Name:             keycloak-0
Namespace:        auth-system
Priority:         0
Service Account:  default
Node:             instance/199.204.45.4
Start Time:       Fri, 17 Jul 2026 05:35:38 +0000
Labels:           app=keycloak
                  app.kubernetes.io/component=server
                  app.kubernetes.io/instance=keycloak
                  app.kubernetes.io/managed-by=keycloak-operator
                  apps.kubernetes.io/pod-index=0
                  controller-revision-hash=keycloak-65dcbc949b
                  statefulset.kubernetes.io/pod-name=keycloak-0
Annotations:      operator.keycloak.org/watched-secret-hash: 978f40908b6a21cc003f8620345d9061af843886d3ff61ca8a47935d6b197b1
Status:           Running
IP:               10.0.0.156
IPs:
  IP:           10.0.0.156
Controlled By:  StatefulSet/keycloak
Containers:
  keycloak:
    Container ID:  containerd://bddae6f45c10b1efaf727b40c08b55bb3101c09ff9e0e61c1c7ed774ef12ef7a
    Image:         harbor.atmosphere.dev/quay.io/keycloak/keycloak:26.6.4
    Image ID:      harbor.atmosphere.dev/quay.io/keycloak/keycloak@sha256:0aae0de7fca85525f727d3354df17896092de8bb26ae4c12d89c77e5df8cbce4
    Ports:         8443/TCP, 8080/TCP, 9000/TCP
    Host Ports:    0/TCP, 0/TCP, 0/TCP
    Args:
      -Djgroups.bind.address=$(POD_IP)
      --verbose
      start
    State:          Running
      Started:      Fri, 17 Jul 2026 05:35:45 +0000
    Ready:          False
    Restart Count:  0
    Limits:
      memory:  2Gi
    Requests:
      memory:   1700Mi
    Liveness:   http-get http://:9000/health/live delay=0s timeout=1s period=10s #success=1 #failure=3
    Readiness:  http-get http://:9000/health/ready delay=0s timeout=1s period=10s #success=1 #failure=3
    Startup:    http-get http://:9000/health/started delay=0s timeout=1s period=1s #success=1 #failure=600
    Environment:
      KC_HOSTNAME_STRICT:                                     false
      KC_FEATURES:                                            token-exchange
      KC_TRANSACTION_XA_ENABLED:                              false
      KC_HTTP_ENABLED:                                        true
      KC_HTTP_PORT:                                           8080
      KC_HTTPS_PORT:                                          8443
      KC_DB:                                                  postgres
      KC_DB_USERNAME:                                         <set to the key 'username' in secret 'keycloak-db-user'>  Optional: false
      KC_DB_PASSWORD:                                         <set to the key 'password' in secret 'keycloak-db-user'>  Optional: false
      KC_DB_URL_HOST:                                         keycloak-db-rw
      KC_PROXY_HEADERS:                                       xforwarded
      KC_BOOTSTRAP_ADMIN_USERNAME:                            <set to the key 'username' in secret 'keycloak-admin'>  Optional: false
      KC_BOOTSTRAP_ADMIN_PASSWORD:                            <set to the key 'password' in secret 'keycloak-admin'>  Optional: false
      KC_HEALTH_ENABLED:                                      true
      KC_CACHE:                                               ispn
      KC_METRICS_ENABLED:                                     true
      KCKEY_METRICS_ENABLED:                                  metrics-enabled
      KC_SPI_EVENTS_LISTENER_JBOSS_LOGGING_SUCCESS_LEVEL:     info
      KCKEY_SPI_EVENTS_LISTENER_JBOSS_LOGGING_SUCCESS_LEVEL:  spi-events-listener-jboss-logging-success-level
      KC_SPI_EVENTS_LISTENER_JBOSS_LOGGING_ERROR_LEVEL:       warn
      KCKEY_SPI_EVENTS_LISTENER_JBOSS_LOGGING_ERROR_LEVEL:    spi-events-listener-jboss-logging-error-level
      POD_IP:                                                  (v1:status.podIP)
      KC_SPI_CACHE_EMBEDDED_DEFAULT_MACHINE_NAME:              (v1:spec.nodeName)
      KC_TELEMETRY_SERVICE_NAME:                              keycloak
      KC_TELEMETRY_RESOURCE_ATTRIBUTES:                       k8s.namespace.name=auth-system
    Mounts:
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-snkmn (ro)
Conditions:
  Type              Status
  Initialized       True 
  Ready             False 
  ContainersReady   False 
  PodScheduled      True 
Volumes:
  kube-api-access-snkmn:
    Type:                     Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:   3607
    ConfigMapName:            kube-root-ca.crt
    ConfigMapOptional:        <nil>
    DownwardAPI:              true
QoS Class:                    Burstable
Node-Selectors:               <none>
Tolerations:                  node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                              node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Topology Spread Constraints:  kubernetes.io/hostname:ScheduleAnyway when max skew 1 is exceeded for selector app=keycloak,app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator
                              topology.kubernetes.io/zone:ScheduleAnyway when max skew 1 is exceeded for selector app=keycloak,app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator
Events:
  Type     Reason     Age                From               Message
  ----     ------     ----               ----               -------
  Normal   Scheduled  32s                default-scheduler  Successfully assigned auth-system/keycloak-0 to instance
  Normal   Pulling    32s                kubelet            Pulling image "harbor.atmosphere.dev/quay.io/keycloak/keycloak:26.6.4"
  Normal   Pulled     25s                kubelet            Successfully pulled image "harbor.atmosphere.dev/quay.io/keycloak/keycloak:26.6.4" in 6.645s (6.645s including waiting)
  Normal   Created    25s                kubelet            Created container keycloak
  Normal   Started    25s                kubelet            Started container keycloak
  Warning  Unhealthy  8s (x17 over 24s)  kubelet            Startup probe failed: Get "http://10.0.0.156:9000/health/started": dial tcp 10.0.0.156:9000: connect: connection refused
  Warning  Unhealthy  2s (x2 over 7s)    kubelet            Readiness probe failed: HTTP probe failed with statuscode: 503