apiVersion: maistra.io/v2
kind: ServiceMeshControlPlane
metadata:
  creationTimestamp: "2024-03-28T15:04:16Z"
  finalizers:
  - maistra.io/istio-operator
  generation: 2
  name: smcp-full-deploy
  namespace: istio-system
  resourceVersion: "146495"
  uid: 10f143f2-20d4-4d5f-9502-3ee1fa0d7516
spec:
  addons:
    grafana:
      enabled: true
      install:
        persistence:
          enabled: false
        service:
          ingress:
            enabled: true
    jaeger:
      install:
        ingress:
          enabled: true
        storage:
          type: Memory
    kiali:
      enabled: true
      install:
        dashboard:
          enableGrafana: true
          enablePrometheus: true
          enableTracing: true
        service:
          ingress:
            enabled: true
    prometheus:
      enabled: true
      install:
        retention: 4h
        useTLS: false
  gateways:
    egress:
      enabled: true
      runtime:
        deployment:
          autoScaling:
            enabled: false
          replicas: 1
      service: {}
    enabled: true
    ingress:
      enabled: true
      ingress: false
      routeConfig:
        enabled: false
      runtime:
        deployment:
          autoScaling:
            enabled: false
          replicas: 1
      service: {}
    openshiftRoute:
      enabled: true
  general:
    validationMessages: true
  mode: MultiTenant
  policy:
    type: Istiod
  profiles:
  - default
  proxy:
    accessLogging:
      file:
        name: /dev/stdout
    injection:
      autoInject: false
    networking:
      trafficControl:
        inbound: {}
        outbound:
          policy: REGISTRY_ONLY
    runtime:
      readiness:
        failureThreshold: 3
        initialDelaySeconds: 15
        periodSeconds: 10
        rewriteApplicationProbes: true
  runtime:
    components:
      pilot:
        container:
          resources:
            limits:
              cpu: "1"
              memory: 4Gi
        deployment:
          autoScaling:
            enabled: false
          replicas: 1
  security:
    controlPlane:
      mtls: true
    dataPlane:
      mtls: true
    manageNetworkPolicy: true
  telemetry:
    type: Istiod
  tracing:
    sampling: 10000
    type: Jaeger
  version: v2.5
status:
  annotations:
    alwaysReadyComponents: mesh-config,telemetry-common,tracing,kiali
    readyComponentCount: 9/9
  appliedSpec:
    addons:
      grafana:
        enabled: true
        install:
          persistence:
            enabled: false
          service:
            ingress:
              enabled: true
            metadata:
              annotations:
                service.alpha.openshift.io/serving-cert-secret-name: grafana-tls
      jaeger:
        install:
          ingress:
            enabled: true
          storage:
            type: Memory
        name: jaeger
      kiali:
        enabled: true
        install:
          dashboard:
            enableGrafana: true
            enablePrometheus: true
            enableTracing: true
            viewOnly: false
          service:
            ingress:
              enabled: true
        name: kiali
      prometheus:
        enabled: true
        install:
          retention: 4h
          service:
            ingress:
              enabled: true
            metadata:
              annotations:
                service.alpha.openshift.io/serving-cert-secret-name: prometheus-tls
          useTLS: false
    gateways:
      egress:
        enabled: true
        runtime:
          container:
            resources:
              requests:
                cpu: 10m
                memory: 128Mi
          deployment:
            autoScaling:
              enabled: false
            replicas: 1
        service: {}
      enabled: true
      ingress:
        enabled: true
        ingress: false
        routeConfig:
          enabled: false
        runtime:
          container:
            resources:
              requests:
                cpu: 10m
                memory: 128Mi
          deployment:
            autoScaling:
              enabled: false
            replicas: 1
        service:
          type: ClusterIP
      openshiftRoute:
        enabled: true
    general:
      logging:
        componentLevels:
          default: warn
      validationMessages: true
    policy:
      type: Istiod
    profiles:
    - default
    proxy:
      accessLogging:
        file:
          name: /dev/stdout
      injection:
        autoInject: false
      networking:
        dns:
          refreshRate: 300s
        initialization:
          initContainer:
            runtime:
              imageName: proxy-init-rhel7
        protocol:
          autoDetect:
            inbound: false
            outbound: false
        trafficControl:
          inbound: {}
          outbound:
            policy: REGISTRY_ONLY
      runtime:
        container:
          imageName: registry.redhat.io/openshift-service-mesh/proxyv2-rhel8@sha256:91d76a248eec9ddac000d36339df4ac6311e387bf32bb301c610ce4b93731766
          resources:
            requests:
              cpu: 10m
              memory: 128Mi
        readiness:
          failureThreshold: 3
          initialDelaySeconds: 15
          periodSeconds: 10
          rewriteApplicationProbes: true
    runtime:
      components:
        3scale:
          container:
            imageName: 3scale-istio-adapter-rhel8
            imageRegistry: registry.redhat.io/openshift-service-mesh
            imageTag: 2.0.0
        global.oauthproxy:
          container:
            imageName: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:582fc2d21cb3654f22f3ca50c39966041846e16a1543fc35c6a83948a2fa6c40
            imagePullPolicy: IfNotPresent
            imageRegistry: registry.redhat.io/openshift4
            imageTag: v4.9
        grafana:
          container:
            imageName: registry.redhat.io/openshift-service-mesh/grafana-rhel8@sha256:0a2b7f94a2de5dbef394791f4a9cf92d5d623998041ccd4df95d3345233ecc01
        pilot:
          container:
            imageName: registry.redhat.io/openshift-service-mesh/pilot-rhel8@sha256:b419387e0490828d865150db65d915bef518b920b037764a39b0bcac3856cbdf
            resources:
              limits:
                cpu: "1"
                memory: 4Gi
              requests:
                cpu: 10m
                memory: 128Mi
          deployment:
            autoScaling:
              enabled: false
            replicas: 1
        prometheus:
          container:
            imageName: registry.redhat.io/openshift4/ose-prometheus@sha256:a2f108d5b6f8ac6f7867a98b24ab0e441b9f190010b2a2896459824cd7bb5554
            resources:
              requests:
                cpu: 10m
                memory: 128Mi
        rateLimiting.rls:
          container:
            imageName: registry.redhat.io/openshift-service-mesh/ratelimit-rhel8@sha256:cbca6f77020eadbb9a69dd173ac788b967dd89495abc3e61022af86d1deec3a9
      defaults:
        container:
          imageRegistry: registry.redhat.io/openshift-service-mesh
          imageTag: 2.5.0
          resources:
            requests:
              cpu: 10m
              memory: 128Mi
        deployment:
          podDisruption:
            enabled: false
    security:
      controlPlane:
        mtls: true
      dataPlane:
        mtls: true
      identity:
        type: Kubernetes
      manageNetworkPolicy: true
    techPreview:
      galley:
        enableAnalysis: true
      global:
        configNamespace: istio-system
        configRootNamespace: istio-system
        istioNamespace: istio-system
        prometheusNamespace: istio-system
      istio_cni:
        istio_cni_network: v2-5-istio-cni
      kiali:
        install: true
      meshConfig:
        defaultConfig:
          tracing:
            zipkin:
              address: jaeger-collector.istio-system.svc:9411
        ingressControllerMode: "OFF"
        rootNamespace: istio-system
      prometheus:
        scrapingNamespaces: []
      prometheusConfigReloader:
        image: registry.redhat.io/openshift4/ose-prometheus-config-reloader@sha256:65c7f23d9d3ddc792fa827f1037e03b3d05a4105bbdf28944cc50bdb9d25629e
      revision: smcp-full-deploy
      sidecarInjectorWebhook:
        objectSelector:
          enabled: false
      tracing:
        jaeger:
          install: true
    telemetry:
      type: Istiod
    tracing:
      sampling: 10000
      type: Jaeger
    version: v2.5
  appliedValues:
    istio:
      base:
        validationURL: ""
      clusterResources: true
      galley:
        enableAnalysis: true
      gatewayAPI:
        controllerMode: false
        enabled: false
      gateways:
        enabled: true
        istio-egressgateway:
          autoscaleEnabled: false
          enabled: true
          gatewayType: egress
          name: istio-egressgateway
          replicaCount: 1
          resources:
            requests:
              cpu: 10m
              memory: 128Mi
        istio-ingressgateway:
          autoscaleEnabled: false
          enabled: true
          gatewayType: ingress
          ior_enabled: true
          name: istio-ingressgateway
          replicaCount: 1
          resources:
            requests:
              cpu: 10m
              memory: 128Mi
          routeConfig:
            enabled: false
          type: ClusterIP
      global:
        arch:
          amd64: 2
          arm64: 2
          ppc64le: 2
          s390x: 2
        caAddress: ""
        caCertConfigMapName: istio-ca-root-cert
        centralIstiod: false
        configNamespace: istio-system
        configRootNamespace: istio-system
        configValidation: true
        controlPlaneSecurityEnabled: true
        defaultConfigVisibilitySettings: []
        defaultNodeSelector: {}
        defaultPodDisruptionBudget:
          enabled: false
        defaultResources:
          requests:
            cpu: 10m
            memory: 128Mi
        defaultTolerations: []
        enableTracing: true
        externalIstiod: false
        hub: registry.redhat.io/openshift-service-mesh
        imagePullPolicy: ""
        imagePullSecrets: []
        istioNamespace: istio-system
        istiod:
          enableAnalysis: true
        jwtPolicy: first-party-jwt
        k8sIngress:
          enableHttps: false
          enabled: false
          gatewayName: ingressgateway
        logAsJson: false
        logging:
          level: default:warn
        manageNetworkPolicy: true
        meshExpansion:
          enabled: false
          useILB: false
        meshID: ""
        meshNetworks: {}
        mountMtlsCerts: false
        mtls:
          auto: true
          enabled: true
        multiCluster:
          clusterName: ""
          enabled: false
          globalDomainSuffix: global
          includeEnvoyFilter: true
          multiClusterOverrides:
            expansionEnabled: null
            multiClusterEnabled: null
        network: ""
        oauthproxy:
          hub: registry.redhat.io/openshift4
          image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:582fc2d21cb3654f22f3ca50c39966041846e16a1543fc35c6a83948a2fa6c40
          imagePullPolicy: IfNotPresent
          tag: v4.9
        omitSidecarInjectorConfigMap: false
        oneNamespace: false
        operatorManageWebhooks: false
        outboundTrafficPolicy:
          mode: REGISTRY_ONLY
        pilotCertProvider: istiod
        priorityClassName: ""
        prometheusNamespace: istio-system
        proxy:
          accessLogFile: /dev/stdout
          autoInject: disabled
          clusterDomain: cluster.local
          componentLogLevel: misc:error
          dnsRefreshRate: 300s
          enableCoreDump: false
          excludeIPRanges: ""
          excludeInboundPorts: ""
          excludeOutboundPorts: ""
          image: registry.redhat.io/openshift-service-mesh/proxyv2-rhel8@sha256:91d76a248eec9ddac000d36339df4ac6311e387bf32bb301c610ce4b93731766
          includeIPRanges: '*'
          includeInboundPorts: '*'
          logLevel: warning
          privileged: false
          readinessFailureThreshold: 3
          readinessInitialDelaySeconds: 15
          readinessPeriodSeconds: 10
          resources:
            limits:
              cpu: 2000m
              memory: 1024Mi
            requests:
              cpu: 10m
              memory: 128Mi
          statusPort: 15021
          tracer: zipkin
        proxy_init:
          image: proxy-init-rhel7
          resources:
            limits:
              cpu: 2000m
              memory: 1024Mi
            requests:
              cpu: 10m
              memory: 10Mi
        remotePilotAddress: ""
        sds:
          token:
            aud: istio-ca
        sts:
          servicePort: 0
        tag: 2.5.0
        tls:
          cipherSuites: []
          ecdhCurves: []
          maxProtocolVersion: ""
          minProtocolVersion: ""
        tracer:
          datadog:
            address: $(HOST_IP):8126
          lightstep:
            accessToken: ""
            address: ""
          stackdriver:
            debug: false
            maxNumberOfAnnotations: 200
            maxNumberOfAttributes: 200
            maxNumberOfMessageEvents: 200
          zipkin:
            address: ""
        trustDomain: ""
        useMCP: false
      grafana:
        enabled: true
        image: registry.redhat.io/openshift-service-mesh/grafana-rhel8@sha256:0a2b7f94a2de5dbef394791f4a9cf92d5d623998041ccd4df95d3345233ecc01
        ingress:
          enabled: true
        persist: false
        service:
          annotations:
            service.alpha.openshift.io/serving-cert-secret-name: grafana-tls
      istio_cni:
        enabled: true
        istio_cni_network: v2-5-istio-cni
      kiali:
        dashboard:
          enableGrafana: true
          enablePrometheus: true
          enableTracing: true
          viewOnlyMode: false
        enabled: true
        ingress:
          enabled: true
        install: true
        resourceName: kiali
      meshConfig:
        accessLogFile: /dev/stdout
        defaultConfig:
          proxyMetadata:
            ISTIO_META_DNS_AUTO_ALLOCATE: "true"
            ISTIO_META_DNS_CAPTURE: "true"
            PROXY_XDS_VIA_AGENT: "true"
          tracing:
            zipkin:
              address: jaeger-collector.istio-system.svc:9411
        dnsRefreshRate: 300s
        enablePrometheusMerge: true
        enableTracing: true
        ingressControllerMode: "OFF"
        outboundTrafficPolicy:
          mode: REGISTRY_ONLY
        rootNamespace: istio-system
      mixer:
        adapters:
          prometheus:
            enabled: true
        policy:
          enabled: false
        telemetry:
          enabled: false
      pilot:
        autoscaleEnabled: false
        enableProtocolSniffingForInbound: false
        enableProtocolSniffingForOutbound: false
        image: registry.redhat.io/openshift-service-mesh/pilot-rhel8@sha256:b419387e0490828d865150db65d915bef518b920b037764a39b0bcac3856cbdf
        replicaCount: 1
        resources:
          limits:
            cpu: "1"
            memory: 4Gi
          requests:
            cpu: 10m
            memory: 128Mi
        traceSampling: 100
      policy:
        implementation: Istiod
      prometheus:
        enabled: true
        image: registry.redhat.io/openshift4/ose-prometheus@sha256:a2f108d5b6f8ac6f7867a98b24ab0e441b9f190010b2a2896459824cd7bb5554
        ingress:
          enabled: true
        provisionPrometheusCert: false
        resources:
          requests:
            cpu: 10m
            memory: 128Mi
        retention: 4h
        scrapingNamespaces: []
        service:
          annotations:
            service.alpha.openshift.io/serving-cert-secret-name: prometheus-tls
      prometheusConfigReloader:
        image: registry.redhat.io/openshift4/ose-prometheus-config-reloader@sha256:65c7f23d9d3ddc792fa827f1037e03b3d05a4105bbdf28944cc50bdb9d25629e
      rateLimiting:
        rls:
          image: registry.redhat.io/openshift-service-mesh/ratelimit-rhel8@sha256:cbca6f77020eadbb9a69dd173ac788b967dd89495abc3e61022af86d1deec3a9
      revision: smcp-full-deploy
      sidecarInjectorWebhook:
        enableNamespacesByDefault: false
        objectSelector:
          enabled: false
        rewriteAppHTTPProbe: true
      telemetry:
        enabled: true
        implementation: Istiod
        v1:
          enabled: false
        v2:
          accessLogPolicy:
            enabled: false
            logWindowDuration: 43200s
          enabled: true
          metadataExchange:
            wasmEnabled: false
          prometheus:
            configOverride:
              gateway: {}
              inboundSidecar: {}
              outboundSidecar: {}
            enabled: true
            wasmEnabled: false
          stackdriver:
            configOverride: {}
            disableOutbound: false
            enabled: false
            logging: false
            monitoring: false
            topology: false
      tracing:
        enabled: true
        ingress:
          enabled: true
        jaeger:
          install: true
          resourceName: jaeger
          template: all-in-one
        provider: jaeger
    profiles:
    - default
    template: default
    threeScale:
      hub: registry.redhat.io/openshift-service-mesh
      image: 3scale-istio-adapter-rhel8
      tag: 2.0.0
    version: v2.5
  chartVersion: 2.5.0
  components:
  - conditions:
    - lastTransitionTime: "2024-03-28T15:04:23Z"
      message: Component installed successfully
      reason: InstallSuccessful
      status: "True"
      type: Reconciled
    - lastTransitionTime: "2024-03-28T15:04:23Z"
      message: Component installed successfully
      reason: InstallSuccessful
      status: "True"
      type: Installed
    resource: istio-discovery
  - conditions:
    - lastTransitionTime: "2024-03-28T15:05:33Z"
      message: Component installed successfully
      reason: InstallSuccessful
      status: "True"
      type: Reconciled
    - lastTransitionTime: "2024-03-28T15:05:33Z"
      message: Component installed successfully
      reason: InstallSuccessful
      status: "True"
      type: Installed
    resource: mesh-config
  - conditions:
    - lastTransitionTime: "2024-03-28T15:05:34Z"
      message: Component installed successfully
      reason: InstallSuccessful
      status: "True"
      type: Reconciled
    - lastTransitionTime: "2024-03-28T15:05:34Z"
      message: Component installed successfully
      reason: InstallSuccessful
      status: "True"
      type: Installed
    resource: telemetry-common
  - conditions:
    - lastTransitionTime: "2024-03-28T15:05:34Z"
      message: Component installed successfully
      reason: InstallSuccessful
      status: "True"
      type: Reconciled
    - lastTransitionTime: "2024-03-28T15:05:34Z"
      message: Component installed successfully
      reason: InstallSuccessful
      status: "True"
      type: Installed
    resource: prometheus
  - conditions:
    - lastTransitionTime: "2024-03-28T15:06:21Z"
      message: Component installed successfully
      reason: InstallSuccessful
      status: "True"
      type: Reconciled
    - lastTransitionTime: "2024-03-28T15:06:21Z"
      message: Component installed successfully
      reason: InstallSuccessful
      status: "True"
      type: Installed
    resource: tracing
  - conditions:
    - lastTransitionTime: "2024-03-28T15:06:21Z"
      message: Component installed successfully
      reason: InstallSuccessful
      status: "True"
      type: Reconciled
    - lastTransitionTime: "2024-03-28T15:06:21Z"
      message: Component installed successfully
      reason: InstallSuccessful
      status: "True"
      type: Installed
    resource: istio-ingress
  - conditions:
    - lastTransitionTime: "2024-03-28T15:06:21Z"
      message: Component installed successfully
      reason: InstallSuccessful
      status: "True"
      type: Reconciled
    - lastTransitionTime: "2024-03-28T15:06:21Z"
      message: Component installed successfully
      reason: InstallSuccessful
      status: "True"
      type: Installed
    resource: istio-egress
  - conditions:
    - lastTransitionTime: "2024-03-28T15:06:22Z"
      message: Component installed successfully
      reason: InstallSuccessful
      status: "True"
      type: Reconciled
    - lastTransitionTime: "2024-03-28T15:06:22Z"
      message: Component installed successfully
      reason: InstallSuccessful
      status: "True"
      type: Installed
    resource: grafana
  - conditions:
    - lastTransitionTime: "2024-03-28T15:07:19Z"
      message: Component installed successfully
      reason: InstallSuccessful
      status: "True"
      type: Reconciled
    - lastTransitionTime: "2024-03-28T15:07:19Z"
      message: Component installed successfully
      reason: InstallSuccessful
      status: "True"
      type: Installed
    resource: kiali
  conditions:
  - lastTransitionTime: "2024-03-28T15:07:20Z"
    message: Successfully installed all mesh components
    reason: InstallSuccessful
    status: "True"
    type: Installed
  - lastTransitionTime: "2024-03-28T15:07:20Z"
    message: Successfully installed version 2.5.0-1-2
    reason: InstallSuccessful
    status: "True"
    type: Reconciled
  - lastTransitionTime: "2024-03-28T15:07:34Z"
    message: All component deployments are Available
    reason: ComponentsReady
    status: "True"
    type: Ready
  observedGeneration: 2
  operatorVersion: 2.5.0-1
  readiness:
    components:
      pending: []
      ready:
      - grafana
      - istio-discovery
      - istio-egress
      - istio-ingress
      - kiali
      - mesh-config
      - prometheus
      - telemetry-common
      - tracing
      unready: []
