apiVersion: v1 kind: Pod metadata: annotations: checksum/config: 488151c7f5d13aeb30ec3319e1506c535120a90d7ebe05df00ce04e9b8c58c9a checksum/sc-dashboard-provider-config: 593c0a8778b83f11fe80ccb21dfb20bc46705e2be3178df1dc4c89d164c8cd9c checksum/secret: 452770556521c37abb3f45d3ef4f47da17a847b18cb1347093ec52c4b0f2912f kubectl.kubernetes.io/default-container: grafana creationTimestamp: "2026-08-05T11:21:31Z" generateName: kube-prometheus-stack-grafana-785d44598c- labels: app.kubernetes.io/instance: kube-prometheus-stack app.kubernetes.io/name: grafana pod-template-hash: 785d44598c name: kube-prometheus-stack-grafana-785d44598c-ns4l7 namespace: monitoring ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: kube-prometheus-stack-grafana-785d44598c uid: 3cbb5b8d-59ab-48cd-b2e5-8bbad35b5627 resourceVersion: "4574" uid: d32b5851-4d50-4281-aea0-2fcd5a43414b spec: automountServiceAccountToken: true containers: - env: - name: METHOD value: WATCH - name: LABEL value: grafana_dashboard - name: LABEL_VALUE value: "1" - name: FOLDER value: /tmp/dashboards - name: RESOURCE value: both - name: NAMESPACE value: ALL - name: REQ_USERNAME valueFrom: secretKeyRef: key: admin-user name: kube-prometheus-stack-grafana - name: REQ_PASSWORD valueFrom: secretKeyRef: key: admin-password name: kube-prometheus-stack-grafana - name: REQ_URL value: http://localhost:3000/api/admin/provisioning/dashboards/reload - name: REQ_METHOD value: POST image: harbor.atmosphere.dev/quay.io/kiwigrid/k8s-sidecar:1.26.1 imagePullPolicy: IfNotPresent name: grafana-sc-dashboard resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL seccompProfile: type: RuntimeDefault terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /tmp/dashboards name: sc-dashboard-volume - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-x896z readOnly: true - env: - name: METHOD value: WATCH - name: LABEL value: grafana_datasource - name: LABEL_VALUE value: "1" - name: FOLDER value: /etc/grafana/provisioning/datasources - name: RESOURCE value: both - name: REQ_USERNAME valueFrom: secretKeyRef: key: admin-user name: kube-prometheus-stack-grafana - name: REQ_PASSWORD valueFrom: secretKeyRef: key: admin-password name: kube-prometheus-stack-grafana - name: REQ_URL value: http://localhost:3000/api/admin/provisioning/datasources/reload - name: REQ_METHOD value: POST image: harbor.atmosphere.dev/quay.io/kiwigrid/k8s-sidecar:1.26.1 imagePullPolicy: IfNotPresent name: grafana-sc-datasources resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL seccompProfile: type: RuntimeDefault terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/grafana/provisioning/datasources name: sc-datasources-volume - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-x896z readOnly: true - env: - name: POD_IP valueFrom: fieldRef: apiVersion: v1 fieldPath: status.podIP - name: GF_SECURITY_ADMIN_USER valueFrom: secretKeyRef: key: admin-user name: kube-prometheus-stack-grafana - name: GF_SECURITY_ADMIN_PASSWORD valueFrom: secretKeyRef: key: admin-password name: kube-prometheus-stack-grafana - name: GF_PATHS_DATA value: /var/lib/grafana/ - name: GF_PATHS_LOGS value: /var/log/grafana - name: GF_PATHS_PLUGINS value: /var/lib/grafana/plugins - name: GF_PATHS_PROVISIONING value: /etc/grafana/provisioning image: harbor.atmosphere.dev/docker.io/grafana/grafana:10.4.0 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 10 httpGet: path: /api/health port: 3000 scheme: HTTP initialDelaySeconds: 60 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 30 name: grafana ports: - containerPort: 3000 name: grafana protocol: TCP - containerPort: 9094 name: gossip-tcp protocol: TCP - containerPort: 9094 name: gossip-udp protocol: UDP readinessProbe: failureThreshold: 3 httpGet: path: /api/health port: 3000 scheme: HTTP periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: {} securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL seccompProfile: type: RuntimeDefault terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/grafana/grafana.ini name: config subPath: grafana.ini - mountPath: /var/lib/grafana name: storage - mountPath: /tmp/dashboards name: sc-dashboard-volume - mountPath: /etc/grafana/provisioning/dashboards/sc-dashboardproviders.yaml name: sc-dashboard-provider subPath: provider.yaml - mountPath: /etc/grafana/provisioning/datasources name: sc-datasources-volume - mountPath: /etc/secrets/auth_generic_oauth name: auth-generic-oauth-secret-mount readOnly: true - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-x896z readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true nodeName: instance nodeSelector: openstack-control-plane: enabled preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 472 runAsGroup: 472 runAsNonRoot: true runAsUser: 472 serviceAccount: kube-prometheus-stack-grafana serviceAccountName: kube-prometheus-stack-grafana terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - configMap: defaultMode: 420 name: kube-prometheus-stack-grafana name: config - emptyDir: {} name: storage - emptyDir: {} name: sc-dashboard-volume - configMap: defaultMode: 420 name: kube-prometheus-stack-grafana-config-dashboards name: sc-dashboard-provider - emptyDir: {} name: sc-datasources-volume - name: auth-generic-oauth-secret-mount secret: defaultMode: 288 secretName: kube-prometheus-stack-grafana-client-secret - name: kube-api-access-x896z projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2026-08-05T11:21:31Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-08-05T11:21:51Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-08-05T11:21:51Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-08-05T11:21:31Z" status: "True" type: PodScheduled containerStatuses: - containerID: containerd://3cae9e462eb6b27eaeccab01b82eaf439b864e751a86598cfe167a37ced50160 image: harbor.atmosphere.dev/docker.io/grafana/grafana:10.4.0 imageID: harbor.atmosphere.dev/docker.io/grafana/grafana@sha256:f9811e4e687ffecf1a43adb9b64096c50bc0d7a782f8608530f478b6542de7d5 lastState: {} name: grafana ready: true restartCount: 0 started: true state: running: startedAt: "2026-08-05T11:21:44Z" - containerID: containerd://52e458a06a70a81bf0a9c5b816f0838ad320f7b155846e5b6de88de08a4e8c8c image: harbor.atmosphere.dev/quay.io/kiwigrid/k8s-sidecar:1.26.1 imageID: harbor.atmosphere.dev/quay.io/kiwigrid/k8s-sidecar@sha256:b8d5067137fec093cf48670dc3a1dbb38f9e734f3a6683015c2e89a45db5fd16 lastState: {} name: grafana-sc-dashboard ready: true restartCount: 0 started: true state: running: startedAt: "2026-08-05T11:21:37Z" - containerID: containerd://964259069f4e6be8176361641768010d5a38d110b1dbca44757cd7e9482179e3 image: harbor.atmosphere.dev/quay.io/kiwigrid/k8s-sidecar:1.26.1 imageID: harbor.atmosphere.dev/quay.io/kiwigrid/k8s-sidecar@sha256:b8d5067137fec093cf48670dc3a1dbb38f9e734f3a6683015c2e89a45db5fd16 lastState: {} name: grafana-sc-datasources ready: true restartCount: 0 started: true state: running: startedAt: "2026-08-05T11:21:37Z" hostIP: 199.19.213.166 phase: Running podIP: 10.0.0.12 podIPs: - ip: 10.0.0.12 qosClass: BestEffort startTime: "2026-08-05T11:21:31Z"