*** [INFO] Showing oc get 'pods' NAME READY STATUS RESTARTS AGE alertmanager-default-0 3/3 Running 0 2m11s curl 0/1 Completed 0 71s default-cloud1-ceil-event-smartgateway-7df94c85f8-nsngb 2/2 Running 2 (87s ago) 101s default-cloud1-ceil-meter-smartgateway-c9f4bb7dc-hxghl 3/3 Running 2 (87s ago) 114s default-cloud1-coll-event-smartgateway-54b65ff97b-6w2g6 2/2 Running 2 (88s ago) 102s default-cloud1-coll-meter-smartgateway-7f8f5c6486-s99rc 3/3 Running 2 (87s ago) 117s default-cloud1-sens-meter-smartgateway-58c78bbf69-vsggn 3/3 Running 2 (87s ago) 110s default-interconnect-55bf8d5cb-pjjd4 1/1 Running 0 90s default-snmp-webhook-694dc457d5-k2zxl 1/1 Running 0 2m14s elastic-operator-76bd895855-2bcz5 1/1 Running 0 14m elasticsearch-es-default-0 1/1 Running 0 14m interconnect-operator-78b9bd8798-nrmts 1/1 Running 0 14m prometheus-default-0 3/3 Running 0 2m25s prometheus-webhook-snmp-2-build 0/1 Completed 0 4m28s qdr-test 1/1 Running 0 84s service-telemetry-operator-2-build 0/1 Completed 0 13m service-telemetry-operator-868b4b94cb-n5l7n 1/1 Running 0 3m16s sg-bridge-2-build 0/1 Completed 0 5m51s sg-core-2-build 0/1 Completed 0 9m37s smart-gateway-operator-2-build 0/1 Completed 0 11m smart-gateway-operator-85986885f-57gvn 1/1 Running 0 3m20s stf-smoketest-smoke1-248gh 0/2 Completed 0 71s [INFO] oc get 'pods' -oyaml apiVersion: v1 items: - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.217.0.95/23"],"mac_address":"0a:58:0a:d9:00:5f","gateway_ips":["10.217.0.1"],"routes":[{"dest":"10.217.0.0/22","nextHop":"10.217.0.1"},{"dest":"10.217.4.0/23","nextHop":"10.217.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.217.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.217.0.1"}],"ip_address":"10.217.0.95/23","gateway_ip":"10.217.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.217.0.95" ], "mac": "0a:58:0a:d9:00:5f", "default": true, "dns": {} }] kubectl.kubernetes.io/default-container: alertmanager openshift.io/scc: restricted-v2 seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user creationTimestamp: "2026-06-12T00:37:30Z" generateName: alertmanager-default- generation: 1 labels: alertmanager: default app.kubernetes.io/instance: default app.kubernetes.io/managed-by: prometheus-operator app.kubernetes.io/name: alertmanager app.kubernetes.io/version: 0.31.0 apps.kubernetes.io/pod-index: "0" controller-revision-hash: alertmanager-default-6b74c68998 statefulset.kubernetes.io/pod-name: alertmanager-default-0 name: alertmanager-default-0 namespace: service-telemetry ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: StatefulSet name: alertmanager-default uid: ff5bcb99-990f-451a-a53c-9ad6f09ca83b resourceVersion: "48040" uid: 479a7a61-f186-4037-94c4-9ef405827c26 spec: containers: - args: - --config.file=/etc/alertmanager/config_out/alertmanager.env.yaml - --storage.path=/alertmanager - --data.retention=120h - --cluster.listen-address= - --web.listen-address=127.0.0.1:9093 - --web.route-prefix=/ - --cluster.label=service-telemetry/default - --cluster.peer=alertmanager-default-0.alertmanager-operated:9094 - --cluster.reconnect-timeout=5m - --web.config.file=/etc/alertmanager/web_config/web-config.yaml env: - name: POD_IP valueFrom: fieldRef: apiVersion: v1 fieldPath: status.podIP image: quay.io/prometheus/alertmanager:latest imagePullPolicy: Always name: alertmanager ports: - containerPort: 9094 name: mesh-tcp protocol: TCP - containerPort: 9094 name: mesh-udp protocol: UDP resources: requests: memory: 200Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /etc/alertmanager/config name: config-volume - mountPath: /etc/alertmanager/config_out name: config-out readOnly: true - mountPath: /etc/alertmanager/certs name: tls-assets readOnly: true - mountPath: /alertmanager name: alertmanager-default-db subPath: alertmanager-db - mountPath: /etc/alertmanager/secrets/default-alertmanager-proxy-tls name: secret-default-alertmanager-proxy-tls readOnly: true - mountPath: /etc/alertmanager/secrets/default-session-secret name: secret-default-session-secret readOnly: true - mountPath: /etc/alertmanager/web_config/web-config.yaml name: web-config readOnly: true subPath: web-config.yaml - mountPath: /etc/alertmanager/cluster_tls_config/cluster-tls-config.yaml name: cluster-tls-config readOnly: true subPath: cluster-tls-config.yaml - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-wz8tl readOnly: true - args: - --listen-address=localhost:8080 - --web-config-file=/etc/alertmanager/web_config/web-config.yaml - --reload-url=http://localhost:9093/-/reload - --config-file=/etc/alertmanager/config/alertmanager.yaml.gz - --config-envsubst-file=/etc/alertmanager/config_out/alertmanager.env.yaml - --watched-dir=/etc/alertmanager/config - --watched-dir=/etc/alertmanager/secrets/default-alertmanager-proxy-tls - --watched-dir=/etc/alertmanager/secrets/default-session-secret command: - /bin/prometheus-config-reloader env: - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: SHARD value: "-1" image: registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:e4412f5688c9725f36d2f566f624d82a1a2a5b957686245fd2defcc39604bdc2 imagePullPolicy: IfNotPresent name: config-reloader resources: limits: cpu: 10m memory: 50Mi requests: cpu: 10m memory: 50Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /etc/alertmanager/config name: config-volume readOnly: true - mountPath: /etc/alertmanager/config_out name: config-out - mountPath: /etc/alertmanager/secrets/default-alertmanager-proxy-tls name: secret-default-alertmanager-proxy-tls readOnly: true - mountPath: /etc/alertmanager/secrets/default-session-secret name: secret-default-session-secret readOnly: true - mountPath: /etc/alertmanager/web_config/web-config.yaml name: web-config readOnly: true subPath: web-config.yaml - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-wz8tl readOnly: true - args: - -https-address=:9095 - -tls-cert=/etc/tls/private/tls.crt - -tls-key=/etc/tls/private/tls.key - -upstream=http://localhost:9093/ - -cookie-secret-file=/etc/proxy/secrets/session_secret - -openshift-service-account=alertmanager-stf - '-openshift-sar={"namespace":"service-telemetry", "resource": "alertmanagers", "resourceAPIGroup":"monitoring.rhobs", "verb":"get"}' - '-openshift-delegate-urls={"/": {"namespace":"service-telemetry", "resource": "alertmanagers", "group":"monitoring.rhobs", "verb":"get"}}' image: quay.io/openshift/origin-oauth-proxy:latest imagePullPolicy: Always name: oauth-proxy ports: - containerPort: 9095 name: https protocol: TCP resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/tls/private name: secret-default-alertmanager-proxy-tls - mountPath: /etc/proxy/secrets name: secret-default-session-secret - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-wz8tl readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true hostname: alertmanager-default-0 imagePullSecrets: - name: alertmanager-stf-dockercfg-ww7z9 initContainers: - args: - --watch-interval=0 - --listen-address=:8081 - --config-file=/etc/alertmanager/config/alertmanager.yaml.gz - --config-envsubst-file=/etc/alertmanager/config_out/alertmanager.env.yaml - --watched-dir=/etc/alertmanager/config - --watched-dir=/etc/alertmanager/secrets/default-alertmanager-proxy-tls - --watched-dir=/etc/alertmanager/secrets/default-session-secret command: - /bin/prometheus-config-reloader env: - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: SHARD value: "-1" image: registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:e4412f5688c9725f36d2f566f624d82a1a2a5b957686245fd2defcc39604bdc2 imagePullPolicy: IfNotPresent name: init-config-reloader ports: - containerPort: 8081 name: reloader-init protocol: TCP resources: limits: cpu: 10m memory: 50Mi requests: cpu: 10m memory: 50Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /etc/alertmanager/config name: config-volume readOnly: true - mountPath: /etc/alertmanager/config_out name: config-out - mountPath: /etc/alertmanager/secrets/default-alertmanager-proxy-tls name: secret-default-alertmanager-proxy-tls readOnly: true - mountPath: /etc/alertmanager/secrets/default-session-secret name: secret-default-session-secret readOnly: true - mountPath: /etc/alertmanager/web_config/web-config.yaml name: web-config readOnly: true subPath: web-config.yaml - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-wz8tl readOnly: true nodeName: crc preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 1000670000 seLinuxOptions: level: s0:c26,c10 seccompProfile: type: RuntimeDefault serviceAccount: alertmanager-stf serviceAccountName: alertmanager-stf subdomain: alertmanager-operated terminationGracePeriodSeconds: 120 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 - effect: NoSchedule key: node.kubernetes.io/memory-pressure operator: Exists volumes: - name: alertmanager-default-db persistentVolumeClaim: claimName: alertmanager-default-db-alertmanager-default-0 - name: config-volume secret: defaultMode: 420 secretName: alertmanager-default-generated - name: tls-assets projected: defaultMode: 420 sources: - secret: name: alertmanager-default-tls-assets-0 - emptyDir: medium: Memory name: config-out - name: secret-default-alertmanager-proxy-tls secret: defaultMode: 420 secretName: default-alertmanager-proxy-tls - name: secret-default-session-secret secret: defaultMode: 420 secretName: default-session-secret - name: web-config secret: defaultMode: 420 secretName: alertmanager-default-web-config - name: cluster-tls-config secret: defaultMode: 420 secretName: alertmanager-default-cluster-tls-config - name: kube-api-access-wz8tl projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-12T00:37:39Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-12T00:37:45Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-12T00:37:59Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-12T00:37:59Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-12T00:37:31Z" status: "True" type: PodScheduled containerStatuses: - allocatedResources: memory: 200Mi containerID: cri-o://31ee5bbfb466871f63b0e181140e2a6ab2cd39e14354fcb390c57eac67db4bbf image: quay.io/prometheus/alertmanager:latest imageID: quay.io/prometheus/alertmanager@sha256:83041ca6b6ba26420554965b4e580fe4dce2a29d212aa38f66e00d870eda7aaa lastState: {} name: alertmanager ready: true resources: requests: memory: 200Mi restartCount: 0 started: true state: running: startedAt: "2026-06-12T00:37:48Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /etc/alertmanager/config name: config-volume - mountPath: /etc/alertmanager/config_out name: config-out readOnly: true recursiveReadOnly: Disabled - mountPath: /etc/alertmanager/certs name: tls-assets readOnly: true recursiveReadOnly: Disabled - mountPath: /alertmanager name: alertmanager-default-db - mountPath: /etc/alertmanager/secrets/default-alertmanager-proxy-tls name: secret-default-alertmanager-proxy-tls readOnly: true recursiveReadOnly: Disabled - mountPath: /etc/alertmanager/secrets/default-session-secret name: secret-default-session-secret readOnly: true recursiveReadOnly: Disabled - mountPath: /etc/alertmanager/web_config/web-config.yaml name: web-config readOnly: true recursiveReadOnly: Disabled - mountPath: /etc/alertmanager/cluster_tls_config/cluster-tls-config.yaml name: cluster-tls-config readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-wz8tl readOnly: true recursiveReadOnly: Disabled - allocatedResources: cpu: 10m memory: 50Mi containerID: cri-o://dd0d37f6bfea87f5c1740cef1071440eebe3f9de5b2e700ed6cd45f9991a9ca7 image: registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:e4412f5688c9725f36d2f566f624d82a1a2a5b957686245fd2defcc39604bdc2 imageID: registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:6280a7d546a3731254a06648cc574a09d2b3453c7bd21a81f5d27c7b4cb4cfad lastState: {} name: config-reloader ready: true resources: limits: cpu: 10m memory: 50Mi requests: cpu: 10m memory: 50Mi restartCount: 0 started: true state: running: startedAt: "2026-06-12T00:37:54Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /etc/alertmanager/config name: config-volume readOnly: true recursiveReadOnly: Disabled - mountPath: /etc/alertmanager/config_out name: config-out - mountPath: /etc/alertmanager/secrets/default-alertmanager-proxy-tls name: secret-default-alertmanager-proxy-tls readOnly: true recursiveReadOnly: Disabled - mountPath: /etc/alertmanager/secrets/default-session-secret name: secret-default-session-secret readOnly: true recursiveReadOnly: Disabled - mountPath: /etc/alertmanager/web_config/web-config.yaml name: web-config readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-wz8tl readOnly: true recursiveReadOnly: Disabled - containerID: cri-o://6d3937fee505581682344c66770dd84b678ccfd4c0a508db868346649d8446b5 image: quay.io/openshift/origin-oauth-proxy:latest imageID: quay.io/openshift/origin-oauth-proxy@sha256:40b5c637156b7f8558f33a657bddb683b7a06176e4e48ed97fb6bb8ab8551a3a lastState: {} name: oauth-proxy ready: true resources: {} restartCount: 0 started: true state: running: startedAt: "2026-06-12T00:37:59Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /etc/tls/private name: secret-default-alertmanager-proxy-tls - mountPath: /etc/proxy/secrets name: secret-default-session-secret - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-wz8tl readOnly: true recursiveReadOnly: Disabled hostIP: 192.168.126.11 hostIPs: - ip: 192.168.126.11 initContainerStatuses: - allocatedResources: cpu: 10m memory: 50Mi containerID: cri-o://632661ff1d05c012b6372791f994f0b0d3654b95f75a57ab660c08714d72b54e image: registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:e4412f5688c9725f36d2f566f624d82a1a2a5b957686245fd2defcc39604bdc2 imageID: registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:6280a7d546a3731254a06648cc574a09d2b3453c7bd21a81f5d27c7b4cb4cfad lastState: {} name: init-config-reloader ready: true resources: limits: cpu: 10m memory: 50Mi requests: cpu: 10m memory: 50Mi restartCount: 0 started: false state: terminated: containerID: cri-o://632661ff1d05c012b6372791f994f0b0d3654b95f75a57ab660c08714d72b54e exitCode: 0 finishedAt: "2026-06-12T00:37:44Z" reason: Completed startedAt: "2026-06-12T00:37:38Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /etc/alertmanager/config name: config-volume readOnly: true recursiveReadOnly: Disabled - mountPath: /etc/alertmanager/config_out name: config-out - mountPath: /etc/alertmanager/secrets/default-alertmanager-proxy-tls name: secret-default-alertmanager-proxy-tls readOnly: true recursiveReadOnly: Disabled - mountPath: /etc/alertmanager/secrets/default-session-secret name: secret-default-session-secret readOnly: true recursiveReadOnly: Disabled - mountPath: /etc/alertmanager/web_config/web-config.yaml name: web-config readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-wz8tl readOnly: true recursiveReadOnly: Disabled phase: Running podIP: 10.217.0.95 podIPs: - ip: 10.217.0.95 qosClass: Burstable startTime: "2026-06-12T00:37:31Z" - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.217.0.105/23"],"mac_address":"0a:58:0a:d9:00:69","gateway_ips":["10.217.0.1"],"routes":[{"dest":"10.217.0.0/22","nextHop":"10.217.0.1"},{"dest":"10.217.4.0/23","nextHop":"10.217.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.217.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.217.0.1"}],"ip_address":"10.217.0.105/23","gateway_ip":"10.217.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.217.0.105" ], "mac": "0a:58:0a:d9:00:69", "default": true, "dns": {} }] openshift.io/scc: anyuid security.openshift.io/validated-scc-subject-type: user creationTimestamp: "2026-06-12T00:38:30Z" generation: 1 labels: run: curl name: curl namespace: service-telemetry resourceVersion: "48491" uid: 43489371-e6ff-49b7-80e1-3b5c3326697f spec: containers: - args: - sh - -c - 'curl -v -k -H "Content-Type: application/json" -H "Authorization: Bearer eyJhbGciOiJSUzI1NiIsImtpZCI6ImFWMzc3cFlVaXZjX05walVUUlY4bWtJNUZSTTlyVFplaEIwRnBldjhZamsifQ.eyJhdWQiOlsiaHR0cHM6Ly9rdWJlcm5ldGVzLmRlZmF1bHQuc3ZjIl0sImV4cCI6MTc4MTIyODMxMCwiaWF0IjoxNzgxMjI0NzEwLCJpc3MiOiJodHRwczovL2t1YmVybmV0ZXMuZGVmYXVsdC5zdmMiLCJqdGkiOiI3M2YyMzQxOS01YzVjLTQ3YTEtYjQyYS04ZDc2MThjZTAwZDMiLCJrdWJlcm5ldGVzLmlvIjp7Im5hbWVzcGFjZSI6InNlcnZpY2UtdGVsZW1ldHJ5Iiwic2VydmljZWFjY291bnQiOnsibmFtZSI6InByb21ldGhldXMtc3RmIiwidWlkIjoiN2FjZGViN2YtYThlYS00NzQxLTg4N2ItZjgyMTRkOWY3ODM0In19LCJuYmYiOjE3ODEyMjQ3MTAsInN1YiI6InN5c3RlbTpzZXJ2aWNlYWNjb3VudDpzZXJ2aWNlLXRlbGVtZXRyeTpwcm9tZXRoZXVzLXN0ZiJ9.qO3purWoWGFVKjYKhvsOvcUwm7VnqCOu_fHsJhEGwrOqxy6MkfJcriwgJ3GMousO4jonlhMnzYBudvc1aMTFBtrKLYnYeviSNXsNGaVz1fLPwlQKxxNW3b1-I07AgzBREBSRBgtE_bWyEN0c-JMaTYPXauAtmSAh1z8_lRLuSGWQluXb5SsiTRi4F2O0XTmsgkDK4h9SWIZ8VahyfAqzAhNLLJszwA5TaItE3IsYYfvfeDA9XvD0eS3ykMtwoAJ5feOeqFFRSAHX-6RNMhwwOydwRJNTAZEjRS1xsBmBX456QDjXyxWGQwr9l6cfyL55krSciq-dfuOAeZsefpvg4tnT0SIC9iy91H2OcKqyKfTSITWrGud8P1HC9Coyk8FaZnmSX2gFwpBv15fB-LvTq60ZxjlmqMhJVQXwIeiTO8uXExbyPCf_1PNG237b3r_83cl0h1dFFnxRcpf8MRfw4Kf_Olmrywa5vCbazB5X5IS8BPTavgHqSH2Z1I5lXxPsBWfzknvHWMxXeh5voIUWA9cxy5FL6H2gHAs-TDhiXh7TwzxqAHqeLAf0lePwyHQVLj7SHnEBqAy4yqdU63-6AYc9WrJ8Wym7lNyqVsm65lgkgaRszfCaZMQXF-8nBNKBITvkcodIQtCkvaNQvKDX_V2mJO_rC8kbFpflk_Rpls0" -d ''[{"status":"firing","labels":{"alertname":"smoketest","severity":"warning"},"startsAt":"2026-06-12T00:38:30+00:00"}]'' https://default-alertmanager-proxy:9095/api/v2/alerts' image: quay.io/infrawatch/busyboxplus:curl imagePullPolicy: IfNotPresent name: curl resources: {} securityContext: capabilities: drop: - MKNOD terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-hsh5b readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: default-dockercfg-rsb7q nodeName: crc preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Never schedulerName: default-scheduler securityContext: seLinuxOptions: level: s0:c26,c10 serviceAccount: default serviceAccountName: default terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - name: kube-api-access-hsh5b projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:38Z" status: "False" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:30Z" reason: PodCompleted status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:30Z" reason: PodCompleted status: "False" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:30Z" reason: PodCompleted status: "False" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:30Z" status: "True" type: PodScheduled containerStatuses: - containerID: cri-o://7ff8fcc7859f8b1501235ca4a73c68cdc93b463908f95d6189097454f2fd9549 image: quay.io/infrawatch/busyboxplus:curl imageID: quay.io/infrawatch/busyboxplus@sha256:66f2d29e9735508135deb16917cdee84957a0e891d035f14b6557df277d10afc lastState: {} name: curl ready: false resources: {} restartCount: 0 started: false state: terminated: containerID: cri-o://7ff8fcc7859f8b1501235ca4a73c68cdc93b463908f95d6189097454f2fd9549 exitCode: 0 finishedAt: "2026-06-12T00:38:32Z" reason: Completed startedAt: "2026-06-12T00:38:32Z" user: linux: gid: 0 supplementalGroups: - 0 - 10 uid: 0 volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-hsh5b readOnly: true recursiveReadOnly: Disabled hostIP: 192.168.126.11 hostIPs: - ip: 192.168.126.11 phase: Succeeded podIP: 10.217.0.105 podIPs: - ip: 10.217.0.105 qosClass: BestEffort startTime: "2026-06-12T00:38:30Z" - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.217.0.101/23"],"mac_address":"0a:58:0a:d9:00:65","gateway_ips":["10.217.0.1"],"routes":[{"dest":"10.217.0.0/22","nextHop":"10.217.0.1"},{"dest":"10.217.4.0/23","nextHop":"10.217.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.217.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.217.0.1"}],"ip_address":"10.217.0.101/23","gateway_ip":"10.217.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.217.0.101" ], "mac": "0a:58:0a:d9:00:65", "default": true, "dns": {} }] openshift.io/scc: restricted-v2 seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user creationTimestamp: "2026-06-12T00:38:00Z" generateName: default-cloud1-ceil-event-smartgateway-7df94c85f8- generation: 1 labels: app: smart-gateway pod-template-hash: 7df94c85f8 sg-config-resource-name: default-cloud1-ceil-event-sg-core-configmap-6dm5bfcb96 smart-gateway: default-cloud1-ceil-event name: default-cloud1-ceil-event-smartgateway-7df94c85f8-nsngb namespace: service-telemetry ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: default-cloud1-ceil-event-smartgateway-7df94c85f8 uid: 6761bf10-a9fa-4813-b787-dc3823d07e8f resourceVersion: "48422" uid: dbc18dbc-36a0-491e-a651-7772756885cf spec: containers: - args: - --amqp_url - amqp://default-interconnect.service-telemetry.svc.cluster.local:5673/anycast/ceilometer/cloud1-event.sample - --block - --stat_period - "60" - --rbc - "15000" - --count - "0" - --gw_unix - /tmp/smartgateway - --rbs - "16384" image: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-bridge:latest imagePullPolicy: Always name: bridge resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /tmp name: socket-dir - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-wxvfb readOnly: true - args: - -config - /etc/sg-core/sg-core.conf.yaml env: - name: MY_POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name image: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-core:latest imagePullPolicy: Always name: sg-core resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /tmp name: socket-dir - mountPath: /etc/sg-core/ name: sg-core-config readOnly: true - mountPath: /config/certs name: elastic-certs - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-wxvfb readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: smart-gateway-dockercfg-72mkf nodeName: crc preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 1000670000 seLinuxOptions: level: s0:c26,c10 seccompProfile: type: RuntimeDefault serviceAccount: smart-gateway serviceAccountName: smart-gateway terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - emptyDir: {} name: socket-dir - configMap: defaultMode: 420 name: default-cloud1-ceil-event-sg-core-configmap name: sg-core-config - name: elastic-certs secret: defaultMode: 420 secretName: elasticsearch-es-cert - name: session-secret secret: defaultMode: 420 secretName: smart-gateway-session-secret - name: kube-api-access-wxvfb projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:07Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:00Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:29Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:29Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:00Z" status: "True" type: PodScheduled containerStatuses: - containerID: cri-o://5a19c450395ff38dac3cd5355930686aea5bd3342b480699830a578797f9c5f5 image: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-bridge:latest imageID: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-bridge@sha256:d8b3f8417a2807b8a6ebe42275ccd7b2b556ea03c3b282210bac4272a1fcbc6b lastState: terminated: containerID: cri-o://d96714e9e230b31fd35616565f6361c4dc03378b3744fc43dd691cc686d001de exitCode: 0 finishedAt: "2026-06-12T00:38:14Z" reason: Completed startedAt: "2026-06-12T00:38:13Z" name: bridge ready: true resources: {} restartCount: 2 started: true state: running: startedAt: "2026-06-12T00:38:29Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /tmp name: socket-dir - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-wxvfb readOnly: true recursiveReadOnly: Disabled - containerID: cri-o://23822271a056bc8be10169e8e4cdfb0cde8d040a15dfd79b85f9a0f0929f54df image: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-core:latest imageID: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-core@sha256:fbcd8bbf02f4c0e463ec10fac0f7e0430f66240b38b032d134d88cd8f63a0454 lastState: {} name: sg-core ready: true resources: {} restartCount: 0 started: true state: running: startedAt: "2026-06-12T00:38:06Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /tmp name: socket-dir - mountPath: /etc/sg-core/ name: sg-core-config readOnly: true recursiveReadOnly: Disabled - mountPath: /config/certs name: elastic-certs - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-wxvfb readOnly: true recursiveReadOnly: Disabled hostIP: 192.168.126.11 hostIPs: - ip: 192.168.126.11 phase: Running podIP: 10.217.0.101 podIPs: - ip: 10.217.0.101 qosClass: BestEffort startTime: "2026-06-12T00:38:00Z" - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.217.0.97/23"],"mac_address":"0a:58:0a:d9:00:61","gateway_ips":["10.217.0.1"],"routes":[{"dest":"10.217.0.0/22","nextHop":"10.217.0.1"},{"dest":"10.217.4.0/23","nextHop":"10.217.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.217.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.217.0.1"}],"ip_address":"10.217.0.97/23","gateway_ip":"10.217.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.217.0.97" ], "mac": "0a:58:0a:d9:00:61", "default": true, "dns": {} }] openshift.io/scc: restricted-v2 seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user creationTimestamp: "2026-06-12T00:37:47Z" generateName: default-cloud1-ceil-meter-smartgateway-c9f4bb7dc- generation: 1 labels: app: smart-gateway pod-template-hash: c9f4bb7dc sg-config-resource-name: default-cloud1-ceil-meter-sg-core-configmap-4km8f4fkch smart-gateway: default-cloud1-ceil-meter name: default-cloud1-ceil-meter-smartgateway-c9f4bb7dc-hxghl namespace: service-telemetry ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: default-cloud1-ceil-meter-smartgateway-c9f4bb7dc uid: 248fbf95-6f41-4dbe-9d7b-fabb007f3d8a resourceVersion: "48426" uid: b8b23751-b845-4608-8399-7228db687d94 spec: containers: - args: - -https-address=:8083 - -tls-cert=/etc/tls/private/tls.crt - -tls-key=/etc/tls/private/tls.key - -cookie-secret-file=/etc/proxy/secrets/session_secret - -openshift-service-account=smart-gateway - -upstream=http://localhost:8081/ - '-openshift-delegate-urls={"/": {"namespace": "service-telemetry", "resource": "smartgateways", "group": "smartgateway.infra.watch", "verb": "get"}}' image: quay.io/openshift/origin-oauth-proxy:latest imagePullPolicy: Always name: oauth-proxy ports: - containerPort: 8083 name: https protocol: TCP resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/tls/private name: default-cloud1-ceil-meter-proxy-tls - mountPath: /etc/proxy/secrets name: session-secret - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-748bh readOnly: true - args: - --amqp_url - amqp://default-interconnect.service-telemetry.svc.cluster.local:5673/anycast/ceilometer/cloud1-metering.sample - --block - --stat_period - "60" - --rbc - "15000" - --count - "0" - --gw_unix - /tmp/smartgateway - --rbs - "16384" image: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-bridge:latest imagePullPolicy: Always name: bridge resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /tmp name: socket-dir - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-748bh readOnly: true - args: - -config - /etc/sg-core/sg-core.conf.yaml env: - name: MY_POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name image: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-core:latest imagePullPolicy: Always name: sg-core ports: - containerPort: 8083 name: prom-https protocol: TCP resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /tmp name: socket-dir - mountPath: /etc/sg-core/ name: sg-core-config readOnly: true - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-748bh readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: smart-gateway-dockercfg-72mkf nodeName: crc preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 1000670000 seLinuxOptions: level: s0:c26,c10 seccompProfile: type: RuntimeDefault serviceAccount: smart-gateway serviceAccountName: smart-gateway terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - name: default-cloud1-ceil-meter-proxy-tls secret: defaultMode: 420 secretName: default-cloud1-ceil-meter-proxy-tls - emptyDir: {} name: socket-dir - configMap: defaultMode: 420 name: default-cloud1-ceil-meter-sg-core-configmap name: sg-core-config - name: session-secret secret: defaultMode: 420 secretName: smart-gateway-session-secret - name: kube-api-access-748bh projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:07Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-12T00:37:47Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:29Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:29Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-12T00:37:47Z" status: "True" type: PodScheduled containerStatuses: - containerID: cri-o://19d5f90257493e331701cfe5e9aeb61ef419757322733090c1a322b434693503 image: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-bridge:latest imageID: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-bridge@sha256:d8b3f8417a2807b8a6ebe42275ccd7b2b556ea03c3b282210bac4272a1fcbc6b lastState: terminated: containerID: cri-o://5e1b5204f2fca6bfc6b423a48a2b2153178324dfbcbd8b0aa363527fd89e496a exitCode: 0 finishedAt: "2026-06-12T00:38:14Z" reason: Completed startedAt: "2026-06-12T00:38:13Z" name: bridge ready: true resources: {} restartCount: 2 started: true state: running: startedAt: "2026-06-12T00:38:29Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /tmp name: socket-dir - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-748bh readOnly: true recursiveReadOnly: Disabled - containerID: cri-o://894fb7af1f66b213a9c6f8993aafe46a48a912f7c3e55ddbde33cdf373e69ad6 image: quay.io/openshift/origin-oauth-proxy:latest imageID: quay.io/openshift/origin-oauth-proxy@sha256:40b5c637156b7f8558f33a657bddb683b7a06176e4e48ed97fb6bb8ab8551a3a lastState: {} name: oauth-proxy ready: true resources: {} restartCount: 0 started: true state: running: startedAt: "2026-06-12T00:37:59Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /etc/tls/private name: default-cloud1-ceil-meter-proxy-tls - mountPath: /etc/proxy/secrets name: session-secret - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-748bh readOnly: true recursiveReadOnly: Disabled - containerID: cri-o://7ec83c4cd2e4504bb1cfec8cdf79a033740fe166124b12fc11f8b21acf7215f6 image: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-core:latest imageID: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-core@sha256:fbcd8bbf02f4c0e463ec10fac0f7e0430f66240b38b032d134d88cd8f63a0454 lastState: {} name: sg-core ready: true resources: {} restartCount: 0 started: true state: running: startedAt: "2026-06-12T00:38:06Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /tmp name: socket-dir - mountPath: /etc/sg-core/ name: sg-core-config readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-748bh readOnly: true recursiveReadOnly: Disabled hostIP: 192.168.126.11 hostIPs: - ip: 192.168.126.11 phase: Running podIP: 10.217.0.97 podIPs: - ip: 10.217.0.97 qosClass: BestEffort startTime: "2026-06-12T00:37:47Z" - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.217.0.99/23"],"mac_address":"0a:58:0a:d9:00:63","gateway_ips":["10.217.0.1"],"routes":[{"dest":"10.217.0.0/22","nextHop":"10.217.0.1"},{"dest":"10.217.4.0/23","nextHop":"10.217.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.217.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.217.0.1"}],"ip_address":"10.217.0.99/23","gateway_ip":"10.217.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.217.0.99" ], "mac": "0a:58:0a:d9:00:63", "default": true, "dns": {} }] openshift.io/scc: restricted-v2 seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user creationTimestamp: "2026-06-12T00:37:59Z" generateName: default-cloud1-coll-event-smartgateway-54b65ff97b- generation: 1 labels: app: smart-gateway pod-template-hash: 54b65ff97b sg-config-resource-name: default-cloud1-coll-event-sg-core-configmap-cftgtt5bt2 smart-gateway: default-cloud1-coll-event name: default-cloud1-coll-event-smartgateway-54b65ff97b-6w2g6 namespace: service-telemetry ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: default-cloud1-coll-event-smartgateway-54b65ff97b uid: 92378500-d82d-48f2-924b-f873c614f9b9 resourceVersion: "48438" uid: 4bcc6c27-0be1-4fd8-8b71-2d2090f489ad spec: containers: - args: - --amqp_url - amqp://default-interconnect.service-telemetry.svc.cluster.local:5673/collectd/cloud1-notify - --block - --stat_period - "60" - --rbc - "15000" - --count - "0" - --gw_unix - /tmp/smartgateway - --rbs - "16384" image: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-bridge:latest imagePullPolicy: Always name: bridge resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /tmp name: socket-dir - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-tpl22 readOnly: true - args: - -config - /etc/sg-core/sg-core.conf.yaml env: - name: MY_POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name image: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-core:latest imagePullPolicy: Always name: sg-core resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /tmp name: socket-dir - mountPath: /etc/sg-core/ name: sg-core-config readOnly: true - mountPath: /config/certs name: elastic-certs - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-tpl22 readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: smart-gateway-dockercfg-72mkf nodeName: crc preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 1000670000 seLinuxOptions: level: s0:c26,c10 seccompProfile: type: RuntimeDefault serviceAccount: smart-gateway serviceAccountName: smart-gateway terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - emptyDir: {} name: socket-dir - configMap: defaultMode: 420 name: default-cloud1-coll-event-sg-core-configmap name: sg-core-config - name: elastic-certs secret: defaultMode: 420 secretName: elasticsearch-es-cert - name: session-secret secret: defaultMode: 420 secretName: smart-gateway-session-secret - name: kube-api-access-tpl22 projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:07Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-12T00:37:59Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:29Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:29Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-12T00:37:59Z" status: "True" type: PodScheduled containerStatuses: - containerID: cri-o://99682ffc5f935d5848331b4f78015923c531e05394b501dcfcac6af7317ff7b8 image: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-bridge:latest imageID: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-bridge@sha256:d8b3f8417a2807b8a6ebe42275ccd7b2b556ea03c3b282210bac4272a1fcbc6b lastState: terminated: containerID: cri-o://ed5ec07a473c7986c3f21d2fe476b590558dccc9660fe827603d17f236498804 exitCode: 0 finishedAt: "2026-06-12T00:38:13Z" reason: Completed startedAt: "2026-06-12T00:38:11Z" name: bridge ready: true resources: {} restartCount: 2 started: true state: running: startedAt: "2026-06-12T00:38:29Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /tmp name: socket-dir - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-tpl22 readOnly: true recursiveReadOnly: Disabled - containerID: cri-o://a53b8369262d18c051c4c3286dc5b465c829d3bf1ee3fba58dd6e5d87715a029 image: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-core:latest imageID: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-core@sha256:fbcd8bbf02f4c0e463ec10fac0f7e0430f66240b38b032d134d88cd8f63a0454 lastState: {} name: sg-core ready: true resources: {} restartCount: 0 started: true state: running: startedAt: "2026-06-12T00:38:06Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /tmp name: socket-dir - mountPath: /etc/sg-core/ name: sg-core-config readOnly: true recursiveReadOnly: Disabled - mountPath: /config/certs name: elastic-certs - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-tpl22 readOnly: true recursiveReadOnly: Disabled hostIP: 192.168.126.11 hostIPs: - ip: 192.168.126.11 phase: Running podIP: 10.217.0.99 podIPs: - ip: 10.217.0.99 qosClass: BestEffort startTime: "2026-06-12T00:37:59Z" - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.217.0.96/23"],"mac_address":"0a:58:0a:d9:00:60","gateway_ips":["10.217.0.1"],"routes":[{"dest":"10.217.0.0/22","nextHop":"10.217.0.1"},{"dest":"10.217.4.0/23","nextHop":"10.217.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.217.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.217.0.1"}],"ip_address":"10.217.0.96/23","gateway_ip":"10.217.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.217.0.96" ], "mac": "0a:58:0a:d9:00:60", "default": true, "dns": {} }] openshift.io/scc: restricted-v2 seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user creationTimestamp: "2026-06-12T00:37:44Z" generateName: default-cloud1-coll-meter-smartgateway-7f8f5c6486- generation: 1 labels: app: smart-gateway pod-template-hash: 7f8f5c6486 sg-config-resource-name: default-cloud1-coll-meter-sg-core-configmap-t727t56tgd smart-gateway: default-cloud1-coll-meter name: default-cloud1-coll-meter-smartgateway-7f8f5c6486-s99rc namespace: service-telemetry ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: default-cloud1-coll-meter-smartgateway-7f8f5c6486 uid: ccf9cf86-cbe3-4c67-a91b-cc2e47319905 resourceVersion: "48463" uid: 23706b24-7a0c-4246-a036-d17f8329825f spec: containers: - args: - -https-address=:8083 - -tls-cert=/etc/tls/private/tls.crt - -tls-key=/etc/tls/private/tls.key - -cookie-secret-file=/etc/proxy/secrets/session_secret - -openshift-service-account=smart-gateway - -upstream=http://localhost:8081/ - '-openshift-delegate-urls={"/": {"namespace": "service-telemetry", "resource": "smartgateways", "group": "smartgateway.infra.watch", "verb": "get"}}' image: quay.io/openshift/origin-oauth-proxy:latest imagePullPolicy: Always name: oauth-proxy ports: - containerPort: 8083 name: https protocol: TCP resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/tls/private name: default-cloud1-coll-meter-proxy-tls - mountPath: /etc/proxy/secrets name: session-secret - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-j9lrq readOnly: true - args: - --amqp_url - amqp://default-interconnect.service-telemetry.svc.cluster.local:5673/collectd/cloud1-telemetry - --block - --stat_period - "60" - --rbc - "15000" - --count - "0" - --gw_unix - /tmp/smartgateway - --rbs - "16384" image: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-bridge:latest imagePullPolicy: Always name: bridge resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /tmp name: socket-dir - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-j9lrq readOnly: true - args: - -config - /etc/sg-core/sg-core.conf.yaml env: - name: MY_POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name image: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-core:latest imagePullPolicy: Always name: sg-core ports: - containerPort: 8083 name: prom-https protocol: TCP resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /tmp name: socket-dir - mountPath: /etc/sg-core/ name: sg-core-config readOnly: true - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-j9lrq readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: smart-gateway-dockercfg-72mkf nodeName: crc preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 1000670000 seLinuxOptions: level: s0:c26,c10 seccompProfile: type: RuntimeDefault serviceAccount: smart-gateway serviceAccountName: smart-gateway terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - name: default-cloud1-coll-meter-proxy-tls secret: defaultMode: 420 secretName: default-cloud1-coll-meter-proxy-tls - emptyDir: {} name: socket-dir - configMap: defaultMode: 420 name: default-cloud1-coll-meter-sg-core-configmap name: sg-core-config - name: session-secret secret: defaultMode: 420 secretName: smart-gateway-session-secret - name: kube-api-access-j9lrq projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:07Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-12T00:37:44Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:30Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:30Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-12T00:37:44Z" status: "True" type: PodScheduled containerStatuses: - containerID: cri-o://366255611ae5c372cb4e97b9325dcc482049e7fa367cc0a5b7b85d746955d0fc image: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-bridge:latest imageID: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-bridge@sha256:d8b3f8417a2807b8a6ebe42275ccd7b2b556ea03c3b282210bac4272a1fcbc6b lastState: terminated: containerID: cri-o://7c5aef18ce8d9bdcd1b1085435fd52113e4088f1b9095e389c3c03206fc783df exitCode: 0 finishedAt: "2026-06-12T00:38:14Z" reason: Completed startedAt: "2026-06-12T00:38:13Z" name: bridge ready: true resources: {} restartCount: 2 started: true state: running: startedAt: "2026-06-12T00:38:30Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /tmp name: socket-dir - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-j9lrq readOnly: true recursiveReadOnly: Disabled - containerID: cri-o://0057b173f3456264f82975ce4535319bdc1928be9894981f43d08078d4973721 image: quay.io/openshift/origin-oauth-proxy:latest imageID: quay.io/openshift/origin-oauth-proxy@sha256:40b5c637156b7f8558f33a657bddb683b7a06176e4e48ed97fb6bb8ab8551a3a lastState: {} name: oauth-proxy ready: true resources: {} restartCount: 0 started: true state: running: startedAt: "2026-06-12T00:37:59Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /etc/tls/private name: default-cloud1-coll-meter-proxy-tls - mountPath: /etc/proxy/secrets name: session-secret - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-j9lrq readOnly: true recursiveReadOnly: Disabled - containerID: cri-o://d272daecadce751a259b227900261fde500480f3d00e87c8d40a06d4e250a30a image: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-core:latest imageID: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-core@sha256:fbcd8bbf02f4c0e463ec10fac0f7e0430f66240b38b032d134d88cd8f63a0454 lastState: {} name: sg-core ready: true resources: {} restartCount: 0 started: true state: running: startedAt: "2026-06-12T00:38:07Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /tmp name: socket-dir - mountPath: /etc/sg-core/ name: sg-core-config readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-j9lrq readOnly: true recursiveReadOnly: Disabled hostIP: 192.168.126.11 hostIPs: - ip: 192.168.126.11 phase: Running podIP: 10.217.0.96 podIPs: - ip: 10.217.0.96 qosClass: BestEffort startTime: "2026-06-12T00:37:44Z" - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.217.0.98/23"],"mac_address":"0a:58:0a:d9:00:62","gateway_ips":["10.217.0.1"],"routes":[{"dest":"10.217.0.0/22","nextHop":"10.217.0.1"},{"dest":"10.217.4.0/23","nextHop":"10.217.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.217.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.217.0.1"}],"ip_address":"10.217.0.98/23","gateway_ip":"10.217.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.217.0.98" ], "mac": "0a:58:0a:d9:00:62", "default": true, "dns": {} }] openshift.io/scc: restricted-v2 seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user creationTimestamp: "2026-06-12T00:37:51Z" generateName: default-cloud1-sens-meter-smartgateway-58c78bbf69- generation: 1 labels: app: smart-gateway pod-template-hash: 58c78bbf69 sg-config-resource-name: default-cloud1-sens-meter-sg-core-configmap-gckfgcf96t smart-gateway: default-cloud1-sens-meter name: default-cloud1-sens-meter-smartgateway-58c78bbf69-vsggn namespace: service-telemetry ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: default-cloud1-sens-meter-smartgateway-58c78bbf69 uid: 0fed493b-c290-4f45-84d6-8fb85a2564cb resourceVersion: "48417" uid: c0fc09c1-e3ea-4469-8b37-148740676d94 spec: containers: - args: - -https-address=:8083 - -tls-cert=/etc/tls/private/tls.crt - -tls-key=/etc/tls/private/tls.key - -cookie-secret-file=/etc/proxy/secrets/session_secret - -openshift-service-account=smart-gateway - -upstream=http://localhost:8081/ - '-openshift-delegate-urls={"/": {"namespace": "service-telemetry", "resource": "smartgateways", "group": "smartgateway.infra.watch", "verb": "get"}}' image: quay.io/openshift/origin-oauth-proxy:latest imagePullPolicy: Always name: oauth-proxy ports: - containerPort: 8083 name: https protocol: TCP resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/tls/private name: default-cloud1-sens-meter-proxy-tls - mountPath: /etc/proxy/secrets name: session-secret - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-kwpkw readOnly: true - args: - --amqp_url - amqp://default-interconnect.service-telemetry.svc.cluster.local:5673/sensubility/cloud1-telemetry - --block - --stat_period - "60" - --rbc - "15000" - --count - "0" - --gw_unix - /tmp/smartgateway - --rbs - "65535" image: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-bridge:latest imagePullPolicy: Always name: bridge resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /tmp name: socket-dir - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-kwpkw readOnly: true - args: - -config - /etc/sg-core/sg-core.conf.yaml env: - name: MY_POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name image: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-core:latest imagePullPolicy: Always name: sg-core ports: - containerPort: 8083 name: prom-https protocol: TCP resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /tmp name: socket-dir - mountPath: /etc/sg-core/ name: sg-core-config readOnly: true - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-kwpkw readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: smart-gateway-dockercfg-72mkf nodeName: crc preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 1000670000 seLinuxOptions: level: s0:c26,c10 seccompProfile: type: RuntimeDefault serviceAccount: smart-gateway serviceAccountName: smart-gateway terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - name: default-cloud1-sens-meter-proxy-tls secret: defaultMode: 420 secretName: default-cloud1-sens-meter-proxy-tls - emptyDir: {} name: socket-dir - configMap: defaultMode: 420 name: default-cloud1-sens-meter-sg-core-configmap name: sg-core-config - name: session-secret secret: defaultMode: 420 secretName: smart-gateway-session-secret - name: kube-api-access-kwpkw projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:07Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-12T00:37:54Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:29Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:29Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-12T00:37:51Z" status: "True" type: PodScheduled containerStatuses: - containerID: cri-o://5d0a03b0d01d0cf8e2345026732c54bee58df65311818b82cd0df3b2668c13a1 image: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-bridge:latest imageID: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-bridge@sha256:d8b3f8417a2807b8a6ebe42275ccd7b2b556ea03c3b282210bac4272a1fcbc6b lastState: terminated: containerID: cri-o://cbfaa10c6cd82655dfaea56a8aed264b63b0aaf8433d45ac3e3370d264263219 exitCode: 0 finishedAt: "2026-06-12T00:38:14Z" reason: Completed startedAt: "2026-06-12T00:38:13Z" name: bridge ready: true resources: {} restartCount: 2 started: true state: running: startedAt: "2026-06-12T00:38:29Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /tmp name: socket-dir - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-kwpkw readOnly: true recursiveReadOnly: Disabled - containerID: cri-o://ffaecdffde9cf4f6edb6fab8c9b3a8fd25651f49d3d4ee157399a46321a238d4 image: quay.io/openshift/origin-oauth-proxy:latest imageID: quay.io/openshift/origin-oauth-proxy@sha256:40b5c637156b7f8558f33a657bddb683b7a06176e4e48ed97fb6bb8ab8551a3a lastState: {} name: oauth-proxy ready: true resources: {} restartCount: 0 started: true state: running: startedAt: "2026-06-12T00:38:00Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /etc/tls/private name: default-cloud1-sens-meter-proxy-tls - mountPath: /etc/proxy/secrets name: session-secret - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-kwpkw readOnly: true recursiveReadOnly: Disabled - containerID: cri-o://c43ba8caf01456d7bda1a54f2d7357d1f0bac8d203105a2e7c39413a34954383 image: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-core:latest imageID: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-core@sha256:fbcd8bbf02f4c0e463ec10fac0f7e0430f66240b38b032d134d88cd8f63a0454 lastState: {} name: sg-core ready: true resources: {} restartCount: 0 started: true state: running: startedAt: "2026-06-12T00:38:07Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /tmp name: socket-dir - mountPath: /etc/sg-core/ name: sg-core-config readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-kwpkw readOnly: true recursiveReadOnly: Disabled hostIP: 192.168.126.11 hostIPs: - ip: 192.168.126.11 phase: Running podIP: 10.217.0.98 podIPs: - ip: 10.217.0.98 qosClass: BestEffort startTime: "2026-06-12T00:37:54Z" - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.217.0.102/23"],"mac_address":"0a:58:0a:d9:00:66","gateway_ips":["10.217.0.1"],"routes":[{"dest":"10.217.0.0/22","nextHop":"10.217.0.1"},{"dest":"10.217.4.0/23","nextHop":"10.217.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.217.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.217.0.1"}],"ip_address":"10.217.0.102/23","gateway_ip":"10.217.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.217.0.102" ], "mac": "0a:58:0a:d9:00:66", "default": true, "dns": {} }] openshift.io/scc: restricted-v2 prometheus.io/port: "8888" prometheus.io/scrape: "true" seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user creationTimestamp: "2026-06-12T00:38:11Z" generateName: default-interconnect-55bf8d5cb- generation: 1 labels: application: default-interconnect com.company: Red_Hat interconnect_cr: default-interconnect pod-template-hash: 55bf8d5cb rht.comp: Interconnect rht.comp_t: application rht.comp_ver: "1.10" rht.prod_name: Red_Hat_Integration rht.prod_ver: 2021.Q4 name: default-interconnect-55bf8d5cb-pjjd4 namespace: service-telemetry ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: default-interconnect-55bf8d5cb uid: a74aae01-c3b6-4c9c-b212-620a62259f50 resourceVersion: "48286" uid: 4af281f2-ad43-49e3-92bd-d05b02c3708f spec: affinity: podAntiAffinity: requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchExpressions: - key: application operator: In values: - default-interconnect topologyKey: kubernetes.io/hostname containers: - env: - name: APPLICATION_NAME value: default-interconnect - name: QDROUTERD_CONF value: |2+ router { mode: interior id: ${HOSTNAME} } listener { host: 127.0.0.1 port: 5672 role: normal } listener { name: health-and-stats port: 8888 http: true healthz: true metrics: true websockets: false httpRootDir: invalid } listener { role: inter-router port: 55671 saslMechanisms: EXTERNAL authenticatePeer: true sslProfile: inter-router } listener { role: edge port: 5671 saslMechanisms: PLAIN authenticatePeer: true sslProfile: openstack } listener { role: edge port: 5673 linkCapacity: 25000 } sslProfile { name: openstack certFile: /etc/qpid-dispatch-certs/openstack/default-interconnect-openstack-credentials/tls.crt privateKeyFile: /etc/qpid-dispatch-certs/openstack/default-interconnect-openstack-credentials/tls.key caCertFile: /etc/qpid-dispatch-certs/openstack/default-interconnect-openstack-ca/tls.crt } sslProfile { name: inter-router certFile: /etc/qpid-dispatch-certs/inter-router/default-interconnect-inter-router-credentials/tls.crt privateKeyFile: /etc/qpid-dispatch-certs/inter-router/default-interconnect-inter-router-credentials/tls.key caCertFile: /etc/qpid-dispatch-certs/inter-router/default-interconnect-inter-router-ca/tls.crt } address { prefix: closest distribution: closest } address { prefix: multicast distribution: multicast } address { prefix: unicast distribution: closest } address { prefix: exclusive distribution: closest } address { prefix: broadcast distribution: multicast } address { prefix: collectd distribution: multicast } address { prefix: ceilometer distribution: multicast } - name: QDROUTERD_AUTO_CREATE_SASLDB_SOURCE value: /etc/qpid-dispatch/sasl-users/ - name: QDROUTERD_AUTO_CREATE_SASLDB_PATH value: /tmp/qdrouterd.sasldb - name: POD_COUNT value: "1" - name: POD_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: POD_IP valueFrom: fieldRef: apiVersion: v1 fieldPath: status.podIP - name: QDROUTERD_AUTO_MESH_DISCOVERY value: QUERY image: registry.redhat.io/amq7/amq-interconnect@sha256:31d87473fa684178a694f9ee331d3c80f2653f9533cb65c2a325752166a077e9 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 httpGet: path: /healthz port: 8888 scheme: HTTP initialDelaySeconds: 60 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 name: default-interconnect ports: - containerPort: 5672 name: port-5672 protocol: TCP - containerPort: 55671 name: port-55671 protocol: TCP resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/qpid-dispatch-certs/openstack/default-interconnect-openstack-credentials name: default-interconnect-openstack-credentials - mountPath: /etc/qpid-dispatch-certs/openstack/default-interconnect-openstack-ca name: default-interconnect-openstack-ca - mountPath: /etc/qpid-dispatch-certs/inter-router/default-interconnect-inter-router-credentials name: default-interconnect-inter-router-credentials - mountPath: /etc/qpid-dispatch-certs/inter-router/default-interconnect-inter-router-ca name: default-interconnect-inter-router-ca - mountPath: /etc/qpid-dispatch/sasl-users name: sasl-users - mountPath: /etc/sasl2 name: sasl-config - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-cf7mb readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: default-interconnect-dockercfg-d9mkw nodeName: crc preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 1000670000 seLinuxOptions: level: s0:c26,c10 seccompProfile: type: RuntimeDefault serviceAccount: default-interconnect serviceAccountName: default-interconnect terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - name: default-interconnect-openstack-credentials secret: defaultMode: 420 secretName: default-interconnect-openstack-credentials - name: default-interconnect-openstack-ca secret: defaultMode: 420 secretName: default-interconnect-openstack-ca - name: default-interconnect-inter-router-credentials secret: defaultMode: 420 secretName: default-interconnect-inter-router-credentials - name: default-interconnect-inter-router-ca secret: defaultMode: 420 secretName: default-interconnect-inter-router-ca - name: sasl-users secret: defaultMode: 420 secretName: default-interconnect-users - configMap: defaultMode: 420 name: default-interconnect-sasl-config name: sasl-config - name: kube-api-access-cf7mb projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:13Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:11Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:13Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:13Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:11Z" status: "True" type: PodScheduled containerStatuses: - containerID: cri-o://42a83bee8dd063770cd8a508167b43f2a38285f5376db80ffb9b915029f9cc64 image: registry.redhat.io/amq7/amq-interconnect@sha256:31d87473fa684178a694f9ee331d3c80f2653f9533cb65c2a325752166a077e9 imageID: registry.redhat.io/amq7/amq-interconnect@sha256:06ac9dd1544cec3885a8362c7685d6c5bb22aab0e46d476480b463b699ebc192 lastState: {} name: default-interconnect ready: true resources: {} restartCount: 0 started: true state: running: startedAt: "2026-06-12T00:38:12Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /etc/qpid-dispatch-certs/openstack/default-interconnect-openstack-credentials name: default-interconnect-openstack-credentials - mountPath: /etc/qpid-dispatch-certs/openstack/default-interconnect-openstack-ca name: default-interconnect-openstack-ca - mountPath: /etc/qpid-dispatch-certs/inter-router/default-interconnect-inter-router-credentials name: default-interconnect-inter-router-credentials - mountPath: /etc/qpid-dispatch-certs/inter-router/default-interconnect-inter-router-ca name: default-interconnect-inter-router-ca - mountPath: /etc/qpid-dispatch/sasl-users name: sasl-users - mountPath: /etc/sasl2 name: sasl-config - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-cf7mb readOnly: true recursiveReadOnly: Disabled hostIP: 192.168.126.11 hostIPs: - ip: 192.168.126.11 phase: Running podIP: 10.217.0.102 podIPs: - ip: 10.217.0.102 qosClass: BestEffort startTime: "2026-06-12T00:38:11Z" - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.217.0.94/23"],"mac_address":"0a:58:0a:d9:00:5e","gateway_ips":["10.217.0.1"],"routes":[{"dest":"10.217.0.0/22","nextHop":"10.217.0.1"},{"dest":"10.217.4.0/23","nextHop":"10.217.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.217.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.217.0.1"}],"ip_address":"10.217.0.94/23","gateway_ip":"10.217.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.217.0.94" ], "mac": "0a:58:0a:d9:00:5e", "default": true, "dns": {} }] openshift.io/scc: restricted-v2 seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user creationTimestamp: "2026-06-12T00:37:27Z" generateName: default-snmp-webhook-694dc457d5- generation: 1 labels: app: default-snmp-webhook pod-template-hash: 694dc457d5 name: default-snmp-webhook-694dc457d5-k2zxl namespace: service-telemetry ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: default-snmp-webhook-694dc457d5 uid: b8144e34-1cd3-4413-9207-45ab35f67e8e resourceVersion: "47794" uid: ec9aa1e8-f833-44e5-b16a-466bd6972f13 spec: containers: - env: - name: SNMP_COMMUNITY value: public - name: SNMP_RETRIES value: "5" - name: SNMP_HOST value: 192.168.24.254 - name: SNMP_PORT value: "162" - name: SNMP_TIMEOUT value: "1" - name: ALERT_OID_LABEL value: oid - name: TRAP_OID_PREFIX value: 1.3.6.1.4.1.50495.15 - name: TRAP_DEFAULT_OID value: 1.3.6.1.4.1.50495.15.1.2.1 - name: TRAP_DEFAULT_SEVERITY image: image-registry.openshift-image-registry.svc:5000/service-telemetry/prometheus-webhook-snmp:latest imagePullPolicy: Always name: prometheus-webhook-snmp ports: - containerPort: 9099 protocol: TCP resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-8ktk5 readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: default-dockercfg-rsb7q nodeName: crc preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 1000670000 seLinuxOptions: level: s0:c26,c10 seccompProfile: type: RuntimeDefault serviceAccount: default serviceAccountName: default terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - name: kube-api-access-8ktk5 projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-12T00:37:36Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-12T00:37:27Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-12T00:37:36Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-12T00:37:36Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-12T00:37:27Z" status: "True" type: PodScheduled containerStatuses: - containerID: cri-o://5f9f887995eaa4864ba3e1cd79033db6a0a65678d5b4b96531e56edefad5613c image: image-registry.openshift-image-registry.svc:5000/service-telemetry/prometheus-webhook-snmp:latest imageID: image-registry.openshift-image-registry.svc:5000/service-telemetry/prometheus-webhook-snmp@sha256:7b4f5850f678c7772dd0702b2b2239b6d9159ca5065be1e17d9cf98e0df44d0c lastState: {} name: prometheus-webhook-snmp ready: true resources: {} restartCount: 0 started: true state: running: startedAt: "2026-06-12T00:37:36Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-8ktk5 readOnly: true recursiveReadOnly: Disabled hostIP: 192.168.126.11 hostIPs: - ip: 192.168.126.11 phase: Running podIP: 10.217.0.94 podIPs: - ip: 10.217.0.94 qosClass: BestEffort startTime: "2026-06-12T00:37:27Z" - apiVersion: v1 kind: Pod metadata: annotations: alm-examples: |- [ { "apiVersion": "elasticsearch.k8s.elastic.co/v1", "kind": "Elasticsearch", "metadata": { "name": "elasticsearch-sample" }, "spec": { "version": "9.4.0", "nodeSets": [ { "name": "default", "config": { "node.roles": ["master", "data"], "node.attr.attr_name": "attr_value", "node.store.allow_mmap": false }, "podTemplate": { "metadata": { "labels": { "foo": "bar" } }, "spec": { "containers": [ { "name": "elasticsearch", "resources": { "requests": { "memory": "4Gi", "cpu": 1 }, "limits": { "memory": "4Gi", "cpu": 2 } } } ] } }, "count": 3 } ] } }, { "apiVersion": "kibana.k8s.elastic.co/v1", "kind": "Kibana", "metadata": { "name": "kibana-sample" }, "spec": { "version": "9.4.0", "count": 1, "elasticsearchRef": { "name": "elasticsearch-sample" }, "podTemplate": { "metadata": { "labels": { "foo": "bar" } }, "spec": { "containers": [ { "name": "kibana", "resources": { "requests": { "memory": "1Gi", "cpu": 0.5 }, "limits": { "memory": "2Gi", "cpu": 2 } } } ] } } } }, { "apiVersion": "apm.k8s.elastic.co/v1", "kind": "ApmServer", "metadata": { "name": "apmserver-sample" }, "spec": { "version": "9.4.0", "count": 1, "elasticsearchRef": { "name": "elasticsearch-sample" } } }, { "apiVersion": "enterprisesearch.k8s.elastic.co/v1", "kind": "EnterpriseSearch", "metadata": { "name": "ent-sample" }, "spec": { "version": "9.4.0", "config": { "ent_search.external_url": "https://localhost:3002" }, "count": 1, "elasticsearchRef": { "name": "elasticsearch-sample" } } }, { "apiVersion": "beat.k8s.elastic.co/v1beta1", "kind": "Beat", "metadata": { "name": "heartbeat-sample" }, "spec": { "type": "heartbeat", "version": "9.4.0", "elasticsearchRef": { "name": "elasticsearch-sample" }, "config": { "heartbeat.monitors": [ { "type": "tcp", "schedule": "@every 5s", "hosts": [ "elasticsearch-sample-es-http.default.svc:9200" ] } ] }, "deployment": { "replicas": 1, "podTemplate": { "spec": { "securityContext": { "runAsUser": 0 } } } } } }, { "apiVersion": "agent.k8s.elastic.co/v1alpha1", "kind": "Agent", "metadata": { "name": "agent-sample" }, "spec": { "version": "9.4.0", "elasticsearchRefs": [ { "name": "elasticsearch-sample" } ], "daemonSet": {}, "config": { "inputs": [ { "name": "system-1", "revision": 1, "type": "system/metrics", "use_output": "default", "meta": { "package": { "name": "system", "version": "0.9.1" } }, "data_stream": { "namespace": "default" }, "streams": [ { "id": "system/metrics-system.cpu", "data_stream": { "dataset": "system.cpu", "type": "metrics" }, "metricsets": [ "cpu" ], "cpu.metrics": [ "percentages", "normalized_percentages" ], "period": "10s" } ] } ] } } }, { "apiVersion": "maps.k8s.elastic.co/v1alpha1", "kind": "ElasticMapsServer", "metadata": { "name": "ems-sample" }, "spec": { "version": "9.4.0", "count": 1, "elasticsearchRef": { "name": "elasticsearch-sample" } } }, { "apiVersion": "logstash.k8s.elastic.co/v1alpha1", "kind": "Logstash", "metadata" : { "name": "logstash-sample" }, "spec": { "version": "9.4.0", "count": 1 } } ] capabilities: Deep Insights categories: Database certified: "false" co.elastic.logs/raw: '[{"type":"filestream","enabled":true,"id":"eck-container-logs-${data.kubernetes.container.id}","paths":["/var/log/containers/*${data.kubernetes.container.id}.log"],"parsers":[{"container":{}},{"ndjson":{"keys_under_root":true}}],"prospector.scanner.symlinks":true,"processors":[{"convert":{"mode":"rename","ignore_missing":true,"fields":[{"from":"error","to":"_error"}]}},{"convert":{"mode":"rename","ignore_missing":true,"fields":[{"from":"_error","to":"error.message"}]}},{"convert":{"mode":"rename","ignore_missing":true,"fields":[{"from":"source","to":"_source"}]}},{"convert":{"mode":"rename","ignore_missing":true,"fields":[{"from":"_source","to":"event.source"}]}}]}]' containerImage: registry.connect.redhat.com/elastic/eck-operator@sha256:3d14ca210e77a8a62f71e97b4269890f2c728c1cff49023edd3c5656eaa8e9d8 createdAt: "2026-05-05 12:54:02" description: Run Elasticsearch, Kibana, APM Server, Beats, Enterprise Search, Elastic Agent, Elastic Maps Server, Logstash, Elastic AutoOps Agent and Elastic Package Registry on Kubernetes and OpenShift features.operators.openshift.io/disconnected: "false" features.operators.openshift.io/fips-compliant: "false" features.operators.openshift.io/proxy-aware: "false" features.operators.openshift.io/tls-profiles: "false" features.operators.openshift.io/token-auth-aws: "false" features.operators.openshift.io/token-auth-azure: "false" features.operators.openshift.io/token-auth-gcp: "false" k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.217.0.54/23"],"mac_address":"0a:58:0a:d9:00:36","gateway_ips":["10.217.0.1"],"routes":[{"dest":"10.217.0.0/22","nextHop":"10.217.0.1"},{"dest":"10.217.4.0/23","nextHop":"10.217.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.217.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.217.0.1"}],"ip_address":"10.217.0.54/23","gateway_ip":"10.217.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.217.0.54" ], "mac": "0a:58:0a:d9:00:36", "default": true, "dns": {} }] olm.operatorGroup: service-telemetry-operator-group olm.operatorNamespace: service-telemetry olm.targetNamespaces: service-telemetry olmcahash: 398d4fb3e2ae3da24344dfafdd8b0595f07a6bd0cc328bc6f9fc5142c50d7bfb openshift.io/scc: restricted-v2 operatorframework.io/properties: '{"properties":[{"type":"olm.gvk","value":{"group":"agent.k8s.elastic.co","kind":"Agent","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"apm.k8s.elastic.co","kind":"ApmServer","version":"v1"}},{"type":"olm.gvk","value":{"group":"apm.k8s.elastic.co","kind":"ApmServer","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"apm.k8s.elastic.co","kind":"ApmServer","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"autoops.k8s.elastic.co","kind":"AutoOpsAgentPolicy","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"autoscaling.k8s.elastic.co","kind":"ElasticsearchAutoscaler","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"beat.k8s.elastic.co","kind":"Beat","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"elasticsearch.k8s.elastic.co","kind":"Elasticsearch","version":"v1"}},{"type":"olm.gvk","value":{"group":"elasticsearch.k8s.elastic.co","kind":"Elasticsearch","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"elasticsearch.k8s.elastic.co","kind":"Elasticsearch","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"enterprisesearch.k8s.elastic.co","kind":"EnterpriseSearch","version":"v1"}},{"type":"olm.gvk","value":{"group":"enterprisesearch.k8s.elastic.co","kind":"EnterpriseSearch","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"kibana.k8s.elastic.co","kind":"Kibana","version":"v1"}},{"type":"olm.gvk","value":{"group":"kibana.k8s.elastic.co","kind":"Kibana","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"kibana.k8s.elastic.co","kind":"Kibana","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"logstash.k8s.elastic.co","kind":"Logstash","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"maps.k8s.elastic.co","kind":"ElasticMapsServer","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"packageregistry.k8s.elastic.co","kind":"PackageRegistry","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"stackconfigpolicy.k8s.elastic.co","kind":"StackConfigPolicy","version":"v1alpha1"}},{"type":"olm.package","value":{"packageName":"elasticsearch-eck-operator-certified","version":"3.4.0"}}]}' operators.openshift.io/valid-subscription: Elastic Basic license repository: https://github.com/elastic/cloud-on-k8s seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user support: elastic.co creationTimestamp: "2026-06-12T00:25:13Z" generateName: elastic-operator-76bd895855- generation: 1 labels: control-plane: elastic-operator pod-template-hash: 76bd895855 name: elastic-operator-76bd895855-2bcz5 namespace: service-telemetry ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: elastic-operator-76bd895855 uid: 2bfbc42f-f150-465c-b157-cfc571c36386 resourceVersion: "43693" uid: c76df63c-1909-4b02-8cd2-5e01a2b34c28 spec: containers: - args: - manager - --config=/conf/eck.yaml - --manage-webhook-certs=false - --enable-webhook - --ubi-only - --distribution-channel=certified-operators env: - name: NAMESPACES valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['olm.targetNamespaces'] - name: OPERATOR_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['olm.operatorNamespace'] - name: OPERATOR_IMAGE value: registry.connect.redhat.com/elastic/eck-operator@sha256:3d14ca210e77a8a62f71e97b4269890f2c728c1cff49023edd3c5656eaa8e9d8 - name: OPERATOR_CONDITION_NAME value: elasticsearch-eck-operator-certified.v3.4.0 image: registry.connect.redhat.com/elastic/eck-operator@sha256:3d14ca210e77a8a62f71e97b4269890f2c728c1cff49023edd3c5656eaa8e9d8 imagePullPolicy: IfNotPresent name: manager ports: - containerPort: 9443 name: https-webhook protocol: TCP resources: limits: cpu: "1" memory: 1Gi requests: cpu: 100m memory: 150Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /apiserver.local.config/certificates name: apiservice-cert - mountPath: /tmp/k8s-webhook-server/serving-certs name: webhook-cert - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-d46r4 readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: elastic-operator-dockercfg-jhlxw nodeName: crc preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 1000670000 seLinuxOptions: level: s0:c26,c10 seccompProfile: type: RuntimeDefault serviceAccount: elastic-operator serviceAccountName: elastic-operator terminationGracePeriodSeconds: 10 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 - effect: NoSchedule key: node.kubernetes.io/memory-pressure operator: Exists volumes: - name: apiservice-cert secret: defaultMode: 420 items: - key: tls.crt path: apiserver.crt - key: tls.key path: apiserver.key secretName: elastic-operator-service-cert - name: webhook-cert secret: defaultMode: 420 items: - key: tls.crt path: tls.crt - key: tls.key path: tls.key secretName: elastic-operator-service-cert - name: kube-api-access-d46r4 projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-12T00:25:33Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-12T00:25:13Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-12T00:25:33Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-12T00:25:33Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-12T00:25:13Z" status: "True" type: PodScheduled containerStatuses: - allocatedResources: cpu: 100m memory: 150Mi containerID: cri-o://a64ad577813e9243fa0f3d86b3f755a7e1e445ba47b27d090c12d73c4bb4275d image: registry.connect.redhat.com/elastic/eck-operator@sha256:3d14ca210e77a8a62f71e97b4269890f2c728c1cff49023edd3c5656eaa8e9d8 imageID: registry.connect.redhat.com/elastic/eck-operator@sha256:3d14ca210e77a8a62f71e97b4269890f2c728c1cff49023edd3c5656eaa8e9d8 lastState: {} name: manager ready: true resources: limits: cpu: "1" memory: 1Gi requests: cpu: 100m memory: 150Mi restartCount: 0 started: true state: running: startedAt: "2026-06-12T00:25:32Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /apiserver.local.config/certificates name: apiservice-cert - mountPath: /tmp/k8s-webhook-server/serving-certs name: webhook-cert - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-d46r4 readOnly: true recursiveReadOnly: Disabled hostIP: 192.168.126.11 hostIPs: - ip: 192.168.126.11 phase: Running podIP: 10.217.0.54 podIPs: - ip: 10.217.0.54 qosClass: Burstable startTime: "2026-06-12T00:25:13Z" - apiVersion: v1 kind: Pod metadata: annotations: co.elastic.logs/module: elasticsearch elasticsearch.k8s.elastic.co/config-hash: "2229445726" k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.217.0.57/23"],"mac_address":"0a:58:0a:d9:00:39","gateway_ips":["10.217.0.1"],"routes":[{"dest":"10.217.0.0/22","nextHop":"10.217.0.1"},{"dest":"10.217.4.0/23","nextHop":"10.217.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.217.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.217.0.1"}],"ip_address":"10.217.0.57/23","gateway_ip":"10.217.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.217.0.57" ], "mac": "0a:58:0a:d9:00:39", "default": true, "dns": {} }] openshift.io/scc: restricted-v2 policy.k8s.elastic.co/elasticsearch-config-mounts-hash: "" seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user update.k8s.elastic.co/timestamp: "2026-06-12T00:25:54.779303791Z" creationTimestamp: "2026-06-12T00:25:34Z" generateName: elasticsearch-es-default- generation: 1 labels: apps.kubernetes.io/pod-index: "0" common.k8s.elastic.co/type: elasticsearch controller-revision-hash: elasticsearch-es-default-76d59795cb elasticsearch.k8s.elastic.co/cluster-name: elasticsearch elasticsearch.k8s.elastic.co/http-scheme: https elasticsearch.k8s.elastic.co/node-data: "true" elasticsearch.k8s.elastic.co/node-data_cold: "false" elasticsearch.k8s.elastic.co/node-data_content: "false" elasticsearch.k8s.elastic.co/node-data_frozen: "false" elasticsearch.k8s.elastic.co/node-data_hot: "false" elasticsearch.k8s.elastic.co/node-data_warm: "false" elasticsearch.k8s.elastic.co/node-ingest: "true" elasticsearch.k8s.elastic.co/node-master: "true" elasticsearch.k8s.elastic.co/node-ml: "false" elasticsearch.k8s.elastic.co/node-remote_cluster_client: "false" elasticsearch.k8s.elastic.co/node-transform: "false" elasticsearch.k8s.elastic.co/node-voting_only: "false" elasticsearch.k8s.elastic.co/statefulset-name: elasticsearch-es-default elasticsearch.k8s.elastic.co/version: 7.17.20 statefulset.kubernetes.io/pod-name: elasticsearch-es-default-0 tuned.openshift.io/elasticsearch: elasticsearch name: elasticsearch-es-default-0 namespace: service-telemetry ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: StatefulSet name: elasticsearch-es-default uid: 7f27e043-8e94-4322-a440-75672d6a770a resourceVersion: "45187" uid: 273421ab-4b94-4168-8c50-b64f97192738 spec: affinity: podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchLabels: elasticsearch.k8s.elastic.co/cluster-name: elasticsearch topologyKey: kubernetes.io/hostname weight: 100 automountServiceAccountToken: false containers: - env: - name: POD_IP valueFrom: fieldRef: apiVersion: v1 fieldPath: status.podIP - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: NODE_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: spec.nodeName - name: NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: HEADLESS_SERVICE_NAME value: elasticsearch-es-default - name: PROBE_PASSWORD_PATH value: /mnt/elastic-internal/pod-mounted-users/elastic-internal-probe - name: PROBE_USERNAME value: elastic-internal-probe - name: READINESS_PROBE_PROTOCOL value: https - name: NSS_SDB_USE_CACHE value: "no" image: registry.connect.redhat.com/elastic/elasticsearch:7.17.20 imagePullPolicy: IfNotPresent lifecycle: preStop: exec: command: - bash - -c - /mnt/elastic-internal/scripts/pre-stop-hook-script.sh name: elasticsearch ports: - containerPort: 9200 name: https protocol: TCP - containerPort: 9300 name: transport protocol: TCP readinessProbe: exec: command: - bash - -c - /mnt/elastic-internal/scripts/readiness-probe-script.sh failureThreshold: 3 initialDelaySeconds: 10 periodSeconds: 5 successThreshold: 1 timeoutSeconds: 5 resources: limits: cpu: "2" memory: 2Gi requests: cpu: "1" memory: 2Gi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /mnt/elastic-internal/downward-api name: downward-api readOnly: true - mountPath: /usr/share/elasticsearch/bin name: elastic-internal-elasticsearch-bin-local - mountPath: /mnt/elastic-internal/elasticsearch-config name: elastic-internal-elasticsearch-config readOnly: true - mountPath: /usr/share/elasticsearch/config name: elastic-internal-elasticsearch-config-local - mountPath: /usr/share/elasticsearch/plugins name: elastic-internal-elasticsearch-plugins-local - mountPath: /usr/share/elasticsearch/config/http-certs name: elastic-internal-http-certificates readOnly: true - mountPath: /mnt/elastic-internal/pod-mounted-users name: elastic-internal-probe-user readOnly: true - mountPath: /usr/share/elasticsearch/config/transport-remote-certs/ name: elastic-internal-remote-certificate-authorities readOnly: true - mountPath: /mnt/elastic-internal/scripts name: elastic-internal-scripts readOnly: true - mountPath: /usr/share/elasticsearch/config/transport-certs name: elastic-internal-transport-certificates readOnly: true - mountPath: /mnt/elastic-internal/unicast-hosts name: elastic-internal-unicast-hosts readOnly: true - mountPath: /mnt/elastic-internal/xpack-file-realm name: elastic-internal-xpack-file-realm readOnly: true - mountPath: /usr/share/elasticsearch/data name: elasticsearch-data - mountPath: /usr/share/elasticsearch/logs name: elasticsearch-logs - mountPath: /tmp name: tmp-volume dnsPolicy: ClusterFirst enableServiceLinks: true hostname: elasticsearch-es-default-0 imagePullSecrets: - name: default-dockercfg-rsb7q initContainers: - command: - bash - -c - /mnt/elastic-internal/scripts/prepare-fs.sh env: - name: POD_IP valueFrom: fieldRef: apiVersion: v1 fieldPath: status.podIP - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: NODE_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: spec.nodeName - name: NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: HEADLESS_SERVICE_NAME value: elasticsearch-es-default - name: PROBE_PASSWORD_PATH value: /mnt/elastic-internal/pod-mounted-users/elastic-internal-probe - name: PROBE_USERNAME value: elastic-internal-probe - name: READINESS_PROBE_PROTOCOL value: https - name: NSS_SDB_USE_CACHE value: "no" image: registry.connect.redhat.com/elastic/elasticsearch:7.17.20 imagePullPolicy: IfNotPresent name: elastic-internal-init-filesystem resources: limits: cpu: 100m memory: 50Mi requests: cpu: 100m memory: 50Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /mnt/elastic-internal/downward-api name: downward-api readOnly: true - mountPath: /mnt/elastic-internal/elasticsearch-bin-local name: elastic-internal-elasticsearch-bin-local - mountPath: /mnt/elastic-internal/elasticsearch-config name: elastic-internal-elasticsearch-config readOnly: true - mountPath: /mnt/elastic-internal/elasticsearch-config-local name: elastic-internal-elasticsearch-config-local - mountPath: /mnt/elastic-internal/elasticsearch-plugins-local name: elastic-internal-elasticsearch-plugins-local - mountPath: /usr/share/elasticsearch/config/http-certs name: elastic-internal-http-certificates readOnly: true - mountPath: /mnt/elastic-internal/pod-mounted-users name: elastic-internal-probe-user readOnly: true - mountPath: /usr/share/elasticsearch/config/transport-remote-certs/ name: elastic-internal-remote-certificate-authorities readOnly: true - mountPath: /mnt/elastic-internal/scripts name: elastic-internal-scripts readOnly: true - mountPath: /mnt/elastic-internal/transport-certificates name: elastic-internal-transport-certificates readOnly: true - mountPath: /mnt/elastic-internal/unicast-hosts name: elastic-internal-unicast-hosts readOnly: true - mountPath: /mnt/elastic-internal/xpack-file-realm name: elastic-internal-xpack-file-realm readOnly: true - mountPath: /usr/share/elasticsearch/data name: elasticsearch-data - mountPath: /usr/share/elasticsearch/logs name: elasticsearch-logs - mountPath: /tmp name: tmp-volume - command: - bash - -c - /mnt/elastic-internal/scripts/suspend.sh env: - name: POD_IP valueFrom: fieldRef: apiVersion: v1 fieldPath: status.podIP - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: NODE_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: spec.nodeName - name: NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: HEADLESS_SERVICE_NAME value: elasticsearch-es-default - name: PROBE_PASSWORD_PATH value: /mnt/elastic-internal/pod-mounted-users/elastic-internal-probe - name: PROBE_USERNAME value: elastic-internal-probe - name: READINESS_PROBE_PROTOCOL value: https - name: NSS_SDB_USE_CACHE value: "no" image: registry.connect.redhat.com/elastic/elasticsearch:7.17.20 imagePullPolicy: IfNotPresent name: elastic-internal-suspend resources: limits: cpu: "2" memory: 2Gi requests: cpu: "1" memory: 2Gi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /mnt/elastic-internal/downward-api name: downward-api readOnly: true - mountPath: /usr/share/elasticsearch/bin name: elastic-internal-elasticsearch-bin-local - mountPath: /mnt/elastic-internal/elasticsearch-config name: elastic-internal-elasticsearch-config readOnly: true - mountPath: /usr/share/elasticsearch/config name: elastic-internal-elasticsearch-config-local - mountPath: /usr/share/elasticsearch/plugins name: elastic-internal-elasticsearch-plugins-local - mountPath: /usr/share/elasticsearch/config/http-certs name: elastic-internal-http-certificates readOnly: true - mountPath: /mnt/elastic-internal/pod-mounted-users name: elastic-internal-probe-user readOnly: true - mountPath: /usr/share/elasticsearch/config/transport-remote-certs/ name: elastic-internal-remote-certificate-authorities readOnly: true - mountPath: /mnt/elastic-internal/scripts name: elastic-internal-scripts readOnly: true - mountPath: /usr/share/elasticsearch/config/transport-certs name: elastic-internal-transport-certificates readOnly: true - mountPath: /mnt/elastic-internal/unicast-hosts name: elastic-internal-unicast-hosts readOnly: true - mountPath: /mnt/elastic-internal/xpack-file-realm name: elastic-internal-xpack-file-realm readOnly: true - mountPath: /usr/share/elasticsearch/data name: elasticsearch-data - mountPath: /usr/share/elasticsearch/logs name: elasticsearch-logs - mountPath: /tmp name: tmp-volume nodeName: crc preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 1000670000 seLinuxOptions: level: s0:c26,c10 seccompProfile: type: RuntimeDefault serviceAccount: default serviceAccountName: default subdomain: elasticsearch-es-default terminationGracePeriodSeconds: 180 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 - effect: NoSchedule key: node.kubernetes.io/memory-pressure operator: Exists volumes: - downwardAPI: defaultMode: 420 items: - fieldRef: apiVersion: v1 fieldPath: metadata.labels path: labels name: downward-api - emptyDir: {} name: elastic-internal-elasticsearch-bin-local - name: elastic-internal-elasticsearch-config secret: defaultMode: 420 optional: false secretName: elasticsearch-es-default-es-config - emptyDir: {} name: elastic-internal-elasticsearch-config-local - emptyDir: {} name: elastic-internal-elasticsearch-plugins-local - name: elastic-internal-http-certificates secret: defaultMode: 420 optional: false secretName: elasticsearch-es-http-certs-internal - name: elastic-internal-probe-user secret: defaultMode: 420 items: - key: elastic-internal-probe path: elastic-internal-probe - key: elastic-internal-pre-stop path: elastic-internal-pre-stop optional: false secretName: elasticsearch-es-internal-users - name: elastic-internal-remote-certificate-authorities secret: defaultMode: 420 optional: false secretName: elasticsearch-es-remote-ca - configMap: defaultMode: 493 name: elasticsearch-es-scripts optional: false name: elastic-internal-scripts - name: elastic-internal-transport-certificates secret: defaultMode: 420 optional: false secretName: elasticsearch-es-default-es-transport-certs - configMap: defaultMode: 420 name: elasticsearch-es-unicast-hosts optional: false name: elastic-internal-unicast-hosts - name: elastic-internal-xpack-file-realm secret: defaultMode: 420 optional: false secretName: elasticsearch-es-xpack-file-realm - emptyDir: {} name: elasticsearch-data - emptyDir: {} name: elasticsearch-logs - emptyDir: {} name: tmp-volume status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-12T00:25:54Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-12T00:25:57Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-12T00:26:16Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-12T00:26:16Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-12T00:25:34Z" status: "True" type: PodScheduled containerStatuses: - allocatedResources: cpu: "1" memory: 2Gi containerID: cri-o://371f5c9ea09001da3d1c3b746e3582eb147146024a3de5ad630082b5fe7a9660 image: registry.connect.redhat.com/elastic/elasticsearch:7.17.20 imageID: registry.connect.redhat.com/elastic/elasticsearch@sha256:d2ba643f52fa7935d0428814d23aaef06cde96830a8cd59ddb2e078749b98856 lastState: {} name: elasticsearch ready: true resources: limits: cpu: "2" memory: 2Gi requests: cpu: "1" memory: 2Gi restartCount: 0 started: true state: running: startedAt: "2026-06-12T00:25:57Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /mnt/elastic-internal/downward-api name: downward-api readOnly: true recursiveReadOnly: Disabled - mountPath: /usr/share/elasticsearch/bin name: elastic-internal-elasticsearch-bin-local - mountPath: /mnt/elastic-internal/elasticsearch-config name: elastic-internal-elasticsearch-config readOnly: true recursiveReadOnly: Disabled - mountPath: /usr/share/elasticsearch/config name: elastic-internal-elasticsearch-config-local - mountPath: /usr/share/elasticsearch/plugins name: elastic-internal-elasticsearch-plugins-local - mountPath: /usr/share/elasticsearch/config/http-certs name: elastic-internal-http-certificates readOnly: true recursiveReadOnly: Disabled - mountPath: /mnt/elastic-internal/pod-mounted-users name: elastic-internal-probe-user readOnly: true recursiveReadOnly: Disabled - mountPath: /usr/share/elasticsearch/config/transport-remote-certs/ name: elastic-internal-remote-certificate-authorities readOnly: true recursiveReadOnly: Disabled - mountPath: /mnt/elastic-internal/scripts name: elastic-internal-scripts readOnly: true recursiveReadOnly: Disabled - mountPath: /usr/share/elasticsearch/config/transport-certs name: elastic-internal-transport-certificates readOnly: true recursiveReadOnly: Disabled - mountPath: /mnt/elastic-internal/unicast-hosts name: elastic-internal-unicast-hosts readOnly: true recursiveReadOnly: Disabled - mountPath: /mnt/elastic-internal/xpack-file-realm name: elastic-internal-xpack-file-realm readOnly: true recursiveReadOnly: Disabled - mountPath: /usr/share/elasticsearch/data name: elasticsearch-data - mountPath: /usr/share/elasticsearch/logs name: elasticsearch-logs - mountPath: /tmp name: tmp-volume hostIP: 192.168.126.11 hostIPs: - ip: 192.168.126.11 initContainerStatuses: - allocatedResources: cpu: 100m memory: 50Mi containerID: cri-o://66efa3a231c1c31c7efdd3285dcb8ac7d33230d3b03e57c3f327819828eb8eb3 image: registry.connect.redhat.com/elastic/elasticsearch:7.17.20 imageID: registry.connect.redhat.com/elastic/elasticsearch@sha256:d2ba643f52fa7935d0428814d23aaef06cde96830a8cd59ddb2e078749b98856 lastState: {} name: elastic-internal-init-filesystem ready: true resources: limits: cpu: 100m memory: 50Mi requests: cpu: 100m memory: 50Mi restartCount: 0 started: false state: terminated: containerID: cri-o://66efa3a231c1c31c7efdd3285dcb8ac7d33230d3b03e57c3f327819828eb8eb3 exitCode: 0 finishedAt: "2026-06-12T00:25:55Z" reason: Completed startedAt: "2026-06-12T00:25:53Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /mnt/elastic-internal/downward-api name: downward-api readOnly: true recursiveReadOnly: Disabled - mountPath: /mnt/elastic-internal/elasticsearch-bin-local name: elastic-internal-elasticsearch-bin-local - mountPath: /mnt/elastic-internal/elasticsearch-config name: elastic-internal-elasticsearch-config readOnly: true recursiveReadOnly: Disabled - mountPath: /mnt/elastic-internal/elasticsearch-config-local name: elastic-internal-elasticsearch-config-local - mountPath: /mnt/elastic-internal/elasticsearch-plugins-local name: elastic-internal-elasticsearch-plugins-local - mountPath: /usr/share/elasticsearch/config/http-certs name: elastic-internal-http-certificates readOnly: true recursiveReadOnly: Disabled - mountPath: /mnt/elastic-internal/pod-mounted-users name: elastic-internal-probe-user readOnly: true recursiveReadOnly: Disabled - mountPath: /usr/share/elasticsearch/config/transport-remote-certs/ name: elastic-internal-remote-certificate-authorities readOnly: true recursiveReadOnly: Disabled - mountPath: /mnt/elastic-internal/scripts name: elastic-internal-scripts readOnly: true recursiveReadOnly: Disabled - mountPath: /mnt/elastic-internal/transport-certificates name: elastic-internal-transport-certificates readOnly: true recursiveReadOnly: Disabled - mountPath: /mnt/elastic-internal/unicast-hosts name: elastic-internal-unicast-hosts readOnly: true recursiveReadOnly: Disabled - mountPath: /mnt/elastic-internal/xpack-file-realm name: elastic-internal-xpack-file-realm readOnly: true recursiveReadOnly: Disabled - mountPath: /usr/share/elasticsearch/data name: elasticsearch-data - mountPath: /usr/share/elasticsearch/logs name: elasticsearch-logs - mountPath: /tmp name: tmp-volume - allocatedResources: cpu: "1" memory: 2Gi containerID: cri-o://f3fc32dfa073e0b8b688b955749f696066b7a1c20c7d349ef7ae1cea431fe8d5 image: registry.connect.redhat.com/elastic/elasticsearch:7.17.20 imageID: registry.connect.redhat.com/elastic/elasticsearch@sha256:d2ba643f52fa7935d0428814d23aaef06cde96830a8cd59ddb2e078749b98856 lastState: {} name: elastic-internal-suspend ready: true resources: limits: cpu: "2" memory: 2Gi requests: cpu: "1" memory: 2Gi restartCount: 0 started: false state: terminated: containerID: cri-o://f3fc32dfa073e0b8b688b955749f696066b7a1c20c7d349ef7ae1cea431fe8d5 exitCode: 0 finishedAt: "2026-06-12T00:25:56Z" reason: Completed startedAt: "2026-06-12T00:25:56Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /mnt/elastic-internal/downward-api name: downward-api readOnly: true recursiveReadOnly: Disabled - mountPath: /usr/share/elasticsearch/bin name: elastic-internal-elasticsearch-bin-local - mountPath: /mnt/elastic-internal/elasticsearch-config name: elastic-internal-elasticsearch-config readOnly: true recursiveReadOnly: Disabled - mountPath: /usr/share/elasticsearch/config name: elastic-internal-elasticsearch-config-local - mountPath: /usr/share/elasticsearch/plugins name: elastic-internal-elasticsearch-plugins-local - mountPath: /usr/share/elasticsearch/config/http-certs name: elastic-internal-http-certificates readOnly: true recursiveReadOnly: Disabled - mountPath: /mnt/elastic-internal/pod-mounted-users name: elastic-internal-probe-user readOnly: true recursiveReadOnly: Disabled - mountPath: /usr/share/elasticsearch/config/transport-remote-certs/ name: elastic-internal-remote-certificate-authorities readOnly: true recursiveReadOnly: Disabled - mountPath: /mnt/elastic-internal/scripts name: elastic-internal-scripts readOnly: true recursiveReadOnly: Disabled - mountPath: /usr/share/elasticsearch/config/transport-certs name: elastic-internal-transport-certificates readOnly: true recursiveReadOnly: Disabled - mountPath: /mnt/elastic-internal/unicast-hosts name: elastic-internal-unicast-hosts readOnly: true recursiveReadOnly: Disabled - mountPath: /mnt/elastic-internal/xpack-file-realm name: elastic-internal-xpack-file-realm readOnly: true recursiveReadOnly: Disabled - mountPath: /usr/share/elasticsearch/data name: elasticsearch-data - mountPath: /usr/share/elasticsearch/logs name: elasticsearch-logs - mountPath: /tmp name: tmp-volume phase: Running podIP: 10.217.0.57 podIPs: - ip: 10.217.0.57 qosClass: Burstable startTime: "2026-06-12T00:25:34Z" - apiVersion: v1 kind: Pod metadata: annotations: alm-examples: '[{"apiVersion":"interconnectedcloud.github.io/v1alpha1","kind":"Interconnect","metadata":{"name":"amq-interconnect"},"spec":{"deploymentPlan":{"size":2,"role":"interior","placement":"Any"}}}]' capabilities: Basic Install categories: Networking, Streaming & Messaging certified: "false" containerImage: registry.redhat.io/amq7/amq-interconnect-operator@sha256:a8b621237c872ded2a1d1d948fbebd693429e4a1ced1d7922406241a078d3d43 createdAt: "2019-06-28T22:00:00Z" description: Layer 7 Networking k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.217.0.55/23"],"mac_address":"0a:58:0a:d9:00:37","gateway_ips":["10.217.0.1"],"routes":[{"dest":"10.217.0.0/22","nextHop":"10.217.0.1"},{"dest":"10.217.4.0/23","nextHop":"10.217.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.217.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.217.0.1"}],"ip_address":"10.217.0.55/23","gateway_ip":"10.217.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.217.0.55" ], "mac": "0a:58:0a:d9:00:37", "default": true, "dns": {} }] olm.operatorGroup: service-telemetry-operator-group olm.operatorNamespace: service-telemetry olm.targetNamespaces: service-telemetry openshift.io/scc: restricted-v2 operatorframework.io/properties: '{"properties":[{"type":"olm.gvk","value":{"group":"interconnectedcloud.github.io","kind":"Interconnect","version":"v1alpha1"}},{"type":"olm.package","value":{"packageName":"amq7-interconnect-operator","version":"1.10.20"}}]}' operators.openshift.io/valid-subscription: '["Red Hat Integration", "Red Hat AMQ"]' repository: https://github.com/interconnectedcloud/qdr-operator seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user support: Red Hat creationTimestamp: "2026-06-12T00:25:15Z" generateName: interconnect-operator-78b9bd8798- generation: 1 labels: com.company: Red_Hat name: interconnect-operator pod-template-hash: 78b9bd8798 rht.comp: Interconnect rht.comp_t: application rht.comp_ver: "1.10" rht.prod_name: Red_Hat_Integration rht.prod_ver: 2022.Q2 name: interconnect-operator-78b9bd8798-nrmts namespace: service-telemetry ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: interconnect-operator-78b9bd8798 uid: 90db1cb0-86d6-4935-a33a-cbc67a9db0c6 resourceVersion: "43690" uid: 4cc5a978-5056-424c-8f9e-0a4cca1406b0 spec: containers: - command: - qdr-operator env: - name: WATCH_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: OPERATOR_NAME value: qdr-operator - name: RELATED_IMAGE_QDROUTERD_IMAGE value: registry.redhat.io/amq7/amq-interconnect@sha256:31d87473fa684178a694f9ee331d3c80f2653f9533cb65c2a325752166a077e9 - name: OPERATOR_CONDITION_NAME value: amq7-interconnect-operator.v1.10.20 image: registry.redhat.io/amq7/amq-interconnect-operator@sha256:a8b621237c872ded2a1d1d948fbebd693429e4a1ced1d7922406241a078d3d43 imagePullPolicy: Always name: interconnect-operator ports: - containerPort: 60000 name: metrics protocol: TCP resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-ntkh5 readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: interconnect-operator-dockercfg-cs8b2 nodeName: crc preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 1000670000 seLinuxOptions: level: s0:c26,c10 seccompProfile: type: RuntimeDefault serviceAccount: interconnect-operator serviceAccountName: interconnect-operator terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - name: kube-api-access-ntkh5 projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-12T00:25:33Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-12T00:25:15Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-12T00:25:33Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-12T00:25:33Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-12T00:25:15Z" status: "True" type: PodScheduled containerStatuses: - containerID: cri-o://9ffd8554d38d860de528f7114de6fd64fc68ff7410caca62898c11044c266c76 image: registry.redhat.io/amq7/amq-interconnect-operator@sha256:a8b621237c872ded2a1d1d948fbebd693429e4a1ced1d7922406241a078d3d43 imageID: registry.redhat.io/amq7/amq-interconnect-operator@sha256:a8b621237c872ded2a1d1d948fbebd693429e4a1ced1d7922406241a078d3d43 lastState: {} name: interconnect-operator ready: true resources: {} restartCount: 0 started: true state: running: startedAt: "2026-06-12T00:25:32Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-ntkh5 readOnly: true recursiveReadOnly: Disabled hostIP: 192.168.126.11 hostIPs: - ip: 192.168.126.11 phase: Running podIP: 10.217.0.55 podIPs: - ip: 10.217.0.55 qosClass: BestEffort startTime: "2026-06-12T00:25:15Z" - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.217.0.93/23"],"mac_address":"0a:58:0a:d9:00:5d","gateway_ips":["10.217.0.1"],"routes":[{"dest":"10.217.0.0/22","nextHop":"10.217.0.1"},{"dest":"10.217.4.0/23","nextHop":"10.217.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.217.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.217.0.1"}],"ip_address":"10.217.0.93/23","gateway_ip":"10.217.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.217.0.93" ], "mac": "0a:58:0a:d9:00:5d", "default": true, "dns": {} }] kubectl.kubernetes.io/default-container: prometheus openshift.io/scc: restricted-v2 seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user creationTimestamp: "2026-06-12T00:37:16Z" generateName: prometheus-default- generation: 1 labels: app.kubernetes.io/instance: default app.kubernetes.io/managed-by: prometheus-operator app.kubernetes.io/name: prometheus app.kubernetes.io/version: 3.9.1 apps.kubernetes.io/pod-index: "0" controller-revision-hash: prometheus-default-557698b8c6 operator.prometheus.io/name: default operator.prometheus.io/shard: "0" prometheus: default statefulset.kubernetes.io/pod-name: prometheus-default-0 name: prometheus-default-0 namespace: service-telemetry ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: StatefulSet name: prometheus-default uid: a363555f-40c2-4937-8139-cfc9b4162aa5 resourceVersion: "48128" uid: 4681c1d2-b30f-4c22-aa71-2ad062dabee7 spec: automountServiceAccountToken: true containers: - args: - --config.file=/etc/prometheus/config_out/prometheus.env.yaml - --web.enable-lifecycle - --web.route-prefix=/ - --web.listen-address=127.0.0.1:9090 - --storage.tsdb.retention.time=24h - --storage.tsdb.path=/prometheus - --web.config.file=/etc/prometheus/web_config/web-config.yaml image: quay.io/prometheus/prometheus:latest imagePullPolicy: Always livenessProbe: exec: command: - sh - -c - if [ -x "$(command -v curl)" ]; then exec curl --fail http://localhost:9090/-/healthy; elif [ -x "$(command -v wget)" ]; then exec wget -q -O /dev/null http://localhost:9090/-/healthy; else exit 1; fi failureThreshold: 6 periodSeconds: 5 successThreshold: 1 timeoutSeconds: 3 name: prometheus readinessProbe: exec: command: - sh - -c - if [ -x "$(command -v curl)" ]; then exec curl --fail http://localhost:9090/-/ready; elif [ -x "$(command -v wget)" ]; then exec wget -q -O /dev/null http://localhost:9090/-/ready; else exit 1; fi failureThreshold: 3 periodSeconds: 5 successThreshold: 1 timeoutSeconds: 3 resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000670000 startupProbe: exec: command: - sh - -c - if [ -x "$(command -v curl)" ]; then exec curl --fail http://localhost:9090/-/ready; elif [ -x "$(command -v wget)" ]; then exec wget -q -O /dev/null http://localhost:9090/-/ready; else exit 1; fi failureThreshold: 60 periodSeconds: 15 successThreshold: 1 timeoutSeconds: 3 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /etc/prometheus/config_out name: config-out readOnly: true - mountPath: /etc/prometheus/certs name: tls-assets readOnly: true - mountPath: /prometheus name: prometheus-default-db subPath: prometheus-db - mountPath: /etc/prometheus/secrets/default-prometheus-proxy-tls name: secret-default-prometheus-proxy-tls readOnly: true - mountPath: /etc/prometheus/secrets/default-session-secret name: secret-default-session-secret readOnly: true - mountPath: /etc/prometheus/configmaps/serving-certs-ca-bundle name: configmap-serving-certs-ca-bundle readOnly: true - mountPath: /etc/prometheus/rules/prometheus-default-rulefiles-0 name: prometheus-default-rulefiles-0 readOnly: true - mountPath: /etc/prometheus/rules/prometheus-default-rulefiles-1 name: prometheus-default-rulefiles-1 readOnly: true - mountPath: /etc/prometheus/rules/prometheus-default-rulefiles-2 name: prometheus-default-rulefiles-2 readOnly: true - mountPath: /etc/prometheus/web_config/web-config.yaml name: web-config readOnly: true subPath: web-config.yaml - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-gm7wm readOnly: true - args: - --listen-address=localhost:8080 - --reload-url=http://localhost:9090/-/reload - --config-file=/etc/prometheus/config/prometheus.yaml.gz - --config-envsubst-file=/etc/prometheus/config_out/prometheus.env.yaml - --watched-dir=/etc/prometheus/rules/prometheus-default-rulefiles-0 - --watched-dir=/etc/prometheus/rules/prometheus-default-rulefiles-1 - --watched-dir=/etc/prometheus/rules/prometheus-default-rulefiles-2 command: - /bin/prometheus-config-reloader env: - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: SHARD value: "0" image: registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:e4412f5688c9725f36d2f566f624d82a1a2a5b957686245fd2defcc39604bdc2 imagePullPolicy: IfNotPresent name: config-reloader resources: limits: cpu: 10m memory: 50Mi requests: cpu: 10m memory: 50Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /etc/prometheus/config name: config - mountPath: /etc/prometheus/config_out name: config-out - mountPath: /etc/prometheus/rules/prometheus-default-rulefiles-0 name: prometheus-default-rulefiles-0 - mountPath: /etc/prometheus/rules/prometheus-default-rulefiles-1 name: prometheus-default-rulefiles-1 - mountPath: /etc/prometheus/rules/prometheus-default-rulefiles-2 name: prometheus-default-rulefiles-2 - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-gm7wm readOnly: true - args: - -https-address=:9092 - -tls-cert=/etc/tls/private/tls.crt - -tls-key=/etc/tls/private/tls.key - -upstream=http://localhost:9090/ - -cookie-secret-file=/etc/proxy/secrets/session_secret - -openshift-service-account=prometheus-stf - '-openshift-sar={"namespace":"service-telemetry","resource": "prometheuses", "resourceAPIGroup":"monitoring.rhobs", "verb":"get"}' - '-openshift-delegate-urls={"/":{"namespace":"service-telemetry","resource": "prometheuses", "group":"monitoring.rhobs", "verb":"get"}}' image: quay.io/openshift/origin-oauth-proxy:latest imagePullPolicy: Always name: oauth-proxy ports: - containerPort: 9092 name: https protocol: TCP resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/tls/private name: secret-default-prometheus-proxy-tls - mountPath: /etc/proxy/secrets name: secret-default-session-secret - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-gm7wm readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true hostname: prometheus-default-0 imagePullSecrets: - name: prometheus-stf-dockercfg-c5d4k initContainers: - args: - --watch-interval=0 - --listen-address=:8081 - --config-file=/etc/prometheus/config/prometheus.yaml.gz - --config-envsubst-file=/etc/prometheus/config_out/prometheus.env.yaml - --watched-dir=/etc/prometheus/rules/prometheus-default-rulefiles-0 - --watched-dir=/etc/prometheus/rules/prometheus-default-rulefiles-1 - --watched-dir=/etc/prometheus/rules/prometheus-default-rulefiles-2 command: - /bin/prometheus-config-reloader env: - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: SHARD value: "0" image: registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:e4412f5688c9725f36d2f566f624d82a1a2a5b957686245fd2defcc39604bdc2 imagePullPolicy: IfNotPresent name: init-config-reloader ports: - containerPort: 8081 name: reloader-init protocol: TCP resources: limits: cpu: 10m memory: 50Mi requests: cpu: 10m memory: 50Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /etc/prometheus/config name: config - mountPath: /etc/prometheus/config_out name: config-out - mountPath: /etc/prometheus/rules/prometheus-default-rulefiles-0 name: prometheus-default-rulefiles-0 - mountPath: /etc/prometheus/rules/prometheus-default-rulefiles-1 name: prometheus-default-rulefiles-1 - mountPath: /etc/prometheus/rules/prometheus-default-rulefiles-2 name: prometheus-default-rulefiles-2 - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-gm7wm readOnly: true nodeName: crc preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 1000670000 seLinuxOptions: level: s0:c26,c10 seccompProfile: type: RuntimeDefault serviceAccount: prometheus-stf serviceAccountName: prometheus-stf shareProcessNamespace: false subdomain: prometheus-operated terminationGracePeriodSeconds: 600 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 - effect: NoSchedule key: node.kubernetes.io/memory-pressure operator: Exists volumes: - name: prometheus-default-db persistentVolumeClaim: claimName: prometheus-default-db-prometheus-default-0 - name: config secret: defaultMode: 420 secretName: prometheus-default - name: tls-assets projected: defaultMode: 420 sources: - secret: name: prometheus-default-tls-assets-0 - emptyDir: medium: Memory name: config-out - name: secret-default-prometheus-proxy-tls secret: defaultMode: 420 secretName: default-prometheus-proxy-tls - name: secret-default-session-secret secret: defaultMode: 420 secretName: default-session-secret - configMap: defaultMode: 420 name: serving-certs-ca-bundle name: configmap-serving-certs-ca-bundle - configMap: defaultMode: 420 name: prometheus-default-rulefiles-0 optional: true name: prometheus-default-rulefiles-0 - configMap: defaultMode: 420 name: prometheus-default-rulefiles-1 optional: true name: prometheus-default-rulefiles-1 - configMap: defaultMode: 420 name: prometheus-default-rulefiles-2 optional: true name: prometheus-default-rulefiles-2 - name: web-config secret: defaultMode: 420 secretName: prometheus-default-web-config - name: kube-api-access-gm7wm projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-12T00:37:24Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-12T00:37:30Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:04Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:04Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-12T00:37:17Z" status: "True" type: PodScheduled containerStatuses: - allocatedResources: cpu: 10m memory: 50Mi containerID: cri-o://c2317d51f94ef56efd7817512797eba476d3f06c1d740330e906bc6b4b515f75 image: registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:e4412f5688c9725f36d2f566f624d82a1a2a5b957686245fd2defcc39604bdc2 imageID: registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:6280a7d546a3731254a06648cc574a09d2b3453c7bd21a81f5d27c7b4cb4cfad lastState: {} name: config-reloader ready: true resources: limits: cpu: 10m memory: 50Mi requests: cpu: 10m memory: 50Mi restartCount: 0 started: true state: running: startedAt: "2026-06-12T00:37:45Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /etc/prometheus/config name: config - mountPath: /etc/prometheus/config_out name: config-out - mountPath: /etc/prometheus/rules/prometheus-default-rulefiles-0 name: prometheus-default-rulefiles-0 - mountPath: /etc/prometheus/rules/prometheus-default-rulefiles-1 name: prometheus-default-rulefiles-1 - mountPath: /etc/prometheus/rules/prometheus-default-rulefiles-2 name: prometheus-default-rulefiles-2 - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-gm7wm readOnly: true recursiveReadOnly: Disabled - containerID: cri-o://2d386e1c36914475c1f649afda46ace285e677312328c085bcb60be7bc35743d image: quay.io/openshift/origin-oauth-proxy:latest imageID: quay.io/openshift/origin-oauth-proxy@sha256:40b5c637156b7f8558f33a657bddb683b7a06176e4e48ed97fb6bb8ab8551a3a lastState: {} name: oauth-proxy ready: true resources: {} restartCount: 0 started: true state: running: startedAt: "2026-06-12T00:37:59Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /etc/tls/private name: secret-default-prometheus-proxy-tls - mountPath: /etc/proxy/secrets name: secret-default-session-secret - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-gm7wm readOnly: true recursiveReadOnly: Disabled - containerID: cri-o://220c9f3090c7f27fba41078c49d2e70f2b38be0f9a2a8f35ab694c8c9d37051d image: quay.io/prometheus/prometheus:latest imageID: quay.io/prometheus/prometheus@sha256:69f5241418838263316593f7274a304b095c40bcf22e57272865da91bd60a8ac lastState: {} name: prometheus ready: true resources: {} restartCount: 0 started: true state: running: startedAt: "2026-06-12T00:37:43Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /etc/prometheus/config_out name: config-out readOnly: true recursiveReadOnly: Disabled - mountPath: /etc/prometheus/certs name: tls-assets readOnly: true recursiveReadOnly: Disabled - mountPath: /prometheus name: prometheus-default-db - mountPath: /etc/prometheus/secrets/default-prometheus-proxy-tls name: secret-default-prometheus-proxy-tls readOnly: true recursiveReadOnly: Disabled - mountPath: /etc/prometheus/secrets/default-session-secret name: secret-default-session-secret readOnly: true recursiveReadOnly: Disabled - mountPath: /etc/prometheus/configmaps/serving-certs-ca-bundle name: configmap-serving-certs-ca-bundle readOnly: true recursiveReadOnly: Disabled - mountPath: /etc/prometheus/rules/prometheus-default-rulefiles-0 name: prometheus-default-rulefiles-0 readOnly: true recursiveReadOnly: Disabled - mountPath: /etc/prometheus/rules/prometheus-default-rulefiles-1 name: prometheus-default-rulefiles-1 readOnly: true recursiveReadOnly: Disabled - mountPath: /etc/prometheus/rules/prometheus-default-rulefiles-2 name: prometheus-default-rulefiles-2 readOnly: true recursiveReadOnly: Disabled - mountPath: /etc/prometheus/web_config/web-config.yaml name: web-config readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-gm7wm readOnly: true recursiveReadOnly: Disabled hostIP: 192.168.126.11 hostIPs: - ip: 192.168.126.11 initContainerStatuses: - allocatedResources: cpu: 10m memory: 50Mi containerID: cri-o://726f7c3722eeb5cd86c53c42d62598594055fec4da095566698a95a46ea4b1b7 image: registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:e4412f5688c9725f36d2f566f624d82a1a2a5b957686245fd2defcc39604bdc2 imageID: registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:6280a7d546a3731254a06648cc574a09d2b3453c7bd21a81f5d27c7b4cb4cfad lastState: {} name: init-config-reloader ready: true resources: limits: cpu: 10m memory: 50Mi requests: cpu: 10m memory: 50Mi restartCount: 0 started: false state: terminated: containerID: cri-o://726f7c3722eeb5cd86c53c42d62598594055fec4da095566698a95a46ea4b1b7 exitCode: 0 finishedAt: "2026-06-12T00:37:30Z" reason: Completed startedAt: "2026-06-12T00:37:23Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /etc/prometheus/config name: config - mountPath: /etc/prometheus/config_out name: config-out - mountPath: /etc/prometheus/rules/prometheus-default-rulefiles-0 name: prometheus-default-rulefiles-0 - mountPath: /etc/prometheus/rules/prometheus-default-rulefiles-1 name: prometheus-default-rulefiles-1 - mountPath: /etc/prometheus/rules/prometheus-default-rulefiles-2 name: prometheus-default-rulefiles-2 - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-gm7wm readOnly: true recursiveReadOnly: Disabled phase: Running podIP: 10.217.0.93 podIPs: - ip: 10.217.0.93 qosClass: Burstable startTime: "2026-06-12T00:37:17Z" - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.217.0.87/23"],"mac_address":"0a:58:0a:d9:00:57","gateway_ips":["10.217.0.1"],"routes":[{"dest":"10.217.0.0/22","nextHop":"10.217.0.1"},{"dest":"10.217.4.0/23","nextHop":"10.217.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.217.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.217.0.1"}],"ip_address":"10.217.0.87/23","gateway_ip":"10.217.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.217.0.87" ], "mac": "0a:58:0a:d9:00:57", "default": true, "dns": {} }] openshift.io/build.name: prometheus-webhook-snmp-2 openshift.io/scc: privileged security.openshift.io/validated-scc-subject-type: user creationTimestamp: "2026-06-12T00:35:13Z" generation: 1 labels: openshift.io/build.name: prometheus-webhook-snmp-2 name: prometheus-webhook-snmp-2-build namespace: service-telemetry ownerReferences: - apiVersion: build.openshift.io/v1 controller: true kind: Build name: prometheus-webhook-snmp-2 uid: 39c3ce61-fb93-42a3-8cc1-206e12e94aeb resourceVersion: "47058" uid: 69ee6111-5f9b-4a61-ab13-15fd865f5da5 spec: activeDeadlineSeconds: 604800 containers: - args: - openshift-docker-build - --v=0 env: - name: BUILD value: | {"kind":"Build","apiVersion":"build.openshift.io/v1","metadata":{"name":"prometheus-webhook-snmp-2","namespace":"service-telemetry","uid":"39c3ce61-fb93-42a3-8cc1-206e12e94aeb","resourceVersion":"46842","generation":1,"creationTimestamp":"2026-06-12T00:35:13Z","labels":{"build":"prometheus-webhook-snmp","buildconfig":"prometheus-webhook-snmp","openshift.io/build-config.name":"prometheus-webhook-snmp","openshift.io/build.start-policy":"Serial"},"annotations":{"openshift.io/build-config.name":"prometheus-webhook-snmp","openshift.io/build.number":"2"},"ownerReferences":[{"apiVersion":"build.openshift.io/v1","kind":"BuildConfig","name":"prometheus-webhook-snmp","uid":"a4e172bd-3a10-43c8-8f3f-2cb8cca83b1a","controller":true}],"managedFields":[{"manager":"openshift-apiserver","operation":"Update","apiVersion":"build.openshift.io/v1","time":"2026-06-12T00:35:13Z","fieldsType":"FieldsV1","fieldsV1":{"f:metadata":{"f:annotations":{".":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.number":{}},"f:labels":{".":{},"f:build":{},"f:buildconfig":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.start-policy":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"a4e172bd-3a10-43c8-8f3f-2cb8cca83b1a\"}":{}}},"f:spec":{"f:output":{"f:to":{}},"f:revision":{".":{},"f:git":{".":{},"f:author":{".":{},"f:email":{},"f:name":{}},"f:commit":{},"f:committer":{".":{},"f:email":{},"f:name":{}},"f:message":{}},"f:type":{}},"f:serviceAccount":{},"f:source":{"f:binary":{},"f:dockerfile":{},"f:type":{}},"f:strategy":{"f:dockerStrategy":{".":{},"f:from":{}},"f:type":{}}},"f:status":{"f:conditions":{".":{},"k:{\"type\":\"New\"}":{".":{},"f:lastTransitionTime":{},"f:lastUpdateTime":{},"f:status":{},"f:type":{}}},"f:config":{},"f:phase":{}}}}]},"spec":{"serviceAccount":"builder","source":{"type":"Binary","binary":{},"dockerfile":"FROM registry.access.redhat.com/ubi9:latest\n\n# \u003e\u003e ignore SC2086 because passing quoted env vars to dnf causes issues (fail to install)\n# hadolint ignore=SC2086\nRUN INSTALL_PKGS=\"\\\n procps-ng \\\n lsof \\\n python3 \\\n python3-devel \\\n gcc \\\n \" \u0026\u0026 \\\n dnf -y --setopt=tsflags=nodocs --setopt=skip_missing_names_on_install=False install $INSTALL_PKGS \u0026\u0026 \\\n dnf -y clean all\n\nCOPY . /source/app\nWORKDIR /source/app\n\nRUN python3 -m pip install --no-cache-dir -r requirements-build.txt \u0026\u0026 \\\n python3 -m pip install --no-cache-dir . \u0026\u0026 \\\n python3 -m pip freeze\n\n# Cleanup\n# \u003e\u003e ignore SC2086 because passing quoted env vars to dnf causes issues (fail to install)\n# hadolint ignore=SC2086\nRUN UNINSTALL_PKGS=\"\\\n gcc \\\n \" \u0026\u0026 \\\n dnf remove -y $UNINSTALL_PKGS \u0026\u0026 \\\n dnf -y clean all\n\nENV SNMP_COMMUNITY=\"public\"\nENV SNMP_PORT=162\nENV SNMP_HOST=\"localhost\"\nENV SNMP_RETRIES=5\nENV SNMP_TIMEOUT=1\nENV ALERT_OID_LABEL=\"oid\"\nENV TRAP_OID_PREFIX=\"1.3.6.1.4.1.50495.15\"\nENV TRAP_DEFAULT_OID=\"1.3.6.1.4.1.50495.15.1.2.1\"\nENV TRAP_DEFAULT_SEVERITY=\"\"\n\nEXPOSE 9099\n\nCMD [\"sh\", \"-c\", \"/usr/local/bin/prometheus-webhook-snmp --debug --snmp-port=\\\"${SNMP_PORT}\\\" --snmp-host=\\\"${SNMP_HOST}\\\" --snmp-community=\\\"${SNMP_COMMUNITY}\\\" --snmp-retries=\\\"${SNMP_RETRIES}\\\" --snmp-timeout=\\\"${SNMP_TIMEOUT}\\\" --alert-oid-label=\\\"${ALERT_OID_LABEL}\\\" --trap-oid-prefix=\\\"${TRAP_OID_PREFIX}\\\" --trap-default-oid=\\\"${TRAP_DEFAULT_OID}\\\" --trap-default-severity=\\\"${TRAP_DEFAULT_SEVERITY}\\\" run\"]\n"},"revision":{"type":"Git","git":{"commit":"a382dfcf05269455784beee6d21dd8ad058d4e19","author":{"name":"Victoria Martinez de la Cruz","email":"victoria@redhat.com"},"committer":{"name":"GitHub","email":"noreply@github.com"},"message":"Update requirements and requirements-build with security fixes (#57) (#59)\n\nSecurity fixes:\n- https://github.com/advisories/GHSA-8rrh-rw8j-w5fx: wheel 0.45.1 to 0.47.0 (file permission vulnerability)\n- https://github.com/advisories/GHSA-jr27-m4p2-rc6r: pyasn1 0.6.0 to 0.6.3 (pyasn1 vulnerable to DoS via unbounded recursion)\n\nSteps to regenerate requirements files:\n1. pip-compile requirements.in -o requirements.txt --allow-unsafe\n2. pybuild-deps compile requirements.txt -o requirements-build.in --annotate\n3. Find duplicate packages in requirements-build.in, keep latest version, comment out older ones\n and add them to requirements-build-duplicates.txt\n4. pip-compile requirements-build.in -o requirements-build.txt --allow-unsafe\n\nCloses-Bug: https://redhat.atlassian.net/browse/OSPRH-27892\nCloses-Bug: https://redhat.atlassian.net/browse/OSPRH-25594\n(cherry picked from commit 6589d01c344240b2ab7ed068ef5cae38e9e5a495)"}},"strategy":{"type":"Docker","dockerStrategy":{"from":{"kind":"DockerImage","name":"registry.access.redhat.com/ubi9@sha256:c628b778d487286b5e718e23e14c23f60b9b44cd20e7e69050ef59e655625630"},"pullSecret":{"name":"builder-dockercfg-5x6sr"}}},"output":{"to":{"kind":"DockerImage","name":"image-registry.openshift-image-registry.svc:5000/service-telemetry/prometheus-webhook-snmp:latest"},"pushSecret":{"name":"builder-dockercfg-5x6sr"}},"resources":{},"postCommit":{},"nodeSelector":null},"status":{"phase":"New","outputDockerImageReference":"image-registry.openshift-image-registry.svc:5000/service-telemetry/prometheus-webhook-snmp:latest","config":{"kind":"BuildConfig","namespace":"service-telemetry","name":"prometheus-webhook-snmp"},"output":{},"conditions":[{"type":"New","status":"True","lastUpdateTime":"2026-06-12T00:35:13Z","lastTransitionTime":"2026-06-12T00:35:13Z"}]}} - name: LANG value: C.utf8 - name: PUSH_DOCKERCFG_PATH value: /var/run/secrets/openshift.io/push - name: PULL_DOCKERCFG_PATH value: /var/run/secrets/openshift.io/pull - name: BUILD_REGISTRIES_CONF_PATH value: /var/run/configs/openshift.io/build-system/registries.conf - name: BUILD_REGISTRIES_DIR_PATH value: /var/run/configs/openshift.io/build-system/registries.d - name: BUILD_SIGNATURE_POLICY_PATH value: /var/run/configs/openshift.io/build-system/policy.json - name: BUILD_STORAGE_CONF_PATH value: /var/run/configs/openshift.io/build-system/storage.conf - name: BUILD_BLOBCACHE_DIR value: /var/cache/blobs image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imagePullPolicy: IfNotPresent name: docker-build resources: {} securityContext: privileged: true runAsGroup: 0 runAsUser: 0 seccompProfile: type: Unconfined terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /var/lib/kubelet/config.json name: node-pullsecrets readOnly: true - mountPath: /tmp/build name: buildworkdir - mountPath: /var/lib/containers/cache name: buildcachedir - mountPath: /var/run/secrets/openshift.io/push name: builder-dockercfg-5x6sr-push readOnly: true - mountPath: /var/run/secrets/openshift.io/pull name: builder-dockercfg-5x6sr-pull readOnly: true - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/lib/containers name: container-storage-root - mountPath: /var/run/containers name: container-storage-run - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-zwknt readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: builder-dockercfg-5x6sr initContainers: - args: - openshift-git-clone - --v=0 env: - name: BUILD value: | {"kind":"Build","apiVersion":"build.openshift.io/v1","metadata":{"name":"prometheus-webhook-snmp-2","namespace":"service-telemetry","uid":"39c3ce61-fb93-42a3-8cc1-206e12e94aeb","resourceVersion":"46842","generation":1,"creationTimestamp":"2026-06-12T00:35:13Z","labels":{"build":"prometheus-webhook-snmp","buildconfig":"prometheus-webhook-snmp","openshift.io/build-config.name":"prometheus-webhook-snmp","openshift.io/build.start-policy":"Serial"},"annotations":{"openshift.io/build-config.name":"prometheus-webhook-snmp","openshift.io/build.number":"2"},"ownerReferences":[{"apiVersion":"build.openshift.io/v1","kind":"BuildConfig","name":"prometheus-webhook-snmp","uid":"a4e172bd-3a10-43c8-8f3f-2cb8cca83b1a","controller":true}],"managedFields":[{"manager":"openshift-apiserver","operation":"Update","apiVersion":"build.openshift.io/v1","time":"2026-06-12T00:35:13Z","fieldsType":"FieldsV1","fieldsV1":{"f:metadata":{"f:annotations":{".":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.number":{}},"f:labels":{".":{},"f:build":{},"f:buildconfig":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.start-policy":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"a4e172bd-3a10-43c8-8f3f-2cb8cca83b1a\"}":{}}},"f:spec":{"f:output":{"f:to":{}},"f:revision":{".":{},"f:git":{".":{},"f:author":{".":{},"f:email":{},"f:name":{}},"f:commit":{},"f:committer":{".":{},"f:email":{},"f:name":{}},"f:message":{}},"f:type":{}},"f:serviceAccount":{},"f:source":{"f:binary":{},"f:dockerfile":{},"f:type":{}},"f:strategy":{"f:dockerStrategy":{".":{},"f:from":{}},"f:type":{}}},"f:status":{"f:conditions":{".":{},"k:{\"type\":\"New\"}":{".":{},"f:lastTransitionTime":{},"f:lastUpdateTime":{},"f:status":{},"f:type":{}}},"f:config":{},"f:phase":{}}}}]},"spec":{"serviceAccount":"builder","source":{"type":"Binary","binary":{},"dockerfile":"FROM registry.access.redhat.com/ubi9:latest\n\n# \u003e\u003e ignore SC2086 because passing quoted env vars to dnf causes issues (fail to install)\n# hadolint ignore=SC2086\nRUN INSTALL_PKGS=\"\\\n procps-ng \\\n lsof \\\n python3 \\\n python3-devel \\\n gcc \\\n \" \u0026\u0026 \\\n dnf -y --setopt=tsflags=nodocs --setopt=skip_missing_names_on_install=False install $INSTALL_PKGS \u0026\u0026 \\\n dnf -y clean all\n\nCOPY . /source/app\nWORKDIR /source/app\n\nRUN python3 -m pip install --no-cache-dir -r requirements-build.txt \u0026\u0026 \\\n python3 -m pip install --no-cache-dir . \u0026\u0026 \\\n python3 -m pip freeze\n\n# Cleanup\n# \u003e\u003e ignore SC2086 because passing quoted env vars to dnf causes issues (fail to install)\n# hadolint ignore=SC2086\nRUN UNINSTALL_PKGS=\"\\\n gcc \\\n \" \u0026\u0026 \\\n dnf remove -y $UNINSTALL_PKGS \u0026\u0026 \\\n dnf -y clean all\n\nENV SNMP_COMMUNITY=\"public\"\nENV SNMP_PORT=162\nENV SNMP_HOST=\"localhost\"\nENV SNMP_RETRIES=5\nENV SNMP_TIMEOUT=1\nENV ALERT_OID_LABEL=\"oid\"\nENV TRAP_OID_PREFIX=\"1.3.6.1.4.1.50495.15\"\nENV TRAP_DEFAULT_OID=\"1.3.6.1.4.1.50495.15.1.2.1\"\nENV TRAP_DEFAULT_SEVERITY=\"\"\n\nEXPOSE 9099\n\nCMD [\"sh\", \"-c\", \"/usr/local/bin/prometheus-webhook-snmp --debug --snmp-port=\\\"${SNMP_PORT}\\\" --snmp-host=\\\"${SNMP_HOST}\\\" --snmp-community=\\\"${SNMP_COMMUNITY}\\\" --snmp-retries=\\\"${SNMP_RETRIES}\\\" --snmp-timeout=\\\"${SNMP_TIMEOUT}\\\" --alert-oid-label=\\\"${ALERT_OID_LABEL}\\\" --trap-oid-prefix=\\\"${TRAP_OID_PREFIX}\\\" --trap-default-oid=\\\"${TRAP_DEFAULT_OID}\\\" --trap-default-severity=\\\"${TRAP_DEFAULT_SEVERITY}\\\" run\"]\n"},"revision":{"type":"Git","git":{"commit":"a382dfcf05269455784beee6d21dd8ad058d4e19","author":{"name":"Victoria Martinez de la Cruz","email":"victoria@redhat.com"},"committer":{"name":"GitHub","email":"noreply@github.com"},"message":"Update requirements and requirements-build with security fixes (#57) (#59)\n\nSecurity fixes:\n- https://github.com/advisories/GHSA-8rrh-rw8j-w5fx: wheel 0.45.1 to 0.47.0 (file permission vulnerability)\n- https://github.com/advisories/GHSA-jr27-m4p2-rc6r: pyasn1 0.6.0 to 0.6.3 (pyasn1 vulnerable to DoS via unbounded recursion)\n\nSteps to regenerate requirements files:\n1. pip-compile requirements.in -o requirements.txt --allow-unsafe\n2. pybuild-deps compile requirements.txt -o requirements-build.in --annotate\n3. Find duplicate packages in requirements-build.in, keep latest version, comment out older ones\n and add them to requirements-build-duplicates.txt\n4. pip-compile requirements-build.in -o requirements-build.txt --allow-unsafe\n\nCloses-Bug: https://redhat.atlassian.net/browse/OSPRH-27892\nCloses-Bug: https://redhat.atlassian.net/browse/OSPRH-25594\n(cherry picked from commit 6589d01c344240b2ab7ed068ef5cae38e9e5a495)"}},"strategy":{"type":"Docker","dockerStrategy":{"from":{"kind":"DockerImage","name":"registry.access.redhat.com/ubi9@sha256:c628b778d487286b5e718e23e14c23f60b9b44cd20e7e69050ef59e655625630"},"pullSecret":{"name":"builder-dockercfg-5x6sr"}}},"output":{"to":{"kind":"DockerImage","name":"image-registry.openshift-image-registry.svc:5000/service-telemetry/prometheus-webhook-snmp:latest"},"pushSecret":{"name":"builder-dockercfg-5x6sr"}},"resources":{},"postCommit":{},"nodeSelector":null},"status":{"phase":"New","outputDockerImageReference":"image-registry.openshift-image-registry.svc:5000/service-telemetry/prometheus-webhook-snmp:latest","config":{"kind":"BuildConfig","namespace":"service-telemetry","name":"prometheus-webhook-snmp"},"output":{},"conditions":[{"type":"New","status":"True","lastUpdateTime":"2026-06-12T00:35:13Z","lastTransitionTime":"2026-06-12T00:35:13Z"}]}} - name: LANG value: C.utf8 - name: BUILD_REGISTRIES_CONF_PATH value: /var/run/configs/openshift.io/build-system/registries.conf - name: BUILD_REGISTRIES_DIR_PATH value: /var/run/configs/openshift.io/build-system/registries.d - name: BUILD_SIGNATURE_POLICY_PATH value: /var/run/configs/openshift.io/build-system/policy.json - name: BUILD_STORAGE_CONF_PATH value: /var/run/configs/openshift.io/build-system/storage.conf - name: BUILD_BLOBCACHE_DIR value: /var/cache/blobs image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imagePullPolicy: IfNotPresent name: git-clone resources: {} securityContext: capabilities: add: - CHOWN - DAC_OVERRIDE drop: - ALL privileged: false runAsGroup: 0 runAsNonRoot: false runAsUser: 0 seccompProfile: type: RuntimeDefault stdin: true stdinOnce: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /tmp/build name: buildworkdir - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-zwknt readOnly: true - args: - openshift-manage-dockerfile - --v=0 env: - name: BUILD value: | {"kind":"Build","apiVersion":"build.openshift.io/v1","metadata":{"name":"prometheus-webhook-snmp-2","namespace":"service-telemetry","uid":"39c3ce61-fb93-42a3-8cc1-206e12e94aeb","resourceVersion":"46842","generation":1,"creationTimestamp":"2026-06-12T00:35:13Z","labels":{"build":"prometheus-webhook-snmp","buildconfig":"prometheus-webhook-snmp","openshift.io/build-config.name":"prometheus-webhook-snmp","openshift.io/build.start-policy":"Serial"},"annotations":{"openshift.io/build-config.name":"prometheus-webhook-snmp","openshift.io/build.number":"2"},"ownerReferences":[{"apiVersion":"build.openshift.io/v1","kind":"BuildConfig","name":"prometheus-webhook-snmp","uid":"a4e172bd-3a10-43c8-8f3f-2cb8cca83b1a","controller":true}],"managedFields":[{"manager":"openshift-apiserver","operation":"Update","apiVersion":"build.openshift.io/v1","time":"2026-06-12T00:35:13Z","fieldsType":"FieldsV1","fieldsV1":{"f:metadata":{"f:annotations":{".":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.number":{}},"f:labels":{".":{},"f:build":{},"f:buildconfig":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.start-policy":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"a4e172bd-3a10-43c8-8f3f-2cb8cca83b1a\"}":{}}},"f:spec":{"f:output":{"f:to":{}},"f:revision":{".":{},"f:git":{".":{},"f:author":{".":{},"f:email":{},"f:name":{}},"f:commit":{},"f:committer":{".":{},"f:email":{},"f:name":{}},"f:message":{}},"f:type":{}},"f:serviceAccount":{},"f:source":{"f:binary":{},"f:dockerfile":{},"f:type":{}},"f:strategy":{"f:dockerStrategy":{".":{},"f:from":{}},"f:type":{}}},"f:status":{"f:conditions":{".":{},"k:{\"type\":\"New\"}":{".":{},"f:lastTransitionTime":{},"f:lastUpdateTime":{},"f:status":{},"f:type":{}}},"f:config":{},"f:phase":{}}}}]},"spec":{"serviceAccount":"builder","source":{"type":"Binary","binary":{},"dockerfile":"FROM registry.access.redhat.com/ubi9:latest\n\n# \u003e\u003e ignore SC2086 because passing quoted env vars to dnf causes issues (fail to install)\n# hadolint ignore=SC2086\nRUN INSTALL_PKGS=\"\\\n procps-ng \\\n lsof \\\n python3 \\\n python3-devel \\\n gcc \\\n \" \u0026\u0026 \\\n dnf -y --setopt=tsflags=nodocs --setopt=skip_missing_names_on_install=False install $INSTALL_PKGS \u0026\u0026 \\\n dnf -y clean all\n\nCOPY . /source/app\nWORKDIR /source/app\n\nRUN python3 -m pip install --no-cache-dir -r requirements-build.txt \u0026\u0026 \\\n python3 -m pip install --no-cache-dir . \u0026\u0026 \\\n python3 -m pip freeze\n\n# Cleanup\n# \u003e\u003e ignore SC2086 because passing quoted env vars to dnf causes issues (fail to install)\n# hadolint ignore=SC2086\nRUN UNINSTALL_PKGS=\"\\\n gcc \\\n \" \u0026\u0026 \\\n dnf remove -y $UNINSTALL_PKGS \u0026\u0026 \\\n dnf -y clean all\n\nENV SNMP_COMMUNITY=\"public\"\nENV SNMP_PORT=162\nENV SNMP_HOST=\"localhost\"\nENV SNMP_RETRIES=5\nENV SNMP_TIMEOUT=1\nENV ALERT_OID_LABEL=\"oid\"\nENV TRAP_OID_PREFIX=\"1.3.6.1.4.1.50495.15\"\nENV TRAP_DEFAULT_OID=\"1.3.6.1.4.1.50495.15.1.2.1\"\nENV TRAP_DEFAULT_SEVERITY=\"\"\n\nEXPOSE 9099\n\nCMD [\"sh\", \"-c\", \"/usr/local/bin/prometheus-webhook-snmp --debug --snmp-port=\\\"${SNMP_PORT}\\\" --snmp-host=\\\"${SNMP_HOST}\\\" --snmp-community=\\\"${SNMP_COMMUNITY}\\\" --snmp-retries=\\\"${SNMP_RETRIES}\\\" --snmp-timeout=\\\"${SNMP_TIMEOUT}\\\" --alert-oid-label=\\\"${ALERT_OID_LABEL}\\\" --trap-oid-prefix=\\\"${TRAP_OID_PREFIX}\\\" --trap-default-oid=\\\"${TRAP_DEFAULT_OID}\\\" --trap-default-severity=\\\"${TRAP_DEFAULT_SEVERITY}\\\" run\"]\n"},"revision":{"type":"Git","git":{"commit":"a382dfcf05269455784beee6d21dd8ad058d4e19","author":{"name":"Victoria Martinez de la Cruz","email":"victoria@redhat.com"},"committer":{"name":"GitHub","email":"noreply@github.com"},"message":"Update requirements and requirements-build with security fixes (#57) (#59)\n\nSecurity fixes:\n- https://github.com/advisories/GHSA-8rrh-rw8j-w5fx: wheel 0.45.1 to 0.47.0 (file permission vulnerability)\n- https://github.com/advisories/GHSA-jr27-m4p2-rc6r: pyasn1 0.6.0 to 0.6.3 (pyasn1 vulnerable to DoS via unbounded recursion)\n\nSteps to regenerate requirements files:\n1. pip-compile requirements.in -o requirements.txt --allow-unsafe\n2. pybuild-deps compile requirements.txt -o requirements-build.in --annotate\n3. Find duplicate packages in requirements-build.in, keep latest version, comment out older ones\n and add them to requirements-build-duplicates.txt\n4. pip-compile requirements-build.in -o requirements-build.txt --allow-unsafe\n\nCloses-Bug: https://redhat.atlassian.net/browse/OSPRH-27892\nCloses-Bug: https://redhat.atlassian.net/browse/OSPRH-25594\n(cherry picked from commit 6589d01c344240b2ab7ed068ef5cae38e9e5a495)"}},"strategy":{"type":"Docker","dockerStrategy":{"from":{"kind":"DockerImage","name":"registry.access.redhat.com/ubi9@sha256:c628b778d487286b5e718e23e14c23f60b9b44cd20e7e69050ef59e655625630"},"pullSecret":{"name":"builder-dockercfg-5x6sr"}}},"output":{"to":{"kind":"DockerImage","name":"image-registry.openshift-image-registry.svc:5000/service-telemetry/prometheus-webhook-snmp:latest"},"pushSecret":{"name":"builder-dockercfg-5x6sr"}},"resources":{},"postCommit":{},"nodeSelector":null},"status":{"phase":"New","outputDockerImageReference":"image-registry.openshift-image-registry.svc:5000/service-telemetry/prometheus-webhook-snmp:latest","config":{"kind":"BuildConfig","namespace":"service-telemetry","name":"prometheus-webhook-snmp"},"output":{},"conditions":[{"type":"New","status":"True","lastUpdateTime":"2026-06-12T00:35:13Z","lastTransitionTime":"2026-06-12T00:35:13Z"}]}} - name: LANG value: C.utf8 - name: BUILD_REGISTRIES_CONF_PATH value: /var/run/configs/openshift.io/build-system/registries.conf - name: BUILD_REGISTRIES_DIR_PATH value: /var/run/configs/openshift.io/build-system/registries.d - name: BUILD_SIGNATURE_POLICY_PATH value: /var/run/configs/openshift.io/build-system/policy.json - name: BUILD_STORAGE_CONF_PATH value: /var/run/configs/openshift.io/build-system/storage.conf - name: BUILD_BLOBCACHE_DIR value: /var/cache/blobs image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imagePullPolicy: IfNotPresent name: manage-dockerfile resources: {} securityContext: capabilities: add: - CHOWN - DAC_OVERRIDE drop: - ALL privileged: false runAsGroup: 0 runAsNonRoot: false runAsUser: 0 seccompProfile: type: RuntimeDefault terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /tmp/build name: buildworkdir - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-zwknt readOnly: true nodeName: crc nodeSelector: kubernetes.io/os: linux preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Never schedulerName: default-scheduler securityContext: {} serviceAccount: builder serviceAccountName: builder terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - hostPath: path: /var/lib/containers/cache type: "" name: buildcachedir - emptyDir: {} name: buildworkdir - hostPath: path: /var/lib/kubelet/config.json type: File name: node-pullsecrets - name: builder-dockercfg-5x6sr-push secret: defaultMode: 384 secretName: builder-dockercfg-5x6sr - name: builder-dockercfg-5x6sr-pull secret: defaultMode: 384 secretName: builder-dockercfg-5x6sr - configMap: defaultMode: 420 name: prometheus-webhook-snmp-2-sys-config name: build-system-configs - configMap: defaultMode: 420 items: - key: service-ca.crt path: certs.d/image-registry.openshift-image-registry.svc:5000/ca.crt - key: default-route-openshift-image-registry.apps-crc.testing path: certs.d/default-route-openshift-image-registry.apps-crc.testing/ca.crt name: prometheus-webhook-snmp-2-ca name: build-ca-bundles - configMap: defaultMode: 420 items: - key: ca-bundle.crt path: tls-ca-bundle.pem name: prometheus-webhook-snmp-2-global-ca name: build-proxy-ca-bundles - emptyDir: {} name: container-storage-root - emptyDir: {} name: container-storage-run - emptyDir: {} name: build-blob-cache - name: kube-api-access-zwknt projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-12T00:36:15Z" status: "False" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-12T00:35:17Z" reason: PodCompleted status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-12T00:36:13Z" reason: PodCompleted status: "False" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-12T00:36:13Z" reason: PodCompleted status: "False" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-12T00:35:13Z" status: "True" type: PodScheduled containerStatuses: - containerID: cri-o://c0821ec8a5a41d2515db581f91410eba3ea8cafa426b6e034e409df3d6c04c92 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 lastState: {} name: docker-build ready: false resources: {} restartCount: 0 started: false state: terminated: containerID: cri-o://c0821ec8a5a41d2515db581f91410eba3ea8cafa426b6e034e409df3d6c04c92 exitCode: 0 finishedAt: "2026-06-12T00:36:13Z" reason: Completed startedAt: "2026-06-12T00:35:17Z" user: linux: gid: 0 supplementalGroups: - 0 uid: 0 volumeMounts: - mountPath: /var/lib/kubelet/config.json name: node-pullsecrets readOnly: true recursiveReadOnly: Disabled - mountPath: /tmp/build name: buildworkdir - mountPath: /var/lib/containers/cache name: buildcachedir - mountPath: /var/run/secrets/openshift.io/push name: builder-dockercfg-5x6sr-push readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/secrets/openshift.io/pull name: builder-dockercfg-5x6sr-pull readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/lib/containers name: container-storage-root - mountPath: /var/run/containers name: container-storage-run - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-zwknt readOnly: true recursiveReadOnly: Disabled hostIP: 192.168.126.11 hostIPs: - ip: 192.168.126.11 initContainerStatuses: - containerID: cri-o://d8464fe3d1ce4d56e4f7bccc089cf21e35a69b3a4154c2bff2fd18ac5997b89e image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 lastState: {} name: git-clone ready: true resources: {} restartCount: 0 started: false state: terminated: containerID: cri-o://d8464fe3d1ce4d56e4f7bccc089cf21e35a69b3a4154c2bff2fd18ac5997b89e exitCode: 0 finishedAt: "2026-06-12T00:35:15Z" reason: Completed startedAt: "2026-06-12T00:35:14Z" user: linux: gid: 0 supplementalGroups: - 0 uid: 0 volumeMounts: - mountPath: /tmp/build name: buildworkdir - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-zwknt readOnly: true recursiveReadOnly: Disabled - containerID: cri-o://dca69b9dd9576b4d4c26ab6dccd8dfc71bb51a5905e39f4df31c022d5ddcaf2e image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 lastState: {} name: manage-dockerfile ready: true resources: {} restartCount: 0 started: false state: terminated: containerID: cri-o://dca69b9dd9576b4d4c26ab6dccd8dfc71bb51a5905e39f4df31c022d5ddcaf2e exitCode: 0 finishedAt: "2026-06-12T00:35:16Z" reason: Completed startedAt: "2026-06-12T00:35:16Z" user: linux: gid: 0 supplementalGroups: - 0 uid: 0 volumeMounts: - mountPath: /tmp/build name: buildworkdir - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-zwknt readOnly: true recursiveReadOnly: Disabled phase: Succeeded podIP: 10.217.0.87 podIPs: - ip: 10.217.0.87 qosClass: BestEffort startTime: "2026-06-12T00:35:13Z" - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.217.0.103/23"],"mac_address":"0a:58:0a:d9:00:67","gateway_ips":["10.217.0.1"],"routes":[{"dest":"10.217.0.0/22","nextHop":"10.217.0.1"},{"dest":"10.217.4.0/23","nextHop":"10.217.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.217.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.217.0.1"}],"ip_address":"10.217.0.103/23","gateway_ip":"10.217.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.217.0.103" ], "mac": "0a:58:0a:d9:00:67", "default": true, "dns": {} }] openshift.io/scc: anyuid security.openshift.io/validated-scc-subject-type: user creationTimestamp: "2026-06-12T00:38:17Z" generation: 1 labels: qdr: qdr-test name: qdr-test namespace: service-telemetry resourceVersion: "48433" uid: 79b34700-5f11-492c-a2b2-791d265c4d0c spec: containers: - command: - /usr/sbin/qdrouterd - -c - /etc/qpid-dispatch/qdrouterd.conf image: quay.io/tripleowallabycentos9/openstack-qdrouterd:current-tripleo imagePullPolicy: IfNotPresent name: qdr ports: - containerPort: 5672 name: amqp protocol: TCP resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL - MKNOD terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/pki/tls/certs/ name: default-interconnect-selfsigned-cert - mountPath: /etc/qpid-dispatch/ name: qdr-test-config - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-55j97 readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: default-dockercfg-rsb7q nodeName: crc preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: seLinuxOptions: level: s0:c26,c10 serviceAccount: default serviceAccountName: default terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - name: default-interconnect-selfsigned-cert secret: defaultMode: 420 secretName: default-interconnect-selfsigned - configMap: defaultMode: 420 name: qdr-test-config name: qdr-test-config - name: kube-api-access-55j97 projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:29Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:17Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:29Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:29Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:17Z" status: "True" type: PodScheduled containerStatuses: - containerID: cri-o://62a71d97b120344d2836425ee6bfccf6067cb884f38397e173c9baeeb9c538a9 image: quay.io/tripleowallabycentos9/openstack-qdrouterd:current-tripleo imageID: quay.io/tripleowallabycentos9/openstack-qdrouterd@sha256:79a6221bcd066540937e3d5b2c0fdc3c917ba293f44b3ba85dba269245d33902 lastState: {} name: qdr ready: true resources: {} restartCount: 0 started: true state: running: startedAt: "2026-06-12T00:38:29Z" user: linux: gid: 42465 supplementalGroups: - 42465 - 42400 uid: 42465 volumeMounts: - mountPath: /etc/pki/tls/certs/ name: default-interconnect-selfsigned-cert - mountPath: /etc/qpid-dispatch/ name: qdr-test-config - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-55j97 readOnly: true recursiveReadOnly: Disabled hostIP: 192.168.126.11 hostIPs: - ip: 192.168.126.11 phase: Running podIP: 10.217.0.103 podIPs: - ip: 10.217.0.103 qosClass: BestEffort startTime: "2026-06-12T00:38:17Z" - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.217.0.65/23"],"mac_address":"0a:58:0a:d9:00:41","gateway_ips":["10.217.0.1"],"routes":[{"dest":"10.217.0.0/22","nextHop":"10.217.0.1"},{"dest":"10.217.4.0/23","nextHop":"10.217.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.217.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.217.0.1"}],"ip_address":"10.217.0.65/23","gateway_ip":"10.217.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.217.0.65" ], "mac": "0a:58:0a:d9:00:41", "default": true, "dns": {} }] openshift.io/build.name: service-telemetry-operator-2 openshift.io/scc: privileged security.openshift.io/validated-scc-subject-type: user creationTimestamp: "2026-06-12T00:26:15Z" generation: 1 labels: openshift.io/build.name: service-telemetry-operator-2 name: service-telemetry-operator-2-build namespace: service-telemetry ownerReferences: - apiVersion: build.openshift.io/v1 controller: true kind: Build name: service-telemetry-operator-2 uid: 6e681c5b-ca44-4ab7-92bb-39aa1b8a5dbe resourceVersion: "45513" uid: 15f23af9-8b75-428a-a0d8-ff4f3de928af spec: activeDeadlineSeconds: 604800 containers: - args: - openshift-docker-build - --v=0 env: - name: BUILD value: | {"kind":"Build","apiVersion":"build.openshift.io/v1","metadata":{"name":"service-telemetry-operator-2","namespace":"service-telemetry","uid":"6e681c5b-ca44-4ab7-92bb-39aa1b8a5dbe","resourceVersion":"45173","generation":1,"creationTimestamp":"2026-06-12T00:26:15Z","labels":{"build":"service-telemetry-operator","buildconfig":"service-telemetry-operator","openshift.io/build-config.name":"service-telemetry-operator","openshift.io/build.start-policy":"Serial"},"annotations":{"openshift.io/build-config.name":"service-telemetry-operator","openshift.io/build.number":"2"},"ownerReferences":[{"apiVersion":"build.openshift.io/v1","kind":"BuildConfig","name":"service-telemetry-operator","uid":"6917691c-a82d-4eb3-8fc1-6e4e79fa628c","controller":true}],"managedFields":[{"manager":"openshift-apiserver","operation":"Update","apiVersion":"build.openshift.io/v1","time":"2026-06-12T00:26:15Z","fieldsType":"FieldsV1","fieldsV1":{"f:metadata":{"f:annotations":{".":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.number":{}},"f:labels":{".":{},"f:build":{},"f:buildconfig":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.start-policy":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"6917691c-a82d-4eb3-8fc1-6e4e79fa628c\"}":{}}},"f:spec":{"f:output":{"f:to":{}},"f:revision":{".":{},"f:git":{".":{},"f:author":{".":{},"f:email":{},"f:name":{}},"f:commit":{},"f:committer":{".":{},"f:email":{},"f:name":{}},"f:message":{}},"f:type":{}},"f:serviceAccount":{},"f:source":{"f:binary":{},"f:dockerfile":{},"f:type":{}},"f:strategy":{"f:dockerStrategy":{".":{},"f:from":{}},"f:type":{}}},"f:status":{"f:conditions":{".":{},"k:{\"type\":\"New\"}":{".":{},"f:lastTransitionTime":{},"f:lastUpdateTime":{},"f:status":{},"f:type":{}}},"f:config":{},"f:phase":{}}}}]},"spec":{"serviceAccount":"builder","source":{"type":"Binary","binary":{},"dockerfile":"FROM quay.io/operator-framework/ansible-operator:v1.38.1\n\n# temporarily switch to root user to adjust image layers\nUSER 0\n# Upstream CI builds need the additional EPEL sources for python3-passlib and python3-bcrypt but have no working repos to install epel-release\n# NO_PROXY is undefined in upstream CI builds, but defined (usually blank) during openshift builds (a possibly brittle hack)\nRUN bash -c -- 'if [ \"${NO_PROXY:-__ZZZZZ}\" == \"__ZZZZZ\" ]; then echo \"Applying upstream EPEL hacks\" \u0026\u0026 echo -e \"-----BEGIN PGP PUBLIC KEY BLOCK-----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\\nVL469Kj5m13T6w==\\n=Mjs/\\n-----END PGP PUBLIC KEY BLOCK-----\" \u003e /etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-9 \u0026\u0026 echo -e \"[epel]\\nname=Extra Packages for Enterprise Linux 9 - \\$basearch\\nmetalink=https://mirrors.fedoraproject.org/metalink?repo=epel-9\u0026arch=\\$basearch\u0026infra=\\$infra\u0026content=\\$contentdir\\nenabled=1\\ngpgcheck=1\\ngpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-9\" \u003e /etc/yum.repos.d/epel.repo; fi'\n\n# update the base image to allow forward-looking optimistic updates during the testing phase, with the added benefit of helping move closer to passing security scans.\n# -- excludes ansible so it remains at 2.9 tag as shipped with the base image\n# -- installs python3-passlib and python3-bcrypt for oauth-proxy interface\n# -- cleans up the cached data from dnf to keep the image as small as possible\nRUN dnf update -y --exclude=ansible* \u0026\u0026 dnf install -y python3-passlib python3-bcrypt \u0026\u0026 dnf clean all \u0026\u0026 rm -rf /var/cache/dnf\n\nCOPY requirements.yml ${HOME}/requirements.yml\nRUN ansible-galaxy collection install -r ${HOME}/requirements.yml \\\n \u0026\u0026 chmod -R ug+rwx ${HOME}/.ansible\n\n# switch back to user 1001 when running the base image (non-root)\nUSER 1001\n\n# copy in required artifacts for the operator\nCOPY watches.yaml ${HOME}/watches.yaml\nCOPY roles/ ${HOME}/roles/\n"},"revision":{"type":"Git","git":{"commit":"4d3f124e0a5f23ffbf6f34769e817a6b45694b73","author":{"name":"Daniel Pawlik","email":"3049495+danpawlik@users.noreply.github.com"},"committer":{"name":"GitHub","email":"noreply@github.com"},"message":"Wait a while for OpenShift API server to apply last changes (#712)\n\nIn some corner cases, when infrastructure might be overloaded, the\nOpenShift API is not restarted immediately, but it is done after\na while. From basic check on failing job, it happens from up to 90 seconds.\nMaking condition that would watch on OpenShift API server that has been\nfinally changed state to to terminating then back to active might be\na good alternative here, but can also impact future job if such restart\nis not needed.\n\nAlso remove duplicated line from periodic job in zuul config.\n\n(cherry picked from commit c65611428baae2496819a4ccd4e11a3f157db752)\n\nSigned-off-by: Daniel Pawlik \u003cdpawlik@redhat.com\u003e"}},"strategy":{"type":"Docker","dockerStrategy":{"from":{"kind":"DockerImage","name":"quay.io/operator-framework/ansible-operator@sha256:9895727b7f66bb88fa4c6afdefc7eecf86e6b7c1293920f866a035da9decc58e"},"pullSecret":{"name":"builder-dockercfg-5x6sr"}}},"output":{"to":{"kind":"DockerImage","name":"image-registry.openshift-image-registry.svc:5000/service-telemetry/service-telemetry-operator:latest"},"pushSecret":{"name":"builder-dockercfg-5x6sr"}},"resources":{},"postCommit":{},"nodeSelector":null},"status":{"phase":"New","outputDockerImageReference":"image-registry.openshift-image-registry.svc:5000/service-telemetry/service-telemetry-operator:latest","config":{"kind":"BuildConfig","namespace":"service-telemetry","name":"service-telemetry-operator"},"output":{},"conditions":[{"type":"New","status":"True","lastUpdateTime":"2026-06-12T00:26:15Z","lastTransitionTime":"2026-06-12T00:26:15Z"}]}} - name: LANG value: C.utf8 - name: PUSH_DOCKERCFG_PATH value: /var/run/secrets/openshift.io/push - name: PULL_DOCKERCFG_PATH value: /var/run/secrets/openshift.io/pull - name: BUILD_REGISTRIES_CONF_PATH value: /var/run/configs/openshift.io/build-system/registries.conf - name: BUILD_REGISTRIES_DIR_PATH value: /var/run/configs/openshift.io/build-system/registries.d - name: BUILD_SIGNATURE_POLICY_PATH value: /var/run/configs/openshift.io/build-system/policy.json - name: BUILD_STORAGE_CONF_PATH value: /var/run/configs/openshift.io/build-system/storage.conf - name: BUILD_BLOBCACHE_DIR value: /var/cache/blobs image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imagePullPolicy: IfNotPresent name: docker-build resources: {} securityContext: privileged: true runAsGroup: 0 runAsUser: 0 seccompProfile: type: Unconfined terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /var/lib/kubelet/config.json name: node-pullsecrets readOnly: true - mountPath: /tmp/build name: buildworkdir - mountPath: /var/lib/containers/cache name: buildcachedir - mountPath: /var/run/secrets/openshift.io/push name: builder-dockercfg-5x6sr-push readOnly: true - mountPath: /var/run/secrets/openshift.io/pull name: builder-dockercfg-5x6sr-pull readOnly: true - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/lib/containers name: container-storage-root - mountPath: /var/run/containers name: container-storage-run - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-z6747 readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: builder-dockercfg-5x6sr initContainers: - args: - openshift-git-clone - --v=0 env: - name: BUILD value: | {"kind":"Build","apiVersion":"build.openshift.io/v1","metadata":{"name":"service-telemetry-operator-2","namespace":"service-telemetry","uid":"6e681c5b-ca44-4ab7-92bb-39aa1b8a5dbe","resourceVersion":"45173","generation":1,"creationTimestamp":"2026-06-12T00:26:15Z","labels":{"build":"service-telemetry-operator","buildconfig":"service-telemetry-operator","openshift.io/build-config.name":"service-telemetry-operator","openshift.io/build.start-policy":"Serial"},"annotations":{"openshift.io/build-config.name":"service-telemetry-operator","openshift.io/build.number":"2"},"ownerReferences":[{"apiVersion":"build.openshift.io/v1","kind":"BuildConfig","name":"service-telemetry-operator","uid":"6917691c-a82d-4eb3-8fc1-6e4e79fa628c","controller":true}],"managedFields":[{"manager":"openshift-apiserver","operation":"Update","apiVersion":"build.openshift.io/v1","time":"2026-06-12T00:26:15Z","fieldsType":"FieldsV1","fieldsV1":{"f:metadata":{"f:annotations":{".":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.number":{}},"f:labels":{".":{},"f:build":{},"f:buildconfig":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.start-policy":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"6917691c-a82d-4eb3-8fc1-6e4e79fa628c\"}":{}}},"f:spec":{"f:output":{"f:to":{}},"f:revision":{".":{},"f:git":{".":{},"f:author":{".":{},"f:email":{},"f:name":{}},"f:commit":{},"f:committer":{".":{},"f:email":{},"f:name":{}},"f:message":{}},"f:type":{}},"f:serviceAccount":{},"f:source":{"f:binary":{},"f:dockerfile":{},"f:type":{}},"f:strategy":{"f:dockerStrategy":{".":{},"f:from":{}},"f:type":{}}},"f:status":{"f:conditions":{".":{},"k:{\"type\":\"New\"}":{".":{},"f:lastTransitionTime":{},"f:lastUpdateTime":{},"f:status":{},"f:type":{}}},"f:config":{},"f:phase":{}}}}]},"spec":{"serviceAccount":"builder","source":{"type":"Binary","binary":{},"dockerfile":"FROM quay.io/operator-framework/ansible-operator:v1.38.1\n\n# temporarily switch to root user to adjust image layers\nUSER 0\n# Upstream CI builds need the additional EPEL sources for python3-passlib and python3-bcrypt but have no working repos to install epel-release\n# NO_PROXY is undefined in upstream CI builds, but defined (usually blank) during openshift builds (a possibly brittle hack)\nRUN bash -c -- 'if [ \"${NO_PROXY:-__ZZZZZ}\" == \"__ZZZZZ\" ]; then echo \"Applying upstream EPEL hacks\" \u0026\u0026 echo -e \"-----BEGIN PGP PUBLIC KEY BLOCK-----\\nmQINBGE3mOsBEACsU+XwJWDJVkItBaugXhXIIkb9oe+7aadELuVo0kBmc3HXt/Yp\\nCJW9hHEiGZ6z2jwgPqyJjZhCvcAWvgzKcvqE+9i0NItV1rzfxrBe2BtUtZmVcuE6\\n2b+SPfxQ2Hr8llaawRjt8BCFX/ZzM4/1Qk+EzlfTcEcpkMf6wdO7kD6ulBk/tbsW\\nDHX2lNcxszTf+XP9HXHWJlA2xBfP+Dk4gl4DnO2Y1xR0OSywE/QtvEbN5cY94ieu\\nn7CBy29AleMhmbnx9pw3NyxcFIAsEZHJoU4ZW9ulAJ/ogttSyAWeacW7eJGW31/Z\\n39cS+I4KXJgeGRI20RmpqfH0tuT+X5Da59YpjYxkbhSK3HYBVnNPhoJFUc2j5iKy\\nXLgkapu1xRnEJhw05kr4LCbud0NTvfecqSqa+59kuVc+zWmfTnGTYc0PXZ6Oa3rK\\n44UOmE6eAT5zd/ToleDO0VesN+EO7CXfRsm7HWGpABF5wNK3vIEF2uRr2VJMvgqS\\n9eNwhJyOzoca4xFSwCkc6dACGGkV+CqhufdFBhmcAsUotSxe3zmrBjqA0B/nxIvH\\nDVgOAMnVCe+Lmv8T0mFgqZSJdIUdKjnOLu/GRFhjDKIak4jeMBMTYpVnU+HhMHLq\\nuDiZkNEvEEGhBQmZuI8J55F/a6UURnxUwT3piyi3Pmr2IFD7ahBxPzOBCQARAQAB\\ntCdGZWRvcmEgKGVwZWw5KSA8ZXBlbEBmZWRvcmFwcm9qZWN0Lm9yZz6JAk4EEwEI\\nADgWIQT/itE0RZcQbs6BO5GKOHK/MihGfAUCYTeY6wIbDwULCQgHAgYVCgkICwIE\\nFgIDAQIeAQIXgAAKCRCKOHK/MihGfFX/EACBPWv20+ttYu1A5WvtHJPzwbj0U4yF\\n3zTQpBglQ2UfkRpYdipTlT3Ih6j5h2VmgRPtINCc/ZE28adrWpBoeFIS2YAKOCLC\\nnZYtHl2nCoLq1U7FSttUGsZ/t8uGCBgnugTfnIYcmlP1jKKA6RJAclK89evDQX5n\\nR9ZD+Cq3CBMlttvSTCht0qQVlwycedH8iWyYgP/mF0W35BIn7NuuZwWhgR00n/VG\\n4nbKPOzTWbsP45awcmivdrS74P6mL84WfkghipdmcoyVb1B8ZP4Y/Ke0RXOnLhNe\\nCfrXXvuW+Pvg2RTfwRDtehGQPAgXbmLmz2ZkV69RGIr54HJv84NDbqZovRTMr7gL\\n9k3ciCzXCiYQgM8yAyGHV0KEhFSQ1HV7gMnt9UmxbxBE2pGU7vu3CwjYga5DpwU7\\nw5wu1TmM5KgZtZvuWOTDnqDLf0cKoIbW8FeeCOn24elcj32bnQDuF9DPey1mqcvT\\n/yEo/Ushyz6CVYxN8DGgcy2M9JOsnmjDx02h6qgWGWDuKgb9jZrvRedpAQCeemEd\\nfhEs6ihqVxRFl16HxC4EVijybhAL76SsM2nbtIqW1apBQJQpXWtQwwdvgTVpdEtE\\nr4ArVJYX5LrswnWEQMOelugUG6S3ZjMfcyOa/O0364iY73vyVgaYK+2XtT2usMux\\nVL469Kj5m13T6w==\\n=Mjs/\\n-----END PGP PUBLIC KEY BLOCK-----\" \u003e /etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-9 \u0026\u0026 echo -e \"[epel]\\nname=Extra Packages for Enterprise Linux 9 - \\$basearch\\nmetalink=https://mirrors.fedoraproject.org/metalink?repo=epel-9\u0026arch=\\$basearch\u0026infra=\\$infra\u0026content=\\$contentdir\\nenabled=1\\ngpgcheck=1\\ngpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-9\" \u003e /etc/yum.repos.d/epel.repo; fi'\n\n# update the base image to allow forward-looking optimistic updates during the testing phase, with the added benefit of helping move closer to passing security scans.\n# -- excludes ansible so it remains at 2.9 tag as shipped with the base image\n# -- installs python3-passlib and python3-bcrypt for oauth-proxy interface\n# -- cleans up the cached data from dnf to keep the image as small as possible\nRUN dnf update -y --exclude=ansible* \u0026\u0026 dnf install -y python3-passlib python3-bcrypt \u0026\u0026 dnf clean all \u0026\u0026 rm -rf /var/cache/dnf\n\nCOPY requirements.yml ${HOME}/requirements.yml\nRUN ansible-galaxy collection install -r ${HOME}/requirements.yml \\\n \u0026\u0026 chmod -R ug+rwx ${HOME}/.ansible\n\n# switch back to user 1001 when running the base image (non-root)\nUSER 1001\n\n# copy in required artifacts for the operator\nCOPY watches.yaml ${HOME}/watches.yaml\nCOPY roles/ ${HOME}/roles/\n"},"revision":{"type":"Git","git":{"commit":"4d3f124e0a5f23ffbf6f34769e817a6b45694b73","author":{"name":"Daniel Pawlik","email":"3049495+danpawlik@users.noreply.github.com"},"committer":{"name":"GitHub","email":"noreply@github.com"},"message":"Wait a while for OpenShift API server to apply last changes (#712)\n\nIn some corner cases, when infrastructure might be overloaded, the\nOpenShift API is not restarted immediately, but it is done after\na while. From basic check on failing job, it happens from up to 90 seconds.\nMaking condition that would watch on OpenShift API server that has been\nfinally changed state to to terminating then back to active might be\na good alternative here, but can also impact future job if such restart\nis not needed.\n\nAlso remove duplicated line from periodic job in zuul config.\n\n(cherry picked from commit c65611428baae2496819a4ccd4e11a3f157db752)\n\nSigned-off-by: Daniel Pawlik \u003cdpawlik@redhat.com\u003e"}},"strategy":{"type":"Docker","dockerStrategy":{"from":{"kind":"DockerImage","name":"quay.io/operator-framework/ansible-operator@sha256:9895727b7f66bb88fa4c6afdefc7eecf86e6b7c1293920f866a035da9decc58e"},"pullSecret":{"name":"builder-dockercfg-5x6sr"}}},"output":{"to":{"kind":"DockerImage","name":"image-registry.openshift-image-registry.svc:5000/service-telemetry/service-telemetry-operator:latest"},"pushSecret":{"name":"builder-dockercfg-5x6sr"}},"resources":{},"postCommit":{},"nodeSelector":null},"status":{"phase":"New","outputDockerImageReference":"image-registry.openshift-image-registry.svc:5000/service-telemetry/service-telemetry-operator:latest","config":{"kind":"BuildConfig","namespace":"service-telemetry","name":"service-telemetry-operator"},"output":{},"conditions":[{"type":"New","status":"True","lastUpdateTime":"2026-06-12T00:26:15Z","lastTransitionTime":"2026-06-12T00:26:15Z"}]}} - name: LANG value: C.utf8 - name: BUILD_REGISTRIES_CONF_PATH value: /var/run/configs/openshift.io/build-system/registries.conf - name: BUILD_REGISTRIES_DIR_PATH value: /var/run/configs/openshift.io/build-system/registries.d - name: BUILD_SIGNATURE_POLICY_PATH value: /var/run/configs/openshift.io/build-system/policy.json - name: BUILD_STORAGE_CONF_PATH value: /var/run/configs/openshift.io/build-system/storage.conf - name: BUILD_BLOBCACHE_DIR value: /var/cache/blobs image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imagePullPolicy: IfNotPresent name: git-clone resources: {} securityContext: capabilities: add: - CHOWN - DAC_OVERRIDE drop: - ALL privileged: false runAsGroup: 0 runAsNonRoot: false runAsUser: 0 seccompProfile: type: RuntimeDefault stdin: true stdinOnce: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /tmp/build name: buildworkdir - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-z6747 readOnly: true - args: - openshift-manage-dockerfile - --v=0 env: - name: BUILD value: | {"kind":"Build","apiVersion":"build.openshift.io/v1","metadata":{"name":"service-telemetry-operator-2","namespace":"service-telemetry","uid":"6e681c5b-ca44-4ab7-92bb-39aa1b8a5dbe","resourceVersion":"45173","generation":1,"creationTimestamp":"2026-06-12T00:26:15Z","labels":{"build":"service-telemetry-operator","buildconfig":"service-telemetry-operator","openshift.io/build-config.name":"service-telemetry-operator","openshift.io/build.start-policy":"Serial"},"annotations":{"openshift.io/build-config.name":"service-telemetry-operator","openshift.io/build.number":"2"},"ownerReferences":[{"apiVersion":"build.openshift.io/v1","kind":"BuildConfig","name":"service-telemetry-operator","uid":"6917691c-a82d-4eb3-8fc1-6e4e79fa628c","controller":true}],"managedFields":[{"manager":"openshift-apiserver","operation":"Update","apiVersion":"build.openshift.io/v1","time":"2026-06-12T00:26:15Z","fieldsType":"FieldsV1","fieldsV1":{"f:metadata":{"f:annotations":{".":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.number":{}},"f:labels":{".":{},"f:build":{},"f:buildconfig":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.start-policy":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"6917691c-a82d-4eb3-8fc1-6e4e79fa628c\"}":{}}},"f:spec":{"f:output":{"f:to":{}},"f:revision":{".":{},"f:git":{".":{},"f:author":{".":{},"f:email":{},"f:name":{}},"f:commit":{},"f:committer":{".":{},"f:email":{},"f:name":{}},"f:message":{}},"f:type":{}},"f:serviceAccount":{},"f:source":{"f:binary":{},"f:dockerfile":{},"f:type":{}},"f:strategy":{"f:dockerStrategy":{".":{},"f:from":{}},"f:type":{}}},"f:status":{"f:conditions":{".":{},"k:{\"type\":\"New\"}":{".":{},"f:lastTransitionTime":{},"f:lastUpdateTime":{},"f:status":{},"f:type":{}}},"f:config":{},"f:phase":{}}}}]},"spec":{"serviceAccount":"builder","source":{"type":"Binary","binary":{},"dockerfile":"FROM quay.io/operator-framework/ansible-operator:v1.38.1\n\n# temporarily switch to root user to adjust image layers\nUSER 0\n# Upstream CI builds need the additional EPEL sources for python3-passlib and python3-bcrypt but have no working repos to install epel-release\n# NO_PROXY is undefined in upstream CI builds, but defined (usually blank) during openshift builds (a possibly brittle hack)\nRUN bash -c -- 'if [ \"${NO_PROXY:-__ZZZZZ}\" == \"__ZZZZZ\" ]; then echo \"Applying upstream EPEL hacks\" \u0026\u0026 echo -e \"-----BEGIN PGP PUBLIC KEY BLOCK-----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\\nVL469Kj5m13T6w==\\n=Mjs/\\n-----END PGP PUBLIC KEY BLOCK-----\" \u003e /etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-9 \u0026\u0026 echo -e \"[epel]\\nname=Extra Packages for Enterprise Linux 9 - \\$basearch\\nmetalink=https://mirrors.fedoraproject.org/metalink?repo=epel-9\u0026arch=\\$basearch\u0026infra=\\$infra\u0026content=\\$contentdir\\nenabled=1\\ngpgcheck=1\\ngpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-9\" \u003e /etc/yum.repos.d/epel.repo; fi'\n\n# update the base image to allow forward-looking optimistic updates during the testing phase, with the added benefit of helping move closer to passing security scans.\n# -- excludes ansible so it remains at 2.9 tag as shipped with the base image\n# -- installs python3-passlib and python3-bcrypt for oauth-proxy interface\n# -- cleans up the cached data from dnf to keep the image as small as possible\nRUN dnf update -y --exclude=ansible* \u0026\u0026 dnf install -y python3-passlib python3-bcrypt \u0026\u0026 dnf clean all \u0026\u0026 rm -rf /var/cache/dnf\n\nCOPY requirements.yml ${HOME}/requirements.yml\nRUN ansible-galaxy collection install -r ${HOME}/requirements.yml \\\n \u0026\u0026 chmod -R ug+rwx ${HOME}/.ansible\n\n# switch back to user 1001 when running the base image (non-root)\nUSER 1001\n\n# copy in required artifacts for the operator\nCOPY watches.yaml ${HOME}/watches.yaml\nCOPY roles/ ${HOME}/roles/\n"},"revision":{"type":"Git","git":{"commit":"4d3f124e0a5f23ffbf6f34769e817a6b45694b73","author":{"name":"Daniel Pawlik","email":"3049495+danpawlik@users.noreply.github.com"},"committer":{"name":"GitHub","email":"noreply@github.com"},"message":"Wait a while for OpenShift API server to apply last changes (#712)\n\nIn some corner cases, when infrastructure might be overloaded, the\nOpenShift API is not restarted immediately, but it is done after\na while. From basic check on failing job, it happens from up to 90 seconds.\nMaking condition that would watch on OpenShift API server that has been\nfinally changed state to to terminating then back to active might be\na good alternative here, but can also impact future job if such restart\nis not needed.\n\nAlso remove duplicated line from periodic job in zuul config.\n\n(cherry picked from commit c65611428baae2496819a4ccd4e11a3f157db752)\n\nSigned-off-by: Daniel Pawlik \u003cdpawlik@redhat.com\u003e"}},"strategy":{"type":"Docker","dockerStrategy":{"from":{"kind":"DockerImage","name":"quay.io/operator-framework/ansible-operator@sha256:9895727b7f66bb88fa4c6afdefc7eecf86e6b7c1293920f866a035da9decc58e"},"pullSecret":{"name":"builder-dockercfg-5x6sr"}}},"output":{"to":{"kind":"DockerImage","name":"image-registry.openshift-image-registry.svc:5000/service-telemetry/service-telemetry-operator:latest"},"pushSecret":{"name":"builder-dockercfg-5x6sr"}},"resources":{},"postCommit":{},"nodeSelector":null},"status":{"phase":"New","outputDockerImageReference":"image-registry.openshift-image-registry.svc:5000/service-telemetry/service-telemetry-operator:latest","config":{"kind":"BuildConfig","namespace":"service-telemetry","name":"service-telemetry-operator"},"output":{},"conditions":[{"type":"New","status":"True","lastUpdateTime":"2026-06-12T00:26:15Z","lastTransitionTime":"2026-06-12T00:26:15Z"}]}} - name: LANG value: C.utf8 - name: BUILD_REGISTRIES_CONF_PATH value: /var/run/configs/openshift.io/build-system/registries.conf - name: BUILD_REGISTRIES_DIR_PATH value: /var/run/configs/openshift.io/build-system/registries.d - name: BUILD_SIGNATURE_POLICY_PATH value: /var/run/configs/openshift.io/build-system/policy.json - name: BUILD_STORAGE_CONF_PATH value: /var/run/configs/openshift.io/build-system/storage.conf - name: BUILD_BLOBCACHE_DIR value: /var/cache/blobs image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imagePullPolicy: IfNotPresent name: manage-dockerfile resources: {} securityContext: capabilities: add: - CHOWN - DAC_OVERRIDE drop: - ALL privileged: false runAsGroup: 0 runAsNonRoot: false runAsUser: 0 seccompProfile: type: RuntimeDefault terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /tmp/build name: buildworkdir - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-z6747 readOnly: true nodeName: crc nodeSelector: kubernetes.io/os: linux preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Never schedulerName: default-scheduler securityContext: {} serviceAccount: builder serviceAccountName: builder terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - hostPath: path: /var/lib/containers/cache type: "" name: buildcachedir - emptyDir: {} name: buildworkdir - hostPath: path: /var/lib/kubelet/config.json type: File name: node-pullsecrets - name: builder-dockercfg-5x6sr-push secret: defaultMode: 384 secretName: builder-dockercfg-5x6sr - name: builder-dockercfg-5x6sr-pull secret: defaultMode: 384 secretName: builder-dockercfg-5x6sr - configMap: defaultMode: 420 name: service-telemetry-operator-2-sys-config name: build-system-configs - configMap: defaultMode: 420 items: - key: service-ca.crt path: certs.d/image-registry.openshift-image-registry.svc:5000/ca.crt - key: default-route-openshift-image-registry.apps-crc.testing path: certs.d/default-route-openshift-image-registry.apps-crc.testing/ca.crt name: service-telemetry-operator-2-ca name: build-ca-bundles - configMap: defaultMode: 420 items: - key: ca-bundle.crt path: tls-ca-bundle.pem name: service-telemetry-operator-2-global-ca name: build-proxy-ca-bundles - emptyDir: {} name: container-storage-root - emptyDir: {} name: container-storage-run - emptyDir: {} name: build-blob-cache - name: kube-api-access-z6747 projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-12T00:28:13Z" status: "False" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-12T00:26:33Z" reason: PodCompleted status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-12T00:28:12Z" reason: PodCompleted status: "False" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-12T00:28:12Z" reason: PodCompleted status: "False" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-12T00:26:15Z" status: "True" type: PodScheduled containerStatuses: - containerID: cri-o://59e3478a1edd542673989773032ff31e82f18cd66d833ef628443ca8f5b7af9b image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 lastState: {} name: docker-build ready: false resources: {} restartCount: 0 started: false state: terminated: containerID: cri-o://59e3478a1edd542673989773032ff31e82f18cd66d833ef628443ca8f5b7af9b exitCode: 0 finishedAt: "2026-06-12T00:28:12Z" reason: Completed startedAt: "2026-06-12T00:26:34Z" user: linux: gid: 0 supplementalGroups: - 0 uid: 0 volumeMounts: - mountPath: /var/lib/kubelet/config.json name: node-pullsecrets readOnly: true recursiveReadOnly: Disabled - mountPath: /tmp/build name: buildworkdir - mountPath: /var/lib/containers/cache name: buildcachedir - mountPath: /var/run/secrets/openshift.io/push name: builder-dockercfg-5x6sr-push readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/secrets/openshift.io/pull name: builder-dockercfg-5x6sr-pull readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/lib/containers name: container-storage-root - mountPath: /var/run/containers name: container-storage-run - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-z6747 readOnly: true recursiveReadOnly: Disabled hostIP: 192.168.126.11 hostIPs: - ip: 192.168.126.11 initContainerStatuses: - containerID: cri-o://c58c2079812d854d3edc054c8b666adab965d1cb0fbc8d84e4b9bc9b16aac694 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 lastState: {} name: git-clone ready: true resources: {} restartCount: 0 started: false state: terminated: containerID: cri-o://c58c2079812d854d3edc054c8b666adab965d1cb0fbc8d84e4b9bc9b16aac694 exitCode: 0 finishedAt: "2026-06-12T00:26:32Z" reason: Completed startedAt: "2026-06-12T00:26:20Z" user: linux: gid: 0 supplementalGroups: - 0 uid: 0 volumeMounts: - mountPath: /tmp/build name: buildworkdir - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-z6747 readOnly: true recursiveReadOnly: Disabled - containerID: cri-o://99cc83e419dbf9891f777465e412ed6a1b0b4f8329c1e0132add40a7b19c809f image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 lastState: {} name: manage-dockerfile ready: true resources: {} restartCount: 0 started: false state: terminated: containerID: cri-o://99cc83e419dbf9891f777465e412ed6a1b0b4f8329c1e0132add40a7b19c809f exitCode: 0 finishedAt: "2026-06-12T00:26:33Z" reason: Completed startedAt: "2026-06-12T00:26:33Z" user: linux: gid: 0 supplementalGroups: - 0 uid: 0 volumeMounts: - mountPath: /tmp/build name: buildworkdir - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-z6747 readOnly: true recursiveReadOnly: Disabled phase: Succeeded podIP: 10.217.0.65 podIPs: - ip: 10.217.0.65 qosClass: BestEffort startTime: "2026-06-12T00:26:15Z" - apiVersion: v1 kind: Pod metadata: annotations: alm-examples: |- [ { "apiVersion": "infra.watch/v1beta1", "kind": "ServiceTelemetry", "metadata": { "name": "default" }, "spec": { "alerting": { "alertmanager": { "receivers": { "snmpTraps": { "alertOidLabel": "oid", "community": "public", "enabled": false, "port": 162, "retries": 5, "target": "192.168.24.254", "timeout": 1, "trapDefaultOid": "1.3.6.1.4.1.50495.15.1.2.1", "trapDefaultSeverity": "", "trapOidPrefix": "1.3.6.1.4.1.50495.15" } }, "storage": { "persistent": { "pvcStorageRequest": "20G" }, "strategy": "persistent" } }, "enabled": true }, "backends": { "events": { "elasticsearch": { "certificates": { "caCertDuration": "70080h", "endpointCertDuration": "70080h" }, "enabled": false, "forwarding": { "hostUrl": "https://elasticsearch-es-http:9200", "tlsSecretName": "elasticsearch-es-cert", "tlsServerName": "", "useBasicAuth": true, "useTls": true, "userSecretName": "elasticsearch-es-elastic-user" }, "storage": { "persistent": { "pvcStorageRequest": "20Gi" }, "strategy": "persistent" }, "version": "7.16.1" } }, "metrics": { "prometheus": { "enabled": true, "scrapeInterval": "30s", "storage": { "persistent": { "pvcStorageRequest": "20G" }, "retention": "24h", "strategy": "persistent" } } } }, "clouds": [ { "metrics": { "collectors": [ { "bridge": { "ringBufferCount": 15000, "ringBufferSize": 16384, "verbose": false }, "collectorType": "collectd", "debugEnabled": false, "subscriptionAddress": "collectd/cloud1-telemetry" }, { "bridge": { "ringBufferCount": 15000, "ringBufferSize": 16384, "verbose": false }, "collectorType": "ceilometer", "debugEnabled": false, "subscriptionAddress": "anycast/ceilometer/cloud1-metering.sample" }, { "bridge": { "ringBufferCount": 15000, "ringBufferSize": 65535, "verbose": false }, "collectorType": "sensubility", "debugEnabled": false, "subscriptionAddress": "sensubility/cloud1-telemetry" } ] }, "name": "cloud1" } ], "graphing": { "enabled": false, "grafana": { "baseImage": "registry.redhat.io/rhel8/grafana:9", "dashboards": { "enabled": true }, "disableSignoutMenu": false, "ingressEnabled": true } }, "highAvailability": { "enabled": false }, "observabilityStrategy": "use_redhat", "transports": { "qdr": { "auth": "basic", "certificates": { "caCertDuration": "70080h", "endpointCertDuration": "70080h" }, "enabled": true, "web": { "enabled": false } } } } } ] capabilities: Basic Install categories: Monitoring certified: "false" containerImage: quay.io/infrawatch/service-telemetry-operator:stable-1.5 createdAt: "2026-06-12T00:36:21Z" description: 'DEPRECATED: This operator is deprecated and will no longer receive updates with new features. Users should migrate to alternative telemetry solutions. Service Telemetry Framework. Umbrella Operator for instantiating the required dependencies and configuration of various components to build a Service Telemetry platform for telco grade monitoring.' features.operators.openshift.io/cnf: "false" features.operators.openshift.io/cni: "false" features.operators.openshift.io/csi: "false" features.operators.openshift.io/disconnected: "true" features.operators.openshift.io/fips-compliant: "false" features.operators.openshift.io/proxy-aware: "false" features.operators.openshift.io/tls-profiles: "false" features.operators.openshift.io/token-auth-aws: "false" features.operators.openshift.io/token-auth-azure: "false" features.operators.openshift.io/token-auth-gcp: "false" k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.217.0.91/23"],"mac_address":"0a:58:0a:d9:00:5b","gateway_ips":["10.217.0.1"],"routes":[{"dest":"10.217.0.0/22","nextHop":"10.217.0.1"},{"dest":"10.217.4.0/23","nextHop":"10.217.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.217.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.217.0.1"}],"ip_address":"10.217.0.91/23","gateway_ip":"10.217.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.217.0.91" ], "mac": "0a:58:0a:d9:00:5b", "default": true, "dns": {} }] kubectl.kubernetes.io/last-applied-configuration: | {"apiVersion":"operators.coreos.com/v1alpha1","kind":"ClusterServiceVersion","metadata":{"annotations":{"alm-examples":"[\n {\n \"apiVersion\": \"infra.watch/v1beta1\",\n \"kind\": \"ServiceTelemetry\",\n \"metadata\": {\n \"name\": \"default\"\n },\n \"spec\": {\n \"alerting\": {\n \"alertmanager\": {\n \"receivers\": {\n \"snmpTraps\": {\n \"alertOidLabel\": \"oid\",\n \"community\": \"public\",\n \"enabled\": false,\n \"port\": 162,\n \"retries\": 5,\n \"target\": \"192.168.24.254\",\n \"timeout\": 1,\n \"trapDefaultOid\": \"1.3.6.1.4.1.50495.15.1.2.1\",\n \"trapDefaultSeverity\": \"\",\n \"trapOidPrefix\": \"1.3.6.1.4.1.50495.15\"\n }\n },\n \"storage\": {\n \"persistent\": {\n \"pvcStorageRequest\": \"20G\"\n },\n \"strategy\": \"persistent\"\n }\n },\n \"enabled\": true\n },\n \"backends\": {\n \"events\": {\n \"elasticsearch\": {\n \"certificates\": {\n \"caCertDuration\": \"70080h\",\n \"endpointCertDuration\": \"70080h\"\n },\n \"enabled\": false,\n \"forwarding\": {\n \"hostUrl\": \"https://elasticsearch-es-http:9200\",\n \"tlsSecretName\": \"elasticsearch-es-cert\",\n \"tlsServerName\": \"\",\n \"useBasicAuth\": true,\n \"useTls\": true,\n \"userSecretName\": \"elasticsearch-es-elastic-user\"\n },\n \"storage\": {\n \"persistent\": {\n \"pvcStorageRequest\": \"20Gi\"\n },\n \"strategy\": \"persistent\"\n },\n \"version\": \"7.16.1\"\n }\n },\n \"metrics\": {\n \"prometheus\": {\n \"enabled\": true,\n \"scrapeInterval\": \"30s\",\n \"storage\": {\n \"persistent\": {\n \"pvcStorageRequest\": \"20G\"\n },\n \"retention\": \"24h\",\n \"strategy\": \"persistent\"\n }\n }\n }\n },\n \"clouds\": [\n {\n \"metrics\": {\n \"collectors\": [\n {\n \"bridge\": {\n \"ringBufferCount\": 15000,\n \"ringBufferSize\": 16384,\n \"verbose\": false\n },\n \"collectorType\": \"collectd\",\n \"debugEnabled\": false,\n \"subscriptionAddress\": \"collectd/cloud1-telemetry\"\n },\n {\n \"bridge\": {\n \"ringBufferCount\": 15000,\n \"ringBufferSize\": 16384,\n \"verbose\": false\n },\n \"collectorType\": \"ceilometer\",\n \"debugEnabled\": false,\n \"subscriptionAddress\": \"anycast/ceilometer/cloud1-metering.sample\"\n },\n {\n \"bridge\": {\n \"ringBufferCount\": 15000,\n \"ringBufferSize\": 65535,\n \"verbose\": false\n },\n \"collectorType\": \"sensubility\",\n \"debugEnabled\": false,\n \"subscriptionAddress\": \"sensubility/cloud1-telemetry\"\n }\n ]\n },\n \"name\": \"cloud1\"\n }\n ],\n \"graphing\": {\n \"enabled\": false,\n \"grafana\": {\n \"baseImage\": \"registry.redhat.io/rhel8/grafana:9\",\n \"dashboards\": {\n \"enabled\": true\n },\n \"disableSignoutMenu\": false,\n \"ingressEnabled\": true\n }\n },\n \"highAvailability\": {\n \"enabled\": false\n },\n \"observabilityStrategy\": \"use_redhat\",\n \"transports\": {\n \"qdr\": {\n \"auth\": \"basic\",\n \"certificates\": {\n \"caCertDuration\": \"70080h\",\n \"endpointCertDuration\": \"70080h\"\n },\n \"enabled\": true,\n \"web\": {\n \"enabled\": false\n }\n }\n }\n }\n }\n]","capabilities":"Basic Install","categories":"Monitoring","certified":"false","containerImage":"quay.io/infrawatch/service-telemetry-operator:stable-1.5","createdAt":"2026-06-12T00:36:21Z","description":"DEPRECATED: This operator is deprecated and will no longer receive updates with new features. Users should migrate to alternative telemetry solutions. Service Telemetry Framework. Umbrella Operator for instantiating the required dependencies and configuration of various components to build a Service Telemetry platform for telco grade monitoring.","features.operators.openshift.io/cnf":"false","features.operators.openshift.io/cni":"false","features.operators.openshift.io/csi":"false","features.operators.openshift.io/disconnected":"true","features.operators.openshift.io/fips-compliant":"false","features.operators.openshift.io/proxy-aware":"false","features.operators.openshift.io/tls-profiles":"false","features.operators.openshift.io/token-auth-aws":"false","features.operators.openshift.io/token-auth-azure":"false","features.operators.openshift.io/token-auth-gcp":"false","operatorframework.io/suggested-namespace":"service-telemetry","operators.openshift.io/valid-subscription":"[\"OpenStack Platform\", \"Cloud Infrastructure\", \"Cloud Suite\"]","operators.operatorframework.io/builder":"operator-sdk-v1.39.2","operators.operatorframework.io/deprecated":"true","operators.operatorframework.io/project_layout":"unknown","repository":"https://github.com/infrawatch/service-telemetry-operator","support":"Red Hat"},"name":"service-telemetry-operator.v1.5.1781224581","namespace":"service-telemetry"},"spec":{"apiservicedefinitions":{},"customresourcedefinitions":{"owned":[{"description":"Represents an instance of the Service Telemetry Framework","displayName":"STF Cluster","kind":"ServiceTelemetry","name":"servicetelemetrys.infra.watch","resources":[{"kind":"Pods","name":"","version":"v1"},{"kind":"ConfigMaps","name":"","version":"v1"},{"kind":"ServiceTelemetrys","name":"servicetelemetrys.infra.watch","version":"v1beta1"},{"kind":"ReplicaSets","name":"","version":"v1"},{"kind":"Deployments","name":"","version":"v1"},{"kind":"Services","name":"","version":"v1"},{"kind":"ServiceMonitors","name":"servicemonitors.monitoring.coreos.com","version":"v1"},{"kind":"ScrapeConfigs","name":"scrapeconfigs.monitoring.coreos.com","version":"v1alpha1"},{"kind":"ServiceMonitors","name":"servicemonitors.monitoring.rhobs","version":"v1"},{"kind":"ScrapeConfigs","name":"scrapeconfigs.monitoring.rhobs","version":"v1alpha1"}],"version":"v1beta1"}]},"description":"Service Telemetry Operator for monitoring clouds","displayName":"Service Telemetry Operator","icon":[{"base64data":"PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiIHN0YW5kYWxvbmU9Im5vIj8+CjxzdmcKICAgeG1sbnM6ZGM9Imh0dHA6Ly9wdXJsLm9yZy9kYy9lbGVtZW50cy8xLjEvIgogICB4bWxuczpjYz0iaHR0cDovL2NyZWF0aXZlY29tbW9ucy5vcmcvbnMjIgogICB4bWxuczpyZGY9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkvMDIvMjItcmRmLXN5bnRheC1ucyMiCiAgIHhtbG5zOnN2Zz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciCiAgIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIKICAgeG1sbnM6c29kaXBvZGk9Imh0dHA6Ly9zb2RpcG9kaS5zb3VyY2Vmb3JnZS5uZXQvRFREL3NvZGlwb2RpLTAuZHRkIgogICB4bWxuczppbmtzY2FwZT0iaHR0cDovL3d3dy5pbmtzY2FwZS5vcmcvbmFtZXNwYWNlcy9pbmtzY2FwZSIKICAgaWQ9Ikljb25zIgogICB2aWV3Qm94PSIwIDAgMTI4IDEyOCIKICAgdmVyc2lvbj0iMS4xIgogICBzb2RpcG9kaTpkb2NuYW1lPSJJY29uLVJlZF9IYXQtRGlhZ3JhbXMtR3JhcGhfQXJyb3dfVXAtQi1CbGFjay1SR0Iuc3ZnIgogICB3aWR0aD0iMTI4IgogICBoZWlnaHQ9IjEyOCIKICAgaW5rc2NhcGU6dmVyc2lvbj0iMS4wYmV0YTIgKHVua25vd24pIj4KICA8bWV0YWRhdGEKICAgICBpZD0ibWV0YWRhdGE2NiI+CiAgICA8cmRmOlJERj4KICAgICAgPGNjOldvcmsKICAgICAgICAgcmRmOmFib3V0PSIiPgogICAgICAgIDxkYzpmb3JtYXQ+aW1hZ2Uvc3ZnK3htbDwvZGM6Zm9ybWF0PgogICAgICAgIDxkYzp0eXBlCiAgICAgICAgICAgcmRmOnJlc291cmNlPSJodHRwOi8vcHVybC5vcmcvZGMvZGNtaXR5cGUvU3RpbGxJbWFnZSIgLz4KICAgICAgICA8ZGM6dGl0bGU+SWNvbi1SZWRfSGF0LURpYWdyYW1zLUdyYXBoX0Fycm93X1VwXzEtQi1CbGFjay1SR0I8L2RjOnRpdGxlPgogICAgICA8L2NjOldvcms+CiAgICA8L3JkZjpSREY+CiAgPC9tZXRhZGF0YT4KICA8ZGVmcwogICAgIGlkPSJkZWZzNjQiIC8+CiAgPHNvZGlwb2RpOm5hbWVkdmlldwogICAgIHBhZ2Vjb2xvcj0iI2ZmZmZmZiIKICAgICBib3JkZXJjb2xvcj0iIzY2NjY2NiIKICAgICBpbmtzY2FwZTpkb2N1bWVudC1yb3RhdGlvbj0iMCIKICAgICBib3JkZXJvcGFjaXR5PSIxIgogICAgIG9iamVjdHRvbGVyYW5jZT0iMTAiCiAgICAgZ3JpZHRvbGVyYW5jZT0iMTAiCiAgICAgZ3VpZGV0b2xlcmFuY2U9IjEwIgogICAgIGlua3NjYXBlOnBhZ2VvcGFjaXR5PSIwIgogICAgIGlua3NjYXBlOnBhZ2VzaGFkb3c9IjIiCiAgICAgaW5rc2NhcGU6d2luZG93LXdpZHRoPSIxOTIwIgogICAgIGlua3NjYXBlOndpbmRvdy1oZWlnaHQ9IjEwNjIiCiAgICAgaWQ9Im5hbWVkdmlldzYyIgogICAgIHNob3dncmlkPSJmYWxzZSIKICAgICBpbmtzY2FwZTp6b29tPSI0LjM4MDEzMzciCiAgICAgaW5rc2NhcGU6Y3g9IjkwLjc4Njg1IgogICAgIGlua3NjYXBlOmN5PSI1OS42NDgxNDMiCiAgICAgaW5rc2NhcGU6d2luZG93LXg9IjM4NDAiCiAgICAgaW5rc2NhcGU6d2luZG93LXk9IjE4IgogICAgIGlua3NjYXBlOndpbmRvdy1tYXhpbWl6ZWQ9IjAiCiAgICAgaW5rc2NhcGU6Y3VycmVudC1sYXllcj0iSWNvbnMiIC8+CiAgPHRpdGxlCiAgICAgaWQ9InRpdGxlNTciPkljb24tUmVkX0hhdC1EaWFncmFtcy1HcmFwaF9BcnJvd19VcF8xLUItQmxhY2stUkdCPC90aXRsZT4KICA8cGF0aAogICAgIHN0eWxlPSJzdHJva2Utd2lkdGg6NC44MjU2NiIKICAgICBkPSJtIDEyNi44MTUzNiwyOS42MTY4NzUgYSAzLjYxOTI1ODgsMy42MTkyNTg4IDAgMCAwIC01LjExNTIyLDAgbCAtMy40NzQ0OCwzLjQ3NDQ4OSBWIDEwLjg0NDk4OCBBIDMuNjY3NTE1NiwzLjY2NzUxNTYgMCAwIDAgMTE0LjYwNjM5LDcuMzcwNDk5MyBIIDguNDQxNDc2OSBBIDMuNjE5MjU4OCwzLjYxOTI1ODggMCAwIDAgNC44MjIyMTgyLDEwLjg0NDk4OCBWIDkxLjYyNjg0IGwgLTMuNzY0MDI4NywzLjY2NzUxNiBhIDMuNjE5MjU4OCwzLjYxOTI1ODggMCAwIDAgMi41NTc2MDk1LDYuMTc2ODc0IDMuNTcxMDAxOSwzLjU3MTAwMTkgMCAwIDAgMS4yMDY0MTkyLC0wLjI0MTI4IHYgMTUuNzc5OTYgYSAzLjU3MTAwMTksMy41NzEwMDE5IDAgMCAwIDMuNjE5MjU4NywzLjYxOTI2IEggMTE0LjYwNjM5IGEgMy42MTkyNTg4LDMuNjE5MjU4OCAwIDAgMCAzLjYxOTI3LC0zLjYxOTI2IFYgNDMuMjI1Mjg4IGwgOC41ODk3LC04LjI1MTkwOSBhIDMuNjE5MjU4OCwzLjYxOTI1ODggMCAwIDAgMCwtNS4zNTY1MDQgeiBNIDU3LjkwNDY3NSw2My45Mjc0NDcgViAyNS4zMjIwMjIgYSAzLjYxOTI1OTksMy42MTkyNTk5IDAgMCAxIDcuMjM4NTE5LDAgdiAzOC42MDU0MjUgYSAzLjYxOTI1OTksMy42MTkyNTk5IDAgMCAxIC03LjIzODUxOSwwIHogTSA4Ni44NTg3NDYsNDQuNjI0NzM0IFYgMjUuMzIyMDIyIGEgMy42MTkyNTg4LDMuNjE5MjU4OCAwIDAgMSA3LjIzODUxNSwwIHYgMTkuMzAyNzEyIGEgMy42MTkyNTg4LDMuNjE5MjU4OCAwIDEgMSAtNy4yMzg1MTUsMCB6IE0gMzYuMTg5MTI4LDI1LjMyMjAyMiB2IDE5LjMwMjcxMiBhIDMuNjE5MjU5LDMuNjE5MjU5IDAgMSAxIC03LjIzODUxOCwwIFYgMjUuMzIyMDIyIGEgMy42MTkyNTksMy42MTkyNTkgMCAwIDEgNy4yMzg1MTgsMCB6IE0gMTEwLjk4NzE0LDExMy4zOTA2NSBIIDEyLjA2MDczNiBWIDk0LjYxODc2MSBsIDI0Ljk5NzAxMywtMjQuNTE0NDQzIDI0LjEyODM4OCwyNC4xMjgzOSBhIDMuMDg4NDM0MSwzLjA4ODQzNDEgMCAwIDAgMS4yMDY0MTcsMC43MjM4NTEgaCAwLjQzNDMxNCBhIDQuODI1Njc4Myw0LjgyNTY3ODMgMCAwIDAgMC45NjUxMzYsMC4yNDEyODEgMi4yNjgwNjg3LDIuMjY4MDY4NyAwIDAgMCAwLjc3MjEwOCwwIHYgMCBhIDMuMzc3OTc0OCwzLjM3Nzk3NDggMCAwIDAgMS41OTI0NzUsLTAuODIwMzY0IHYgMCBMIDExMC42NDkzMyw1MC4zNjcyOTUgWiIKICAgICBpZD0icGF0aDU5IgogICAgIGlua3NjYXBlOmNvbm5lY3Rvci1jdXJ2YXR1cmU9IjAiIC8+Cjwvc3ZnPgo=","mediatype":"image/svg+xml"}],"install":{"spec":{"clusterPermissions":[{"rules":[{"apiGroups":["authentication.k8s.io"],"resources":["tokenreviews"],"verbs":["create"]},{"apiGroups":["rbac.authorization.k8s.io"],"resources":["clusterroles","clusterrolebindings"],"verbs":["create","get","list","watch","update","patch","delete"]},{"apiGroups":["authorization.k8s.io"],"resources":["subjectaccessreviews"],"verbs":["create"]},{"apiGroups":["security.openshift.io"],"resourceNames":["nonroot","nonroot-v2"],"resources":["securitycontextconstraints"],"verbs":["use"]},{"apiGroups":[""],"resources":["nodes/metrics"],"verbs":["get"]},{"apiGroups":[""],"resources":["namespaces"],"verbs":["get"]},{"nonResourceURLs":["/metrics"],"verbs":["get"]}],"serviceAccountName":"service-telemetry-operator"}],"deployments":[{"name":"service-telemetry-operator","spec":{"replicas":1,"selector":{"matchLabels":{"name":"service-telemetry-operator"}},"strategy":{},"template":{"metadata":{"labels":{"name":"service-telemetry-operator"}},"spec":{"containers":[{"env":[{"name":"WATCH_NAMESPACE","valueFrom":{"fieldRef":{"fieldPath":"metadata.annotations['olm.targetNamespaces']"}}},{"name":"POD_NAME","valueFrom":{"fieldRef":{"fieldPath":"metadata.name"}}},{"name":"OPERATOR_NAME","value":"service-telemetry-operator"},{"name":"ANSIBLE_GATHERING","value":"explicit"},{"name":"RELATED_IMAGE_PROMETHEUS_WEBHOOK_SNMP_IMAGE","value":"image-registry.openshift-image-registry.svc:5000/service-telemetry/prometheus-webhook-snmp:latest"},{"name":"RELATED_IMAGE_OAUTH_PROXY_IMAGE","value":"quay.io/openshift/origin-oauth-proxy:latest"},{"name":"RELATED_IMAGE_PROMETHEUS_IMAGE","value":"quay.io/prometheus/prometheus:latest"},{"name":"RELATED_IMAGE_ALERTMANAGER_IMAGE","value":"quay.io/prometheus/alertmanager:latest"}],"image":"quay.io/infrawatch/service-telemetry-operator:stable-1.5","imagePullPolicy":"Always","name":"operator","resources":{},"volumeMounts":[{"mountPath":"/tmp/ansible-operator/runner","name":"runner"}]}],"serviceAccountName":"service-telemetry-operator","volumes":[{"emptyDir":{},"name":"runner"}]}}}}],"permissions":[{"rules":[{"apiGroups":[""],"resources":["pods","services","services/finalizers","endpoints","persistentvolumeclaims","events","configmaps","secrets"],"verbs":["*"]},{"apiGroups":["route.openshift.io"],"resources":["routes"],"verbs":["create","get","list","watch","update","patch"]},{"apiGroups":[""],"resources":["serviceaccounts"],"verbs":["create","get","list","watch","update","patch"]},{"apiGroups":["apps"],"resources":["deployments","daemonsets","replicasets","statefulsets"],"verbs":["*"]},{"apiGroups":["cert-manager.io"],"resources":["issuers","certificates"],"verbs":["*"]},{"apiGroups":["interconnectedcloud.github.io","smartgateway.infra.watch","monitoring.coreos.com","monitoring.rhobs","elasticsearch.k8s.elastic.co","grafana.integreatly.org","integreatly.org"],"resources":["*"],"verbs":["*"]},{"apiGroups":["monitoring.coreos.com"],"resources":["scrapeconfigs","servicemonitors"],"verbs":["get","create","delete"]},{"apiGroups":["monitoring.rhobs"],"resources":["scrapeconfigs","servicemonitors"],"verbs":["get","create","delete"]},{"apiGroups":["apps"],"resourceNames":["service-telemetry-operator"],"resources":["deployments/finalizers"],"verbs":["update"]},{"apiGroups":[""],"resources":["pods"],"verbs":["get"]},{"apiGroups":["apps"],"resources":["replicasets"],"verbs":["get"]},{"apiGroups":["infra.watch"],"resources":["*"],"verbs":["*"]},{"apiGroups":["rbac.authorization.k8s.io"],"resources":["roles","rolebindings"],"verbs":["create","get","list","watch","update","patch"]},{"apiGroups":["extensions","networking.k8s.io"],"resources":["ingresses"],"verbs":["get","list","watch"]}],"serviceAccountName":"service-telemetry-operator"}]},"strategy":"deployment"},"installModes":[{"supported":true,"type":"OwnNamespace"},{"supported":true,"type":"SingleNamespace"},{"supported":false,"type":"MultiNamespace"},{"supported":false,"type":"AllNamespaces"}],"keywords":["servicetelemetry","monitoring","telemetry","notifications","telecommunications"],"links":[{"name":"Source Code","url":"https://github.com/infrawatch/service-telemetry-operator"},{"name":"Documentation","url":"https://infrawatch.github.io/documentation"}],"maintainers":[{"email":"support@redhat.com","name":"Red Hat"}],"maturity":"beta","minKubeVersion":"1.23.0","provider":{"name":"Red Hat"},"relatedImages":[{"image":"image-registry.openshift-image-registry.svc:5000/service-telemetry/prometheus-webhook-snmp:latest","name":"prometheus-webhook-snmp-image"},{"image":"quay.io/openshift/origin-oauth-proxy:latest","name":"oauth-proxy-image"},{"image":"quay.io/prometheus/prometheus:latest","name":"prometheus-image"},{"image":"quay.io/prometheus/alertmanager:latest","name":"alertmanager-image"}],"version":"1.5.1781224581"}} olm.operatorGroup: service-telemetry-operator-group olm.operatorNamespace: service-telemetry olm.targetNamespaces: service-telemetry openshift.io/scc: restricted-v2 operatorframework.io/suggested-namespace: service-telemetry operators.openshift.io/valid-subscription: '["OpenStack Platform", "Cloud Infrastructure", "Cloud Suite"]' operators.operatorframework.io/builder: operator-sdk-v1.39.2 operators.operatorframework.io/deprecated: "true" operators.operatorframework.io/project_layout: unknown repository: https://github.com/infrawatch/service-telemetry-operator seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user support: Red Hat creationTimestamp: "2026-06-12T00:36:25Z" generateName: service-telemetry-operator-868b4b94cb- generation: 1 labels: name: service-telemetry-operator pod-template-hash: 868b4b94cb name: service-telemetry-operator-868b4b94cb-n5l7n namespace: service-telemetry ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: service-telemetry-operator-868b4b94cb uid: 8f44f976-5ce3-45e7-bebd-7cc131beb31c resourceVersion: "47286" uid: 0b9db805-87aa-4a49-82ff-fa14a3611336 spec: containers: - env: - name: WATCH_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['olm.targetNamespaces'] - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: OPERATOR_NAME value: service-telemetry-operator - name: ANSIBLE_GATHERING value: explicit - name: RELATED_IMAGE_PROMETHEUS_WEBHOOK_SNMP_IMAGE value: image-registry.openshift-image-registry.svc:5000/service-telemetry/prometheus-webhook-snmp:latest - name: RELATED_IMAGE_OAUTH_PROXY_IMAGE value: quay.io/openshift/origin-oauth-proxy:latest - name: RELATED_IMAGE_PROMETHEUS_IMAGE value: quay.io/prometheus/prometheus:latest - name: RELATED_IMAGE_ALERTMANAGER_IMAGE value: quay.io/prometheus/alertmanager:latest - name: OPERATOR_CONDITION_NAME value: service-telemetry-operator.v1.5.1781224581 image: quay.io/infrawatch/service-telemetry-operator:stable-1.5 imagePullPolicy: Always name: operator resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /tmp/ansible-operator/runner name: runner - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-f8vnd readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: service-telemetry-operator-dockercfg-446hc nodeName: crc preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 1000670000 seLinuxOptions: level: s0:c26,c10 seccompProfile: type: RuntimeDefault serviceAccount: service-telemetry-operator serviceAccountName: service-telemetry-operator terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - emptyDir: {} name: runner - name: kube-api-access-f8vnd projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-12T00:36:46Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-12T00:36:25Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-12T00:36:46Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-12T00:36:46Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-12T00:36:25Z" status: "True" type: PodScheduled containerStatuses: - containerID: cri-o://5519ac24d436d4c50e19e82daeebbcea3fa2cfdf97bf0726e2dbb8517ecf53e9 image: quay.io/infrawatch/service-telemetry-operator:stable-1.5 imageID: quay.io/infrawatch/service-telemetry-operator@sha256:133a74b773a1a7d2f25e71012c504669e2dabd5151d8fed834c70d2de5b8143c lastState: {} name: operator ready: true resources: {} restartCount: 0 started: true state: running: startedAt: "2026-06-12T00:36:45Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /tmp/ansible-operator/runner name: runner - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-f8vnd readOnly: true recursiveReadOnly: Disabled hostIP: 192.168.126.11 hostIPs: - ip: 192.168.126.11 phase: Running podIP: 10.217.0.91 podIPs: - ip: 10.217.0.91 qosClass: BestEffort startTime: "2026-06-12T00:36:25Z" - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.217.0.82/23"],"mac_address":"0a:58:0a:d9:00:52","gateway_ips":["10.217.0.1"],"routes":[{"dest":"10.217.0.0/22","nextHop":"10.217.0.1"},{"dest":"10.217.4.0/23","nextHop":"10.217.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.217.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.217.0.1"}],"ip_address":"10.217.0.82/23","gateway_ip":"10.217.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.217.0.82" ], "mac": "0a:58:0a:d9:00:52", "default": true, "dns": {} }] openshift.io/build.name: sg-bridge-2 openshift.io/scc: privileged security.openshift.io/validated-scc-subject-type: user creationTimestamp: "2026-06-12T00:33:50Z" generation: 1 labels: openshift.io/build.name: sg-bridge-2 name: sg-bridge-2-build namespace: service-telemetry ownerReferences: - apiVersion: build.openshift.io/v1 controller: true kind: Build name: sg-bridge-2 uid: 584698ef-fa69-41f3-bd3b-966ff3a3ce3d resourceVersion: "46761" uid: 60018b56-7b69-4e32-8c37-ea42653249e5 spec: activeDeadlineSeconds: 604800 containers: - args: - openshift-docker-build - --v=0 env: - name: BUILD value: | {"kind":"Build","apiVersion":"build.openshift.io/v1","metadata":{"name":"sg-bridge-2","namespace":"service-telemetry","uid":"584698ef-fa69-41f3-bd3b-966ff3a3ce3d","resourceVersion":"46501","generation":1,"creationTimestamp":"2026-06-12T00:33:50Z","labels":{"build":"sg-bridge","buildconfig":"sg-bridge","openshift.io/build-config.name":"sg-bridge","openshift.io/build.start-policy":"Serial"},"annotations":{"openshift.io/build-config.name":"sg-bridge","openshift.io/build.number":"2"},"ownerReferences":[{"apiVersion":"build.openshift.io/v1","kind":"BuildConfig","name":"sg-bridge","uid":"e862514f-5356-4297-bb8c-87d6997cbe86","controller":true}],"managedFields":[{"manager":"openshift-apiserver","operation":"Update","apiVersion":"build.openshift.io/v1","time":"2026-06-12T00:33:50Z","fieldsType":"FieldsV1","fieldsV1":{"f:metadata":{"f:annotations":{".":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.number":{}},"f:labels":{".":{},"f:build":{},"f:buildconfig":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.start-policy":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"e862514f-5356-4297-bb8c-87d6997cbe86\"}":{}}},"f:spec":{"f:output":{"f:to":{}},"f:revision":{".":{},"f:git":{".":{},"f:author":{".":{},"f:email":{},"f:name":{}},"f:commit":{},"f:committer":{".":{},"f:email":{},"f:name":{}},"f:message":{}},"f:type":{}},"f:serviceAccount":{},"f:source":{"f:binary":{},"f:dockerfile":{},"f:type":{}},"f:strategy":{"f:dockerStrategy":{".":{},"f:from":{}},"f:type":{}}},"f:status":{"f:conditions":{".":{},"k:{\"type\":\"New\"}":{".":{},"f:lastTransitionTime":{},"f:lastUpdateTime":{},"f:status":{},"f:type":{}}},"f:config":{},"f:phase":{}}}}]},"spec":{"serviceAccount":"builder","source":{"type":"Binary","binary":{},"dockerfile":"# --- Build the bridge\nFROM registry.access.redhat.com/ubi9 AS builder\n\n# dependencies for qpid-proton-c\nCOPY build/repos/opstools.repo /etc/yum.repos.d/opstools.repo\n\n# redhat-rpm-config is required to provide hardening compiling instructions\n# (such as /usr/lib/rpm/redhat/redhat-hardened-cc1) even though we're not\n# building RPMs here\nRUN dnf install qpid-proton-c-devel --setopt=tsflags=nodocs -y \u0026\u0026 \\\n dnf install gcc make redhat-rpm-config -y \u0026\u0026 \\\n dnf clean all\n\nENV SGBRIDGE_DIR=/home/bridge\n\nWORKDIR $SGBRIDGE_DIR\nCOPY . $SGBRIDGE_DIR/\n\nRUN make \u0026\u0026 \\\n mv bridge /tmp/\n\n# --- end build, create bridge runtime layer ---\nFROM registry.access.redhat.com/ubi9\n\n# dependencies for qpid-proton-c\nCOPY build/repos/opstools.repo /etc/yum.repos.d/opstools.repo\n\nRUN dnf install qpid-proton-c --setopt=tsflags=nodocs -y \u0026\u0026 \\\n dnf clean all \u0026\u0026 \\\n rm -rf /var/cache/yum\n\nCOPY --from=builder /tmp/bridge /\n\nENTRYPOINT [\"/bridge\"]\n\nLABEL io.k8s.display-name=\"SmartGateway AMQP Bridge\" \\\n io.k8s.description=\"Reads data from AMQP via proton and writes to a unix or UDP socket\"\n"},"revision":{"type":"Git","git":{"commit":"20b3380bd52b66cdee3439de8f7718369da4e931","author":{"name":"Victoria Martinez de la Cruz","email":"victoria@redhat.com"},"committer":{"name":"GitHub","email":"noreply@github.com"},"message":"STF 1.5.6 release\n\n- sg-bridge is now built on ubi9\n- Update to Golang to 1.21.13\n- Github Actions now run on ubuntu-latest\n- Add IPv6 support. sg-bridge now accepts IPv6 addresses as amqp_url value."}},"strategy":{"type":"Docker","dockerStrategy":{"from":{"kind":"DockerImage","name":"registry.access.redhat.com/ubi9@sha256:c628b778d487286b5e718e23e14c23f60b9b44cd20e7e69050ef59e655625630"},"pullSecret":{"name":"builder-dockercfg-5x6sr"}}},"output":{"to":{"kind":"DockerImage","name":"image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-bridge:latest"},"pushSecret":{"name":"builder-dockercfg-5x6sr"}},"resources":{},"postCommit":{},"nodeSelector":null},"status":{"phase":"New","outputDockerImageReference":"image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-bridge:latest","config":{"kind":"BuildConfig","namespace":"service-telemetry","name":"sg-bridge"},"output":{},"conditions":[{"type":"New","status":"True","lastUpdateTime":"2026-06-12T00:33:50Z","lastTransitionTime":"2026-06-12T00:33:50Z"}]}} - name: LANG value: C.utf8 - name: PUSH_DOCKERCFG_PATH value: /var/run/secrets/openshift.io/push - name: PULL_DOCKERCFG_PATH value: /var/run/secrets/openshift.io/pull - name: BUILD_REGISTRIES_CONF_PATH value: /var/run/configs/openshift.io/build-system/registries.conf - name: BUILD_REGISTRIES_DIR_PATH value: /var/run/configs/openshift.io/build-system/registries.d - name: BUILD_SIGNATURE_POLICY_PATH value: /var/run/configs/openshift.io/build-system/policy.json - name: BUILD_STORAGE_CONF_PATH value: /var/run/configs/openshift.io/build-system/storage.conf - name: BUILD_BLOBCACHE_DIR value: /var/cache/blobs image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imagePullPolicy: IfNotPresent name: docker-build resources: {} securityContext: privileged: true runAsGroup: 0 runAsUser: 0 seccompProfile: type: Unconfined terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /var/lib/kubelet/config.json name: node-pullsecrets readOnly: true - mountPath: /tmp/build name: buildworkdir - mountPath: /var/lib/containers/cache name: buildcachedir - mountPath: /var/run/secrets/openshift.io/push name: builder-dockercfg-5x6sr-push readOnly: true - mountPath: /var/run/secrets/openshift.io/pull name: builder-dockercfg-5x6sr-pull readOnly: true - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/lib/containers name: container-storage-root - mountPath: /var/run/containers name: container-storage-run - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-x4mhg readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: builder-dockercfg-5x6sr initContainers: - args: - openshift-git-clone - --v=0 env: - name: BUILD value: | {"kind":"Build","apiVersion":"build.openshift.io/v1","metadata":{"name":"sg-bridge-2","namespace":"service-telemetry","uid":"584698ef-fa69-41f3-bd3b-966ff3a3ce3d","resourceVersion":"46501","generation":1,"creationTimestamp":"2026-06-12T00:33:50Z","labels":{"build":"sg-bridge","buildconfig":"sg-bridge","openshift.io/build-config.name":"sg-bridge","openshift.io/build.start-policy":"Serial"},"annotations":{"openshift.io/build-config.name":"sg-bridge","openshift.io/build.number":"2"},"ownerReferences":[{"apiVersion":"build.openshift.io/v1","kind":"BuildConfig","name":"sg-bridge","uid":"e862514f-5356-4297-bb8c-87d6997cbe86","controller":true}],"managedFields":[{"manager":"openshift-apiserver","operation":"Update","apiVersion":"build.openshift.io/v1","time":"2026-06-12T00:33:50Z","fieldsType":"FieldsV1","fieldsV1":{"f:metadata":{"f:annotations":{".":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.number":{}},"f:labels":{".":{},"f:build":{},"f:buildconfig":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.start-policy":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"e862514f-5356-4297-bb8c-87d6997cbe86\"}":{}}},"f:spec":{"f:output":{"f:to":{}},"f:revision":{".":{},"f:git":{".":{},"f:author":{".":{},"f:email":{},"f:name":{}},"f:commit":{},"f:committer":{".":{},"f:email":{},"f:name":{}},"f:message":{}},"f:type":{}},"f:serviceAccount":{},"f:source":{"f:binary":{},"f:dockerfile":{},"f:type":{}},"f:strategy":{"f:dockerStrategy":{".":{},"f:from":{}},"f:type":{}}},"f:status":{"f:conditions":{".":{},"k:{\"type\":\"New\"}":{".":{},"f:lastTransitionTime":{},"f:lastUpdateTime":{},"f:status":{},"f:type":{}}},"f:config":{},"f:phase":{}}}}]},"spec":{"serviceAccount":"builder","source":{"type":"Binary","binary":{},"dockerfile":"# --- Build the bridge\nFROM registry.access.redhat.com/ubi9 AS builder\n\n# dependencies for qpid-proton-c\nCOPY build/repos/opstools.repo /etc/yum.repos.d/opstools.repo\n\n# redhat-rpm-config is required to provide hardening compiling instructions\n# (such as /usr/lib/rpm/redhat/redhat-hardened-cc1) even though we're not\n# building RPMs here\nRUN dnf install qpid-proton-c-devel --setopt=tsflags=nodocs -y \u0026\u0026 \\\n dnf install gcc make redhat-rpm-config -y \u0026\u0026 \\\n dnf clean all\n\nENV SGBRIDGE_DIR=/home/bridge\n\nWORKDIR $SGBRIDGE_DIR\nCOPY . $SGBRIDGE_DIR/\n\nRUN make \u0026\u0026 \\\n mv bridge /tmp/\n\n# --- end build, create bridge runtime layer ---\nFROM registry.access.redhat.com/ubi9\n\n# dependencies for qpid-proton-c\nCOPY build/repos/opstools.repo /etc/yum.repos.d/opstools.repo\n\nRUN dnf install qpid-proton-c --setopt=tsflags=nodocs -y \u0026\u0026 \\\n dnf clean all \u0026\u0026 \\\n rm -rf /var/cache/yum\n\nCOPY --from=builder /tmp/bridge /\n\nENTRYPOINT [\"/bridge\"]\n\nLABEL io.k8s.display-name=\"SmartGateway AMQP Bridge\" \\\n io.k8s.description=\"Reads data from AMQP via proton and writes to a unix or UDP socket\"\n"},"revision":{"type":"Git","git":{"commit":"20b3380bd52b66cdee3439de8f7718369da4e931","author":{"name":"Victoria Martinez de la Cruz","email":"victoria@redhat.com"},"committer":{"name":"GitHub","email":"noreply@github.com"},"message":"STF 1.5.6 release\n\n- sg-bridge is now built on ubi9\n- Update to Golang to 1.21.13\n- Github Actions now run on ubuntu-latest\n- Add IPv6 support. sg-bridge now accepts IPv6 addresses as amqp_url value."}},"strategy":{"type":"Docker","dockerStrategy":{"from":{"kind":"DockerImage","name":"registry.access.redhat.com/ubi9@sha256:c628b778d487286b5e718e23e14c23f60b9b44cd20e7e69050ef59e655625630"},"pullSecret":{"name":"builder-dockercfg-5x6sr"}}},"output":{"to":{"kind":"DockerImage","name":"image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-bridge:latest"},"pushSecret":{"name":"builder-dockercfg-5x6sr"}},"resources":{},"postCommit":{},"nodeSelector":null},"status":{"phase":"New","outputDockerImageReference":"image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-bridge:latest","config":{"kind":"BuildConfig","namespace":"service-telemetry","name":"sg-bridge"},"output":{},"conditions":[{"type":"New","status":"True","lastUpdateTime":"2026-06-12T00:33:50Z","lastTransitionTime":"2026-06-12T00:33:50Z"}]}} - name: LANG value: C.utf8 - name: BUILD_REGISTRIES_CONF_PATH value: /var/run/configs/openshift.io/build-system/registries.conf - name: BUILD_REGISTRIES_DIR_PATH value: /var/run/configs/openshift.io/build-system/registries.d - name: BUILD_SIGNATURE_POLICY_PATH value: /var/run/configs/openshift.io/build-system/policy.json - name: BUILD_STORAGE_CONF_PATH value: /var/run/configs/openshift.io/build-system/storage.conf - name: BUILD_BLOBCACHE_DIR value: /var/cache/blobs image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imagePullPolicy: IfNotPresent name: git-clone resources: {} securityContext: capabilities: add: - CHOWN - DAC_OVERRIDE drop: - ALL privileged: false runAsGroup: 0 runAsNonRoot: false runAsUser: 0 seccompProfile: type: RuntimeDefault stdin: true stdinOnce: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /tmp/build name: buildworkdir - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-x4mhg readOnly: true - args: - openshift-manage-dockerfile - --v=0 env: - name: BUILD value: | {"kind":"Build","apiVersion":"build.openshift.io/v1","metadata":{"name":"sg-bridge-2","namespace":"service-telemetry","uid":"584698ef-fa69-41f3-bd3b-966ff3a3ce3d","resourceVersion":"46501","generation":1,"creationTimestamp":"2026-06-12T00:33:50Z","labels":{"build":"sg-bridge","buildconfig":"sg-bridge","openshift.io/build-config.name":"sg-bridge","openshift.io/build.start-policy":"Serial"},"annotations":{"openshift.io/build-config.name":"sg-bridge","openshift.io/build.number":"2"},"ownerReferences":[{"apiVersion":"build.openshift.io/v1","kind":"BuildConfig","name":"sg-bridge","uid":"e862514f-5356-4297-bb8c-87d6997cbe86","controller":true}],"managedFields":[{"manager":"openshift-apiserver","operation":"Update","apiVersion":"build.openshift.io/v1","time":"2026-06-12T00:33:50Z","fieldsType":"FieldsV1","fieldsV1":{"f:metadata":{"f:annotations":{".":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.number":{}},"f:labels":{".":{},"f:build":{},"f:buildconfig":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.start-policy":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"e862514f-5356-4297-bb8c-87d6997cbe86\"}":{}}},"f:spec":{"f:output":{"f:to":{}},"f:revision":{".":{},"f:git":{".":{},"f:author":{".":{},"f:email":{},"f:name":{}},"f:commit":{},"f:committer":{".":{},"f:email":{},"f:name":{}},"f:message":{}},"f:type":{}},"f:serviceAccount":{},"f:source":{"f:binary":{},"f:dockerfile":{},"f:type":{}},"f:strategy":{"f:dockerStrategy":{".":{},"f:from":{}},"f:type":{}}},"f:status":{"f:conditions":{".":{},"k:{\"type\":\"New\"}":{".":{},"f:lastTransitionTime":{},"f:lastUpdateTime":{},"f:status":{},"f:type":{}}},"f:config":{},"f:phase":{}}}}]},"spec":{"serviceAccount":"builder","source":{"type":"Binary","binary":{},"dockerfile":"# --- Build the bridge\nFROM registry.access.redhat.com/ubi9 AS builder\n\n# dependencies for qpid-proton-c\nCOPY build/repos/opstools.repo /etc/yum.repos.d/opstools.repo\n\n# redhat-rpm-config is required to provide hardening compiling instructions\n# (such as /usr/lib/rpm/redhat/redhat-hardened-cc1) even though we're not\n# building RPMs here\nRUN dnf install qpid-proton-c-devel --setopt=tsflags=nodocs -y \u0026\u0026 \\\n dnf install gcc make redhat-rpm-config -y \u0026\u0026 \\\n dnf clean all\n\nENV SGBRIDGE_DIR=/home/bridge\n\nWORKDIR $SGBRIDGE_DIR\nCOPY . $SGBRIDGE_DIR/\n\nRUN make \u0026\u0026 \\\n mv bridge /tmp/\n\n# --- end build, create bridge runtime layer ---\nFROM registry.access.redhat.com/ubi9\n\n# dependencies for qpid-proton-c\nCOPY build/repos/opstools.repo /etc/yum.repos.d/opstools.repo\n\nRUN dnf install qpid-proton-c --setopt=tsflags=nodocs -y \u0026\u0026 \\\n dnf clean all \u0026\u0026 \\\n rm -rf /var/cache/yum\n\nCOPY --from=builder /tmp/bridge /\n\nENTRYPOINT [\"/bridge\"]\n\nLABEL io.k8s.display-name=\"SmartGateway AMQP Bridge\" \\\n io.k8s.description=\"Reads data from AMQP via proton and writes to a unix or UDP socket\"\n"},"revision":{"type":"Git","git":{"commit":"20b3380bd52b66cdee3439de8f7718369da4e931","author":{"name":"Victoria Martinez de la Cruz","email":"victoria@redhat.com"},"committer":{"name":"GitHub","email":"noreply@github.com"},"message":"STF 1.5.6 release\n\n- sg-bridge is now built on ubi9\n- Update to Golang to 1.21.13\n- Github Actions now run on ubuntu-latest\n- Add IPv6 support. sg-bridge now accepts IPv6 addresses as amqp_url value."}},"strategy":{"type":"Docker","dockerStrategy":{"from":{"kind":"DockerImage","name":"registry.access.redhat.com/ubi9@sha256:c628b778d487286b5e718e23e14c23f60b9b44cd20e7e69050ef59e655625630"},"pullSecret":{"name":"builder-dockercfg-5x6sr"}}},"output":{"to":{"kind":"DockerImage","name":"image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-bridge:latest"},"pushSecret":{"name":"builder-dockercfg-5x6sr"}},"resources":{},"postCommit":{},"nodeSelector":null},"status":{"phase":"New","outputDockerImageReference":"image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-bridge:latest","config":{"kind":"BuildConfig","namespace":"service-telemetry","name":"sg-bridge"},"output":{},"conditions":[{"type":"New","status":"True","lastUpdateTime":"2026-06-12T00:33:50Z","lastTransitionTime":"2026-06-12T00:33:50Z"}]}} - name: LANG value: C.utf8 - name: BUILD_REGISTRIES_CONF_PATH value: /var/run/configs/openshift.io/build-system/registries.conf - name: BUILD_REGISTRIES_DIR_PATH value: /var/run/configs/openshift.io/build-system/registries.d - name: BUILD_SIGNATURE_POLICY_PATH value: /var/run/configs/openshift.io/build-system/policy.json - name: BUILD_STORAGE_CONF_PATH value: /var/run/configs/openshift.io/build-system/storage.conf - name: BUILD_BLOBCACHE_DIR value: /var/cache/blobs image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imagePullPolicy: IfNotPresent name: manage-dockerfile resources: {} securityContext: capabilities: add: - CHOWN - DAC_OVERRIDE drop: - ALL privileged: false runAsGroup: 0 runAsNonRoot: false runAsUser: 0 seccompProfile: type: RuntimeDefault terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /tmp/build name: buildworkdir - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-x4mhg readOnly: true nodeName: crc nodeSelector: kubernetes.io/os: linux preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Never schedulerName: default-scheduler securityContext: {} serviceAccount: builder serviceAccountName: builder terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - hostPath: path: /var/lib/containers/cache type: "" name: buildcachedir - emptyDir: {} name: buildworkdir - hostPath: path: /var/lib/kubelet/config.json type: File name: node-pullsecrets - name: builder-dockercfg-5x6sr-push secret: defaultMode: 384 secretName: builder-dockercfg-5x6sr - name: builder-dockercfg-5x6sr-pull secret: defaultMode: 384 secretName: builder-dockercfg-5x6sr - configMap: defaultMode: 420 name: sg-bridge-2-sys-config name: build-system-configs - configMap: defaultMode: 420 items: - key: service-ca.crt path: certs.d/image-registry.openshift-image-registry.svc:5000/ca.crt - key: default-route-openshift-image-registry.apps-crc.testing path: certs.d/default-route-openshift-image-registry.apps-crc.testing/ca.crt name: sg-bridge-2-ca name: build-ca-bundles - configMap: defaultMode: 420 items: - key: ca-bundle.crt path: tls-ca-bundle.pem name: sg-bridge-2-global-ca name: build-proxy-ca-bundles - emptyDir: {} name: container-storage-root - emptyDir: {} name: container-storage-run - emptyDir: {} name: build-blob-cache - name: kube-api-access-x4mhg projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-12T00:34:56Z" status: "False" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-12T00:33:53Z" reason: PodCompleted status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-12T00:34:55Z" reason: PodCompleted status: "False" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-12T00:34:55Z" reason: PodCompleted status: "False" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-12T00:33:50Z" status: "True" type: PodScheduled containerStatuses: - containerID: cri-o://7dd225666728d0f30871a0b5178f3999130cb64a444f13e6c9c6a1a8f44981e9 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 lastState: {} name: docker-build ready: false resources: {} restartCount: 0 started: false state: terminated: containerID: cri-o://7dd225666728d0f30871a0b5178f3999130cb64a444f13e6c9c6a1a8f44981e9 exitCode: 0 finishedAt: "2026-06-12T00:34:54Z" reason: Completed startedAt: "2026-06-12T00:33:54Z" user: linux: gid: 0 supplementalGroups: - 0 uid: 0 volumeMounts: - mountPath: /var/lib/kubelet/config.json name: node-pullsecrets readOnly: true recursiveReadOnly: Disabled - mountPath: /tmp/build name: buildworkdir - mountPath: /var/lib/containers/cache name: buildcachedir - mountPath: /var/run/secrets/openshift.io/push name: builder-dockercfg-5x6sr-push readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/secrets/openshift.io/pull name: builder-dockercfg-5x6sr-pull readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/lib/containers name: container-storage-root - mountPath: /var/run/containers name: container-storage-run - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-x4mhg readOnly: true recursiveReadOnly: Disabled hostIP: 192.168.126.11 hostIPs: - ip: 192.168.126.11 initContainerStatuses: - containerID: cri-o://cc93fdc055592d8dd9e4b1e077e78eb391571e23579f7adc143b86d7f90c0399 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 lastState: {} name: git-clone ready: true resources: {} restartCount: 0 started: false state: terminated: containerID: cri-o://cc93fdc055592d8dd9e4b1e077e78eb391571e23579f7adc143b86d7f90c0399 exitCode: 0 finishedAt: "2026-06-12T00:33:51Z" reason: Completed startedAt: "2026-06-12T00:33:51Z" user: linux: gid: 0 supplementalGroups: - 0 uid: 0 volumeMounts: - mountPath: /tmp/build name: buildworkdir - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-x4mhg readOnly: true recursiveReadOnly: Disabled - containerID: cri-o://64121279af1eeb8321815d6941abe08636d4a722804feee4ad88e418dba958be image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 lastState: {} name: manage-dockerfile ready: true resources: {} restartCount: 0 started: false state: terminated: containerID: cri-o://64121279af1eeb8321815d6941abe08636d4a722804feee4ad88e418dba958be exitCode: 0 finishedAt: "2026-06-12T00:33:53Z" reason: Completed startedAt: "2026-06-12T00:33:53Z" user: linux: gid: 0 supplementalGroups: - 0 uid: 0 volumeMounts: - mountPath: /tmp/build name: buildworkdir - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-x4mhg readOnly: true recursiveReadOnly: Disabled phase: Succeeded podIP: 10.217.0.82 podIPs: - ip: 10.217.0.82 qosClass: BestEffort startTime: "2026-06-12T00:33:50Z" - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.217.0.79/23"],"mac_address":"0a:58:0a:d9:00:4f","gateway_ips":["10.217.0.1"],"routes":[{"dest":"10.217.0.0/22","nextHop":"10.217.0.1"},{"dest":"10.217.4.0/23","nextHop":"10.217.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.217.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.217.0.1"}],"ip_address":"10.217.0.79/23","gateway_ip":"10.217.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.217.0.79" ], "mac": "0a:58:0a:d9:00:4f", "default": true, "dns": {} }] openshift.io/build.name: sg-core-2 openshift.io/scc: privileged security.openshift.io/validated-scc-subject-type: user creationTimestamp: "2026-06-12T00:30:04Z" generation: 1 labels: openshift.io/build.name: sg-core-2 name: sg-core-2-build namespace: service-telemetry ownerReferences: - apiVersion: build.openshift.io/v1 controller: true kind: Build name: sg-core-2 uid: 8d8359f6-3173-4f66-ab07-402dcf8ee5f8 resourceVersion: "46422" uid: 4c450bec-95c2-4bd0-8556-95db0150129c spec: activeDeadlineSeconds: 604800 containers: - args: - openshift-docker-build - --v=0 env: - name: BUILD value: | {"kind":"Build","apiVersion":"build.openshift.io/v1","metadata":{"name":"sg-core-2","namespace":"service-telemetry","uid":"8d8359f6-3173-4f66-ab07-402dcf8ee5f8","resourceVersion":"45920","generation":1,"creationTimestamp":"2026-06-12T00:30:04Z","labels":{"build":"sg-core","buildconfig":"sg-core","openshift.io/build-config.name":"sg-core","openshift.io/build.start-policy":"Serial"},"annotations":{"openshift.io/build-config.name":"sg-core","openshift.io/build.number":"2"},"ownerReferences":[{"apiVersion":"build.openshift.io/v1","kind":"BuildConfig","name":"sg-core","uid":"92faf571-21e6-43f9-9e79-4eb8afb4b06f","controller":true}],"managedFields":[{"manager":"openshift-apiserver","operation":"Update","apiVersion":"build.openshift.io/v1","time":"2026-06-12T00:30:04Z","fieldsType":"FieldsV1","fieldsV1":{"f:metadata":{"f:annotations":{".":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.number":{}},"f:labels":{".":{},"f:build":{},"f:buildconfig":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.start-policy":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"92faf571-21e6-43f9-9e79-4eb8afb4b06f\"}":{}}},"f:spec":{"f:output":{"f:to":{}},"f:revision":{".":{},"f:git":{".":{},"f:author":{".":{},"f:email":{},"f:name":{}},"f:commit":{},"f:committer":{".":{},"f:email":{},"f:name":{}},"f:message":{}},"f:type":{}},"f:serviceAccount":{},"f:source":{"f:binary":{},"f:dockerfile":{},"f:type":{}},"f:strategy":{"f:dockerStrategy":{".":{},"f:from":{}},"f:type":{}}},"f:status":{"f:conditions":{".":{},"k:{\"type\":\"New\"}":{".":{},"f:lastTransitionTime":{},"f:lastUpdateTime":{},"f:status":{},"f:type":{}}},"f:config":{},"f:phase":{}}}}]},"spec":{"serviceAccount":"builder","source":{"type":"Binary","binary":{},"dockerfile":"# --- build smart gateway ---\nFROM registry.access.redhat.com/ubi9:latest AS builder\nENV GOPATH=/go\nENV D=/go/src/github.com/infrawatch/sg-core\n\nWORKDIR $D\nCOPY . $D/\n\n# dependencies for qpid-proton-c\nCOPY build/repos/opstools.repo /etc/yum.repos.d/CentOS-OpsTools.repo\n\nRUN dnf install golang git qpid-proton-c-devel -y --setopt=tsflags=nodocs\nRUN go install golang.org/dl/go1.25.9@latest \u0026\u0026 /go/bin/go1.25.9 download \u0026\u0026 PRODUCTION_BUILD=false CONTAINER_BUILD=true GOCMD=/go/bin/go1.25.9 ./build.sh\n\n# --- end build, create smart gateway layer ---\nFROM registry.access.redhat.com/ubi9-minimal:latest\n\nLABEL io.k8s.display-name=\"Smart Gateway\" \\\n io.k8s.description=\"A component of the Service Telemetry Framework on the server side that ingests data from AMQP 1.x and provides a metrics scrape endpoint for Prometheus, and forwards events to ElasticSearch\" \\\n maintainer=\"Leif Madsen \u003cleif+smartgatewayoperator@redhat.com\u003e\"\n\nCOPY --from=builder /tmp/sg-core /\nCOPY --from=builder /tmp/plugins/*.so /usr/lib64/sg-core/\n\nENTRYPOINT [\"/sg-core\"]\n"},"revision":{"type":"Git","git":{"commit":"b329447352cbac3e1b44f73c3fafd112164b4f78","author":{"name":"Victoria Martinez de la Cruz","email":"victoria@redhat.com"},"committer":{"name":"GitHub","email":"noreply@github.com"},"message":"Update to golang 1.25.9 (#170) (#171)\n\n* Update to golang 1.25.9\n\nCloses-Bug: https://redhat.atlassian.net/browse/OSPRH-28974\nCloses-Bug: https://redhat.atlassian.net/browse/OSPRH-27803\n\n* Update golangci-lint to v2.11.4\n\n* Bump golangci-lint version to v2.11.4 for Go 1.25.9 support\n\n* Migrate .golangci.yaml to v2 configuration format\n\n* Remove deprecated linters integrated into staticcheck\n - gosimple (now part of staticcheck)\n - stylecheck (now part of staticcheck)\n\n* Remove formatters from linters list\n - gofmt (now a formatter, not a linter)\n - goimports (now a formatter, not a linter)\n\n* Remove typecheck (always enabled by default in v2)\n\n* Disable linters with existing code quality issues\n\nTemporarily disable linters that report pre-existing code quality\nissues unrelated to the Go 1.25.9 upgrade to make CI pass:\n\n* errcheck - 50 unchecked errors (mostly logger calls and defers)\n* staticcheck - 4 code simplifications (De Morgan's law, fmt usage)\n* gosec - 10 security warnings (test/dummy code with weak permissions)\n* noctx - 4 missing context (legacy code using net.Dial, http.NewRequest)\n* revive - 48 style issues (missing comments, unused parameters)\n\nThese can be addressed in separate code quality improvement PRs.\n\nRemoved unused exclude-rules for disabled linters and legacy deadcode\nreferences that no longer exist in golangci-lint v2.\n\n(cherry picked from commit f3f918086f4e8fb64a835a1c4e77871ddcb060ec)\n\nCo-authored-by: Claude Sonnet 4.5 \u003cnoreply@anthropic.com\u003e"}},"strategy":{"type":"Docker","dockerStrategy":{"from":{"kind":"DockerImage","name":"registry.access.redhat.com/ubi9-minimal@sha256:2a7e516b217a8e9d18021f40a061f22274d6d677d11e3e368a672827e149050d"},"pullSecret":{"name":"builder-dockercfg-5x6sr"}}},"output":{"to":{"kind":"DockerImage","name":"image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-core:latest"},"pushSecret":{"name":"builder-dockercfg-5x6sr"}},"resources":{},"postCommit":{},"nodeSelector":null},"status":{"phase":"New","outputDockerImageReference":"image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-core:latest","config":{"kind":"BuildConfig","namespace":"service-telemetry","name":"sg-core"},"output":{},"conditions":[{"type":"New","status":"True","lastUpdateTime":"2026-06-12T00:30:04Z","lastTransitionTime":"2026-06-12T00:30:04Z"}]}} - name: LANG value: C.utf8 - name: PUSH_DOCKERCFG_PATH value: /var/run/secrets/openshift.io/push - name: PULL_DOCKERCFG_PATH value: /var/run/secrets/openshift.io/pull - name: BUILD_REGISTRIES_CONF_PATH value: /var/run/configs/openshift.io/build-system/registries.conf - name: BUILD_REGISTRIES_DIR_PATH value: /var/run/configs/openshift.io/build-system/registries.d - name: BUILD_SIGNATURE_POLICY_PATH value: /var/run/configs/openshift.io/build-system/policy.json - name: BUILD_STORAGE_CONF_PATH value: /var/run/configs/openshift.io/build-system/storage.conf - name: BUILD_BLOBCACHE_DIR value: /var/cache/blobs image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imagePullPolicy: IfNotPresent name: docker-build resources: {} securityContext: privileged: true runAsGroup: 0 runAsUser: 0 seccompProfile: type: Unconfined terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /var/lib/kubelet/config.json name: node-pullsecrets readOnly: true - mountPath: /tmp/build name: buildworkdir - mountPath: /var/lib/containers/cache name: buildcachedir - mountPath: /var/run/secrets/openshift.io/push name: builder-dockercfg-5x6sr-push readOnly: true - mountPath: /var/run/secrets/openshift.io/pull name: builder-dockercfg-5x6sr-pull readOnly: true - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/lib/containers name: container-storage-root - mountPath: /var/run/containers name: container-storage-run - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-kjbtc readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: builder-dockercfg-5x6sr initContainers: - args: - openshift-git-clone - --v=0 env: - name: BUILD value: | {"kind":"Build","apiVersion":"build.openshift.io/v1","metadata":{"name":"sg-core-2","namespace":"service-telemetry","uid":"8d8359f6-3173-4f66-ab07-402dcf8ee5f8","resourceVersion":"45920","generation":1,"creationTimestamp":"2026-06-12T00:30:04Z","labels":{"build":"sg-core","buildconfig":"sg-core","openshift.io/build-config.name":"sg-core","openshift.io/build.start-policy":"Serial"},"annotations":{"openshift.io/build-config.name":"sg-core","openshift.io/build.number":"2"},"ownerReferences":[{"apiVersion":"build.openshift.io/v1","kind":"BuildConfig","name":"sg-core","uid":"92faf571-21e6-43f9-9e79-4eb8afb4b06f","controller":true}],"managedFields":[{"manager":"openshift-apiserver","operation":"Update","apiVersion":"build.openshift.io/v1","time":"2026-06-12T00:30:04Z","fieldsType":"FieldsV1","fieldsV1":{"f:metadata":{"f:annotations":{".":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.number":{}},"f:labels":{".":{},"f:build":{},"f:buildconfig":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.start-policy":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"92faf571-21e6-43f9-9e79-4eb8afb4b06f\"}":{}}},"f:spec":{"f:output":{"f:to":{}},"f:revision":{".":{},"f:git":{".":{},"f:author":{".":{},"f:email":{},"f:name":{}},"f:commit":{},"f:committer":{".":{},"f:email":{},"f:name":{}},"f:message":{}},"f:type":{}},"f:serviceAccount":{},"f:source":{"f:binary":{},"f:dockerfile":{},"f:type":{}},"f:strategy":{"f:dockerStrategy":{".":{},"f:from":{}},"f:type":{}}},"f:status":{"f:conditions":{".":{},"k:{\"type\":\"New\"}":{".":{},"f:lastTransitionTime":{},"f:lastUpdateTime":{},"f:status":{},"f:type":{}}},"f:config":{},"f:phase":{}}}}]},"spec":{"serviceAccount":"builder","source":{"type":"Binary","binary":{},"dockerfile":"# --- build smart gateway ---\nFROM registry.access.redhat.com/ubi9:latest AS builder\nENV GOPATH=/go\nENV D=/go/src/github.com/infrawatch/sg-core\n\nWORKDIR $D\nCOPY . $D/\n\n# dependencies for qpid-proton-c\nCOPY build/repos/opstools.repo /etc/yum.repos.d/CentOS-OpsTools.repo\n\nRUN dnf install golang git qpid-proton-c-devel -y --setopt=tsflags=nodocs\nRUN go install golang.org/dl/go1.25.9@latest \u0026\u0026 /go/bin/go1.25.9 download \u0026\u0026 PRODUCTION_BUILD=false CONTAINER_BUILD=true GOCMD=/go/bin/go1.25.9 ./build.sh\n\n# --- end build, create smart gateway layer ---\nFROM registry.access.redhat.com/ubi9-minimal:latest\n\nLABEL io.k8s.display-name=\"Smart Gateway\" \\\n io.k8s.description=\"A component of the Service Telemetry Framework on the server side that ingests data from AMQP 1.x and provides a metrics scrape endpoint for Prometheus, and forwards events to ElasticSearch\" \\\n maintainer=\"Leif Madsen \u003cleif+smartgatewayoperator@redhat.com\u003e\"\n\nCOPY --from=builder /tmp/sg-core /\nCOPY --from=builder /tmp/plugins/*.so /usr/lib64/sg-core/\n\nENTRYPOINT [\"/sg-core\"]\n"},"revision":{"type":"Git","git":{"commit":"b329447352cbac3e1b44f73c3fafd112164b4f78","author":{"name":"Victoria Martinez de la Cruz","email":"victoria@redhat.com"},"committer":{"name":"GitHub","email":"noreply@github.com"},"message":"Update to golang 1.25.9 (#170) (#171)\n\n* Update to golang 1.25.9\n\nCloses-Bug: https://redhat.atlassian.net/browse/OSPRH-28974\nCloses-Bug: https://redhat.atlassian.net/browse/OSPRH-27803\n\n* Update golangci-lint to v2.11.4\n\n* Bump golangci-lint version to v2.11.4 for Go 1.25.9 support\n\n* Migrate .golangci.yaml to v2 configuration format\n\n* Remove deprecated linters integrated into staticcheck\n - gosimple (now part of staticcheck)\n - stylecheck (now part of staticcheck)\n\n* Remove formatters from linters list\n - gofmt (now a formatter, not a linter)\n - goimports (now a formatter, not a linter)\n\n* Remove typecheck (always enabled by default in v2)\n\n* Disable linters with existing code quality issues\n\nTemporarily disable linters that report pre-existing code quality\nissues unrelated to the Go 1.25.9 upgrade to make CI pass:\n\n* errcheck - 50 unchecked errors (mostly logger calls and defers)\n* staticcheck - 4 code simplifications (De Morgan's law, fmt usage)\n* gosec - 10 security warnings (test/dummy code with weak permissions)\n* noctx - 4 missing context (legacy code using net.Dial, http.NewRequest)\n* revive - 48 style issues (missing comments, unused parameters)\n\nThese can be addressed in separate code quality improvement PRs.\n\nRemoved unused exclude-rules for disabled linters and legacy deadcode\nreferences that no longer exist in golangci-lint v2.\n\n(cherry picked from commit f3f918086f4e8fb64a835a1c4e77871ddcb060ec)\n\nCo-authored-by: Claude Sonnet 4.5 \u003cnoreply@anthropic.com\u003e"}},"strategy":{"type":"Docker","dockerStrategy":{"from":{"kind":"DockerImage","name":"registry.access.redhat.com/ubi9-minimal@sha256:2a7e516b217a8e9d18021f40a061f22274d6d677d11e3e368a672827e149050d"},"pullSecret":{"name":"builder-dockercfg-5x6sr"}}},"output":{"to":{"kind":"DockerImage","name":"image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-core:latest"},"pushSecret":{"name":"builder-dockercfg-5x6sr"}},"resources":{},"postCommit":{},"nodeSelector":null},"status":{"phase":"New","outputDockerImageReference":"image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-core:latest","config":{"kind":"BuildConfig","namespace":"service-telemetry","name":"sg-core"},"output":{},"conditions":[{"type":"New","status":"True","lastUpdateTime":"2026-06-12T00:30:04Z","lastTransitionTime":"2026-06-12T00:30:04Z"}]}} - name: LANG value: C.utf8 - name: BUILD_REGISTRIES_CONF_PATH value: /var/run/configs/openshift.io/build-system/registries.conf - name: BUILD_REGISTRIES_DIR_PATH value: /var/run/configs/openshift.io/build-system/registries.d - name: BUILD_SIGNATURE_POLICY_PATH value: /var/run/configs/openshift.io/build-system/policy.json - name: BUILD_STORAGE_CONF_PATH value: /var/run/configs/openshift.io/build-system/storage.conf - name: BUILD_BLOBCACHE_DIR value: /var/cache/blobs image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imagePullPolicy: IfNotPresent name: git-clone resources: {} securityContext: capabilities: add: - CHOWN - DAC_OVERRIDE drop: - ALL privileged: false runAsGroup: 0 runAsNonRoot: false runAsUser: 0 seccompProfile: type: RuntimeDefault stdin: true stdinOnce: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /tmp/build name: buildworkdir - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-kjbtc readOnly: true - args: - openshift-manage-dockerfile - --v=0 env: - name: BUILD value: | {"kind":"Build","apiVersion":"build.openshift.io/v1","metadata":{"name":"sg-core-2","namespace":"service-telemetry","uid":"8d8359f6-3173-4f66-ab07-402dcf8ee5f8","resourceVersion":"45920","generation":1,"creationTimestamp":"2026-06-12T00:30:04Z","labels":{"build":"sg-core","buildconfig":"sg-core","openshift.io/build-config.name":"sg-core","openshift.io/build.start-policy":"Serial"},"annotations":{"openshift.io/build-config.name":"sg-core","openshift.io/build.number":"2"},"ownerReferences":[{"apiVersion":"build.openshift.io/v1","kind":"BuildConfig","name":"sg-core","uid":"92faf571-21e6-43f9-9e79-4eb8afb4b06f","controller":true}],"managedFields":[{"manager":"openshift-apiserver","operation":"Update","apiVersion":"build.openshift.io/v1","time":"2026-06-12T00:30:04Z","fieldsType":"FieldsV1","fieldsV1":{"f:metadata":{"f:annotations":{".":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.number":{}},"f:labels":{".":{},"f:build":{},"f:buildconfig":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.start-policy":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"92faf571-21e6-43f9-9e79-4eb8afb4b06f\"}":{}}},"f:spec":{"f:output":{"f:to":{}},"f:revision":{".":{},"f:git":{".":{},"f:author":{".":{},"f:email":{},"f:name":{}},"f:commit":{},"f:committer":{".":{},"f:email":{},"f:name":{}},"f:message":{}},"f:type":{}},"f:serviceAccount":{},"f:source":{"f:binary":{},"f:dockerfile":{},"f:type":{}},"f:strategy":{"f:dockerStrategy":{".":{},"f:from":{}},"f:type":{}}},"f:status":{"f:conditions":{".":{},"k:{\"type\":\"New\"}":{".":{},"f:lastTransitionTime":{},"f:lastUpdateTime":{},"f:status":{},"f:type":{}}},"f:config":{},"f:phase":{}}}}]},"spec":{"serviceAccount":"builder","source":{"type":"Binary","binary":{},"dockerfile":"# --- build smart gateway ---\nFROM registry.access.redhat.com/ubi9:latest AS builder\nENV GOPATH=/go\nENV D=/go/src/github.com/infrawatch/sg-core\n\nWORKDIR $D\nCOPY . $D/\n\n# dependencies for qpid-proton-c\nCOPY build/repos/opstools.repo /etc/yum.repos.d/CentOS-OpsTools.repo\n\nRUN dnf install golang git qpid-proton-c-devel -y --setopt=tsflags=nodocs\nRUN go install golang.org/dl/go1.25.9@latest \u0026\u0026 /go/bin/go1.25.9 download \u0026\u0026 PRODUCTION_BUILD=false CONTAINER_BUILD=true GOCMD=/go/bin/go1.25.9 ./build.sh\n\n# --- end build, create smart gateway layer ---\nFROM registry.access.redhat.com/ubi9-minimal:latest\n\nLABEL io.k8s.display-name=\"Smart Gateway\" \\\n io.k8s.description=\"A component of the Service Telemetry Framework on the server side that ingests data from AMQP 1.x and provides a metrics scrape endpoint for Prometheus, and forwards events to ElasticSearch\" \\\n maintainer=\"Leif Madsen \u003cleif+smartgatewayoperator@redhat.com\u003e\"\n\nCOPY --from=builder /tmp/sg-core /\nCOPY --from=builder /tmp/plugins/*.so /usr/lib64/sg-core/\n\nENTRYPOINT [\"/sg-core\"]\n"},"revision":{"type":"Git","git":{"commit":"b329447352cbac3e1b44f73c3fafd112164b4f78","author":{"name":"Victoria Martinez de la Cruz","email":"victoria@redhat.com"},"committer":{"name":"GitHub","email":"noreply@github.com"},"message":"Update to golang 1.25.9 (#170) (#171)\n\n* Update to golang 1.25.9\n\nCloses-Bug: https://redhat.atlassian.net/browse/OSPRH-28974\nCloses-Bug: https://redhat.atlassian.net/browse/OSPRH-27803\n\n* Update golangci-lint to v2.11.4\n\n* Bump golangci-lint version to v2.11.4 for Go 1.25.9 support\n\n* Migrate .golangci.yaml to v2 configuration format\n\n* Remove deprecated linters integrated into staticcheck\n - gosimple (now part of staticcheck)\n - stylecheck (now part of staticcheck)\n\n* Remove formatters from linters list\n - gofmt (now a formatter, not a linter)\n - goimports (now a formatter, not a linter)\n\n* Remove typecheck (always enabled by default in v2)\n\n* Disable linters with existing code quality issues\n\nTemporarily disable linters that report pre-existing code quality\nissues unrelated to the Go 1.25.9 upgrade to make CI pass:\n\n* errcheck - 50 unchecked errors (mostly logger calls and defers)\n* staticcheck - 4 code simplifications (De Morgan's law, fmt usage)\n* gosec - 10 security warnings (test/dummy code with weak permissions)\n* noctx - 4 missing context (legacy code using net.Dial, http.NewRequest)\n* revive - 48 style issues (missing comments, unused parameters)\n\nThese can be addressed in separate code quality improvement PRs.\n\nRemoved unused exclude-rules for disabled linters and legacy deadcode\nreferences that no longer exist in golangci-lint v2.\n\n(cherry picked from commit f3f918086f4e8fb64a835a1c4e77871ddcb060ec)\n\nCo-authored-by: Claude Sonnet 4.5 \u003cnoreply@anthropic.com\u003e"}},"strategy":{"type":"Docker","dockerStrategy":{"from":{"kind":"DockerImage","name":"registry.access.redhat.com/ubi9-minimal@sha256:2a7e516b217a8e9d18021f40a061f22274d6d677d11e3e368a672827e149050d"},"pullSecret":{"name":"builder-dockercfg-5x6sr"}}},"output":{"to":{"kind":"DockerImage","name":"image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-core:latest"},"pushSecret":{"name":"builder-dockercfg-5x6sr"}},"resources":{},"postCommit":{},"nodeSelector":null},"status":{"phase":"New","outputDockerImageReference":"image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-core:latest","config":{"kind":"BuildConfig","namespace":"service-telemetry","name":"sg-core"},"output":{},"conditions":[{"type":"New","status":"True","lastUpdateTime":"2026-06-12T00:30:04Z","lastTransitionTime":"2026-06-12T00:30:04Z"}]}} - name: LANG value: C.utf8 - name: BUILD_REGISTRIES_CONF_PATH value: /var/run/configs/openshift.io/build-system/registries.conf - name: BUILD_REGISTRIES_DIR_PATH value: /var/run/configs/openshift.io/build-system/registries.d - name: BUILD_SIGNATURE_POLICY_PATH value: /var/run/configs/openshift.io/build-system/policy.json - name: BUILD_STORAGE_CONF_PATH value: /var/run/configs/openshift.io/build-system/storage.conf - name: BUILD_BLOBCACHE_DIR value: /var/cache/blobs image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imagePullPolicy: IfNotPresent name: manage-dockerfile resources: {} securityContext: capabilities: add: - CHOWN - DAC_OVERRIDE drop: - ALL privileged: false runAsGroup: 0 runAsNonRoot: false runAsUser: 0 seccompProfile: type: RuntimeDefault terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /tmp/build name: buildworkdir - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-kjbtc readOnly: true nodeName: crc nodeSelector: kubernetes.io/os: linux preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Never schedulerName: default-scheduler securityContext: {} serviceAccount: builder serviceAccountName: builder terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - hostPath: path: /var/lib/containers/cache type: "" name: buildcachedir - emptyDir: {} name: buildworkdir - hostPath: path: /var/lib/kubelet/config.json type: File name: node-pullsecrets - name: builder-dockercfg-5x6sr-push secret: defaultMode: 384 secretName: builder-dockercfg-5x6sr - name: builder-dockercfg-5x6sr-pull secret: defaultMode: 384 secretName: builder-dockercfg-5x6sr - configMap: defaultMode: 420 name: sg-core-2-sys-config name: build-system-configs - configMap: defaultMode: 420 items: - key: service-ca.crt path: certs.d/image-registry.openshift-image-registry.svc:5000/ca.crt - key: default-route-openshift-image-registry.apps-crc.testing path: certs.d/default-route-openshift-image-registry.apps-crc.testing/ca.crt name: sg-core-2-ca name: build-ca-bundles - configMap: defaultMode: 420 items: - key: ca-bundle.crt path: tls-ca-bundle.pem name: sg-core-2-global-ca name: build-proxy-ca-bundles - emptyDir: {} name: container-storage-root - emptyDir: {} name: container-storage-run - emptyDir: {} name: build-blob-cache - name: kube-api-access-kjbtc projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-12T00:33:32Z" status: "False" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-12T00:30:08Z" reason: PodCompleted status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-12T00:33:31Z" reason: PodCompleted status: "False" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-12T00:33:31Z" reason: PodCompleted status: "False" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-12T00:30:04Z" status: "True" type: PodScheduled containerStatuses: - containerID: cri-o://577b979622da2293f8003a4f709ef86797b3d1c7bb4f80c4e7d2aa523af5f03b image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 lastState: {} name: docker-build ready: false resources: {} restartCount: 0 started: false state: terminated: containerID: cri-o://577b979622da2293f8003a4f709ef86797b3d1c7bb4f80c4e7d2aa523af5f03b exitCode: 0 finishedAt: "2026-06-12T00:33:31Z" reason: Completed startedAt: "2026-06-12T00:30:09Z" user: linux: gid: 0 supplementalGroups: - 0 uid: 0 volumeMounts: - mountPath: /var/lib/kubelet/config.json name: node-pullsecrets readOnly: true recursiveReadOnly: Disabled - mountPath: /tmp/build name: buildworkdir - mountPath: /var/lib/containers/cache name: buildcachedir - mountPath: /var/run/secrets/openshift.io/push name: builder-dockercfg-5x6sr-push readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/secrets/openshift.io/pull name: builder-dockercfg-5x6sr-pull readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/lib/containers name: container-storage-root - mountPath: /var/run/containers name: container-storage-run - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-kjbtc readOnly: true recursiveReadOnly: Disabled hostIP: 192.168.126.11 hostIPs: - ip: 192.168.126.11 initContainerStatuses: - containerID: cri-o://72ed7940de0431f60297f76ef5c9b9782a9cdb0d5633ca0990d3a997386a469e image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 lastState: {} name: git-clone ready: true resources: {} restartCount: 0 started: false state: terminated: containerID: cri-o://72ed7940de0431f60297f76ef5c9b9782a9cdb0d5633ca0990d3a997386a469e exitCode: 0 finishedAt: "2026-06-12T00:30:06Z" reason: Completed startedAt: "2026-06-12T00:30:06Z" user: linux: gid: 0 supplementalGroups: - 0 uid: 0 volumeMounts: - mountPath: /tmp/build name: buildworkdir - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-kjbtc readOnly: true recursiveReadOnly: Disabled - containerID: cri-o://b17980528107b34e05b8017d156ac7ca296dac1f5c535a06f838ce2d15ae42a3 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 lastState: {} name: manage-dockerfile ready: true resources: {} restartCount: 0 started: false state: terminated: containerID: cri-o://b17980528107b34e05b8017d156ac7ca296dac1f5c535a06f838ce2d15ae42a3 exitCode: 0 finishedAt: "2026-06-12T00:30:08Z" reason: Completed startedAt: "2026-06-12T00:30:08Z" user: linux: gid: 0 supplementalGroups: - 0 uid: 0 volumeMounts: - mountPath: /tmp/build name: buildworkdir - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-kjbtc readOnly: true recursiveReadOnly: Disabled phase: Succeeded podIP: 10.217.0.79 podIPs: - ip: 10.217.0.79 qosClass: BestEffort startTime: "2026-06-12T00:30:05Z" - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.217.0.71/23"],"mac_address":"0a:58:0a:d9:00:47","gateway_ips":["10.217.0.1"],"routes":[{"dest":"10.217.0.0/22","nextHop":"10.217.0.1"},{"dest":"10.217.4.0/23","nextHop":"10.217.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.217.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.217.0.1"}],"ip_address":"10.217.0.71/23","gateway_ip":"10.217.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.217.0.71" ], "mac": "0a:58:0a:d9:00:47", "default": true, "dns": {} }] openshift.io/build.name: smart-gateway-operator-2 openshift.io/scc: privileged security.openshift.io/validated-scc-subject-type: user creationTimestamp: "2026-06-12T00:28:30Z" generation: 1 labels: openshift.io/build.name: smart-gateway-operator-2 name: smart-gateway-operator-2-build namespace: service-telemetry ownerReferences: - apiVersion: build.openshift.io/v1 controller: true kind: Build name: smart-gateway-operator-2 uid: 8ed6f236-bbc5-4478-afca-a18ce9c1b8b9 resourceVersion: "45773" uid: 40f0facb-b0bb-4496-acc7-ac7219c53bfe spec: activeDeadlineSeconds: 604800 containers: - args: - openshift-docker-build - --v=0 env: - name: BUILD value: | {"kind":"Build","apiVersion":"build.openshift.io/v1","metadata":{"name":"smart-gateway-operator-2","namespace":"service-telemetry","uid":"8ed6f236-bbc5-4478-afca-a18ce9c1b8b9","resourceVersion":"45577","generation":1,"creationTimestamp":"2026-06-12T00:28:30Z","labels":{"build":"smart-gateway-operator","buildconfig":"smart-gateway-operator","openshift.io/build-config.name":"smart-gateway-operator","openshift.io/build.start-policy":"Serial"},"annotations":{"openshift.io/build-config.name":"smart-gateway-operator","openshift.io/build.number":"2"},"ownerReferences":[{"apiVersion":"build.openshift.io/v1","kind":"BuildConfig","name":"smart-gateway-operator","uid":"f850bb7b-9711-4fa1-9089-74de7cde054f","controller":true}],"managedFields":[{"manager":"openshift-apiserver","operation":"Update","apiVersion":"build.openshift.io/v1","time":"2026-06-12T00:28:30Z","fieldsType":"FieldsV1","fieldsV1":{"f:metadata":{"f:annotations":{".":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.number":{}},"f:labels":{".":{},"f:build":{},"f:buildconfig":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.start-policy":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"f850bb7b-9711-4fa1-9089-74de7cde054f\"}":{}}},"f:spec":{"f:output":{"f:to":{}},"f:revision":{".":{},"f:git":{".":{},"f:author":{".":{},"f:email":{},"f:name":{}},"f:commit":{},"f:committer":{".":{},"f:email":{},"f:name":{}},"f:message":{}},"f:type":{}},"f:serviceAccount":{},"f:source":{"f:binary":{},"f:dockerfile":{},"f:type":{}},"f:strategy":{"f:dockerStrategy":{".":{},"f:from":{}},"f:type":{}}},"f:status":{"f:conditions":{".":{},"k:{\"type\":\"New\"}":{".":{},"f:lastTransitionTime":{},"f:lastUpdateTime":{},"f:status":{},"f:type":{}}},"f:config":{},"f:phase":{}}}}]},"spec":{"serviceAccount":"builder","source":{"type":"Binary","binary":{},"dockerfile":"FROM quay.io/operator-framework/ansible-operator:v1.38.1\n\n# temporarily switch to root user to adjust image layers\nUSER 0\n\n# update the base image to allow forward-looking optimistic updates during the testing phase, with the added benefit of helping move closer to passing security scans.\n# -- excludes ansible so it remains at 2.9 tag as shipped with the base image\n# -- cleans up the cached data from dnf to keep the image as small as possible\nRUN dnf update -y --exclude=ansible* \u0026\u0026 dnf clean all \u0026\u0026 rm -rf /var/cache/dnf\n\nCOPY requirements.yml ${HOME}/requirements.yml\nRUN ansible-galaxy collection install -r ${HOME}/requirements.yml \\\n \u0026\u0026 chmod -R ug+rwx ${HOME}/.ansible\n\n# switch back to user 1001 when running the base image (non-root)\nUSER 1001\n\n# copy in required artifacts for the operator\nCOPY roles/ ${HOME}/roles/\nCOPY watches.yaml ${HOME}/watches.yaml\n"},"revision":{"type":"Git","git":{"commit":"f7c759c05aa60bc2a2270dcbcc6fbb59b16b21c5","author":{"name":"Victoria Martinez de la Cruz","email":"victoria@redhat.com"},"committer":{"name":"GitHub","email":"noreply@github.com"},"message":"Mark SGO as deprecated (#188) (#189)\n\nAdd deprecation notices to indicate this operator will no longer receive feature updates.\n\nChanges include CSV deprecated annotation, OLM deprecations file for OperatorHub warnings, and README deprecation banner.\n\n(cherry picked from commit ac86a471e37d3cddb4c47e71dbb96c037deb2af1)\n\nCo-authored-by: Claude Sonnet 4.5 \u003cnoreply@anthropic.com\u003e"}},"strategy":{"type":"Docker","dockerStrategy":{"from":{"kind":"DockerImage","name":"quay.io/operator-framework/ansible-operator@sha256:9895727b7f66bb88fa4c6afdefc7eecf86e6b7c1293920f866a035da9decc58e"},"pullSecret":{"name":"builder-dockercfg-5x6sr"}}},"output":{"to":{"kind":"DockerImage","name":"image-registry.openshift-image-registry.svc:5000/service-telemetry/smart-gateway-operator:latest"},"pushSecret":{"name":"builder-dockercfg-5x6sr"}},"resources":{},"postCommit":{},"nodeSelector":null},"status":{"phase":"New","outputDockerImageReference":"image-registry.openshift-image-registry.svc:5000/service-telemetry/smart-gateway-operator:latest","config":{"kind":"BuildConfig","namespace":"service-telemetry","name":"smart-gateway-operator"},"output":{},"conditions":[{"type":"New","status":"True","lastUpdateTime":"2026-06-12T00:28:30Z","lastTransitionTime":"2026-06-12T00:28:30Z"}]}} - name: LANG value: C.utf8 - name: PUSH_DOCKERCFG_PATH value: /var/run/secrets/openshift.io/push - name: PULL_DOCKERCFG_PATH value: /var/run/secrets/openshift.io/pull - name: BUILD_REGISTRIES_CONF_PATH value: /var/run/configs/openshift.io/build-system/registries.conf - name: BUILD_REGISTRIES_DIR_PATH value: /var/run/configs/openshift.io/build-system/registries.d - name: BUILD_SIGNATURE_POLICY_PATH value: /var/run/configs/openshift.io/build-system/policy.json - name: BUILD_STORAGE_CONF_PATH value: /var/run/configs/openshift.io/build-system/storage.conf - name: BUILD_BLOBCACHE_DIR value: /var/cache/blobs image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imagePullPolicy: IfNotPresent name: docker-build resources: {} securityContext: privileged: true runAsGroup: 0 runAsUser: 0 seccompProfile: type: Unconfined terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /var/lib/kubelet/config.json name: node-pullsecrets readOnly: true - mountPath: /tmp/build name: buildworkdir - mountPath: /var/lib/containers/cache name: buildcachedir - mountPath: /var/run/secrets/openshift.io/push name: builder-dockercfg-5x6sr-push readOnly: true - mountPath: /var/run/secrets/openshift.io/pull name: builder-dockercfg-5x6sr-pull readOnly: true - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/lib/containers name: container-storage-root - mountPath: /var/run/containers name: container-storage-run - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-c6q55 readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: builder-dockercfg-5x6sr initContainers: - args: - openshift-git-clone - --v=0 env: - name: BUILD value: | {"kind":"Build","apiVersion":"build.openshift.io/v1","metadata":{"name":"smart-gateway-operator-2","namespace":"service-telemetry","uid":"8ed6f236-bbc5-4478-afca-a18ce9c1b8b9","resourceVersion":"45577","generation":1,"creationTimestamp":"2026-06-12T00:28:30Z","labels":{"build":"smart-gateway-operator","buildconfig":"smart-gateway-operator","openshift.io/build-config.name":"smart-gateway-operator","openshift.io/build.start-policy":"Serial"},"annotations":{"openshift.io/build-config.name":"smart-gateway-operator","openshift.io/build.number":"2"},"ownerReferences":[{"apiVersion":"build.openshift.io/v1","kind":"BuildConfig","name":"smart-gateway-operator","uid":"f850bb7b-9711-4fa1-9089-74de7cde054f","controller":true}],"managedFields":[{"manager":"openshift-apiserver","operation":"Update","apiVersion":"build.openshift.io/v1","time":"2026-06-12T00:28:30Z","fieldsType":"FieldsV1","fieldsV1":{"f:metadata":{"f:annotations":{".":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.number":{}},"f:labels":{".":{},"f:build":{},"f:buildconfig":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.start-policy":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"f850bb7b-9711-4fa1-9089-74de7cde054f\"}":{}}},"f:spec":{"f:output":{"f:to":{}},"f:revision":{".":{},"f:git":{".":{},"f:author":{".":{},"f:email":{},"f:name":{}},"f:commit":{},"f:committer":{".":{},"f:email":{},"f:name":{}},"f:message":{}},"f:type":{}},"f:serviceAccount":{},"f:source":{"f:binary":{},"f:dockerfile":{},"f:type":{}},"f:strategy":{"f:dockerStrategy":{".":{},"f:from":{}},"f:type":{}}},"f:status":{"f:conditions":{".":{},"k:{\"type\":\"New\"}":{".":{},"f:lastTransitionTime":{},"f:lastUpdateTime":{},"f:status":{},"f:type":{}}},"f:config":{},"f:phase":{}}}}]},"spec":{"serviceAccount":"builder","source":{"type":"Binary","binary":{},"dockerfile":"FROM quay.io/operator-framework/ansible-operator:v1.38.1\n\n# temporarily switch to root user to adjust image layers\nUSER 0\n\n# update the base image to allow forward-looking optimistic updates during the testing phase, with the added benefit of helping move closer to passing security scans.\n# -- excludes ansible so it remains at 2.9 tag as shipped with the base image\n# -- cleans up the cached data from dnf to keep the image as small as possible\nRUN dnf update -y --exclude=ansible* \u0026\u0026 dnf clean all \u0026\u0026 rm -rf /var/cache/dnf\n\nCOPY requirements.yml ${HOME}/requirements.yml\nRUN ansible-galaxy collection install -r ${HOME}/requirements.yml \\\n \u0026\u0026 chmod -R ug+rwx ${HOME}/.ansible\n\n# switch back to user 1001 when running the base image (non-root)\nUSER 1001\n\n# copy in required artifacts for the operator\nCOPY roles/ ${HOME}/roles/\nCOPY watches.yaml ${HOME}/watches.yaml\n"},"revision":{"type":"Git","git":{"commit":"f7c759c05aa60bc2a2270dcbcc6fbb59b16b21c5","author":{"name":"Victoria Martinez de la Cruz","email":"victoria@redhat.com"},"committer":{"name":"GitHub","email":"noreply@github.com"},"message":"Mark SGO as deprecated (#188) (#189)\n\nAdd deprecation notices to indicate this operator will no longer receive feature updates.\n\nChanges include CSV deprecated annotation, OLM deprecations file for OperatorHub warnings, and README deprecation banner.\n\n(cherry picked from commit ac86a471e37d3cddb4c47e71dbb96c037deb2af1)\n\nCo-authored-by: Claude Sonnet 4.5 \u003cnoreply@anthropic.com\u003e"}},"strategy":{"type":"Docker","dockerStrategy":{"from":{"kind":"DockerImage","name":"quay.io/operator-framework/ansible-operator@sha256:9895727b7f66bb88fa4c6afdefc7eecf86e6b7c1293920f866a035da9decc58e"},"pullSecret":{"name":"builder-dockercfg-5x6sr"}}},"output":{"to":{"kind":"DockerImage","name":"image-registry.openshift-image-registry.svc:5000/service-telemetry/smart-gateway-operator:latest"},"pushSecret":{"name":"builder-dockercfg-5x6sr"}},"resources":{},"postCommit":{},"nodeSelector":null},"status":{"phase":"New","outputDockerImageReference":"image-registry.openshift-image-registry.svc:5000/service-telemetry/smart-gateway-operator:latest","config":{"kind":"BuildConfig","namespace":"service-telemetry","name":"smart-gateway-operator"},"output":{},"conditions":[{"type":"New","status":"True","lastUpdateTime":"2026-06-12T00:28:30Z","lastTransitionTime":"2026-06-12T00:28:30Z"}]}} - name: LANG value: C.utf8 - name: BUILD_REGISTRIES_CONF_PATH value: /var/run/configs/openshift.io/build-system/registries.conf - name: BUILD_REGISTRIES_DIR_PATH value: /var/run/configs/openshift.io/build-system/registries.d - name: BUILD_SIGNATURE_POLICY_PATH value: /var/run/configs/openshift.io/build-system/policy.json - name: BUILD_STORAGE_CONF_PATH value: /var/run/configs/openshift.io/build-system/storage.conf - name: BUILD_BLOBCACHE_DIR value: /var/cache/blobs image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imagePullPolicy: IfNotPresent name: git-clone resources: {} securityContext: capabilities: add: - CHOWN - DAC_OVERRIDE drop: - ALL privileged: false runAsGroup: 0 runAsNonRoot: false runAsUser: 0 seccompProfile: type: RuntimeDefault stdin: true stdinOnce: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /tmp/build name: buildworkdir - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-c6q55 readOnly: true - args: - openshift-manage-dockerfile - --v=0 env: - name: BUILD value: | {"kind":"Build","apiVersion":"build.openshift.io/v1","metadata":{"name":"smart-gateway-operator-2","namespace":"service-telemetry","uid":"8ed6f236-bbc5-4478-afca-a18ce9c1b8b9","resourceVersion":"45577","generation":1,"creationTimestamp":"2026-06-12T00:28:30Z","labels":{"build":"smart-gateway-operator","buildconfig":"smart-gateway-operator","openshift.io/build-config.name":"smart-gateway-operator","openshift.io/build.start-policy":"Serial"},"annotations":{"openshift.io/build-config.name":"smart-gateway-operator","openshift.io/build.number":"2"},"ownerReferences":[{"apiVersion":"build.openshift.io/v1","kind":"BuildConfig","name":"smart-gateway-operator","uid":"f850bb7b-9711-4fa1-9089-74de7cde054f","controller":true}],"managedFields":[{"manager":"openshift-apiserver","operation":"Update","apiVersion":"build.openshift.io/v1","time":"2026-06-12T00:28:30Z","fieldsType":"FieldsV1","fieldsV1":{"f:metadata":{"f:annotations":{".":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.number":{}},"f:labels":{".":{},"f:build":{},"f:buildconfig":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.start-policy":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"f850bb7b-9711-4fa1-9089-74de7cde054f\"}":{}}},"f:spec":{"f:output":{"f:to":{}},"f:revision":{".":{},"f:git":{".":{},"f:author":{".":{},"f:email":{},"f:name":{}},"f:commit":{},"f:committer":{".":{},"f:email":{},"f:name":{}},"f:message":{}},"f:type":{}},"f:serviceAccount":{},"f:source":{"f:binary":{},"f:dockerfile":{},"f:type":{}},"f:strategy":{"f:dockerStrategy":{".":{},"f:from":{}},"f:type":{}}},"f:status":{"f:conditions":{".":{},"k:{\"type\":\"New\"}":{".":{},"f:lastTransitionTime":{},"f:lastUpdateTime":{},"f:status":{},"f:type":{}}},"f:config":{},"f:phase":{}}}}]},"spec":{"serviceAccount":"builder","source":{"type":"Binary","binary":{},"dockerfile":"FROM quay.io/operator-framework/ansible-operator:v1.38.1\n\n# temporarily switch to root user to adjust image layers\nUSER 0\n\n# update the base image to allow forward-looking optimistic updates during the testing phase, with the added benefit of helping move closer to passing security scans.\n# -- excludes ansible so it remains at 2.9 tag as shipped with the base image\n# -- cleans up the cached data from dnf to keep the image as small as possible\nRUN dnf update -y --exclude=ansible* \u0026\u0026 dnf clean all \u0026\u0026 rm -rf /var/cache/dnf\n\nCOPY requirements.yml ${HOME}/requirements.yml\nRUN ansible-galaxy collection install -r ${HOME}/requirements.yml \\\n \u0026\u0026 chmod -R ug+rwx ${HOME}/.ansible\n\n# switch back to user 1001 when running the base image (non-root)\nUSER 1001\n\n# copy in required artifacts for the operator\nCOPY roles/ ${HOME}/roles/\nCOPY watches.yaml ${HOME}/watches.yaml\n"},"revision":{"type":"Git","git":{"commit":"f7c759c05aa60bc2a2270dcbcc6fbb59b16b21c5","author":{"name":"Victoria Martinez de la Cruz","email":"victoria@redhat.com"},"committer":{"name":"GitHub","email":"noreply@github.com"},"message":"Mark SGO as deprecated (#188) (#189)\n\nAdd deprecation notices to indicate this operator will no longer receive feature updates.\n\nChanges include CSV deprecated annotation, OLM deprecations file for OperatorHub warnings, and README deprecation banner.\n\n(cherry picked from commit ac86a471e37d3cddb4c47e71dbb96c037deb2af1)\n\nCo-authored-by: Claude Sonnet 4.5 \u003cnoreply@anthropic.com\u003e"}},"strategy":{"type":"Docker","dockerStrategy":{"from":{"kind":"DockerImage","name":"quay.io/operator-framework/ansible-operator@sha256:9895727b7f66bb88fa4c6afdefc7eecf86e6b7c1293920f866a035da9decc58e"},"pullSecret":{"name":"builder-dockercfg-5x6sr"}}},"output":{"to":{"kind":"DockerImage","name":"image-registry.openshift-image-registry.svc:5000/service-telemetry/smart-gateway-operator:latest"},"pushSecret":{"name":"builder-dockercfg-5x6sr"}},"resources":{},"postCommit":{},"nodeSelector":null},"status":{"phase":"New","outputDockerImageReference":"image-registry.openshift-image-registry.svc:5000/service-telemetry/smart-gateway-operator:latest","config":{"kind":"BuildConfig","namespace":"service-telemetry","name":"smart-gateway-operator"},"output":{},"conditions":[{"type":"New","status":"True","lastUpdateTime":"2026-06-12T00:28:30Z","lastTransitionTime":"2026-06-12T00:28:30Z"}]}} - name: LANG value: C.utf8 - name: BUILD_REGISTRIES_CONF_PATH value: /var/run/configs/openshift.io/build-system/registries.conf - name: BUILD_REGISTRIES_DIR_PATH value: /var/run/configs/openshift.io/build-system/registries.d - name: BUILD_SIGNATURE_POLICY_PATH value: /var/run/configs/openshift.io/build-system/policy.json - name: BUILD_STORAGE_CONF_PATH value: /var/run/configs/openshift.io/build-system/storage.conf - name: BUILD_BLOBCACHE_DIR value: /var/cache/blobs image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imagePullPolicy: IfNotPresent name: manage-dockerfile resources: {} securityContext: capabilities: add: - CHOWN - DAC_OVERRIDE drop: - ALL privileged: false runAsGroup: 0 runAsNonRoot: false runAsUser: 0 seccompProfile: type: RuntimeDefault terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /tmp/build name: buildworkdir - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-c6q55 readOnly: true nodeName: crc nodeSelector: kubernetes.io/os: linux preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Never schedulerName: default-scheduler securityContext: {} serviceAccount: builder serviceAccountName: builder terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - hostPath: path: /var/lib/containers/cache type: "" name: buildcachedir - emptyDir: {} name: buildworkdir - hostPath: path: /var/lib/kubelet/config.json type: File name: node-pullsecrets - name: builder-dockercfg-5x6sr-push secret: defaultMode: 384 secretName: builder-dockercfg-5x6sr - name: builder-dockercfg-5x6sr-pull secret: defaultMode: 384 secretName: builder-dockercfg-5x6sr - configMap: defaultMode: 420 name: smart-gateway-operator-2-sys-config name: build-system-configs - configMap: defaultMode: 420 items: - key: service-ca.crt path: certs.d/image-registry.openshift-image-registry.svc:5000/ca.crt - key: default-route-openshift-image-registry.apps-crc.testing path: certs.d/default-route-openshift-image-registry.apps-crc.testing/ca.crt name: smart-gateway-operator-2-ca name: build-ca-bundles - configMap: defaultMode: 420 items: - key: ca-bundle.crt path: tls-ca-bundle.pem name: smart-gateway-operator-2-global-ca name: build-proxy-ca-bundles - emptyDir: {} name: container-storage-root - emptyDir: {} name: container-storage-run - emptyDir: {} name: build-blob-cache - name: kube-api-access-c6q55 projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-12T00:29:47Z" status: "False" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-12T00:28:35Z" reason: PodCompleted status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-12T00:29:46Z" reason: PodCompleted status: "False" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-12T00:29:46Z" reason: PodCompleted status: "False" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-12T00:28:30Z" status: "True" type: PodScheduled containerStatuses: - containerID: cri-o://653e67243ffb83571d044f58e3661f0001576d0b50ed22a9902bd2be52ffc472 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 lastState: {} name: docker-build ready: false resources: {} restartCount: 0 started: false state: terminated: containerID: cri-o://653e67243ffb83571d044f58e3661f0001576d0b50ed22a9902bd2be52ffc472 exitCode: 0 finishedAt: "2026-06-12T00:29:46Z" reason: Completed startedAt: "2026-06-12T00:28:36Z" user: linux: gid: 0 supplementalGroups: - 0 uid: 0 volumeMounts: - mountPath: /var/lib/kubelet/config.json name: node-pullsecrets readOnly: true recursiveReadOnly: Disabled - mountPath: /tmp/build name: buildworkdir - mountPath: /var/lib/containers/cache name: buildcachedir - mountPath: /var/run/secrets/openshift.io/push name: builder-dockercfg-5x6sr-push readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/secrets/openshift.io/pull name: builder-dockercfg-5x6sr-pull readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/lib/containers name: container-storage-root - mountPath: /var/run/containers name: container-storage-run - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-c6q55 readOnly: true recursiveReadOnly: Disabled hostIP: 192.168.126.11 hostIPs: - ip: 192.168.126.11 initContainerStatuses: - containerID: cri-o://2c7e80940ee101fbd13fd94c7d7c32f4fe668e37af6a9adaeb75955c168f7fb8 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 lastState: {} name: git-clone ready: true resources: {} restartCount: 0 started: false state: terminated: containerID: cri-o://2c7e80940ee101fbd13fd94c7d7c32f4fe668e37af6a9adaeb75955c168f7fb8 exitCode: 0 finishedAt: "2026-06-12T00:28:33Z" reason: Completed startedAt: "2026-06-12T00:28:32Z" user: linux: gid: 0 supplementalGroups: - 0 uid: 0 volumeMounts: - mountPath: /tmp/build name: buildworkdir - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-c6q55 readOnly: true recursiveReadOnly: Disabled - containerID: cri-o://b2fd9f176c2c2d44aa3d93097298392a14bd2dc2c7cfff0856bd7f744258c363 image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 imageID: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c2a80d6dd943dbbb5c0bc63f4aa17d55e44dbde22a3ea4e6a41a32930dc4ac77 lastState: {} name: manage-dockerfile ready: true resources: {} restartCount: 0 started: false state: terminated: containerID: cri-o://b2fd9f176c2c2d44aa3d93097298392a14bd2dc2c7cfff0856bd7f744258c363 exitCode: 0 finishedAt: "2026-06-12T00:28:35Z" reason: Completed startedAt: "2026-06-12T00:28:35Z" user: linux: gid: 0 supplementalGroups: - 0 uid: 0 volumeMounts: - mountPath: /tmp/build name: buildworkdir - mountPath: /var/run/configs/openshift.io/build-system name: build-system-configs readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/configs/openshift.io/certs name: build-ca-bundles - mountPath: /var/run/configs/openshift.io/pki name: build-proxy-ca-bundles - mountPath: /var/cache/blobs name: build-blob-cache - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-c6q55 readOnly: true recursiveReadOnly: Disabled phase: Succeeded podIP: 10.217.0.71 podIPs: - ip: 10.217.0.71 qosClass: BestEffort startTime: "2026-06-12T00:28:32Z" - apiVersion: v1 kind: Pod metadata: annotations: alm-examples: |- [ { "apiVersion": "smartgateway.infra.watch/v2", "kind": "SmartGateway", "metadata": { "name": "demo" }, "spec": { "applications": [ { "config": "host: localhost\nport: 8081\nwithtimestamp: false\n", "name": "prometheus" } ], "blockEventBus": false, "bridge": { "amqpBlock": false, "amqpUrl": "amqp://amq-interconnect:5672/collectd", "enabled": true, "ringBufferCount": 15000, "ringBufferSize": 2048, "socketBlock": true, "statsPeriod": 60, "stopCount": 0, "unixSocketPath": "/tmp", "verbose": true }, "handleErrors": false, "logLevel": "info", "pluginDir": "/usr/lib64/sg-core", "services": [ { "name": "prometheus", "ports": [ { "name": "prom-http", "port": 8081, "protocol": "TCP", "targetPort": 8081 } ] } ], "size": 1, "transports": [ { "config": "path: /tmp/smartgateway\n", "handlers": [ { "config": "", "name": "collectd-metrics" } ], "name": "socket" } ] } } ] capabilities: Basic Install categories: Monitoring certified: "false" containerImage: quay.io/infrawatch/smart-gateway-operator:stable-1.5 createdAt: "2026-06-12T00:36:17Z" description: 'DEPRECATED: This operator is deprecated and will no longer receive updates with new features. Users should migrate to alternative telemetry solutions. Operator for managing the Smart Gateway Custom Resources, resulting in deployments of the Smart Gateway.' features.operators.openshift.io/cnf: "false" features.operators.openshift.io/cni: "false" features.operators.openshift.io/csi: "false" features.operators.openshift.io/disconnected: "true" features.operators.openshift.io/fips-compliant: "false" features.operators.openshift.io/proxy-aware: "false" features.operators.openshift.io/tls-profiles: "false" features.operators.openshift.io/token-auth-aws: "false" features.operators.openshift.io/token-auth-azure: "false" features.operators.openshift.io/token-auth-gcp: "false" k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.217.0.90/23"],"mac_address":"0a:58:0a:d9:00:5a","gateway_ips":["10.217.0.1"],"routes":[{"dest":"10.217.0.0/22","nextHop":"10.217.0.1"},{"dest":"10.217.4.0/23","nextHop":"10.217.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.217.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.217.0.1"}],"ip_address":"10.217.0.90/23","gateway_ip":"10.217.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.217.0.90" ], "mac": "0a:58:0a:d9:00:5a", "default": true, "dns": {} }] kubectl.kubernetes.io/last-applied-configuration: | {"apiVersion":"operators.coreos.com/v1alpha1","kind":"ClusterServiceVersion","metadata":{"annotations":{"alm-examples":"[\n {\n \"apiVersion\": \"smartgateway.infra.watch/v2\",\n \"kind\": \"SmartGateway\",\n \"metadata\": {\n \"name\": \"demo\"\n },\n \"spec\": {\n \"applications\": [\n {\n \"config\": \"host: localhost\\nport: 8081\\nwithtimestamp: false\\n\",\n \"name\": \"prometheus\"\n }\n ],\n \"blockEventBus\": false,\n \"bridge\": {\n \"amqpBlock\": false,\n \"amqpUrl\": \"amqp://amq-interconnect:5672/collectd\",\n \"enabled\": true,\n \"ringBufferCount\": 15000,\n \"ringBufferSize\": 2048,\n \"socketBlock\": true,\n \"statsPeriod\": 60,\n \"stopCount\": 0,\n \"unixSocketPath\": \"/tmp\",\n \"verbose\": true\n },\n \"handleErrors\": false,\n \"logLevel\": \"info\",\n \"pluginDir\": \"/usr/lib64/sg-core\",\n \"services\": [\n {\n \"name\": \"prometheus\",\n \"ports\": [\n {\n \"name\": \"prom-http\",\n \"port\": 8081,\n \"protocol\": \"TCP\",\n \"targetPort\": 8081\n }\n ]\n }\n ],\n \"size\": 1,\n \"transports\": [\n {\n \"config\": \"path: /tmp/smartgateway\\n\",\n \"handlers\": [\n {\n \"config\": \"\",\n \"name\": \"collectd-metrics\"\n }\n ],\n \"name\": \"socket\"\n }\n ]\n }\n }\n]","capabilities":"Basic Install","categories":"Monitoring","certified":"false","containerImage":"quay.io/infrawatch/smart-gateway-operator:stable-1.5","createdAt":"2026-06-12T00:36:17Z","description":"DEPRECATED: This operator is deprecated and will no longer receive updates with new features. Users should migrate to alternative telemetry solutions. Operator for managing the Smart Gateway Custom Resources, resulting in deployments of the Smart Gateway.","features.operators.openshift.io/cnf":"false","features.operators.openshift.io/cni":"false","features.operators.openshift.io/csi":"false","features.operators.openshift.io/disconnected":"true","features.operators.openshift.io/fips-compliant":"false","features.operators.openshift.io/proxy-aware":"false","features.operators.openshift.io/tls-profiles":"false","features.operators.openshift.io/token-auth-aws":"false","features.operators.openshift.io/token-auth-azure":"false","features.operators.openshift.io/token-auth-gcp":"false","operators.openshift.io/valid-subscription":"[\"OpenStack Platform\", \"Cloud Infrastructure\", \"Cloud Suite\"]","operators.operatorframework.io/builder":"operator-sdk-v1.39.2","operators.operatorframework.io/deprecated":"true","operators.operatorframework.io/project_layout":"unknown","repository":"https://github.com/infrawatch/smart-gateway-operator","support":"Red Hat"},"name":"smart-gateway-operator.v5.0.1781224577","namespace":"service-telemetry"},"spec":{"apiservicedefinitions":{},"customresourcedefinitions":{"owned":[{"description":"Instance of the Smart Gateway","displayName":"SmartGateway","kind":"SmartGateway","name":"smartgateways.smartgateway.infra.watch","resources":[{"kind":"Services","name":"","version":"v1"},{"kind":"SmartGateways","name":"smartgateways.smartgateway.infra.watch","version":"v2"},{"kind":"ServiceMonitors","name":"servicemonitors.monitoring.coreos.com","version":"v1"}],"version":"v2"}]},"description":"# Smart Gateway for Service Telemetry Framework\n\nThe Smart Gateway is middleware for OpenShift that takes metrics and events\ndata streams from an AMQP 1.x message bus, and provides a method to having\nthat data stream stored within supported data stores such as Prometheus and\nElasticSearch.\n\n## Core capabilities\n\nThe Smart Gateway provides two modes:\n\n* metrics: provides an HTTP scrape endpoint for Prometheus\n* events: writes events directly to an ElasticSearch endpoint\n\n## Operator features\n\n* **Two Service Types** - Supports the `metrics` and `events` service types which defines the type of Smart Gateway to be deployed\n\n* **Configuration** - Configuration of the Smart Gateway to allow for it to be connected to an AMQP 1.x bus and pointed at the appropriate storage mechanism based on service type.\n\n## Before getting started\n\n1. Ensure an AMQP 1.x bus has been setup (such as AMQ Interconnect)\n2. If the Smart Gateway is running in events mode, be sure the ElasticSearch Operator and ElasticSearch instance have been pre-deployed.","displayName":"Smart Gateway Operator","icon":[{"base64data":"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","mediatype":"image/svg+xml"}],"install":{"spec":{"clusterPermissions":[{"rules":[{"apiGroups":["authentication.k8s.io"],"resources":["tokenreviews"],"verbs":["create"]},{"apiGroups":["authorization.k8s.io"],"resources":["subjectaccessreviews"],"verbs":["create"]},{"apiGroups":["rbac.authorization.k8s.io"],"resources":["roles"],"verbs":["create","list","get","update","patch","watch"]},{"apiGroups":["rbac.authorization.k8s.io"],"resources":["clusterroles"],"verbs":["create","list","get","update","patch","watch"]},{"apiGroups":["rbac.authorization.k8s.io"],"resources":["clusterrolebindings"],"verbs":["create","list","get","update","patch","watch"]},{"apiGroups":["rbac.authorization.k8s.io"],"resources":["rolebindings"],"verbs":["get","list","watch"]},{"apiGroups":[""],"resources":["events"],"verbs":["create","patch","update"]}],"serviceAccountName":"smart-gateway-operator"}],"deployments":[{"name":"smart-gateway-operator","spec":{"replicas":1,"selector":{"matchLabels":{"app":"smart-gateway-operator"}},"strategy":{},"template":{"metadata":{"labels":{"app":"smart-gateway-operator"}},"spec":{"containers":[{"env":[{"name":"WATCH_NAMESPACE","valueFrom":{"fieldRef":{"fieldPath":"metadata.annotations['olm.targetNamespaces']"}}},{"name":"POD_NAME","valueFrom":{"fieldRef":{"fieldPath":"metadata.name"}}},{"name":"OPERATOR_NAME","value":"smart-gateway-operator"},{"name":"ANSIBLE_GATHERING","value":"explicit"},{"name":"ANSIBLE_VERBOSITY_SMARTGATEWAY_SMARTGATEWAY_INFRA_WATCH","value":"4"},{"name":"ANSIBLE_DEBUG_LOGS","value":"true"},{"name":"RELATED_IMAGE_CORE_SMARTGATEWAY_IMAGE","value":"image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-core:latest"},{"name":"RELATED_IMAGE_BRIDGE_SMARTGATEWAY_IMAGE","value":"image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-bridge:latest"},{"name":"RELATED_IMAGE_OAUTH_PROXY_IMAGE","value":"quay.io/openshift/origin-oauth-proxy:latest"}],"image":"quay.io/infrawatch/smart-gateway-operator:stable-1.5","imagePullPolicy":"Always","name":"operator","resources":{},"volumeMounts":[{"mountPath":"/tmp/ansible-operator/runner","name":"runner"}]}],"serviceAccountName":"smart-gateway-operator","volumes":[{"emptyDir":{},"name":"runner"}]}}}}],"permissions":[{"rules":[{"apiGroups":[""],"resources":["pods","services","services/finalizers","endpoints","persistentvolumeclaims","events","configmaps","secrets","serviceaccounts"],"verbs":["create","delete","get","list","patch","update","watch"]},{"apiGroups":["apps"],"resources":["deployments","daemonsets","replicasets","statefulsets"],"verbs":["create","delete","get","list","patch","update","watch"]},{"apiGroups":["monitoring.coreos.com"],"resources":["servicemonitors"],"verbs":["get","create"]},{"apiGroups":["apps"],"resourceNames":["smart-gateway-operator"],"resources":["deployments/finalizers"],"verbs":["update"]},{"apiGroups":[""],"resources":["pods"],"verbs":["get"]},{"apiGroups":["apps"],"resources":["replicasets","deployments"],"verbs":["get"]},{"apiGroups":["smartgateway.infra.watch"],"resources":["*"],"verbs":["create","delete","get","list","patch","update","watch"]},{"apiGroups":["rbac.authorization.k8s.io"],"resources":["rolebindings"],"verbs":["create"]},{"apiGroups":["rbac.authorization.k8s.io"],"resources":["rolebindings"],"verbs":["get","list","watch"]}],"serviceAccountName":"smart-gateway-operator"}]},"strategy":"deployment"},"installModes":[{"supported":true,"type":"OwnNamespace"},{"supported":true,"type":"SingleNamespace"},{"supported":false,"type":"MultiNamespace"},{"supported":false,"type":"AllNamespaces"}],"keywords":["servicetelemetry","monitoring","telemetry","notifications","smartgateway"],"labels":{"name":"smart-gateway-operator"},"links":[{"name":"Source Code","url":"https://github.com/infrawatch/smart-gateway-operator"}],"maintainers":[{"email":"support@redhat.com","name":"Red Hat"}],"maturity":"stable","minKubeVersion":"1.23.0","provider":{"name":"Red Hat"},"relatedImages":[{"image":"image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-core:latest","name":"core-smartgateway-image"},{"image":"image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-bridge:latest","name":"bridge-smartgateway-image"},{"image":"quay.io/openshift/origin-oauth-proxy:latest","name":"oauth-proxy-image"}],"selector":{"matchLabels":{"name":"smart-gateway-operator"}},"version":"5.0.1781224577"}} olm.operatorGroup: service-telemetry-operator-group olm.operatorNamespace: service-telemetry olm.targetNamespaces: service-telemetry openshift.io/scc: restricted-v2 operators.openshift.io/valid-subscription: '["OpenStack Platform", "Cloud Infrastructure", "Cloud Suite"]' operators.operatorframework.io/builder: operator-sdk-v1.39.2 operators.operatorframework.io/deprecated: "true" operators.operatorframework.io/project_layout: unknown repository: https://github.com/infrawatch/smart-gateway-operator seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user support: Red Hat creationTimestamp: "2026-06-12T00:36:21Z" generateName: smart-gateway-operator-85986885f- generation: 1 labels: app: smart-gateway-operator pod-template-hash: 85986885f name: smart-gateway-operator-85986885f-57gvn namespace: service-telemetry ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: smart-gateway-operator-85986885f uid: 5a05a32c-fb35-445e-bd89-f0352ee08019 resourceVersion: "47264" uid: ad5301ff-b7ff-4cae-877e-6a4276366a13 spec: containers: - env: - name: WATCH_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.annotations['olm.targetNamespaces'] - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: OPERATOR_NAME value: smart-gateway-operator - name: ANSIBLE_GATHERING value: explicit - name: ANSIBLE_VERBOSITY_SMARTGATEWAY_SMARTGATEWAY_INFRA_WATCH value: "4" - name: ANSIBLE_DEBUG_LOGS value: "true" - name: RELATED_IMAGE_CORE_SMARTGATEWAY_IMAGE value: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-core:latest - name: RELATED_IMAGE_BRIDGE_SMARTGATEWAY_IMAGE value: image-registry.openshift-image-registry.svc:5000/service-telemetry/sg-bridge:latest - name: RELATED_IMAGE_OAUTH_PROXY_IMAGE value: quay.io/openshift/origin-oauth-proxy:latest - name: OPERATOR_CONDITION_NAME value: smart-gateway-operator.v5.0.1781224577 image: quay.io/infrawatch/smart-gateway-operator:stable-1.5 imagePullPolicy: Always name: operator resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /tmp/ansible-operator/runner name: runner - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-njzg2 readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: smart-gateway-operator-dockercfg-7qqhz nodeName: crc preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 1000670000 seLinuxOptions: level: s0:c26,c10 seccompProfile: type: RuntimeDefault serviceAccount: smart-gateway-operator serviceAccountName: smart-gateway-operator terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - emptyDir: {} name: runner - name: kube-api-access-njzg2 projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-12T00:36:45Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-12T00:36:21Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-12T00:36:45Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-12T00:36:45Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-12T00:36:21Z" status: "True" type: PodScheduled containerStatuses: - containerID: cri-o://85eea2dba6320aa163cd3289893e916dc69a925371d3f72e20d9671de9e8ff0b image: quay.io/infrawatch/smart-gateway-operator:stable-1.5 imageID: quay.io/infrawatch/smart-gateway-operator@sha256:65acf22c1c5af1689a6b199c2926037802b9ab28558353164c73609ca643a8d6 lastState: {} name: operator ready: true resources: {} restartCount: 0 started: true state: running: startedAt: "2026-06-12T00:36:45Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /tmp/ansible-operator/runner name: runner - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-njzg2 readOnly: true recursiveReadOnly: Disabled hostIP: 192.168.126.11 hostIPs: - ip: 192.168.126.11 phase: Running podIP: 10.217.0.90 podIPs: - ip: 10.217.0.90 qosClass: BestEffort startTime: "2026-06-12T00:36:21Z" - apiVersion: v1 kind: Pod metadata: annotations: k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.217.0.104/23"],"mac_address":"0a:58:0a:d9:00:68","gateway_ips":["10.217.0.1"],"routes":[{"dest":"10.217.0.0/22","nextHop":"10.217.0.1"},{"dest":"10.217.4.0/23","nextHop":"10.217.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.217.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.217.0.1"}],"ip_address":"10.217.0.104/23","gateway_ip":"10.217.0.1","role":"primary"}}' k8s.v1.cni.cncf.io/network-status: |- [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.217.0.104" ], "mac": "0a:58:0a:d9:00:68", "default": true, "dns": {} }] openshift.io/scc: restricted-v2 seccomp.security.alpha.kubernetes.io/pod: runtime/default security.openshift.io/validated-scc-subject-type: user creationTimestamp: "2026-06-12T00:38:30Z" generateName: stf-smoketest-smoke1- generation: 1 labels: app: stf-smoketest batch.kubernetes.io/controller-uid: 337dd9f4-1c46-4323-a69f-04913b473b38 batch.kubernetes.io/job-name: stf-smoketest-smoke1 controller-uid: 337dd9f4-1c46-4323-a69f-04913b473b38 job-name: stf-smoketest-smoke1 name: stf-smoketest-smoke1-248gh namespace: service-telemetry ownerReferences: - apiVersion: batch/v1 blockOwnerDeletion: true controller: true kind: Job name: stf-smoketest-smoke1 uid: 337dd9f4-1c46-4323-a69f-04913b473b38 resourceVersion: "48617" uid: aa03cc6d-1a84-4af7-93ff-b3779d9c0fcb spec: containers: - command: - /smoketest_collectd_entrypoint.sh env: - name: CLOUDNAME value: smoke1 - name: ELASTICSEARCH_AUTH_PASS value: apOSkAm09zqNkGHQWrIinZph - name: PROMETHEUS_AUTH_TOKEN value: eyJhbGciOiJSUzI1NiIsImtpZCI6ImFWMzc3cFlVaXZjX05walVUUlY4bWtJNUZSTTlyVFplaEIwRnBldjhZamsifQ.eyJhdWQiOlsiaHR0cHM6Ly9rdWJlcm5ldGVzLmRlZmF1bHQuc3ZjIl0sImV4cCI6MTc4MTIyODI5MywiaWF0IjoxNzgxMjI0NjkzLCJpc3MiOiJodHRwczovL2t1YmVybmV0ZXMuZGVmYXVsdC5zdmMiLCJqdGkiOiJmNDU1MDhiYi1mZWQzLTRkZjQtYWU0ZS1lY2M3NDEzMzdkM2MiLCJrdWJlcm5ldGVzLmlvIjp7Im5hbWVzcGFjZSI6InNlcnZpY2UtdGVsZW1ldHJ5Iiwic2VydmljZWFjY291bnQiOnsibmFtZSI6InN0Zi1wcm9tZXRoZXVzLXJlYWRlciIsInVpZCI6IjA1OWUyZGI5LTQ1ZTAtNGEwOC1iOWRiLTY3ZDczYWY1MGIyMSJ9fSwibmJmIjoxNzgxMjI0NjkzLCJzdWIiOiJzeXN0ZW06c2VydmljZWFjY291bnQ6c2VydmljZS10ZWxlbWV0cnk6c3RmLXByb21ldGhldXMtcmVhZGVyIn0.EMFFNtGPx-3Locxtj9s-LrEF8KqYypXiOPqum2pZ5nlXl2fjPudO2gBHNgveUZag0aIvA7cm7SZ2xeeEIgt_uiiRAEuTo8VoWXSogYYhWQPvWWZJ6PG99xfxnbO1B3TYoSDadFU6nIammrNviAS9WcakphD8LN55FXOdF4N9ljmfgMdWJBpu7DUN6VNE8mqmiZYYhKieCYIps7-wMuGhOaa9vhvRXUIifk-ONQ-Q5PzVAk7m2LjTyhmygYdAM4qbFFM9qGZLvn-Myadlw06JLvAFqbVFHoJNr6Dli9zCpCi2igMWNOD9gItG5FQwyVn-8jm8ik7VoXHk-D-ISeV3ZWMBn3EHTARTAR4AGIsvFMC80YMJX5xOAaCgXc9BUoIahC8umbVERiNX138NGHaqBycMfZ3oiGCc_7uKQgDIROG0f9jKi-pzWMzs8hdAG2-bnzLYT2Pk71MzzHkmSMp6E8NwjZEVev5nH-AR2hj03ccqdlvjyQn-c2U9L9HXjFRoPylyqmhx6DB47LYsjDvuEZBNS18G0nr8Y0d-eykB65gd7DPX3YJ2qsTAmN3t9Wf0gp_QfPNF3-BKR4FcQ3ef_r00gs3cI6wpCDB6iFE9dOf4K1dq-3Tq8OAKVcuFUFs_TEmyvGkmb0iq_yw21JUBAsjkCZAZWLmi2Bikm0QuC8w - name: OBSERVABILITY_STRATEGY value: <> image: quay.io/tripleomastercentos9/openstack-collectd:current-tripleo imagePullPolicy: IfNotPresent name: smoketest-collectd resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/minimal-collectd.conf.template name: collectd-config subPath: minimal-collectd.conf.template - mountPath: /etc/collectd-sensubility.conf name: sensubility-config subPath: collectd-sensubility.conf - mountPath: /healthcheck.log name: healthcheck-log subPath: healthcheck.log - mountPath: /smoketest_collectd_entrypoint.sh name: collectd-entrypoint-script subPath: smoketest_collectd_entrypoint.sh - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-t8fsf readOnly: true - command: - /smoketest_ceilometer_entrypoint.sh env: - name: CLOUDNAME value: smoke1 - name: ELASTICSEARCH_AUTH_PASS value: apOSkAm09zqNkGHQWrIinZph - name: PROMETHEUS_AUTH_TOKEN value: eyJhbGciOiJSUzI1NiIsImtpZCI6ImFWMzc3cFlVaXZjX05walVUUlY4bWtJNUZSTTlyVFplaEIwRnBldjhZamsifQ.eyJhdWQiOlsiaHR0cHM6Ly9rdWJlcm5ldGVzLmRlZmF1bHQuc3ZjIl0sImV4cCI6MTc4MTIyODI5MywiaWF0IjoxNzgxMjI0NjkzLCJpc3MiOiJodHRwczovL2t1YmVybmV0ZXMuZGVmYXVsdC5zdmMiLCJqdGkiOiJmNDU1MDhiYi1mZWQzLTRkZjQtYWU0ZS1lY2M3NDEzMzdkM2MiLCJrdWJlcm5ldGVzLmlvIjp7Im5hbWVzcGFjZSI6InNlcnZpY2UtdGVsZW1ldHJ5Iiwic2VydmljZWFjY291bnQiOnsibmFtZSI6InN0Zi1wcm9tZXRoZXVzLXJlYWRlciIsInVpZCI6IjA1OWUyZGI5LTQ1ZTAtNGEwOC1iOWRiLTY3ZDczYWY1MGIyMSJ9fSwibmJmIjoxNzgxMjI0NjkzLCJzdWIiOiJzeXN0ZW06c2VydmljZWFjY291bnQ6c2VydmljZS10ZWxlbWV0cnk6c3RmLXByb21ldGhldXMtcmVhZGVyIn0.EMFFNtGPx-3Locxtj9s-LrEF8KqYypXiOPqum2pZ5nlXl2fjPudO2gBHNgveUZag0aIvA7cm7SZ2xeeEIgt_uiiRAEuTo8VoWXSogYYhWQPvWWZJ6PG99xfxnbO1B3TYoSDadFU6nIammrNviAS9WcakphD8LN55FXOdF4N9ljmfgMdWJBpu7DUN6VNE8mqmiZYYhKieCYIps7-wMuGhOaa9vhvRXUIifk-ONQ-Q5PzVAk7m2LjTyhmygYdAM4qbFFM9qGZLvn-Myadlw06JLvAFqbVFHoJNr6Dli9zCpCi2igMWNOD9gItG5FQwyVn-8jm8ik7VoXHk-D-ISeV3ZWMBn3EHTARTAR4AGIsvFMC80YMJX5xOAaCgXc9BUoIahC8umbVERiNX138NGHaqBycMfZ3oiGCc_7uKQgDIROG0f9jKi-pzWMzs8hdAG2-bnzLYT2Pk71MzzHkmSMp6E8NwjZEVev5nH-AR2hj03ccqdlvjyQn-c2U9L9HXjFRoPylyqmhx6DB47LYsjDvuEZBNS18G0nr8Y0d-eykB65gd7DPX3YJ2qsTAmN3t9Wf0gp_QfPNF3-BKR4FcQ3ef_r00gs3cI6wpCDB6iFE9dOf4K1dq-3Tq8OAKVcuFUFs_TEmyvGkmb0iq_yw21JUBAsjkCZAZWLmi2Bikm0QuC8w - name: OBSERVABILITY_STRATEGY value: <> image: quay.io/tripleomastercentos9/openstack-ceilometer-notification:current-tripleo imagePullPolicy: IfNotPresent name: smoketest-ceilometer resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL runAsNonRoot: true runAsUser: 1000670000 terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /ceilometer_publish.py name: ceilometer-publisher subPath: ceilometer_publish.py - mountPath: /smoketest_ceilometer_entrypoint.sh name: ceilometer-entrypoint-script subPath: smoketest_ceilometer_entrypoint.sh - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-t8fsf readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true imagePullSecrets: - name: default-dockercfg-rsb7q nodeName: crc preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Never schedulerName: default-scheduler securityContext: fsGroup: 1000670000 seLinuxOptions: level: s0:c26,c10 seccompProfile: type: RuntimeDefault serviceAccount: default serviceAccountName: default terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - configMap: defaultMode: 420 name: stf-smoketest-collectd-config name: collectd-config - configMap: defaultMode: 420 name: stf-smoketest-sensubility-config name: sensubility-config - configMap: defaultMode: 420 name: stf-smoketest-healthcheck-log name: healthcheck-log - configMap: defaultMode: 365 name: stf-smoketest-collectd-entrypoint-script name: collectd-entrypoint-script - configMap: defaultMode: 365 name: stf-smoketest-ceilometer-entrypoint-script name: ceilometer-entrypoint-script - configMap: defaultMode: 365 name: stf-smoketest-ceilometer-publisher name: ceilometer-publisher - name: kube-api-access-t8fsf projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace - configMap: items: - key: service-ca.crt path: service-ca.crt name: openshift-service-ca.crt status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-12T00:39:23Z" status: "False" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:30Z" reason: PodCompleted status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-12T00:39:17Z" reason: PodCompleted status: "False" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-12T00:39:17Z" reason: PodCompleted status: "False" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-12T00:38:30Z" status: "True" type: PodScheduled containerStatuses: - containerID: cri-o://f11d70b7f7a481fc9190b0df6bc89c159b12b6def3eec5abac38c23e21c7ab16 image: quay.io/tripleomastercentos9/openstack-ceilometer-notification:current-tripleo imageID: quay.io/tripleomastercentos9/openstack-ceilometer-notification@sha256:73886b5616a348d6cee1766765bef1d7ce4c0de2f02c51fe7b68c2ed45c5cb4d lastState: {} name: smoketest-ceilometer ready: false resources: {} restartCount: 0 started: false state: terminated: containerID: cri-o://f11d70b7f7a481fc9190b0df6bc89c159b12b6def3eec5abac38c23e21c7ab16 exitCode: 0 finishedAt: "2026-06-12T00:39:21Z" reason: Completed startedAt: "2026-06-12T00:38:49Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /ceilometer_publish.py name: ceilometer-publisher - mountPath: /smoketest_ceilometer_entrypoint.sh name: ceilometer-entrypoint-script - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-t8fsf readOnly: true recursiveReadOnly: Disabled - containerID: cri-o://ee0ed7eb255018fcc2be72fa739151083d60e29de7b9ebab4ce8ed0d5b579e73 image: quay.io/tripleomastercentos9/openstack-collectd:current-tripleo imageID: quay.io/tripleomastercentos9/openstack-collectd@sha256:a6550a778495d874a71cb26f104e1bea9ac348091e9edc4ae12229c86ff8b72e lastState: {} name: smoketest-collectd ready: false resources: {} restartCount: 0 started: false state: terminated: containerID: cri-o://ee0ed7eb255018fcc2be72fa739151083d60e29de7b9ebab4ce8ed0d5b579e73 exitCode: 0 finishedAt: "2026-06-12T00:39:17Z" reason: Completed startedAt: "2026-06-12T00:38:43Z" user: linux: gid: 0 supplementalGroups: - 0 - 1000670000 uid: 1000670000 volumeMounts: - mountPath: /etc/minimal-collectd.conf.template name: collectd-config - mountPath: /etc/collectd-sensubility.conf name: sensubility-config - mountPath: /healthcheck.log name: healthcheck-log - mountPath: /smoketest_collectd_entrypoint.sh name: collectd-entrypoint-script - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-t8fsf readOnly: true recursiveReadOnly: Disabled hostIP: 192.168.126.11 hostIPs: - ip: 192.168.126.11 phase: Succeeded podIP: 10.217.0.104 podIPs: - ip: 10.217.0.104 qosClass: BestEffort startTime: "2026-06-12T00:38:30Z" kind: List metadata: resourceVersion: ""