name: argocd-dex-server-6c588b4db8-xb9x2
generateName: argocd-dex-server-6c588b4db8-
namespace: argocd
uid: c86273ac-0108-42c6-9d78-3d5fe9b8314e
resourceVersion: '34197310'
creationTimestamp: '2024-08-19T00:53:28Z'
labels:
  app.kubernetes.io/name: argocd-dex-server
  pod-template-hash: 6c588b4db8
ownerReferences:
  - apiVersion: apps/v1
    kind: ReplicaSet
    name: argocd-dex-server-6c588b4db8
    uid: c5574250-28aa-409c-a818-b03a3aac4386
    controller: true
    blockOwnerDeletion: true

- name: dex
  image: ghcr.io/dexidp/dex:v2.38.0
  command:
    - /shared/argocd-dex
    - rundex
  ports:
    - containerPort: 5556
      protocol: TCP
    - containerPort: 5557
      protocol: TCP
    - containerPort: 5558
      protocol: TCP
  env:
    - name: ARGOCD_DEX_SERVER_DISABLE_TLS
      valueFrom:
        configMapKeyRef:
          name: argocd-cmd-params-cm
          key: dexserver.disable.tls
          optional: true
  resources: {}
  volumeMounts:
    - name: static-files
      mountPath: /shared
    - name: dexconfig
      mountPath: /tmp
    - name: argocd-dex-server-tls
      mountPath: /tls
    - name: kube-api-access-kdqrx
      readOnly: true
      mountPath: /var/run/secrets/kubernetes.io/serviceaccount
  terminationMessagePath: /dev/termination-log
  terminationMessagePolicy: File
  imagePullPolicy: Always
  securityContext:
    capabilities:
      drop:
        - ALL
    runAsNonRoot: true
    readOnlyRootFilesystem: true
    allowPrivilegeEscalation: false
    seccompProfile:
      type: RuntimeDefault

volumes:
  - name: static-files
    emptyDir: {}
  - name: dexconfig
    emptyDir: {}
  - name: argocd-dex-server-tls
    secret:
      secretName: argocd-dex-server-tls
      items:
        - key: tls.crt
          path: tls.crt
        - key: tls.key
          path: tls.key
        - key: ca.crt
          path: ca.crt
      defaultMode: 420
      optional: true
  - name: kube-api-access-kdqrx
    projected:
      sources:
        - serviceAccountToken:
            expirationSeconds: 3607
            path: token
        - configMap:
            name: kube-root-ca.crt
            items:
              - key: ca.crt
                path: ca.crt
        - downwardAPI:
            items:
              - path: namespace
                fieldRef:
                  apiVersion: v1
                  fieldPath: metadata.namespace
      defaultMode: 420
initContainers:
  - name: copyutil
    image: quay.io/argoproj/argocd:v2.12.1
    command:
      - /bin/cp
      - '-n'
      - /usr/local/bin/argocd
      - /shared/argocd-dex
    resources: {}
    volumeMounts:
      - name: static-files
        mountPath: /shared
      - name: dexconfig
        mountPath: /tmp
      - name: kube-api-access-kdqrx
        readOnly: true
        mountPath: /var/run/secrets/kubernetes.io/serviceaccount
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    imagePullPolicy: Always
    securityContext:
      capabilities:
        drop:
          - ALL
      runAsNonRoot: true
      readOnlyRootFilesystem: true
      allowPrivilegeEscalation: false
      seccompProfile:
        type: RuntimeDefault
containers:
  - name: dex
    image: ghcr.io/dexidp/dex:v2.38.0
    command:
      - /shared/argocd-dex
      - rundex
    ports:
      - containerPort: 5556
        protocol: TCP
      - containerPort: 5557
        protocol: TCP
      - containerPort: 5558
        protocol: TCP
    env:
      - name: ARGOCD_DEX_SERVER_DISABLE_TLS
        valueFrom:
          configMapKeyRef:
            name: argocd-cmd-params-cm
            key: dexserver.disable.tls
            optional: true
    resources: {}
    volumeMounts:
      - name: static-files
        mountPath: /shared
      - name: dexconfig
        mountPath: /tmp
      - name: argocd-dex-server-tls
        mountPath: /tls
      - name: kube-api-access-kdqrx
        readOnly: true
        mountPath: /var/run/secrets/kubernetes.io/serviceaccount
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    imagePullPolicy: Always
    securityContext:
      capabilities:
        drop:
          - ALL
      runAsNonRoot: true
      readOnlyRootFilesystem: true
      allowPrivilegeEscalation: false
      seccompProfile:
        type: RuntimeDefault
restartPolicy: Always
terminationGracePeriodSeconds: 30
dnsPolicy: ClusterFirst
serviceAccountName: argocd-dex-server
serviceAccount: argocd-dex-server
nodeName: system-0-bf7s0
securityContext: {}
affinity:
  podAntiAffinity:
    preferredDuringSchedulingIgnoredDuringExecution:
      - weight: 5
        podAffinityTerm:
          labelSelector:
            matchLabels:
              app.kubernetes.io/part-of: argocd
          topologyKey: kubernetes.io/hostname
schedulerName: default-scheduler
tolerations:
  - key: node.kubernetes.io/not-ready
    operator: Exists
    effect: NoExecute
    tolerationSeconds: 300
  - key: node.kubernetes.io/unreachable
    operator: Exists
    effect: NoExecute
    tolerationSeconds: 300
priority: 0
enableServiceLinks: true
preemptionPolicy: PreemptLowerPriority

phase: Running
conditions:
  - type: Initialized
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2024-08-19T00:53:39Z'
  - type: Ready
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2024-08-19T00:54:02Z'
  - type: ContainersReady
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2024-08-19T00:54:02Z'
  - type: PodScheduled
    status: 'True'
    lastProbeTime: null
    lastTransitionTime: '2024-08-19T00:53:28Z'
hostIP: 10.108.0.2
podIP: 10.244.0.189
podIPs:
  - ip: 10.244.0.189
startTime: '2024-08-19T00:53:28Z'
initContainerStatuses:
  - name: copyutil
    state:
      terminated:
        exitCode: 0
        reason: Completed
        startedAt: '2024-08-19T00:53:38Z'
        finishedAt: '2024-08-19T00:53:38Z'
        containerID: >-
          containerd://f570457621707884477ec238b374f7e25a3b73fb020e8ac1b32b6001118c9dc7
    lastState: {}
    ready: true
    restartCount: 0
    image: quay.io/argoproj/argocd:v2.12.1
    imageID: >-
      quay.io/argoproj/argocd@sha256:a0ebfa7d419a1c78babc80fc77de093751d8a5fabffcaf3f7e81a4d55a23cc0d
    containerID: >-
      containerd://f570457621707884477ec238b374f7e25a3b73fb020e8ac1b32b6001118c9dc7
    started: false
containerStatuses:
  - name: dex
    state:
      running:
        startedAt: '2024-08-19T00:54:01Z'
    lastState:
      terminated:
        exitCode: 20
        reason: Error
        startedAt: '2024-08-19T00:53:44Z'
        finishedAt: '2024-08-19T00:53:45Z'
        containerID: >-
          containerd://8df11b60ac1af1ce68b7f87857a28a9337f7169463b8a4bd8b3c8ed218c0ffdd
    ready: true
    restartCount: 2
    image: ghcr.io/dexidp/dex:v2.38.0
    imageID: >-
      ghcr.io/dexidp/dex@sha256:b1d793440a98d7ecde7fa5dbc8cee1204ef0e8918d9e51ef6201f50d12d55925
    containerID: >-
      containerd://db34f880a28d14d3be56c878c10f1e1bbbf529d5e15b27738dba7c5b8acc7e73
    started: true
qosClass: BestEffort

metadata:
  name: argocd-dex-server-6c588b4db8-xb9x2
  generateName: argocd-dex-server-6c588b4db8-
  namespace: argocd
  uid: c86273ac-0108-42c6-9d78-3d5fe9b8314e
  resourceVersion: '34197310'
  creationTimestamp: '2024-08-19T00:53:28Z'
  labels:
    app.kubernetes.io/name: argocd-dex-server
    pod-template-hash: 6c588b4db8
  ownerReferences:
    - apiVersion: apps/v1
      kind: ReplicaSet
      name: argocd-dex-server-6c588b4db8
      uid: c5574250-28aa-409c-a818-b03a3aac4386
      controller: true
      blockOwnerDeletion: true
spec:
  volumes:
    - name: static-files
      emptyDir: {}
    - name: dexconfig
      emptyDir: {}
    - name: argocd-dex-server-tls
      secret:
        secretName: argocd-dex-server-tls
        items:
          - key: tls.crt
            path: tls.crt
          - key: tls.key
            path: tls.key
          - key: ca.crt
            path: ca.crt
        defaultMode: 420
        optional: true
    - name: kube-api-access-kdqrx
      projected:
        sources:
          - serviceAccountToken:
              expirationSeconds: 3607
              path: token
          - configMap:
              name: kube-root-ca.crt
              items:
                - key: ca.crt
                  path: ca.crt
          - downwardAPI:
              items:
                - path: namespace
                  fieldRef:
                    apiVersion: v1
                    fieldPath: metadata.namespace
        defaultMode: 420
  initContainers:
    - name: copyutil
      image: quay.io/argoproj/argocd:v2.12.1
      command:
        - /bin/cp
        - '-n'
        - /usr/local/bin/argocd
        - /shared/argocd-dex
      resources: {}
      volumeMounts:
        - name: static-files
          mountPath: /shared
        - name: dexconfig
          mountPath: /tmp
        - name: kube-api-access-kdqrx
          readOnly: true
          mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      imagePullPolicy: Always
      securityContext:
        capabilities:
          drop:
            - ALL
        runAsNonRoot: true
        readOnlyRootFilesystem: true
        allowPrivilegeEscalation: false
        seccompProfile:
          type: RuntimeDefault
  containers:
    - name: dex
      image: ghcr.io/dexidp/dex:v2.38.0
      command:
        - /shared/argocd-dex
        - rundex
      ports:
        - containerPort: 5556
          protocol: TCP
        - containerPort: 5557
          protocol: TCP
        - containerPort: 5558
          protocol: TCP
      env:
        - name: ARGOCD_DEX_SERVER_DISABLE_TLS
          valueFrom:
            configMapKeyRef:
              name: argocd-cmd-params-cm
              key: dexserver.disable.tls
              optional: true
      resources: {}
      volumeMounts:
        - name: static-files
          mountPath: /shared
        - name: dexconfig
          mountPath: /tmp
        - name: argocd-dex-server-tls
          mountPath: /tls
        - name: kube-api-access-kdqrx
          readOnly: true
          mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      imagePullPolicy: Always
      securityContext:
        capabilities:
          drop:
            - ALL
        runAsNonRoot: true
        readOnlyRootFilesystem: true
        allowPrivilegeEscalation: false
        seccompProfile:
          type: RuntimeDefault
  restartPolicy: Always
  terminationGracePeriodSeconds: 30
  dnsPolicy: ClusterFirst
  serviceAccountName: argocd-dex-server
  serviceAccount: argocd-dex-server
  nodeName: system-0-bf7s0
  securityContext: {}
  affinity:
    podAntiAffinity:
      preferredDuringSchedulingIgnoredDuringExecution:
        - weight: 5
          podAffinityTerm:
            labelSelector:
              matchLabels:
                app.kubernetes.io/part-of: argocd
            topologyKey: kubernetes.io/hostname
  schedulerName: default-scheduler
  tolerations:
    - key: node.kubernetes.io/not-ready
      operator: Exists
      effect: NoExecute
      tolerationSeconds: 300
    - key: node.kubernetes.io/unreachable
      operator: Exists
      effect: NoExecute
      tolerationSeconds: 300
  priority: 0
  enableServiceLinks: true
  preemptionPolicy: PreemptLowerPriority
status:
  phase: Running
  conditions:
    - type: Initialized
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2024-08-19T00:53:39Z'
    - type: Ready
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2024-08-19T00:54:02Z'
    - type: ContainersReady
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2024-08-19T00:54:02Z'
    - type: PodScheduled
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2024-08-19T00:53:28Z'
  hostIP: 10.108.0.2
  podIP: 10.244.0.189
  podIPs:
    - ip: 10.244.0.189
  startTime: '2024-08-19T00:53:28Z'
  initContainerStatuses:
    - name: copyutil
      state:
        terminated:
          exitCode: 0
          reason: Completed
          startedAt: '2024-08-19T00:53:38Z'
          finishedAt: '2024-08-19T00:53:38Z'
          containerID: >-
            containerd://f570457621707884477ec238b374f7e25a3b73fb020e8ac1b32b6001118c9dc7
      lastState: {}
      ready: true
      restartCount: 0
      image: quay.io/argoproj/argocd:v2.12.1
      imageID: >-
        quay.io/argoproj/argocd@sha256:a0ebfa7d419a1c78babc80fc77de093751d8a5fabffcaf3f7e81a4d55a23cc0d
      containerID: >-
        containerd://f570457621707884477ec238b374f7e25a3b73fb020e8ac1b32b6001118c9dc7
      started: false
  containerStatuses:
    - name: dex
      state:
        running:
          startedAt: '2024-08-19T00:54:01Z'
      lastState:
        terminated:
          exitCode: 20
          reason: Error
          startedAt: '2024-08-19T00:53:44Z'
          finishedAt: '2024-08-19T00:53:45Z'
          containerID: >-
            containerd://8df11b60ac1af1ce68b7f87857a28a9337f7169463b8a4bd8b3c8ed218c0ffdd
      ready: true
      restartCount: 2
      image: ghcr.io/dexidp/dex:v2.38.0
      imageID: >-
        ghcr.io/dexidp/dex@sha256:b1d793440a98d7ecde7fa5dbc8cee1204ef0e8918d9e51ef6201f50d12d55925
      containerID: >-
        containerd://db34f880a28d14d3be56c878c10f1e1bbbf529d5e15b27738dba7c5b8acc7e73
      started: true
  qosClass: BestEffort

time="2024-08-19T00:54:01Z" level=info msg="ArgoCD Dex Server is starting" built="2024-08-16T16:42:13Z" commit=26b2039a55b9bdf807a70d344af8ade5171d3d39 namespace=argocd version=v2.12.1+26b2039
time="2024-08-19T00:54:01Z" level=info msg="Generating self-signed TLS certificate for this session"
time="2024-08-19T00:54:01Z" level=info msg="Starting configmap/secret informers"
time="2024-08-19T00:54:01Z" level=info msg="Configmap/secret informer synced"
time="2024-08-19T00:54:01Z" level=info msg="0xc000ed71a0 subscribed to settings updates"
time="2024-08-19T00:54:01Z" level=info msg="dex is not configured"
W0926 18:16:02.041620       1 reflector.go:462] pkg/mod/k8s.io/client-go@v0.29.6/tools/cache/reflector.go:229: watch of *v1.Secret ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding
W0926 18:16:02.041773       1 reflector.go:462] pkg/mod/k8s.io/client-go@v0.29.6/tools/cache/reflector.go:229: watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding