apiVersion: v1
kind: Pod
metadata:
  annotations:
    k8s.v1.cni.cncf.io/network-status: |-
      [{
          "name": "openshift-sdn",
          "interface": "eth0",
          "ips": [
              "xx"
          ],
          "default": true,
          "dns": {}
      }]
    k8s.v1.cni.cncf.io/networks-status: |-
      [{
          "name": "openshift-sdn",
          "interface": "eth0",
          "ips": [
              "xx"
          ],
          "default": true,
          "dns": {}
      }]
    openshift.io/scc: restricted-v2
    seccomp.security.alpha.kubernetes.io/pod: runtime/default
    updateservice.operator.openshift.io/env-config-hash: 9668c9f2de012dc4544b9433a4ea8162d849d350b45362601caae7a66609f933
    updateservice.operator.openshift.io/graph-builder-config-hash: d3b58e50f2493b57b647952c3abcbf3dbbed775c9645ad600ea44a8a60a4db24
  creationTimestamp: "2023-02-07T12:27:08Z"
  generateName: sample-75d49bdb84-
  labels:
    app: sample
    deployment: sample
    pod-template-hash: 75d49bdb84
  name: sample-75d49bdb84-xldt6
  namespace: openshift-update-service
  ownerReferences:
  - apiVersion: apps/v1
    blockOwnerDeletion: true
    controller: true
    kind: ReplicaSet
    name: sample-75d49bdb84
    uid: 745581d1-789a-4721-ac36-4f9d30a1f4b3
  resourceVersion: "196160"
  uid: f2d0ab88-baa0-4189-8b84-cef9eed6cda6
spec:
  containers:
  - args:
    - -c
    - /etc/configs/gb.toml
    command:
    - /usr/bin/graph-builder
    env:
    - name: RUST_BACKTRACE
      valueFrom:
        configMapKeyRef:
          key: gb.rust_backtrace
          name: sample-env
    - name: HTTP_PROXY
      value: http://xxx
    - name: HTTPS_PROXY
      value: https://xxx
    - name: NO_PROXY
      value: xxx
    image: registry.redhat.io/openshift-update-service/openshift-update-service-rhel8@sha256:e1f2095b56a9c942906510a988af30b3bf9537e5de5cc247c0f8e77ce8b9fc3f
    imagePullPolicy: IfNotPresent
    livenessProbe:
      failureThreshold: 3
      httpGet:
        path: /liveness
        port: 9080
        scheme: HTTP
      initialDelaySeconds: 3
      periodSeconds: 10
      successThreshold: 1
      timeoutSeconds: 3
    name: graph-builder
    ports:
    - containerPort: 8080
      name: graph-builder
      protocol: TCP
    - containerPort: 9080
      name: status-gb
      protocol: TCP
    readinessProbe:
      failureThreshold: 3
      httpGet:
        path: /readiness
        port: 9080
        scheme: HTTP
      initialDelaySeconds: 3
      periodSeconds: 10
      successThreshold: 1
      timeoutSeconds: 3
    resources:
      limits:
        cpu: 750m
        memory: 512Mi
      requests:
        cpu: 150m
        memory: 64Mi
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
        - ALL
      runAsNonRoot: true
      runAsUser: 1000670000
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /etc/configs
      name: configs
      readOnly: true
    - mountPath: /var/lib/cincinnati/graph-data
      name: cincinnati-graph-data
    - mountPath: /var/lib/cincinnati/registry-credentials
      name: pull-secret
      readOnly: true
    - mountPath: /etc/pki/ca-trust/extracted/pem/cluster-ca-bundle.crt
      name: cluster-trusted-ca
      readOnly: true
      subPath: ca-bundle.crt
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-pmdzh
      readOnly: true
  - args:
    - -$(PE_LOG_VERBOSITY)
    - --service.address
    - $(ADDRESS)
    - --service.mandatory_client_parameters
    - $(PE_MANDATORY_CLIENT_PARAMETERS)
    - --service.path_prefix
    - /api/upgrades_info
    - --service.port
    - "8081"
    - --status.address
    - $(PE_STATUS_ADDRESS)
    - --status.port
    - "9081"
    - --upstream.cincinnati.url
    - $(UPSTREAM)
    command:
    - /usr/bin/policy-engine
    env:
    - name: ADDRESS
      valueFrom:
        configMapKeyRef:
          key: pe.address
          name: sample-env
    - name: PE_STATUS_ADDRESS
      valueFrom:
        configMapKeyRef:
          key: pe.status.address
          name: sample-env
    - name: UPSTREAM
      valueFrom:
        configMapKeyRef:
          key: pe.upstream
          name: sample-env
    - name: PE_LOG_VERBOSITY
      valueFrom:
        configMapKeyRef:
          key: pe.log.verbosity
          name: sample-env
    - name: PE_MANDATORY_CLIENT_PARAMETERS
      valueFrom:
        configMapKeyRef:
          key: pe.mandatory_client_parameters
          name: sample-env
    - name: RUST_BACKTRACE
      valueFrom:
        configMapKeyRef:
          key: pe.rust_backtrace
          name: sample-env
    image: registry.redhat.io/openshift-update-service/openshift-update-service-rhel8@sha256:e1f2095b56a9c942906510a988af30b3bf9537e5de5cc247c0f8e77ce8b9fc3f
    imagePullPolicy: IfNotPresent
    livenessProbe:
      failureThreshold: 3
      httpGet:
        path: /metrics
        port: 9081
        scheme: HTTP
      initialDelaySeconds: 3
      periodSeconds: 10
      successThreshold: 1
      timeoutSeconds: 3
    name: policy-engine
    ports:
    - containerPort: 8081
      name: policy-engine
      protocol: TCP
    - containerPort: 9081
      name: status-pe
      protocol: TCP
    resources:
      limits:
        cpu: 750m
        memory: 512Mi
      requests:
        cpu: 150m
        memory: 64Mi
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
        - ALL
      runAsNonRoot: true
      runAsUser: 1000670000
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-pmdzh
      readOnly: true
  dnsPolicy: ClusterFirst
  enableServiceLinks: true
  imagePullSecrets:
  - name: default-dockercfg-mtnss
  initContainers:
  - image: quay.io/openshifttest/graph-data:5.0.1
    imagePullPolicy: Always
    name: graph-data
    resources: {}
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
        - ALL
      runAsNonRoot: true
      runAsUser: 1000670000
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /var/lib/cincinnati/graph-data
      name: cincinnati-graph-data
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: kube-api-access-pmdzh
      readOnly: true
  nodeName: yanyang-0207a-2jbcb-compute-0
  preemptionPolicy: PreemptLowerPriority
  priority: 0
  restartPolicy: Always
  schedulerName: default-scheduler
  securityContext:
    fsGroup: 1000670000
    seLinuxOptions:
      level: s0:c26,c10
    seccompProfile:
      type: RuntimeDefault
  serviceAccount: default
  serviceAccountName: default
  terminationGracePeriodSeconds: 30
  tolerations:
  - effect: NoExecute
    key: node.kubernetes.io/not-ready
    operator: Exists
    tolerationSeconds: 300
  - effect: NoExecute
    key: node.kubernetes.io/unreachable
    operator: Exists
    tolerationSeconds: 300
  - effect: NoSchedule
    key: node.kubernetes.io/memory-pressure
    operator: Exists
  volumes:
  - configMap:
      defaultMode: 420
      name: sample-config
    name: configs
  - emptyDir: {}
    name: cincinnati-graph-data
  - name: pull-secret
    secret:
      defaultMode: 420
      secretName: sample-pull-secret
  - configMap:
      defaultMode: 420
      items:
      - key: ca-bundle.crt
        path: cluster-ca-bundle.crt
      name: cluster-trusted-ca
    name: cluster-trusted-ca
  - name: kube-api-access-pmdzh
    projected:
      defaultMode: 420
      sources:
      - serviceAccountToken:
          expirationSeconds: 3607
          path: token
      - configMap:
          items:
          - key: ca.crt
            path: ca.crt
          name: kube-root-ca.crt
      - downwardAPI:
          items:
          - fieldRef:
              apiVersion: v1
              fieldPath: metadata.namespace
            path: namespace
      - configMap:
          items:
          - key: service-ca.crt
            path: service-ca.crt
          name: openshift-service-ca.crt
status:
  conditions:
  - lastProbeTime: null
    lastTransitionTime: "2023-02-07T12:27:11Z"
    status: "True"
    type: Initialized
  - lastProbeTime: null
    lastTransitionTime: "2023-02-07T12:27:08Z"
    message: 'containers with unready status: [graph-builder]'
    reason: ContainersNotReady
    status: "False"
    type: Ready
  - lastProbeTime: null
    lastTransitionTime: "2023-02-07T12:27:08Z"
    message: 'containers with unready status: [graph-builder]'
    reason: ContainersNotReady
    status: "False"
    type: ContainersReady
  - lastProbeTime: null
    lastTransitionTime: "2023-02-07T12:27:08Z"
    status: "True"
    type: PodScheduled
  containerStatuses:
  - containerID: cri-o://be9927da304db96219a0ac7d53750feb7afe38eec046e3c130b6ab715ff6ac27
    image: registry.redhat.io/openshift-update-service/openshift-update-service-rhel8@sha256:e1f2095b56a9c942906510a988af30b3bf9537e5de5cc247c0f8e77ce8b9fc3f
    imageID: registry.redhat.io/openshift-update-service/openshift-update-service-rhel8@sha256:e1f2095b56a9c942906510a988af30b3bf9537e5de5cc247c0f8e77ce8b9fc3f
    lastState: {}
    name: graph-builder
    ready: false
    restartCount: 0
    started: true
    state:
      running:
        startedAt: "2023-02-07T12:27:12Z"
  - containerID: cri-o://c3c7dbd34c5ea51921dad8374aa0eb8782b3b891c985acd14b76c09d7ca15651
    image: registry.redhat.io/openshift-update-service/openshift-update-service-rhel8@sha256:e1f2095b56a9c942906510a988af30b3bf9537e5de5cc247c0f8e77ce8b9fc3f
    imageID: registry.redhat.io/openshift-update-service/openshift-update-service-rhel8@sha256:e1f2095b56a9c942906510a988af30b3bf9537e5de5cc247c0f8e77ce8b9fc3f
    lastState:
      terminated:
        containerID: cri-o://41a8119666af4597cf68e0c08a46055c1a38d293e6d556b283eacdf20cb442ba
        exitCode: 137
        finishedAt: "2023-02-07T12:32:11Z"
        reason: Error
        startedAt: "2023-02-07T12:31:12Z"
    name: policy-engine
    ready: true
    restartCount: 5
    started: true
    state:
      running:
        startedAt: "2023-02-07T12:32:12Z"
  hostIP: xx
  initContainerStatuses:
  - containerID: cri-o://ecb1e47c55534d8c98a63aef4575a66de033ec738762167d715b68d220552c21
    image: quay.io/openshifttest/graph-data:5.0.1
    imageID: quay.io/openshifttest/graph-data@sha256:1e5c1202d6829f76b16baad244b2e6ffa21e9759c62ed772e1b0ff2caa9640bb
    lastState: {}
    name: graph-data
    ready: true
    restartCount: 0
    state:
      terminated:
        containerID: cri-o://ecb1e47c55534d8c98a63aef4575a66de033ec738762167d715b68d220552c21
        exitCode: 0
        finishedAt: "2023-02-07T12:27:10Z"
        reason: Completed
        startedAt: "2023-02-07T12:27:10Z"
  phase: Running
  podIP: xx
  podIPs:
  - ip: xx
  qosClass: Burstable
  startTime: "2023-02-07T12:27:08Z"