{ "apiVersion": "v1", "items": [ { "apiVersion": "apps/v1", "kind": "StatefulSet", "metadata": { "annotations": { "operator.prometheus.io/controller-id": "openshift-monitoring/prometheus-operator", "prometheus-operator-input-hash": "9145300320668470102" }, "creationTimestamp": "2026-03-31T03:51:41Z", "generation": 2, "labels": { "alertmanager": "main", "app.kubernetes.io/component": "alert-router", "app.kubernetes.io/instance": "main", "app.kubernetes.io/managed-by": "prometheus-operator", "app.kubernetes.io/name": "alertmanager", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.29.0", "managed-by": "prometheus-operator" }, "name": "alertmanager-main", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "monitoring.coreos.com/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Alertmanager", "name": "main", "uid": "2285eb27-cf08-4cc4-b30f-e301d5de3e6b" } ], "resourceVersion": "14291", "uid": "0f451ffe-ae4f-4ecd-bbad-f5405caf77c4" }, "spec": { "persistentVolumeClaimRetentionPolicy": { "whenDeleted": "Retain", "whenScaled": "Retain" }, "podManagementPolicy": "Parallel", "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "alertmanager": "main", "app.kubernetes.io/instance": "main", "app.kubernetes.io/managed-by": "prometheus-operator", "app.kubernetes.io/name": "alertmanager" } }, "serviceName": "alertmanager-operated", "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "alertmanager", "openshift.io/required-scc": "nonroot", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "alertmanager": "main", "app.kubernetes.io/component": "alert-router", "app.kubernetes.io/instance": "main", "app.kubernetes.io/managed-by": "prometheus-operator", "app.kubernetes.io/name": "alertmanager", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.29.0" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "alert-router", "app.kubernetes.io/instance": "main", "app.kubernetes.io/name": "alertmanager", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--config.file=/etc/alertmanager/config_out/alertmanager.env.yaml", "--storage.path=/alertmanager", "--data.retention=120h", "--cluster.listen-address=[$(POD_IP)]:9094", "--web.listen-address=127.0.0.1:9093", "--web.external-url=https://console-openshift-console.apps.rosa.kx-8259435a9f.dc32.p3.openshiftapps.com/monitoring", "--web.route-prefix=/", "--cluster.label=openshift-monitoring/main", "--cluster.peer=alertmanager-main-0.alertmanager-operated:9094", "--cluster.peer=alertmanager-main-1.alertmanager-operated:9094", "--cluster.reconnect-timeout=5m", "--web.config.file=/etc/alertmanager/web_config/web-config.yaml" ], "env": [ { "name": "HTTP_PROXY" }, { "name": "HTTPS_PROXY" }, { "name": "NO_PROXY" }, { "name": "POD_IP", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "status.podIP" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:44ceafe5147680d58a5c2d3720932b972e6bc9639faadc19aa6b360af154e1a3", "imagePullPolicy": "IfNotPresent", "name": "alertmanager", "ports": [ { "containerPort": 9094, "name": "mesh-tcp", "protocol": "TCP" }, { "containerPort": 9094, "name": "mesh-udp", "protocol": "UDP" } ], "resources": { "requests": { "cpu": "4m", "memory": "40Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "startupProbe": { "exec": { "command": [ "sh", "-c", "exec curl --fail http://localhost:9093/-/ready" ] }, "failureThreshold": 40, "initialDelaySeconds": 20, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/alertmanager/config", "name": "config-volume" }, { "mountPath": "/etc/alertmanager/config_out", "name": "config-out", "readOnly": true }, { "mountPath": "/etc/alertmanager/certs", "name": "tls-assets", "readOnly": true }, { "mountPath": "/alertmanager", "name": "alertmanager-main-db" }, { "mountPath": "/etc/alertmanager/secrets/alertmanager-main-tls", "name": "secret-alertmanager-main-tls", "readOnly": true }, { "mountPath": "/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy", "name": "secret-alertmanager-kube-rbac-proxy", "readOnly": true }, { "mountPath": "/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-metric", "name": "secret-alertmanager-kube-rbac-proxy-metric", "readOnly": true }, { "mountPath": "/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-web", "name": "secret-alertmanager-kube-rbac-proxy-web", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem/", "name": "alertmanager-trusted-ca-bundle" }, { "mountPath": "/etc/alertmanager/web_config/web-config.yaml", "name": "web-config", "readOnly": true, "subPath": "web-config.yaml" }, { "mountPath": "/etc/alertmanager/cluster_tls_config/cluster-tls-config.yaml", "name": "cluster-tls-config", "readOnly": true, "subPath": "cluster-tls-config.yaml" } ] }, { "args": [ "--listen-address=localhost:8080", "--web-config-file=/etc/alertmanager/web_config/web-config.yaml", "--reload-url=http://localhost:9093/-/reload", "--config-file=/etc/alertmanager/config/alertmanager.yaml.gz", "--config-envsubst-file=/etc/alertmanager/config_out/alertmanager.env.yaml", "--watched-dir=/etc/alertmanager/config", "--watched-dir=/etc/alertmanager/secrets/alertmanager-main-tls", "--watched-dir=/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy", "--watched-dir=/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-metric", "--watched-dir=/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-web" ], "command": [ "/bin/prometheus-config-reloader" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "SHARD", "value": "-1" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1ad039a130515504a258952cb18e67c3329da5182bb0623cc0891e6c15e2113a", "imagePullPolicy": "IfNotPresent", "name": "config-reloader", "resources": { "requests": { "cpu": "1m", "memory": "10Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/alertmanager/config", "name": "config-volume", "readOnly": true }, { "mountPath": "/etc/alertmanager/config_out", "name": "config-out" }, { "mountPath": "/etc/alertmanager/secrets/alertmanager-main-tls", "name": "secret-alertmanager-main-tls", "readOnly": true }, { "mountPath": "/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy", "name": "secret-alertmanager-kube-rbac-proxy", "readOnly": true }, { "mountPath": "/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-metric", "name": "secret-alertmanager-kube-rbac-proxy-metric", "readOnly": true }, { "mountPath": "/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-web", "name": "secret-alertmanager-kube-rbac-proxy-web", "readOnly": true }, { "mountPath": "/etc/alertmanager/web_config/web-config.yaml", "name": "web-config", "readOnly": true, "subPath": "web-config.yaml" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9095", "--upstream=http://127.0.0.1:9093", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--ignore-paths=/-/healthy,/-/ready", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1e6d59867cbd750672bc9ccfb9c69c3d198174cd43dd6d71a0da358b4b766473", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-web", "ports": [ { "containerPort": 9095, "name": "web", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-alertmanager-kube-rbac-proxy-web", "readOnly": true }, { "mountPath": "/etc/tls/private", "name": "secret-alertmanager-main-tls", "readOnly": true } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9092", "--upstream=http://127.0.0.1:9096", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1e6d59867cbd750672bc9ccfb9c69c3d198174cd43dd6d71a0da358b4b766473", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9092, "name": "tenancy", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-alertmanager-kube-rbac-proxy" }, { "mountPath": "/etc/tls/private", "name": "secret-alertmanager-main-tls" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9097", "--upstream=http://127.0.0.1:9093", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--client-ca-file=/etc/tls/client/client-ca.crt", "--allow-paths=/metrics", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1e6d59867cbd750672bc9ccfb9c69c3d198174cd43dd6d71a0da358b4b766473", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-metric", "ports": [ { "containerPort": 9097, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-alertmanager-kube-rbac-proxy-metric", "readOnly": true }, { "mountPath": "/etc/tls/private", "name": "secret-alertmanager-main-tls", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] }, { "args": [ "--insecure-listen-address=127.0.0.1:9096", "--upstream=http://127.0.0.1:9093", "--label=namespace", "--error-on-replace" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:64dbe77583c8b23dc6852fc482ea5b4081490734944ec8b765d5450b3fdb30ed", "imagePullPolicy": "IfNotPresent", "name": "prom-label-proxy", "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "--watch-interval=0", "--listen-address=:8081", "--config-file=/etc/alertmanager/config/alertmanager.yaml.gz", "--config-envsubst-file=/etc/alertmanager/config_out/alertmanager.env.yaml", "--watched-dir=/etc/alertmanager/config", "--watched-dir=/etc/alertmanager/secrets/alertmanager-main-tls", "--watched-dir=/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy", "--watched-dir=/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-metric", "--watched-dir=/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-web" ], "command": [ "/bin/prometheus-config-reloader" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "SHARD", "value": "-1" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1ad039a130515504a258952cb18e67c3329da5182bb0623cc0891e6c15e2113a", "imagePullPolicy": "IfNotPresent", "name": "init-config-reloader", "ports": [ { "containerPort": 8081, "name": "reloader-init", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "10Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/alertmanager/config", "name": "config-volume", "readOnly": true }, { "mountPath": "/etc/alertmanager/config_out", "name": "config-out" }, { "mountPath": "/etc/alertmanager/secrets/alertmanager-main-tls", "name": "secret-alertmanager-main-tls", "readOnly": true }, { "mountPath": "/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy", "name": "secret-alertmanager-kube-rbac-proxy", "readOnly": true }, { "mountPath": "/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-metric", "name": "secret-alertmanager-kube-rbac-proxy-metric", "readOnly": true }, { "mountPath": "/etc/alertmanager/secrets/alertmanager-kube-rbac-proxy-web", "name": "secret-alertmanager-kube-rbac-proxy-web", "readOnly": true }, { "mountPath": "/etc/alertmanager/web_config/web-config.yaml", "name": "web-config", "readOnly": true, "subPath": "web-config.yaml" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 65534, "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "alertmanager-main", "serviceAccountName": "alertmanager-main", "terminationGracePeriodSeconds": 120, "volumes": [ { "name": "config-volume", "secret": { "defaultMode": 420, "secretName": "alertmanager-main-generated" } }, { "name": "tls-assets", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "alertmanager-main-tls-assets-0" } } ] } }, { "emptyDir": { "medium": "Memory" }, "name": "config-out" }, { "name": "secret-alertmanager-main-tls", "secret": { "defaultMode": 420, "secretName": "alertmanager-main-tls" } }, { "name": "secret-alertmanager-kube-rbac-proxy", "secret": { "defaultMode": 420, "secretName": "alertmanager-kube-rbac-proxy" } }, { "name": "secret-alertmanager-kube-rbac-proxy-metric", "secret": { "defaultMode": 420, "secretName": "alertmanager-kube-rbac-proxy-metric" } }, { "name": "secret-alertmanager-kube-rbac-proxy-web", "secret": { "defaultMode": 420, "secretName": "alertmanager-kube-rbac-proxy-web" } }, { "name": "web-config", "secret": { "defaultMode": 420, "secretName": "alertmanager-main-web-config" } }, { "name": "cluster-tls-config", "secret": { "defaultMode": 420, "secretName": "alertmanager-main-cluster-tls-config" } }, { "emptyDir": {}, "name": "alertmanager-main-db" }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "alertmanager-trusted-ca-bundle" }, "name": "alertmanager-trusted-ca-bundle" } ] } }, "updateStrategy": { "type": "RollingUpdate" } }, "status": { "availableReplicas": 2, "collisionCount": 0, "currentReplicas": 2, "currentRevision": "alertmanager-main-677f54d99c", "observedGeneration": 2, "readyReplicas": 2, "replicas": 2, "updateRevision": "alertmanager-main-677f54d99c", "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "StatefulSet", "metadata": { "annotations": { "operator.prometheus.io/controller-id": "openshift-monitoring/prometheus-operator", "prometheus-operator-input-hash": "2259142832447270172" }, "creationTimestamp": "2026-03-31T03:51:46Z", "generation": 2, "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/managed-by": "prometheus-operator", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "3.7.3", "managed-by": "prometheus-operator", "operator.prometheus.io/mode": "server", "operator.prometheus.io/name": "k8s", "operator.prometheus.io/shard": "0", "prometheus": "k8s" }, "name": "prometheus-k8s", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "monitoring.coreos.com/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Prometheus", "name": "k8s", "uid": "678323eb-0296-4f85-b2ed-3fc88990c07b" } ], "resourceVersion": "14684", "uid": "2f839e0a-3920-4f0d-a5d1-40ec1ec81d2c" }, "spec": { "persistentVolumeClaimRetentionPolicy": { "whenDeleted": "Retain", "whenScaled": "Retain" }, "podManagementPolicy": "Parallel", "replicas": 2, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/managed-by": "prometheus-operator", "app.kubernetes.io/name": "prometheus", "operator.prometheus.io/name": "k8s", "operator.prometheus.io/shard": "0", "prometheus": "k8s" } }, "serviceName": "prometheus-operated", "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "prometheus", "openshift.io/required-scc": "nonroot", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "labels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/managed-by": "prometheus-operator", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "3.7.3", "operator.prometheus.io/name": "k8s", "operator.prometheus.io/shard": "0", "prometheus": "k8s" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "prometheus", "app.kubernetes.io/instance": "k8s", "app.kubernetes.io/name": "prometheus", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--config.file=/etc/prometheus/config_out/prometheus.env.yaml", "--web.enable-lifecycle", "--enable-feature=delayed-compaction,use-uncached-io", "--web.external-url=https://console-openshift-console.apps.rosa.kx-8259435a9f.dc32.p3.openshiftapps.com/monitoring", "--web.route-prefix=/", "--web.listen-address=127.0.0.1:9090", "--storage.tsdb.retention.time=15d", "--storage.tsdb.path=/prometheus", "--web.config.file=/etc/prometheus/web_config/web-config.yaml", "--scrape.timestamp-tolerance=15ms" ], "env": [ { "name": "HTTP_PROXY" }, { "name": "HTTPS_PROXY" }, { "name": "NO_PROXY" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:24929612f2f0f2d4cd3ac163c04bbf4ac64cc47d3d0eef81db085d00c59058bd", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "exec": { "command": [ "sh", "-c", "if [ -x \"$(command -v curl)\" ]; then exec curl --fail http://localhost:9090/-/healthy; elif [ -x \"$(command -v wget)\" ]; then exec wget -q -O /dev/null http://localhost:9090/-/healthy; else exit 1; fi" ] }, "failureThreshold": 6, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "prometheus", "readinessProbe": { "exec": { "command": [ "sh", "-c", "if [ -x \"$(command -v curl)\" ]; then exec curl --fail http://localhost:9090/-/ready; elif [ -x \"$(command -v wget)\" ]; then exec wget -q -O /dev/null http://localhost:9090/-/ready; else exit 1; fi" ] }, "failureThreshold": 3, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 3 }, "resources": { "requests": { "cpu": "70m", "memory": "1Gi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "startupProbe": { "exec": { "command": [ "sh", "-c", "if [ -x \"$(command -v curl)\" ]; then exec curl --fail http://localhost:9090/-/ready; elif [ -x \"$(command -v wget)\" ]; then exec wget -q -O /dev/null http://localhost:9090/-/ready; else exit 1; fi" ] }, "failureThreshold": 60, "periodSeconds": 60, "successThreshold": 1, "timeoutSeconds": 3 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/ca-trust/extracted/pem/", "name": "prometheus-trusted-ca-bundle" }, { "mountPath": "/etc/prometheus/config_out", "name": "config-out", "readOnly": true }, { "mountPath": "/etc/prometheus/certs", "name": "tls-assets", "readOnly": true }, { "mountPath": "/prometheus", "name": "prometheus-k8s-db" }, { "mountPath": "/etc/prometheus/secrets/prometheus-k8s-tls", "name": "secret-prometheus-k8s-tls", "readOnly": true }, { "mountPath": "/etc/prometheus/secrets/prometheus-k8s-thanos-sidecar-tls", "name": "secret-prometheus-k8s-thanos-sidecar-tls", "readOnly": true }, { "mountPath": "/etc/prometheus/secrets/kube-rbac-proxy", "name": "secret-kube-rbac-proxy", "readOnly": true }, { "mountPath": "/etc/prometheus/secrets/prometheus-k8s-kube-rbac-proxy-web", "name": "secret-prometheus-k8s-kube-rbac-proxy-web", "readOnly": true }, { "mountPath": "/etc/prometheus/secrets/metrics-client-certs", "name": "secret-metrics-client-certs", "readOnly": true }, { "mountPath": "/etc/prometheus/configmaps/serving-certs-ca-bundle", "name": "configmap-serving-certs-ca-bundle", "readOnly": true }, { "mountPath": "/etc/prometheus/configmaps/kubelet-serving-ca-bundle", "name": "configmap-kubelet-serving-ca-bundle", "readOnly": true }, { "mountPath": "/etc/prometheus/configmaps/metrics-client-ca", "name": "configmap-metrics-client-ca", "readOnly": true }, { "mountPath": "/etc/prometheus/rules/prometheus-k8s-rulefiles-0", "name": "prometheus-k8s-rulefiles-0", "readOnly": true }, { "mountPath": "/etc/prometheus/rules/prometheus-k8s-rulefiles-1", "name": "prometheus-k8s-rulefiles-1", "readOnly": true }, { "mountPath": "/etc/prometheus/rules/prometheus-k8s-rulefiles-2", "name": "prometheus-k8s-rulefiles-2", "readOnly": true }, { "mountPath": "/etc/prometheus/web_config/web-config.yaml", "name": "web-config", "readOnly": true, "subPath": "web-config.yaml" } ] }, { "args": [ "--listen-address=localhost:8080", "--web-config-file=/etc/prometheus/web_config/web-config.yaml", "--reload-url=http://localhost:9090/-/reload", "--config-file=/etc/prometheus/config/prometheus.yaml.gz", "--config-envsubst-file=/etc/prometheus/config_out/prometheus.env.yaml", "--watched-dir=/etc/prometheus/rules/prometheus-k8s-rulefiles-0", "--watched-dir=/etc/prometheus/rules/prometheus-k8s-rulefiles-1", "--watched-dir=/etc/prometheus/rules/prometheus-k8s-rulefiles-2" ], "command": [ "/bin/prometheus-config-reloader" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "SHARD", "value": "0" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1ad039a130515504a258952cb18e67c3329da5182bb0623cc0891e6c15e2113a", "imagePullPolicy": "IfNotPresent", "name": "config-reloader", "resources": { "requests": { "cpu": "1m", "memory": "10Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/prometheus/config", "name": "config" }, { "mountPath": "/etc/prometheus/config_out", "name": "config-out" }, { "mountPath": "/etc/prometheus/web_config/web-config.yaml", "name": "web-config", "readOnly": true, "subPath": "web-config.yaml" }, { "mountPath": "/etc/prometheus/rules/prometheus-k8s-rulefiles-0", "name": "prometheus-k8s-rulefiles-0" }, { "mountPath": "/etc/prometheus/rules/prometheus-k8s-rulefiles-1", "name": "prometheus-k8s-rulefiles-1" }, { "mountPath": "/etc/prometheus/rules/prometheus-k8s-rulefiles-2", "name": "prometheus-k8s-rulefiles-2" } ] }, { "args": [ "sidecar", "--prometheus.url=http://localhost:9090/", "--tsdb.path=/prometheus", "--http-address=127.0.0.1:10902", "--grpc-server-tls-cert=/etc/tls/grpc/server.crt", "--grpc-server-tls-key=/etc/tls/grpc/server.key", "--grpc-server-tls-client-ca=/etc/tls/grpc/ca.crt" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:92a731e25801365be0ad0916bec5bf24b2035e443ad1414a1631d1e0473ddf77", "imagePullPolicy": "IfNotPresent", "name": "thanos-sidecar", "ports": [ { "containerPort": 10902, "name": "http", "protocol": "TCP" }, { "containerPort": 10901, "name": "grpc", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "25Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/grpc", "name": "secret-grpc-tls" }, { "mountPath": "/etc/thanos/config", "name": "thanos-prometheus-http-client-file" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9091", "--upstream=http://127.0.0.1:9090", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--ignore-paths=/-/healthy,/-/ready", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1e6d59867cbd750672bc9ccfb9c69c3d198174cd43dd6d71a0da358b4b766473", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-web", "ports": [ { "containerPort": 9091, "name": "web", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-prometheus-k8s-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-prometheus-k8s-kube-rbac-proxy-web" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9092", "--upstream=http://127.0.0.1:9090", "--allow-paths=/metrics,/federate", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1e6d59867cbd750672bc9ccfb9c69c3d198174cd43dd6d71a0da358b4b766473", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9092, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-prometheus-k8s-tls" }, { "mountPath": "/etc/tls/client", "name": "configmap-metrics-client-ca", "readOnly": true }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-kube-rbac-proxy" } ] }, { "args": [ "--secure-listen-address=[$(POD_IP)]:10903", "--upstream=http://127.0.0.1:10902", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--allow-paths=/metrics", "--tls-min-version=VersionTLS12" ], "env": [ { "name": "POD_IP", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "status.podIP" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1e6d59867cbd750672bc9ccfb9c69c3d198174cd43dd6d71a0da358b4b766473", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-thanos", "ports": [ { "containerPort": 10903, "name": "thanos-proxy", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "10Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-prometheus-k8s-thanos-sidecar-tls", "readOnly": true }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-kube-rbac-proxy", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "configmap-metrics-client-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "--watch-interval=0", "--listen-address=:8081", "--config-file=/etc/prometheus/config/prometheus.yaml.gz", "--config-envsubst-file=/etc/prometheus/config_out/prometheus.env.yaml", "--watched-dir=/etc/prometheus/rules/prometheus-k8s-rulefiles-0", "--watched-dir=/etc/prometheus/rules/prometheus-k8s-rulefiles-1", "--watched-dir=/etc/prometheus/rules/prometheus-k8s-rulefiles-2" ], "command": [ "/bin/prometheus-config-reloader" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "SHARD", "value": "0" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:1ad039a130515504a258952cb18e67c3329da5182bb0623cc0891e6c15e2113a", "imagePullPolicy": "IfNotPresent", "name": "init-config-reloader", "ports": [ { "containerPort": 8081, "name": "reloader-init", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "10Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/prometheus/config", "name": "config" }, { "mountPath": "/etc/prometheus/config_out", "name": "config-out" }, { "mountPath": "/etc/prometheus/web_config/web-config.yaml", "name": "web-config", "readOnly": true, "subPath": "web-config.yaml" }, { "mountPath": "/etc/prometheus/rules/prometheus-k8s-rulefiles-0", "name": "prometheus-k8s-rulefiles-0" }, { "mountPath": "/etc/prometheus/rules/prometheus-k8s-rulefiles-1", "name": "prometheus-k8s-rulefiles-1" }, { "mountPath": "/etc/prometheus/rules/prometheus-k8s-rulefiles-2", "name": "prometheus-k8s-rulefiles-2" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 65534, "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "prometheus-k8s", "serviceAccountName": "prometheus-k8s", "shareProcessNamespace": false, "terminationGracePeriodSeconds": 600, "volumes": [ { "name": "config", "secret": { "defaultMode": 420, "secretName": "prometheus-k8s" } }, { "name": "tls-assets", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "prometheus-k8s-tls-assets-0" } } ] } }, { "emptyDir": { "medium": "Memory" }, "name": "config-out" }, { "name": "secret-prometheus-k8s-tls", "secret": { "defaultMode": 420, "secretName": "prometheus-k8s-tls" } }, { "name": "secret-prometheus-k8s-thanos-sidecar-tls", "secret": { "defaultMode": 420, "secretName": "prometheus-k8s-thanos-sidecar-tls" } }, { "name": "secret-kube-rbac-proxy", "secret": { "defaultMode": 420, "secretName": "kube-rbac-proxy" } }, { "name": "secret-prometheus-k8s-kube-rbac-proxy-web", "secret": { "defaultMode": 420, "secretName": "prometheus-k8s-kube-rbac-proxy-web" } }, { "name": "secret-metrics-client-certs", "secret": { "defaultMode": 420, "secretName": "metrics-client-certs" } }, { "configMap": { "defaultMode": 420, "name": "serving-certs-ca-bundle" }, "name": "configmap-serving-certs-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "kubelet-serving-ca-bundle" }, "name": "configmap-kubelet-serving-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "configmap-metrics-client-ca" }, { "configMap": { "defaultMode": 420, "name": "prometheus-k8s-rulefiles-0", "optional": true }, "name": "prometheus-k8s-rulefiles-0" }, { "configMap": { "defaultMode": 420, "name": "prometheus-k8s-rulefiles-1", "optional": true }, "name": "prometheus-k8s-rulefiles-1" }, { "configMap": { "defaultMode": 420, "name": "prometheus-k8s-rulefiles-2", "optional": true }, "name": "prometheus-k8s-rulefiles-2" }, { "name": "web-config", "secret": { "defaultMode": 420, "secretName": "prometheus-k8s-web-config" } }, { "name": "thanos-prometheus-http-client-file", "secret": { "defaultMode": 420, "secretName": "prometheus-k8s-thanos-prometheus-http-client-file" } }, { "emptyDir": {}, "name": "prometheus-k8s-db" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "prometheus-trusted-ca-bundle" }, "name": "prometheus-trusted-ca-bundle" }, { "name": "secret-grpc-tls", "secret": { "defaultMode": 420, "secretName": "prometheus-k8s-grpc-tls-9invlcfu2m87u" } } ] } }, "updateStrategy": { "type": "RollingUpdate" } }, "status": { "availableReplicas": 2, "collisionCount": 0, "currentReplicas": 2, "currentRevision": "prometheus-k8s-7fd6c8669", "observedGeneration": 2, "readyReplicas": 2, "replicas": 2, "updateRevision": "prometheus-k8s-7fd6c8669", "updatedReplicas": 2 } }, { "apiVersion": "apps/v1", "kind": "StatefulSet", "metadata": { "creationTimestamp": "2026-03-31T04:03:31Z", "generation": 1, "labels": { "app.kubernetes.io/name": "tekton-results-postgres", "app.kubernetes.io/part-of": "tekton-results", "operator.tekton.dev/operand-name": "tektoncd-results" }, "name": "tekton-results-postgres", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "operator.tekton.dev/v1alpha1", "blockOwnerDeletion": true, "controller": true, "kind": "TektonInstallerSet", "name": "result-pre-zjnvk", "uid": "d852e459-caef-4ebb-a7ea-b9d1d79cf475" } ], "resourceVersion": "23530", "uid": "92a18c58-c7f0-4fda-a3cc-9059a1d2b548" }, "spec": { "persistentVolumeClaimRetentionPolicy": { "whenDeleted": "Retain", "whenScaled": "Retain" }, "podManagementPolicy": "OrderedReady", "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-postgres" } }, "serviceName": "postgres", "template": { "metadata": { "labels": { "app.kubernetes.io/name": "tekton-results-postgres" } }, "spec": { "containers": [ { "env": [ { "name": "PGDATA", "value": "/var/lib/pgsql/data" }, { "name": "POSTGRESQL_DATABASE", "valueFrom": { "configMapKeyRef": { "key": "POSTGRES_DB", "name": "tekton-results-postgres" } } }, { "name": "POSTGRESQL_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_PASSWORD", "name": "tekton-results-postgres" } } }, { "name": "POSTGRESQL_USER", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_USER", "name": "tekton-results-postgres" } } } ], "image": "registry.redhat.io/rhel9/postgresql-13@sha256:36647bd6d50d2e0e9c99ecf190bd515577c7ce9476e49d927c4d4065011e3441", "imagePullPolicy": "IfNotPresent", "name": "postgres", "ports": [ { "containerPort": 5432, "name": "postgredb", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/lib/pgsql/data", "name": "postgredb" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30 } }, "updateStrategy": { "rollingUpdate": { "partition": 0 }, "type": "RollingUpdate" }, "volumeClaimTemplates": [ { "apiVersion": "v1", "kind": "PersistentVolumeClaim", "metadata": { "name": "postgredb" }, "spec": { "accessModes": [ "ReadWriteOnce" ], "resources": { "requests": { "storage": "1Gi" } }, "volumeMode": "Filesystem" }, "status": { "phase": "Pending" } } ] }, "status": { "availableReplicas": 1, "collisionCount": 0, "currentReplicas": 1, "currentRevision": "tekton-results-postgres-788465b565", "observedGeneration": 1, "readyReplicas": 1, "replicas": 1, "updateRevision": "tekton-results-postgres-788465b565", "updatedReplicas": 1 } }, { "apiVersion": "apps/v1", "kind": "StatefulSet", "metadata": { "annotations": { "javaoperatorsdk.io/previous": "ca27a81e-6a23-4c7b-824c-1fb4508ad430,22866", "operator.keycloak.org/migrating": "false", "operator.keycloak.org/missing-secrets": "false", "operator.keycloak.org/watching-secrets": "keycloak-pgsql-user;keycloak-tls" }, "creationTimestamp": "2026-03-31T04:03:15Z", "generation": 3, "labels": { "app": "keycloak", "app.kubernetes.io/instance": "keycloak", "app.kubernetes.io/managed-by": "keycloak-operator" }, "name": "keycloak", "namespace": "tsf-keycloak", "ownerReferences": [ { "apiVersion": "k8s.keycloak.org/v2alpha1", "kind": "Keycloak", "name": "keycloak", "uid": "d3e76834-e45f-4286-b909-83d51bc5fe31" } ], "resourceVersion": "24772", "uid": "31fcc313-082c-4ba4-9fc3-5005c6bcc1ac" }, "spec": { "persistentVolumeClaimRetentionPolicy": { "whenDeleted": "Retain", "whenScaled": "Retain" }, "podManagementPolicy": "OrderedReady", "replicas": 1, "revisionHistoryLimit": 10, "selector": { "matchLabels": { "app": "keycloak", "app.kubernetes.io/instance": "keycloak", "app.kubernetes.io/managed-by": "keycloak-operator" } }, "serviceName": "", "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/restartedAt": "2026-03-31T04:04:13.357", "operator.keycloak.org/watched-secret-hash": "39305c2e2ea5b00b7508c8c3486194b9d2bb07bf5b31ce747fa85d832c64c0ca" }, "labels": { "app": "keycloak", "app.kubernetes.io/instance": "keycloak", "app.kubernetes.io/managed-by": "keycloak-operator" } }, "spec": { "containers": [ { "args": [ "-Djgroups.dns.query=keycloak-discovery.tsf-keycloak", "--verbose", "start" ], "env": [ { "name": "KC_HOSTNAME", "value": "sso.apps.rosa.kx-8259435a9f.dc32.p3.openshiftapps.com" }, { "name": "KC_HOSTNAME_STRICT", "value": "false" }, { "name": "KC_HOSTNAME_STRICT_BACKCHANNEL", "value": "false" }, { "name": "KC_TRANSACTION_XA_ENABLED", "value": "true" }, { "name": "KC_HTTP_ENABLED", "value": "false" }, { "name": "KC_HTTP_PORT", "value": "8080" }, { "name": "KC_HTTPS_PORT", "value": "8443" }, { "name": "KC_HTTPS_CERTIFICATE_FILE", "value": "/mnt/certificates/tls.crt" }, { "name": "KC_HTTPS_CERTIFICATE_KEY_FILE", "value": "/mnt/certificates/tls.key" }, { "name": "KC_DB", "value": "postgres" }, { "name": "KC_DB_USERNAME", "valueFrom": { "secretKeyRef": { "key": "user", "name": "keycloak-pgsql-user" } } }, { "name": "KC_DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "keycloak-pgsql-user" } } }, { "name": "KC_DB_URL_DATABASE", "value": "keycloak" }, { "name": "KC_DB_URL_HOST", "value": "keycloak-pgsql" }, { "name": "KC_HEALTH_ENABLED", "value": "true" }, { "name": "KC_CACHE", "value": "ispn" }, { "name": "KC_CACHE_STACK", "value": "kubernetes" }, { "name": "KC_PROXY", "value": "passthrough" }, { "name": "KC_ENABLE_RECOVERY", "value": "true" }, { "name": "KEYCLOAK_ADMIN", "valueFrom": { "secretKeyRef": { "key": "username", "name": "keycloak-initial-admin", "optional": false } } }, { "name": "KEYCLOAK_ADMIN_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "keycloak-initial-admin", "optional": false } } }, { "name": "KC_TRUSTSTORE_PATHS", "value": "/var/run/secrets/kubernetes.io/serviceaccount/ca.crt,/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt" } ], "image": "registry.redhat.io/rhbk/keycloak-rhel9@sha256:d339ecf788d1681ba9945a2ea63ca675caec863ec75f497ef916103f4c898003", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health/live", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "keycloak", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" }, { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health/ready", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "memory": "2Gi" }, "requests": { "memory": "1700Mi" } }, "startupProbe": { "failureThreshold": 600, "httpGet": { "path": "/health/started", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 1, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/mnt/certificates", "name": "keycloak-tls-certificates" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "keycloak-tls-certificates", "secret": { "defaultMode": 420, "optional": false, "secretName": "keycloak-tls" } } ] } }, "updateStrategy": { "rollingUpdate": { "partition": 0 }, "type": "RollingUpdate" } }, "status": { "availableReplicas": 1, "collisionCount": 0, "currentReplicas": 1, "currentRevision": "keycloak-557d77d5d5", "observedGeneration": 3, "readyReplicas": 1, "replicas": 1, "updateRevision": "keycloak-557d77d5d5", "updatedReplicas": 1 } } ], "kind": "List", "metadata": { "resourceVersion": "" } }