apiVersion: v1
items:
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      openshift.io/scc: restricted
    creationTimestamp: "2021-02-18T09:12:11Z"
    generateName: codeready-66844f7fc8-
    labels:
      app: codeready
      component: codeready
      pod-template-hash: "2240093974"
    name: codeready-66844f7fc8-7hhfv
    namespace: crw-crwctl
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: codeready-66844f7fc8
      uid: 622a0cf6-71c9-11eb-b432-fa163ee97a2e
    resourceVersion: "5105997"
    selfLink: /api/v1/namespaces/crw-crwctl/pods/codeready-66844f7fc8-7hhfv
    uid: 622acdc3-71c9-11eb-b432-fa163ee97a2e
  spec:
    containers:
    - env:
      - name: CHE_SELF__SIGNED__CERT
        valueFrom:
          secretKeyRef:
            key: ca.crt
            name: self-signed-certificate
            optional: true
      - name: CHE_GIT_SELF__SIGNED__CERT
      - name: CHE_GIT_SELF__SIGNED__CERT__HOST
      - name: CHE_KEYCLOAK_ADMIN__PASSWORD
        value: admin
      - name: CHE_KEYCLOAK_ADMIN__USERNAME
        value: admin
      - name: CM_REVISION
        value: 5105806,5105148
      - name: KUBERNETES_NAMESPACE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
      - name: CHE_JDBC_USERNAME
        valueFrom:
          secretKeyRef:
            key: user
            name: che-postgres-secret
      - name: CHE_JDBC_PASSWORD
        valueFrom:
          secretKeyRef:
            key: password
            name: che-postgres-secret
      envFrom:
      - configMapRef:
          name: che
      image: quay.io/crw/server-rhel8:latest
      imagePullPolicy: Always
      livenessProbe:
        failureThreshold: 3
        httpGet:
          path: /api/system/state
          port: 8080
          scheme: HTTP
        initialDelaySeconds: 200
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 3
      name: codeready
      ports:
      - containerPort: 8080
        name: http
        protocol: TCP
      - containerPort: 8000
        name: http-debug
        protocol: TCP
      - containerPort: 8888
        name: jgroups-ping
        protocol: TCP
      readinessProbe:
        failureThreshold: 18
        httpGet:
          path: /api/system/state
          port: 8080
          scheme: HTTP
        initialDelaySeconds: 25
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 5
      resources:
        limits:
          cpu: "1"
          memory: 1Gi
        requests:
          cpu: 100m
          memory: 512Mi
      securityContext:
        capabilities:
          drop:
          - ALL
          - KILL
          - MKNOD
          - SETGID
          - SETUID
        runAsUser: 1001610000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /public-certs
        name: che-public-certs
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: che-token-vw2p7
        readOnly: true
    dnsPolicy: ClusterFirst
    imagePullSecrets:
    - name: che-dockercfg-5rsw6
    nodeName: node2.crw-qe.com
    nodeSelector:
      node-role.kubernetes.io/compute: "true"
    priority: 0
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1001610000
      seLinuxOptions:
        level: s0:c40,c25
    serviceAccount: che
    serviceAccountName: che
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - configMap:
        defaultMode: 420
        name: ca-certs-merged
      name: che-public-certs
    - name: che-token-vw2p7
      secret:
        defaultMode: 420
        secretName: che-token-vw2p7
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2021-02-18T09:10:18Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2021-02-18T09:11:16Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: null
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2021-02-18T09:12:11Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: docker://b8a9300010586563567ce9109e20e772e4a6560a0b28e568a693f9a99ca14430
      image: quay.io/crw/server-rhel8:latest
      imageID: docker-pullable://quay.io/crw/server-rhel8@sha256:c2be3b2adf3aeada1063e9ac916f661b1aaf1efaf36ed593cd504e683d3efda7
      lastState: {}
      name: codeready
      ready: true
      restartCount: 0
      state:
        running:
          startedAt: "2021-02-18T09:10:21Z"
    hostIP: 10.0.101.209
    phase: Running
    podIP: 10.129.0.193
    qosClass: Burstable
    startTime: "2021-02-18T09:10:18Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      openshift.io/scc: restricted
    creationTimestamp: "2021-02-18T09:09:07Z"
    generateName: codeready-operator-7854bfc86b-
    labels:
      app: codeready-operator
      pod-template-hash: "3410697426"
    name: codeready-operator-7854bfc86b-hbnmv
    namespace: crw-crwctl
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: codeready-operator-7854bfc86b
      uid: f4642dcf-71c8-11eb-b432-fa163ee97a2e
    resourceVersion: "5105124"
    selfLink: /api/v1/namespaces/crw-crwctl/pods/codeready-operator-7854bfc86b-hbnmv
    uid: f466b510-71c8-11eb-b432-fa163ee97a2e
  spec:
    containers:
    - command:
      - /usr/local/bin/che-operator
      env:
      - name: WATCH_NAMESPACE
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.namespace
      - name: POD_NAME
        valueFrom:
          fieldRef:
            apiVersion: v1
            fieldPath: metadata.name
      - name: OPERATOR_NAME
        value: codeready-operator
      - name: CHE_VERSION
        value: 2.7.0
      - name: RELATED_IMAGE_che_server
        value: quay.io/crw/server-rhel8:latest
      - name: RELATED_IMAGE_plugin_registry
        value: quay.io/crw/pluginregistry-rhel8:latest
      - name: RELATED_IMAGE_devfile_registry
        value: quay.io/crw/devfileregistry-rhel8:latest
      - name: RELATED_IMAGE_pvc_jobs
        value: registry.redhat.io/ubi8/ubi-minimal:8.3
      - name: RELATED_IMAGE_postgres
        value: registry.redhat.io/rhel8/postgresql-96:1
      - name: RELATED_IMAGE_keycloak
        value: registry.redhat.io/rh-sso-7/sso74-openshift-rhel8:7.4
      - name: RELATED_IMAGE_che_workspace_plugin_broker_metadata
        value: quay.io/crw/pluginbroker-metadata-rhel8:latest
      - name: RELATED_IMAGE_che_workspace_plugin_broker_artifacts
        value: quay.io/crw/pluginbroker-artifacts-rhel8:latest
      - name: RELATED_IMAGE_che_server_secure_exposer_jwt_proxy_image
        value: quay.io/crw/jwtproxy-rhel8:latest
      - name: RELATED_IMAGE_single_host_gateway
        value: quay.io/crw/traefik-rhel8:latest
      - name: RELATED_IMAGE_single_host_gateway_config_sidecar
        value: quay.io/crw/configbump-rhel8:latest
      - name: CHE_FLAVOR
        value: codeready
      - name: CONSOLE_LINK_NAME
        value: che
      - name: CONSOLE_LINK_DISPLAY_NAME
        value: CodeReady Workspaces
      - name: CONSOLE_LINK_SECTION
        value: Red Hat Applications
      - name: CONSOLE_LINK_IMAGE
        value: /dashboard/assets/branding/loader.svg
      - name: CHE_IDENTITY_SECRET
        value: che-identity-secret
      - name: CHE_IDENTITY_POSTGRES_SECRET
        value: che-identity-postgres-secret
      - name: CHE_POSTGRES_SECRET
        value: che-postgres-secret
      - name: CHE_SERVER_TRUST_STORE_CONFIGMAP_NAME
        value: ca-certs
      - name: RELATED_IMAGE_keycloak_ppc64le
        value: registry.redhat.io/rh-sso-7/sso74-openj9-openshift-rhel8:7.4
      - name: RELATED_IMAGE_keycloak_s390x
        value: registry.redhat.io/rh-sso-7/sso74-openj9-openshift-rhel8:7.4
      image: registry-proxy.engineering.redhat.com/rh-osbs/codeready-workspaces-operator:latest
      imagePullPolicy: Always
      livenessProbe:
        failureThreshold: 10
        httpGet:
          path: /healthz
          port: 6789
          scheme: HTTP
        initialDelaySeconds: 15
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 5
      name: codeready-operator
      ports:
      - containerPort: 60000
        name: metrics
        protocol: TCP
      readinessProbe:
        exec:
          command:
          - stat
          - /tmp/operator-sdk-ready
        failureThreshold: 10
        initialDelaySeconds: 5
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 5
      resources:
        limits:
          cpu: 500m
          memory: 256Mi
        requests:
          cpu: 100m
          memory: 64Mi
      securityContext:
        capabilities:
          drop:
          - ALL
          - KILL
          - MKNOD
          - SETGID
          - SETUID
        runAsUser: 1001610000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: codeready-operator-token-8fc7t
        readOnly: true
    dnsPolicy: ClusterFirst
    imagePullSecrets:
    - name: codeready-operator-dockercfg-5mjlt
    nodeName: node2.crw-qe.com
    nodeSelector:
      node-role.kubernetes.io/compute: "true"
    priority: 0
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1001610000
      seLinuxOptions:
        level: s0:c40,c25
    serviceAccount: codeready-operator
    serviceAccountName: codeready-operator
    terminationGracePeriodSeconds: 5
    tolerations:
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - name: codeready-operator-token-8fc7t
      secret:
        defaultMode: 420
        secretName: codeready-operator-token-8fc7t
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2021-02-18T09:07:14Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2021-02-18T09:07:23Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: null
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2021-02-18T09:09:07Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: docker://9e98e979f37d7d7ecb4165195d4e3030657cbcda21adf00d640ac72d98125c4e
      image: registry-proxy.engineering.redhat.com/rh-osbs/codeready-workspaces-operator:latest
      imageID: docker-pullable://registry-proxy.engineering.redhat.com/rh-osbs/codeready-workspaces-operator@sha256:c5f3576802da5cbd75bdabb692d1e5a6fc145996b94bdacd9b771aa329879edf
      lastState: {}
      name: codeready-operator
      ready: true
      restartCount: 0
      state:
        running:
          startedAt: "2021-02-18T09:07:17Z"
    hostIP: 10.0.101.209
    phase: Running
    podIP: 10.129.0.188
    qosClass: Burstable
    startTime: "2021-02-18T09:07:14Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      openshift.io/scc: restricted
    creationTimestamp: "2021-02-18T09:11:53Z"
    generateName: devfile-registry-558bf46f7b-
    labels:
      app: codeready
      component: devfile-registry
      pod-template-hash: "1146902936"
    name: devfile-registry-558bf46f7b-sq2cl
    namespace: crw-crwctl
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: devfile-registry-558bf46f7b
      uid: 57b485fb-71c9-11eb-b432-fa163ee97a2e
    resourceVersion: "5105751"
    selfLink: /api/v1/namespaces/crw-crwctl/pods/devfile-registry-558bf46f7b-sq2cl
    uid: 57b5c7bd-71c9-11eb-b432-fa163ee97a2e
  spec:
    containers:
    - envFrom:
      - configMapRef:
          name: devfile-registry
          optional: true
      image: quay.io/crw/devfileregistry-rhel8:latest
      imagePullPolicy: Always
      livenessProbe:
        failureThreshold: 10
        httpGet:
          path: /devfiles/
          port: 8080
          scheme: HTTP
        initialDelaySeconds: 30
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 3
      name: che-devfile-registry
      ports:
      - containerPort: 8080
        name: http
        protocol: TCP
      readinessProbe:
        failureThreshold: 10
        httpGet:
          path: /devfiles/
          port: 8080
          scheme: HTTP
        initialDelaySeconds: 3
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 3
      resources:
        limits:
          cpu: 500m
          memory: 256Mi
        requests:
          cpu: 100m
          memory: 32Mi
      securityContext:
        capabilities:
          drop:
          - ALL
          - KILL
          - MKNOD
          - SETGID
          - SETUID
        runAsUser: 1001610000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: default-token-k5vz7
        readOnly: true
    dnsPolicy: ClusterFirst
    imagePullSecrets:
    - name: default-dockercfg-8cmr5
    nodeName: node2.crw-qe.com
    nodeSelector:
      node-role.kubernetes.io/compute: "true"
    priority: 0
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1001610000
      seLinuxOptions:
        level: s0:c40,c25
    serviceAccount: default
    serviceAccountName: default
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - name: default-token-k5vz7
      secret:
        defaultMode: 420
        secretName: default-token-k5vz7
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2021-02-18T09:10:00Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2021-02-18T09:10:10Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: null
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2021-02-18T09:11:53Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: docker://f79764e121b98f2ec9cc6b2986a7df61347ae31de7a0825810b3b0e1d81a3433
      image: quay.io/crw/devfileregistry-rhel8:latest
      imageID: docker-pullable://quay.io/crw/devfileregistry-rhel8@sha256:c38322acdf8e29890895b2c6fac4b2a9fb2d949c525fa161388f26a4ae980960
      lastState: {}
      name: che-devfile-registry
      ready: true
      restartCount: 0
      state:
        running:
          startedAt: "2021-02-18T09:10:04Z"
    hostIP: 10.0.101.209
    phase: Running
    podIP: 10.129.0.191
    qosClass: Burstable
    startTime: "2021-02-18T09:10:00Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      openshift.io/scc: restricted
    creationTimestamp: "2021-02-18T09:11:13Z"
    generateName: keycloak-d8c6b5d94-
    labels:
      app: codeready
      component: keycloak
      pod-template-hash: "847261850"
    name: keycloak-d8c6b5d94-hfvwv
    namespace: crw-crwctl
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: keycloak-d8c6b5d94
      uid: 3fe2df72-71c9-11eb-b432-fa163ee97a2e
    resourceVersion: "5105689"
    selfLink: /api/v1/namespaces/crw-crwctl/pods/keycloak-d8c6b5d94-hfvwv
    uid: 3fe638ed-71c9-11eb-b432-fa163ee97a2e
  spec:
    containers:
    - args:
      - -c
      - "echo \"ssl_required WAS UPDATED for master realm.\" && \n\tfunction jks_import_ca_bundle
        {\n\t\tCA_FILE=$1\n\t\tKEYSTORE_PATH=$2\n\t\tKEYSTORE_PASSWORD=$3\n\n\t\tif
        [ ! -f $CA_FILE ]; then\n\t\t\t# CA bundle file doesn't exist, skip it\n\t\t\techo
        \"Failed to import CA certificates from ${CA_FILE}. File doesn't exist\"\n\t\t\treturn\n\t\tfi\n\n\t\tbundle_name=$(basename
        $CA_FILE)\n\t\tcerts_imported=0\n\t\tcert_index=0\n\t\ttmp_file=/tmp/cert.pem\n\t\tis_cert=false\n\t\twhile
        IFS= read -r line; do\n\t\t\tif [ \"$line\" == \"-----BEGIN CERTIFICATE-----\"
        ]; then\n\t\t\t\t# Start copying a new certificate\n\t\t\t\tis_cert=true\n\t\t\t\tcert_index=$((cert_index+1))\n\t\t\t\t#
        Reset destination file and add header line\n\t\t\t\techo $line > ${tmp_file}\n\t\t\telif
        [ \"$line\" == \"-----END CERTIFICATE-----\" ]; then\n\t\t\t\t# End of the
        certificate is reached, add it to trust store\n\t\t\t\tis_cert=false\n\t\t\t\techo
        $line >> ${tmp_file}\n\t\t\t\tkeytool -importcert -alias \"${bundle_name}_${cert_index}\"
        -keystore $KEYSTORE_PATH -file $tmp_file -storepass $KEYSTORE_PASSWORD -noprompt
        && \\\n\t\t\t\tcerts_imported=$((certs_imported+1))\n\t\t\telif [ \"$is_cert\"
        == true ]; then\n\t\t\t\t# In the middle of a certificate, copy line to target
        file\n\t\t\t\techo $line >> ${tmp_file}\n\t\t\tfi\n\t\tdone < \"$CA_FILE\"\n\t\techo
        \"Imported ${certs_imported} certificates from ${CA_FILE}\"\n\t\t# Clean up\n\t\trm
        -f $tmp_file\n\t}\n\t\nbaseTemplate=/opt/eap/themes/base/login/login-update-profile.ftl
        && readOnlyTemplateDir=/opt/eap/themes/codeready-username-readonly/login &&
        readOnlyTemplate=${readOnlyTemplateDir}/login-update-profile.ftl && if [ !
        -d ${readOnlyTemplateDir} ]; then mkdir -p ${readOnlyTemplateDir} && cp ${baseTemplate}
        ${readOnlyTemplate} && echo \"parent=rh-sso\" > ${readOnlyTemplateDir}/theme.properties
        && sed -i 's|id=\"username\" name=\"username\"|id=\"username\" readonly name=\"username\"|g'
        ${readOnlyTemplate}; fi && sed -i  's|id=\"username\" name=\"username\"|id=\"username\"
        pattern=\"[a-z]([-a-z0-9]{0,61}[a-z0-9])?\" title=\"Username has to comply
        with the DNS naming convention. An alphanumeric (a-z, and 0-9) string, with
        a maximum length of 63 characters, with the '-' character allowed anywhere
        except the first or last character.\" name=\"username\"|g' ${baseTemplate}
        && if [ ! -z \"${CHE_SELF__SIGNED__CERT}\" ]; then echo \"${CHE_SELF__SIGNED__CERT}\"
        > /opt/eap/che.crt && keytool -importcert -alias ROUTERCRT -keystore /opt/eap/openshift.jks
        -file /opt/eap/che.crt -storepass 2MBLTGEkXmrs -noprompt; fi && if [ ! -z
        \"${OPENSHIFT_SELF__SIGNED__CERT}\" ]; then echo \"${OPENSHIFT_SELF__SIGNED__CERT}\"
        > /opt/eap/openshift.crt && keytool -importcert -alias OPENSHIFTAPI -keystore
        /opt/eap/openshift.jks -file /opt/eap/openshift.crt -storepass 2MBLTGEkXmrs
        -noprompt; fi &&  keytool -importcert -alias MOUNTEDCRT -keystore /opt/eap/openshift.jks
        -file /var/run/secrets/kubernetes.io/serviceaccount/ca.crt -storepass 2MBLTGEkXmrs
        -noprompt && if [ -f /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt
        ]; then keytool -importcert -alias MOUNTEDSERVICECRT -keystore /opt/eap/openshift.jks
        -file /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt -storepass
        2MBLTGEkXmrs -noprompt; fi && keytool -importkeystore -srckeystore /etc/pki/ca-trust/extracted/java/cacerts
        -destkeystore /opt/eap/openshift.jks -srcstorepass changeit -deststorepass
        2MBLTGEkXmrs && if [[ -d \"/public-certs\" && -n \"$(find /public-certs -type
        f)\" ]]; then for certfile in /public-certs/* ; do jks_import_ca_bundle $certfile
        /opt/eap/openshift.jks 2MBLTGEkXmrs ; done; fi && echo \"feature.token_exchange=enabled\nfeature.admin_fine_grained_authz=enabled\"
        > /opt/eap/standalone/configuration/profile.properties   && sed -i 's/WILDCARD/ANY/g'
        /opt/eap/bin/launch/keycloak-spi.sh && /opt/eap/bin/openshift-launch.sh -b
        0.0.0.0"
      command:
      - /bin/sh
      env:
      - name: CM_REVISION
        value: "5105148"
      - name: PROXY_ADDRESS_FORWARDING
        value: "true"
      - name: DB_SERVICE_PREFIX_MAPPING
        value: keycloak-postgresql=DB
      - name: KEYCLOAK_POSTGRESQL_SERVICE_HOST
        value: postgres
      - name: KEYCLOAK_POSTGRESQL_SERVICE_PORT
        value: "5432"
      - name: DB_DATABASE
        value: keycloak
      - name: DB_USERNAME
        value: keycloak
      - name: DB_VENDOR
        value: POSTGRES
      - name: SSO_TRUSTSTORE
        value: openshift.jks
      - name: SSO_TRUSTSTORE_DIR
        value: /opt/eap
      - name: SSO_TRUSTSTORE_PASSWORD
        value: 2MBLTGEkXmrs
      - name: CHE_SELF__SIGNED__CERT
        valueFrom:
          secretKeyRef:
            key: ca.crt
            name: self-signed-certificate
            optional: true
      - name: OPENSHIFT_SELF__SIGNED__CERT
        valueFrom:
          secretKeyRef:
            key: ca.crt
            name: openshift-api-crt
            optional: true
      - name: DB_PASSWORD
        valueFrom:
          secretKeyRef:
            key: password
            name: che-identity-postgres-secret
      - name: SSO_ADMIN_PASSWORD
        value: admin
      - name: SSO_ADMIN_USERNAME
        value: admin
      - name: KEYCLOAK_FRONTEND_URL
        value: https://keycloak-crw-crwctl.apps.ocp311.crw-qe.com/auth
      image: registry.redhat.io/rh-sso-7/sso74-openshift-rhel8:7.4
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 10
        initialDelaySeconds: 90
        periodSeconds: 10
        successThreshold: 1
        tcpSocket:
          port: 8080
        timeoutSeconds: 5
      name: keycloak
      ports:
      - containerPort: 8080
        name: keycloak
        protocol: TCP
      readinessProbe:
        failureThreshold: 10
        httpGet:
          path: auth/js/keycloak.js
          port: 8080
          scheme: HTTP
        initialDelaySeconds: 30
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 5
      resources:
        limits:
          cpu: "2"
          memory: 1536Mi
        requests:
          cpu: 100m
          memory: 1Gi
      securityContext:
        capabilities:
          drop:
          - ALL
          - KILL
          - MKNOD
          - SETGID
          - SETUID
        runAsUser: 1001610000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /public-certs
        name: che-public-certs
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: default-token-k5vz7
        readOnly: true
    dnsPolicy: ClusterFirst
    imagePullSecrets:
    - name: default-dockercfg-8cmr5
    nodeName: node1.crw-qe.com
    nodeSelector:
      node-role.kubernetes.io/compute: "true"
    priority: 0
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1001610000
      seLinuxOptions:
        level: s0:c40,c25
    serviceAccount: default
    serviceAccountName: default
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - configMap:
        defaultMode: 420
        name: ca-certs-merged
      name: che-public-certs
    - name: default-token-k5vz7
      secret:
        defaultMode: 420
        secretName: default-token-k5vz7
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2021-02-18T09:09:21Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2021-02-18T09:10:01Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: null
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2021-02-18T09:11:13Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: docker://8091fff2a113443a250b890335c8626033269ee28e2a2b6ce30e1d5d00180f7c
      image: registry.redhat.io/rh-sso-7/sso74-openshift-rhel8:7.4
      imageID: docker-pullable://registry.redhat.io/rh-sso-7/sso74-openshift-rhel8@sha256:1bd5e868c1f4cf04370f274192a9e46e52cc196f10abcc6ca3512ca551209ade
      lastState: {}
      name: keycloak
      ready: true
      restartCount: 0
      state:
        running:
          startedAt: "2021-02-18T09:09:24Z"
    hostIP: 10.0.103.41
    phase: Running
    podIP: 10.130.1.127
    qosClass: Burstable
    startTime: "2021-02-18T09:09:21Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      openshift.io/scc: restricted
    creationTimestamp: "2021-02-18T09:12:03Z"
    generateName: plugin-registry-cb4df5454-
    labels:
      app: codeready
      component: plugin-registry
      pod-template-hash: "760891010"
    name: plugin-registry-cb4df5454-75rsx
    namespace: crw-crwctl
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: plugin-registry-cb4df5454
      uid: 5da462f8-71c9-11eb-b432-fa163ee97a2e
    resourceVersion: "5105801"
    selfLink: /api/v1/namespaces/crw-crwctl/pods/plugin-registry-cb4df5454-75rsx
    uid: 5da6533e-71c9-11eb-b432-fa163ee97a2e
  spec:
    containers:
    - envFrom:
      - configMapRef:
          name: plugin-registry
          optional: true
      image: quay.io/crw/pluginregistry-rhel8:latest
      imagePullPolicy: Always
      livenessProbe:
        failureThreshold: 10
        httpGet:
          path: /plugins/
          port: 8080
          scheme: HTTP
        initialDelaySeconds: 30
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 3
      name: che-plugin-registry
      ports:
      - containerPort: 8080
        name: http
        protocol: TCP
      readinessProbe:
        failureThreshold: 10
        httpGet:
          path: /plugins/
          port: 8080
          scheme: HTTP
        initialDelaySeconds: 3
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 3
      resources:
        limits:
          cpu: 500m
          memory: 256Mi
        requests:
          cpu: 100m
          memory: 32Mi
      securityContext:
        capabilities:
          drop:
          - ALL
          - KILL
          - MKNOD
          - SETGID
          - SETUID
        runAsUser: 1001610000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: default-token-k5vz7
        readOnly: true
    dnsPolicy: ClusterFirst
    imagePullSecrets:
    - name: default-dockercfg-8cmr5
    nodeName: node2.crw-qe.com
    nodeSelector:
      node-role.kubernetes.io/compute: "true"
    priority: 0
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1001610000
      seLinuxOptions:
        level: s0:c40,c25
    serviceAccount: default
    serviceAccountName: default
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - name: default-token-k5vz7
      secret:
        defaultMode: 420
        secretName: default-token-k5vz7
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2021-02-18T09:10:10Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2021-02-18T09:10:18Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: null
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2021-02-18T09:12:03Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: docker://68df01b0c5fad404bcef74d526de7d0144c81aafd14d8e7b7100df55d1199440
      image: quay.io/crw/pluginregistry-rhel8:latest
      imageID: docker-pullable://quay.io/crw/pluginregistry-rhel8@sha256:cc03ddd37f1fd95cc7ddeb8c32b28bfee98878165a51bb5342934469f1e7b6f2
      lastState: {}
      name: che-plugin-registry
      ready: true
      restartCount: 0
      state:
        running:
          startedAt: "2021-02-18T09:10:13Z"
    hostIP: 10.0.101.209
    phase: Running
    podIP: 10.129.0.192
    qosClass: Burstable
    startTime: "2021-02-18T09:10:10Z"
- apiVersion: v1
  kind: Pod
  metadata:
    annotations:
      openshift.io/scc: restricted
    creationTimestamp: "2021-02-18T09:09:18Z"
    generateName: postgres-5bddccc44f-
    labels:
      app: codeready
      component: postgres
      pod-template-hash: "1688777009"
    name: postgres-5bddccc44f-7rzzb
    namespace: crw-crwctl
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: ReplicaSet
      name: postgres-5bddccc44f
      uid: fb298f32-71c8-11eb-b432-fa163ee97a2e
    resourceVersion: "5105281"
    selfLink: /api/v1/namespaces/crw-crwctl/pods/postgres-5bddccc44f-7rzzb
    uid: fb2b04aa-71c8-11eb-b432-fa163ee97a2e
  spec:
    containers:
    - env:
      - name: POSTGRESQL_DATABASE
        value: dbche
      - name: POSTGRESQL_ADMIN_PASSWORD
        value: OZxunFXnY3pY
      - name: POSTGRESQL_USER
        valueFrom:
          secretKeyRef:
            key: user
            name: che-postgres-secret
      - name: POSTGRESQL_PASSWORD
        valueFrom:
          secretKeyRef:
            key: password
            name: che-postgres-secret
      image: registry.redhat.io/rhel8/postgresql-96:1
      imagePullPolicy: IfNotPresent
      livenessProbe:
        failureThreshold: 10
        initialDelaySeconds: 30
        periodSeconds: 10
        successThreshold: 1
        tcpSocket:
          port: 5432
        timeoutSeconds: 5
      name: postgres
      ports:
      - containerPort: 5432
        name: postgres
        protocol: TCP
      readinessProbe:
        exec:
          command:
          - /bin/sh
          - -i
          - -c
          - psql -h 127.0.0.1 -U $POSTGRESQL_USER -q -d dbche -c 'SELECT 1'
        failureThreshold: 10
        initialDelaySeconds: 15
        periodSeconds: 10
        successThreshold: 1
        timeoutSeconds: 5
      resources:
        limits:
          cpu: 500m
          memory: 1Gi
        requests:
          cpu: 100m
          memory: 512Mi
      securityContext:
        capabilities:
          drop:
          - ALL
          - KILL
          - MKNOD
          - SETGID
          - SETUID
        runAsUser: 1001610000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
      - mountPath: /var/lib/pgsql/data
        name: postgres-data
      - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
        name: default-token-k5vz7
        readOnly: true
    dnsPolicy: ClusterFirst
    imagePullSecrets:
    - name: default-dockercfg-8cmr5
    nodeName: node2.crw-qe.com
    nodeSelector:
      node-role.kubernetes.io/compute: "true"
    priority: 0
    restartPolicy: Always
    schedulerName: default-scheduler
    securityContext:
      fsGroup: 1001610000
      seLinuxOptions:
        level: s0:c40,c25
    serviceAccount: default
    serviceAccountName: default
    terminationGracePeriodSeconds: 30
    tolerations:
    - effect: NoSchedule
      key: node.kubernetes.io/memory-pressure
      operator: Exists
    volumes:
    - name: postgres-data
      persistentVolumeClaim:
        claimName: postgres-data
    - name: default-token-k5vz7
      secret:
        defaultMode: 420
        secretName: default-token-k5vz7
  status:
    conditions:
    - lastProbeTime: null
      lastTransitionTime: "2021-02-18T09:07:25Z"
      status: "True"
      type: Initialized
    - lastProbeTime: null
      lastTransitionTime: "2021-02-18T09:07:53Z"
      status: "True"
      type: Ready
    - lastProbeTime: null
      lastTransitionTime: null
      status: "True"
      type: ContainersReady
    - lastProbeTime: null
      lastTransitionTime: "2021-02-18T09:09:18Z"
      status: "True"
      type: PodScheduled
    containerStatuses:
    - containerID: docker://d65a8b69acbd482c03fb41b9c1d9407d2b7c862c850d741aa4844d76e2e55c3b
      image: registry.redhat.io/rhel8/postgresql-96:1
      imageID: docker-pullable://registry.redhat.io/rhel8/postgresql-96@sha256:b78aa5f572de47f0489dda0f836d8d3513fd467846a92256476094953ff477f3
      lastState: {}
      name: postgres
      ready: true
      restartCount: 0
      state:
        running:
          startedAt: "2021-02-18T09:07:27Z"
    hostIP: 10.0.101.209
    phase: Running
    podIP: 10.129.0.189
    qosClass: Burstable
    startTime: "2021-02-18T09:07:25Z"
- apiVersion: v1
  kind: Service
  metadata:
    creationTimestamp: "2021-02-18T09:09:48Z"
    labels:
      app: codeready
      component: codeready
    name: che-host
    namespace: crw-crwctl
    ownerReferences:
    - apiVersion: org.eclipse.che/v1
      blockOwnerDeletion: true
      controller: true
      kind: CheCluster
      name: codeready-workspaces
      uid: f9bbdd5f-71c8-11eb-b432-fa163ee97a2e
    resourceVersion: "5105291"
    selfLink: /api/v1/namespaces/crw-crwctl/services/che-host
    uid: 0cce8385-71c9-11eb-b432-fa163ee97a2e
  spec:
    clusterIP: 172.30.164.13
    ports:
    - name: http
      port: 8080
      protocol: TCP
      targetPort: 8080
    - name: metrics
      port: 8087
      protocol: TCP
      targetPort: 8087
    selector:
      app: codeready
      component: codeready
    sessionAffinity: None
    type: ClusterIP
  status:
    loadBalancer: {}
- apiVersion: v1
  kind: Service
  metadata:
    creationTimestamp: "2021-02-18T09:11:13Z"
    labels:
      app: codeready
      component: devfile-registry
    name: devfile-registry
    namespace: crw-crwctl
    ownerReferences:
    - apiVersion: org.eclipse.che/v1
      blockOwnerDeletion: true
      controller: true
      kind: CheCluster
      name: codeready-workspaces
      uid: f9bbdd5f-71c8-11eb-b432-fa163ee97a2e
    resourceVersion: "5105572"
    selfLink: /api/v1/namespaces/crw-crwctl/services/devfile-registry
    uid: 3fec8db2-71c9-11eb-b432-fa163ee97a2e
  spec:
    clusterIP: 172.30.141.174
    ports:
    - name: http
      port: 8080
      protocol: TCP
      targetPort: 8080
    selector:
      app: codeready
      component: devfile-registry
    sessionAffinity: None
    type: ClusterIP
  status:
    loadBalancer: {}
- apiVersion: v1
  kind: Service
  metadata:
    creationTimestamp: "2021-02-18T09:09:48Z"
    labels:
      app: codeready
      component: keycloak
    name: keycloak
    namespace: crw-crwctl
    ownerReferences:
    - apiVersion: org.eclipse.che/v1
      blockOwnerDeletion: true
      controller: true
      kind: CheCluster
      name: codeready-workspaces
      uid: f9bbdd5f-71c8-11eb-b432-fa163ee97a2e
    resourceVersion: "5105295"
    selfLink: /api/v1/namespaces/crw-crwctl/services/keycloak
    uid: 0cd3a66c-71c9-11eb-b432-fa163ee97a2e
  spec:
    clusterIP: 172.30.85.172
    ports:
    - name: http
      port: 8080
      protocol: TCP
      targetPort: 8080
    selector:
      app: codeready
      component: keycloak
    sessionAffinity: None
    type: ClusterIP
  status:
    loadBalancer: {}
- apiVersion: v1
  kind: Service
  metadata:
    creationTimestamp: "2021-02-18T09:12:03Z"
    labels:
      app: codeready
      component: plugin-registry
    name: plugin-registry
    namespace: crw-crwctl
    ownerReferences:
    - apiVersion: org.eclipse.che/v1
      blockOwnerDeletion: true
      controller: true
      kind: CheCluster
      name: codeready-workspaces
      uid: f9bbdd5f-71c8-11eb-b432-fa163ee97a2e
    resourceVersion: "5105759"
    selfLink: /api/v1/namespaces/crw-crwctl/services/plugin-registry
    uid: 5d983b64-71c9-11eb-b432-fa163ee97a2e
  spec:
    clusterIP: 172.30.97.193
    ports:
    - name: http
      port: 8080
      protocol: TCP
      targetPort: 8080
    selector:
      app: codeready
      component: plugin-registry
    sessionAffinity: None
    type: ClusterIP
  status:
    loadBalancer: {}
- apiVersion: v1
  kind: Service
  metadata:
    creationTimestamp: "2021-02-18T09:09:18Z"
    labels:
      app: codeready
      component: postgres
    name: postgres
    namespace: crw-crwctl
    ownerReferences:
    - apiVersion: org.eclipse.che/v1
      blockOwnerDeletion: true
      controller: true
      kind: CheCluster
      name: codeready-workspaces
      uid: f9bbdd5f-71c8-11eb-b432-fa163ee97a2e
    resourceVersion: "5105182"
    selfLink: /api/v1/namespaces/crw-crwctl/services/postgres
    uid: fb2166a9-71c8-11eb-b432-fa163ee97a2e
  spec:
    clusterIP: 172.30.74.242
    ports:
    - name: postgres
      port: 5432
      protocol: TCP
      targetPort: 5432
    selector:
      app: codeready
      component: postgres
    sessionAffinity: None
    type: ClusterIP
  status:
    loadBalancer: {}
- apiVersion: apps/v1
  kind: Deployment
  metadata:
    annotations:
      deployment.kubernetes.io/revision: "1"
    creationTimestamp: "2021-02-18T09:12:11Z"
    generation: 1
    labels:
      app: codeready
      component: codeready
    name: codeready
    namespace: crw-crwctl
    ownerReferences:
    - apiVersion: org.eclipse.che/v1
      blockOwnerDeletion: true
      controller: true
      kind: CheCluster
      name: codeready-workspaces
      uid: f9bbdd5f-71c8-11eb-b432-fa163ee97a2e
    resourceVersion: "5106000"
    selfLink: /apis/apps/v1/namespaces/crw-crwctl/deployments/codeready
    uid: 622986d9-71c9-11eb-b432-fa163ee97a2e
  spec:
    progressDeadlineSeconds: 600
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app: codeready
        component: codeready
    strategy:
      rollingUpdate:
        maxSurge: 25%
        maxUnavailable: 25%
      type: RollingUpdate
    template:
      metadata:
        creationTimestamp: null
        labels:
          app: codeready
          component: codeready
      spec:
        containers:
        - env:
          - name: CHE_SELF__SIGNED__CERT
            valueFrom:
              secretKeyRef:
                key: ca.crt
                name: self-signed-certificate
                optional: true
          - name: CHE_GIT_SELF__SIGNED__CERT
          - name: CHE_GIT_SELF__SIGNED__CERT__HOST
          - name: CHE_KEYCLOAK_ADMIN__PASSWORD
            value: admin
          - name: CHE_KEYCLOAK_ADMIN__USERNAME
            value: admin
          - name: CM_REVISION
            value: 5105806,5105148
          - name: KUBERNETES_NAMESPACE
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
          - name: CHE_JDBC_USERNAME
            valueFrom:
              secretKeyRef:
                key: user
                name: che-postgres-secret
          - name: CHE_JDBC_PASSWORD
            valueFrom:
              secretKeyRef:
                key: password
                name: che-postgres-secret
          envFrom:
          - configMapRef:
              name: che
          image: quay.io/crw/server-rhel8:latest
          imagePullPolicy: Always
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /api/system/state
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 200
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 3
          name: codeready
          ports:
          - containerPort: 8080
            name: http
            protocol: TCP
          - containerPort: 8000
            name: http-debug
            protocol: TCP
          - containerPort: 8888
            name: jgroups-ping
            protocol: TCP
          readinessProbe:
            failureThreshold: 18
            httpGet:
              path: /api/system/state
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 25
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          resources:
            limits:
              cpu: "1"
              memory: 1Gi
            requests:
              cpu: 100m
              memory: 512Mi
          securityContext:
            capabilities:
              drop:
              - ALL
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /public-certs
            name: che-public-certs
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: che
        serviceAccountName: che
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            name: ca-certs-merged
          name: che-public-certs
  status:
    availableReplicas: 1
    conditions:
    - lastTransitionTime: "2021-02-18T09:13:09Z"
      lastUpdateTime: "2021-02-18T09:13:09Z"
      message: Deployment has minimum availability.
      reason: MinimumReplicasAvailable
      status: "True"
      type: Available
    - lastTransitionTime: "2021-02-18T09:12:11Z"
      lastUpdateTime: "2021-02-18T09:13:09Z"
      message: ReplicaSet "codeready-66844f7fc8" has successfully progressed.
      reason: NewReplicaSetAvailable
      status: "True"
      type: Progressing
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: Deployment
  metadata:
    annotations:
      deployment.kubernetes.io/revision: "1"
    creationTimestamp: "2021-02-18T09:09:07Z"
    generation: 1
    name: codeready-operator
    namespace: crw-crwctl
    resourceVersion: "5105126"
    selfLink: /apis/apps/v1/namespaces/crw-crwctl/deployments/codeready-operator
    uid: f462bd28-71c8-11eb-b432-fa163ee97a2e
  spec:
    progressDeadlineSeconds: 600
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app: codeready-operator
    strategy:
      rollingUpdate:
        maxSurge: 25%
        maxUnavailable: 25%
      type: RollingUpdate
    template:
      metadata:
        creationTimestamp: null
        labels:
          app: codeready-operator
      spec:
        containers:
        - command:
          - /usr/local/bin/che-operator
          env:
          - name: WATCH_NAMESPACE
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
          - name: POD_NAME
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.name
          - name: OPERATOR_NAME
            value: codeready-operator
          - name: CHE_VERSION
            value: 2.7.0
          - name: RELATED_IMAGE_che_server
            value: quay.io/crw/server-rhel8:latest
          - name: RELATED_IMAGE_plugin_registry
            value: quay.io/crw/pluginregistry-rhel8:latest
          - name: RELATED_IMAGE_devfile_registry
            value: quay.io/crw/devfileregistry-rhel8:latest
          - name: RELATED_IMAGE_pvc_jobs
            value: registry.redhat.io/ubi8/ubi-minimal:8.3
          - name: RELATED_IMAGE_postgres
            value: registry.redhat.io/rhel8/postgresql-96:1
          - name: RELATED_IMAGE_keycloak
            value: registry.redhat.io/rh-sso-7/sso74-openshift-rhel8:7.4
          - name: RELATED_IMAGE_che_workspace_plugin_broker_metadata
            value: quay.io/crw/pluginbroker-metadata-rhel8:latest
          - name: RELATED_IMAGE_che_workspace_plugin_broker_artifacts
            value: quay.io/crw/pluginbroker-artifacts-rhel8:latest
          - name: RELATED_IMAGE_che_server_secure_exposer_jwt_proxy_image
            value: quay.io/crw/jwtproxy-rhel8:latest
          - name: RELATED_IMAGE_single_host_gateway
            value: quay.io/crw/traefik-rhel8:latest
          - name: RELATED_IMAGE_single_host_gateway_config_sidecar
            value: quay.io/crw/configbump-rhel8:latest
          - name: CHE_FLAVOR
            value: codeready
          - name: CONSOLE_LINK_NAME
            value: che
          - name: CONSOLE_LINK_DISPLAY_NAME
            value: CodeReady Workspaces
          - name: CONSOLE_LINK_SECTION
            value: Red Hat Applications
          - name: CONSOLE_LINK_IMAGE
            value: /dashboard/assets/branding/loader.svg
          - name: CHE_IDENTITY_SECRET
            value: che-identity-secret
          - name: CHE_IDENTITY_POSTGRES_SECRET
            value: che-identity-postgres-secret
          - name: CHE_POSTGRES_SECRET
            value: che-postgres-secret
          - name: CHE_SERVER_TRUST_STORE_CONFIGMAP_NAME
            value: ca-certs
          - name: RELATED_IMAGE_keycloak_ppc64le
            value: registry.redhat.io/rh-sso-7/sso74-openj9-openshift-rhel8:7.4
          - name: RELATED_IMAGE_keycloak_s390x
            value: registry.redhat.io/rh-sso-7/sso74-openj9-openshift-rhel8:7.4
          image: registry-proxy.engineering.redhat.com/rh-osbs/codeready-workspaces-operator:latest
          imagePullPolicy: Always
          livenessProbe:
            failureThreshold: 10
            httpGet:
              path: /healthz
              port: 6789
              scheme: HTTP
            initialDelaySeconds: 15
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          name: codeready-operator
          ports:
          - containerPort: 60000
            name: metrics
            protocol: TCP
          readinessProbe:
            exec:
              command:
              - stat
              - /tmp/operator-sdk-ready
            failureThreshold: 10
            initialDelaySeconds: 5
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          resources:
            limits:
              cpu: 500m
              memory: 256Mi
            requests:
              cpu: 100m
              memory: 64Mi
          securityContext:
            capabilities:
              drop:
              - ALL
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: codeready-operator
        serviceAccountName: codeready-operator
        terminationGracePeriodSeconds: 5
  status:
    availableReplicas: 1
    conditions:
    - lastTransitionTime: "2021-02-18T09:09:16Z"
      lastUpdateTime: "2021-02-18T09:09:16Z"
      message: Deployment has minimum availability.
      reason: MinimumReplicasAvailable
      status: "True"
      type: Available
    - lastTransitionTime: "2021-02-18T09:09:07Z"
      lastUpdateTime: "2021-02-18T09:09:16Z"
      message: ReplicaSet "codeready-operator-7854bfc86b" has successfully progressed.
      reason: NewReplicaSetAvailable
      status: "True"
      type: Progressing
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: Deployment
  metadata:
    annotations:
      deployment.kubernetes.io/revision: "1"
    creationTimestamp: "2021-02-18T09:11:53Z"
    generation: 1
    labels:
      app: codeready
      component: devfile-registry
    name: devfile-registry
    namespace: crw-crwctl
    ownerReferences:
    - apiVersion: org.eclipse.che/v1
      blockOwnerDeletion: true
      controller: true
      kind: CheCluster
      name: codeready-workspaces
      uid: f9bbdd5f-71c8-11eb-b432-fa163ee97a2e
    resourceVersion: "5105754"
    selfLink: /apis/apps/v1/namespaces/crw-crwctl/deployments/devfile-registry
    uid: 57b3d7d3-71c9-11eb-b432-fa163ee97a2e
  spec:
    progressDeadlineSeconds: 600
    replicas: 1
    revisionHistoryLimit: 2
    selector:
      matchLabels:
        app: codeready
        component: devfile-registry
    strategy:
      rollingUpdate:
        maxSurge: 25%
        maxUnavailable: 25%
      type: RollingUpdate
    template:
      metadata:
        creationTimestamp: null
        labels:
          app: codeready
          component: devfile-registry
      spec:
        containers:
        - envFrom:
          - configMapRef:
              name: devfile-registry
              optional: true
          image: quay.io/crw/devfileregistry-rhel8:latest
          imagePullPolicy: Always
          livenessProbe:
            failureThreshold: 10
            httpGet:
              path: /devfiles/
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 30
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 3
          name: che-devfile-registry
          ports:
          - containerPort: 8080
            name: http
            protocol: TCP
          readinessProbe:
            failureThreshold: 10
            httpGet:
              path: /devfiles/
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 3
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 3
          resources:
            limits:
              cpu: 500m
              memory: 256Mi
            requests:
              cpu: 100m
              memory: 32Mi
          securityContext:
            capabilities:
              drop:
              - ALL
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        terminationGracePeriodSeconds: 30
  status:
    availableReplicas: 1
    conditions:
    - lastTransitionTime: "2021-02-18T09:12:03Z"
      lastUpdateTime: "2021-02-18T09:12:03Z"
      message: Deployment has minimum availability.
      reason: MinimumReplicasAvailable
      status: "True"
      type: Available
    - lastTransitionTime: "2021-02-18T09:11:53Z"
      lastUpdateTime: "2021-02-18T09:12:03Z"
      message: ReplicaSet "devfile-registry-558bf46f7b" has successfully progressed.
      reason: NewReplicaSetAvailable
      status: "True"
      type: Progressing
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: Deployment
  metadata:
    annotations:
      che.keycloak-ssl-required-updated: "true"
      che.openshift-api-crt.version: "5105147"
      che.self-signed-certificate.version: "5105145"
      deployment.kubernetes.io/revision: "2"
    creationTimestamp: "2021-02-18T09:09:48Z"
    generation: 2
    labels:
      app: codeready
      component: keycloak
    name: keycloak
    namespace: crw-crwctl
    ownerReferences:
    - apiVersion: org.eclipse.che/v1
      blockOwnerDeletion: true
      controller: true
      kind: CheCluster
      name: codeready-workspaces
      uid: f9bbdd5f-71c8-11eb-b432-fa163ee97a2e
    resourceVersion: "5105700"
    selfLink: /apis/apps/v1/namespaces/crw-crwctl/deployments/keycloak
    uid: 0cde342d-71c9-11eb-b432-fa163ee97a2e
  spec:
    progressDeadlineSeconds: 600
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app: codeready
        component: keycloak
    strategy:
      rollingUpdate:
        maxSurge: 25%
        maxUnavailable: 25%
      type: RollingUpdate
    template:
      metadata:
        creationTimestamp: null
        labels:
          app: codeready
          component: keycloak
      spec:
        containers:
        - args:
          - -c
          - "echo \"ssl_required WAS UPDATED for master realm.\" && \n\tfunction jks_import_ca_bundle
            {\n\t\tCA_FILE=$1\n\t\tKEYSTORE_PATH=$2\n\t\tKEYSTORE_PASSWORD=$3\n\n\t\tif
            [ ! -f $CA_FILE ]; then\n\t\t\t# CA bundle file doesn't exist, skip it\n\t\t\techo
            \"Failed to import CA certificates from ${CA_FILE}. File doesn't exist\"\n\t\t\treturn\n\t\tfi\n\n\t\tbundle_name=$(basename
            $CA_FILE)\n\t\tcerts_imported=0\n\t\tcert_index=0\n\t\ttmp_file=/tmp/cert.pem\n\t\tis_cert=false\n\t\twhile
            IFS= read -r line; do\n\t\t\tif [ \"$line\" == \"-----BEGIN CERTIFICATE-----\"
            ]; then\n\t\t\t\t# Start copying a new certificate\n\t\t\t\tis_cert=true\n\t\t\t\tcert_index=$((cert_index+1))\n\t\t\t\t#
            Reset destination file and add header line\n\t\t\t\techo $line > ${tmp_file}\n\t\t\telif
            [ \"$line\" == \"-----END CERTIFICATE-----\" ]; then\n\t\t\t\t# End of
            the certificate is reached, add it to trust store\n\t\t\t\tis_cert=false\n\t\t\t\techo
            $line >> ${tmp_file}\n\t\t\t\tkeytool -importcert -alias \"${bundle_name}_${cert_index}\"
            -keystore $KEYSTORE_PATH -file $tmp_file -storepass $KEYSTORE_PASSWORD
            -noprompt && \\\n\t\t\t\tcerts_imported=$((certs_imported+1))\n\t\t\telif
            [ \"$is_cert\" == true ]; then\n\t\t\t\t# In the middle of a certificate,
            copy line to target file\n\t\t\t\techo $line >> ${tmp_file}\n\t\t\tfi\n\t\tdone
            < \"$CA_FILE\"\n\t\techo \"Imported ${certs_imported} certificates from
            ${CA_FILE}\"\n\t\t# Clean up\n\t\trm -f $tmp_file\n\t}\n\t\nbaseTemplate=/opt/eap/themes/base/login/login-update-profile.ftl
            && readOnlyTemplateDir=/opt/eap/themes/codeready-username-readonly/login
            && readOnlyTemplate=${readOnlyTemplateDir}/login-update-profile.ftl &&
            if [ ! -d ${readOnlyTemplateDir} ]; then mkdir -p ${readOnlyTemplateDir}
            && cp ${baseTemplate} ${readOnlyTemplate} && echo \"parent=rh-sso\" >
            ${readOnlyTemplateDir}/theme.properties && sed -i 's|id=\"username\" name=\"username\"|id=\"username\"
            readonly name=\"username\"|g' ${readOnlyTemplate}; fi && sed -i  's|id=\"username\"
            name=\"username\"|id=\"username\" pattern=\"[a-z]([-a-z0-9]{0,61}[a-z0-9])?\"
            title=\"Username has to comply with the DNS naming convention. An alphanumeric
            (a-z, and 0-9) string, with a maximum length of 63 characters, with the
            '-' character allowed anywhere except the first or last character.\" name=\"username\"|g'
            ${baseTemplate} && if [ ! -z \"${CHE_SELF__SIGNED__CERT}\" ]; then echo
            \"${CHE_SELF__SIGNED__CERT}\" > /opt/eap/che.crt && keytool -importcert
            -alias ROUTERCRT -keystore /opt/eap/openshift.jks -file /opt/eap/che.crt
            -storepass 2MBLTGEkXmrs -noprompt; fi && if [ ! -z \"${OPENSHIFT_SELF__SIGNED__CERT}\"
            ]; then echo \"${OPENSHIFT_SELF__SIGNED__CERT}\" > /opt/eap/openshift.crt
            && keytool -importcert -alias OPENSHIFTAPI -keystore /opt/eap/openshift.jks
            -file /opt/eap/openshift.crt -storepass 2MBLTGEkXmrs -noprompt; fi &&
            \ keytool -importcert -alias MOUNTEDCRT -keystore /opt/eap/openshift.jks
            -file /var/run/secrets/kubernetes.io/serviceaccount/ca.crt -storepass
            2MBLTGEkXmrs -noprompt && if [ -f /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt
            ]; then keytool -importcert -alias MOUNTEDSERVICECRT -keystore /opt/eap/openshift.jks
            -file /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt -storepass
            2MBLTGEkXmrs -noprompt; fi && keytool -importkeystore -srckeystore /etc/pki/ca-trust/extracted/java/cacerts
            -destkeystore /opt/eap/openshift.jks -srcstorepass changeit -deststorepass
            2MBLTGEkXmrs && if [[ -d \"/public-certs\" && -n \"$(find /public-certs
            -type f)\" ]]; then for certfile in /public-certs/* ; do jks_import_ca_bundle
            $certfile /opt/eap/openshift.jks 2MBLTGEkXmrs ; done; fi && echo \"feature.token_exchange=enabled\nfeature.admin_fine_grained_authz=enabled\"
            > /opt/eap/standalone/configuration/profile.properties   && sed -i 's/WILDCARD/ANY/g'
            /opt/eap/bin/launch/keycloak-spi.sh && /opt/eap/bin/openshift-launch.sh
            -b 0.0.0.0"
          command:
          - /bin/sh
          env:
          - name: CM_REVISION
            value: "5105148"
          - name: PROXY_ADDRESS_FORWARDING
            value: "true"
          - name: DB_SERVICE_PREFIX_MAPPING
            value: keycloak-postgresql=DB
          - name: KEYCLOAK_POSTGRESQL_SERVICE_HOST
            value: postgres
          - name: KEYCLOAK_POSTGRESQL_SERVICE_PORT
            value: "5432"
          - name: DB_DATABASE
            value: keycloak
          - name: DB_USERNAME
            value: keycloak
          - name: DB_VENDOR
            value: POSTGRES
          - name: SSO_TRUSTSTORE
            value: openshift.jks
          - name: SSO_TRUSTSTORE_DIR
            value: /opt/eap
          - name: SSO_TRUSTSTORE_PASSWORD
            value: 2MBLTGEkXmrs
          - name: CHE_SELF__SIGNED__CERT
            valueFrom:
              secretKeyRef:
                key: ca.crt
                name: self-signed-certificate
                optional: true
          - name: OPENSHIFT_SELF__SIGNED__CERT
            valueFrom:
              secretKeyRef:
                key: ca.crt
                name: openshift-api-crt
                optional: true
          - name: DB_PASSWORD
            valueFrom:
              secretKeyRef:
                key: password
                name: che-identity-postgres-secret
          - name: SSO_ADMIN_PASSWORD
            value: admin
          - name: SSO_ADMIN_USERNAME
            value: admin
          - name: KEYCLOAK_FRONTEND_URL
            value: https://keycloak-crw-crwctl.apps.ocp311.crw-qe.com/auth
          image: registry.redhat.io/rh-sso-7/sso74-openshift-rhel8:7.4
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 10
            initialDelaySeconds: 90
            periodSeconds: 10
            successThreshold: 1
            tcpSocket:
              port: 8080
            timeoutSeconds: 5
          name: keycloak
          ports:
          - containerPort: 8080
            name: keycloak
            protocol: TCP
          readinessProbe:
            failureThreshold: 10
            httpGet:
              path: auth/js/keycloak.js
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 30
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          resources:
            limits:
              cpu: "2"
              memory: 1536Mi
            requests:
              cpu: 100m
              memory: 1Gi
          securityContext:
            capabilities:
              drop:
              - ALL
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /public-certs
            name: che-public-certs
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            name: ca-certs-merged
          name: che-public-certs
  status:
    availableReplicas: 1
    conditions:
    - lastTransitionTime: "2021-02-18T09:10:36Z"
      lastUpdateTime: "2021-02-18T09:10:36Z"
      message: Deployment has minimum availability.
      reason: MinimumReplicasAvailable
      status: "True"
      type: Available
    - lastTransitionTime: "2021-02-18T09:09:48Z"
      lastUpdateTime: "2021-02-18T09:11:53Z"
      message: ReplicaSet "keycloak-d8c6b5d94" has successfully progressed.
      reason: NewReplicaSetAvailable
      status: "True"
      type: Progressing
    observedGeneration: 2
    readyReplicas: 1
    replicas: 1
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: Deployment
  metadata:
    annotations:
      deployment.kubernetes.io/revision: "1"
    creationTimestamp: "2021-02-18T09:12:03Z"
    generation: 1
    labels:
      app: codeready
      component: plugin-registry
    name: plugin-registry
    namespace: crw-crwctl
    ownerReferences:
    - apiVersion: org.eclipse.che/v1
      blockOwnerDeletion: true
      controller: true
      kind: CheCluster
      name: codeready-workspaces
      uid: f9bbdd5f-71c8-11eb-b432-fa163ee97a2e
    resourceVersion: "5105804"
    selfLink: /apis/apps/v1/namespaces/crw-crwctl/deployments/plugin-registry
    uid: 5da3c3a7-71c9-11eb-b432-fa163ee97a2e
  spec:
    progressDeadlineSeconds: 600
    replicas: 1
    revisionHistoryLimit: 2
    selector:
      matchLabels:
        app: codeready
        component: plugin-registry
    strategy:
      rollingUpdate:
        maxSurge: 25%
        maxUnavailable: 25%
      type: RollingUpdate
    template:
      metadata:
        creationTimestamp: null
        labels:
          app: codeready
          component: plugin-registry
      spec:
        containers:
        - envFrom:
          - configMapRef:
              name: plugin-registry
              optional: true
          image: quay.io/crw/pluginregistry-rhel8:latest
          imagePullPolicy: Always
          livenessProbe:
            failureThreshold: 10
            httpGet:
              path: /plugins/
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 30
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 3
          name: che-plugin-registry
          ports:
          - containerPort: 8080
            name: http
            protocol: TCP
          readinessProbe:
            failureThreshold: 10
            httpGet:
              path: /plugins/
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 3
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 3
          resources:
            limits:
              cpu: 500m
              memory: 256Mi
            requests:
              cpu: 100m
              memory: 32Mi
          securityContext:
            capabilities:
              drop:
              - ALL
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        terminationGracePeriodSeconds: 30
  status:
    availableReplicas: 1
    conditions:
    - lastTransitionTime: "2021-02-18T09:12:11Z"
      lastUpdateTime: "2021-02-18T09:12:11Z"
      message: Deployment has minimum availability.
      reason: MinimumReplicasAvailable
      status: "True"
      type: Available
    - lastTransitionTime: "2021-02-18T09:12:03Z"
      lastUpdateTime: "2021-02-18T09:12:11Z"
      message: ReplicaSet "plugin-registry-cb4df5454" has successfully progressed.
      reason: NewReplicaSetAvailable
      status: "True"
      type: Progressing
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: Deployment
  metadata:
    annotations:
      deployment.kubernetes.io/revision: "1"
    creationTimestamp: "2021-02-18T09:09:18Z"
    generation: 1
    labels:
      app: codeready
      component: postgres
    name: postgres
    namespace: crw-crwctl
    ownerReferences:
    - apiVersion: org.eclipse.che/v1
      blockOwnerDeletion: true
      controller: true
      kind: CheCluster
      name: codeready-workspaces
      uid: f9bbdd5f-71c8-11eb-b432-fa163ee97a2e
    resourceVersion: "5105284"
    selfLink: /apis/apps/v1/namespaces/crw-crwctl/deployments/postgres
    uid: fb28628a-71c8-11eb-b432-fa163ee97a2e
  spec:
    progressDeadlineSeconds: 600
    replicas: 1
    revisionHistoryLimit: 10
    selector:
      matchLabels:
        app: codeready
        component: postgres
    strategy:
      type: Recreate
    template:
      metadata:
        creationTimestamp: null
        labels:
          app: codeready
          component: postgres
      spec:
        containers:
        - env:
          - name: POSTGRESQL_DATABASE
            value: dbche
          - name: POSTGRESQL_ADMIN_PASSWORD
            value: OZxunFXnY3pY
          - name: POSTGRESQL_USER
            valueFrom:
              secretKeyRef:
                key: user
                name: che-postgres-secret
          - name: POSTGRESQL_PASSWORD
            valueFrom:
              secretKeyRef:
                key: password
                name: che-postgres-secret
          image: registry.redhat.io/rhel8/postgresql-96:1
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 10
            initialDelaySeconds: 30
            periodSeconds: 10
            successThreshold: 1
            tcpSocket:
              port: 5432
            timeoutSeconds: 5
          name: postgres
          ports:
          - containerPort: 5432
            name: postgres
            protocol: TCP
          readinessProbe:
            exec:
              command:
              - /bin/sh
              - -i
              - -c
              - psql -h 127.0.0.1 -U $POSTGRESQL_USER -q -d dbche -c 'SELECT 1'
            failureThreshold: 10
            initialDelaySeconds: 15
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          resources:
            limits:
              cpu: 500m
              memory: 1Gi
            requests:
              cpu: 100m
              memory: 512Mi
          securityContext:
            capabilities:
              drop:
              - ALL
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/pgsql/data
            name: postgres-data
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        terminationGracePeriodSeconds: 30
        volumes:
        - name: postgres-data
          persistentVolumeClaim:
            claimName: postgres-data
  status:
    availableReplicas: 1
    conditions:
    - lastTransitionTime: "2021-02-18T09:09:46Z"
      lastUpdateTime: "2021-02-18T09:09:46Z"
      message: Deployment has minimum availability.
      reason: MinimumReplicasAvailable
      status: "True"
      type: Available
    - lastTransitionTime: "2021-02-18T09:09:18Z"
      lastUpdateTime: "2021-02-18T09:09:46Z"
      message: ReplicaSet "postgres-5bddccc44f" has successfully progressed.
      reason: NewReplicaSetAvailable
      status: "True"
      type: Progressing
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
    updatedReplicas: 1
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "1"
    creationTimestamp: "2021-02-18T09:12:11Z"
    generation: 1
    labels:
      app: codeready
      component: codeready
      pod-template-hash: "2240093974"
    name: codeready-66844f7fc8
    namespace: crw-crwctl
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: codeready
      uid: 622986d9-71c9-11eb-b432-fa163ee97a2e
    resourceVersion: "5105999"
    selfLink: /apis/apps/v1/namespaces/crw-crwctl/replicasets/codeready-66844f7fc8
    uid: 622a0cf6-71c9-11eb-b432-fa163ee97a2e
  spec:
    replicas: 1
    selector:
      matchLabels:
        app: codeready
        component: codeready
        pod-template-hash: "2240093974"
    template:
      metadata:
        creationTimestamp: null
        labels:
          app: codeready
          component: codeready
          pod-template-hash: "2240093974"
      spec:
        containers:
        - env:
          - name: CHE_SELF__SIGNED__CERT
            valueFrom:
              secretKeyRef:
                key: ca.crt
                name: self-signed-certificate
                optional: true
          - name: CHE_GIT_SELF__SIGNED__CERT
          - name: CHE_GIT_SELF__SIGNED__CERT__HOST
          - name: CHE_KEYCLOAK_ADMIN__PASSWORD
            value: admin
          - name: CHE_KEYCLOAK_ADMIN__USERNAME
            value: admin
          - name: CM_REVISION
            value: 5105806,5105148
          - name: KUBERNETES_NAMESPACE
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
          - name: CHE_JDBC_USERNAME
            valueFrom:
              secretKeyRef:
                key: user
                name: che-postgres-secret
          - name: CHE_JDBC_PASSWORD
            valueFrom:
              secretKeyRef:
                key: password
                name: che-postgres-secret
          envFrom:
          - configMapRef:
              name: che
          image: quay.io/crw/server-rhel8:latest
          imagePullPolicy: Always
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /api/system/state
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 200
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 3
          name: codeready
          ports:
          - containerPort: 8080
            name: http
            protocol: TCP
          - containerPort: 8000
            name: http-debug
            protocol: TCP
          - containerPort: 8888
            name: jgroups-ping
            protocol: TCP
          readinessProbe:
            failureThreshold: 18
            httpGet:
              path: /api/system/state
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 25
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          resources:
            limits:
              cpu: "1"
              memory: 1Gi
            requests:
              cpu: 100m
              memory: 512Mi
          securityContext:
            capabilities:
              drop:
              - ALL
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /public-certs
            name: che-public-certs
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: che
        serviceAccountName: che
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            name: ca-certs-merged
          name: che-public-certs
  status:
    availableReplicas: 1
    fullyLabeledReplicas: 1
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "1"
    creationTimestamp: "2021-02-18T09:09:07Z"
    generation: 1
    labels:
      app: codeready-operator
      pod-template-hash: "3410697426"
    name: codeready-operator-7854bfc86b
    namespace: crw-crwctl
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: codeready-operator
      uid: f462bd28-71c8-11eb-b432-fa163ee97a2e
    resourceVersion: "5105125"
    selfLink: /apis/apps/v1/namespaces/crw-crwctl/replicasets/codeready-operator-7854bfc86b
    uid: f4642dcf-71c8-11eb-b432-fa163ee97a2e
  spec:
    replicas: 1
    selector:
      matchLabels:
        app: codeready-operator
        pod-template-hash: "3410697426"
    template:
      metadata:
        creationTimestamp: null
        labels:
          app: codeready-operator
          pod-template-hash: "3410697426"
      spec:
        containers:
        - command:
          - /usr/local/bin/che-operator
          env:
          - name: WATCH_NAMESPACE
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
          - name: POD_NAME
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.name
          - name: OPERATOR_NAME
            value: codeready-operator
          - name: CHE_VERSION
            value: 2.7.0
          - name: RELATED_IMAGE_che_server
            value: quay.io/crw/server-rhel8:latest
          - name: RELATED_IMAGE_plugin_registry
            value: quay.io/crw/pluginregistry-rhel8:latest
          - name: RELATED_IMAGE_devfile_registry
            value: quay.io/crw/devfileregistry-rhel8:latest
          - name: RELATED_IMAGE_pvc_jobs
            value: registry.redhat.io/ubi8/ubi-minimal:8.3
          - name: RELATED_IMAGE_postgres
            value: registry.redhat.io/rhel8/postgresql-96:1
          - name: RELATED_IMAGE_keycloak
            value: registry.redhat.io/rh-sso-7/sso74-openshift-rhel8:7.4
          - name: RELATED_IMAGE_che_workspace_plugin_broker_metadata
            value: quay.io/crw/pluginbroker-metadata-rhel8:latest
          - name: RELATED_IMAGE_che_workspace_plugin_broker_artifacts
            value: quay.io/crw/pluginbroker-artifacts-rhel8:latest
          - name: RELATED_IMAGE_che_server_secure_exposer_jwt_proxy_image
            value: quay.io/crw/jwtproxy-rhel8:latest
          - name: RELATED_IMAGE_single_host_gateway
            value: quay.io/crw/traefik-rhel8:latest
          - name: RELATED_IMAGE_single_host_gateway_config_sidecar
            value: quay.io/crw/configbump-rhel8:latest
          - name: CHE_FLAVOR
            value: codeready
          - name: CONSOLE_LINK_NAME
            value: che
          - name: CONSOLE_LINK_DISPLAY_NAME
            value: CodeReady Workspaces
          - name: CONSOLE_LINK_SECTION
            value: Red Hat Applications
          - name: CONSOLE_LINK_IMAGE
            value: /dashboard/assets/branding/loader.svg
          - name: CHE_IDENTITY_SECRET
            value: che-identity-secret
          - name: CHE_IDENTITY_POSTGRES_SECRET
            value: che-identity-postgres-secret
          - name: CHE_POSTGRES_SECRET
            value: che-postgres-secret
          - name: CHE_SERVER_TRUST_STORE_CONFIGMAP_NAME
            value: ca-certs
          - name: RELATED_IMAGE_keycloak_ppc64le
            value: registry.redhat.io/rh-sso-7/sso74-openj9-openshift-rhel8:7.4
          - name: RELATED_IMAGE_keycloak_s390x
            value: registry.redhat.io/rh-sso-7/sso74-openj9-openshift-rhel8:7.4
          image: registry-proxy.engineering.redhat.com/rh-osbs/codeready-workspaces-operator:latest
          imagePullPolicy: Always
          livenessProbe:
            failureThreshold: 10
            httpGet:
              path: /healthz
              port: 6789
              scheme: HTTP
            initialDelaySeconds: 15
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          name: codeready-operator
          ports:
          - containerPort: 60000
            name: metrics
            protocol: TCP
          readinessProbe:
            exec:
              command:
              - stat
              - /tmp/operator-sdk-ready
            failureThreshold: 10
            initialDelaySeconds: 5
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          resources:
            limits:
              cpu: 500m
              memory: 256Mi
            requests:
              cpu: 100m
              memory: 64Mi
          securityContext:
            capabilities:
              drop:
              - ALL
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: codeready-operator
        serviceAccountName: codeready-operator
        terminationGracePeriodSeconds: 5
  status:
    availableReplicas: 1
    fullyLabeledReplicas: 1
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "1"
    creationTimestamp: "2021-02-18T09:11:53Z"
    generation: 1
    labels:
      app: codeready
      component: devfile-registry
      pod-template-hash: "1146902936"
    name: devfile-registry-558bf46f7b
    namespace: crw-crwctl
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: devfile-registry
      uid: 57b3d7d3-71c9-11eb-b432-fa163ee97a2e
    resourceVersion: "5105753"
    selfLink: /apis/apps/v1/namespaces/crw-crwctl/replicasets/devfile-registry-558bf46f7b
    uid: 57b485fb-71c9-11eb-b432-fa163ee97a2e
  spec:
    replicas: 1
    selector:
      matchLabels:
        app: codeready
        component: devfile-registry
        pod-template-hash: "1146902936"
    template:
      metadata:
        creationTimestamp: null
        labels:
          app: codeready
          component: devfile-registry
          pod-template-hash: "1146902936"
      spec:
        containers:
        - envFrom:
          - configMapRef:
              name: devfile-registry
              optional: true
          image: quay.io/crw/devfileregistry-rhel8:latest
          imagePullPolicy: Always
          livenessProbe:
            failureThreshold: 10
            httpGet:
              path: /devfiles/
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 30
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 3
          name: che-devfile-registry
          ports:
          - containerPort: 8080
            name: http
            protocol: TCP
          readinessProbe:
            failureThreshold: 10
            httpGet:
              path: /devfiles/
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 3
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 3
          resources:
            limits:
              cpu: 500m
              memory: 256Mi
            requests:
              cpu: 100m
              memory: 32Mi
          securityContext:
            capabilities:
              drop:
              - ALL
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        terminationGracePeriodSeconds: 30
  status:
    availableReplicas: 1
    fullyLabeledReplicas: 1
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      che.keycloak-ssl-required-updated: "false"
      che.openshift-api-crt.version: "5105147"
      che.self-signed-certificate.version: "5105145"
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "1"
    creationTimestamp: "2021-02-18T09:09:48Z"
    generation: 2
    labels:
      app: codeready
      component: keycloak
      pod-template-hash: "252323433"
    name: keycloak-696767877
    namespace: crw-crwctl
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: keycloak
      uid: 0cde342d-71c9-11eb-b432-fa163ee97a2e
    resourceVersion: "5105699"
    selfLink: /apis/apps/v1/namespaces/crw-crwctl/replicasets/keycloak-696767877
    uid: 0cdedecb-71c9-11eb-b432-fa163ee97a2e
  spec:
    replicas: 0
    selector:
      matchLabels:
        app: codeready
        component: keycloak
        pod-template-hash: "252323433"
    template:
      metadata:
        creationTimestamp: null
        labels:
          app: codeready
          component: keycloak
          pod-template-hash: "252323433"
      spec:
        containers:
        - args:
          - -c
          - "\n\tfunction jks_import_ca_bundle {\n\t\tCA_FILE=$1\n\t\tKEYSTORE_PATH=$2\n\t\tKEYSTORE_PASSWORD=$3\n\n\t\tif
            [ ! -f $CA_FILE ]; then\n\t\t\t# CA bundle file doesn't exist, skip it\n\t\t\techo
            \"Failed to import CA certificates from ${CA_FILE}. File doesn't exist\"\n\t\t\treturn\n\t\tfi\n\n\t\tbundle_name=$(basename
            $CA_FILE)\n\t\tcerts_imported=0\n\t\tcert_index=0\n\t\ttmp_file=/tmp/cert.pem\n\t\tis_cert=false\n\t\twhile
            IFS= read -r line; do\n\t\t\tif [ \"$line\" == \"-----BEGIN CERTIFICATE-----\"
            ]; then\n\t\t\t\t# Start copying a new certificate\n\t\t\t\tis_cert=true\n\t\t\t\tcert_index=$((cert_index+1))\n\t\t\t\t#
            Reset destination file and add header line\n\t\t\t\techo $line > ${tmp_file}\n\t\t\telif
            [ \"$line\" == \"-----END CERTIFICATE-----\" ]; then\n\t\t\t\t# End of
            the certificate is reached, add it to trust store\n\t\t\t\tis_cert=false\n\t\t\t\techo
            $line >> ${tmp_file}\n\t\t\t\tkeytool -importcert -alias \"${bundle_name}_${cert_index}\"
            -keystore $KEYSTORE_PATH -file $tmp_file -storepass $KEYSTORE_PASSWORD
            -noprompt && \\\n\t\t\t\tcerts_imported=$((certs_imported+1))\n\t\t\telif
            [ \"$is_cert\" == true ]; then\n\t\t\t\t# In the middle of a certificate,
            copy line to target file\n\t\t\t\techo $line >> ${tmp_file}\n\t\t\tfi\n\t\tdone
            < \"$CA_FILE\"\n\t\techo \"Imported ${certs_imported} certificates from
            ${CA_FILE}\"\n\t\t# Clean up\n\t\trm -f $tmp_file\n\t}\n\t\nbaseTemplate=/opt/eap/themes/base/login/login-update-profile.ftl
            && readOnlyTemplateDir=/opt/eap/themes/codeready-username-readonly/login
            && readOnlyTemplate=${readOnlyTemplateDir}/login-update-profile.ftl &&
            if [ ! -d ${readOnlyTemplateDir} ]; then mkdir -p ${readOnlyTemplateDir}
            && cp ${baseTemplate} ${readOnlyTemplate} && echo \"parent=rh-sso\" >
            ${readOnlyTemplateDir}/theme.properties && sed -i 's|id=\"username\" name=\"username\"|id=\"username\"
            readonly name=\"username\"|g' ${readOnlyTemplate}; fi && sed -i  's|id=\"username\"
            name=\"username\"|id=\"username\" pattern=\"[a-z]([-a-z0-9]{0,61}[a-z0-9])?\"
            title=\"Username has to comply with the DNS naming convention. An alphanumeric
            (a-z, and 0-9) string, with a maximum length of 63 characters, with the
            '-' character allowed anywhere except the first or last character.\" name=\"username\"|g'
            ${baseTemplate} && if [ ! -z \"${CHE_SELF__SIGNED__CERT}\" ]; then echo
            \"${CHE_SELF__SIGNED__CERT}\" > /opt/eap/che.crt && keytool -importcert
            -alias ROUTERCRT -keystore /opt/eap/openshift.jks -file /opt/eap/che.crt
            -storepass 2MBLTGEkXmrs -noprompt; fi && if [ ! -z \"${OPENSHIFT_SELF__SIGNED__CERT}\"
            ]; then echo \"${OPENSHIFT_SELF__SIGNED__CERT}\" > /opt/eap/openshift.crt
            && keytool -importcert -alias OPENSHIFTAPI -keystore /opt/eap/openshift.jks
            -file /opt/eap/openshift.crt -storepass 2MBLTGEkXmrs -noprompt; fi &&
            \ keytool -importcert -alias MOUNTEDCRT -keystore /opt/eap/openshift.jks
            -file /var/run/secrets/kubernetes.io/serviceaccount/ca.crt -storepass
            2MBLTGEkXmrs -noprompt && if [ -f /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt
            ]; then keytool -importcert -alias MOUNTEDSERVICECRT -keystore /opt/eap/openshift.jks
            -file /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt -storepass
            2MBLTGEkXmrs -noprompt; fi && keytool -importkeystore -srckeystore /etc/pki/ca-trust/extracted/java/cacerts
            -destkeystore /opt/eap/openshift.jks -srcstorepass changeit -deststorepass
            2MBLTGEkXmrs && if [[ -d \"/public-certs\" && -n \"$(find /public-certs
            -type f)\" ]]; then for certfile in /public-certs/* ; do jks_import_ca_bundle
            $certfile /opt/eap/openshift.jks 2MBLTGEkXmrs ; done; fi && echo \"feature.token_exchange=enabled\nfeature.admin_fine_grained_authz=enabled\"
            > /opt/eap/standalone/configuration/profile.properties   && sed -i 's/WILDCARD/ANY/g'
            /opt/eap/bin/launch/keycloak-spi.sh && /opt/eap/bin/openshift-launch.sh
            -b 0.0.0.0"
          command:
          - /bin/sh
          env:
          - name: CM_REVISION
            value: "5105148"
          - name: PROXY_ADDRESS_FORWARDING
            value: "true"
          - name: DB_SERVICE_PREFIX_MAPPING
            value: keycloak-postgresql=DB
          - name: KEYCLOAK_POSTGRESQL_SERVICE_HOST
            value: postgres
          - name: KEYCLOAK_POSTGRESQL_SERVICE_PORT
            value: "5432"
          - name: DB_DATABASE
            value: keycloak
          - name: DB_USERNAME
            value: keycloak
          - name: DB_VENDOR
            value: POSTGRES
          - name: SSO_TRUSTSTORE
            value: openshift.jks
          - name: SSO_TRUSTSTORE_DIR
            value: /opt/eap
          - name: SSO_TRUSTSTORE_PASSWORD
            value: 2MBLTGEkXmrs
          - name: CHE_SELF__SIGNED__CERT
            valueFrom:
              secretKeyRef:
                key: ca.crt
                name: self-signed-certificate
                optional: true
          - name: OPENSHIFT_SELF__SIGNED__CERT
            valueFrom:
              secretKeyRef:
                key: ca.crt
                name: openshift-api-crt
                optional: true
          - name: DB_PASSWORD
            valueFrom:
              secretKeyRef:
                key: password
                name: che-identity-postgres-secret
          - name: SSO_ADMIN_PASSWORD
            value: admin
          - name: SSO_ADMIN_USERNAME
            value: admin
          - name: KEYCLOAK_FRONTEND_URL
            value: https://keycloak-crw-crwctl.apps.ocp311.crw-qe.com/auth
          image: registry.redhat.io/rh-sso-7/sso74-openshift-rhel8:7.4
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 10
            initialDelaySeconds: 90
            periodSeconds: 10
            successThreshold: 1
            tcpSocket:
              port: 8080
            timeoutSeconds: 5
          name: keycloak
          ports:
          - containerPort: 8080
            name: keycloak
            protocol: TCP
          readinessProbe:
            failureThreshold: 10
            httpGet:
              path: auth/js/keycloak.js
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 30
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          resources:
            limits:
              cpu: "2"
              memory: 1536Mi
            requests:
              cpu: 100m
              memory: 1Gi
          securityContext:
            capabilities:
              drop:
              - ALL
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /public-certs
            name: che-public-certs
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            name: ca-certs-merged
          name: che-public-certs
  status:
    observedGeneration: 2
    replicas: 0
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      che.keycloak-ssl-required-updated: "true"
      che.openshift-api-crt.version: "5105147"
      che.self-signed-certificate.version: "5105145"
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "2"
    creationTimestamp: "2021-02-18T09:11:13Z"
    generation: 1
    labels:
      app: codeready
      component: keycloak
      pod-template-hash: "847261850"
    name: keycloak-d8c6b5d94
    namespace: crw-crwctl
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: keycloak
      uid: 0cde342d-71c9-11eb-b432-fa163ee97a2e
    resourceVersion: "5105691"
    selfLink: /apis/apps/v1/namespaces/crw-crwctl/replicasets/keycloak-d8c6b5d94
    uid: 3fe2df72-71c9-11eb-b432-fa163ee97a2e
  spec:
    replicas: 1
    selector:
      matchLabels:
        app: codeready
        component: keycloak
        pod-template-hash: "847261850"
    template:
      metadata:
        creationTimestamp: null
        labels:
          app: codeready
          component: keycloak
          pod-template-hash: "847261850"
      spec:
        containers:
        - args:
          - -c
          - "echo \"ssl_required WAS UPDATED for master realm.\" && \n\tfunction jks_import_ca_bundle
            {\n\t\tCA_FILE=$1\n\t\tKEYSTORE_PATH=$2\n\t\tKEYSTORE_PASSWORD=$3\n\n\t\tif
            [ ! -f $CA_FILE ]; then\n\t\t\t# CA bundle file doesn't exist, skip it\n\t\t\techo
            \"Failed to import CA certificates from ${CA_FILE}. File doesn't exist\"\n\t\t\treturn\n\t\tfi\n\n\t\tbundle_name=$(basename
            $CA_FILE)\n\t\tcerts_imported=0\n\t\tcert_index=0\n\t\ttmp_file=/tmp/cert.pem\n\t\tis_cert=false\n\t\twhile
            IFS= read -r line; do\n\t\t\tif [ \"$line\" == \"-----BEGIN CERTIFICATE-----\"
            ]; then\n\t\t\t\t# Start copying a new certificate\n\t\t\t\tis_cert=true\n\t\t\t\tcert_index=$((cert_index+1))\n\t\t\t\t#
            Reset destination file and add header line\n\t\t\t\techo $line > ${tmp_file}\n\t\t\telif
            [ \"$line\" == \"-----END CERTIFICATE-----\" ]; then\n\t\t\t\t# End of
            the certificate is reached, add it to trust store\n\t\t\t\tis_cert=false\n\t\t\t\techo
            $line >> ${tmp_file}\n\t\t\t\tkeytool -importcert -alias \"${bundle_name}_${cert_index}\"
            -keystore $KEYSTORE_PATH -file $tmp_file -storepass $KEYSTORE_PASSWORD
            -noprompt && \\\n\t\t\t\tcerts_imported=$((certs_imported+1))\n\t\t\telif
            [ \"$is_cert\" == true ]; then\n\t\t\t\t# In the middle of a certificate,
            copy line to target file\n\t\t\t\techo $line >> ${tmp_file}\n\t\t\tfi\n\t\tdone
            < \"$CA_FILE\"\n\t\techo \"Imported ${certs_imported} certificates from
            ${CA_FILE}\"\n\t\t# Clean up\n\t\trm -f $tmp_file\n\t}\n\t\nbaseTemplate=/opt/eap/themes/base/login/login-update-profile.ftl
            && readOnlyTemplateDir=/opt/eap/themes/codeready-username-readonly/login
            && readOnlyTemplate=${readOnlyTemplateDir}/login-update-profile.ftl &&
            if [ ! -d ${readOnlyTemplateDir} ]; then mkdir -p ${readOnlyTemplateDir}
            && cp ${baseTemplate} ${readOnlyTemplate} && echo \"parent=rh-sso\" >
            ${readOnlyTemplateDir}/theme.properties && sed -i 's|id=\"username\" name=\"username\"|id=\"username\"
            readonly name=\"username\"|g' ${readOnlyTemplate}; fi && sed -i  's|id=\"username\"
            name=\"username\"|id=\"username\" pattern=\"[a-z]([-a-z0-9]{0,61}[a-z0-9])?\"
            title=\"Username has to comply with the DNS naming convention. An alphanumeric
            (a-z, and 0-9) string, with a maximum length of 63 characters, with the
            '-' character allowed anywhere except the first or last character.\" name=\"username\"|g'
            ${baseTemplate} && if [ ! -z \"${CHE_SELF__SIGNED__CERT}\" ]; then echo
            \"${CHE_SELF__SIGNED__CERT}\" > /opt/eap/che.crt && keytool -importcert
            -alias ROUTERCRT -keystore /opt/eap/openshift.jks -file /opt/eap/che.crt
            -storepass 2MBLTGEkXmrs -noprompt; fi && if [ ! -z \"${OPENSHIFT_SELF__SIGNED__CERT}\"
            ]; then echo \"${OPENSHIFT_SELF__SIGNED__CERT}\" > /opt/eap/openshift.crt
            && keytool -importcert -alias OPENSHIFTAPI -keystore /opt/eap/openshift.jks
            -file /opt/eap/openshift.crt -storepass 2MBLTGEkXmrs -noprompt; fi &&
            \ keytool -importcert -alias MOUNTEDCRT -keystore /opt/eap/openshift.jks
            -file /var/run/secrets/kubernetes.io/serviceaccount/ca.crt -storepass
            2MBLTGEkXmrs -noprompt && if [ -f /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt
            ]; then keytool -importcert -alias MOUNTEDSERVICECRT -keystore /opt/eap/openshift.jks
            -file /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt -storepass
            2MBLTGEkXmrs -noprompt; fi && keytool -importkeystore -srckeystore /etc/pki/ca-trust/extracted/java/cacerts
            -destkeystore /opt/eap/openshift.jks -srcstorepass changeit -deststorepass
            2MBLTGEkXmrs && if [[ -d \"/public-certs\" && -n \"$(find /public-certs
            -type f)\" ]]; then for certfile in /public-certs/* ; do jks_import_ca_bundle
            $certfile /opt/eap/openshift.jks 2MBLTGEkXmrs ; done; fi && echo \"feature.token_exchange=enabled\nfeature.admin_fine_grained_authz=enabled\"
            > /opt/eap/standalone/configuration/profile.properties   && sed -i 's/WILDCARD/ANY/g'
            /opt/eap/bin/launch/keycloak-spi.sh && /opt/eap/bin/openshift-launch.sh
            -b 0.0.0.0"
          command:
          - /bin/sh
          env:
          - name: CM_REVISION
            value: "5105148"
          - name: PROXY_ADDRESS_FORWARDING
            value: "true"
          - name: DB_SERVICE_PREFIX_MAPPING
            value: keycloak-postgresql=DB
          - name: KEYCLOAK_POSTGRESQL_SERVICE_HOST
            value: postgres
          - name: KEYCLOAK_POSTGRESQL_SERVICE_PORT
            value: "5432"
          - name: DB_DATABASE
            value: keycloak
          - name: DB_USERNAME
            value: keycloak
          - name: DB_VENDOR
            value: POSTGRES
          - name: SSO_TRUSTSTORE
            value: openshift.jks
          - name: SSO_TRUSTSTORE_DIR
            value: /opt/eap
          - name: SSO_TRUSTSTORE_PASSWORD
            value: 2MBLTGEkXmrs
          - name: CHE_SELF__SIGNED__CERT
            valueFrom:
              secretKeyRef:
                key: ca.crt
                name: self-signed-certificate
                optional: true
          - name: OPENSHIFT_SELF__SIGNED__CERT
            valueFrom:
              secretKeyRef:
                key: ca.crt
                name: openshift-api-crt
                optional: true
          - name: DB_PASSWORD
            valueFrom:
              secretKeyRef:
                key: password
                name: che-identity-postgres-secret
          - name: SSO_ADMIN_PASSWORD
            value: admin
          - name: SSO_ADMIN_USERNAME
            value: admin
          - name: KEYCLOAK_FRONTEND_URL
            value: https://keycloak-crw-crwctl.apps.ocp311.crw-qe.com/auth
          image: registry.redhat.io/rh-sso-7/sso74-openshift-rhel8:7.4
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 10
            initialDelaySeconds: 90
            periodSeconds: 10
            successThreshold: 1
            tcpSocket:
              port: 8080
            timeoutSeconds: 5
          name: keycloak
          ports:
          - containerPort: 8080
            name: keycloak
            protocol: TCP
          readinessProbe:
            failureThreshold: 10
            httpGet:
              path: auth/js/keycloak.js
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 30
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          resources:
            limits:
              cpu: "2"
              memory: 1536Mi
            requests:
              cpu: 100m
              memory: 1Gi
          securityContext:
            capabilities:
              drop:
              - ALL
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /public-certs
            name: che-public-certs
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            name: ca-certs-merged
          name: che-public-certs
  status:
    availableReplicas: 1
    fullyLabeledReplicas: 1
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "2"
      deployment.kubernetes.io/revision: "1"
    creationTimestamp: "2021-02-18T09:12:03Z"
    generation: 1
    labels:
      app: codeready
      component: plugin-registry
      pod-template-hash: "760891010"
    name: plugin-registry-cb4df5454
    namespace: crw-crwctl
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: plugin-registry
      uid: 5da3c3a7-71c9-11eb-b432-fa163ee97a2e
    resourceVersion: "5105802"
    selfLink: /apis/apps/v1/namespaces/crw-crwctl/replicasets/plugin-registry-cb4df5454
    uid: 5da462f8-71c9-11eb-b432-fa163ee97a2e
  spec:
    replicas: 1
    selector:
      matchLabels:
        app: codeready
        component: plugin-registry
        pod-template-hash: "760891010"
    template:
      metadata:
        creationTimestamp: null
        labels:
          app: codeready
          component: plugin-registry
          pod-template-hash: "760891010"
      spec:
        containers:
        - envFrom:
          - configMapRef:
              name: plugin-registry
              optional: true
          image: quay.io/crw/pluginregistry-rhel8:latest
          imagePullPolicy: Always
          livenessProbe:
            failureThreshold: 10
            httpGet:
              path: /plugins/
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 30
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 3
          name: che-plugin-registry
          ports:
          - containerPort: 8080
            name: http
            protocol: TCP
          readinessProbe:
            failureThreshold: 10
            httpGet:
              path: /plugins/
              port: 8080
              scheme: HTTP
            initialDelaySeconds: 3
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 3
          resources:
            limits:
              cpu: 500m
              memory: 256Mi
            requests:
              cpu: 100m
              memory: 32Mi
          securityContext:
            capabilities:
              drop:
              - ALL
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        terminationGracePeriodSeconds: 30
  status:
    availableReplicas: 1
    fullyLabeledReplicas: 1
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
- apiVersion: apps/v1
  kind: ReplicaSet
  metadata:
    annotations:
      deployment.kubernetes.io/desired-replicas: "1"
      deployment.kubernetes.io/max-replicas: "1"
      deployment.kubernetes.io/revision: "1"
    creationTimestamp: "2021-02-18T09:09:18Z"
    generation: 1
    labels:
      app: codeready
      component: postgres
      pod-template-hash: "1688777009"
    name: postgres-5bddccc44f
    namespace: crw-crwctl
    ownerReferences:
    - apiVersion: apps/v1
      blockOwnerDeletion: true
      controller: true
      kind: Deployment
      name: postgres
      uid: fb28628a-71c8-11eb-b432-fa163ee97a2e
    resourceVersion: "5105283"
    selfLink: /apis/apps/v1/namespaces/crw-crwctl/replicasets/postgres-5bddccc44f
    uid: fb298f32-71c8-11eb-b432-fa163ee97a2e
  spec:
    replicas: 1
    selector:
      matchLabels:
        app: codeready
        component: postgres
        pod-template-hash: "1688777009"
    template:
      metadata:
        creationTimestamp: null
        labels:
          app: codeready
          component: postgres
          pod-template-hash: "1688777009"
      spec:
        containers:
        - env:
          - name: POSTGRESQL_DATABASE
            value: dbche
          - name: POSTGRESQL_ADMIN_PASSWORD
            value: OZxunFXnY3pY
          - name: POSTGRESQL_USER
            valueFrom:
              secretKeyRef:
                key: user
                name: che-postgres-secret
          - name: POSTGRESQL_PASSWORD
            valueFrom:
              secretKeyRef:
                key: password
                name: che-postgres-secret
          image: registry.redhat.io/rhel8/postgresql-96:1
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 10
            initialDelaySeconds: 30
            periodSeconds: 10
            successThreshold: 1
            tcpSocket:
              port: 5432
            timeoutSeconds: 5
          name: postgres
          ports:
          - containerPort: 5432
            name: postgres
            protocol: TCP
          readinessProbe:
            exec:
              command:
              - /bin/sh
              - -i
              - -c
              - psql -h 127.0.0.1 -U $POSTGRESQL_USER -q -d dbche -c 'SELECT 1'
            failureThreshold: 10
            initialDelaySeconds: 15
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 5
          resources:
            limits:
              cpu: 500m
              memory: 1Gi
            requests:
              cpu: 100m
              memory: 512Mi
          securityContext:
            capabilities:
              drop:
              - ALL
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/pgsql/data
            name: postgres-data
        dnsPolicy: ClusterFirst
        restartPolicy: Always
        schedulerName: default-scheduler
        securityContext: {}
        terminationGracePeriodSeconds: 30
        volumes:
        - name: postgres-data
          persistentVolumeClaim:
            claimName: postgres-data
  status:
    availableReplicas: 1
    fullyLabeledReplicas: 1
    observedGeneration: 1
    readyReplicas: 1
    replicas: 1
- apiVersion: route.openshift.io/v1
  kind: Route
  metadata:
    annotations:
      openshift.io/host.generated: "true"
    creationTimestamp: "2021-02-18T09:09:16Z"
    labels:
      app: codeready
      component: codeready
    name: codeready
    namespace: crw-crwctl
    ownerReferences:
    - apiVersion: org.eclipse.che/v1
      blockOwnerDeletion: true
      controller: true
      kind: CheCluster
      name: codeready-workspaces
      uid: f9bbdd5f-71c8-11eb-b432-fa163ee97a2e
    resourceVersion: "5105132"
    selfLink: /apis/route.openshift.io/v1/namespaces/crw-crwctl/routes/codeready
    uid: f9be0fbd-71c8-11eb-b432-fa163ee97a2e
  spec:
    host: codeready-crw-crwctl.apps.ocp311.crw-qe.com
    port:
      targetPort: 8080
    tls:
      insecureEdgeTerminationPolicy: Redirect
      termination: edge
    to:
      kind: Service
      name: che-host
      weight: 100
    wildcardPolicy: None
  status:
    ingress:
    - conditions:
      - lastTransitionTime: "2021-02-18T09:09:16Z"
        status: "True"
        type: Admitted
      host: codeready-crw-crwctl.apps.ocp311.crw-qe.com
      routerName: router
      wildcardPolicy: None
- apiVersion: route.openshift.io/v1
  kind: Route
  metadata:
    annotations:
      openshift.io/host.generated: "true"
    creationTimestamp: "2021-02-18T09:11:13Z"
    labels:
      app: codeready
      component: codeready
    name: devfile-registry
    namespace: crw-crwctl
    ownerReferences:
    - apiVersion: org.eclipse.che/v1
      blockOwnerDeletion: true
      controller: true
      kind: CheCluster
      name: codeready-workspaces
      uid: f9bbdd5f-71c8-11eb-b432-fa163ee97a2e
    resourceVersion: "5105556"
    selfLink: /apis/route.openshift.io/v1/namespaces/crw-crwctl/routes/devfile-registry
    uid: 3fc3c7e5-71c9-11eb-b432-fa163ee97a2e
  spec:
    host: devfile-registry-crw-crwctl.apps.ocp311.crw-qe.com
    port:
      targetPort: 8080
    tls:
      insecureEdgeTerminationPolicy: Redirect
      termination: edge
    to:
      kind: Service
      name: devfile-registry
      weight: 100
    wildcardPolicy: None
  status:
    ingress:
    - conditions:
      - lastTransitionTime: "2021-02-18T09:11:13Z"
        status: "True"
        type: Admitted
      host: devfile-registry-crw-crwctl.apps.ocp311.crw-qe.com
      routerName: router
      wildcardPolicy: None
- apiVersion: route.openshift.io/v1
  kind: Route
  metadata:
    annotations:
      openshift.io/host.generated: "true"
    creationTimestamp: "2021-02-18T09:09:48Z"
    labels:
      app: codeready
      component: keycloak
    name: keycloak
    namespace: crw-crwctl
    ownerReferences:
    - apiVersion: org.eclipse.che/v1
      blockOwnerDeletion: true
      controller: true
      kind: CheCluster
      name: codeready-workspaces
      uid: f9bbdd5f-71c8-11eb-b432-fa163ee97a2e
    resourceVersion: "5105299"
    selfLink: /apis/route.openshift.io/v1/namespaces/crw-crwctl/routes/keycloak
    uid: 0cd7902c-71c9-11eb-b432-fa163ee97a2e
  spec:
    host: keycloak-crw-crwctl.apps.ocp311.crw-qe.com
    port:
      targetPort: 8080
    tls:
      insecureEdgeTerminationPolicy: Redirect
      termination: edge
    to:
      kind: Service
      name: keycloak
      weight: 100
    wildcardPolicy: None
  status:
    ingress:
    - conditions:
      - lastTransitionTime: "2021-02-18T09:09:48Z"
        status: "True"
        type: Admitted
      host: keycloak-crw-crwctl.apps.ocp311.crw-qe.com
      routerName: router
      wildcardPolicy: None
- apiVersion: route.openshift.io/v1
  kind: Route
  metadata:
    annotations:
      openshift.io/host.generated: "true"
    creationTimestamp: "2021-02-18T09:12:03Z"
    labels:
      app: codeready
      component: codeready
    name: plugin-registry
    namespace: crw-crwctl
    ownerReferences:
    - apiVersion: org.eclipse.che/v1
      blockOwnerDeletion: true
      controller: true
      kind: CheCluster
      name: codeready-workspaces
      uid: f9bbdd5f-71c8-11eb-b432-fa163ee97a2e
    resourceVersion: "5105757"
    selfLink: /apis/route.openshift.io/v1/namespaces/crw-crwctl/routes/plugin-registry
    uid: 5d92ca1f-71c9-11eb-b432-fa163ee97a2e
  spec:
    host: plugin-registry-crw-crwctl.apps.ocp311.crw-qe.com
    port:
      targetPort: 8080
    tls:
      insecureEdgeTerminationPolicy: Redirect
      termination: edge
    to:
      kind: Service
      name: plugin-registry
      weight: 100
    wildcardPolicy: None
  status:
    ingress:
    - conditions:
      - lastTransitionTime: "2021-02-18T09:12:03Z"
        status: "True"
        type: Admitted
      host: plugin-registry-crw-crwctl.apps.ocp311.crw-qe.com
      routerName: router
      wildcardPolicy: None
kind: List
metadata:
  resourceVersion: ""
  selfLink: ""
