": "Best Effort" }, "creationTimestamp": null, "labels": { "app": "deployment-validation-operator", "name": "deployment-validation-operator", "pod-template-hash": "fd5f8d89c" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "deployment-validation-operator" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "--config /config/deployment-validation-operator-config.yaml" ], "env": [ { "name": "WATCH_NAMESPACE" }, { "name": "OPERATOR_NAME", "value": "deployment-validation-operator" }, { "name": "NAMESPACE_IGNORE_PATTERN", "value": "^(openshift.*|kube-.*|default|dedicated-admin|redhat-.*|acm|addon-dba-operator|codeready-.*|prow)$" }, { "name": "RESOURCES_PER_LIST_QUERY", "value": "5" }, { "name": "VALIDATION_CHECK_INTERVAL", "value": "2m" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "OPERATOR_CONDITION_NAME", "value": "deployment-validation-operator.v0.1.595-gbf89fe8" } ], "image": "quay.io/app-sre/deployment-validation-operator:0.1.595-gbf89fe8", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "deployment-validation-operator", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "resources": { "limits": { "memory": "600Mi" }, "requests": { "cpu": "50m", "memory": "400Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/config", "name": "dvo-config" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/arch": "amd64" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "deployment-validation-operator", "serviceAccountName": "deployment-validation-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/infra", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "deployment-validation-operator-config", "optional": true }, "name": "dvo-config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "4", "imageregistry.operator.openshift.io/checksum": "sha256:9e85430135c951f4981f4632bcac13ed9605baa74f83a817e971ac0374bfbd5f", "operator.openshift.io/spec-hash": "4ca4ebf0f1868cfa680469adc652b5db1177516366ecbb6d19e320acc81741c9", "release.openshift.io/version": "4.20.8" }, "creationTimestamp": "2026-04-24T15:11:32Z", "generation": 2, "labels": { "docker-registry": "default", "pod-template-hash": "5868f658b9" }, "name": "image-registry-5868f658b9", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "image-registry", "uid": "498e1605-5a46-4650-9fd7-6c39ef5619b5" } ], "resourceVersion": "15020", "uid": "84c45ad4-a668-4629-b464-7d2c72da5ab3" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "docker-registry": "default", "pod-template-hash": "5868f658b9" } }, "template": { "metadata": { "annotations": { "imageregistry.operator.openshift.io/dependencies-checksum": "sha256:d054f42a1887ea15f5226ce19182bb25b6803c86285361fc46dfcff06544c261", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "docker-registry": "default", "pod-template-hash": "5868f658b9" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "namespaces": [ "openshift-image-registry" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/sh", "-c", "mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem \u0026\u0026 update-ca-trust extract --output /etc/pki/ca-trust/extracted/ \u0026\u0026 exec /usr/bin/dockerregistry" ], "env": [ { "name": "REGISTRY_STORAGE", "value": "s3" }, { "name": "REGISTRY_STORAGE_S3_BUCKET", "value": "2psja02f2k2pd7f83gt8atnjlu4e5521-image-registry-us-east-1-pyxr" }, { "name": "REGISTRY_STORAGE_S3_REGION", "value": "us-east-1" }, { "name": "REGISTRY_STORAGE_S3_ENCRYPT", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_FORCEPATHSTYLE", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH", "value": "/var/run/secrets/cloud/credentials" }, { "name": "REGISTRY_STORAGE_S3_USEDUALSTACK", "value": "true" }, { "name": "REGISTRY_HTTP_ADDR", "value": ":5000" }, { "name": "REGISTRY_HTTP_NET", "value": "tcp" }, { "name": "REGISTRY_HTTP_SECRET", "value": "9402414b74522116fa84c317cc504c3389ff9a1ad3295de8f49d77f44f73b0e187aab4df692c9befcc0b8e3dbcf1c6ab9a685a3b8d026e405899a9f3a7c72ea3" }, { "name": "REGISTRY_LOG_LEVEL", "value": "info" }, { "name": "REGISTRY_OPENSHIFT_QUOTA_ENABLED", "value": "true" }, { "name": "REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR", "value": "inmemory" }, { "name": "REGISTRY_STORAGE_DELETE_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL", "value": "10s" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD", "value": "1" }, { "name": "REGISTRY_OPENSHIFT_METRICS_ENABLED", "value": "true" }, { "name": "REGISTRY_OPENSHIFT_SERVER_ADDR", "value": "image-registry.openshift-image-registry.svc:5000" }, { "name": "REGISTRY_HTTP_TLS_CERTIFICATE", "value": "/etc/secrets/tls.crt" }, { "name": "REGISTRY_HTTP_TLS_KEY", "value": "/etc/secrets/tls.key" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:56a85660a445eced5c79a595a0eccf590087c5672d50f49d4c25ad52f9a44f04", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "registry", "ports": [ { "containerPort": 5000, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/cloud", "name": "image-registry-private-configuration", "readOnly": true }, { "mountPath": "/etc/secrets", "name": "registry-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted", "name": "ca-trust-extracted" }, { "mountPath": "/etc/pki/ca-trust/source/anchors", "name": "registry-certificates" }, { "mountPath": "/usr/share/pki/ca-trust-source", "name": "trusted-ca" }, { "mountPath": "/var/lib/kubelet/", "name": "installation-pull-secrets" }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 1000310000, "fsGroupChangePolicy": "OnRootMismatch" }, "serviceAccount": "registry", "serviceAccountName": "registry", "terminationGracePeriodSeconds": 55, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "kubernetes.io/hostname", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "node-role.kubernetes.io/worker", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "DoNotSchedule" } ], "volumes": [ { "name": "image-registry-private-configuration", "secret": { "defaultMode": 420, "optional": false, "secretName": "image-registry-private-configuration" } }, { "name": "registry-tls", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "image-registry-tls" } } ] } }, { "emptyDir": {}, "name": "ca-trust-extracted" }, { "configMap": { "defaultMode": 420, "name": "image-registry-certificates" }, "name": "registry-certificates" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "anchors/ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "name": "installation-pull-secrets", "secret": { "defaultMode": 420, "items": [ { "key": ".dockerconfigjson", "path": "config.json" } ], "optional": true, "secretName": "installation-pull-secrets" } }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 2, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "3", "imageregistry.operator.openshift.io/checksum": "sha256:62f25277a5d56658661bf4d629a90f773ee5558af68dbbdec834f988c81514be", "operator.openshift.io/spec-hash": "29f5600e4bde9aa4712635d05e56bc3438add36279f7d3e523622d77fdfec75b", "release.openshift.io/version": "4.20.8" }, "creationTimestamp": "2026-04-24T15:11:14Z", "generation": 4, "labels": { "docker-registry": "default", "pod-template-hash": "5b75c965f4" }, "name": "image-registry-5b75c965f4", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "image-registry", "uid": "498e1605-5a46-4650-9fd7-6c39ef5619b5" } ], "resourceVersion": "12578", "uid": "5a682893-0964-4c22-b564-a05ddae6ef88" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "docker-registry": "default", "pod-template-hash": "5b75c965f4" } }, "template": { "metadata": { "annotations": { "imageregistry.operator.openshift.io/dependencies-checksum": "sha256:23d88278a7a4085c05b6dcbe559155e1a23bcba2354e410d7ad832d6d0e8efa8", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "docker-registry": "default", "pod-template-hash": "5b75c965f4" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "namespaces": [ "openshift-image-registry" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/sh", "-c", "mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem \u0026\u0026 update-ca-trust extract --output /etc/pki/ca-trust/extracted/ \u0026\u0026 exec /usr/bin/dockerregistry" ], "env": [ { "name": "REGISTRY_STORAGE", "value": "s3" }, { "name": "REGISTRY_STORAGE_S3_BUCKET", "value": "2psja02f2k2pd7f83gt8atnjlu4e5521-image-registry-us-east-1-pyxr" }, { "name": "REGISTRY_STORAGE_S3_REGION", "value": "us-east-1" }, { "name": "REGISTRY_STORAGE_S3_ENCRYPT", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_FORCEPATHSTYLE", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH", "value": "/var/run/secrets/cloud/credentials" }, { "name": "REGISTRY_STORAGE_S3_USEDUALSTACK", "value": "true" }, { "name": "REGISTRY_HTTP_ADDR", "value": ":5000" }, { "name": "REGISTRY_HTTP_NET", "value": "tcp" }, { "name": "REGISTRY_HTTP_SECRET", "value": "9402414b74522116fa84c317cc504c3389ff9a1ad3295de8f49d77f44f73b0e187aab4df692c9befcc0b8e3dbcf1c6ab9a685a3b8d026e405899a9f3a7c72ea3" }, { "name": "REGISTRY_LOG_LEVEL", "value": "info" }, { "name": "REGISTRY_OPENSHIFT_QUOTA_ENABLED", "value": "true" }, { "name": "REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR", "value": "inmemory" }, { "name": "REGISTRY_STORAGE_DELETE_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL", "value": "10s" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD", "value": "1" }, { "name": "REGISTRY_OPENSHIFT_METRICS_ENABLED", "value": "true" }, { "name": "REGISTRY_OPENSHIFT_SERVER_ADDR", "value": "image-registry.openshift-image-registry.svc:5000" }, { "name": "REGISTRY_HTTP_TLS_CERTIFICATE", "value": "/etc/secrets/tls.crt" }, { "name": "REGISTRY_HTTP_TLS_KEY", "value": "/etc/secrets/tls.key" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:56a85660a445eced5c79a595a0eccf590087c5672d50f49d4c25ad52f9a44f04", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "registry", "ports": [ { "containerPort": 5000, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/cloud", "name": "image-registry-private-configuration", "readOnly": true }, { "mountPath": "/etc/secrets", "name": "registry-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted", "name": "ca-trust-extracted" }, { "mountPath": "/etc/pki/ca-trust/source/anchors", "name": "registry-certificates" }, { "mountPath": "/usr/share/pki/ca-trust-source", "name": "trusted-ca" }, { "mountPath": "/var/lib/kubelet/", "name": "installation-pull-secrets" }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 1000310000, "fsGroupChangePolicy": "OnRootMismatch" }, "serviceAccount": "registry", "serviceAccountName": "registry", "terminationGracePeriodSeconds": 55, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "kubernetes.io/hostname", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "node-role.kubernetes.io/worker", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "DoNotSchedule" } ], "volumes": [ { "name": "image-registry-private-configuration", "secret": { "defaultMode": 420, "optional": false, "secretName": "image-registry-private-configuration" } }, { "name": "registry-tls", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "image-registry-tls" } } ] } }, { "emptyDir": {}, "name": "ca-trust-extracted" }, { "configMap": { "defaultMode": 420, "name": "image-registry-certificates" }, "name": "registry-certificates" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "anchors/ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "name": "installation-pull-secrets", "secret": { "defaultMode": 420, "items": [ { "key": ".dockerconfigjson", "path": "config.json" } ], "optional": true, "secretName": "installation-pull-secrets" } }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "2", "imageregistry.operator.openshift.io/checksum": "sha256:86f55d6543b0eaad3769a15c97de54f392a7876d6dad9cdd05a4652c8460b4eb", "operator.openshift.io/spec-hash": "8285ed91c7542544a2b5aaee2458bb7fbc71bcaac1637a3f42df738d03f1e35d", "release.openshift.io/version": "4.20.8" }, "creationTimestamp": "2026-04-24T15:08:08Z", "generation": 4, "labels": { "docker-registry": "default", "pod-template-hash": "6fc8c4b7b6" }, "name": "image-registry-6fc8c4b7b6", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "image-registry", "uid": "498e1605-5a46-4650-9fd7-6c39ef5619b5" } ], "resourceVersion": "11252", "uid": "8b4fc554-a270-4aca-8c7e-16fd6cc0d1f5" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "docker-registry": "default", "pod-template-hash": "6fc8c4b7b6" } }, "template": { "metadata": { "annotations": { "imageregistry.operator.openshift.io/dependencies-checksum": "sha256:7325e31ef5189a99d6730d9d67b9eefb32d54b578ee2756fad26384643456dbb", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "docker-registry": "default", "pod-template-hash": "6fc8c4b7b6" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "namespaces": [ "openshift-image-registry" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/sh", "-c", "mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem \u0026\u0026 update-ca-trust extract --output /etc/pki/ca-trust/extracted/ \u0026\u0026 exec /usr/bin/dockerregistry" ], "env": [ { "name": "REGISTRY_STORAGE", "value": "s3" }, { "name": "REGISTRY_STORAGE_S3_BUCKET", "value": "2psja02f2k2pd7f83gt8atnjlu4e5521-image-registry-us-east-1-pyxr" }, { "name": "REGISTRY_STORAGE_S3_REGION", "value": "us-east-1" }, { "name": "REGISTRY_STORAGE_S3_ENCRYPT", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_FORCEPATHSTYLE", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH", "value": "/var/run/secrets/cloud/credentials" }, { "name": "REGISTRY_STORAGE_S3_USEDUALSTACK", "value": "true" }, { "name": "REGISTRY_HTTP_ADDR", "value": ":5000" }, { "name": "REGISTRY_HTTP_NET", "value": "tcp" }, { "name": "REGISTRY_HTTP_SECRET", "value": "9402414b74522116fa84c317cc504c3389ff9a1ad3295de8f49d77f44f73b0e187aab4df692c9befcc0b8e3dbcf1c6ab9a685a3b8d026e405899a9f3a7c72ea3" }, { "name": "REGISTRY_LOG_LEVEL", "value": "info" }, { "name": "REGISTRY_OPENSHIFT_QUOTA_ENABLED", "value": "true" }, { "name": "REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR", "value": "inmemory" }, { "name": "REGISTRY_STORAGE_DELETE_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL", "value": "10s" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD", "value": "1" }, { "name": "REGISTRY_OPENSHIFT_METRICS_ENABLED", "value": "true" }, { "name": "REGISTRY_OPENSHIFT_SERVER_ADDR", "value": "image-registry.openshift-image-registry.svc:5000" }, { "name": "REGISTRY_HTTP_TLS_CERTIFICATE", "value": "/etc/secrets/tls.crt" }, { "name": "REGISTRY_HTTP_TLS_KEY", "value": "/etc/secrets/tls.key" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:56a85660a445eced5c79a595a0eccf590087c5672d50f49d4c25ad52f9a44f04", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "registry", "ports": [ { "containerPort": 5000, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/cloud", "name": "image-registry-private-configuration", "readOnly": true }, { "mountPath": "/etc/secrets", "name": "registry-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted", "name": "ca-trust-extracted" }, { "mountPath": "/etc/pki/ca-trust/source/anchors", "name": "registry-certificates" }, { "mountPath": "/usr/share/pki/ca-trust-source", "name": "trusted-ca" }, { "mountPath": "/var/lib/kubelet/", "name": "installation-pull-secrets" }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 1000310000, "fsGroupChangePolicy": "OnRootMismatch" }, "serviceAccount": "registry", "serviceAccountName": "registry", "terminationGracePeriodSeconds": 55, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "kubernetes.io/hostname", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "node-role.kubernetes.io/worker", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "DoNotSchedule" } ], "volumes": [ { "name": "image-registry-private-configuration", "secret": { "defaultMode": 420, "optional": false, "secretName": "image-registry-private-configuration" } }, { "name": "registry-tls", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "image-registry-tls" } } ] } }, { "emptyDir": {}, "name": "ca-trust-extracted" }, { "configMap": { "defaultMode": 420, "name": "image-registry-certificates" }, "name": "registry-certificates" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "anchors/ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "name": "installation-pull-secrets", "secret": { "defaultMode": 420, "items": [ { "key": ".dockerconfigjson", "path": "config.json" } ], "optional": true, "secretName": "installation-pull-secrets" } }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "imageregistry.operator.openshift.io/checksum": "sha256:b307c717138a25b592e5339f7d7f1254e2161232954be1e71ca4181ff5f61fb4", "operator.openshift.io/spec-hash": "2fbafcd64e14731c4a7016d013fa5c5325ad132302c39993fba1c42456548798", "release.openshift.io/version": "4.20.8" }, "creationTimestamp": "2026-04-24T14:58:37Z", "generation": 3, "labels": { "docker-registry": "default", "pod-template-hash": "86dcfbc8d5" }, "name": "image-registry-86dcfbc8d5", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "image-registry", "uid": "498e1605-5a46-4650-9fd7-6c39ef5619b5" } ], "resourceVersion": "10944", "uid": "6f323180-52ec-4914-80c3-91212ecce1df" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "docker-registry": "default", "pod-template-hash": "86dcfbc8d5" } }, "template": { "metadata": { "annotations": { "imageregistry.operator.openshift.io/dependencies-checksum": "sha256:7325e31ef5189a99d6730d9d67b9eefb32d54b578ee2756fad26384643456dbb", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "docker-registry": "default", "pod-template-hash": "86dcfbc8d5" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "namespaces": [ "openshift-image-registry" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/sh", "-c", "mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem \u0026\u0026 update-ca-trust extract --output /etc/pki/ca-trust/extracted/ \u0026\u0026 exec /usr/bin/dockerregistry" ], "env": [ { "name": "REGISTRY_STORAGE", "value": "s3" }, { "name": "REGISTRY_STORAGE_S3_BUCKET", "value": "2psja02f2k2pd7f83gt8atnjlu4e5521-image-registry-us-east-1-pyxr" }, { "name": "REGISTRY_STORAGE_S3_REGION", "value": "us-east-1" }, { "name": "REGISTRY_STORAGE_S3_ENCRYPT", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_FORCEPATHSTYLE", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH", "value": "/var/run/secrets/cloud/credentials" }, { "name": "REGISTRY_STORAGE_S3_USEDUALSTACK", "value": "true" }, { "name": "REGISTRY_HTTP_ADDR", "value": ":5000" }, { "name": "REGISTRY_HTTP_NET", "value": "tcp" }, { "name": "REGISTRY_HTTP_SECRET", "value": "9402414b74522116fa84c317cc504c3389ff9a1ad3295de8f49d77f44f73b0e187aab4df692c9befcc0b8e3dbcf1c6ab9a685a3b8d026e405899a9f3a7c72ea3" }, { "name": "REGISTRY_LOG_LEVEL", "value": "info" }, { "name": "REGISTRY_OPENSHIFT_QUOTA_ENABLED", "value": "true" }, { "name": "REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR", "value": "inmemory" }, { "name": "REGISTRY_STORAGE_DELETE_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL", "value": "10s" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD", "value": "1" }, { "name": "REGISTRY_OPENSHIFT_METRICS_ENABLED", "value": "true" }, { "name": "REGISTRY_OPENSHIFT_SERVER_ADDR", "value": "image-registry.openshift-image-registry.svc:5000" }, { "name": "REGISTRY_HTTP_TLS_CERTIFICATE", "value": "/etc/secrets/tls.crt" }, { "name": "REGISTRY_HTTP_TLS_KEY", "value": "/etc/secrets/tls.key" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:56a85660a445eced5c79a595a0eccf590087c5672d50f49d4c25ad52f9a44f04", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "registry", "ports": [ { "containerPort": 5000, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/cloud", "name": "image-registry-private-configuration", "readOnly": true }, { "mountPath": "/etc/secrets", "name": "registry-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted", "name": "ca-trust-extracted" }, { "mountPath": "/etc/pki/ca-trust/source/anchors", "name": "registry-certificates" }, { "mountPath": "/usr/share/pki/ca-trust-source", "name": "trusted-ca" }, { "mountPath": "/var/lib/kubelet/", "name": "installation-pull-secrets" }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 1000310000, "fsGroupChangePolicy": "OnRootMismatch" }, "serviceAccount": "registry", "serviceAccountName": "registry", "terminationGracePeriodSeconds": 55, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "kubernetes.io/hostname", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "node-role.kubernetes.io/worker", "whenUnsatisfiable": "DoNotSchedule" } ], "volumes": [ { "name": "image-registry-private-configuration", "secret": { "defaultMode": 420, "optional": false, "secretName": "image-registry-private-configuration" } }, { "name": "registry-tls", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "image-registry-tls" } } ] } }, { "emptyDir": {}, "name": "ca-trust-extracted" }, { "configMap": { "defaultMode": 420, "name": "image-registry-certificates" }, "name": "registry-certificates" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "anchors/ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "name": "installation-pull-secrets", "secret": { "defaultMode": 420, "items": [ { "key": ".dockerconfigjson", "path": "config.json" } ], "optional": true, "secretName": "installation-pull-secrets" } }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T14:58:27Z", "generation": 3, "labels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "ingresscontroller.operator.openshift.io/hash": "6bf8c4f54b", "pod-template-hash": "55b7955667" }, "name": "router-default-55b7955667", "namespace": "openshift-ingress", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "router-default", "uid": "f11d27d2-7516-42b8-a11a-1b523d1b95a4" } ], "resourceVersion": "12014", "uid": "b5b5f299-0522-4cfb-9d50-aab5a080a060" }, "spec": { "minReadySeconds": 30, "replicas": 0, "selector": { "matchLabels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "pod-template-hash": "55b7955667" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "ingresscontroller.operator.openshift.io/hash": "6bf8c4f54b", "pod-template-hash": "55b7955667" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "node.openshift.io/remote-worker", "operator": "NotIn", "values": [ "" ] } ] } ] } }, "podAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/deployment-ingresscontroller", "operator": "In", "values": [ "default" ] }, { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "NotIn", "values": [ "6bf8c4f54b" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] }, "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/deployment-ingresscontroller", "operator": "In", "values": [ "default" ] }, { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "In", "values": [ "6bf8c4f54b" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "env": [ { "name": "DEFAULT_CERTIFICATE_DIR", "value": "/etc/pki/tls/private" }, { "name": "DEFAULT_DESTINATION_CA_PATH", "value": "/var/run/configmaps/service-ca/service-ca.crt" }, { "name": "RELOAD_INTERVAL", "value": "5s" }, { "name": "ROUTER_ALLOW_WILDCARD_ROUTES", "value": "false" }, { "name": "ROUTER_CANONICAL_HOSTNAME", "value": "router-default.apps.rosa.kx-ca29e7328e.u1a1.p3.openshiftapps.com" }, { "name": "ROUTER_CIPHERS", "value": "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384" }, { "name": "ROUTER_CIPHERSUITES", "value": "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256" }, { "name": "ROUTER_DISABLE_HTTP2", "value": "true" }, { "name": "ROUTER_DISABLE_NAMESPACE_OWNERSHIP_CHECK", "value": "false" }, { "name": "ROUTER_DOMAIN", "value": "apps.rosa.kx-ca29e7328e.u1a1.p3.openshiftapps.com" }, { "name": "ROUTER_ENABLE_EXTERNAL_CERTIFICATE", "value": "true" }, { "name": "ROUTER_LOAD_BALANCE_ALGORITHM", "value": "random" }, { "name": "ROUTER_METRICS_TLS_CERT_FILE", "value": "/etc/pki/tls/metrics-certs/tls.crt" }, { "name": "ROUTER_METRICS_TLS_KEY_FILE", "value": "/etc/pki/tls/metrics-certs/tls.key" }, { "name": "ROUTER_METRICS_TYPE", "value": "haproxy" }, { "name": "ROUTER_SERVICE_NAME", "value": "default" }, { "name": "ROUTER_SERVICE_NAMESPACE", "value": "openshift-ingress" }, { "name": "ROUTER_SET_FORWARDED_HEADERS", "value": "append" }, { "name": "ROUTER_TCP_BALANCE_SCHEME", "value": "source" }, { "name": "ROUTER_THREADS", "value": "4" }, { "name": "SSL_MIN_VERSION", "value": "TLSv1.2" }, { "name": "STATS_PASSWORD_FILE", "value": "/var/lib/haproxy/conf/metrics-auth/statsPassword" }, { "name": "STATS_PORT", "value": "1936" }, { "name": "STATS_USERNAME_FILE", "value": "/var/lib/haproxy/conf/metrics-auth/statsUsername" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:765f0d23b637f685f98a31bd47c131b03cf72a40761a3f9a9d6320faa3c33733", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "terminationGracePeriodSeconds": 10, "timeoutSeconds": 1 }, "name": "router", "ports": [ { "containerPort": 80, "name": "http", "protocol": "TCP" }, { "containerPort": 443, "name": "https", "protocol": "TCP" }, { "containerPort": 1936, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/ready", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": true, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 120, "httpGet": { "path": "/healthz/ready", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 1, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/tls/private", "name": "default-certificate", "readOnly": true }, { "mountPath": "/var/run/configmaps/service-ca", "name": "service-ca-bundle", "readOnly": true }, { "mountPath": "/var/lib/haproxy/conf/metrics-auth", "name": "stats-auth", "readOnly": true }, { "mountPath": "/etc/pki/tls/metrics-certs", "name": "metrics-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/worker": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "router", "serviceAccountName": "router", "terminationGracePeriodSeconds": 3600, "tolerations": [ { "effect": "NoExecute", "key": "kubernetes.io/e2e-evict-taint-key", "operator": "Equal", "value": "evictTaintVal" } ], "topologySpreadConstraints": [ { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "In", "values": [ "6bf8c4f54b" ] } ] }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "ScheduleAnyway" } ], "volumes": [ { "name": "default-certificate", "secret": { "defaultMode": 420, "secretName": "default-ingress-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "service-ca-bundle", "optional": false }, "name": "service-ca-bundle" }, { "name": "stats-auth", "secret": { "defaultMode": 420, "secretName": "router-stats-default" } }, { "name": "metrics-certs", "secret": { "defaultMode": 420, "secretName": "router-metrics-certs-default" } } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-04-24T15:00:38Z", "generation": 2, "labels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "ingresscontroller.operator.openshift.io/hash": "86c598485b", "pod-template-hash": "774967f6d5" }, "name": "router-default-774967f6d5", "namespace": "openshift-ingress", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "router-default", "uid": "f11d27d2-7516-42b8-a11a-1b523d1b95a4" } ], "resourceVersion": "15123", "uid": "d840fc31-90d1-403f-8761-b477130bf905" }, "spec": { "minReadySeconds": 30, "replicas": 2, "selector": { "matchLabels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "pod-template-hash": "774967f6d5" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "ingresscontroller.operator.openshift.io/hash": "86c598485b", "pod-template-hash": "774967f6d5" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "node.openshift.io/remote-worker", "operator": "NotIn", "values": [ "" ] } ] } ] } }, "podAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/deployment-ingresscontroller", "operator": "In", "values": [ "default" ] }, { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "NotIn", "values": [ "86c598485b" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] }, "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/deployment-ingresscontroller", "operator": "In", "values": [ "default" ] }, { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "In", "values": [ "86c598485b" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "env": [ { "name": "DEFAULT_CERTIFICATE_DIR", "value": "/etc/pki/tls/private" }, { "name": "DEFAULT_DESTINATION_CA_PATH", "value": "/var/run/configmaps/service-ca/service-ca.crt" }, { "name": "RELOAD_INTERVAL", "value": "5s" }, { "name": "ROUTER_ALLOW_WILDCARD_ROUTES", "value": "false" }, { "name": "ROUTER_CANONICAL_HOSTNAME", "value": "router-default.apps.rosa.kx-ca29e7328e.u1a1.p3.openshiftapps.com" }, { "name": "ROUTER_CIPHERS", "value": "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384" }, { "name": "ROUTER_CIPHERSUITES", "value": "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256" }, { "name": "ROUTER_DISABLE_HTTP2", "value": "true" }, { "name": "ROUTER_DISABLE_NAMESPACE_OWNERSHIP_CHECK", "value": "false" }, { "name": "ROUTER_DOMAIN", "value": "apps.rosa.kx-ca29e7328e.u1a1.p3.openshiftapps.com" }, { "name": "ROUTER_ENABLE_EXTERNAL_CERTIFICATE", "value": "true" }, { "name": "ROUTER_LOAD_BALANCE_ALGORITHM", "value": "random" }, { "name": "ROUTER_METRICS_TLS_CERT_FILE", "value": "/etc/pki/tls/metrics-certs/tls.crt" }, { "name": "ROUTER_METRICS_TLS_KEY_FILE", "value": "/etc/pki/tls/metrics-certs/tls.key" }, { "name": "ROUTER_METRICS_TYPE", "value": "haproxy" }, { "name": "ROUTER_SERVICE_NAME", "value": "default" }, { "name": "ROUTER_SERVICE_NAMESPACE", "value": "openshift-ingress" }, { "name": "ROUTER_SET_FORWARDED_HEADERS", "value": "append" }, { "name": "ROUTER_TCP_BALANCE_SCHEME", "value": "source" }, { "name": "ROUTER_THREADS", "value": "4" }, { "name": "SSL_MIN_VERSION", "value": "TLSv1.2" }, { "name": "STATS_PASSWORD_FILE", "value": "/var/lib/haproxy/conf/metrics-auth/statsPassword" }, { "name": "STATS_PORT", "value": "1936" }, { "name": "STATS_USERNAME_FILE", "value": "/var/lib/haproxy/conf/metrics-auth/statsUsername" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:765f0d23b637f685f98a31bd47c131b03cf72a40761a3f9a9d6320faa3c33733", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "terminationGracePeriodSeconds": 10, "timeoutSeconds": 1 }, "name": "router", "ports": [ { "containerPort": 80, "name": "http", "protocol": "TCP" }, { "containerPort": 443, "name": "https", "protocol": "TCP" }, { "containerPort": 1936, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/ready", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": true, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 120, "httpGet": { "path": "/healthz/ready", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 1, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/tls/private", "name": "default-certificate", "readOnly": true }, { "mountPath": "/var/run/configmaps/service-ca", "name": "service-ca-bundle", "readOnly": true }, { "mountPath": "/var/lib/haproxy/conf/metrics-auth", "name": "stats-auth", "readOnly": true }, { "mountPath": "/etc/pki/tls/metrics-certs", "name": "metrics-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/worker": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "router", "serviceAccountName": "router", "terminationGracePeriodSeconds": 3600, "tolerations": [ { "effect": "NoExecute", "key": "kubernetes.io/e2e-evict-taint-key", "operator": "Equal", "value": "evictTaintVal" } ], "topologySpreadConstraints": [ { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "In", "values": [ "86c598485b" ] } ] }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "ScheduleAnyway" } ], "volumes": [ { "name": "default-certificate", "secret": { "defaultMode": 420, "secretName": "2psja02f2k2pd7f83gt8atnjlu4e5521-primary-cert-bundle-secret" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "service-ca-bundle", "optional": false }, "name": "service-ca-bundle" }, { "name": "stats-auth", "secret": { "defaultMode": 420, "secretName": "router-stats-default" } }, { "name": "metrics-certs", "secret": { "defaultMode": 420, "secretName": "router-metrics-certs-default" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 2, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "config.openshift.io/inject-proxy": "insights-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true" }, "creationTimestamp": "2026-04-24T14:58:19Z", "generation": 1, "labels": { "app": "insights-operator", "pod-template-hash": "664bcdf987" }, "name": "insights-operator-664bcdf987", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "insights-operator", "uid": "09e60a25-2bd9-471d-9a68-da9d3a1b1be8" } ], "resourceVersion": "12348", "uid": "dce55deb-8e9a-412f-bf3a-302dac5a38de" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "insights-operator", "pod-template-hash": "664bcdf987" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "insights-operator", "pod-template-hash": "664bcdf987" } }, "spec": { "containers": [ { "args": [ "start", "--config=/etc/insights-operator/server.yaml" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "RELEASE_VERSION", "value": "4.20.8" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:695cf2f0cc07683c2a3ce1eaf3e56fe18abc6e2bac716f7d9843f5d173b9df52", "imagePullPolicy": "IfNotPresent", "name": "insights-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "54Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp" }, { "mountPath": "/var/lib/insights-operator", "name": "snapshots" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/run/configmaps/service-ca-bundle", "name": "service-ca-bundle", "readOnly": true }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "operator", "serviceAccountName": "operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 900 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 900 } ], "volumes": [ { "emptyDir": {}, "name": "tmp" }, { "emptyDir": {}, "name": "snapshots" }, { "configMap": { "defaultMode": 420, "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "service-ca-bundle", "optional": true }, "name": "service-ca-bundle" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "openshift-insights-serving-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true" }, "creationTimestamp": "2026-04-24T14:58:24Z", "generation": 1, "labels": { "app": "kube-storage-version-migrator-operator", "pod-template-hash": "74848b4cb9" }, "name": "kube-storage-version-migrator-operator-74848b4cb9", "namespace": "openshift-kube-storage-version-migrator-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kube-storage-version-migrator-operator", "uid": "a9008ed3-26a5-4cfa-9dd4-bdda625f3b68" } ], "resourceVersion": "12184", "uid": "2e6ef388-9a99-4f2b-9fe0-02346e076585" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "kube-storage-version-migrator-operator", "pod-template-hash": "74848b4cb9" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "kube-storage-version-migrator-operator", "pod-template-hash": "74848b4cb9" }, "name": "kube-storage-version-migrator-operator" }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml" ], "command": [ "cluster-kube-storage-version-migrator-operator", "start" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a9a0d8556d381651f9d8b6d94c900fa53fc18179d542a3e2f0207a4c0b8c3b02" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ff8caec41af28c0e133250dc7b4d491481e04f1c72316fb1c8ffb66158bb113b" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.20.8" }, { "name": "OPERAND_IMAGE_VERSION", "value": "4.20.8" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ff8caec41af28c0e133250dc7b4d491481e04f1c72316fb1c8ffb66158bb113b", "imagePullPolicy": "IfNotPresent", "name": "kube-storage-version-migrator-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "kube-storage-version-migrator-operator", "serviceAccountName": "kube-storage-version-migrator-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "ab2a079e7c7e7c944c175cf8c6259f41d215a21b880f54c462c0984a71d48a1b" }, "creationTimestamp": "2026-04-24T15:11:06Z", "generation": 1, "labels": { "app": "migrator", "pod-template-hash": "7d5f866c57" }, "name": "migrator-7d5f866c57", "namespace": "openshift-kube-storage-version-migrator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "migrator", "uid": "1b185a50-dbdb-45f0-9a34-708102233d63" } ], "resourceVersion": "10784", "uid": "aa114eb3-8cd3-455b-9455-8e5e35e35ef1" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "migrator", "pod-template-hash": "7d5f866c57" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "migrator", "pod-template-hash": "7d5f866c57" } }, "spec": { "containers": [ { "args": [ "trap 'echo \"Termination signal received, but ignored. Continuing...\"; sleep infinity' TERM\nmigrator \"$@\" \u0026 wait $!", "bash", "--alsologtostderr", "--v=2" ], "command": [ "/bin/bash", "-c" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a9a0d8556d381651f9d8b6d94c900fa53fc18179d542a3e2f0207a4c0b8c3b02", "imagePullPolicy": "IfNotPresent", "name": "migrator", "resources": { "requests": { "cpu": "10m", "memory": "200Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "trap 'echo \"Gracefully sleeping for 25s to let another pod start...\"; sleep 25; exit' EXIT\nwhile true; do echo \"Waiting for termination...\"; sleep 3600 \u0026 wait $!; done" ], "command": [ "/bin/bash", "-c" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a9a0d8556d381651f9d8b6d94c900fa53fc18179d542a3e2f0207a4c0b8c3b02", "imagePullPolicy": "IfNotPresent", "name": "graceful-termination", "resources": { "requests": { "cpu": "1m", "memory": "1Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "kube-storage-version-migrator-sa", "serviceAccountName": "kube-storage-version-migrator-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/ibm-cloud-managed": "true" }, "creationTimestamp": "2026-04-24T14:58:13Z", "generation": 1, "labels": { "app": "cluster-monitoring-operator", "app.kubernetes.io/name": "cluster-monitoring-operator", "pod-template-hash": "698978dbbf" }, "name": "cluster-monitoring-operator-698978dbbf", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-monitoring-operator", "uid": "052409d1-6907-476b-a12d-91ceba90f544" } ], "resourceVersion": "11407", "uid": "af27387d-9afa-4d75-90ac-0718d612e63f" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "cluster-monitoring-operator", "pod-template-hash": "698978dbbf" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "cluster-monitoring-operator", "app.kubernetes.io/name": "cluster-monitoring-operator", "pod-template-hash": "698978dbbf" } }, "spec": { "containers": [ { "args": [ "-namespace=openshift-monitoring", "-namespace-user-workload=openshift-user-workload-monitoring", "-configmap=cluster-monitoring-config", "-release-version=$(RELEASE_VERSION)", "-v=2", "-cert-file=/etc/tls/private/tls.crt", "-key-file=/etc/tls/private/tls.key", "-images=prometheus-operator=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f995093d6fd6c66e2c50cc4bceee9c739d09453ea85eca0232013632371fc594", "-images=prometheus-config-reloader=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b99613494e9d6a4a8207323872d63cc02b830fc80a8bf972e62c64381aa4cd17", "-images=prometheus-operator-admission-webhook=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3612c5a433effd17b7aff7ff6edf4fb27b61153908e3a0294158e4886a1d600d", "-images=configmap-reloader=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:aec65328e8cbda3eeda349d9a142beb5cd78ff68518cf50461899d4213f1d94b", "-images=prometheus=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:101993f6e65d6fda8b90c583b718b720809182961f69bc777295f47e6df4d7ce", "-images=alertmanager=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7e7e39f59a298ff2ca6aba00ce861866dc16bf39398e78523ba4e7600c46dea9", "-images=node-exporter=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bc107371c693a3a4b940362c4effe0059add81b28544580c7f06d62c2c6e3425", "-images=kube-state-metrics=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:38bb52836a42bc985e17d37dba72f4552f099ecf9c1f385bbfb11472cb9a8df2", "-images=openshift-state-metrics=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:74713675d580a47a56b628469c4c05c41e114e0b935960d718ff0cf7e72f613d", "-images=kube-rbac-proxy=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca1344cb64140188b7cae7bbc51fb751566c0b0c97d5e39b5850e628032c4a5e", "-images=telemeter-client=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:69ad02f34ba3a0c97dbd7b83b94de610d6fc74bdde09f169380f1cec2aa56e32", "-images=prom-label-proxy=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f1f19d18c94f996546a20ce31a68d177d0fc13378e5452b9ff8dfca9d467aa95", "-images=thanos=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6e5df2aab9ce759e8f957341a11c087c233307e3c8f8760d21270efc19ccd3ce", "-images=monitoring-plugin=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1e65f9f5490fbc930d2dce96f03ddcb28990b839d7dc011ef5de5bec6c5095bf", "-images=kube-metrics-server=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0af73ad7a47c9ff53269ae2bc5163bf9e389085220c34e4bd42c92c4e7a85f6d" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.20.8" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0a99240166165eb5718e7516a43282fe32df9c7c5e809b31b58abe44e42ff94d", "imagePullPolicy": "IfNotPresent", "name": "cluster-monitoring-operator", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "75Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "cluster-monitoring-operator-tls", "readOnly": true }, { "mountPath": "/etc/cluster-monitoring-operator/telemetry", "name": "telemetry-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cluster-monitoring-operator", "serviceAccountName": "cluster-monitoring-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node.kubernetes.io/memory-pressure", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "telemetry-config" }, "name": "telemetry-config" }, { "name": "cluster-monitoring-operator-tls", "secret": { "defaultMode": 420, "secretName": "cluster-monitoring-operator-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:16:06Z", "generation": 1, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "kube-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.16.0", "pod-template-hash": "7c87d874d5" }, "name": "kube-state-metrics-7c87d874d5", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kube-state-metrics", "uid": "c17abd62-b0ff-4c86-b092-0ee7290702b3" } ], "resourceVersion": "14649", "uid": "1b1e4cba-5a9a-42b4-ae21-fb488b02e3a9" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/name": "kube-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "7c87d874d5" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "kube-state-metrics", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "kube-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.16.0", "pod-template-hash": "7c87d874d5" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--host=127.0.0.1", "--port=8081", "--telemetry-host=127.0.0.1", "--telemetry-port=8082", "--custom-resource-state-config-file=/etc/kube-state-metrics/custom-resource-state-configmap.yaml", "--metric-denylist=\n^kube_secret_labels$,\n^kube_.+_annotations$,\n^kube_customresource_.+_annotations_info$,\n^kube_customresource_.+_labels_info$\n", "--metric-labels-allowlist=pods=[*],nodes=[*],namespaces=[*],persistentvolumes=[*],persistentvolumeclaims=[*],poddisruptionbudgets=[*]", "--metric-denylist=\n^kube_.+_created$,\n^kube_.+_metadata_resource_version$,\n^kube_replicaset_metadata_generation$,\n^kube_replicaset_status_observed_generation$,\n^kube_pod_restart_policy$,\n^kube_pod_init_container_status_terminated$,\n^kube_pod_init_container_status_running$,\n^kube_pod_container_status_terminated$,\n^kube_pod_container_status_running$,\n^kube_pod_completion_time$,\n^kube_pod_status_scheduled$\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:38bb52836a42bc985e17d37dba72f4552f099ecf9c1f385bbfb11472cb9a8df2", "imagePullPolicy": "IfNotPresent", "name": "kube-state-metrics", "resources": { "requests": { "cpu": "2m", "memory": "80Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp", "name": "volume-directive-shadow" }, { "mountPath": "/etc/kube-state-metrics", "name": "kube-state-metrics-custom-resource-state-configmap", "readOnly": true } ] }, { "args": [ "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8081/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca1344cb64140188b7cae7bbc51fb751566c0b0c97d5e39b5850e628032c4a5e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-main", "ports": [ { "containerPort": 8443, "name": "https-main", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "kube-state-metrics-tls" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca" }, { "mountPath": "/etc/kube-rbac-policy", "name": "kube-state-metrics-kube-rbac-proxy-config", "readOnly": true } ] }, { "args": [ "--secure-listen-address=:9443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8082/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca1344cb64140188b7cae7bbc51fb751566c0b0c97d5e39b5850e628032c4a5e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-self", "ports": [ { "containerPort": 9443, "name": "https-self", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "kube-state-metrics-tls" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca" }, { "mountPath": "/etc/kube-rbac-policy", "name": "kube-state-metrics-kube-rbac-proxy-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kube-state-metrics", "serviceAccountName": "kube-state-metrics", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "volume-directive-shadow" }, { "name": "kube-state-metrics-tls", "secret": { "defaultMode": 420, "secretName": "kube-state-metrics-tls" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "name": "kube-state-metrics-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "kube-state-metrics-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "kube-state-metrics-custom-resource-state-configmap" }, "name": "kube-state-metrics-custom-resource-state-configmap" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:16:10Z", "generation": 1, "labels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "6587ff5bd8" }, "name": "metrics-server-6587ff5bd8", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "metrics-server", "uid": "b888400d-d08d-4695-8454-bc5921277bcd" } ], "resourceVersion": "15195", "uid": "389bccb7-137d-4c24-aae8-5a7217955bda" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "6587ff5bd8" } }, "template": { "metadata": { "annotations": { "monitoring.openshift.io/kubelet-serving-ca-bundle-hash": "2qan0hovfd9el", "monitoring.openshift.io/metrics-server-client-certs-hash": "1b3p6ft356off", "monitoring.openshift.io/serving-ca-secret-hash": "7b76i2jborhgm", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "6587ff5bd8" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--secure-port=10250", "--kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname", "--kubelet-use-node-status-port", "--metric-resolution=15s", "--kubelet-certificate-authority=/etc/tls/kubelet-serving-ca-bundle/ca-bundle.crt", "--kubelet-client-certificate=/etc/tls/metrics-server-client-certs/tls.crt", "--kubelet-client-key=/etc/tls/metrics-server-client-certs/tls.key", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--shutdown-send-retry-after=true", "--shutdown-delay-duration=150s", "--disable-http2-serving=true", "--tls-min-version=VersionTLS12", "--client-ca-file=/etc/client-ca-bundle/client-ca-file", "--requestheader-client-ca-file=/etc/client-ca-bundle/requestheader-client-ca-file", "--requestheader-allowed-names=kube-apiserver-proxy,system:kube-apiserver-proxy,system:openshift-aggregator", "--requestheader-extra-headers-prefix=X-Remote-Extra-", "--requestheader-group-headers=X-Remote-Group", "--requestheader-username-headers=X-Remote-User", "--audit-policy-file=/etc/audit/metadata-profile.yaml", "--audit-log-path=/var/log/metrics-server/audit.log", "--audit-log-maxsize=100", "--audit-log-maxbackup=5", "--audit-log-compress=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0af73ad7a47c9ff53269ae2bc5163bf9e389085220c34e4bd42c92c4e7a85f6d", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/livez", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "metrics-server", "ports": [ { "containerPort": 10250, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 6, "httpGet": { "path": "/readyz", "port": "https", "scheme": "HTTPS" }, "initialDelaySeconds": 20, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1m", "memory": "40Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-metrics-server-tls" }, { "mountPath": "/etc/tls/metrics-server-client-certs", "name": "secret-metrics-server-client-certs" }, { "mountPath": "/etc/tls/kubelet-serving-ca-bundle", "name": "configmap-kubelet-serving-ca-bundle" }, { "mountPath": "/etc/audit", "name": "metrics-server-audit-profiles", "readOnly": true }, { "mountPath": "/var/log/metrics-server", "name": "audit-log" }, { "mountPath": "/etc/client-ca-bundle", "name": "client-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "metrics-server", "serviceAccountName": "metrics-server", "terminationGracePeriodSeconds": 170, "volumes": [ { "name": "secret-metrics-server-client-certs", "secret": { "defaultMode": 420, "secretName": "metrics-server-client-certs" } }, { "name": "secret-metrics-server-tls", "secret": { "defaultMode": 420, "secretName": "metrics-server-tls" } }, { "configMap": { "defaultMode": 420, "name": "kubelet-serving-ca-bundle" }, "name": "configmap-kubelet-serving-ca-bundle" }, { "emptyDir": {}, "name": "audit-log" }, { "configMap": { "defaultMode": 420, "name": "metrics-server-audit-profiles" }, "name": "metrics-server-audit-profiles" }, { "name": "client-ca-bundle", "secret": { "defaultMode": 420, "secretName": "metrics-server-anuupsamjn9s9" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:16:11Z", "generation": 1, "labels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "67788f859f" }, "name": "monitoring-plugin-67788f859f", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "monitoring-plugin", "uid": "55e02093-0d2f-4118-b3e0-7f128059555a" } ], "resourceVersion": "14983", "uid": "248931ca-74e7-465b-af43-d2018351c994" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "67788f859f" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "67788f859f" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "automountServiceAccountToken": false, "containers": [ { "args": [ "--config-path=/opt/app-root/web/dist", "--static-path=/opt/app-root/web/dist", "--cert=/var/cert/tls.crt", "--key=/var/cert/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12" ], "command": [ "/opt/app-root/plugin-backend" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1e65f9f5490fbc930d2dce96f03ddcb28990b839d7dc011ef5de5bec6c5095bf", "imagePullPolicy": "IfNotPresent", "name": "monitoring-plugin", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/cert", "name": "monitoring-plugin-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "monitoring-plugin-cert", "secret": { "defaultMode": 420, "secretName": "monitoring-plugin-cert" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:16:06Z", "generation": 1, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "openshift-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "6cb79d4dbd" }, "name": "openshift-state-metrics-6cb79d4dbd", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-state-metrics", "uid": "0b940092-8948-498d-8a00-9418e3eb7026" } ], "resourceVersion": "14654", "uid": "a866234c-9ba7-4870-8198-9006f5a7e4d3" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/name": "openshift-state-metrics", "pod-template-hash": "6cb79d4dbd" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "openshift-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "6cb79d4dbd" } }, "spec": { "containers": [ { "args": [ "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8081/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-policy/config.yaml", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca1344cb64140188b7cae7bbc51fb751566c0b0c97d5e39b5850e628032c4a5e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-main", "ports": [ { "containerPort": 8443, "name": "https-main", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "openshift-state-metrics-tls" }, { "mountPath": "/etc/kube-rbac-policy", "name": "openshift-state-metrics-kube-rbac-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] }, { "args": [ "--secure-listen-address=:9443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8082/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-policy/config.yaml", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca1344cb64140188b7cae7bbc51fb751566c0b0c97d5e39b5850e628032c4a5e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-self", "ports": [ { "containerPort": 9443, "name": "https-self", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "openshift-state-metrics-tls" }, { "mountPath": "/etc/kube-rbac-policy", "name": "openshift-state-metrics-kube-rbac-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] }, { "args": [ "--host=127.0.0.1", "--port=8081", "--telemetry-host=127.0.0.1", "--telemetry-port=8082" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:74713675d580a47a56b628469c4c05c41e114e0b935960d718ff0cf7e72f613d", "imagePullPolicy": "IfNotPresent", "name": "openshift-state-metrics", "resources": { "requests": { "cpu": "1m", "memory": "32Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-state-metrics", "serviceAccountName": "openshift-state-metrics", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "openshift-state-metrics-tls", "secret": { "defaultMode": 420, "secretName": "openshift-state-metrics-tls" } }, { "name": "openshift-state-metrics-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "openshift-state-metrics-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:16:00Z", "generation": 1, "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.85.0", "pod-template-hash": "5df5b8bf6d" }, "name": "prometheus-operator-5df5b8bf6d", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "prometheus-operator", "uid": "c752f4b6-626e-48d9-b25b-a468a6ce9775" } ], "resourceVersion": "14183", "uid": "f99407ae-0c98-4beb-b4d6-519943ad29ec" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/name": "prometheus-operator", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "5df5b8bf6d" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "prometheus-operator", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.85.0", "pod-template-hash": "5df5b8bf6d" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--kubelet-service=kube-system/kubelet", "--prometheus-config-reloader=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b99613494e9d6a4a8207323872d63cc02b830fc80a8bf972e62c64381aa4cd17", "--kubelet-endpoints=true", "--kubelet-endpointslice=false", "--watch-referenced-objects-in-all-namespaces=true", "--prometheus-instance-namespaces=openshift-monitoring", "--thanos-ruler-instance-namespaces=openshift-monitoring", "--alertmanager-instance-namespaces=openshift-monitoring", "--config-reloader-cpu-limit=0", "--config-reloader-memory-limit=0", "--config-reloader-cpu-request=1m", "--config-reloader-memory-request=10Mi", "--web.listen-address=127.0.0.1:8080", "--controller-id=openshift-monitoring/prometheus-operator" ], "env": [ { "name": "GOGC", "value": "30" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f995093d6fd6c66e2c50cc4bceee9c739d09453ea85eca0232013632371fc594", "imagePullPolicy": "IfNotPresent", "name": "prometheus-operator", "resources": { "requests": { "cpu": "5m", "memory": "150Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://localhost:8080/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca1344cb64140188b7cae7bbc51fb751566c0b0c97d5e39b5850e628032c4a5e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "prometheus-operator-tls", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true }, { "mountPath": "/etc/kube-rbac-policy", "name": "prometheus-operator-kube-rbac-proxy-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "prometheus-operator", "serviceAccountName": "prometheus-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "prometheus-operator-tls", "secret": { "defaultMode": 420, "secretName": "prometheus-operator-tls" } }, { "name": "prometheus-operator-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "prometheus-operator-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:11:35Z", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.85.0", "pod-template-hash": "68c48fd977" }, "name": "prometheus-operator-admission-webhook-68c48fd977", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "prometheus-operator-admission-webhook", "uid": "14765b44-a282-4fba-9bf8-2188e18f10a0" } ], "resourceVersion": "14114", "uid": "0dcf5528-95bb-47a6-bf37-27970d33ecbb" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "68c48fd977" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "prometheus-operator-admission-webhook", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.85.0", "pod-template-hash": "68c48fd977" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "automountServiceAccountToken": false, "containers": [ { "args": [ "--web.enable-tls=true", "--web.cert-file=/etc/tls/private/tls.crt", "--web.key-file=/etc/tls/private/tls.key", "--web.tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--web.tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3612c5a433effd17b7aff7ff6edf4fb27b61153908e3a0294158e4886a1d600d", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "prometheus-operator-admission-webhook", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "5m", "memory": "30Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "tls-certificates", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "prometheus-operator-admission-webhook", "serviceAccountName": "prometheus-operator-admission-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls-certificates", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "prometheus-operator-admission-webhook-tls" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:17:30Z", "generation": 1, "labels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "telemeter-client", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "7c495d476c" }, "name": "telemeter-client-7c495d476c", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "telemeter-client", "uid": "b51b3761-47cb-42c1-8ede-06df248fdccb" } ], "resourceVersion": "15809", "uid": "24f921a4-9252-4318-8038-6758bba86675" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/name": "telemeter-client", "pod-template-hash": "7c495d476c" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}", "telemeter-token-hash": "3gof03q7c3qkv" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "telemeter-client", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "7c495d476c" } }, "spec": { "containers": [ { "command": [ "/usr/bin/telemeter-client", "--id=$(ID)", "--from=$(FROM)", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--from-ca-file=/etc/serving-certs-ca-bundle/service-ca.crt", "--from-token-file=/var/run/secrets/kubernetes.io/serviceaccount/token", "--to=$(TO)", "--to-token-file=/etc/telemeter/token", "--listen=localhost:8080", "--anonymize-salt-file=/etc/telemeter/salt", "--anonymize-labels=$(ANONYMIZE_LABELS)", "--match={__name__=~\"cluster:usage:.*\"}", "--match={__name__=\"count:up0\"}", "--match={__name__=\"count:up1\"}", "--match={__name__=\"cluster_version\"}", "--match={__name__=\"cluster_version_available_updates\"}", "--match={__name__=\"cluster_version_capability\"}", "--match={__name__=\"cluster_operator_up\"}", "--match={__name__=\"cluster_operator_conditions\"}", "--match={__name__=\"cluster_version_payload\"}", "--match={__name__=\"cluster_installer\"}", "--match={__name__=\"cluster_infrastructure_provider\"}", "--match={__name__=\"cluster_feature_set\"}", "--match={__name__=\"instance:etcd_object_counts:sum\"}", "--match={__name__=\"ALERTS\",alertstate=\"firing\",severity=~\"critical|warning|info|none\"}", "--match={__name__=\"code:apiserver_request_total:rate:sum\"}", "--match={__name__=\"cluster:capacity_cpu_cores:sum\"}", "--match={__name__=\"cluster:capacity_memory_bytes:sum\"}", "--match={__name__=\"cluster:cpu_usage_cores:sum\"}", "--match={__name__=\"cluster:memory_usage_bytes:sum\"}", "--match={__name__=\"openshift:cpu_usage_cores:sum\"}", "--match={__name__=\"openshift:memory_usage_bytes:sum\"}", "--match={__name__=\"workload:cpu_usage_cores:sum\"}", "--match={__name__=\"workload:memory_usage_bytes:sum\"}", "--match={__name__=\"cluster:virt_platform_nodes:sum\"}", "--match={__name__=\"cluster:node_instance_type_count:sum\"}", "--match={__name__=\"cnv:vmi_status_running:count\"}", "--match={__name__=\"cnv_abnormal\", reason=~\"memory_working_set_delta_from_request|memory_rss_delta_from_request\"}", "--match={__name__=\"cluster:vmi_request_cpu_cores:sum\"}", "--match={__name__=\"node_role_os_version_machine:cpu_capacity_cores:sum\"}", "--match={__name__=\"node_role_os_version_machine:cpu_capacity_sockets:sum\"}", "--match={__name__=\"subscription_sync_total\"}", "--match={__name__=\"olm_resolution_duration_seconds\"}", "--match={__name__=\"csv_succeeded\"}", "--match={__name__=\"csv_abnormal\"}", "--match={__name__=\"cluster:kube_persistentvolumeclaim_resource_requests_storage_bytes:provisioner:sum\"}", "--match={__name__=\"cluster:kubelet_volume_stats_used_bytes:provisioner:sum\"}", "--match={__name__=\"ceph_cluster_total_bytes\"}", "--match={__name__=\"ceph_cluster_total_used_raw_bytes\"}", "--match={__name__=\"ceph_health_status\"}", "--match={__name__=\"odf_system_raw_capacity_total_bytes\"}", "--match={__name__=\"odf_system_raw_capacity_used_bytes\"}", "--match={__name__=\"odf_system_health_status\"}", "--match={__name__=\"job:ceph_osd_metadata:count\"}", "--match={__name__=\"job:kube_pv:count\"}", "--match={__name__=\"job:odf_system_pvs:count\"}", "--match={__name__=\"job:ceph_pools_iops:total\"}", "--match={__name__=\"job:ceph_pools_iops_bytes:total\"}", "--match={__name__=\"job:ceph_versions_running:count\"}", "--match={__name__=\"job:noobaa_total_unhealthy_buckets:sum\"}", "--match={__name__=\"job:noobaa_bucket_count:sum\"}", "--match={__name__=\"job:noobaa_total_object_count:sum\"}", "--match={__name__=\"odf_system_bucket_count\", system_type=\"OCS\", system_vendor=\"Red Hat\"}", "--match={__name__=\"odf_system_objects_total\", system_type=\"OCS\", system_vendor=\"Red Hat\"}", "--match={__name__=\"noobaa_accounts_num\"}", "--match={__name__=\"noobaa_total_usage\"}", "--match={__name__=\"console_url\"}", "--match={__name__=\"cluster:console_auth_login_requests_total:sum\"}", "--match={__name__=\"cluster:console_auth_login_successes_total:sum\"}", "--match={__name__=\"cluster:console_auth_login_failures_total:sum\"}", "--match={__name__=\"cluster:console_auth_logout_requests_total:sum\"}", "--match={__name__=\"cluster:console_usage_users:max\"}", "--match={__name__=\"cluster:console_plugins_info:max\"}", "--match={__name__=\"cluster:console_customization_perspectives_info:max\"}", "--match={__name__=\"cluster:ovnkube_controller_egress_routing_via_host:max\"}", "--match={__name__=\"cluster:ovnkube_controller_admin_network_policies_db_objects:max\",table_name=~\"ACL|Address_Set\"}", "--match={__name__=\"cluster:ovnkube_controller_baseline_admin_network_policies_db_objects:max\",table_name=~\"ACL|Address_Set\"}", "--match={__name__=\"cluster:ovnkube_controller_admin_network_policies_rules:max\",direction=~\"Ingress|Egress\",action=~\"Pass|Allow|Deny\"}", "--match={__name__=\"cluster:ovnkube_controller_baseline_admin_network_policies_rules:max\",direction=~\"Ingress|Egress\",action=~\"Allow|Deny\"}", "--match={__name__=\"cluster:network_attachment_definition_instances:max\"}", "--match={__name__=\"cluster:network_attachment_definition_enabled_instance_up:max\"}", "--match={__name__=\"cluster:ingress_controller_aws_nlb_active:sum\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:min\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:max\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:avg\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:median\"}", "--match={__name__=\"cluster:openshift_route_info:tls_termination:sum\"}", "--match={__name__=\"insightsclient_request_send_total\"}", "--match={__name__=\"cam_app_workload_migrations\"}", "--match={__name__=\"cluster:apiserver_current_inflight_requests:sum:max_over_time:2m\"}", "--match={__name__=\"cluster:alertmanager_integrations:max\"}", "--match={__name__=\"cluster:telemetry_selected_series:count\"}", "--match={__name__=\"openshift:prometheus_tsdb_head_series:sum\"}", "--match={__name__=\"openshift:prometheus_tsdb_head_samples_appended_total:sum\"}", "--match={__name__=\"monitoring:container_memory_working_set_bytes:sum\"}", "--match={__name__=\"namespace_job:scrape_series_added:topk3_sum1h\"}", "--match={__name__=\"namespace_job:scrape_samples_post_metric_relabeling:topk3\"}", "--match={__name__=\"monitoring:haproxy_server_http_responses_total:sum\"}", "--match={__name__=\"profile:cluster_monitoring_operator_collection_profile:max\"}", "--match={__name__=\"vendor_model:node_accelerator_cards:sum\",vendor=~\"NVIDIA|AMD|GAUDI|INTEL|QUALCOMM|Marvell|Mellanox\"}", "--match={__name__=\"rhmi_status\"}", "--match={__name__=\"status:upgrading:version:rhoam_state:max\"}", "--match={__name__=\"state:rhoam_critical_alerts:max\"}", "--match={__name__=\"state:rhoam_warning_alerts:max\"}", "--match={__name__=\"rhoam_7d_slo_percentile:max\"}", "--match={__name__=\"rhoam_7d_slo_remaining_error_budget:max\"}", "--match={__name__=\"cluster_legacy_scheduler_policy\"}", "--match={__name__=\"cluster_master_schedulable\"}", "--match={__name__=\"che_workspace_status\"}", "--match={__name__=\"che_workspace_started_total\"}", "--match={__name__=\"che_workspace_failure_total\"}", "--match={__name__=\"che_workspace_start_time_seconds_sum\"}", "--match={__name__=\"che_workspace_start_time_seconds_count\"}", "--match={__name__=\"cco_credentials_mode\"}", "--match={__name__=\"cluster:kube_persistentvolume_plugin_type_counts:sum\"}", "--match={__name__=\"acm_managed_cluster_info\"}", "--match={__name__=\"acm_managed_cluster_worker_cores:max\"}", "--match={__name__=\"acm_console_page_count:sum\", page=~\"overview-classic|overview-fleet|search|search-details|clusters|application|governance\"}", "--match={__name__=\"cluster:vsphere_vcenter_info:sum\"}", "--match={__name__=\"cluster:vsphere_esxi_version_total:sum\"}", "--match={__name__=\"cluster:vsphere_node_hw_version_total:sum\"}", "--match={__name__=\"openshift:build_by_strategy:sum\"}", "--match={__name__=\"rhods_aggregate_availability\"}", "--match={__name__=\"rhods_total_users\"}", "--match={__name__=\"instance:etcd_disk_wal_fsync_duration_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"instance:etcd_mvcc_db_total_size_in_bytes:sum\"}", "--match={__name__=\"instance:etcd_network_peer_round_trip_time_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"instance:etcd_mvcc_db_total_size_in_use_in_bytes:sum\"}", "--match={__name__=\"instance:etcd_disk_backend_commit_duration_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"jaeger_operator_instances_storage_types\"}", "--match={__name__=\"jaeger_operator_instances_strategies\"}", "--match={__name__=\"jaeger_operator_instances_agent_strategies\"}", "--match={__name__=\"type:tempo_operator_tempostack_storage_backend:sum\",type=~\"azure|gcs|s3\"}", "--match={__name__=\"state:tempo_operator_tempostack_managed:sum\",state=~\"Managed|Unmanaged\"}", "--match={__name__=\"type:tempo_operator_tempostack_multi_tenancy:sum\",type=~\"static|openshift|disabled\"}", "--match={__name__=\"enabled:tempo_operator_tempostack_jaeger_ui:sum\",enabled=~\"true|false\"}", "--match={__name__=\"type:opentelemetry_collector_receivers:sum\",type=~\"jaeger|hostmetrics|opencensus|prometheus|zipkin|kafka|filelog|journald|k8sevents|kubeletstats|k8scluster|k8sobjects|otlp\"}", "--match={__name__=\"type:opentelemetry_collector_exporters:sum\",type=~\"debug|logging|otlp|otlphttp|prometheus|lokiexporter|kafka|awscloudwatchlogs|loadbalancing\"}", "--match={__name__=\"type:opentelemetry_collector_processors:sum\",type=~\"batch|memorylimiter|attributes|resource|span|k8sattributes|resourcedetection|filter|routing|cumulativetodelta|groupbyattrs\"}", "--match={__name__=\"type:opentelemetry_collector_extensions:sum\",type=~\"zpages|ballast|memorylimiter|jaegerremotesampling|healthcheck|pprof|oauth2clientauth|oidcauth|bearertokenauth|filestorage\"}", "--match={__name__=\"type:opentelemetry_collector_connectors:sum\",type=~\"spanmetrics|forward\"}", "--match={__name__=\"type:opentelemetry_collector_info:sum\",type=~\"deployment|daemonset|sidecar|statefulset\"}", "--match={__name__=\"appsvcs:cores_by_product:sum\"}", "--match={__name__=\"nto_custom_profiles:count\"}", "--match={__name__=\"openshift_csi_share_configmap\"}", "--match={__name__=\"openshift_csi_share_secret\"}", "--match={__name__=\"openshift_csi_share_mount_failures_total\"}", "--match={__name__=\"openshift_csi_share_mount_requests_total\"}", "--match={__name__=\"eo_es_storage_info\"}", "--match={__name__=\"eo_es_redundancy_policy_info\"}", "--match={__name__=\"eo_es_defined_delete_namespaces_total\"}", "--match={__name__=\"eo_es_misconfigured_memory_resources_info\"}", "--match={__name__=\"cluster:eo_es_data_nodes_total:max\"}", "--match={__name__=\"cluster:eo_es_documents_created_total:sum\"}", "--match={__name__=\"cluster:eo_es_documents_deleted_total:sum\"}", "--match={__name__=\"pod:eo_es_shards_total:max\"}", "--match={__name__=\"eo_es_cluster_management_state_info\"}", "--match={__name__=\"imageregistry:imagestreamtags_count:sum\"}", "--match={__name__=\"imageregistry:operations_count:sum\"}", "--match={__name__=\"log_logging_info\"}", "--match={__name__=\"log_collector_error_count_total\"}", "--match={__name__=\"log_forwarder_pipeline_info\"}", "--match={__name__=\"log_forwarder_input_info\"}", "--match={__name__=\"log_forwarder_output_info\"}", "--match={__name__=\"cluster:log_collected_bytes_total:sum\"}", "--match={__name__=\"cluster:log_logged_bytes_total:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_pipelines:sum\"}", "--match={__name__=\"openshift_logging:log_forwarders:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_input_type:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_output_type:sum\"}", "--match={__name__=\"openshift_logging:vector_component_received_bytes_total:rate5m\"}", "--match={__name__=\"cluster:kata_monitor_running_shim_count:sum\"}", "--match={__name__=\"platform:hypershift_hostedclusters:max\"}", "--match={__name__=\"platform:hypershift_nodepools:max\"}", "--match={__name__=\"cluster_name:hypershift_nodepools_size:sum\"}", "--match={__name__=\"cluster_name:hypershift_nodepools_available_replicas:sum\"}", "--match={__name__=\"namespace:noobaa_unhealthy_bucket_claims:max\"}", "--match={__name__=\"namespace:noobaa_buckets_claims:max\"}", "--match={__name__=\"namespace:noobaa_unhealthy_namespace_resources:max\"}", "--match={__name__=\"namespace:noobaa_namespace_resources:max\"}", "--match={__name__=\"namespace:noobaa_unhealthy_namespace_buckets:max\"}", "--match={__name__=\"namespace:noobaa_namespace_buckets:max\"}", "--match={__name__=\"namespace:noobaa_accounts:max\"}", "--match={__name__=\"namespace:noobaa_usage:max\"}", "--match={__name__=\"namespace:noobaa_system_health_status:max\"}", "--match={__name__=\"ocs_advanced_feature_usage\"}", "--match={__name__=\"os_image_url_override:sum\"}", "--match={__name__=\"cluster:mcd_nodes_with_unsupported_packages:count\"}", "--match={__name__=\"cluster:mcd_total_unsupported_packages:sum\"}", "--match={__name__=\"cluster:vsphere_topology_tags:max\"}", "--match={__name__=\"cluster:vsphere_infrastructure_failure_domains:max\"}", "--match={__name__=\"apiserver_list_watch_request_success_total:rate:sum\", verb=~\"LIST|WATCH\"}", "--match={__name__=\"rhacs:telemetry:rox_central_info\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_clusters\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_nodes\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_vcpus\"}", "--match={__name__=\"rhacs:telemetry:rox_sensor_info\"}", "--match={__name__=\"cluster:volume_manager_selinux_pod_context_mismatch_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volume_context_mismatch_warnings_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volume_context_mismatch_errors_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volumes_admitted_total\"}", "--match={__name__=\"ols:provider_model_configuration\"}", "--match={__name__=\"ols:rest_api_query_calls_total:2xx\"}", "--match={__name__=\"ols:rest_api_query_calls_total:4xx\"}", "--match={__name__=\"ols:rest_api_query_calls_total:5xx\"}", "--match={__name__=\"openshift:openshift_network_operator_ipsec_state:info\"}", "--match={__name__=\"cluster:health:group_severity:count\", severity=~\"critical|warning|info|none\"}", "--match={__name__=\"cluster:controlplane_topology:info\", mode=~\"HighlyAvailable|HighlyAvailableArbiter|SingleReplica|DualReplica|External\"}", "--match={__name__=\"cluster:infrastructure_topology:info\", mode=~\"HighlyAvailable|SingleReplica\"}", "--match={__name__=\"cluster:selinux_warning_controller_selinux_volume_conflict:count\"}", "--limit-bytes=5242880" ], "env": [ { "name": "ANONYMIZE_LABELS" }, { "name": "FROM", "value": "https://prometheus-k8s.openshift-monitoring.svc:9091" }, { "name": "ID", "value": "732cbcc8-2927-455e-b585-6703246bc32e" }, { "name": "TO", "value": "https://infogw.api.openshift.com/" }, { "name": "HTTP_PROXY" }, { "name": "HTTPS_PROXY" }, { "name": "NO_PROXY" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:69ad02f34ba3a0c97dbd7b83b94de610d6fc74bdde09f169380f1cec2aa56e32", "imagePullPolicy": "IfNotPresent", "name": "telemeter-client", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "40Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/serving-certs-ca-bundle", "name": "serving-certs-ca-bundle" }, { "mountPath": "/etc/telemeter", "name": "secret-telemeter-client" }, { "mountPath": "/etc/tls/private", "name": "federate-client-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem/", "name": "telemeter-trusted-ca-bundle", "readOnly": true } ] }, { "args": [ "--reload-url=http://localhost:8080/-/reload", "--watched-dir=/etc/serving-certs-ca-bundle" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b99613494e9d6a4a8207323872d63cc02b830fc80a8bf972e62c64381aa4cd17", "imagePullPolicy": "IfNotPresent", "name": "reload", "resources": { "requests": { "cpu": "1m", "memory": "10Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/serving-certs-ca-bundle", "name": "serving-certs-ca-bundle" } ] }, { "args": [ "--secure-listen-address=:8443", "--upstream=http://127.0.0.1:8080/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--config-file=/etc/kube-rbac-policy/config.yaml", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca1344cb64140188b7cae7bbc51fb751566c0b0c97d5e39b5850e628032c4a5e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "telemeter-client-tls" }, { "mountPath": "/etc/kube-rbac-policy", "name": "secret-telemeter-client-kube-rbac-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "telemeter-client", "serviceAccountName": "telemeter-client", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "telemeter-client-serving-certs-ca-bundle" }, "name": "serving-certs-ca-bundle" }, { "name": "secret-telemeter-client", "secret": { "defaultMode": 420, "secretName": "telemeter-client" } }, { "name": "telemeter-client-tls", "secret": { "defaultMode": 420, "secretName": "telemeter-client-tls" } }, { "name": "federate-client-tls", "secret": { "defaultMode": 420, "secretName": "federate-client-certs" } }, { "name": "secret-telemeter-client-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "telemeter-client-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "telemeter-trusted-ca-bundle-8i12ta5c71j38", "optional": true }, "name": "telemeter-trusted-ca-bundle" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:16:09Z", "generation": 1, "labels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.39.2", "pod-template-hash": "6f4b977bdd" }, "name": "thanos-querier-6f4b977bdd", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "thanos-querier", "uid": "83d95337-ec20-43ff-be35-44d0ab67813e" } ], "resourceVersion": "15079", "uid": "795e379b-d6ae-4aff-aba4-471f0d8864ff" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "6f4b977bdd" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.39.2", "pod-template-hash": "6f4b977bdd" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "query", "--grpc-address=127.0.0.1:10901", "--http-address=127.0.0.1:9090", "--log.format=logfmt", "--query.replica-label=prometheus_replica", "--query.replica-label=thanos_ruler_replica", "--endpoint=dnssrv+_grpc._tcp.prometheus-operated.openshift-monitoring.svc.cluster.local", "--query.auto-downsampling", "--store.sd-dns-resolver=miekgdns", "--grpc-client-tls-secure", "--grpc-client-tls-cert=/etc/tls/grpc/client.crt", "--grpc-client-tls-key=/etc/tls/grpc/client.key", "--grpc-client-tls-ca=/etc/tls/grpc/ca.crt", "--grpc-client-server-name=prometheus-grpc", "--web.disable-cors" ], "env": [ { "name": "HOST_IP_ADDRESS", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "status.hostIP" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6e5df2aab9ce759e8f957341a11c087c233307e3c8f8760d21270efc19ccd3ce", "imagePullPolicy": "IfNotPresent", "name": "thanos-query", "ports": [ { "containerPort": 9090, "name": "http", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "12Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/grpc", "name": "secret-grpc-tls" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9091", "--upstream=http://127.0.0.1:9090", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--ignore-paths=/-/healthy,/-/ready", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca1344cb64140188b7cae7bbc51fb751566c0b0c97d5e39b5850e628032c4a5e", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 4, "httpGet": { "path": "/-/healthy", "port": 9091, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "kube-rbac-proxy-web", "ports": [ { "containerPort": 9091, "name": "web", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 20, "httpGet": { "path": "/-/ready", "port": 9091, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy-web" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9092", "--upstream=http://127.0.0.1:9095", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--allow-paths=/api/v1/query,/api/v1/query_range,/api/v1/labels,/api/v1/label/*/values,/api/v1/series", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca1344cb64140188b7cae7bbc51fb751566c0b0c97d5e39b5850e628032c4a5e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9092, "name": "tenancy", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy" } ] }, { "args": [ "--insecure-listen-address=127.0.0.1:9095", "--upstream=http://127.0.0.1:9090", "--label=namespace", "--enable-label-apis", "--error-on-replace", "--rules-with-active-alerts", "--enable-label-matchers-for-rules-api" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f1f19d18c94f996546a20ce31a68d177d0fc13378e5452b9ff8dfca9d467aa95", "imagePullPolicy": "IfNotPresent", "name": "prom-label-proxy", "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--secure-listen-address=0.0.0.0:9093", "--upstream=http://127.0.0.1:9095", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--allow-paths=/api/v1/rules,/api/v1/alerts", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca1344cb64140188b7cae7bbc51fb751566c0b0c97d5e39b5850e628032c4a5e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-rules", "ports": [ { "containerPort": 9093, "name": "tenancy-rules", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy-rules" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9094", "--upstream=http://127.0.0.1:9090", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--client-ca-file=/etc/tls/client/client-ca.crt", "--allow-paths=/metrics", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca1344cb64140188b7cae7bbc51fb751566c0b0c97d5e39b5850e628032c4a5e", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-metrics", "ports": [ { "containerPort": 9094, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy-metrics" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "thanos-querier", "serviceAccountName": "thanos-querier", "terminationGracePeriodSeconds": 120, "volumes": [ { "name": "secret-thanos-querier-tls", "secret": { "defaultMode": 420, "secretName": "thanos-querier-tls" } }, { "name": "secret-thanos-querier-kube-rbac-proxy", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy" } }, { "name": "secret-thanos-querier-kube-rbac-proxy-web", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy-web" } }, { "name": "secret-thanos-querier-kube-rbac-proxy-rules", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy-rules" } }, { "name": "secret-thanos-querier-kube-rbac-proxy-metrics", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy-metrics" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "name": "secret-grpc-tls", "secret": { "defaultMode": 420, "secretName": "thanos-querier-grpc-tls-6vnig41nbpkrc" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "kubernetes.io/description": "This deployment deploys the Networking console plugin pod which serves\nthe contents of the Networking section in OpenShift Console\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.20.8" }, "creationTimestamp": "2026-04-24T14:58:55Z", "generation": 1, "labels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator", "pod-template-hash": "6ddbfdf749" }, "name": "networking-console-plugin-6ddbfdf749", "namespace": "openshift-network-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "networking-console-plugin", "uid": "57fb9807-57e3-42f1-8045-6879dc1af78d" } ], "resourceVersion": "11428", "uid": "56ba9b12-986b-4d45-8eb0-f97daecf1a36" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator", "pod-template-hash": "6ddbfdf749" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator", "pod-template-hash": "6ddbfdf749" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator" } }, "namespaces": [ "openshift-network-console" ], "topologyKey": "kubernetes.io/hostname" }, "weight": 90 } ] } }, "automountServiceAccountToken": false, "containers": [ { "command": [ "/bin/sh", "-c", "if echo \"$POD_IP\" | grep -qE '^([0-9]{1,3}\\.){3}[0-9]{1,3}$'; then\n LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME=\"9443\"\nelse\n LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME=\"[::]:9443\"\nfi\nsed \"s/LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME/$LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME/g\" /etc/nginx/nginx.conf \u003e /tmp/nginx.conf\nexec nginx -c /tmp/nginx.conf -g 'daemon off;'\n" ], "env": [ { "name": "POD_IP", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "status.podIP" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:289816958633a763a72dbc44e1dad40466223164e7e253039514f0d974ea5d21", "imagePullPolicy": "IfNotPresent", "name": "networking-console-plugin", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/cert", "name": "networking-console-plugin-cert", "readOnly": true }, { "mountPath": "/etc/nginx/nginx.conf", "name": "nginx-conf", "readOnly": true, "subPath": "nginx.conf" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "networking-console-plugin" }, "name": "nginx-conf" }, { "name": "networking-console-plugin-cert", "secret": { "defaultMode": 420, "secretName": "networking-console-plugin-cert" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "kubernetes.io/description": "This deployment deploys the network-check-source pod that performs\npod network connectivity checks\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.20.8" }, "creationTimestamp": "2026-04-24T14:58:54Z", "generation": 1, "labels": { "app": "network-check-source", "kubernetes.io/os": "linux", "pod-template-hash": "6b8cd5b79b" }, "name": "network-check-source-6b8cd5b79b", "namespace": "openshift-network-diagnostics", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "network-check-source", "uid": "f52e1d3b-0be4-42c9-84fd-d2a7acd9ac2f" } ], "resourceVersion": "10512", "uid": "870f4158-9ff1-4870-8643-83533a239ca2" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "network-check-source", "pod-template-hash": "6b8cd5b79b" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "network-check-source", "kubernetes.io/os": "linux", "pod-template-hash": "6b8cd5b79b" } }, "spec": { "containers": [ { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)" ], "command": [ "cluster-network-check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:03cf4cd7ef1518610c6c7b3ad27d1622d82e98e3dc6e3f8e5d0fceb5c8d3786e", "imagePullPolicy": "IfNotPresent", "name": "check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "40Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "network-diagnostics", "serviceAccountName": "network-diagnostics", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:26:31Z", "generation": 1, "labels": { "app": "openshift-pipelines-operator", "name": "openshift-pipelines-operator", "pod-template-hash": "7bf4c9c7b4" }, "name": "openshift-pipelines-operator-7bf4c9c7b4", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-pipelines-operator", "uid": "a0554ecf-c69a-4820-b5ae-4fc95fcced54" } ], "resourceVersion": "22314", "uid": "5f0c8c7a-80f8-4f77-9ded-86fd8dac475c" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "openshift-pipelines-operator", "pod-template-hash": "7bf4c9c7b4" } }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"ManualApprovalGate\",\n \"metadata\": {\n \"name\": \"manual-approval-gate\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"OpenShiftPipelinesAsCode\",\n \"metadata\": {\n \"name\": \"pipelines-as-code\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonAddon\",\n \"metadata\": {\n \"name\": \"addon\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonChain\",\n \"metadata\": {\n \"name\": \"chain\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonConfig\",\n \"metadata\": {\n \"name\": \"config\"\n },\n \"spec\": {\n \"addon\": {\n \"params\": [\n {\n \"name\": \"pipelineTemplates\",\n \"value\": \"true\"\n },\n {\n \"name\": \"resolverTasks\",\n \"value\": \"true\"\n },\n {\n \"name\": \"resolverStepActions\",\n \"value\": \"true\"\n },\n {\n \"name\": \"communityResolverTasks\",\n \"value\": \"true\"\n }\n ]\n },\n \"params\": [\n {\n \"name\": \"createRbacResource\",\n \"value\": \"true\"\n },\n {\n \"name\": \"legacyPipelineRbac\",\n \"value\": \"true\"\n },\n {\n \"name\": \"createCABundleConfigMaps\",\n \"value\": \"true\"\n }\n ],\n \"profile\": \"all\",\n \"pruner\": {\n \"keep\": 100,\n \"resources\": [\n \"pipelinerun\",\n \"taskrun\"\n ],\n \"schedule\": \"0 8 * * *\"\n },\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonHub\",\n \"metadata\": {\n \"name\": \"hub\"\n },\n \"spec\": {\n \"api\": {\n \"catalogRefreshInterval\": \"30m\"\n },\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonInstallerSet\",\n \"metadata\": {\n \"name\": \"foo\"\n },\n \"spec\": {\n \"manifests\": []\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonPipeline\",\n \"metadata\": {\n \"name\": \"pipeline\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonPruner\",\n \"metadata\": {\n \"name\": \"pruner\"\n },\n \"spec\": {\n \"disabled\": true,\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonResult\",\n \"metadata\": {\n \"name\": \"result\"\n },\n \"spec\": {\n \"auth_disable\": true,\n \"db_enable_auto_migration\": true,\n \"db_host\": \"tekton-results-postgres-service.openshift-pipelines.svc.cluster.local\",\n \"db_port\": 5432,\n \"log_level\": \"debug\",\n \"logging_pvc_name\": \"tekton-logs\",\n \"logs_api\": true,\n \"logs_buffer_size\": 32768,\n \"logs_path\": \"/logs\",\n \"logs_type\": \"File\",\n \"prometheus_port\": 9090,\n \"server_port\": 8080,\n \"targetNamespace\": \"openshift-pipelines\",\n \"tls_hostname_override\": \"tekton-results-api-service.openshift-pipelines.svc.cluster.local\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonTrigger\",\n \"metadata\": {\n \"name\": \"trigger\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n }\n]", "capabilities": "Full Lifecycle", "categories": "Developer Tools, Integration \u0026 Delivery", "certified": "false", "console.openshift.io/plugins": "[\"pipelines-console-plugin\"]", "description": "Red Hat OpenShift Pipelines is a cloud-native CI/CD solution for building pipelines using Tekton concepts which run natively on OpenShift and Kubernetes.", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "true", "features.operators.openshift.io/proxy-aware": "true", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "olm.operatorGroup": "global-operators", "olm.operatorNamespace": "openshift-operators", "olm.skipRange": "\u003e=1.19.0 \u003c1.20.4", "olm.targetNamespaces": "", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"ManualApprovalGate\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"OpenShiftPipelinesAsCode\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonAddon\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonChain\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonConfig\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonHub\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonInstallerSet\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonPipeline\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonPruner\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonResult\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonTrigger\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"openshift-pipelines-operator-rh\",\"version\":\"1.20.4\"}}]}", "operators.openshift.io/valid-subscription": "[\"OpenShift Container Platform\", \"OpenShift Platform Plus\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.37.0", "operators.operatorframework.io/internal-objects": "[\"tektoninstallersets.operator.tekton.dev\", \"tektonconfigs.operator.tekton.dev\",\"tektonpipelines.operator.tekton.dev\",\"tektontriggers.operator.tekton.dev\",\"tektonaddons.operator.tekton.dev\", \"tektonhubs.operator.tekton.dev\", \"tektonresults.operator.tekton.dev\", \"tektonchains.operator.tekton.dev\", \"openshiftpipelinesascodes.operator.tekton.dev\", \"manualapprovalgates.operator.tekton.dev\",\"tektonpruners.operator.tekton.dev\"]", "operators.operatorframework.io/project_layout": "unknown", "repository": "https://github.com/tektoncd/operator", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "app": "openshift-pipelines-operator", "name": "openshift-pipelines-operator", "pod-template-hash": "7bf4c9c7b4" } }, "spec": { "containers": [ { "args": [ "-controllers", "tektonconfig,tektonpipeline,tektontrigger,tektonhub,tektonchain,tektonaddon,tektonresult,openshiftpipelinesascode,manualapprovalgate,tektonpruner", "-unique-process-name", "tekton-operator-lifecycle" ], "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "PLATFORM", "value": "openshift" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "redhat-openshift-pipelines-operator" }, { "name": "IMAGE_PIPELINES_PROXY", "value": "registry.redhat.io/openshift-pipelines/pipelines-operator-proxy-rhel9@sha256:fff81880193f599e7998abfd85369ccca85ad9e0a68342b4c65653e2128f4738" }, { "name": "IMAGE_JOB_PRUNER_TKN", "value": "registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:fe4ff846b09ed306eee2b2f13dae61573ea28ae93f812e97ce1241f64ea457b0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "VERSION", "value": "1.20.4" }, { "name": "AUTOINSTALL_COMPONENTS", "valueFrom": { "configMapKeyRef": { "key": "AUTOINSTALL_COMPONENTS", "name": "tekton-config-defaults" } } }, { "name": "DEFAULT_TARGET_NAMESPACE", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_TARGET_NAMESPACE", "name": "tekton-config-defaults" } } }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-config-observability" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-controller-config-leader-election" }, { "name": "IMAGE_HUB_TEKTON_HUB_DB", "value": "registry.redhat.io/rhel9/postgresql-13@sha256:36647bd6d50d2e0e9c99ecf190bd515577c7ce9476e49d927c4d4065011e3441" }, { "name": "IMAGE_ADDONS_PARAM_BUILDER_IMAGE", "value": "registry.redhat.io/rhel9/buildah@sha256:18453ab0a62154283aaf4c45efd7543d1c8ecca1aebae46dedc7ddc0f410b232" }, { "name": "IMAGE_ADDONS_PARAM_KN_IMAGE", "value": "registry.redhat.io/openshift-serverless-1/kn-client-kn-rhel8@sha256:0fa6d15d38601f266347cdd098e80bec9893f7e6b06e84efc4a8c50b3ff3c6cc" }, { "name": "IMAGE_ADDONS_MVN_SETTINGS", "value": "registry.redhat.io/ubi9/ubi-minimal@sha256:2f06ae0e6d3d9c4f610d32c480338eef474867f435d8d28625f2985e8acde6e8" }, { "name": "IMAGE_ADDONS_SKOPEO_COPY", "value": "registry.redhat.io/rhel9/skopeo@sha256:a65a413f8a2864389a09dc750690d97afbcdc5c70821e0f85e99e8adba7954e0" }, { "name": "IMAGE_ADDONS_GENERATE", "value": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:bc10e7d6122ede5cf4f2882c200447683255465a1080e826761e90bfb983506e" }, { "name": "IMAGE_ADDONS_GEN_ENV_FILE", "value": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:bc10e7d6122ede5cf4f2882c200447683255465a1080e826761e90bfb983506e" }, { "name": "IMAGE_ADDONS_PARAM_MAVEN_IMAGE", "value": "registry.redhat.io/ubi9/openjdk-17@sha256:555c8bcd2596637befd1a6da4aa949c5a2640cf66e09c2dfb932afe37e39095e" }, { "name": "IMAGE_ADDONS_OC", "value": "image-registry.openshift-image-registry.svc:5000/openshift/cli:latest" }, { "name": "IMAGE_PIPELINES_TEKTON_PIPELINES_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-controller-rhel9@sha256:f55292a74e7bdd843f6fe5dd078e1d341a742b60625dc1e6925fda65d32ff8a8" }, { "name": "IMAGE_PIPELINES_WEBHOOK", "value": "registry.redhat.io/openshift-pipelines/pipelines-webhook-rhel9@sha256:d630ecd73ba231368f2ef4bddebfc20870ddc165b5e3c0af7f78bd9bcf5c8220" }, { "name": "IMAGE_PIPELINES_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-resolvers-rhel9@sha256:09cea31cb42bebffbe682f4314fd2d452745d43eb3703a7852dab9eb9c662313" }, { "name": "IMAGE_PIPELINES_TEKTON_EVENTS_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-events-rhel9@sha256:a8d45a728ef6daefe4297359acfae70c42014eb79cfcf6892aef4e8bc672475a" }, { "name": "IMAGE_PIPELINES_ARG__ENTRYPOINT_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel9@sha256:e82f32cb7a12389ae82d42e83b346ff7c840b642275f23e519bef32d7fa4edc3" }, { "name": "IMAGE_PIPELINES_ARG__GIT_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel9@sha256:a2cab07ac5750b7d74f07020c221607ee6777dee6a2be6d0deaf89a609b3b6e8" }, { "name": "IMAGE_ADDONS_PARAM_GITINITIMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel9@sha256:a2cab07ac5750b7d74f07020c221607ee6777dee6a2be6d0deaf89a609b3b6e8" }, { "name": "IMAGE_ADDONS_GIT_RUN", "value": "registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel9@sha256:a2cab07ac5750b7d74f07020c221607ee6777dee6a2be6d0deaf89a609b3b6e8" }, { "name": "IMAGE_ADDONS_REPORT", "value": "registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel9@sha256:a2cab07ac5750b7d74f07020c221607ee6777dee6a2be6d0deaf89a609b3b6e8" }, { "name": "IMAGE_ADDONS_GIT_CLONE", "value": "registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel9@sha256:a2cab07ac5750b7d74f07020c221607ee6777dee6a2be6d0deaf89a609b3b6e8" }, { "name": "IMAGE_ADDONS_PREPARE_AND_RUN", "value": "registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel9@sha256:a2cab07ac5750b7d74f07020c221607ee6777dee6a2be6d0deaf89a609b3b6e8" }, { "name": "IMAGE_ADDONS_CACHE_UPLOAD", "value": "registry.redhat.io/openshift-pipelines/pipelines-cache-rhel9@sha256:b14dec3468690ea3292e1be758ad0b171636a1624d3baf8d41ced1ea91ffc1ab" }, { "name": "IMAGE_ADDONS_CACHE_FETCH", "value": "registry.redhat.io/openshift-pipelines/pipelines-cache-rhel9@sha256:b14dec3468690ea3292e1be758ad0b171636a1624d3baf8d41ced1ea91ffc1ab" }, { "name": "IMAGE_PIPELINES_ARG__WORKINGDIRINIT_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-workingdirinit-rhel9@sha256:9e66154eb20b10abb19604f145e71225e7b8423b60860f013c455fe590a6edd2" }, { "name": "IMAGE_PIPELINES_ARG__SIDECARLOGRESULTS_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-sidecarlogresults-rhel9@sha256:b117244b55b0e6ee24e52361eb6699d71342cba3546da35cadc09af700afa22f" }, { "name": "IMAGE_PIPELINES_ARG__NOP_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-nop-rhel9@sha256:d211ca7e07a2b964d9f0ae95ebcfd2454fe49179126a6b975af17478be5e5b5d" }, { "name": "IMAGE_PIPELINES_ARG__SHELL_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel9@sha256:e82f32cb7a12389ae82d42e83b346ff7c840b642275f23e519bef32d7fa4edc3" }, { "name": "IMAGE_TRIGGERS_TEKTON_TRIGGERS_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-triggers-controller-rhel9@sha256:2080d23c30be5b9602413e1cb881f4b62e4ad7bd2c4191b74809d0809c9e0b69" }, { "name": "IMAGE_TRIGGERS_WEBHOOK", "value": "registry.redhat.io/openshift-pipelines/pipelines-triggers-webhook-rhel9@sha256:3cf90015825015fd6e25b9d81ed44bef3e0e0648351f42c788df844e4c7238ea" }, { "name": "IMAGE_TRIGGERS_TEKTON_TRIGGERS_CORE_INTERCEPTORS", "value": "registry.redhat.io/openshift-pipelines/pipelines-triggers-core-interceptors-rhel9@sha256:ee56e85e0d1a4b06cb63b45b9f8290f6f20caab1ab6680253c0be14feddbb948" }, { "name": "IMAGE_TRIGGERS_ARG__EL_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-triggers-eventlistenersink-rhel9@sha256:35e7c0c99fe3b8a7ebeb45e17fcde0cd11b2457cab5991742a1e8e206bd237b8" }, { "name": "IMAGE_ADDONS_KN", "value": "registry.redhat.io/openshift-serverless-1/kn-client-kn-rhel8@sha256:0fa6d15d38601f266347cdd098e80bec9893f7e6b06e84efc4a8c50b3ff3c6cc" }, { "name": "IMAGE_ADDONS_OPC", "value": "registry.redhat.io/openshift-pipelines/pipelines-opc-rhel9@sha256:143eead39e74de11ddac3d534dfae9025867391a7635c1222f03d6debb0c4349" }, { "name": "IMAGE_ADDONS_SKOPEO_RESULTS", "value": "registry.redhat.io/rhel9/skopeo@sha256:a65a413f8a2864389a09dc750690d97afbcdc5c70821e0f85e99e8adba7954e0" }, { "name": "IMAGE_ADDONS_BUILD", "value": "registry.redhat.io/rhel9/buildah@sha256:18453ab0a62154283aaf4c45efd7543d1c8ecca1aebae46dedc7ddc0f410b232" }, { "name": "IMAGE_ADDONS_S2I_BUILD", "value": "registry.redhat.io/rhel9/buildah@sha256:18453ab0a62154283aaf4c45efd7543d1c8ecca1aebae46dedc7ddc0f410b232" }, { "name": "IMAGE_ADDONS_S2I_GENERATE", "value": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:bc10e7d6122ede5cf4f2882c200447683255465a1080e826761e90bfb983506e" }, { "name": "IMAGE_ADDONS_LOAD_SCRIPTS", "value": "registry.redhat.io/ubi9/ubi-minimal@sha256:2f06ae0e6d3d9c4f610d32c480338eef474867f435d8d28625f2985e8acde6e8" }, { "name": "IMAGE_ADDONS_MAVEN_GENERATE", "value": "registry.redhat.io/ubi9/ubi-minimal@sha256:2f06ae0e6d3d9c4f610d32c480338eef474867f435d8d28625f2985e8acde6e8" }, { "name": "IMAGE_ADDONS_PREPARE", "value": "registry.redhat.io/ubi9/ubi-minimal@sha256:2f06ae0e6d3d9c4f610d32c480338eef474867f435d8d28625f2985e8acde6e8" }, { "name": "IMAGE_ADDONS_PARAM_TKN_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:fe4ff846b09ed306eee2b2f13dae61573ea28ae93f812e97ce1241f64ea457b0" }, { "name": "IMAGE_ADDONS_TKN", "value": "registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:fe4ff846b09ed306eee2b2f13dae61573ea28ae93f812e97ce1241f64ea457b0" }, { "name": "IMAGE_ADDONS_TKN_CLI_SERVE", "value": "registry.redhat.io/openshift-pipelines/pipelines-serve-tkn-cli-rhel9@sha256:050fe6fe1298c45a27982e3f4d0afe637ce01d9b394e85b7eb202309ecdd0731" }, { "name": "IMAGE_CHAINS_TEKTON_CHAINS_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:e18051dfd083ba1afd3c74f8c2db874d3c9f9ceb74ca7a1148f5be9a449c3344" }, { "name": "IMAGE_RESULTS_POSTGRES", "value": "registry.redhat.io/rhel9/postgresql-13@sha256:36647bd6d50d2e0e9c99ecf190bd515577c7ce9476e49d927c4d4065011e3441" }, { "name": "IMAGE_HUB_TEKTON_HUB_DB_MIGRATION", "value": "registry.redhat.io/openshift-pipelines/pipelines-hub-db-migration-rhel9@sha256:487ebfe71210e975f3ba2bb3776906762b0533e9fd90abf755f07df2dd0e456c" }, { "name": "IMAGE_HUB_TEKTON_HUB_API", "value": "registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel9@sha256:bb4ae04424acb2e87094045a6534ad52e10ba33e3bf1995c5d52ba25416b3d5c" }, { "name": "IMAGE_HUB_TEKTON_HUB_UI", "value": "registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel9@sha256:02f5579adf64dadde9f7b515e7d5607aaf0581147649c646fd3aafb0d42bb9ba" }, { "name": "IMAGE_MAG_TEKTON_TASKGROUP_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-controller-rhel9@sha256:f3b3e54ea3c820df4825b08271ee88ce10bf3d6ff454b4125269dd8b0dcce3b2" }, { "name": "IMAGE_MAG_MANUAL_APPROVAL", "value": "registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-webhook-rhel9@sha256:494fbbda1f7a1d242d5c4475390521c2a755f4ee0a91e42aa2ed372b528229ea" }, { "name": "IMAGE_PRUNER_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-pruner-controller-rhel9@sha256:85d5a2cfd3d1bf6e302b1dee186a98d90c37d89015c85df7d1f980ac2f87b447" }, { "name": "IMAGE_PAC_PAC_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-controller-rhel9@sha256:bfe69478e0994a9229a6d28e48ea8dbd837869b88861a205610de8d1cce41973" }, { "name": "IMAGE_PAC_PAC_WEBHOOK", "value": "registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-webhook-rhel9@sha256:d28ec79f725102e88993e987bafaf1bb406859bab28743aad573825a51df799e" }, { "name": "IMAGE_PAC_PAC_WATCHER", "value": "registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel9@sha256:95f3cc4e3173845779e8ed825d34fba1ef07cd3d77c7243b30db2a2915cd1b61" }, { "name": "IMAGE_PAC_PAC_CLI", "value": "registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-cli-rhel9@sha256:372c4999817d0c8e5e7404150c3c27a6878254ae394e259e7511f0f759074995" }, { "name": "IMAGE_RESULTS_WATCHER", "value": "registry.redhat.io/openshift-pipelines/pipelines-results-watcher-rhel9@sha256:537d4bcde2376391f1a2d9e5ab957a6f7786821327d5d101004637c1d71d72ef" }, { "name": "IMAGE_RESULTS_API", "value": "registry.redhat.io/openshift-pipelines/pipelines-results-api-rhel9@sha256:a79884732e0edece5b9ecc3a11b413c7a7e0fa05b4d6f4e17f376391ec16bbeb" }, { "name": "IMAGE_RESULTS_RETENTION_POLICY_AGENT", "value": "registry.redhat.io/openshift-pipelines/pipelines-results-retention-policy-agent-rhel9@sha256:c00af2d8f97dfadc48617af84708b4025d751f435e8a9e9879ae546259ae6105" }, { "name": "IMAGE_ADDONS_MAVEN_GOALS", "value": "registry.redhat.io/ubi9/openjdk-17@sha256:555c8bcd2596637befd1a6da4aa949c5a2640cf66e09c2dfb932afe37e39095e" }, { "name": "IMAGE_PIPELINES_CONSOLE_PLUGIN", "value": "registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel9@sha256:4be8ec9e07019a695fd1861d002fcec629c52150917d71746691a3deca74bfe1" }, { "name": "OPERATOR_CONDITION_NAME", "value": "openshift-pipelines-operator-rh.v1.20.4" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-rhel9-operator@sha256:e72c5608714f0be376949140eecd8541921ee493e3653e134fd5f6cb1344c996", "imagePullPolicy": "Always", "name": "openshift-pipelines-operator-lifecycle", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" }, { "args": [ "-controllers", "tektoninstallerset", "-unique-process-name", "tekton-operator-cluster-operations" ], "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "redhat-openshift-pipelines-operator" }, { "name": "PROFILING_PORT", "value": "9009" }, { "name": "VERSION", "value": "v0.77.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-controller-config-leader-election" }, { "name": "OPERATOR_CONDITION_NAME", "value": "openshift-pipelines-operator-rh.v1.20.4" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-rhel9-operator@sha256:e72c5608714f0be376949140eecd8541921ee493e3653e134fd5f6cb1344c996", "imagePullPolicy": "Always", "name": "openshift-pipelines-operator-cluster-operations", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-pipelines-operator", "serviceAccountName": "openshift-pipelines-operator", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:26:38Z", "generation": 1, "labels": { "control-plane": "operator-controller-manager", "pod-template-hash": "5f6fcbb4d6" }, "name": "rhtas-operator-controller-manager-5f6fcbb4d6", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "rhtas-operator-controller-manager", "uid": "1ebf8961-e836-4cdb-9f8a-6759484c4245" } ], "resourceVersion": "23704", "uid": "f3d510f1-d26e-4ad7-adc8-be2eeaae84b5" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "operator-controller-manager", "pod-template-hash": "5f6fcbb4d6" } }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"rhtas.redhat.com/v1alpha1\",\n \"kind\": \"CTlog\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/instance\": \"securesign-sample\",\n \"app.kubernetes.io/name\": \"securesign-sample\",\n \"app.kubernetes.io/part-of\": \"trusted-artifact-signer\"\n },\n \"name\": \"ctlog-sample\"\n },\n \"spec\": {}\n },\n {\n \"apiVersion\": \"rhtas.redhat.com/v1alpha1\",\n \"kind\": \"Fulcio\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/instance\": \"securesign-sample\",\n \"app.kubernetes.io/name\": \"securesign-sample\",\n \"app.kubernetes.io/part-of\": \"trusted-artifact-signer\"\n },\n \"name\": \"fulcio-sample\"\n },\n \"spec\": {\n \"certificate\": {\n \"commonName\": \"fulcio.hostname\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n },\n \"config\": {\n \"OIDCIssuers\": [\n {\n \"ClientID\": \"trusted-artifact-signer\",\n \"Issuer\": \"https://your-oidc-issuer-url\",\n \"IssuerURL\": \"https://your-oidc-issuer-url\",\n \"Type\": \"email\"\n }\n ]\n },\n \"externalAccess\": {\n \"enabled\": true\n }\n }\n },\n {\n \"apiVersion\": \"rhtas.redhat.com/v1alpha1\",\n \"kind\": \"Rekor\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/instance\": \"securesign-sample\",\n \"app.kubernetes.io/name\": \"securesign-sample\",\n \"app.kubernetes.io/part-of\": \"trusted-artifact-signer\"\n },\n \"name\": \"rekor-sample\"\n },\n \"spec\": {\n \"externalAccess\": {\n \"enabled\": true\n }\n }\n },\n {\n \"apiVersion\": \"rhtas.redhat.com/v1alpha1\",\n \"kind\": \"Securesign\",\n \"metadata\": {\n \"annotations\": {\n \"rhtas.redhat.com/metrics\": \"true\"\n },\n \"labels\": {\n \"app.kubernetes.io/instance\": \"securesign-sample\",\n \"app.kubernetes.io/name\": \"securesign-sample\",\n \"app.kubernetes.io/part-of\": \"trusted-artifact-signer\"\n },\n \"name\": \"securesign-sample\"\n },\n \"spec\": {\n \"ctlog\": {\n \"monitoring\": {\n \"enabled\": true\n }\n },\n \"fulcio\": {\n \"certificate\": {\n \"commonName\": \"fulcio.hostname\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n },\n \"config\": {\n \"OIDCIssuers\": [\n {\n \"ClientID\": \"trusted-artifact-signer\",\n \"Issuer\": \"https://your-oidc-issuer-url\",\n \"IssuerURL\": \"https://your-oidc-issuer-url\",\n \"Type\": \"email\"\n }\n ]\n },\n \"externalAccess\": {\n \"enabled\": true\n },\n \"monitoring\": {\n \"enabled\": true\n }\n },\n \"rekor\": {\n \"externalAccess\": {\n \"enabled\": true\n },\n \"monitoring\": {\n \"enabled\": true\n }\n },\n \"trillian\": {\n \"database\": {\n \"create\": true\n },\n \"monitoring\": {\n \"enabled\": true\n }\n },\n \"tsa\": {\n \"externalAccess\": {\n \"enabled\": true\n },\n \"monitoring\": {\n \"enabled\": true\n },\n \"ntpMonitoring\": {\n \"enabled\": true\n },\n \"signer\": {\n \"certificateChain\": {\n \"intermediateCA\": [\n {\n \"commonName\": \"tsa.hostname-intermediate\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n }\n ],\n \"leafCA\": {\n \"commonName\": \"tsa.hostname-leaf\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n },\n \"rootCA\": {\n \"commonName\": \"tsa.hostname-root\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n }\n }\n }\n },\n \"tuf\": {\n \"externalAccess\": {\n \"enabled\": true\n },\n \"keys\": [\n {\n \"name\": \"rekor.pub\"\n },\n {\n \"name\": \"ctfe.pub\"\n },\n {\n \"name\": \"fulcio_v1.crt.pem\"\n },\n {\n \"name\": \"tsa.certchain.pem\"\n }\n ],\n \"pvc\": {\n \"accessModes\": [\n \"ReadWriteOnce\"\n ],\n \"retain\": true,\n \"size\": \"100Mi\"\n },\n \"rootKeySecretRef\": {\n \"name\": \"tuf-root-keys\"\n }\n }\n }\n },\n {\n \"apiVersion\": \"rhtas.redhat.com/v1alpha1\",\n \"kind\": \"TimestampAuthority\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/created-by\": \"rhtas-operator\",\n \"app.kubernetes.io/instance\": \"timestampauthority-sample\",\n \"app.kubernetes.io/managed-by\": \"kustomize\",\n \"app.kubernetes.io/name\": \"timestampauthority\",\n \"app.kubernetes.io/part-of\": \"rhtas-operator\"\n },\n \"name\": \"timestampauthority-sample\"\n },\n \"spec\": {\n \"externalAccess\": {\n \"enabled\": true\n },\n \"monitoring\": {\n \"enabled\": true\n },\n \"ntpMonitoring\": {\n \"enabled\": true\n },\n \"signer\": {\n \"certificateChain\": {\n \"intermediateCA\": [\n {\n \"commonName\": \"tsa.hostname-intermediate\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n }\n ],\n \"leafCA\": {\n \"commonName\": \"tsa.hostname-leaf\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n },\n \"rootCA\": {\n \"commonName\": \"tsa.hostname-root\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n }\n }\n }\n }\n },\n {\n \"apiVersion\": \"rhtas.redhat.com/v1alpha1\",\n \"kind\": \"Trillian\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/instance\": \"securesign-sample\",\n \"app.kubernetes.io/name\": \"securesign-sample\",\n \"app.kubernetes.io/part-of\": \"trusted-artifact-signer\"\n },\n \"name\": \"trillian-sample\"\n },\n \"spec\": {\n \"database\": {\n \"create\": true\n },\n \"server\": {\n \"replicas\": 1\n },\n \"signer\": {\n \"replicas\": 1\n }\n }\n },\n {\n \"apiVersion\": \"rhtas.redhat.com/v1alpha1\",\n \"kind\": \"Tuf\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/instance\": \"securesign-sample\",\n \"app.kubernetes.io/name\": \"securesign-sample\",\n \"app.kubernetes.io/part-of\": \"trusted-artifact-signer\"\n },\n \"name\": \"tuf-sample\"\n },\n \"spec\": {\n \"externalAccess\": {\n \"enabled\": true\n },\n \"keys\": [\n {\n \"name\": \"rekor.pub\",\n \"secretRef\": {\n \"key\": \"public\",\n \"name\": \"rekor-pub-key\"\n }\n },\n {\n \"name\": \"fulcio_v1.crt.pem\",\n \"secretRef\": {\n \"key\": \"cert\",\n \"name\": \"fulcio-pub-key\"\n }\n },\n {\n \"name\": \"ctfe.pub\",\n \"secretRef\": {\n \"key\": \"public\",\n \"name\": \"ctlog-pub-key\"\n }\n },\n {\n \"name\": \"tsa.certchain.pem\",\n \"secretRef\": {\n \"key\": \"certificateChain\",\n \"name\": \"tsa-cert-chain\"\n }\n }\n ],\n \"pvc\": {\n \"accessModes\": [\n \"ReadWriteMany\"\n ],\n \"retain\": true,\n \"size\": \"100Mi\"\n }\n }\n }\n]", "capabilities": "Seamless Upgrades", "containerImage": "registry.redhat.io/rhtas/rhtas-rhel9-operator@sha256:1d97e631c15e5b2f10de5c394e207f0f110a4720f3fbb8986b90932cd3059f93", "createdAt": "2026-04-16T14:50:18Z", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "false", "features.operators.openshift.io/proxy-aware": "true", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "kubectl.kubernetes.io/default-container": "manager", "olm.operatorGroup": "global-operators", "olm.operatorNamespace": "openshift-operators", "olm.targetNamespaces": "", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtas.redhat.com\",\"kind\":\"CTlog\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtas.redhat.com\",\"kind\":\"Fulcio\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtas.redhat.com\",\"kind\":\"Rekor\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtas.redhat.com\",\"kind\":\"Securesign\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtas.redhat.com\",\"kind\":\"TimestampAuthority\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtas.redhat.com\",\"kind\":\"Trillian\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtas.redhat.com\",\"kind\":\"Tuf\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"rhtas-operator\",\"version\":\"1.3.4\"}}]}", "operators.openshift.io/valid-subscription": "[\"Red Hat Trusted Artifact Signer\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.36.1-ocp", "operators.operatorframework.io/project_layout": "go.kubebuilder.io/v4", "repository": "https://github.com/securesign/secure-sign-operator", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "control-plane": "operator-controller-manager", "pod-template-hash": "5f6fcbb4d6" } }, "spec": { "containers": [ { "args": [ "--leader-elect", "--metrics-bind-address=0.0.0.0:8080" ], "command": [ "/manager" ], "env": [ { "name": "OPENSHIFT", "value": "true" }, { "name": "RELATED_IMAGE_TRILLIAN_LOG_SIGNER", "value": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:f211db01228530de8ed46b05189c492e6c3629df1098da57d31f2765a22ef014" }, { "name": "RELATED_IMAGE_TRILLIAN_LOG_SERVER", "value": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:523fa259ebf067ac3076748d4f5c86e01e5b1960034c0876add5d67b0ca21b0b" }, { "name": "RELATED_IMAGE_TRILLIAN_DB", "value": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:ab5c3e921b58d17bf6b596d2d7acf64a28b34f3f3a66720c1a07e6555ed9e0b8" }, { "name": "RELATED_IMAGE_TRILLIAN_NETCAT", "value": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:15692e0deea2ee5ef374514639030317a5b033c1bd1778673329a9745feb41d1" }, { "name": "RELATED_IMAGE_CREATETREE", "value": "registry.redhat.io/rhtas/createtree-rhel9@sha256:163edb41ea7f64afc8333ee14d4b28161f7017285afcca6ca12238732c77b98d" }, { "name": "RELATED_IMAGE_FULCIO_SERVER", "value": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:2d478c389bc89afc6b331bc662a84dfc1bbb9da2681ab6dc5ad36f44c346699a" }, { "name": "RELATED_IMAGE_REKOR_MONITOR", "value": "registry.redhat.io/rhtas/rekor-monitor-rhel9@sha256:5f9cefb77c78ded0062fda73b6589767813de9448a845fe91e72cfe22df1f386" }, { "name": "RELATED_IMAGE_REKOR_REDIS", "value": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:22b8cfd123fdd66827b81f2431903198e33579906102b2f6295276cf3eb197a6" }, { "name": "RELATED_IMAGE_REKOR_SERVER", "value": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:b4a5a2c2518dba5f7812c8b4112e25a0f867a4b187c23adfc727395f871c8ca6" }, { "name": "RELATED_IMAGE_REKOR_SEARCH_UI", "value": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:204dc28f6182267851d39eff08649e921877e2771d2c39acb798aa7896f5bcef" }, { "name": "RELATED_IMAGE_BACKFILL_REDIS", "value": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:35b00d6cc82f90b4577af0d2c15153e255d6bb946349bb85f175216cefad1d07" }, { "name": "RELATED_IMAGE_TUF", "value": "registry.redhat.io/rhtas/tuffer-rhel9@sha256:3516168bd98b02eec2b6ffc247549a04dbb4483e7be4d08b63569f469e4a1f66" }, { "name": "RELATED_IMAGE_CTLOG", "value": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:95b5aefafd17dd44794f6d5d1e75278faa5a74f2472db667409d1c88caaef1f1" }, { "name": "RELATED_IMAGE_HTTP_SERVER", "value": "registry.redhat.io/ubi9/httpd-24@sha256:7a48172cdda2a565001998fac2f3aeaa65677f080dd9cb3f9e26ef0963afdef0" }, { "name": "RELATED_IMAGE_SEGMENT_REPORTING", "value": "registry.redhat.io/rhtas/segment-reporting-rhel9@sha256:5d9f194515a383a350f0f7f610de9d9b5e555b792cc1e1b3577cf84bcfd82499" }, { "name": "RELATED_IMAGE_TIMESTAMP_AUTHORITY", "value": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:a4aae20d4d24fc780fd7f613a54c6587538007b23e2a84b826c6812a19abd9ed" }, { "name": "RELATED_IMAGE_CLIENT_SERVER", "value": "registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72" }, { "name": "OPERATOR_CONDITION_NAME", "value": "rhtas-operator.v1.3.4" } ], "image": "registry.redhat.io/rhtas/rhtas-rhel9-operator@sha256:1d97e631c15e5b2f10de5c394e207f0f110a4720f3fbb8986b90932cd3059f93", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 8080, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "rhtas-operator-controller-manager", "serviceAccountName": "rhtas-operator-controller-manager", "terminationGracePeriodSeconds": 10 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:26:31Z", "generation": 1, "labels": { "app": "tekton-operator", "name": "tekton-operator-webhook", "pod-template-hash": "858cb9b459" }, "name": "tekton-operator-webhook-858cb9b459", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-operator-webhook", "uid": "65742208-452e-4283-b0de-aa692858eb6d" } ], "resourceVersion": "22263", "uid": "05a9f196-b88b-4b5a-ac2d-ab33dea51d69" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "tekton-operator-webhook", "pod-template-hash": "858cb9b459" } }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"ManualApprovalGate\",\n \"metadata\": {\n \"name\": \"manual-approval-gate\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"OpenShiftPipelinesAsCode\",\n \"metadata\": {\n \"name\": \"pipelines-as-code\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonAddon\",\n \"metadata\": {\n \"name\": \"addon\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonChain\",\n \"metadata\": {\n \"name\": \"chain\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonConfig\",\n \"metadata\": {\n \"name\": \"config\"\n },\n \"spec\": {\n \"addon\": {\n \"params\": [\n {\n \"name\": \"pipelineTemplates\",\n \"value\": \"true\"\n },\n {\n \"name\": \"resolverTasks\",\n \"value\": \"true\"\n },\n {\n \"name\": \"resolverStepActions\",\n \"value\": \"true\"\n },\n {\n \"name\": \"communityResolverTasks\",\n \"value\": \"true\"\n }\n ]\n },\n \"params\": [\n {\n \"name\": \"createRbacResource\",\n \"value\": \"true\"\n },\n {\n \"name\": \"legacyPipelineRbac\",\n \"value\": \"true\"\n },\n {\n \"name\": \"createCABundleConfigMaps\",\n \"value\": \"true\"\n }\n ],\n \"profile\": \"all\",\n \"pruner\": {\n \"keep\": 100,\n \"resources\": [\n \"pipelinerun\",\n \"taskrun\"\n ],\n \"schedule\": \"0 8 * * *\"\n },\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonHub\",\n \"metadata\": {\n \"name\": \"hub\"\n },\n \"spec\": {\n \"api\": {\n \"catalogRefreshInterval\": \"30m\"\n },\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonInstallerSet\",\n \"metadata\": {\n \"name\": \"foo\"\n },\n \"spec\": {\n \"manifests\": []\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonPipeline\",\n \"metadata\": {\n \"name\": \"pipeline\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonPruner\",\n \"metadata\": {\n \"name\": \"pruner\"\n },\n \"spec\": {\n \"disabled\": true,\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonResult\",\n \"metadata\": {\n \"name\": \"result\"\n },\n \"spec\": {\n \"auth_disable\": true,\n \"db_enable_auto_migration\": true,\n \"db_host\": \"tekton-results-postgres-service.openshift-pipelines.svc.cluster.local\",\n \"db_port\": 5432,\n \"log_level\": \"debug\",\n \"logging_pvc_name\": \"tekton-logs\",\n \"logs_api\": true,\n \"logs_buffer_size\": 32768,\n \"logs_path\": \"/logs\",\n \"logs_type\": \"File\",\n \"prometheus_port\": 9090,\n \"server_port\": 8080,\n \"targetNamespace\": \"openshift-pipelines\",\n \"tls_hostname_override\": \"tekton-results-api-service.openshift-pipelines.svc.cluster.local\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonTrigger\",\n \"metadata\": {\n \"name\": \"trigger\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n }\n]", "capabilities": "Full Lifecycle", "categories": "Developer Tools, Integration \u0026 Delivery", "certified": "false", "console.openshift.io/plugins": "[\"pipelines-console-plugin\"]", "description": "Red Hat OpenShift Pipelines is a cloud-native CI/CD solution for building pipelines using Tekton concepts which run natively on OpenShift and Kubernetes.", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "true", "features.operators.openshift.io/proxy-aware": "true", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "olm.operatorGroup": "global-operators", "olm.operatorNamespace": "openshift-operators", "olm.skipRange": "\u003e=1.19.0 \u003c1.20.4", "olm.targetNamespaces": "", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"ManualApprovalGate\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"OpenShiftPipelinesAsCode\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonAddon\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonChain\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonConfig\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonHub\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonInstallerSet\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonPipeline\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonPruner\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonResult\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonTrigger\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"openshift-pipelines-operator-rh\",\"version\":\"1.20.4\"}}]}", "operators.openshift.io/valid-subscription": "[\"OpenShift Container Platform\", \"OpenShift Platform Plus\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.37.0", "operators.operatorframework.io/internal-objects": "[\"tektoninstallersets.operator.tekton.dev\", \"tektonconfigs.operator.tekton.dev\",\"tektonpipelines.operator.tekton.dev\",\"tektontriggers.operator.tekton.dev\",\"tektonaddons.operator.tekton.dev\", \"tektonhubs.operator.tekton.dev\", \"tektonresults.operator.tekton.dev\", \"tektonchains.operator.tekton.dev\", \"openshiftpipelinesascodes.operator.tekton.dev\", \"manualapprovalgates.operator.tekton.dev\",\"tektonpruners.operator.tekton.dev\"]", "operators.operatorframework.io/project_layout": "unknown", "repository": "https://github.com/tektoncd/operator", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "app": "tekton-operator", "name": "tekton-operator-webhook", "pod-template-hash": "858cb9b459" } }, "spec": { "containers": [ { "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-webhook-config-leader-election" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-operator-webhook" }, { "name": "WEBHOOK_SECRET_NAME", "value": "tekton-operator-webhook-certs" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "PLATFORM", "value": "openshift" }, { "name": "OPERATOR_CONDITION_NAME", "value": "openshift-pipelines-operator-rh.v1.20.4" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-operator-webhook-rhel9@sha256:e4f1a76ec4361a96a2c9f2a03571e642130b9349fb7ad157ab01057a2cbd9ec6", "imagePullPolicy": "IfNotPresent", "name": "tekton-operator-webhook", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-pipelines-operator", "serviceAccountName": "openshift-pipelines-operator", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:28:48Z", "generation": 1, "labels": { "app": "pipelines-as-code-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.37.7", "operator.tekton.dev/deployment-spec-applied-hash": "07c12605c650e5ec10c157e8de9d753e", "pod-template-hash": "697ddc5f79" }, "name": "pipelines-as-code-controller-697ddc5f79", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-as-code-controller", "uid": "e1544b3e-d623-447e-a4d3-fffd9b5dca24" } ], "resourceVersion": "27152", "uid": "f3e90ad2-1597-4eb5-bddc-a60c3780b420" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "pod-template-hash": "697ddc5f79" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-as-code-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.37.7", "operator.tekton.dev/deployment-spec-applied-hash": "07c12605c650e5ec10c157e8de9d753e", "pod-template-hash": "697ddc5f79" } }, "spec": { "containers": [ { "command": [ "/ko-app/pipelines-as-code-controller" ], "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "K_METRICS_CONFIG", "value": "{\"Domain\":\"pipelinesascode.tekton.dev/controller\",\"Component\":\"pac_controller\",\"PrometheusPort\":9090,\"ConfigMap\":{\"name\":\"pipelines-as-code-config-observability\"}}" }, { "name": "K_SINK_TIMEOUT", "value": "30" }, { "name": "K_TRACING_CONFIG", "value": "{\"backend\":\"prometheus\",\"debug\":\"false\",\"sample-rate\":\"0\"}" }, { "name": "PAC_CONTROLLER_CONFIGMAP", "value": "pipelines-as-code" }, { "name": "PAC_CONTROLLER_LABEL", "value": "default" }, { "name": "PAC_CONTROLLER_SECRET", "value": "pipelines-as-code-secret" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TLS_CERT", "value": "cert" }, { "name": "TLS_KEY", "value": "key" }, { "name": "TLS_SECRET_NAME", "value": "pipelines-as-code-tls-secret" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-controller-rhel9@sha256:bfe69478e0994a9229a6d28e48ea8dbd837869b88861a205610de8d1cce41973", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "api", "scheme": "HTTP" }, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "pac-controller", "ports": [ { "containerPort": 8082, "name": "api", "protocol": "TCP" }, { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "api", "scheme": "HTTP" }, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/pipelines-as-code/tls", "name": "tls", "readOnly": true }, { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-controller", "serviceAccountName": "pipelines-as-code-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "pipelines-as-code-tls-secret" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:28:48Z", "generation": 1, "labels": { "app": "pipelines-as-code-watcher", "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.37.7", "operator.tekton.dev/deployment-spec-applied-hash": "8b1c341c7866950f749b340467049dc6", "pod-template-hash": "86f85bcc8f" }, "name": "pipelines-as-code-watcher-86f85bcc8f", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-as-code-watcher", "uid": "b2c1a901-fe2c-4444-986c-0da2075e6ef7" } ], "resourceVersion": "27284", "uid": "42378446-1f2c-4c06-9469-661f062b24c9" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "pod-template-hash": "86f85bcc8f" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-as-code-watcher", "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.37.7", "operator.tekton.dev/deployment-spec-applied-hash": "8b1c341c7866950f749b340467049dc6", "pod-template-hash": "86f85bcc8f" } }, "spec": { "containers": [ { "command": [ "/ko-app/pipelines-as-code-watcher" ], "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "pac-watcher-config-leader-election" }, { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "pipelines-as-code-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipelinesascode" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel9@sha256:95f3cc4e3173845779e8ed825d34fba1ef07cd3d77c7243b30db2a2915cd1b61", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "pac-watcher", "ports": [ { "containerPort": 8080, "name": "probes", "protocol": "TCP" }, { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-watcher", "serviceAccountName": "pipelines-as-code-watcher", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:28:48Z", "generation": 1, "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.37.7", "operator.tekton.dev/deployment-spec-applied-hash": "8bdeb210d5a09d08364ad43e3cb16c8b", "pod-template-hash": "656f8dbf57" }, "name": "pipelines-as-code-webhook-656f8dbf57", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-as-code-webhook", "uid": "d14cce29-7c16-452e-bcdd-d390f11075c3" } ], "resourceVersion": "27103", "uid": "9e559aea-59c2-4ce8-9e38-f70fe8dbc3f6" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "pod-template-hash": "656f8dbf57" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.37.7", "operator.tekton.dev/deployment-spec-applied-hash": "8bdeb210d5a09d08364ad43e3cb16c8b", "pod-template-hash": "656f8dbf57" } }, "spec": { "containers": [ { "command": [ "/ko-app/pipelines-as-code-webhook" ], "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "pac-webhook-config-leader-election" }, { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipelinesascode" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SECRET_NAME", "value": "pipelines-as-code-webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "pipelines-as-code-webhook" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-webhook-rhel9@sha256:d28ec79f725102e88993e987bafaf1bb406859bab28743aad573825a51df799e", "imagePullPolicy": "IfNotPresent", "name": "pac-webhook", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-webhook", "serviceAccountName": "pipelines-as-code-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:29:04Z", "generation": 1, "labels": { "app": "pipelines-console-plugin", "app.kubernetes.io/part-of": "tekton-config", "name": "pipelines-console-plugin", "pod-template-hash": "585484595f" }, "name": "pipelines-console-plugin-585484595f", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-console-plugin", "uid": "5b71e98b-0cef-45ed-9390-248332f77ac0" } ], "resourceVersion": "27446", "uid": "e4b13cfc-991a-4d66-8d38-64d3f438d846" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "pipelines-console-plugin", "name": "pipelines-console-plugin", "pod-template-hash": "585484595f" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-console-plugin", "app.kubernetes.io/part-of": "tekton-config", "name": "pipelines-console-plugin", "pod-template-hash": "585484595f" } }, "spec": { "containers": [ { "image": "registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel9@sha256:4be8ec9e07019a695fd1861d002fcec629c52150917d71746691a3deca74bfe1", "imagePullPolicy": "Always", "name": "pipelines-console-plugin", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/cert", "name": "pipelines-console-plugin-cert", "readOnly": true }, { "mountPath": "/etc/nginx/nginx.conf", "name": "nginx-conf", "readOnly": true, "subPath": "nginx.conf" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "pipelines-console-plugin-cert", "secret": { "defaultMode": 420, "secretName": "pipelines-console-plugin-cert" } }, { "configMap": { "defaultMode": 420, "name": "pipelines-console-plugin" }, "name": "nginx-conf" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:27:44Z", "generation": 1, "labels": { "app": "tekton-chains-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "a4af10c02deeec1dbd0a4ebc8203a460", "pipeline.tekton.dev/release": "v0.25.1", "pod-template-hash": "5c45d58f9f", "version": "v0.25.1" }, "name": "tekton-chains-controller-5c45d58f9f", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-chains-controller", "uid": "25ade287-9595-4ff0-953f-6d960af3ef6a" } ], "resourceVersion": "25399", "uid": "e8aa06c7-3b05-41e3-8d2f-8f22b8471079" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "pod-template-hash": "5c45d58f9f" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-chains-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "a4af10c02deeec1dbd0a4ebc8203a460", "pipeline.tekton.dev/release": "v0.25.1", "pod-template-hash": "5c45d58f9f", "version": "v0.25.1" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-chains-config-leader-election" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-chains-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/chains" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:e18051dfd083ba1afd3c74f8c2db874d3c9f9ceb74ca7a1148f5be9a449c3344", "imagePullPolicy": "IfNotPresent", "name": "tekton-chains-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/signing-secrets", "name": "signing-secrets" }, { "mountPath": "/var/run/sigstore/cosign", "name": "oidc-info" }, { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-chains-controller", "serviceAccountName": "tekton-chains-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "signing-secrets", "secret": { "defaultMode": 420, "secretName": "signing-secrets" } }, { "name": "oidc-info", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "sigstore", "expirationSeconds": 600, "path": "oidc-token" } } ] } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:27:00Z", "generation": 1, "labels": { "app": "tekton-events-controller", "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.3.3", "operator.tekton.dev/deployment-spec-applied-hash": "4187a478da7549b333aa5adf4c898f5b", "pipeline.tekton.dev/release": "v1.3.3", "pod-template-hash": "5cc5cbfcc8", "version": "v1.3.3" }, "name": "tekton-events-controller-5cc5cbfcc8", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-events-controller", "uid": "74e9a383-5467-40c3-a5c2-baa7ba37749b" } ], "resourceVersion": "24557", "uid": "bb5607ad-7f69-4862-a127-4f4c5eac011e" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "5cc5cbfcc8" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-events-controller", "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.3.3", "operator.tekton.dev/deployment-spec-applied-hash": "4187a478da7549b333aa5adf4c898f5b", "pipeline.tekton.dev/release": "v1.3.3", "pod-template-hash": "5cc5cbfcc8", "version": "v1.3.3" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } } }, "containers": [ { "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-events" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SSL_CERT_DIR", "value": "/etc/ssl/certs" }, { "name": "SSL_CERT_FILE", "value": "/etc/config-registry-cert/cert" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-events-rhel9@sha256:a8d45a728ef6daefe4297359acfae70c42014eb79cfcf6892aef4e8bc672475a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "tekton-events-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config-logging", "name": "config-logging" }, { "mountPath": "/etc/config-registry-cert", "name": "config-registry-cert" }, { "mountPath": "/etc/ssl/certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/etc/ssl/certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-events-controller", "serviceAccountName": "tekton-events-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "config-logging" }, "name": "config-logging" }, { "configMap": { "defaultMode": 420, "name": "config-registry-cert" }, "name": "config-registry-cert" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:27:00Z", "generation": 1, "labels": { "app": "tekton-operator", "name": "tekton-operator", "operator.tekton.dev/deployment-spec-applied-hash": "41773178849fe102392e3979357fef3a", "pod-template-hash": "6b5849645c" }, "name": "tekton-operator-proxy-webhook-6b5849645c", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-operator-proxy-webhook", "uid": "524c5bb8-8077-44de-a278-241cd07e5e0a" } ], "resourceVersion": "24496", "uid": "f8daa612-2c2b-49e0-8ecf-546a9e7d0789" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "tekton-operator", "pod-template-hash": "6b5849645c" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-operator", "name": "tekton-operator", "operator.tekton.dev/deployment-spec-applied-hash": "41773178849fe102392e3979357fef3a", "pod-template-hash": "6b5849645c" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-proxy-webhook-config-leader-election" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SECRET_NAME", "value": "proxy-webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-operator-proxy-webhook" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-operator-proxy-rhel9@sha256:fff81880193f599e7998abfd85369ccca85ad9e0a68342b4c65653e2128f4738", "imagePullPolicy": "IfNotPresent", "name": "proxy", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "500Mi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-operators-proxy-webhook", "serviceAccountName": "tekton-operators-proxy-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:27:00Z", "generation": 1, "labels": { "app": "tekton-pipelines-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.3.3", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "660d3a7927d99349fb7aa1c72bb4da12", "pipeline.tekton.dev/release": "v1.3.3", "pod-template-hash": "6b9cf9bcd7", "version": "v1.3.3" }, "name": "tekton-pipelines-controller-6b9cf9bcd7", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-pipelines-controller", "uid": "54adcc52-65d1-4223-ae5c-ed53aff59cf1" } ], "resourceVersion": "24619", "uid": "cf16409d-7b02-4eb4-9065-b0441c56857f" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "6b9cf9bcd7" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.3.3", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "660d3a7927d99349fb7aa1c72bb4da12", "pipeline.tekton.dev/release": "v1.3.3", "pod-template-hash": "6b9cf9bcd7", "version": "v1.3.3" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-entrypoint-image", "registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel9@sha256:e82f32cb7a12389ae82d42e83b346ff7c840b642275f23e519bef32d7fa4edc3", "-nop-image", "registry.redhat.io/openshift-pipelines/pipelines-nop-rhel9@sha256:d211ca7e07a2b964d9f0ae95ebcfd2454fe49179126a6b975af17478be5e5b5d", "-sidecarlogresults-image", "registry.redhat.io/openshift-pipelines/pipelines-sidecarlogresults-rhel9@sha256:b117244b55b0e6ee24e52361eb6699d71342cba3546da35cadc09af700afa22f", "-workingdirinit-image", "registry.redhat.io/openshift-pipelines/pipelines-workingdirinit-rhel9@sha256:9e66154eb20b10abb19604f145e71225e7b8423b60860f013c455fe590a6edd2", "-shell-image", "registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel9@sha256:e82f32cb7a12389ae82d42e83b346ff7c840b642275f23e519bef32d7fa4edc3", "-shell-image-win", "mcr.microsoft.com/powershell:nanoserver@sha256:b6d5ff841b78bdf2dfed7550000fd4f3437385b8fa686ec0f010be24777654d6", "-disable-ha=false" ], "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults" }, { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-controller" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "CONFIG_SPIRE", "value": "config-spire" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipeline" }, { "name": "SSL_CERT_DIR", "value": "/etc/ssl/certs" }, { "name": "SSL_CERT_FILE", "value": "/etc/config-registry-cert/cert" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-controller-rhel9@sha256:f55292a74e7bdd843f6fe5dd078e1d341a742b60625dc1e6925fda65d32ff8a8", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "tekton-pipelines-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config-logging", "name": "config-logging" }, { "mountPath": "/etc/config-registry-cert", "name": "config-registry-cert" }, { "mountPath": "/etc/ssl/certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/etc/ssl/certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-controller", "serviceAccountName": "tekton-pipelines-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "config-logging" }, "name": "config-logging" }, { "configMap": { "defaultMode": 420, "name": "config-registry-cert" }, "name": "config-registry-cert" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:27:00Z", "generation": 1, "labels": { "app": "tekton-pipelines-resolvers", "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.3.3", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "6ad72327ccdfb7348a066b82a833a3f5", "pipeline.tekton.dev/release": "v1.3.3", "pod-template-hash": "6ddfc89746", "version": "v1.3.3" }, "name": "tekton-pipelines-remote-resolvers-6ddfc89746", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-pipelines-remote-resolvers", "uid": "0238bde0-195b-4f99-81dd-bd6f5e84256e" } ], "resourceVersion": "24478", "uid": "46f71880-9228-44c9-8b0a-f155c7146797" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "6ddfc89746" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-resolvers", "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.3.3", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "6ad72327ccdfb7348a066b82a833a3f5", "pipeline.tekton.dev/release": "v1.3.3", "pod-template-hash": "6ddfc89746", "version": "v1.3.3" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "command": [ "/sbin/tini", "--", "/ko-app/resolvers" ], "env": [ { "name": "ARTIFACT_HUB_API", "value": "https://artifacthub.io/" }, { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-resolvers" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/resolution" }, { "name": "PROBES_PORT", "value": "8080" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TEKTON_HUB_API" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-resolvers-rhel9@sha256:09cea31cb42bebffbe682f4314fd2d452745d43eb3703a7852dab9eb9c662313", "imagePullPolicy": "IfNotPresent", "name": "controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "1", "memory": "4Gi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp-clone-volume" }, { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-resolvers", "serviceAccountName": "tekton-pipelines-resolvers", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": { "sizeLimit": "4Gi" }, "name": "tmp-clone-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:27:00Z", "generation": 1, "labels": { "app": "tekton-pipelines-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.3.3", "operator.tekton.dev/deployment-spec-applied-hash": "4c67be422a789e1f3d9bfd01cff2af1d", "pipeline.tekton.dev/release": "v1.3.3", "pod-template-hash": "f68c47648", "version": "v1.3.3" }, "name": "tekton-pipelines-webhook-f68c47648", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-pipelines-webhook", "uid": "ce391897-e290-4e0f-ae0a-6f529fc4d1c3" } ], "resourceVersion": "24614", "uid": "251f1717-0d62-4066-b35b-6c8737609330" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "f68c47648" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.3.3", "operator.tekton.dev/deployment-spec-applied-hash": "4c67be422a789e1f3d9bfd01cff2af1d", "pipeline.tekton.dev/release": "v1.3.3", "pod-template-hash": "f68c47648", "version": "v1.3.3" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-webhook" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipeline" }, { "name": "PROBES_PORT", "value": "8080" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_ADMISSION_CONTROLLER_NAME", "value": "webhook.pipeline.tekton.dev" }, { "name": "WEBHOOK_PORT", "value": "8443" }, { "name": "WEBHOOK_SECRET_NAME", "value": "webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-pipelines-webhook" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-webhook-rhel9@sha256:d630ecd73ba231368f2ef4bddebfc20870ddc165b5e3c0af7f78bd9bcf5c8220", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "webhook", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "cpu": "500m", "memory": "500Mi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-webhook", "serviceAccountName": "tekton-pipelines-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:28:07Z", "generation": 1, "labels": { "app": "tekton-results-api", "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.16.0", "operator.tekton.dev/deployment-spec-applied-hash": "06559ccef017bfca7e57c5ca905b7edd", "pod-template-hash": "658dc8679d" }, "name": "tekton-results-api-658dc8679d", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-results-api", "uid": "d6cd0fc2-2e0f-4178-b3df-131a8997be4a" } ], "resourceVersion": "25972", "uid": "37862db8-6d2d-4dbf-b816-59cfd31a34de" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.16.0", "pod-template-hash": "658dc8679d" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-results-api", "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.16.0", "operator.tekton.dev/deployment-spec-applied-hash": "06559ccef017bfca7e57c5ca905b7edd", "pod-template-hash": "658dc8679d" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.16.0" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "DB_HOST", "value": "tekton-results-postgres-service.openshift-pipelines.svc.cluster.local" }, { "name": "DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_PASSWORD", "name": "tekton-results-postgres" } } }, { "name": "DB_USER", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_USER", "name": "tekton-results-postgres" } } }, { "name": "IS_EXTERNAL_DB", "value": "false" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "LOGGING_PLUGIN_TLS_VERIFICATION_DISABLE", "value": "false" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-results-api-rhel9@sha256:a79884732e0edece5b9ecc3a11b413c7a7e0fa05b4d6f4e17f376391ec16bbeb", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "api", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "startupProbe": { "failureThreshold": 10, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tekton/results", "name": "config", "readOnly": true }, { "mountPath": "/etc/tls", "name": "tls", "readOnly": true }, { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-results-api", "serviceAccountName": "tekton-results-api", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "tekton-results-api-config" }, "name": "config" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:28:07Z", "generation": 1, "labels": { "app": "tekton-results-retention-policy-agent", "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/version": "v0.16.0", "operator.tekton.dev/deployment-spec-applied-hash": "24685979645a3b2b327643216e2627d2", "pod-template-hash": "f9dff4dbb" }, "name": "tekton-results-retention-policy-agent-f9dff4dbb", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-results-retention-policy-agent", "uid": "8e98dc27-6b75-4a2f-a12d-1e3858c2bcda" } ], "resourceVersion": "25857", "uid": "60e503e4-aa2a-4908-b31b-1d37da2cc919" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/version": "v0.16.0", "pod-template-hash": "f9dff4dbb" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-results-retention-policy-agent", "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/version": "v0.16.0", "operator.tekton.dev/deployment-spec-applied-hash": "24685979645a3b2b327643216e2627d2", "pod-template-hash": "f9dff4dbb" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "tekton-results-config-logging" }, { "name": "DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_PASSWORD", "name": "tekton-results-postgres" } } }, { "name": "DB_USER", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_USER", "name": "tekton-results-postgres" } } }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-results-retention-policy-agent-rhel9@sha256:c00af2d8f97dfadc48617af84708b4025d751f435e8a9e9879ae546259ae6105", "imagePullPolicy": "IfNotPresent", "name": "retention-policy-agent", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tekton/results", "name": "config", "readOnly": true }, { "mountPath": "/etc/tls", "name": "tls", "readOnly": true }, { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-results-watcher", "serviceAccountName": "tekton-results-watcher", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "tekton-results-api-config" }, "name": "config" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:28:07Z", "generation": 1, "labels": { "app": "tekton-results-watcher", "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.16.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "7481967ff36f7c35fa96b0133b51bee2", "pod-template-hash": "56cfd847cf" }, "name": "tekton-results-watcher-56cfd847cf", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-results-watcher", "uid": "87a24b81-908f-4704-998b-8a82f1e7d09b" } ], "resourceVersion": "25875", "uid": "05cdf892-e43a-46d2-8888-a2c862895bdd" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.16.0", "pod-template-hash": "56cfd847cf" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-results-watcher", "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.16.0", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "7481967ff36f7c35fa96b0133b51bee2", "pod-template-hash": "56cfd847cf" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.16.0" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-api_addr", "$(TEKTON_RESULTS_API_SERVICE)", "-auth_mode", "$(AUTH_MODE)" ], "env": [ { "name": "AUTH_MODE", "value": "token" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-results-config-leader-election" }, { "name": "CONFIG_LOGGING_NAME", "value": "tekton-results-config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-results-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/results" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TEKTON_RESULTS_API_SERVICE", "value": "tekton-results-api-service.openshift-pipelines.svc.cluster.local:8080" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-results-watcher-rhel9@sha256:537d4bcde2376391f1a2d9e5ab957a6f7786821327d5d101004637c1d71d72ef", "imagePullPolicy": "IfNotPresent", "name": "watcher", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tls", "name": "tls", "readOnly": true }, { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-results-watcher", "serviceAccountName": "tekton-results-watcher", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:27:26Z", "generation": 1, "labels": { "app": "tekton-triggers-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.33.0", "operator.tekton.dev/deployment-spec-applied-hash": "361c0001a11a5be2b679ea4eda729bf1", "pod-template-hash": "6b78bc59d6", "triggers.tekton.dev/release": "v0.33.0", "version": "v0.33.0" }, "name": "tekton-triggers-controller-6b78bc59d6", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-triggers-controller", "uid": "3a117755-44e5-449e-8d48-b76fd9babe02" } ], "resourceVersion": "24994", "uid": "849b31af-f634-4306-a59c-806adc3d0d6c" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers", "pod-template-hash": "6b78bc59d6" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.33.0", "operator.tekton.dev/deployment-spec-applied-hash": "361c0001a11a5be2b679ea4eda729bf1", "pod-template-hash": "6b78bc59d6", "triggers.tekton.dev/release": "v0.33.0", "version": "v0.33.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-logtostderr", "-stderrthreshold", "INFO", "-el-image", "registry.redhat.io/openshift-pipelines/pipelines-triggers-eventlistenersink-rhel9@sha256:35e7c0c99fe3b8a7ebeb45e17fcde0cd11b2457cab5991742a1e8e206bd237b8", "-el-port", "8080", "-el-security-context=true", "-el-read-only-root-filesystem=true", "-el-events", "enable", "-el-readtimeout", "5", "-el-writetimeout", "40", "-el-idletimeout", "120", "-el-timeouthandler", "30", "-el-httpclient-readtimeout", "30", "-el-httpclient-keep-alive", "30", "-el-httpclient-tlshandshaketimeout", "10", "-el-httpclient-responseheadertimeout", "10", "-el-httpclient-expectcontinuetimeout", "1", "-period-seconds", "10", "-failure-threshold", "3" ], "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults-triggers" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-triggers-controllers" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability-triggers" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "METRICS_PROMETHEUS_PORT", "value": "9000" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-triggers-controller-rhel9@sha256:2080d23c30be5b9602413e1cb881f4b62e4ad7bd2c4191b74809d0809c9e0b69", "imagePullPolicy": "IfNotPresent", "name": "tekton-triggers-controller", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-controller", "serviceAccountName": "tekton-triggers-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:27:26Z", "generation": 1, "labels": { "app": "tekton-triggers-core-interceptors", "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.33.0", "operator.tekton.dev/deployment-spec-applied-hash": "95d789ea4aedce47e1790dc1841b501f", "pod-template-hash": "74f4c669d9", "triggers.tekton.dev/release": "v0.33.0", "version": "v0.33.0" }, "name": "tekton-triggers-core-interceptors-74f4c669d9", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-triggers-core-interceptors", "uid": "97c025ae-d863-4fe2-94ac-1e39169152d3" } ], "resourceVersion": "25227", "uid": "9afa83bf-5393-43fb-bd11-134afc267002" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers", "pod-template-hash": "74f4c669d9" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-core-interceptors", "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.33.0", "operator.tekton.dev/deployment-spec-applied-hash": "95d789ea4aedce47e1790dc1841b501f", "pod-template-hash": "74f4c669d9", "triggers.tekton.dev/release": "v0.33.0", "version": "v0.33.0" } }, "spec": { "containers": [ { "args": [ "-logtostderr", "-stderrthreshold", "INFO" ], "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability-triggers" }, { "name": "INTERCEPTOR_TLS_SECRET_NAME", "value": "tekton-triggers-core-interceptors-certs" }, { "name": "INTERCEPTOR_TLS_SVC_NAME", "value": "tekton-triggers-core-interceptors" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-triggers-core-interceptors-rhel9@sha256:ee56e85e0d1a4b06cb63b45b9f8290f6f20caab1ab6680253c0be14feddbb948", "imagePullPolicy": "IfNotPresent", "name": "tekton-triggers-core-interceptors", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-core-interceptors", "serviceAccountName": "tekton-triggers-core-interceptors", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:27:26Z", "generation": 1, "labels": { "app": "tekton-triggers-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.33.0", "operator.tekton.dev/deployment-spec-applied-hash": "59f09ee514eb7f2c348f01edd06fc222", "pod-template-hash": "67cdf84989", "triggers.tekton.dev/release": "v0.33.0", "version": "v0.33.0" }, "name": "tekton-triggers-webhook-67cdf84989", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-triggers-webhook", "uid": "51f1f5b3-1634-4153-ae7f-66fc21dc3fd7" } ], "resourceVersion": "24988", "uid": "7a1ac614-f6e4-4e2b-a530-3cb273c672a6" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers", "pod-template-hash": "67cdf84989" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.33.0", "operator.tekton.dev/deployment-spec-applied-hash": "59f09ee514eb7f2c348f01edd06fc222", "pod-template-hash": "67cdf84989", "triggers.tekton.dev/release": "v0.33.0", "version": "v0.33.0" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-triggers-webhook" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SECRET_NAME", "value": "triggers-webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-triggers-webhook" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-triggers-webhook-rhel9@sha256:3cf90015825015fd6e25b9d81ed44bef3e0e0648351f42c788df844e4c7238ea", "imagePullPolicy": "IfNotPresent", "name": "webhook", "ports": [ { "containerPort": 9000, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-webhook", "serviceAccountName": "tekton-triggers-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:28:24Z", "generation": 1, "labels": { "app": "tkn-cli-serve", "pod-template-hash": "5c5c45b675" }, "name": "tkn-cli-serve-5c5c45b675", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tkn-cli-serve", "uid": "8a567f50-6e0f-415a-95f1-5326229e5033" } ], "resourceVersion": "26862", "uid": "13ca38a0-7b1a-4132-a646-3986ca0730ba" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "tkn-cli-serve", "pod-template-hash": "5c5c45b675" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tkn-cli-serve", "pod-template-hash": "5c5c45b675" } }, "spec": { "containers": [ { "image": "registry.redhat.io/openshift-pipelines/pipelines-serve-tkn-cli-rhel9@sha256:050fe6fe1298c45a27982e3f4d0afe637ce01d9b394e85b7eb202309ecdd0731", "imagePullPolicy": "IfNotPresent", "name": "tkn-cli-serve", "ports": [ { "containerPort": 8080, "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true" }, "creationTimestamp": "2026-04-24T14:58:25Z", "generation": 1, "labels": { "app": "service-ca-operator", "pod-template-hash": "7f694b5f95" }, "name": "service-ca-operator-7f694b5f95", "namespace": "openshift-service-ca-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "service-ca-operator", "uid": "812cb0ce-8dd4-4759-a22f-dcff93cb368a" } ], "resourceVersion": "12108", "uid": "d5b609c7-97aa-4dba-9309-f3fcf33a15ad" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "service-ca-operator", "pod-template-hash": "7f694b5f95" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "service-ca-operator", "pod-template-hash": "7f694b5f95" }, "name": "service-ca-operator" }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/operator-config.yaml", "-v=2" ], "command": [ "service-ca-operator", "operator" ], "env": [ { "name": "CONTROLLER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:521712486e2c6e3c020dad6a1cb340db8e55665b69f7c208fab9cd9e965fd588" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.20.8" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:521712486e2c6e3c020dad6a1cb340db8e55665b69f7c208fab9cd9e965fd588", "imagePullPolicy": "IfNotPresent", "name": "service-ca-operator", "resources": { "requests": { "cpu": "10m", "memory": "80Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsGroup": 1001, "runAsNonRoot": true, "runAsUser": 1001, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "service-ca-operator", "serviceAccountName": "service-ca-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "service-ca-operator-config" }, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "929e8e7a4d8e00c1bbeb13e6cfd38adaaae13573b39bc0c1c7c7e12504ec04d2" }, "creationTimestamp": "2026-04-24T15:11:08Z", "generation": 1, "labels": { "app": "service-ca", "pod-template-hash": "5fffcf96d8", "service-ca": "true" }, "name": "service-ca-5fffcf96d8", "namespace": "openshift-service-ca", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "service-ca", "uid": "7caf8923-76de-4839-a814-871d2c8ad4f8" } ], "resourceVersion": "10781", "uid": "003079ea-bb62-4ea3-85b4-43ff9de1f175" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "service-ca", "pod-template-hash": "5fffcf96d8", "service-ca": "true" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "service-ca", "pod-template-hash": "5fffcf96d8", "service-ca": "true" }, "name": "service-ca" }, "spec": { "containers": [ { "args": [ "-v=2" ], "command": [ "service-ca-operator", "controller" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:521712486e2c6e3c020dad6a1cb340db8e55665b69f7c208fab9cd9e965fd588", "imagePullPolicy": "IfNotPresent", "name": "service-ca-controller", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "120Mi" } }, "securityContext": { "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/signing-key", "name": "signing-key" }, { "mountPath": "/var/run/configmaps/signing-cabundle", "name": "signing-cabundle" } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "service-ca", "serviceAccountName": "service-ca", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "signing-key", "secret": { "defaultMode": 420, "secretName": "signing-key" } }, { "configMap": { "defaultMode": 420, "name": "signing-cabundle" }, "name": "signing-cabundle" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "ignore-check.kube-linter.io/liveness-port": "Keeping upstream configs", "ignore-check.kube-linter.io/readiness-port": "Keeping upstream configs" }, "creationTimestamp": "2026-04-24T15:30:41Z", "generation": 1, "labels": { "control-plane": "controller-manager", "pod-template-hash": "544796b49f" }, "name": "release-service-controller-manager-544796b49f", "namespace": "release-service", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "release-service-controller-manager", "uid": "124a565d-1596-4fd0-8606-122a5976c15e" } ], "resourceVersion": "30987", "uid": "39d73f7f-953a-470c-a7ea-1760ba424d81" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "controller-manager", "pod-template-hash": "544796b49f" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager", "pod-template-hash": "544796b49f" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8080", "--leader-elect=false" ], "command": [ "/manager" ], "env": [ { "name": "DEFAULT_RELEASE_PVC", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_RELEASE_PVC", "name": "release-service-manager-properties", "optional": true } } }, { "name": "DEFAULT_RELEASE_WORKSPACE_NAME", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_RELEASE_WORKSPACE_NAME", "name": "release-service-manager-properties", "optional": true } } }, { "name": "DEFAULT_RELEASE_WORKSPACE_SIZE", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_RELEASE_WORKSPACE_SIZE", "name": "release-service-manager-properties", "optional": true } } }, { "name": "SERVICE_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/konflux-ci/release-service:b8160c074b8f5bfde0b2dfd329b5a148e7213cd4", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "128Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "release-service-controller-manager", "serviceAccountName": "release-service-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "name": "cert", "secret": { "defaultMode": 420, "secretName": "webhook-server-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:26:16Z", "generation": 1, "labels": { "name": "rhbk-operator", "pod-template-hash": "fd457fcd5" }, "name": "rhbk-operator-fd457fcd5", "namespace": "rhbk-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "rhbk-operator", "uid": "9cad80ac-d591-4446-9bec-f454b1dee87c" } ], "resourceVersion": "21308", "uid": "eb723cb6-cf7c-4190-aab4-7d8dcb1b3d6e" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "rhbk-operator", "pod-template-hash": "fd457fcd5" } }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"k8s.keycloak.org/v2alpha1\",\n \"kind\": \"Keycloak\",\n \"metadata\": {\n \"name\": \"example-keycloak\",\n \"labels\": {\n \"app\": \"sso\"\n }\n },\n \"spec\": {\n \"instances\": 1,\n \"hostname\": {\n \"hostname\": \"example.org\"\n },\n \"http\": {\n \"tlsSecret\": \"my-tls-secret\"\n }\n }\n },\n {\n \"apiVersion\": \"k8s.keycloak.org/v2alpha1\",\n \"kind\": \"KeycloakRealmImport\",\n \"metadata\": {\n \"name\": \"example-keycloak-realm-import\",\n \"labels\": {\n \"app\": \"sso\"\n }\n },\n \"spec\": {\n \"keycloakCRName\": \"example-keycloak\",\n \"realm\": {}\n }\n }\n]", "capabilities": "Deep Insights", "categories": "Security", "certified": "false", "containerImage": "registry.redhat.io/rhbk/keycloak-rhel9-operator@sha256:27cc3e86042a74b64351e2fab9e9bbaf10c632affafc404ea96e4707dbe2ab93", "createdAt": "2026-03-26T22:02:28Z", "description": "An Operator for installing and managing Keycloak", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "false", "features.operators.openshift.io/proxy-aware": "false", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "olm.operatorGroup": "rhbk-operator", "olm.operatorNamespace": "rhbk-operator", "olm.targetNamespaces": "tsf-keycloak", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"k8s.keycloak.org\",\"kind\":\"Keycloak\",\"version\":\"v2alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"k8s.keycloak.org\",\"kind\":\"KeycloakRealmImport\",\"version\":\"v2alpha1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"rhbk-operator\",\"version\":\"26.4.11-opr.1\"}}]}", "operators.openshift.io/valid-subscription": "[\"OpenShift Container Platform\", \"OpenShift Platform Plus\"]", "repository": "https://github.com/keycloak/keycloak", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "name": "rhbk-operator", "pod-template-hash": "fd457fcd5" } }, "spec": { "containers": [ { "env": [ { "name": "RELATED_IMAGE_KEYCLOAK", "value": "registry.redhat.io/rhbk/keycloak-rhel9@sha256:a8ec9cc9b21641635ffc88656680601fb8fc2bc043e57b3feff4fb0f6cc0dbc2" }, { "name": "QUARKUS_OPERATOR_SDK_CONTROLLERS_KEYCLOAKREALMIMPORTCONTROLLER_NAMESPACES", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.annotations['olm.targetNamespaces']" } } }, { "name": "QUARKUS_OPERATOR_SDK_CONTROLLERS_KEYCLOAKCONTROLLER_NAMESPACES", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.annotations['olm.targetNamespaces']" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "rhbk-operator" }, { "name": "OPERATOR_CONDITION_NAME", "value": "rhbk-operator.v26.4.11-opr.1" } ], "image": "registry.redhat.io/rhbk/keycloak-rhel9-operator@sha256:27cc3e86042a74b64351e2fab9e9bbaf10c632affafc404ea96e4707dbe2ab93", "imagePullPolicy": "Always", "name": "rhbk-operator", "resources": { "limits": { "cpu": "700m", "memory": "450Mi" }, "requests": { "cpu": "300m", "memory": "450Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "rhbk-operator", "serviceAccountName": "rhbk-operator", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:26:43Z", "generation": 1, "labels": { "app.kubernetes.io/component": "client-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "69447b45bd" }, "name": "cli-server-69447b45bd", "namespace": "trusted-artifact-signer", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cli-server", "uid": "6a760ef1-ebea-4a6f-bd37-dff092a2604a" } ], "resourceVersion": "24030", "uid": "2015983c-eba9-40ee-8689-82e6226f4281" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "client-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "69447b45bd" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "client-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "69447b45bd" } }, "spec": { "containers": [ { "image": "registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72", "imagePullPolicy": "Always", "name": "cli-server", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "app.kubernetes.io/part-of": "tsf", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "meta.helm.sh/release-name": "tsf-infrastructure", "meta.helm.sh/release-namespace": "tsf" }, "creationTimestamp": "2026-04-24T15:26:55Z", "generation": 1, "labels": { "app": "keycloak-pgsql-bee", "phase": "reference", "pod-template-hash": "9c8768f87" }, "name": "keycloak-pgsql-bee-9c8768f87", "namespace": "tsf-keycloak", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "keycloak-pgsql-bee", "uid": "3986ed35-de57-4e5b-a0c3-f47a168c94bc" } ], "resourceVersion": "24928", "uid": "2b59cc38-fc1a-4933-9634-ceeac7109b29" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "keycloak-pgsql-bee", "pod-template-hash": "9c8768f87" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "keycloak-pgsql-bee", "phase": "reference", "pod-template-hash": "9c8768f87" } }, "spec": { "containers": [ { "env": [ { "name": "POSTGRESQL_USER", "valueFrom": { "secretKeyRef": { "key": "user", "name": "keycloak-pgsql-user" } } }, { "name": "POSTGRESQL_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "keycloak-pgsql-user" } } }, { "name": "POSTGRESQL_DATABASE", "valueFrom": { "secretKeyRef": { "key": "dbname", "name": "keycloak-pgsql-user" } } } ], "image": "registry.redhat.io/rhel9/postgresql-16:1-1754433677", "imagePullPolicy": "IfNotPresent", "name": "pgsql-bee", "ports": [ { "containerPort": 5432, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "tcpSocket": { "port": 5432 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "1Gi" }, "requests": { "cpu": "250m", "memory": "512Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/lib/pgsql/data", "name": "pgsql-storage" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "pgsql-storage", "persistentVolumeClaim": { "claimName": "keycloak-pgsql-data" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:29:26Z", "generation": 1, "labels": { "app.kubernetes.io/component": "ctlog", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "ctlog", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "795bb588f8" }, "name": "ctlog-795bb588f8", "namespace": "tsf-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "ctlog", "uid": "32c7e421-e8d0-4966-b180-80fb8116da73" } ], "resourceVersion": "28176", "uid": "019ffb9c-b54d-4eee-87d6-b42be0bd059b" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "ctlog", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "ctlog", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "795bb588f8" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "ctlog", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "ctlog", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "795bb588f8" } }, "spec": { "containers": [ { "args": [ "--http_endpoint=0.0.0.0:6962", "--log_config=/ctfe-keys/config", "--alsologtostderr", "--max_cert_chain_size", "153600", "--tls_certificate", "/var/run/secrets/tas/tls.crt", "--tls_key", "/var/run/secrets/tas/tls.key", "--trillian_tls_ca_cert_file", "/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt" ], "env": [ { "name": "SSL_CERT_DIR", "value": "/var/run/configs/tas/ca-trust:/var/run/secrets/kubernetes.io/serviceaccount" } ], "image": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:95b5aefafd17dd44794f6d5d1e75278faa5a74f2472db667409d1c88caaef1f1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6962, "scheme": "HTTPS" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "ctlog", "ports": [ { "containerPort": 6962, "name": "server", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6962, "scheme": "HTTPS" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/ctfe-keys", "name": "keys", "readOnly": true }, { "mountPath": "/var/run/configs/tas/ca-trust", "name": "ca-trust", "readOnly": true }, { "mountPath": "/var/run/secrets/tas", "name": "tls-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "ctlog", "serviceAccountName": "ctlog", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "keys", "secret": { "defaultMode": 420, "secretName": "ctlog-config-trusted-artifact-signerzhb8b" } }, { "name": "ca-trust", "projected": { "defaultMode": 420, "sources": null } }, { "name": "tls-cert", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "tls.crt", "path": "tls.crt" } ], "name": "trusted-artifact-signer-ctlog-tls" } }, { "secret": { "items": [ { "key": "tls.key", "path": "tls.key" } ], "name": "trusted-artifact-signer-ctlog-tls" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:28:26Z", "generation": 1, "labels": { "app.kubernetes.io/component": "fulcio", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "fulcio-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "59744b67f" }, "name": "fulcio-server-59744b67f", "namespace": "tsf-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "fulcio-server", "uid": "208a07f6-889a-42d9-83cb-3eafaccbb287" } ], "resourceVersion": "26816", "uid": "c0e82f0d-8c96-4b56-aa5c-7e7f5bff9ba2" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "fulcio", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "fulcio-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "59744b67f" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "fulcio", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "fulcio-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "59744b67f" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "serve", "--port=5555", "--grpc-port=5554", "--log_type=prod", "--ca=fileca", "--fileca-key", "/var/run/fulcio-secrets/key.pem", "--fileca-cert", "/var/run/fulcio-secrets/cert.pem", "--ct-log-url=https://ctlog.tsf-tas.svc/trusted-artifact-signer", "--fileca-key-passwd", "$(PASSWORD)" ], "env": [ { "name": "PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "fulcio-cert-trusted-artifact-signerm65lb" } } }, { "name": "SSL_CERT_DIR", "value": "/var/run/configs/tas/ca-trust:/var/run/secrets/kubernetes.io/serviceaccount" } ], "image": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:2d478c389bc89afc6b331bc662a84dfc1bbb9da2681ab6dc5ad36f44c346699a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5555, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "fulcio-server", "ports": [ { "containerPort": 5555, "name": "http", "protocol": "TCP" }, { "containerPort": 5554, "name": "grpc", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5555, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/fulcio-secrets", "name": "fulcio-cert", "readOnly": true }, { "mountPath": "/etc/fulcio-config", "name": "fulcio-config" }, { "mountPath": "/var/run/fulcio", "name": "oidc-info" }, { "mountPath": "/var/run/configs/tas/ca-trust", "name": "ca-trust", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "fulcio", "serviceAccountName": "fulcio", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "fulcio-config-hsmtd" }, "name": "fulcio-config" }, { "name": "fulcio-cert", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "private", "path": "key.pem" } ], "name": "fulcio-cert-trusted-artifact-signerm65lb" } }, { "secret": { "items": [ { "key": "cert", "path": "cert.pem" } ], "name": "fulcio-cert-trusted-artifact-signerm65lb" } } ] } }, { "name": "oidc-info", "projected": { "defaultMode": 420, "sources": [ { "configMap": { "items": [ { "key": "ca.crt", "mode": 438, "path": "ca.crt" } ], "name": "kube-root-ca.crt" } } ] } }, { "name": "ca-trust", "projected": { "defaultMode": 420, "sources": null } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:29:18Z", "generation": 1, "labels": { "app.kubernetes.io/component": "rekor-redis", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-redis", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "8889665dd" }, "name": "rekor-redis-8889665dd", "namespace": "tsf-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "rekor-redis", "uid": "f80b550d-d294-480a-9437-d02bcf6cb8e3" } ], "resourceVersion": "27987", "uid": "a49f3c55-783e-47bb-8659-58843fd1209c" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "rekor-redis", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-redis", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "8889665dd" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "rekor-redis", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-redis", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "8889665dd" } }, "spec": { "containers": [ { "env": [ { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "redis-password-trusted-artifact-signer7nbnh" } } }, { "name": "SSL_CERT_DIR", "value": "/var/run/configs/tas/ca-trust:/var/run/secrets/kubernetes.io/serviceaccount" }, { "name": "REDIS_CONF", "value": "/config/redis.conf" } ], "image": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:22b8cfd123fdd66827b81f2431903198e33579906102b2f6295276cf3eb197a6", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "exec": { "command": [ "/bin/sh", "-c", "-i", "test $(redis-cli --tls --cacert /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt -h 127.0.0.1 -a $REDIS_PASSWORD ping) = 'PONG'" ] }, "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "rekor-redis", "ports": [ { "containerPort": 6379, "name": "redis", "protocol": "TCP" } ], "readinessProbe": { "exec": { "command": [ "/bin/sh", "-c", "-i", "test $(redis-cli --tls --cacert /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt -h 127.0.0.1 -a $REDIS_PASSWORD ping) = 'PONG'" ] }, "failureThreshold": 3, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/data", "name": "storage" }, { "mountPath": "/var/run/configs/tas/ca-trust", "name": "ca-trust", "readOnly": true }, { "mountPath": "/var/run/secrets/tas", "name": "tls-cert", "readOnly": true }, { "mountPath": "/config", "name": "config" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "cp $REDIS_CONF /config/redis.conf\necho \"tls-port 6379\" \u003e\u003e /config/redis.conf\necho \"port 0\" \u003e\u003e /config/redis.conf\necho \"tls-cert-file /var/run/secrets/tas/tls.crt\" \u003e\u003e /config/redis.conf\necho \"tls-key-file /var/run/secrets/tas/tls.key\" \u003e\u003e /config/redis.conf\necho \"tls-ca-cert-file /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt\" \u003e\u003e /config/redis.conf\necho \"tls-auth-clients no\" \u003e\u003e /config/redis.conf\n" ], "command": [ "/bin/bash", "-c" ], "image": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:22b8cfd123fdd66827b81f2431903198e33579906102b2f6295276cf3eb197a6", "imagePullPolicy": "IfNotPresent", "name": "enable-tls", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/config", "name": "config" } ] } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "rekor-redis", "serviceAccountName": "rekor-redis", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "storage" }, { "name": "ca-trust", "projected": { "defaultMode": 420, "sources": null } }, { "name": "tls-cert", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "tls.crt", "path": "tls.crt" } ], "name": "trusted-artifact-signer-rekor-redis-tls" } }, { "secret": { "items": [ { "key": "tls.key", "path": "tls.key" } ], "name": "trusted-artifact-signer-rekor-redis-tls" } } ] } }, { "emptyDir": {}, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:29:18Z", "generation": 1, "labels": { "app.kubernetes.io/component": "rekor-ui", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-search-ui", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "7c9f784b85" }, "name": "rekor-search-ui-7c9f784b85", "namespace": "tsf-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "rekor-search-ui", "uid": "40367f65-fe28-4eaa-b786-ba0c1fc3dc1b" } ], "resourceVersion": "28013", "uid": "ffbd8cf3-9c74-4113-8272-365782c48917" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "rekor-ui", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-search-ui", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "7c9f784b85" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "rekor-ui", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-search-ui", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "7c9f784b85" } }, "spec": { "containers": [ { "env": [ { "name": "NEXT_PUBLIC_REKOR_DEFAULT_DOMAIN", "value": "https://rekor-server-tsf-tas.apps.rosa.kx-ca29e7328e.u1a1.p3.openshiftapps.com" } ], "image": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:204dc28f6182267851d39eff08649e921877e2771d2c39acb798aa7896f5bcef", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 3000, "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "rekor-search-ui", "ports": [ { "containerPort": 3000, "name": "3000-tcp", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 3000, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "rekor-ui", "serviceAccountName": "rekor-ui", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:29:18Z", "generation": 1, "labels": { "app.kubernetes.io/component": "rekor-server", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "7d66577d97" }, "name": "rekor-server-7d66577d97", "namespace": "tsf-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "rekor-server", "uid": "1a749b12-599c-487c-99ee-eb5973680f72" } ], "resourceVersion": "28107", "uid": "3e8eaa55-4879-4307-af46-3ea13f0c0c24" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "rekor-server", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "7d66577d97" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "rekor-server", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "7d66577d97" } }, "spec": { "containers": [ { "args": [ "serve", "--trillian_log_server.address", "trillian-logserver.tsf-tas.svc", "--trillian_log_server.port", "8091", "--trillian_log_server.sharding_config", "/sharding/sharding-config.yaml", "--rekor_server.address", "0.0.0.0", "--enable_retrieve_api=true", "--trillian_log_server.tlog_id", "7312432172174275462", "--log_type", "prod", "--rekor_server.signer", "/key/private", "--max_request_body_size", "10485760", "--search_index.storage_provider", "redis", "--redis_server.address", "rekor-redis.tsf-tas.svc", "--redis_server.port", "6379", "--redis_server.password", "$(REDIS_PASSWORD)", "--redis_server.enable-tls=true", "--enable_attestation_storage=true", "--attestation_storage_bucket", "file:///var/run/attestations?no_tmp_dir=true", "--max_attestation_size", "102400", "--trillian_log_server.tls=true" ], "env": [ { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "redis-password-trusted-artifact-signer7nbnh" } } }, { "name": "SSL_CERT_DIR", "value": "/var/run/configs/tas/ca-trust:/var/run/secrets/kubernetes.io/serviceaccount" } ], "image": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:b4a5a2c2518dba5f7812c8b4112e25a0f867a4b187c23adfc727395f871c8ca6", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ping", "port": 3000, "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "rekor-server", "ports": [ { "containerPort": 3000, "name": "rekor-server", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ping", "port": 3000, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/key", "name": "rekor-private-key-volume", "readOnly": true }, { "mountPath": "/sharding", "name": "rekor-sharding-config" }, { "mountPath": "/var/run/attestations", "name": "storage" }, { "mountPath": "/var/run/configs/tas/ca-trust", "name": "ca-trust", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroupChangePolicy": "OnRootMismatch", "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "rekor", "serviceAccountName": "rekor", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "rekor-private-key-volume", "secret": { "defaultMode": 420, "items": [ { "key": "private", "path": "private" } ], "secretName": "rekor-signer-trusted-artifact-signer-pbxvw" } }, { "configMap": { "defaultMode": 420, "name": "rekor-sharding-config-n89pp" }, "name": "rekor-sharding-config" }, { "name": "storage", "persistentVolumeClaim": { "claimName": "rekor-trusted-artifact-signer-pvc" } }, { "name": "ca-trust", "projected": { "defaultMode": 420, "sources": null } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:28:26Z", "generation": 1, "labels": { "app.kubernetes.io/component": "trillian-db", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-db", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "674655f976" }, "name": "trillian-db-674655f976", "namespace": "tsf-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "trillian-db", "uid": "0cf6d2b8-5116-45f8-948d-c986b4ead780" } ], "resourceVersion": "27095", "uid": "b6d70f66-a6aa-4701-b605-bc03305e7ada" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "trillian-db", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-db", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "674655f976" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "trillian-db", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-db", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "674655f976" } }, "spec": { "containers": [ { "args": [ "--ssl-cert", "/var/run/secrets/tas/tls.crt", "--ssl-key", "/var/run/secrets/tas/tls.key" ], "command": [ "run-mysqld" ], "env": [ { "name": "MYSQL_USER", "valueFrom": { "secretKeyRef": { "key": "mysql-user", "name": "trillian-db-connection-h2fgd" } } }, { "name": "MYSQL_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "mysql-password", "name": "trillian-db-connection-h2fgd" } } }, { "name": "MYSQL_ROOT_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "mysql-root-password", "name": "trillian-db-connection-h2fgd" } } }, { "name": "MYSQL_PORT", "valueFrom": { "secretKeyRef": { "key": "mysql-port", "name": "trillian-db-connection-h2fgd" } } }, { "name": "MYSQL_DATABASE", "valueFrom": { "secretKeyRef": { "key": "mysql-database", "name": "trillian-db-connection-h2fgd" } } } ], "image": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:ab5c3e921b58d17bf6b596d2d7acf64a28b34f3f3a66720c1a07e6555ed9e0b8", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "exec": { "command": [ "bash", "-c", "mariadb-admin -u ${MYSQL_USER} -p${MYSQL_PASSWORD} ping --ssl" ] }, "failureThreshold": 3, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "trillian-db", "ports": [ { "containerPort": 3306, "name": "3306-tcp", "protocol": "TCP" } ], "readinessProbe": { "exec": { "command": [ "bash", "-c", "mariadb -u ${MYSQL_USER} -p${MYSQL_PASSWORD} -e \"SELECT 1;\" --ssl" ] }, "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/lib/mysql", "name": "storage" }, { "mountPath": "/var/run/secrets/tas", "name": "tls-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroupChangePolicy": "OnRootMismatch", "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "trillian-db", "serviceAccountName": "trillian-db", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "storage", "persistentVolumeClaim": { "claimName": "trillian-mysql" } }, { "name": "tls-cert", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "tls.crt", "path": "tls.crt" } ], "name": "trusted-artifact-signer-trillian-db-tls" } }, { "secret": { "items": [ { "key": "tls.key", "path": "tls.key" } ], "name": "trusted-artifact-signer-trillian-db-tls" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:28:27Z", "generation": 1, "labels": { "app.kubernetes.io/component": "trillian-logserver", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logserver", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "5556fd68f9" }, "name": "trillian-logserver-5556fd68f9", "namespace": "tsf-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "trillian-logserver", "uid": "d73c977e-b8ce-427c-be28-76883de94573" } ], "resourceVersion": "27365", "uid": "1c7cb8dc-8b35-49da-99df-e41458322316" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "trillian-logserver", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logserver", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "5556fd68f9" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "trillian-logserver", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logserver", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "5556fd68f9" } }, "spec": { "containers": [ { "args": [ "--storage_system=mysql", "--quota_system=mysql", "--mysql_uri=$(MYSQL_USER):$(MYSQL_PASSWORD)@tcp($(MYSQL_HOSTNAME):$(MYSQL_PORT))/$(MYSQL_DATABASE)", "--mysql_max_conns=30", "--mysql_max_idle_conns=10", "--rpc_endpoint=0.0.0.0:8091", "--http_endpoint=0.0.0.0:8090", "--alsologtostderr", "--max_msg_size_bytes", "153600", "--mysql_tls_ca", "/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt", "--mysql_server_name", "$(MYSQL_HOSTNAME).tsf-tas.svc", "--tls_cert_file", "/var/run/secrets/tas/tls.crt", "--tls_key_file", "/var/run/secrets/tas/tls.key" ], "env": [ { "name": "MYSQL_USER", "valueFrom": { "secretKeyRef": { "key": "mysql-user", "name": "trillian-db-connection-h2fgd" } } }, { "name": "MYSQL_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "mysql-password", "name": "trillian-db-connection-h2fgd" } } }, { "name": "MYSQL_HOSTNAME", "valueFrom": { "secretKeyRef": { "key": "mysql-host", "name": "trillian-db-connection-h2fgd" } } }, { "name": "MYSQL_PORT", "valueFrom": { "secretKeyRef": { "key": "mysql-port", "name": "trillian-db-connection-h2fgd" } } }, { "name": "MYSQL_DATABASE", "valueFrom": { "secretKeyRef": { "key": "mysql-database", "name": "trillian-db-connection-h2fgd" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "SSL_CERT_DIR", "value": "/var/run/configs/tas/ca-trust:/var/run/secrets/kubernetes.io/serviceaccount" } ], "image": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:523fa259ebf067ac3076748d4f5c86e01e5b1960034c0876add5d67b0ca21b0b", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8090, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "trillian-logserver", "ports": [ { "containerPort": 8091, "name": "8091-tcp", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8090, "scheme": "HTTPS" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/configs/tas/ca-trust", "name": "ca-trust", "readOnly": true }, { "mountPath": "/var/run/secrets/tas", "name": "tls-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "until nc -z -v -w30 $MYSQL_HOSTNAME $MYSQL_PORT; do echo \"Waiting for MySQL to start\"; sleep 5; done;" ], "env": [ { "name": "MYSQL_HOSTNAME", "valueFrom": { "secretKeyRef": { "key": "mysql-host", "name": "trillian-db-connection-h2fgd" } } }, { "name": "MYSQL_PORT", "valueFrom": { "secretKeyRef": { "key": "mysql-port", "name": "trillian-db-connection-h2fgd" } } } ], "image": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:15692e0deea2ee5ef374514639030317a5b033c1bd1778673329a9745feb41d1", "imagePullPolicy": "IfNotPresent", "name": "wait-for-trillian-db", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "trillian-logserver", "serviceAccountName": "trillian-logserver", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "ca-trust", "projected": { "defaultMode": 420, "sources": null } }, { "name": "tls-cert", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "tls.crt", "path": "tls.crt" } ], "name": "trusted-artifact-signer-trillian-logserver-tls" } }, { "secret": { "items": [ { "key": "tls.key", "path": "tls.key" } ], "name": "trusted-artifact-signer-trillian-logserver-tls" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:28:27Z", "generation": 1, "labels": { "app.kubernetes.io/component": "trillian-logsigner", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logsigner", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "76689f9d" }, "name": "trillian-logsigner-76689f9d", "namespace": "tsf-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "trillian-logsigner", "uid": "e9efea36-5119-4f8b-a407-bf482745a0ad" } ], "resourceVersion": "27359", "uid": "bf50b8f2-d07d-4295-a959-37b93e7140fe" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "trillian-logsigner", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logsigner", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "76689f9d" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "trillian-logsigner", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logsigner", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "76689f9d" } }, "spec": { "containers": [ { "args": [ "--storage_system=mysql", "--quota_system=mysql", "--mysql_uri=$(MYSQL_USER):$(MYSQL_PASSWORD)@tcp($(MYSQL_HOSTNAME):$(MYSQL_PORT))/$(MYSQL_DATABASE)", "--mysql_max_conns=30", "--mysql_max_idle_conns=10", "--rpc_endpoint=0.0.0.0:8091", "--http_endpoint=0.0.0.0:8090", "--alsologtostderr", "--election_system=k8s", "--lock_namespace=$(NAMESPACE)", "--lock_holder_identity=$(POD_NAME)", "--master_hold_interval=5s", "--master_hold_jitter=15s", "--max_msg_size_bytes", "153600", "--mysql_tls_ca", "/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt", "--mysql_server_name", "$(MYSQL_HOSTNAME).tsf-tas.svc", "--tls_cert_file", "/var/run/secrets/tas/tls.crt", "--tls_key_file", "/var/run/secrets/tas/tls.key" ], "env": [ { "name": "MYSQL_USER", "valueFrom": { "secretKeyRef": { "key": "mysql-user", "name": "trillian-db-connection-h2fgd" } } }, { "name": "MYSQL_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "mysql-password", "name": "trillian-db-connection-h2fgd" } } }, { "name": "MYSQL_HOSTNAME", "valueFrom": { "secretKeyRef": { "key": "mysql-host", "name": "trillian-db-connection-h2fgd" } } }, { "name": "MYSQL_PORT", "valueFrom": { "secretKeyRef": { "key": "mysql-port", "name": "trillian-db-connection-h2fgd" } } }, { "name": "MYSQL_DATABASE", "valueFrom": { "secretKeyRef": { "key": "mysql-database", "name": "trillian-db-connection-h2fgd" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "SSL_CERT_DIR", "value": "/var/run/configs/tas/ca-trust:/var/run/secrets/kubernetes.io/serviceaccount" } ], "image": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:f211db01228530de8ed46b05189c492e6c3629df1098da57d31f2765a22ef014", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8090, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "trillian-logsigner", "ports": [ { "containerPort": 8091, "name": "8091-tcp", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8090, "scheme": "HTTPS" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/configs/tas/ca-trust", "name": "ca-trust", "readOnly": true }, { "mountPath": "/var/run/secrets/tas", "name": "tls-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "until nc -z -v -w30 $MYSQL_HOSTNAME $MYSQL_PORT; do echo \"Waiting for MySQL to start\"; sleep 5; done;" ], "env": [ { "name": "MYSQL_HOSTNAME", "valueFrom": { "secretKeyRef": { "key": "mysql-host", "name": "trillian-db-connection-h2fgd" } } }, { "name": "MYSQL_PORT", "valueFrom": { "secretKeyRef": { "key": "mysql-port", "name": "trillian-db-connection-h2fgd" } } } ], "image": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:15692e0deea2ee5ef374514639030317a5b033c1bd1778673329a9745feb41d1", "imagePullPolicy": "IfNotPresent", "name": "wait-for-trillian-db", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "trillian-logsigner", "serviceAccountName": "trillian-logsigner", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "ca-trust", "projected": { "defaultMode": 420, "sources": null } }, { "name": "tls-cert", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "tls.crt", "path": "tls.crt" } ], "name": "trusted-artifact-signer-trillian-logsigner-tls" } }, { "secret": { "items": [ { "key": "tls.key", "path": "tls.key" } ], "name": "trusted-artifact-signer-trillian-logsigner-tls" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:29:56Z", "generation": 1, "labels": { "app.kubernetes.io/component": "tuf", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "tuf", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "cb994f8cc" }, "name": "tuf-cb994f8cc", "namespace": "tsf-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tuf", "uid": "effb0b34-dce2-4e9a-98c5-95f4cbc1446b" } ], "resourceVersion": "28936", "uid": "daaffc82-bc2d-469e-b850-17a47d76e46a" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "tuf", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "tuf", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "cb994f8cc" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "tuf", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "tuf", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "cb994f8cc" } }, "spec": { "containers": [ { "image": "registry.redhat.io/ubi9/httpd-24@sha256:7a48172cdda2a565001998fac2f3aeaa65677f080dd9cb3f9e26ef0963afdef0", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "exec": { "command": [ "curl", "localhost:8080" ] }, "failureThreshold": 3, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "tuf-server", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/root.json", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/www/html", "name": "repository" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroupChangePolicy": "OnRootMismatch", "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tuf", "serviceAccountName": "tuf", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "repository", "persistentVolumeClaim": { "claimName": "tuf" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "meta.helm.sh/release-name": "trustedprofileanalyzer", "meta.helm.sh/release-namespace": "tsf-tpa" }, "creationTimestamp": "2026-04-24T15:29:52Z", "generation": 1, "labels": { "app.kubernetes.io/component": "importer", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "importer", "pod-template-hash": "6f455fcc59" }, "name": "importer-6f455fcc59", "namespace": "tsf-tpa", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "importer", "uid": "a9c39334-8468-48f2-8a01-7b235f4e5fe9" } ], "resourceVersion": "28906", "uid": "1ed792a7-670f-4289-916e-96ddf056b209" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "importer", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "importer", "pod-template-hash": "6f455fcc59" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "importer", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "importer", "pod-template-hash": "6f455fcc59" } }, "spec": { "affinity": { "podAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "server", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "server" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "importer", "--working-dir", "/data/workdir", "--concurrency", "1" ], "command": [ "/usr/local/bin/trustd" ], "env": [ { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "RUST_LOG", "value": "debug" }, { "name": "RUST_BACKTRACE", "value": "1" }, { "name": "INFRASTRUCTURE_ENABLED", "value": "true" }, { "name": "INFRASTRUCTURE_BIND", "value": "[::]:9010" }, { "name": "TRUSTD_DB_HOST", "valueFrom": { "secretKeyRef": { "key": "host", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_PORT", "valueFrom": { "secretKeyRef": { "key": "port", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_NAME", "valueFrom": { "secretKeyRef": { "key": "dbname", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_USER", "valueFrom": { "secretKeyRef": { "key": "user", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_SSLMODE", "value": "disable" }, { "name": "TRUSTD_STORAGE_STRATEGY", "value": "fs" }, { "name": "TRUSTD_STORAGE_FS_PATH", "value": "/data/storage" } ], "image": "registry.redhat.io/rhtpa/rhtpa-trustification-service-rhel9@sha256:c1fd3736f86667698e06b4b2fed5407867dd89dbe53f8e97a9aa23a87ce12909", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health/live", "port": 9010, "scheme": "HTTP" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "service", "ports": [ { "containerPort": 9010, "name": "infra", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health/ready", "port": 9010, "scheme": "HTTP" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1", "memory": "8Gi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/data/workdir", "name": "workdir" }, { "mountPath": "/data/storage", "name": "storage" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "ephemeral": { "volumeClaimTemplate": { "metadata": { "creationTimestamp": null, "labels": { "type": "importer-working-directory" } }, "spec": { "accessModes": [ "ReadWriteOnce" ], "resources": { "requests": { "storage": "32Gi" } }, "volumeMode": "Filesystem" } } }, "name": "workdir" }, { "name": "storage", "persistentVolumeClaim": { "claimName": "storage" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-24T15:26:05Z", "generation": 1, "labels": { "control-plane": "controller-manager", "pod-template-hash": "7fb98566b7" }, "name": "rhtpa-operator-controller-manager-7fb98566b7", "namespace": "tsf-tpa", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "rhtpa-operator-controller-manager", "uid": "3556420b-5cfc-47a6-a474-2a9d230ede67" } ], "resourceVersion": "21304", "uid": "6bd29e17-dc2e-4eac-90ba-7f2ca8797536" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "controller-manager", "pod-template-hash": "7fb98566b7" } }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"rhtpa.io/v1\",\n \"kind\": \"TrustedProfileAnalyzer\",\n \"metadata\": {\n \"name\": \"trustedprofileanalyzer-sample\"\n },\n \"spec\": {\n \"appDomain\": \"change-me\",\n \"collector\": {},\n \"database\": {},\n \"image\": {},\n \"infrastructure\": {\n \"port\": 9010\n },\n \"ingress\": {},\n \"metrics\": {\n \"enabled\": false\n },\n \"modules\": {\n \"createDatabase\": {\n \"enabled\": false,\n \"image\": {}\n },\n \"createImporters\": {\n \"enabled\": false,\n \"image\": {},\n \"importers\": {}\n },\n \"importer\": {\n \"concurrency\": 1,\n \"enabled\": true,\n \"image\": {},\n \"infrastructure\": {},\n \"metrics\": {},\n \"replicas\": 1,\n \"resources\": {\n \"requests\": {\n \"cpu\": 1,\n \"memory\": \"8Gi\"\n }\n },\n \"rust\": {},\n \"tracing\": {},\n \"workingDirectory\": {\n \"size\": \"32Gi\"\n }\n },\n \"migrateDatabase\": {\n \"enabled\": false,\n \"image\": {}\n },\n \"server\": {\n \"enabled\": true,\n \"image\": {},\n \"infrastructure\": {},\n \"ingress\": {},\n \"metrics\": {},\n \"replicas\": 1,\n \"resources\": {\n \"requests\": {\n \"cpu\": 1,\n \"memory\": \"8Gi\"\n }\n },\n \"rust\": {},\n \"tracing\": {}\n }\n },\n \"oidc\": {\n \"clients\": {\n \"cli\": {\n \"clientSecret\": null\n },\n \"frontend\": {}\n }\n },\n \"openshift\": {\n \"useServiceCa\": true\n },\n \"partOf\": \"trustify\",\n \"replicas\": 1,\n \"rust\": {},\n \"storage\": {},\n \"tls\": {},\n \"tracing\": {\n \"enabled\": false\n }\n }\n }\n]", "capabilities": "Basic Install", "createdAt": "2025-11-04T12:03:15Z", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "false", "features.operators.openshift.io/fips-compliant": "false", "features.operators.openshift.io/proxy-aware": "false", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "kubectl.kubernetes.io/default-container": "manager", "olm.operatorGroup": "rhtpa-operator", "olm.operatorNamespace": "tsf-tpa", "olm.targetNamespaces": "tsf-tpa", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtpa.io\",\"kind\":\"TrustedProfileAnalyzer\",\"version\":\"v1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"rhtpa-operator\",\"version\":\"1.1.4\"}}]}", "operators.openshift.io/valid-subscription": "[\"Red Hat Trusted Profile Analyzer\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.42.0", "operators.operatorframework.io/project_layout": "helm.sdk.operatorframework.io/v1", "repository": "https://github.com/trustification/trusted-profile-analyzer-operator", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager", "pod-template-hash": "7fb98566b7" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8443", "--leader-elect", "--health-probe-bind-address=:8081" ], "env": [ { "name": "OPERATOR_CONDITION_NAME", "value": "rhtpa-operator.v1.1.4" } ], "image": "registry.redhat.io/rhtpa/rhtpa-rhel9-operator@sha256:95f5dcecd4c2f488420d608565bcac75909a65f2c9d443c34d93f7914f1cb1ef", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "rhtpa-operator-controller-manager", "serviceAccountName": "rhtpa-operator-controller-manager", "terminationGracePeriodSeconds": 10 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "meta.helm.sh/release-name": "trustedprofileanalyzer", "meta.helm.sh/release-namespace": "tsf-tpa" }, "creationTimestamp": "2026-04-24T15:29:52Z", "generation": 1, "labels": { "app.kubernetes.io/component": "server", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "server", "pod-template-hash": "799b4474b6" }, "name": "server-799b4474b6", "namespace": "tsf-tpa", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "server", "uid": "b44097b5-b430-48da-a740-b8e7ea2a54e7" } ], "resourceVersion": "28923", "uid": "ab53984b-b7aa-4550-9fdc-9bb0b4d825d6" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "server", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "server", "pod-template-hash": "799b4474b6" } }, "template": { "metadata": { "annotations": { "configHash/auth": "01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "server", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "server", "pod-template-hash": "799b4474b6" } }, "spec": { "affinity": { "podAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "server", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "server" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "api", "--auth-configuration", "/etc/config/auth.yaml" ], "command": [ "/usr/local/bin/trustd" ], "env": [ { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "RUST_LOG", "value": "debug" }, { "name": "RUST_BACKTRACE", "value": "1" }, { "name": "INFRASTRUCTURE_ENABLED", "value": "true" }, { "name": "INFRASTRUCTURE_BIND", "value": "[::]:9010" }, { "name": "HTTP_SERVER_BIND_ADDR", "value": "::" }, { "name": "HTTP_SERVER_TLS_ENABLED", "value": "true" }, { "name": "HTTP_SERVER_TLS_KEY_FILE", "value": "/etc/tls/tls.key" }, { "name": "HTTP_SERVER_TLS_CERTIFICATE_FILE", "value": "/etc/tls/tls.crt" }, { "name": "TRUSTD_DB_HOST", "valueFrom": { "secretKeyRef": { "key": "host", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_PORT", "valueFrom": { "secretKeyRef": { "key": "port", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_NAME", "valueFrom": { "secretKeyRef": { "key": "dbname", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_USER", "valueFrom": { "secretKeyRef": { "key": "user", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_SSLMODE", "value": "disable" }, { "name": "TRUSTD_STORAGE_STRATEGY", "value": "fs" }, { "name": "TRUSTD_STORAGE_FS_PATH", "value": "/data/storage" }, { "name": "SWAGGER_UI_OIDC_ISSUER_URL", "value": "https://tsf-sso.apps.rosa.kx-ca29e7328e.u1a1.p3.openshiftapps.com/realms/tsf-iam" }, { "name": "SWAGGER_UI_OIDC_CLIENT_ID", "value": "frontend" }, { "name": "SWAGGER_UI_OIDC_TLS_CA_CERTIFICATES", "value": "/var/run/secrets/kubernetes.io/serviceaccount/ca.crt" }, { "name": "UI_ISSUER_URL", "value": "https://tsf-sso.apps.rosa.kx-ca29e7328e.u1a1.p3.openshiftapps.com/realms/tsf-iam" }, { "name": "UI_CLIENT_ID", "value": "frontend" }, { "name": "UI_LOAD_USER", "value": "true" } ], "image": "registry.redhat.io/rhtpa/rhtpa-trustification-service-rhel9@sha256:c1fd3736f86667698e06b4b2fed5407867dd89dbe53f8e97a9aa23a87ce12909", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health/live", "port": 9010, "scheme": "HTTP" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "service", "ports": [ { "containerPort": 9010, "name": "infra", "protocol": "TCP" }, { "containerPort": 8080, "name": "endpoint", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health/ready", "port": 9010, "scheme": "HTTP" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1", "memory": "8Gi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tls", "name": "tls", "readOnly": true }, { "mountPath": "/etc/config/auth.yaml", "name": "config-auth", "subPath": "auth.yaml" }, { "mountPath": "/data/storage", "name": "storage" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "secretName": "server-tls" } }, { "configMap": { "defaultMode": 420, "name": "tpa-auth-config" }, "name": "config-auth" }, { "name": "storage", "persistentVolumeClaim": { "claimName": "storage" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "app.kubernetes.io/part-of": "tsf", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "meta.helm.sh/release-name": "tsf-infrastructure", "meta.helm.sh/release-namespace": "tsf" }, "creationTimestamp": "2026-04-24T15:26:55Z", "generation": 1, "labels": { "app": "tpa-pgsql-bee", "phase": "reference", "pod-template-hash": "5f9d857cf7" }, "name": "tpa-pgsql-bee-5f9d857cf7", "namespace": "tsf-tpa", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tpa-pgsql-bee", "uid": "971335a8-7bfa-4165-9a3c-19445392beb5" } ], "resourceVersion": "24933", "uid": "dc382353-3366-4606-9160-8ffe9ba93925" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "tpa-pgsql-bee", "pod-template-hash": "5f9d857cf7" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tpa-pgsql-bee", "phase": "reference", "pod-template-hash": "5f9d857cf7" } }, "spec": { "containers": [ { "env": [ { "name": "POSTGRESQL_USER", "valueFrom": { "secretKeyRef": { "key": "user", "name": "tpa-pgsql-user" } } }, { "name": "POSTGRESQL_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "tpa-pgsql-user" } } }, { "name": "POSTGRESQL_DATABASE", "valueFrom": { "secretKeyRef": { "key": "dbname", "name": "tpa-pgsql-user" } } } ], "image": "registry.redhat.io/rhel9/postgresql-16:1-1754433677", "imagePullPolicy": "IfNotPresent", "name": "pgsql-bee", "ports": [ { "containerPort": 5432, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "tcpSocket": { "port": 5432 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "1Gi" }, "requests": { "cpu": "250m", "memory": "512Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/lib/pgsql/data", "name": "pgsql-storage" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "pgsql-storage", "persistentVolumeClaim": { "claimName": "tpa-pgsql-data" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } } ], "kind": "List", "metadata": { "resourceVersion": "" } }