Name:             keycloak-2
Namespace:        auth-system
Priority:         0
Service Account:  default
Node:             instance/199.19.213.48
Start Time:       Fri, 17 Jul 2026 16:04:32 +0000
Labels:           app=keycloak
                  app.kubernetes.io/component=server
                  app.kubernetes.io/instance=keycloak
                  app.kubernetes.io/managed-by=keycloak-operator
                  apps.kubernetes.io/pod-index=2
                  controller-revision-hash=keycloak-677fd56749
                  statefulset.kubernetes.io/pod-name=keycloak-2
Annotations:      operator.keycloak.org/watched-secret-hash: b12e81ebd67deeb97eb58026c3b98b85efdf7cb237ac6f2987ca4082ae32fc37
Status:           Running
IP:               10.0.0.31
IPs:
  IP:           10.0.0.31
Controlled By:  StatefulSet/keycloak
Containers:
  keycloak:
    Container ID:  containerd://6dd0c6bf44204e2ee5cb31cc7bea97db75f9c4d4756a60687af29e2946c2efb7
    Image:         harbor.atmosphere.dev/quay.io/keycloak/keycloak:26.6.4
    Image ID:      harbor.atmosphere.dev/quay.io/keycloak/keycloak@sha256:0aae0de7fca85525f727d3354df17896092de8bb26ae4c12d89c77e5df8cbce4
    Ports:         8443/TCP, 8080/TCP, 9000/TCP
    Host Ports:    0/TCP, 0/TCP, 0/TCP
    Args:
      -Djgroups.bind.address=$(POD_IP)
      --verbose
      start
    State:          Running
      Started:      Fri, 17 Jul 2026 16:04:33 +0000
    Ready:          True
    Restart Count:  0
    Limits:
      memory:  2Gi
    Requests:
      memory:   1700Mi
    Liveness:   http-get http://:9000/health/live delay=0s timeout=1s period=10s #success=1 #failure=3
    Readiness:  http-get http://:9000/health/ready delay=0s timeout=1s period=10s #success=1 #failure=3
    Startup:    http-get http://:9000/health/started delay=0s timeout=1s period=1s #success=1 #failure=600
    Environment:
      KC_HOSTNAME_STRICT:                                     false
      KC_FEATURES:                                            token-exchange
      KC_TRANSACTION_XA_ENABLED:                              false
      KC_HTTP_ENABLED:                                        true
      KC_HTTP_PORT:                                           8080
      KC_HTTPS_PORT:                                          8443
      KC_DB:                                                  postgres
      KC_DB_USERNAME:                                         <set to the key 'username' in secret 'keycloak-db-user'>  Optional: false
      KC_DB_PASSWORD:                                         <set to the key 'password' in secret 'keycloak-db-user'>  Optional: false
      KC_DB_URL_HOST:                                         keycloak-db-rw
      KC_PROXY_HEADERS:                                       xforwarded
      KC_BOOTSTRAP_ADMIN_USERNAME:                            <set to the key 'username' in secret 'keycloak-admin'>  Optional: false
      KC_BOOTSTRAP_ADMIN_PASSWORD:                            <set to the key 'password' in secret 'keycloak-admin'>  Optional: false
      KC_HEALTH_ENABLED:                                      true
      KC_CACHE:                                               ispn
      KC_METRICS_ENABLED:                                     true
      KCKEY_METRICS_ENABLED:                                  metrics-enabled
      KC_SPI_EVENTS_LISTENER_JBOSS_LOGGING_SUCCESS_LEVEL:     info
      KCKEY_SPI_EVENTS_LISTENER_JBOSS_LOGGING_SUCCESS_LEVEL:  spi-events-listener-jboss-logging-success-level
      KC_SPI_EVENTS_LISTENER_JBOSS_LOGGING_ERROR_LEVEL:       warn
      KCKEY_SPI_EVENTS_LISTENER_JBOSS_LOGGING_ERROR_LEVEL:    spi-events-listener-jboss-logging-error-level
      POD_IP:                                                  (v1:status.podIP)
      KC_SPI_CACHE_EMBEDDED_DEFAULT_MACHINE_NAME:              (v1:spec.nodeName)
      KC_TELEMETRY_SERVICE_NAME:                              keycloak
      KC_TELEMETRY_RESOURCE_ATTRIBUTES:                       k8s.namespace.name=auth-system
    Mounts:
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-6pcn4 (ro)
Conditions:
  Type              Status
  Initialized       True 
  Ready             True 
  ContainersReady   True 
  PodScheduled      True 
Volumes:
  kube-api-access-6pcn4:
    Type:                     Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:   3607
    ConfigMapName:            kube-root-ca.crt
    ConfigMapOptional:        <nil>
    DownwardAPI:              true
QoS Class:                    Burstable
Node-Selectors:               <none>
Tolerations:                  node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                              node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Topology Spread Constraints:  kubernetes.io/hostname:ScheduleAnyway when max skew 1 is exceeded for selector app=keycloak,app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator
                              topology.kubernetes.io/zone:ScheduleAnyway when max skew 1 is exceeded for selector app=keycloak,app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator
Events:
  Type     Reason     Age                 From               Message
  ----     ------     ----                ----               -------
  Normal   Scheduled  11m                 default-scheduler  Successfully assigned auth-system/keycloak-2 to instance
  Normal   Pulling    11m                 kubelet            Pulling image "harbor.atmosphere.dev/quay.io/keycloak/keycloak:26.6.4"
  Normal   Pulled     11m                 kubelet            Successfully pulled image "harbor.atmosphere.dev/quay.io/keycloak/keycloak:26.6.4" in 156ms (156ms including waiting)
  Normal   Created    11m                 kubelet            Created container keycloak
  Normal   Started    11m                 kubelet            Started container keycloak
  Warning  Unhealthy  10m (x15 over 11m)  kubelet            Startup probe failed: Get "http://10.0.0.31:9000/health/started": dial tcp 10.0.0.31:9000: connect: connection refused
  Warning  Unhealthy  10m                 kubelet            Readiness probe failed: HTTP probe failed with statuscode: 503