Name:             logging-loki-gateway-7dbfd5bb68-zslxm
Namespace:        openshift-logging
Priority:         0
Service Account:  logging-loki-gateway
Node:             crc/192.168.126.11
Start Time:       Tue, 27 Jan 2026 12:41:27 +0000
Labels:           app.kubernetes.io/component=lokistack-gateway
                  app.kubernetes.io/created-by=lokistack-controller
                  app.kubernetes.io/instance=logging-loki
                  app.kubernetes.io/managed-by=lokistack-controller
                  app.kubernetes.io/name=lokistack
                  pod-template-hash=7dbfd5bb68
Annotations:      k8s.ovn.org/pod-networks:
                    {"default":{"ip_addresses":["10.217.0.56/23"],"mac_address":"0a:58:0a:d9:00:38","gateway_ips":["10.217.0.1"],"routes":[{"dest":"10.217.0.0...
                  k8s.v1.cni.cncf.io/network-status:
                    [{
                        "name": "ovn-kubernetes",
                        "interface": "eth0",
                        "ips": [
                            "10.217.0.56"
                        ],
                        "mac": "0a:58:0a:d9:00:38",
                        "default": true,
                        "dns": {}
                    }]
                  loki.grafana.com/certRotationRequiredAt: 
                  loki.grafana.com/config-hash: 3b1533055e6f900886e709df29a4af173a6fa652
                  openshift.io/scc: restricted-v2
                  seccomp.security.alpha.kubernetes.io/pod: runtime/default
Status:           Running
SeccompProfile:   RuntimeDefault
IP:               10.217.0.56
IPs:
  IP:           10.217.0.56
Controlled By:  ReplicaSet/logging-loki-gateway-7dbfd5bb68
Containers:
  gateway:
    Container ID:  cri-o://6491974a874cf8ed90ed51fe8e3721ee3f116fcd0e23821f46eba1f725e35eef
    Image:         registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:574afd46f23637b1685ddb00b647bb71d2e2d527611182fd2826bb818c5eb198
    Image ID:      registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:574afd46f23637b1685ddb00b647bb71d2e2d527611182fd2826bb818c5eb198
    Ports:         8081/TCP, 8080/TCP
    Host Ports:    0/TCP, 0/TCP
    Args:
      --debug.name=lokistack-gateway
      --web.listen=0.0.0.0:8080
      --web.internal.listen=0.0.0.0:8081
      --web.healthchecks.url=https://localhost:8080
      --log.level=warn
      --logs.read.endpoint=https://logging-loki-query-frontend-http.openshift-logging.svc.cluster.local:3100
      --logs.tail.endpoint=https://logging-loki-query-frontend-http.openshift-logging.svc.cluster.local:3100
      --logs.write.endpoint=https://logging-loki-distributor-http.openshift-logging.svc.cluster.local:3100
      --logs.write-timeout=4m0s
      --rbac.config=/etc/lokistack-gateway/rbac.yaml
      --tenants.config=/etc/lokistack-gateway/tenants.yaml
      --server.read-timeout=48s
      --server.write-timeout=6m0s
      --tls.client-auth-type=NoClientCert
      --tls.min-version=VersionTLS12
      --tls.server.cert-file=/var/run/tls/http/server/tls.crt
      --tls.server.key-file=/var/run/tls/http/server/tls.key
      --tls.healthchecks.server-ca-file=/var/run/ca/server/service-ca.crt
      --tls.healthchecks.server-name=logging-loki-gateway-http.openshift-logging.svc.cluster.local
      --tls.internal.server.cert-file=/var/run/tls/http/server/tls.crt
      --tls.internal.server.key-file=/var/run/tls/http/server/tls.key
      --tls.min-version=VersionTLS12
      --tls.cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
      --logs.tls.ca-file=/var/run/ca/upstream/service-ca.crt
      --logs.tls.cert-file=/var/run/tls/http/upstream/tls.crt
      --logs.tls.key-file=/var/run/tls/http/upstream/tls.key
      --logs.auth.extract-selectors=kubernetes_namespace_name
    State:          Running
      Started:      Tue, 27 Jan 2026 12:41:33 +0000
    Ready:          True
    Restart Count:  0
    Liveness:       http-get https://:8081/live delay=0s timeout=2s period=30s #success=1 #failure=10
    Readiness:      http-get https://:8081/ready delay=0s timeout=1s period=5s #success=1 #failure=12
    Environment:    <none>
    Mounts:
      /etc/lokistack-gateway/lokistack-gateway.rego from lokistack-gateway (ro,path="lokistack-gateway.rego")
      /etc/lokistack-gateway/rbac.yaml from rbac (ro,path="rbac.yaml")
      /etc/lokistack-gateway/tenants.yaml from tenants (ro,path="tenants.yaml")
      /var/run/ca/server from logging-loki-gateway-ca-bundle (ro)
      /var/run/ca/upstream from logging-loki-ca-bundle (ro)
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-wdqjr (ro)
      /var/run/tls/http/server from tls-secret (ro)
      /var/run/tls/http/upstream from logging-loki-gateway-client-http (ro)
  opa:
    Container ID:  cri-o://bcd6c9ae7fad6628e3ca996439485380ce56b7045ab75785800cf62ed860519b
    Image:         registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:182dc5ab627d64b5e565a2edb170903ac381fc534b4366fc5ffae088ea0de5e5
    Image ID:      registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:182dc5ab627d64b5e565a2edb170903ac381fc534b4366fc5ffae088ea0de5e5
    Ports:         8082/TCP, 8083/TCP
    Host Ports:    0/TCP, 0/TCP
    Args:
      --log.level=warn
      --web.listen=:8082
      --web.internal.listen=:8083
      --web.healthchecks.url=http://localhost:8082
      --opa.skip-tenants=audit,infrastructure
      --opa.package=lokistack
      --opa.admin-groups=system:cluster-admins,cluster-admin,dedicated-admin
      --opa.matcher=kubernetes_namespace_name
      --tls.internal.server.cert-file=/var/run/tls/http/server/tls.crt
      --tls.internal.server.key-file=/var/run/tls/http/server/tls.key
      --tls.min-version=VersionTLS12
      --tls.cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
      --openshift.mappings=application=loki.grafana.com
      --openshift.mappings=infrastructure=loki.grafana.com
      --openshift.mappings=audit=loki.grafana.com
    State:          Running
      Started:      Tue, 27 Jan 2026 12:41:35 +0000
    Ready:          True
    Restart Count:  0
    Liveness:       http-get https://:8083/live delay=0s timeout=2s period=30s #success=1 #failure=10
    Readiness:      http-get https://:8083/ready delay=0s timeout=1s period=5s #success=1 #failure=12
    Environment:    <none>
    Mounts:
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-wdqjr (ro)
      /var/run/tls/http/server from tls-secret (ro)
Conditions:
  Type                        Status
  PodReadyToStartContainers   True 
  Initialized                 True 
  Ready                       True 
  ContainersReady             True 
  PodScheduled                True 
Volumes:
  rbac:
    Type:      ConfigMap (a volume populated by a ConfigMap)
    Name:      logging-loki-gateway
    Optional:  false
  tenants:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  logging-loki-gateway
    Optional:    false
  lokistack-gateway:
    Type:      ConfigMap (a volume populated by a ConfigMap)
    Name:      logging-loki-gateway
    Optional:  false
  tls-secret:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  logging-loki-gateway-http
    Optional:    false
  logging-loki-gateway-client-http:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  logging-loki-gateway-client-http
    Optional:    false
  logging-loki-ca-bundle:
    Type:      ConfigMap (a volume populated by a ConfigMap)
    Name:      logging-loki-ca-bundle
    Optional:  false
  logging-loki-gateway-ca-bundle:
    Type:      ConfigMap (a volume populated by a ConfigMap)
    Name:      logging-loki-gateway-ca-bundle
    Optional:  false
  kube-api-access-wdqjr:
    Type:                    Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:  3607
    ConfigMapName:           kube-root-ca.crt
    ConfigMapOptional:       <nil>
    DownwardAPI:             true
    ConfigMapName:           openshift-service-ca.crt
    ConfigMapOptional:       <nil>
QoS Class:                   BestEffort
Node-Selectors:              <none>
Tolerations:                 node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                             node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
  Type     Reason          Age   From               Message
  ----     ------          ----  ----               -------
  Normal   Scheduled       86m   default-scheduler  Successfully assigned openshift-logging/logging-loki-gateway-7dbfd5bb68-zslxm to crc
  Warning  FailedMount     86m   kubelet            MountVolume.SetUp failed for volume "tls-secret" : secret "logging-loki-gateway-http" not found
  Normal   AddedInterface  86m   multus             Add eth0 [10.217.0.56/23] from ovn-kubernetes
  Normal   Pulling         86m   kubelet            Pulling image "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:574afd46f23637b1685ddb00b647bb71d2e2d527611182fd2826bb818c5eb198"
  Normal   Pulled          86m   kubelet            Successfully pulled image "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:574afd46f23637b1685ddb00b647bb71d2e2d527611182fd2826bb818c5eb198" in 4.073s (4.073s including waiting). Image size: 180263561 bytes.
  Normal   Created         86m   kubelet            Created container gateway
  Normal   Started         86m   kubelet            Started container gateway
  Normal   Pulling         86m   kubelet            Pulling image "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:182dc5ab627d64b5e565a2edb170903ac381fc534b4366fc5ffae088ea0de5e5"
  Warning  Unhealthy       86m   kubelet            Readiness probe failed: Get "https://10.217.0.56:8083/ready": dial tcp 10.217.0.56:8083: connect: connection refused
  Normal   Started         86m   kubelet            Started container opa
  Warning  ProbeError      86m   kubelet            Readiness probe error: Get "https://10.217.0.56:8083/ready": dial tcp 10.217.0.56:8083: connect: connection refused
body:
  Normal   Pulled      86m    kubelet  Successfully pulled image "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:182dc5ab627d64b5e565a2edb170903ac381fc534b4366fc5ffae088ea0de5e5" in 2.015s (2.015s including waiting). Image size: 160768505 bytes.
  Normal   Created     86m    kubelet  Created container opa
  Warning  ProbeError  7m36s  kubelet  Readiness probe error: Get "https://10.217.0.56:8083/ready": context deadline exceeded
body:
  Warning  Unhealthy   7m36s  kubelet  Readiness probe failed: Get "https://10.217.0.56:8083/ready": context deadline exceeded
  Warning  ProbeError  7m36s  kubelet  Readiness probe error: Get "https://10.217.0.56:8081/ready": context deadline exceeded
body:
  Warning  Unhealthy   7m36s                  kubelet  Readiness probe failed: Get "https://10.217.0.56:8081/ready": context deadline exceeded
  Warning  ProbeError  7m26s (x2 over 7m41s)  kubelet  Readiness probe error: Get "https://10.217.0.56:8083/ready": net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)
body:
  Warning  Unhealthy   7m26s (x2 over 7m41s)  kubelet  Readiness probe failed: Get "https://10.217.0.56:8083/ready": net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)
  Warning  ProbeError  7m21s (x2 over 7m46s)  kubelet  Readiness probe error: Get "https://10.217.0.56:8083/ready": net/http: request canceled (Client.Timeout exceeded while awaiting headers)
body:
  Warning  Unhealthy   7m21s (x2 over 7m46s)  kubelet  Readiness probe failed: Get "https://10.217.0.56:8083/ready": net/http: request canceled (Client.Timeout exceeded while awaiting headers)
  Warning  ProbeError  7m21s (x2 over 7m31s)  kubelet  Readiness probe error: Get "https://10.217.0.56:8081/ready": net/http: request canceled (Client.Timeout exceeded while awaiting headers)
body:
  Warning  Unhealthy   7m21s (x2 over 7m31s)  kubelet  Readiness probe failed: Get "https://10.217.0.56:8081/ready": net/http: request canceled (Client.Timeout exceeded while awaiting headers)
  Warning  ProbeError  7m20s                  kubelet  Liveness probe error: Get "https://10.217.0.56:8083/live": net/http: request canceled (Client.Timeout exceeded while awaiting headers)
body:
  Warning  Unhealthy  7m20s  kubelet  Liveness probe failed: Get "https://10.217.0.56:8083/live": net/http: request canceled (Client.Timeout exceeded while awaiting headers)
