Name:             keycloak-0
Namespace:        auth-system
Priority:         0
Service Account:  keycloak
Node:             instance/199.204.45.89
Start Time:       Tue, 23 Jun 2026 01:08:14 +0000
Labels:           app.kubernetes.io/component=keycloak
                  app.kubernetes.io/instance=keycloak
                  app.kubernetes.io/managed-by=Helm
                  app.kubernetes.io/name=keycloak
                  app.kubernetes.io/version=25.0.5
                  apps.kubernetes.io/pod-index=0
                  controller-revision-hash=keycloak-6fd58cfb55
                  helm.sh/chart=keycloak-22.2.3
                  statefulset.kubernetes.io/pod-name=keycloak-0
Annotations:      checksum/configmap-env-vars: 99809dcb096816b136baebcb7ed283ad2b5f676b8287ed3984e99548f022845b
                  checksum/secrets: ebfca3b17073585b5419c31023c3dbb11802f220ea4fea6d732711bc00f54851
Status:           Running
IP:               10.0.0.244
IPs:
  IP:           10.0.0.244
Controlled By:  StatefulSet/keycloak
Containers:
  keycloak:
    Container ID:    containerd://18e5a63b6252d4f18f6fcd1d85115d83f82f7fa0c1ac1b18679da0b3687a0489
    Image:           harbor.atmosphere.dev/quay.io/keycloak/keycloak@sha256:5fdbf2dbb5897cc34e82de49d13e23db011f9925089dbc555fc095f2c8bc1dac
    Image ID:        harbor.atmosphere.dev/quay.io/keycloak/keycloak@sha256:5fdbf2dbb5897cc34e82de49d13e23db011f9925089dbc555fc095f2c8bc1dac
    Ports:           8080/TCP, 7800/TCP, 9000/TCP
    Host Ports:      0/TCP, 0/TCP, 0/TCP
    SeccompProfile:  RuntimeDefault
    Command:
      /opt/keycloak/bin/kc.sh
      --verbose
      start
      --health-enabled=true
      --http-enabled=true
      --http-port=8080
      --proxy-headers=xforwarded
      --hostname-strict=false
      --spi-events-listener-jboss-logging-success-level=info
      --spi-events-listener-jboss-logging-error-level=warn
      --transaction-xa-enabled=false
      --metrics-enabled=true
    State:          Running
      Started:      Tue, 23 Jun 2026 01:08:31 +0000
    Ready:          True
    Restart Count:  0
    Limits:
      cpu:                750m
      ephemeral-storage:  2Gi
      memory:             768Mi
    Requests:
      cpu:                500m
      ephemeral-storage:  50Mi
      memory:             512Mi
    Liveness:             tcp-socket :http delay=300s timeout=5s period=1s #success=1 #failure=3
    Readiness:            http-get http://:http/realms/master delay=30s timeout=1s period=10s #success=1 #failure=3
    Startup:              http-get http://:http/ delay=5s timeout=1s period=5s #success=1 #failure=120
    Environment Variables from:
      keycloak-env-vars  ConfigMap  Optional: false
    Environment:
      KUBERNETES_NAMESPACE:         auth-system (v1:metadata.namespace)
      BITNAMI_DEBUG:                false
      KEYCLOAK_ADMIN_PASSWORD:      <set to the key 'admin-password' in secret 'keycloak'>          Optional: false
      KEYCLOAK_DATABASE_PASSWORD:   <set to the key 'db-password' in secret 'keycloak-externaldb'>  Optional: false
      KEYCLOAK_HTTP_RELATIVE_PATH:  /
      KC_SPI_ADMIN_REALM:           master
      KC_FEATURES:                  token-exchange,admin-fine-grained-authz
      KC_PROXY_HEADERS:             xforwarded
      KC_DB:                        mysql
      KC_DB_URL:                    jdbc:mysql://percona-xtradb-haproxy.openstack:3306/keycloak
      KC_DB_USERNAME:               keycloak
      KC_DB_PASSWORD:               <set to the key 'db-password' in secret 'keycloak-externaldb'>  Optional: false
    Mounts:
      /bitnami from empty-dir (rw,path="app-volume-dir")
      /opt/bitnami/keycloak/conf from empty-dir (rw,path="app-conf-dir")
      /opt/bitnami/keycloak/data from empty-dir (rw,path="app-data-dir")
      /opt/bitnami/keycloak/lib/quarkus from empty-dir (rw,path="app-quarkus-dir")
      /tmp from empty-dir (rw,path="tmp-dir")
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-xcmp2 (ro)
Conditions:
  Type              Status
  Initialized       True 
  Ready             True 
  ContainersReady   True 
  PodScheduled      True 
Volumes:
  empty-dir:
    Type:       EmptyDir (a temporary directory that shares a pod's lifetime)
    Medium:     
    SizeLimit:  <unset>
  kube-api-access-xcmp2:
    Type:                    Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:  3607
    ConfigMapName:           kube-root-ca.crt
    ConfigMapOptional:       <nil>
    DownwardAPI:             true
QoS Class:                   Burstable
Node-Selectors:              openstack-control-plane=enabled
Tolerations:                 node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                             node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
  Type     Reason     Age                    From               Message
  ----     ------     ----                   ----               -------
  Normal   Scheduled  11m                    default-scheduler  Successfully assigned auth-system/keycloak-0 to instance
  Normal   Pulling    11m                    kubelet            Pulling image "harbor.atmosphere.dev/quay.io/keycloak/keycloak@sha256:5fdbf2dbb5897cc34e82de49d13e23db011f9925089dbc555fc095f2c8bc1dac"
  Normal   Pulled     11m                    kubelet            Successfully pulled image "harbor.atmosphere.dev/quay.io/keycloak/keycloak@sha256:5fdbf2dbb5897cc34e82de49d13e23db011f9925089dbc555fc095f2c8bc1dac" in 16.563s (16.564s including waiting)
  Normal   Created    11m                    kubelet            Created container keycloak
  Normal   Started    11m                    kubelet            Started container keycloak
  Warning  Unhealthy  10m (x13 over 11m)     kubelet            Startup probe failed: Get "http://10.0.0.244:8080/": dial tcp 10.0.0.244:8080: connect: connection refused
  Warning  Unhealthy  9m25s (x8 over 9m59s)  kubelet            Startup probe failed: HTTP probe failed with statuscode: 503