apiVersion: v1 kind: Pod metadata: annotations: checksum/config: a165e14404b60dd326c46f86d0814c4c3af8bf41bed5ca85f1db1f8038b59405 checksum/sc-dashboard-provider-config: 593c0a8778b83f11fe80ccb21dfb20bc46705e2be3178df1dc4c89d164c8cd9c checksum/secret: 8568c8da1463e3923c1f1ae1c006eb7acb4e4a6a6fa3a996600e80a13ac1033f kubectl.kubernetes.io/default-container: grafana creationTimestamp: "2026-04-23T10:32:38Z" generateName: kube-prometheus-stack-grafana-7cc6ddf498- labels: app.kubernetes.io/instance: kube-prometheus-stack app.kubernetes.io/name: grafana pod-template-hash: 7cc6ddf498 name: kube-prometheus-stack-grafana-7cc6ddf498-twrrx namespace: monitoring ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: kube-prometheus-stack-grafana-7cc6ddf498 uid: fbb16cc3-8ceb-4dc1-971b-434ca28b92c2 resourceVersion: "4954" uid: fe5787b5-e3a9-45b0-8551-0b8b336ee6e3 spec: automountServiceAccountToken: true containers: - env: - name: METHOD value: WATCH - name: LABEL value: grafana_dashboard - name: LABEL_VALUE value: "1" - name: FOLDER value: /tmp/dashboards - name: RESOURCE value: both - name: NAMESPACE value: ALL - name: REQ_USERNAME valueFrom: secretKeyRef: key: admin-user name: kube-prometheus-stack-grafana - name: REQ_PASSWORD valueFrom: secretKeyRef: key: admin-password name: kube-prometheus-stack-grafana - name: REQ_URL value: http://localhost:3000/api/admin/provisioning/dashboards/reload - name: REQ_METHOD value: POST image: harbor.atmosphere.dev/quay.io/kiwigrid/k8s-sidecar:1.26.1 imagePullPolicy: IfNotPresent name: grafana-sc-dashboard resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL seccompProfile: type: RuntimeDefault terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /tmp/dashboards name: sc-dashboard-volume - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-rx4pt readOnly: true - env: - name: METHOD value: WATCH - name: LABEL value: grafana_datasource - name: LABEL_VALUE value: "1" - name: FOLDER value: /etc/grafana/provisioning/datasources - name: RESOURCE value: both - name: REQ_USERNAME valueFrom: secretKeyRef: key: admin-user name: kube-prometheus-stack-grafana - name: REQ_PASSWORD valueFrom: secretKeyRef: key: admin-password name: kube-prometheus-stack-grafana - name: REQ_URL value: http://localhost:3000/api/admin/provisioning/datasources/reload - name: REQ_METHOD value: POST image: harbor.atmosphere.dev/quay.io/kiwigrid/k8s-sidecar:1.26.1 imagePullPolicy: IfNotPresent name: grafana-sc-datasources resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL seccompProfile: type: RuntimeDefault terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/grafana/provisioning/datasources name: sc-datasources-volume - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-rx4pt readOnly: true - env: - name: POD_IP valueFrom: fieldRef: apiVersion: v1 fieldPath: status.podIP - name: GF_SECURITY_ADMIN_USER valueFrom: secretKeyRef: key: admin-user name: kube-prometheus-stack-grafana - name: GF_SECURITY_ADMIN_PASSWORD valueFrom: secretKeyRef: key: admin-password name: kube-prometheus-stack-grafana - name: GF_PATHS_DATA value: /var/lib/grafana/ - name: GF_PATHS_LOGS value: /var/log/grafana - name: GF_PATHS_PLUGINS value: /var/lib/grafana/plugins - name: GF_PATHS_PROVISIONING value: /etc/grafana/provisioning image: harbor.atmosphere.dev/docker.io/grafana/grafana:10.4.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 10 httpGet: path: /api/health port: 3000 scheme: HTTP initialDelaySeconds: 60 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 30 name: grafana ports: - containerPort: 3000 name: grafana protocol: TCP - containerPort: 9094 name: gossip-tcp protocol: TCP - containerPort: 9094 name: gossip-udp protocol: UDP readinessProbe: failureThreshold: 3 httpGet: path: /api/health port: 3000 scheme: HTTP periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL seccompProfile: type: RuntimeDefault terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/grafana/grafana.ini name: config subPath: grafana.ini - mountPath: /var/lib/grafana name: storage - mountPath: /tmp/dashboards name: sc-dashboard-volume - mountPath: /etc/grafana/provisioning/dashboards/sc-dashboardproviders.yaml name: sc-dashboard-provider subPath: provider.yaml - mountPath: /etc/grafana/provisioning/datasources name: sc-datasources-volume - mountPath: /etc/secrets/auth_generic_oauth name: auth-generic-oauth-secret-mount readOnly: true - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-rx4pt readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true nodeName: instance nodeSelector: openstack-control-plane: enabled preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 472 runAsGroup: 472 runAsNonRoot: true runAsUser: 472 serviceAccount: kube-prometheus-stack-grafana serviceAccountName: kube-prometheus-stack-grafana terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - configMap: defaultMode: 420 name: kube-prometheus-stack-grafana name: config - emptyDir: {} name: storage - emptyDir: {} name: sc-dashboard-volume - configMap: defaultMode: 420 name: kube-prometheus-stack-grafana-config-dashboards name: sc-dashboard-provider - emptyDir: {} name: sc-datasources-volume - name: auth-generic-oauth-secret-mount secret: defaultMode: 288 secretName: kube-prometheus-stack-grafana-client-secret - name: kube-api-access-rx4pt projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2026-04-23T10:32:38Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-04-23T10:32:58Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-04-23T10:32:58Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-04-23T10:32:38Z" status: "True" type: PodScheduled containerStatuses: - containerID: containerd://11ae1fce0880a5d1639d951386a4cc97ff9c0ccc4a9763973aad77002e788040 image: harbor.atmosphere.dev/docker.io/grafana/grafana:10.4.0 imageID: harbor.atmosphere.dev/docker.io/grafana/grafana@sha256:f9811e4e687ffecf1a43adb9b64096c50bc0d7a782f8608530f478b6542de7d5 lastState: {} name: grafana ready: true restartCount: 0 started: true state: running: startedAt: "2026-04-23T10:32:52Z" - containerID: containerd://4c21d9dd9f5fc3746e711dc3f7fcd5b921aad2ba215edd67f36c3f3933d34c1b image: harbor.atmosphere.dev/quay.io/kiwigrid/k8s-sidecar:1.26.1 imageID: harbor.atmosphere.dev/quay.io/kiwigrid/k8s-sidecar@sha256:b8d5067137fec093cf48670dc3a1dbb38f9e734f3a6683015c2e89a45db5fd16 lastState: {} name: grafana-sc-dashboard ready: true restartCount: 0 started: true state: running: startedAt: "2026-04-23T10:32:43Z" - containerID: containerd://b25ffa9af1636b68fd574445e06609795892ae48efce71320a937eabe7d3b486 image: harbor.atmosphere.dev/quay.io/kiwigrid/k8s-sidecar:1.26.1 imageID: harbor.atmosphere.dev/quay.io/kiwigrid/k8s-sidecar@sha256:b8d5067137fec093cf48670dc3a1dbb38f9e734f3a6683015c2e89a45db5fd16 lastState: {} name: grafana-sc-datasources ready: true restartCount: 0 started: true state: running: startedAt: "2026-04-23T10:32:43Z" hostIP: 199.19.213.84 phase: Running podIP: 10.0.0.129 podIPs: - ip: 10.0.0.129 qosClass: BestEffort startTime: "2026-04-23T10:32:38Z"