Name:             logging-loki-gateway-5f9bf547f9-nd7jd
Namespace:        openshift-logging
Priority:         0
Service Account:  logging-loki-gateway
Node:             crc/192.168.126.11
Start Time:       Wed, 18 Feb 2026 14:11:22 +0000
Labels:           app.kubernetes.io/component=lokistack-gateway
                  app.kubernetes.io/created-by=lokistack-controller
                  app.kubernetes.io/instance=logging-loki
                  app.kubernetes.io/managed-by=lokistack-controller
                  app.kubernetes.io/name=lokistack
                  pod-template-hash=5f9bf547f9
Annotations:      k8s.ovn.org/pod-networks:
                    {"default":{"ip_addresses":["10.217.0.53/23"],"mac_address":"0a:58:0a:d9:00:35","gateway_ips":["10.217.0.1"],"routes":[{"dest":"10.217.0.0...
                  k8s.v1.cni.cncf.io/network-status:
                    [{
                        "name": "ovn-kubernetes",
                        "interface": "eth0",
                        "ips": [
                            "10.217.0.53"
                        ],
                        "mac": "0a:58:0a:d9:00:35",
                        "default": true,
                        "dns": {}
                    }]
                  loki.grafana.com/certRotationRequiredAt: 
                  loki.grafana.com/config-hash: 8e7caff12e795b7b3dbf5710c945fa252374dbb3
                  openshift.io/scc: restricted-v2
                  seccomp.security.alpha.kubernetes.io/pod: runtime/default
Status:           Running
SeccompProfile:   RuntimeDefault
IP:               10.217.0.53
IPs:
  IP:           10.217.0.53
Controlled By:  ReplicaSet/logging-loki-gateway-5f9bf547f9
Containers:
  gateway:
    Container ID:  cri-o://b02d91b1e269c801a1c546132c606efaf1c5c70268928a72a09b5b15ae12b22d
    Image:         registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:0460d39f2624e731821734a679b0235240dc8e107a1986acc8197ab377f628ed
    Image ID:      registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:0460d39f2624e731821734a679b0235240dc8e107a1986acc8197ab377f628ed
    Ports:         8081/TCP, 8080/TCP
    Host Ports:    0/TCP, 0/TCP
    Args:
      --debug.name=lokistack-gateway
      --web.listen=0.0.0.0:8080
      --web.internal.listen=0.0.0.0:8081
      --web.healthchecks.url=https://localhost:8080
      --log.level=warn
      --logs.read.endpoint=https://logging-loki-query-frontend-http.openshift-logging.svc.cluster.local:3100
      --logs.tail.endpoint=https://logging-loki-query-frontend-http.openshift-logging.svc.cluster.local:3100
      --logs.write.endpoint=https://logging-loki-distributor-http.openshift-logging.svc.cluster.local:3100
      --logs.write-timeout=4m0s
      --rbac.config=/etc/lokistack-gateway/rbac.yaml
      --tenants.config=/etc/lokistack-gateway/tenants.yaml
      --server.read-timeout=48s
      --server.write-timeout=6m0s
      --tls.client-auth-type=NoClientCert
      --tls.min-version=VersionTLS12
      --tls.server.cert-file=/var/run/tls/http/server/tls.crt
      --tls.server.key-file=/var/run/tls/http/server/tls.key
      --tls.healthchecks.server-ca-file=/var/run/ca/server/service-ca.crt
      --tls.healthchecks.server-name=logging-loki-gateway-http.openshift-logging.svc.cluster.local
      --tls.internal.server.cert-file=/var/run/tls/http/server/tls.crt
      --tls.internal.server.key-file=/var/run/tls/http/server/tls.key
      --tls.min-version=VersionTLS12
      --tls.cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
      --logs.tls.ca-file=/var/run/ca/upstream/service-ca.crt
      --logs.tls.cert-file=/var/run/tls/http/upstream/tls.crt
      --logs.tls.key-file=/var/run/tls/http/upstream/tls.key
      --logs.auth.extract-selectors=kubernetes_namespace_name
    State:          Running
      Started:      Wed, 18 Feb 2026 14:11:28 +0000
    Ready:          True
    Restart Count:  0
    Liveness:       http-get https://:8081/live delay=0s timeout=2s period=30s #success=1 #failure=10
    Readiness:      http-get https://:8081/ready delay=0s timeout=1s period=5s #success=1 #failure=12
    Environment:    <none>
    Mounts:
      /etc/lokistack-gateway/lokistack-gateway.rego from lokistack-gateway (ro,path="lokistack-gateway.rego")
      /etc/lokistack-gateway/rbac.yaml from rbac (ro,path="rbac.yaml")
      /etc/lokistack-gateway/tenants.yaml from tenants (ro,path="tenants.yaml")
      /var/run/ca/server from logging-loki-gateway-ca-bundle (ro)
      /var/run/ca/upstream from logging-loki-ca-bundle (ro)
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-tkww7 (ro)
      /var/run/tls/http/server from tls-secret (ro)
      /var/run/tls/http/upstream from logging-loki-gateway-client-http (ro)
  opa:
    Container ID:  cri-o://3742d5b78014809eaa56cf845ee9ae4816d365c82219869773ab5acbcde93dfc
    Image:         registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:13cd0be568d2cac6058c41fb774f1baafc03dc696d57d0eaa612db681818653d
    Image ID:      registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:13cd0be568d2cac6058c41fb774f1baafc03dc696d57d0eaa612db681818653d
    Ports:         8082/TCP, 8083/TCP
    Host Ports:    0/TCP, 0/TCP
    Args:
      --log.level=warn
      --web.listen=:8082
      --web.internal.listen=:8083
      --web.healthchecks.url=http://localhost:8082
      --opa.skip-tenants=audit,infrastructure
      --opa.package=lokistack
      --opa.admin-groups=system:cluster-admins,cluster-admin,dedicated-admin
      --opa.matcher=kubernetes_namespace_name
      --tls.internal.server.cert-file=/var/run/tls/http/server/tls.crt
      --tls.internal.server.key-file=/var/run/tls/http/server/tls.key
      --tls.min-version=VersionTLS12
      --tls.cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
      --openshift.mappings=application=loki.grafana.com
      --openshift.mappings=infrastructure=loki.grafana.com
      --openshift.mappings=audit=loki.grafana.com
    State:          Running
      Started:      Wed, 18 Feb 2026 14:11:30 +0000
    Ready:          True
    Restart Count:  0
    Liveness:       http-get https://:8083/live delay=0s timeout=2s period=30s #success=1 #failure=10
    Readiness:      http-get https://:8083/ready delay=0s timeout=1s period=5s #success=1 #failure=12
    Environment:    <none>
    Mounts:
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-tkww7 (ro)
      /var/run/tls/http/server from tls-secret (ro)
Conditions:
  Type                        Status
  PodReadyToStartContainers   True 
  Initialized                 True 
  Ready                       True 
  ContainersReady             True 
  PodScheduled                True 
Volumes:
  rbac:
    Type:      ConfigMap (a volume populated by a ConfigMap)
    Name:      logging-loki-gateway
    Optional:  false
  tenants:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  logging-loki-gateway
    Optional:    false
  lokistack-gateway:
    Type:      ConfigMap (a volume populated by a ConfigMap)
    Name:      logging-loki-gateway
    Optional:  false
  tls-secret:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  logging-loki-gateway-http
    Optional:    false
  logging-loki-gateway-client-http:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  logging-loki-gateway-client-http
    Optional:    false
  logging-loki-ca-bundle:
    Type:      ConfigMap (a volume populated by a ConfigMap)
    Name:      logging-loki-ca-bundle
    Optional:  false
  logging-loki-gateway-ca-bundle:
    Type:      ConfigMap (a volume populated by a ConfigMap)
    Name:      logging-loki-gateway-ca-bundle
    Optional:  false
  kube-api-access-tkww7:
    Type:                    Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:  3607
    ConfigMapName:           kube-root-ca.crt
    ConfigMapOptional:       <nil>
    DownwardAPI:             true
    ConfigMapName:           openshift-service-ca.crt
    ConfigMapOptional:       <nil>
QoS Class:                   BestEffort
Node-Selectors:              <none>
Tolerations:                 node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                             node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
  Type     Reason          Age    From               Message
  ----     ------          ----   ----               -------
  Normal   Scheduled       72m    default-scheduler  Successfully assigned openshift-logging/logging-loki-gateway-5f9bf547f9-nd7jd to crc
  Normal   AddedInterface  72m    multus             Add eth0 [10.217.0.53/23] from ovn-kubernetes
  Normal   Pulling         72m    kubelet            Pulling image "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:0460d39f2624e731821734a679b0235240dc8e107a1986acc8197ab377f628ed"
  Normal   Pulled          72m    kubelet            Successfully pulled image "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:0460d39f2624e731821734a679b0235240dc8e107a1986acc8197ab377f628ed" in 4.91s (4.91s including waiting). Image size: 174532765 bytes.
  Normal   Created         72m    kubelet            Created container gateway
  Normal   Started         72m    kubelet            Started container gateway
  Normal   Pulling         72m    kubelet            Pulling image "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:13cd0be568d2cac6058c41fb774f1baafc03dc696d57d0eaa612db681818653d"
  Normal   Pulled          72m    kubelet            Successfully pulled image "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:13cd0be568d2cac6058c41fb774f1baafc03dc696d57d0eaa612db681818653d" in 1.844s (1.844s including waiting). Image size: 160762347 bytes.
  Normal   Created         72m    kubelet            Created container opa
  Normal   Started         72m    kubelet            Started container opa
  Warning  Unhealthy       6m51s  kubelet            Liveness probe failed: Get "https://10.217.0.53:8083/live": net/http: request canceled (Client.Timeout exceeded while awaiting headers)
  Warning  ProbeError      6m51s  kubelet            Liveness probe error: Get "https://10.217.0.53:8083/live": net/http: request canceled (Client.Timeout exceeded while awaiting headers)
body:
  Warning  ProbeError  6m42s  kubelet  Readiness probe error: Get "https://10.217.0.53:8081/ready": net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)
body:
  Warning  Unhealthy   6m42s  kubelet  Readiness probe failed: Get "https://10.217.0.53:8081/ready": net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)
  Warning  ProbeError  6m37s  kubelet  Readiness probe error: Get "https://10.217.0.53:8083/ready": context deadline exceeded
body:
  Warning  Unhealthy   6m37s                  kubelet  Readiness probe failed: Get "https://10.217.0.53:8083/ready": context deadline exceeded
  Warning  ProbeError  6m32s (x2 over 6m47s)  kubelet  Readiness probe error: Get "https://10.217.0.53:8083/ready": net/http: request canceled (Client.Timeout exceeded while awaiting headers)
body:
  Warning  Unhealthy   6m32s (x2 over 6m47s)  kubelet  Readiness probe failed: Get "https://10.217.0.53:8083/ready": net/http: request canceled (Client.Timeout exceeded while awaiting headers)
  Warning  Unhealthy   6m27s (x3 over 6m57s)  kubelet  Readiness probe failed: Get "https://10.217.0.53:8081/ready": net/http: request canceled (Client.Timeout exceeded while awaiting headers)
  Warning  ProbeError  6m27s (x3 over 6m52s)  kubelet  Readiness probe error: Get "https://10.217.0.53:8083/ready": net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)
body:
  Warning  Unhealthy   6m27s (x3 over 6m52s)  kubelet  Readiness probe failed: Get "https://10.217.0.53:8083/ready": net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)
  Warning  ProbeError  6m27s (x3 over 6m57s)  kubelet  Readiness probe error: Get "https://10.217.0.53:8081/ready": net/http: request canceled (Client.Timeout exceeded while awaiting headers)
body:
