apiVersion: v1 kind: Pod metadata: annotations: checksum/config: 135bef44b91a8ad524857f9484ba2af0e8af9ebfe3cbbdadfbf54951474c8df5 checksum/sc-dashboard-provider-config: 593c0a8778b83f11fe80ccb21dfb20bc46705e2be3178df1dc4c89d164c8cd9c checksum/secret: 6e31e8dc07bac16b9fd2cbb6333f51894a70390688724fc2b39054cfe5a8a419 kubectl.kubernetes.io/default-container: grafana creationTimestamp: "2026-05-18T00:44:26Z" generateName: kube-prometheus-stack-grafana-7c74cbcb95- labels: app.kubernetes.io/instance: kube-prometheus-stack app.kubernetes.io/name: grafana pod-template-hash: 7c74cbcb95 name: kube-prometheus-stack-grafana-7c74cbcb95-8mm4z namespace: monitoring ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: kube-prometheus-stack-grafana-7c74cbcb95 uid: 94a6f9fb-e5a3-4b73-984e-8742a1430d0c resourceVersion: "5156" uid: 4c31f353-d648-4202-b8db-86de967998d9 spec: automountServiceAccountToken: true containers: - env: - name: METHOD value: WATCH - name: LABEL value: grafana_dashboard - name: LABEL_VALUE value: "1" - name: FOLDER value: /tmp/dashboards - name: RESOURCE value: both - name: NAMESPACE value: ALL - name: REQ_USERNAME valueFrom: secretKeyRef: key: admin-user name: kube-prometheus-stack-grafana - name: REQ_PASSWORD valueFrom: secretKeyRef: key: admin-password name: kube-prometheus-stack-grafana - name: REQ_URL value: http://localhost:3000/api/admin/provisioning/dashboards/reload - name: REQ_METHOD value: POST image: harbor.atmosphere.dev/quay.io/kiwigrid/k8s-sidecar:1.26.1 imagePullPolicy: IfNotPresent name: grafana-sc-dashboard resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL seccompProfile: type: RuntimeDefault terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /tmp/dashboards name: sc-dashboard-volume - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-ltftq readOnly: true - env: - name: METHOD value: WATCH - name: LABEL value: grafana_datasource - name: LABEL_VALUE value: "1" - name: FOLDER value: /etc/grafana/provisioning/datasources - name: RESOURCE value: both - name: REQ_USERNAME valueFrom: secretKeyRef: key: admin-user name: kube-prometheus-stack-grafana - name: REQ_PASSWORD valueFrom: secretKeyRef: key: admin-password name: kube-prometheus-stack-grafana - name: REQ_URL value: http://localhost:3000/api/admin/provisioning/datasources/reload - name: REQ_METHOD value: POST image: harbor.atmosphere.dev/quay.io/kiwigrid/k8s-sidecar:1.26.1 imagePullPolicy: IfNotPresent name: grafana-sc-datasources resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL seccompProfile: type: RuntimeDefault terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/grafana/provisioning/datasources name: sc-datasources-volume - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-ltftq readOnly: true - env: - name: POD_IP valueFrom: fieldRef: apiVersion: v1 fieldPath: status.podIP - name: GF_SECURITY_ADMIN_USER valueFrom: secretKeyRef: key: admin-user name: kube-prometheus-stack-grafana - name: GF_SECURITY_ADMIN_PASSWORD valueFrom: secretKeyRef: key: admin-password name: kube-prometheus-stack-grafana - name: GF_PATHS_DATA value: /var/lib/grafana/ - name: GF_PATHS_LOGS value: /var/log/grafana - name: GF_PATHS_PLUGINS value: /var/lib/grafana/plugins - name: GF_PATHS_PROVISIONING value: /etc/grafana/provisioning image: harbor.atmosphere.dev/docker.io/grafana/grafana:10.4.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 10 httpGet: path: /api/health port: 3000 scheme: HTTP initialDelaySeconds: 60 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 30 name: grafana ports: - containerPort: 3000 name: grafana protocol: TCP - containerPort: 9094 name: gossip-tcp protocol: TCP - containerPort: 9094 name: gossip-udp protocol: UDP readinessProbe: failureThreshold: 3 httpGet: path: /api/health port: 3000 scheme: HTTP periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL seccompProfile: type: RuntimeDefault terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/grafana/grafana.ini name: config subPath: grafana.ini - mountPath: /var/lib/grafana name: storage - mountPath: /tmp/dashboards name: sc-dashboard-volume - mountPath: /etc/grafana/provisioning/dashboards/sc-dashboardproviders.yaml name: sc-dashboard-provider subPath: provider.yaml - mountPath: /etc/grafana/provisioning/datasources name: sc-datasources-volume - mountPath: /etc/secrets/auth_generic_oauth name: auth-generic-oauth-secret-mount readOnly: true - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-ltftq readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true nodeName: instance nodeSelector: openstack-control-plane: enabled preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 472 runAsGroup: 472 runAsNonRoot: true runAsUser: 472 serviceAccount: kube-prometheus-stack-grafana serviceAccountName: kube-prometheus-stack-grafana terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - configMap: defaultMode: 420 name: kube-prometheus-stack-grafana name: config - emptyDir: {} name: storage - emptyDir: {} name: sc-dashboard-volume - configMap: defaultMode: 420 name: kube-prometheus-stack-grafana-config-dashboards name: sc-dashboard-provider - emptyDir: {} name: sc-datasources-volume - name: auth-generic-oauth-secret-mount secret: defaultMode: 288 secretName: kube-prometheus-stack-grafana-client-secret - name: kube-api-access-ltftq projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2026-05-18T00:44:26Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-05-18T00:45:18Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-05-18T00:45:18Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-05-18T00:44:26Z" status: "True" type: PodScheduled containerStatuses: - containerID: containerd://771e807917f427309752e72f226aec2d1f61f9cb5d9f4941b84f76aede2e8aad image: harbor.atmosphere.dev/docker.io/grafana/grafana:10.4.0 imageID: harbor.atmosphere.dev/docker.io/grafana/grafana@sha256:f9811e4e687ffecf1a43adb9b64096c50bc0d7a782f8608530f478b6542de7d5 lastState: {} name: grafana ready: true restartCount: 0 started: true state: running: startedAt: "2026-05-18T00:44:59Z" - containerID: containerd://35430ddc17f30b04a46812c56223acd5bcb539a603f0a3feda59f228e9f41dfc image: harbor.atmosphere.dev/quay.io/kiwigrid/k8s-sidecar:1.26.1 imageID: harbor.atmosphere.dev/quay.io/kiwigrid/k8s-sidecar@sha256:b8d5067137fec093cf48670dc3a1dbb38f9e734f3a6683015c2e89a45db5fd16 lastState: {} name: grafana-sc-dashboard ready: true restartCount: 0 started: true state: running: startedAt: "2026-05-18T00:44:44Z" - containerID: containerd://3ba6da70f55b1ce80824ad8a370a9535a94242710a007aff71fdd30bfa45aa2f image: harbor.atmosphere.dev/quay.io/kiwigrid/k8s-sidecar:1.26.1 imageID: harbor.atmosphere.dev/quay.io/kiwigrid/k8s-sidecar@sha256:b8d5067137fec093cf48670dc3a1dbb38f9e734f3a6683015c2e89a45db5fd16 lastState: {} name: grafana-sc-datasources ready: true restartCount: 0 started: true state: running: startedAt: "2026-05-18T00:44:44Z" hostIP: 199.19.213.99 phase: Running podIP: 10.0.0.53 podIPs: - ip: 10.0.0.53 qosClass: BestEffort startTime: "2026-05-18T00:44:26Z"