Name:               keycloak
Namespace:          auth-system
CreationTimestamp:  Fri, 17 Jul 2026 05:35:38 +0000
Selector:           app=keycloak,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator
Labels:             app=keycloak
                    app.kubernetes.io/instance=keycloak
                    app.kubernetes.io/managed-by=keycloak-operator
Annotations:        operator.keycloak.org/migrating: false
                    operator.keycloak.org/update-hash: e02976ff5292c73354e7f57f17fb4131aee30eea6caea96e71e43c86a3d97610
                    operator.keycloak.org/watching-secrets: true
Replicas:           1 desired | 1 total
Update Strategy:    RollingUpdate
  Partition:        0
Pods Status:        1 Running / 0 Waiting / 0 Succeeded / 0 Failed
Pod Template:
  Labels:       app=keycloak
                app.kubernetes.io/component=server
                app.kubernetes.io/instance=keycloak
                app.kubernetes.io/managed-by=keycloak-operator
  Annotations:  operator.keycloak.org/watched-secret-hash: 978f40908b6a21cc003f8620345d9061af843886d3ff61ca8a47935d6b197b1
  Containers:
   keycloak:
    Image:       harbor.atmosphere.dev/quay.io/keycloak/keycloak:26.6.4
    Ports:       8443/TCP, 8080/TCP, 9000/TCP
    Host Ports:  0/TCP, 0/TCP, 0/TCP
    Args:
      -Djgroups.bind.address=$(POD_IP)
      --verbose
      start
    Limits:
      memory:  2Gi
    Requests:
      memory:   1700Mi
    Liveness:   http-get http://:9000/health/live delay=0s timeout=1s period=10s #success=1 #failure=3
    Readiness:  http-get http://:9000/health/ready delay=0s timeout=1s period=10s #success=1 #failure=3
    Startup:    http-get http://:9000/health/started delay=0s timeout=1s period=1s #success=1 #failure=600
    Environment:
      KC_HOSTNAME_STRICT:                                     false
      KC_FEATURES:                                            token-exchange
      KC_TRANSACTION_XA_ENABLED:                              false
      KC_HTTP_ENABLED:                                        true
      KC_HTTP_PORT:                                           8080
      KC_HTTPS_PORT:                                          8443
      KC_DB:                                                  postgres
      KC_DB_USERNAME:                                         <set to the key 'username' in secret 'keycloak-db-user'>  Optional: false
      KC_DB_PASSWORD:                                         <set to the key 'password' in secret 'keycloak-db-user'>  Optional: false
      KC_DB_URL_HOST:                                         keycloak-db-rw
      KC_PROXY_HEADERS:                                       xforwarded
      KC_BOOTSTRAP_ADMIN_USERNAME:                            <set to the key 'username' in secret 'keycloak-admin'>  Optional: false
      KC_BOOTSTRAP_ADMIN_PASSWORD:                            <set to the key 'password' in secret 'keycloak-admin'>  Optional: false
      KC_HEALTH_ENABLED:                                      true
      KC_CACHE:                                               ispn
      KC_METRICS_ENABLED:                                     true
      KCKEY_METRICS_ENABLED:                                  metrics-enabled
      KC_SPI_EVENTS_LISTENER_JBOSS_LOGGING_SUCCESS_LEVEL:     info
      KCKEY_SPI_EVENTS_LISTENER_JBOSS_LOGGING_SUCCESS_LEVEL:  spi-events-listener-jboss-logging-success-level
      KC_SPI_EVENTS_LISTENER_JBOSS_LOGGING_ERROR_LEVEL:       warn
      KCKEY_SPI_EVENTS_LISTENER_JBOSS_LOGGING_ERROR_LEVEL:    spi-events-listener-jboss-logging-error-level
      POD_IP:                                                  (v1:status.podIP)
      KC_SPI_CACHE_EMBEDDED_DEFAULT_MACHINE_NAME:              (v1:spec.nodeName)
      KC_TELEMETRY_SERVICE_NAME:                              keycloak
      KC_TELEMETRY_RESOURCE_ATTRIBUTES:                       k8s.namespace.name=auth-system
    Mounts:                                                   <none>
  Volumes:                                                    <none>
  Topology Spread Constraints:                                kubernetes.io/hostname:ScheduleAnyway when max skew 1 is exceeded for selector app=keycloak,app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator
                                                              topology.kubernetes.io/zone:ScheduleAnyway when max skew 1 is exceeded for selector app=keycloak,app.kubernetes.io/component=server,app.kubernetes.io/instance=keycloak,app.kubernetes.io/managed-by=keycloak-operator
Volume Claims:                                                <none>
Events:
  Type    Reason            Age   From                    Message
  ----    ------            ----  ----                    -------
  Normal  SuccessfulCreate  36s   statefulset-controller  create Pod keycloak-0 in StatefulSet keycloak successful