apiVersion: apps/v1
kind: Deployment
metadata:
  annotations:
    deployment.kubernetes.io/revision: "1"
  creationTimestamp: "2026-02-18T21:31:30Z"
  generation: 1
  labels:
    app: 3scale-api-management
    threescale_component: system
    threescale_component_element: app
  name: system-app
  namespace: 3scale-216
  ownerReferences:
  - apiVersion: apps.3scale.net/v1alpha1
    blockOwnerDeletion: true
    controller: true
    kind: APIManager
    name: apimanager-sample
    uid: 0d8c6619-3797-4989-92d0-a14c42048336
  resourceVersion: "260785"
  uid: 0f859e69-7de0-4a7d-a110-958c1d4f7625
spec:
  progressDeadlineSeconds: 600
  replicas: 1
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      deployment: system-app
  strategy:
    rollingUpdate:
      maxSurge: 25%
      maxUnavailable: 25%
    type: RollingUpdate
  template:
    metadata:
      creationTimestamp: null
      labels:
        app: 3scale-api-management
        com.company: Red_Hat
        deployment: system-app
        rht.comp: 3scale
        rht.comp_ver: "2.16"
        rht.prod_name: Red_Hat_Integration
        rht.prod_ver: master
        rht.subcomp: system-app
        rht.subcomp_t: application
        threescale_component: system
        threescale_component_element: app
    spec:
      containers:
      - env:
        - name: APICAST_REGISTRY_URL
          valueFrom:
            configMapKeyRef:
              key: APICAST_REGISTRY_URL
              name: system-environment
        - name: FORCE_SSL
          valueFrom:
            configMapKeyRef:
              key: FORCE_SSL
              name: system-environment
        - name: PROVIDER_PLAN
          valueFrom:
            configMapKeyRef:
              key: PROVIDER_PLAN
              name: system-environment
        - name: RAILS_ENV
          valueFrom:
            configMapKeyRef:
              key: RAILS_ENV
              name: system-environment
        - name: RAILS_LOG_LEVEL
          valueFrom:
            configMapKeyRef:
              key: RAILS_LOG_LEVEL
              name: system-environment
        - name: RAILS_LOG_TO_STDOUT
          valueFrom:
            configMapKeyRef:
              key: RAILS_LOG_TO_STDOUT
              name: system-environment
        - name: SSL_CERT_DIR
          valueFrom:
            configMapKeyRef:
              key: SSL_CERT_DIR
              name: system-environment
        - name: THINKING_SPHINX_PORT
          valueFrom:
            configMapKeyRef:
              key: THINKING_SPHINX_PORT
              name: system-environment
        - name: THREESCALE_SANDBOX_PROXY_OPENSSL_VERIFY_MODE
          valueFrom:
            configMapKeyRef:
              key: THREESCALE_SANDBOX_PROXY_OPENSSL_VERIFY_MODE
              name: system-environment
        - name: THREESCALE_SUPERDOMAIN
          valueFrom:
            configMapKeyRef:
              key: THREESCALE_SUPERDOMAIN
              name: system-environment
        - name: DATABASE_URL
          valueFrom:
            secretKeyRef:
              key: URL
              name: system-database
        - name: MASTER_DOMAIN
          valueFrom:
            secretKeyRef:
              key: MASTER_DOMAIN
              name: system-seed
        - name: MASTER_USER
          valueFrom:
            secretKeyRef:
              key: MASTER_USER
              name: system-seed
        - name: MASTER_PASSWORD
          valueFrom:
            secretKeyRef:
              key: MASTER_PASSWORD
              name: system-seed
        - name: ADMIN_ACCESS_TOKEN
          valueFrom:
            secretKeyRef:
              key: ADMIN_ACCESS_TOKEN
              name: system-seed
        - name: USER_LOGIN
          valueFrom:
            secretKeyRef:
              key: ADMIN_USER
              name: system-seed
        - name: USER_PASSWORD
          valueFrom:
            secretKeyRef:
              key: ADMIN_PASSWORD
              name: system-seed
        - name: USER_EMAIL
          valueFrom:
            secretKeyRef:
              key: ADMIN_EMAIL
              name: system-seed
        - name: TENANT_NAME
          valueFrom:
            secretKeyRef:
              key: TENANT_NAME
              name: system-seed
        - name: THINKING_SPHINX_ADDRESS
          value: system-searchd
        - name: EVENTS_SHARED_SECRET
          valueFrom:
            secretKeyRef:
              key: PASSWORD
              name: system-events-hook
        - name: RECAPTCHA_PUBLIC_KEY
          valueFrom:
            secretKeyRef:
              key: PUBLIC_KEY
              name: system-recaptcha
        - name: RECAPTCHA_PRIVATE_KEY
          valueFrom:
            secretKeyRef:
              key: PRIVATE_KEY
              name: system-recaptcha
        - name: SECRET_KEY_BASE
          valueFrom:
            secretKeyRef:
              key: SECRET_KEY_BASE
              name: system-app
        - name: MEMCACHE_SERVERS
          valueFrom:
            secretKeyRef:
              key: SERVERS
              name: system-memcache
        - name: REDIS_URL
          valueFrom:
            secretKeyRef:
              key: URL
              name: system-redis
        - name: REDIS_SENTINEL_HOSTS
          valueFrom:
            secretKeyRef:
              key: SENTINEL_HOSTS
              name: system-redis
        - name: REDIS_SENTINEL_ROLE
          valueFrom:
            secretKeyRef:
              key: SENTINEL_ROLE
              name: system-redis
        - name: REDIS_USERNAME
          valueFrom:
            secretKeyRef:
              key: REDIS_USERNAME
              name: system-redis
              optional: true
        - name: REDIS_PASSWORD
          valueFrom:
            secretKeyRef:
              key: REDIS_PASSWORD
              name: system-redis
              optional: true
        - name: REDIS_SENTINEL_USERNAME
          valueFrom:
            secretKeyRef:
              key: REDIS_SENTINEL_USERNAME
              name: system-redis
              optional: true
        - name: REDIS_SENTINEL_PASSWORD
          valueFrom:
            secretKeyRef:
              key: REDIS_SENTINEL_PASSWORD
              name: system-redis
              optional: true
        - name: REDIS_SSL
          value: "0"
        - name: BACKEND_REDIS_URL
          valueFrom:
            secretKeyRef:
              key: REDIS_STORAGE_URL
              name: backend-redis
        - name: BACKEND_REDIS_SENTINEL_HOSTS
          valueFrom:
            secretKeyRef:
              key: REDIS_STORAGE_SENTINEL_HOSTS
              name: backend-redis
        - name: BACKEND_REDIS_SENTINEL_ROLE
          valueFrom:
            secretKeyRef:
              key: REDIS_STORAGE_SENTINEL_ROLE
              name: backend-redis
        - name: BACKEND_REDIS_USERNAME
          valueFrom:
            secretKeyRef:
              key: REDIS_STORAGE_USERNAME
              name: backend-redis
              optional: true
        - name: BACKEND_REDIS_PASSWORD
          valueFrom:
            secretKeyRef:
              key: REDIS_STORAGE_PASSWORD
              name: backend-redis
              optional: true
        - name: BACKEND_REDIS_SENTINEL_USERNAME
          valueFrom:
            secretKeyRef:
              key: REDIS_STORAGE_SENTINEL_USERNAME
              name: backend-redis
              optional: true
        - name: BACKEND_REDIS_SENTINEL_PASSWORD
          valueFrom:
            secretKeyRef:
              key: REDIS_STORAGE_SENTINEL_PASSWORD
              name: backend-redis
              optional: true
        - name: BACKEND_REDIS_SSL
          value: "0"
        - name: BACKEND_URL
          valueFrom:
            secretKeyRef:
              key: service_endpoint
              name: backend-listener
        - name: BACKEND_PUBLIC_URL
          valueFrom:
            secretKeyRef:
              key: route_endpoint
              name: backend-listener
        - name: SMTP_ADDRESS
          valueFrom:
            secretKeyRef:
              key: address
              name: system-smtp
        - name: SMTP_USER_NAME
          valueFrom:
            secretKeyRef:
              key: username
              name: system-smtp
        - name: SMTP_PASSWORD
          valueFrom:
            secretKeyRef:
              key: password
              name: system-smtp
        - name: SMTP_DOMAIN
          valueFrom:
            secretKeyRef:
              key: domain
              name: system-smtp
        - name: SMTP_PORT
          valueFrom:
            secretKeyRef:
              key: port
              name: system-smtp
        - name: SMTP_AUTHENTICATION
          valueFrom:
            secretKeyRef:
              key: authentication
              name: system-smtp
        - name: SMTP_OPENSSL_VERIFY_MODE
          valueFrom:
            secretKeyRef:
              key: openssl.verify.mode
              name: system-smtp
        - name: APICAST_ACCESS_TOKEN
          valueFrom:
            secretKeyRef:
              key: ACCESS_TOKEN
              name: system-master-apicast
        - name: ZYNC_AUTHENTICATION_TOKEN
          valueFrom:
            secretKeyRef:
              key: ZYNC_AUTHENTICATION_TOKEN
              name: zync
        - name: CONFIG_INTERNAL_API_USER
          valueFrom:
            secretKeyRef:
              key: username
              name: backend-internal-api
        - name: CONFIG_INTERNAL_API_PASSWORD
          valueFrom:
            secretKeyRef:
              key: password
              name: backend-internal-api
        - name: PORT
          value: "3002"
        - name: TENANT_MODE
          value: master
        - name: PROMETHEUS_EXPORTER_PORT
          value: "9395"
        - name: USER_SESSION_TTL
          valueFrom:
            secretKeyRef:
              key: USER_SESSION_TTL
              name: system-app
        image: registry.redhat.io/3scale-amp2/system-rhel9@sha256:0084ecb03ad80eca7ee38234b5650e69464d8fe9aa6b24be546f08c74b90b885
        imagePullPolicy: IfNotPresent
        livenessProbe:
          failureThreshold: 40
          initialDelaySeconds: 40
          periodSeconds: 10
          successThreshold: 1
          tcpSocket:
            port: master
          timeoutSeconds: 10
        name: system-master
        ports:
        - containerPort: 3002
          name: master
          protocol: TCP
        - containerPort: 9395
          name: master-metrics
          protocol: TCP
        readinessProbe:
          failureThreshold: 10
          httpGet:
            httpHeaders:
            - name: X-Forwarded-Proto
              value: https
            path: /check.txt
            port: master
            scheme: HTTP
          initialDelaySeconds: 60
          periodSeconds: 30
          successThreshold: 1
          timeoutSeconds: 10
        resources: {}
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
        volumeMounts:
        - mountPath: /opt/system/public/system
          name: system-storage
        - mountPath: /opt/system-extra-configs
          name: system-config
      - env:
        - name: APICAST_REGISTRY_URL
          valueFrom:
            configMapKeyRef:
              key: APICAST_REGISTRY_URL
              name: system-environment
        - name: FORCE_SSL
          valueFrom:
            configMapKeyRef:
              key: FORCE_SSL
              name: system-environment
        - name: PROVIDER_PLAN
          valueFrom:
            configMapKeyRef:
              key: PROVIDER_PLAN
              name: system-environment
        - name: RAILS_ENV
          valueFrom:
            configMapKeyRef:
              key: RAILS_ENV
              name: system-environment
        - name: RAILS_LOG_LEVEL
          valueFrom:
            configMapKeyRef:
              key: RAILS_LOG_LEVEL
              name: system-environment
        - name: RAILS_LOG_TO_STDOUT
          valueFrom:
            configMapKeyRef:
              key: RAILS_LOG_TO_STDOUT
              name: system-environment
        - name: SSL_CERT_DIR
          valueFrom:
            configMapKeyRef:
              key: SSL_CERT_DIR
              name: system-environment
        - name: THINKING_SPHINX_PORT
          valueFrom:
            configMapKeyRef:
              key: THINKING_SPHINX_PORT
              name: system-environment
        - name: THREESCALE_SANDBOX_PROXY_OPENSSL_VERIFY_MODE
          valueFrom:
            configMapKeyRef:
              key: THREESCALE_SANDBOX_PROXY_OPENSSL_VERIFY_MODE
              name: system-environment
        - name: THREESCALE_SUPERDOMAIN
          valueFrom:
            configMapKeyRef:
              key: THREESCALE_SUPERDOMAIN
              name: system-environment
        - name: DATABASE_URL
          valueFrom:
            secretKeyRef:
              key: URL
              name: system-database
        - name: MASTER_DOMAIN
          valueFrom:
            secretKeyRef:
              key: MASTER_DOMAIN
              name: system-seed
        - name: MASTER_USER
          valueFrom:
            secretKeyRef:
              key: MASTER_USER
              name: system-seed
        - name: MASTER_PASSWORD
          valueFrom:
            secretKeyRef:
              key: MASTER_PASSWORD
              name: system-seed
        - name: ADMIN_ACCESS_TOKEN
          valueFrom:
            secretKeyRef:
              key: ADMIN_ACCESS_TOKEN
              name: system-seed
        - name: USER_LOGIN
          valueFrom:
            secretKeyRef:
              key: ADMIN_USER
              name: system-seed
        - name: USER_PASSWORD
          valueFrom:
            secretKeyRef:
              key: ADMIN_PASSWORD
              name: system-seed
        - name: USER_EMAIL
          valueFrom:
            secretKeyRef:
              key: ADMIN_EMAIL
              name: system-seed
        - name: TENANT_NAME
          valueFrom:
            secretKeyRef:
              key: TENANT_NAME
              name: system-seed
        - name: THINKING_SPHINX_ADDRESS
          value: system-searchd
        - name: EVENTS_SHARED_SECRET
          valueFrom:
            secretKeyRef:
              key: PASSWORD
              name: system-events-hook
        - name: RECAPTCHA_PUBLIC_KEY
          valueFrom:
            secretKeyRef:
              key: PUBLIC_KEY
              name: system-recaptcha
        - name: RECAPTCHA_PRIVATE_KEY
          valueFrom:
            secretKeyRef:
              key: PRIVATE_KEY
              name: system-recaptcha
        - name: SECRET_KEY_BASE
          valueFrom:
            secretKeyRef:
              key: SECRET_KEY_BASE
              name: system-app
        - name: MEMCACHE_SERVERS
          valueFrom:
            secretKeyRef:
              key: SERVERS
              name: system-memcache
        - name: REDIS_URL
          valueFrom:
            secretKeyRef:
              key: URL
              name: system-redis
        - name: REDIS_SENTINEL_HOSTS
          valueFrom:
            secretKeyRef:
              key: SENTINEL_HOSTS
              name: system-redis
        - name: REDIS_SENTINEL_ROLE
          valueFrom:
            secretKeyRef:
              key: SENTINEL_ROLE
              name: system-redis
        - name: REDIS_USERNAME
          valueFrom:
            secretKeyRef:
              key: REDIS_USERNAME
              name: system-redis
              optional: true
        - name: REDIS_PASSWORD
          valueFrom:
            secretKeyRef:
              key: REDIS_PASSWORD
              name: system-redis
              optional: true
        - name: REDIS_SENTINEL_USERNAME
          valueFrom:
            secretKeyRef:
              key: REDIS_SENTINEL_USERNAME
              name: system-redis
              optional: true
        - name: REDIS_SENTINEL_PASSWORD
          valueFrom:
            secretKeyRef:
              key: REDIS_SENTINEL_PASSWORD
              name: system-redis
              optional: true
        - name: REDIS_SSL
          value: "0"
        - name: BACKEND_REDIS_URL
          valueFrom:
            secretKeyRef:
              key: REDIS_STORAGE_URL
              name: backend-redis
        - name: BACKEND_REDIS_SENTINEL_HOSTS
          valueFrom:
            secretKeyRef:
              key: REDIS_STORAGE_SENTINEL_HOSTS
              name: backend-redis
        - name: BACKEND_REDIS_SENTINEL_ROLE
          valueFrom:
            secretKeyRef:
              key: REDIS_STORAGE_SENTINEL_ROLE
              name: backend-redis
        - name: BACKEND_REDIS_USERNAME
          valueFrom:
            secretKeyRef:
              key: REDIS_STORAGE_USERNAME
              name: backend-redis
              optional: true
        - name: BACKEND_REDIS_PASSWORD
          valueFrom:
            secretKeyRef:
              key: REDIS_STORAGE_PASSWORD
              name: backend-redis
              optional: true
        - name: BACKEND_REDIS_SENTINEL_USERNAME
          valueFrom:
            secretKeyRef:
              key: REDIS_STORAGE_SENTINEL_USERNAME
              name: backend-redis
              optional: true
        - name: BACKEND_REDIS_SENTINEL_PASSWORD
          valueFrom:
            secretKeyRef:
              key: REDIS_STORAGE_SENTINEL_PASSWORD
              name: backend-redis
              optional: true
        - name: BACKEND_REDIS_SSL
          value: "0"
        - name: BACKEND_URL
          valueFrom:
            secretKeyRef:
              key: service_endpoint
              name: backend-listener
        - name: BACKEND_PUBLIC_URL
          valueFrom:
            secretKeyRef:
              key: route_endpoint
              name: backend-listener
        - name: SMTP_ADDRESS
          valueFrom:
            secretKeyRef:
              key: address
              name: system-smtp
        - name: SMTP_USER_NAME
          valueFrom:
            secretKeyRef:
              key: username
              name: system-smtp
        - name: SMTP_PASSWORD
          valueFrom:
            secretKeyRef:
              key: password
              name: system-smtp
        - name: SMTP_DOMAIN
          valueFrom:
            secretKeyRef:
              key: domain
              name: system-smtp
        - name: SMTP_PORT
          valueFrom:
            secretKeyRef:
              key: port
              name: system-smtp
        - name: SMTP_AUTHENTICATION
          valueFrom:
            secretKeyRef:
              key: authentication
              name: system-smtp
        - name: SMTP_OPENSSL_VERIFY_MODE
          valueFrom:
            secretKeyRef:
              key: openssl.verify.mode
              name: system-smtp
        - name: APICAST_ACCESS_TOKEN
          valueFrom:
            secretKeyRef:
              key: ACCESS_TOKEN
              name: system-master-apicast
        - name: ZYNC_AUTHENTICATION_TOKEN
          valueFrom:
            secretKeyRef:
              key: ZYNC_AUTHENTICATION_TOKEN
              name: zync
        - name: CONFIG_INTERNAL_API_USER
          valueFrom:
            secretKeyRef:
              key: username
              name: backend-internal-api
        - name: CONFIG_INTERNAL_API_PASSWORD
          valueFrom:
            secretKeyRef:
              key: password
              name: backend-internal-api
        - name: PORT
          value: "3000"
        - name: TENANT_MODE
          value: provider
        - name: PROMETHEUS_EXPORTER_PORT
          value: "9396"
        - name: USER_SESSION_TTL
          valueFrom:
            secretKeyRef:
              key: USER_SESSION_TTL
              name: system-app
        image: registry.redhat.io/3scale-amp2/system-rhel9@sha256:0084ecb03ad80eca7ee38234b5650e69464d8fe9aa6b24be546f08c74b90b885
        imagePullPolicy: IfNotPresent
        livenessProbe:
          failureThreshold: 40
          initialDelaySeconds: 40
          periodSeconds: 10
          successThreshold: 1
          tcpSocket:
            port: provider
          timeoutSeconds: 10
        name: system-provider
        ports:
        - containerPort: 3000
          name: provider
          protocol: TCP
        - containerPort: 9396
          name: prov-metrics
          protocol: TCP
        readinessProbe:
          failureThreshold: 10
          httpGet:
            httpHeaders:
            - name: X-Forwarded-Proto
              value: https
            path: /check.txt
            port: provider
            scheme: HTTP
          initialDelaySeconds: 60
          periodSeconds: 30
          successThreshold: 1
          timeoutSeconds: 10
        resources: {}
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
        volumeMounts:
        - mountPath: /opt/system/public/system
          name: system-storage
        - mountPath: /opt/system-extra-configs
          name: system-config
      - env:
        - name: APICAST_REGISTRY_URL
          valueFrom:
            configMapKeyRef:
              key: APICAST_REGISTRY_URL
              name: system-environment
        - name: FORCE_SSL
          valueFrom:
            configMapKeyRef:
              key: FORCE_SSL
              name: system-environment
        - name: PROVIDER_PLAN
          valueFrom:
            configMapKeyRef:
              key: PROVIDER_PLAN
              name: system-environment
        - name: RAILS_ENV
          valueFrom:
            configMapKeyRef:
              key: RAILS_ENV
              name: system-environment
        - name: RAILS_LOG_LEVEL
          valueFrom:
            configMapKeyRef:
              key: RAILS_LOG_LEVEL
              name: system-environment
        - name: RAILS_LOG_TO_STDOUT
          valueFrom:
            configMapKeyRef:
              key: RAILS_LOG_TO_STDOUT
              name: system-environment
        - name: SSL_CERT_DIR
          valueFrom:
            configMapKeyRef:
              key: SSL_CERT_DIR
              name: system-environment
        - name: THINKING_SPHINX_PORT
          valueFrom:
            configMapKeyRef:
              key: THINKING_SPHINX_PORT
              name: system-environment
        - name: THREESCALE_SANDBOX_PROXY_OPENSSL_VERIFY_MODE
          valueFrom:
            configMapKeyRef:
              key: THREESCALE_SANDBOX_PROXY_OPENSSL_VERIFY_MODE
              name: system-environment
        - name: THREESCALE_SUPERDOMAIN
          valueFrom:
            configMapKeyRef:
              key: THREESCALE_SUPERDOMAIN
              name: system-environment
        - name: DATABASE_URL
          valueFrom:
            secretKeyRef:
              key: URL
              name: system-database
        - name: MASTER_DOMAIN
          valueFrom:
            secretKeyRef:
              key: MASTER_DOMAIN
              name: system-seed
        - name: MASTER_USER
          valueFrom:
            secretKeyRef:
              key: MASTER_USER
              name: system-seed
        - name: MASTER_PASSWORD
          valueFrom:
            secretKeyRef:
              key: MASTER_PASSWORD
              name: system-seed
        - name: ADMIN_ACCESS_TOKEN
          valueFrom:
            secretKeyRef:
              key: ADMIN_ACCESS_TOKEN
              name: system-seed
        - name: USER_LOGIN
          valueFrom:
            secretKeyRef:
              key: ADMIN_USER
              name: system-seed
        - name: USER_PASSWORD
          valueFrom:
            secretKeyRef:
              key: ADMIN_PASSWORD
              name: system-seed
        - name: USER_EMAIL
          valueFrom:
            secretKeyRef:
              key: ADMIN_EMAIL
              name: system-seed
        - name: TENANT_NAME
          valueFrom:
            secretKeyRef:
              key: TENANT_NAME
              name: system-seed
        - name: THINKING_SPHINX_ADDRESS
          value: system-searchd
        - name: EVENTS_SHARED_SECRET
          valueFrom:
            secretKeyRef:
              key: PASSWORD
              name: system-events-hook
        - name: RECAPTCHA_PUBLIC_KEY
          valueFrom:
            secretKeyRef:
              key: PUBLIC_KEY
              name: system-recaptcha
        - name: RECAPTCHA_PRIVATE_KEY
          valueFrom:
            secretKeyRef:
              key: PRIVATE_KEY
              name: system-recaptcha
        - name: SECRET_KEY_BASE
          valueFrom:
            secretKeyRef:
              key: SECRET_KEY_BASE
              name: system-app
        - name: MEMCACHE_SERVERS
          valueFrom:
            secretKeyRef:
              key: SERVERS
              name: system-memcache
        - name: REDIS_URL
          valueFrom:
            secretKeyRef:
              key: URL
              name: system-redis
        - name: REDIS_SENTINEL_HOSTS
          valueFrom:
            secretKeyRef:
              key: SENTINEL_HOSTS
              name: system-redis
        - name: REDIS_SENTINEL_ROLE
          valueFrom:
            secretKeyRef:
              key: SENTINEL_ROLE
              name: system-redis
        - name: REDIS_USERNAME
          valueFrom:
            secretKeyRef:
              key: REDIS_USERNAME
              name: system-redis
              optional: true
        - name: REDIS_PASSWORD
          valueFrom:
            secretKeyRef:
              key: REDIS_PASSWORD
              name: system-redis
              optional: true
        - name: REDIS_SENTINEL_USERNAME
          valueFrom:
            secretKeyRef:
              key: REDIS_SENTINEL_USERNAME
              name: system-redis
              optional: true
        - name: REDIS_SENTINEL_PASSWORD
          valueFrom:
            secretKeyRef:
              key: REDIS_SENTINEL_PASSWORD
              name: system-redis
              optional: true
        - name: REDIS_SSL
          value: "0"
        - name: BACKEND_REDIS_URL
          valueFrom:
            secretKeyRef:
              key: REDIS_STORAGE_URL
              name: backend-redis
        - name: BACKEND_REDIS_SENTINEL_HOSTS
          valueFrom:
            secretKeyRef:
              key: REDIS_STORAGE_SENTINEL_HOSTS
              name: backend-redis
        - name: BACKEND_REDIS_SENTINEL_ROLE
          valueFrom:
            secretKeyRef:
              key: REDIS_STORAGE_SENTINEL_ROLE
              name: backend-redis
        - name: BACKEND_REDIS_USERNAME
          valueFrom:
            secretKeyRef:
              key: REDIS_STORAGE_USERNAME
              name: backend-redis
              optional: true
        - name: BACKEND_REDIS_PASSWORD
          valueFrom:
            secretKeyRef:
              key: REDIS_STORAGE_PASSWORD
              name: backend-redis
              optional: true
        - name: BACKEND_REDIS_SENTINEL_USERNAME
          valueFrom:
            secretKeyRef:
              key: REDIS_STORAGE_SENTINEL_USERNAME
              name: backend-redis
              optional: true
        - name: BACKEND_REDIS_SENTINEL_PASSWORD
          valueFrom:
            secretKeyRef:
              key: REDIS_STORAGE_SENTINEL_PASSWORD
              name: backend-redis
              optional: true
        - name: BACKEND_REDIS_SSL
          value: "0"
        - name: BACKEND_URL
          valueFrom:
            secretKeyRef:
              key: service_endpoint
              name: backend-listener
        - name: BACKEND_PUBLIC_URL
          valueFrom:
            secretKeyRef:
              key: route_endpoint
              name: backend-listener
        - name: SMTP_ADDRESS
          valueFrom:
            secretKeyRef:
              key: address
              name: system-smtp
        - name: SMTP_USER_NAME
          valueFrom:
            secretKeyRef:
              key: username
              name: system-smtp
        - name: SMTP_PASSWORD
          valueFrom:
            secretKeyRef:
              key: password
              name: system-smtp
        - name: SMTP_DOMAIN
          valueFrom:
            secretKeyRef:
              key: domain
              name: system-smtp
        - name: SMTP_PORT
          valueFrom:
            secretKeyRef:
              key: port
              name: system-smtp
        - name: SMTP_AUTHENTICATION
          valueFrom:
            secretKeyRef:
              key: authentication
              name: system-smtp
        - name: SMTP_OPENSSL_VERIFY_MODE
          valueFrom:
            secretKeyRef:
              key: openssl.verify.mode
              name: system-smtp
        - name: APICAST_ACCESS_TOKEN
          valueFrom:
            secretKeyRef:
              key: ACCESS_TOKEN
              name: system-master-apicast
        - name: ZYNC_AUTHENTICATION_TOKEN
          valueFrom:
            secretKeyRef:
              key: ZYNC_AUTHENTICATION_TOKEN
              name: zync
        - name: CONFIG_INTERNAL_API_USER
          valueFrom:
            secretKeyRef:
              key: username
              name: backend-internal-api
        - name: CONFIG_INTERNAL_API_PASSWORD
          valueFrom:
            secretKeyRef:
              key: password
              name: backend-internal-api
        - name: PORT
          value: "3001"
        - name: PROMETHEUS_EXPORTER_PORT
          value: "9394"
        - name: USER_SESSION_TTL
          valueFrom:
            secretKeyRef:
              key: USER_SESSION_TTL
              name: system-app
        image: registry.redhat.io/3scale-amp2/system-rhel9@sha256:0084ecb03ad80eca7ee38234b5650e69464d8fe9aa6b24be546f08c74b90b885
        imagePullPolicy: IfNotPresent
        livenessProbe:
          failureThreshold: 40
          initialDelaySeconds: 40
          periodSeconds: 10
          successThreshold: 1
          tcpSocket:
            port: developer
          timeoutSeconds: 10
        name: system-developer
        ports:
        - containerPort: 3001
          name: developer
          protocol: TCP
        - containerPort: 9394
          name: dev-metrics
          protocol: TCP
        readinessProbe:
          failureThreshold: 10
          httpGet:
            httpHeaders:
            - name: X-Forwarded-Proto
              value: https
            path: /check.txt
            port: developer
            scheme: HTTP
          initialDelaySeconds: 60
          periodSeconds: 30
          successThreshold: 1
          timeoutSeconds: 10
        resources: {}
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
        volumeMounts:
        - mountPath: /opt/system/public/system
          name: system-storage
          readOnly: true
        - mountPath: /opt/system-extra-configs
          name: system-config
      dnsPolicy: ClusterFirst
      restartPolicy: Always
      schedulerName: default-scheduler
      securityContext: {}
      serviceAccount: amp
      serviceAccountName: amp
      terminationGracePeriodSeconds: 30
      volumes:
      - name: system-storage
        persistentVolumeClaim:
          claimName: system-storage
      - configMap:
          defaultMode: 420
          items:
          - key: zync.yml
            path: zync.yml
          - key: rolling_updates.yml
            path: rolling_updates.yml
          - key: service_discovery.yml
            path: service_discovery.yml
          name: system
        name: system-config
status:
  conditions:
  - lastTransitionTime: "2026-02-18T21:31:30Z"
    lastUpdateTime: "2026-02-18T21:31:30Z"
    message: Deployment does not have minimum availability.
    reason: MinimumReplicasUnavailable
    status: "False"
    type: Available
  - lastTransitionTime: "2026-02-18T21:31:30Z"
    lastUpdateTime: "2026-02-18T21:31:30Z"
    message: ReplicaSet "system-app-795cb9859b" is progressing.
    reason: ReplicaSetUpdated
    status: "True"
    type: Progressing
  observedGeneration: 1
  replicas: 1
  unavailableReplicas: 1
  updatedReplicas: 1
