bh@apollo17:~/GitRepositories/thorium/minithor$ ./deploy && kubectl create -n thorium -f thorium-cluster.yml
Helm v3.19.0 is already latest
> kubectl.sha256: 64 B / 64 B [-------------------------] 100.00% ? p/s 0s
> kubectl: 57.75 MiB / 57.75 MiB [-------------] 100.00% 6.67 MiB p/s 8.9s
namespace/redis created
secret/conf-ghfgcc2cfc created
service/redis created
persistentvolumeclaim/redis-persistent-storage-claim created
statefulset.apps/redis created
Warning: unrecognized format "int32"
Warning: unrecognized format "int64"
customresourcedefinition.apiextensions.k8s.io/agents.agent.k8s.elastic.co created
customresourcedefinition.apiextensions.k8s.io/apmservers.apm.k8s.elastic.co created
customresourcedefinition.apiextensions.k8s.io/beats.beat.k8s.elastic.co created
customresourcedefinition.apiextensions.k8s.io/elasticmapsservers.maps.k8s.elastic.co created
customresourcedefinition.apiextensions.k8s.io/elasticsearchautoscalers.autoscaling.k8s.elastic.co created
customresourcedefinition.apiextensions.k8s.io/elasticsearches.elasticsearch.k8s.elastic.co created
customresourcedefinition.apiextensions.k8s.io/enterprisesearches.enterprisesearch.k8s.elastic.co created
customresourcedefinition.apiextensions.k8s.io/kibanas.kibana.k8s.elastic.co created
customresourcedefinition.apiextensions.k8s.io/logstashes.logstash.k8s.elastic.co created
customresourcedefinition.apiextensions.k8s.io/stackconfigpolicies.stackconfigpolicy.k8s.elastic.co created
namespace/elastic-system created
serviceaccount/elastic-operator created
secret/elastic-webhook-server-cert created
configmap/elastic-operator created
clusterrole.rbac.authorization.k8s.io/elastic-operator created
clusterrole.rbac.authorization.k8s.io/elastic-operator-view created
clusterrole.rbac.authorization.k8s.io/elastic-operator-edit created
clusterrolebinding.rbac.authorization.k8s.io/elastic-operator created
service/elastic-webhook-server created
statefulset.apps/elastic-operator created
validatingwebhookconfiguration.admissionregistration.k8s.io/elastic-webhook.k8s.elastic.co created
Waiting for 1 pods to be ready...
partitioned roll out complete: 1 new pods have been updated...
elasticsearch.elasticsearch.k8s.elastic.co/elastic created
kibana.kibana.k8s.elastic.co/elastic created
namespace/cert-manager created
customresourcedefinition.apiextensions.k8s.io/certificaterequests.cert-manager.io created
Warning: unrecognized format "int32"
Warning: unrecognized format "int64"
customresourcedefinition.apiextensions.k8s.io/certificates.cert-manager.io created
customresourcedefinition.apiextensions.k8s.io/challenges.acme.cert-manager.io created
customresourcedefinition.apiextensions.k8s.io/clusterissuers.cert-manager.io created
customresourcedefinition.apiextensions.k8s.io/issuers.cert-manager.io created
customresourcedefinition.apiextensions.k8s.io/orders.acme.cert-manager.io created
serviceaccount/cert-manager-cainjector created
serviceaccount/cert-manager created
serviceaccount/cert-manager-webhook created
clusterrole.rbac.authorization.k8s.io/cert-manager-cainjector created
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-issuers created
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers created
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-certificates created
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-orders created
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-challenges created
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim created
clusterrole.rbac.authorization.k8s.io/cert-manager-cluster-view created
clusterrole.rbac.authorization.k8s.io/cert-manager-view created
clusterrole.rbac.authorization.k8s.io/cert-manager-edit created
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-approve:cert-manager-io created
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-certificatesigningrequests created
clusterrole.rbac.authorization.k8s.io/cert-manager-webhook:subjectaccessreviews created
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-cainjector created
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-issuers created
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers created
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-certificates created
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-orders created
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-challenges created
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim created
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-approve:cert-manager-io created
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-certificatesigningrequests created
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-webhook:subjectaccessreviews created
role.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection created
role.rbac.authorization.k8s.io/cert-manager:leaderelection created
role.rbac.authorization.k8s.io/cert-manager-tokenrequest created
role.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving created
rolebinding.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection created
rolebinding.rbac.authorization.k8s.io/cert-manager:leaderelection created
rolebinding.rbac.authorization.k8s.io/cert-manager-cert-manager-tokenrequest created
rolebinding.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving created
service/cert-manager-cainjector created
service/cert-manager created
service/cert-manager-webhook created
deployment.apps/cert-manager-cainjector created
deployment.apps/cert-manager created
deployment.apps/cert-manager-webhook created
mutatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook created
validatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook created
customresourcedefinition.apiextensions.k8s.io/certificates.cert-manager.io condition met
customresourcedefinition.apiextensions.k8s.io/issuers.cert-manager.io condition met
Waiting for deployment "cert-manager-webhook" rollout to finish: 0 of 1 updated replicas are available...
deployment "cert-manager-webhook" successfully rolled out
namespace/scylla-operator created
clusterrole.rbac.authorization.k8s.io/scylladb:controller:operator created
clusterrole.rbac.authorization.k8s.io/scylladb:controller:aggregate-to-operator created
clusterrole.rbac.authorization.k8s.io/scylladb:controller:aggregate-to-operator-openshift created
clusterrole.rbac.authorization.k8s.io/scylladb:controller:operator-remote created
clusterrole.rbac.authorization.k8s.io/scylladb:controller:aggregate-to-operator-remote created
Warning: unrecognized format "int64"
Warning: unrecognized format "int32"
customresourcedefinition.apiextensions.k8s.io/nodeconfigs.scylla.scylladb.com created
customresourcedefinition.apiextensions.k8s.io/remotekubernetesclusters.scylla.scylladb.com created
customresourcedefinition.apiextensions.k8s.io/remoteowners.scylla.scylladb.com created
customresourcedefinition.apiextensions.k8s.io/scyllaclusters.scylla.scylladb.com created
customresourcedefinition.apiextensions.k8s.io/scylladbclusters.scylla.scylladb.com created
customresourcedefinition.apiextensions.k8s.io/scylladbdatacenters.scylla.scylladb.com created
customresourcedefinition.apiextensions.k8s.io/scylladbmonitorings.scylla.scylladb.com created
customresourcedefinition.apiextensions.k8s.io/scyllaoperatorconfigs.scylla.scylladb.com created
clusterrole.rbac.authorization.k8s.io/scyllacluster-edit created
clusterrole.rbac.authorization.k8s.io/scyllacluster-view created
clusterrole.rbac.authorization.k8s.io/scyllacluster-member created
clusterrole.rbac.authorization.k8s.io/scylladb:aggregate-to-scyllacluster-member created
clusterrole.rbac.authorization.k8s.io/scylladb:aggregate-to-scyllacluster-member-openshift created
clusterrole.rbac.authorization.k8s.io/scylladb:monitoring:grafana created
clusterrole.rbac.authorization.k8s.io/scylladb:aggregate-to-scylladb-monitoring-grafana-openshift created
clusterrole.rbac.authorization.k8s.io/scylladb:monitoring:prometheus created
clusterrole.rbac.authorization.k8s.io/scylladb:aggregate-to-scylladb-monitoring-prometheus created
clusterrole.rbac.authorization.k8s.io/scylladb:aggregate-to-scylladb-monitoring-prometheus-openshift created
Warning: spec.privateKey.rotationPolicy: In cert-manager >= v1.18.0, the default value changed from `Never` to `Always`.
certificate.cert-manager.io/scylla-operator-serving-cert created
issuer.cert-manager.io/scylla-operator-selfsigned-issuer created
poddisruptionbudget.policy/scylla-operator created
serviceaccount/scylla-operator created
validatingwebhookconfiguration.admissionregistration.k8s.io/scylla-operator created
poddisruptionbudget.policy/webhook-server created
service/scylla-operator-webhook created
serviceaccount/webhook-server created
clusterrolebinding.rbac.authorization.k8s.io/scylladb:controller:operator created
deployment.apps/scylla-operator created
deployment.apps/webhook-server created
customresourcedefinition.apiextensions.k8s.io/scyllaclusters.scylla.scylladb.com condition met
Waiting for deployment "scylla-operator" rollout to finish: 0 of 1 updated replicas are available...
deployment "scylla-operator" successfully rolled out
namespace/scylla created
scyllacluster.scylla.scylladb.com/scylla created
Waiting for 1 pods to be ready...
partitioned roll out complete: 1 new pods have been updated...
configmap/scylla-config created
statefulset.apps/scylla-us-east-1-us-east-1a restarted
Waiting for 1 pods to be ready...
Waiting for 1 pods to be ready...
Waiting for 1 pods to be ready...
partitioned roll out complete: 1 new pods have been updated...
Defaulted container "scylla" out of: scylla, scylladb-api-status-probe, scylladb-ignition, scylla-manager-agent, sidecar-injection (init)
Warning: Using a password on the command line interface can be insecure.
Recommendation: use the credentials file to securely provide the password.
Warning: Using a password on the command line interface can be insecure.
Recommendation: use the credentials file to securely provide the password.
Warning: Using a password on the command line interface can be insecure.
Recommendation: use the credentials file to securely provide the password.
Warning: Using a password on the command line interface can be insecure.
Recommendation: use the credentials file to securely provide the password.
Warnings :
SimpleStrategy replication class is not recommended, but was used for keyspace thorium. You may suppress this warning by delisting SimpleStrategy from replication_strategy_warn_list configuration option, or make it into an error by listing this replication strategy on replication_strategy_fail_list.
Using Replication Factor replication_factor=1 lower than the minimum_replication_factor_warn_threshold=3 is not recommended.
Warning: Using a password on the command line interface can be insecure.
Recommendation: use the credentials file to securely provide the password.
Warning: Using a password on the command line interface can be insecure.
Recommendation: use the credentials file to securely provide the password.
Warning: Using a password on the command line interface can be insecure.
Recommendation: use the credentials file to securely provide the password.
namespace/minio created
service/minio created
statefulset.apps/minio created
namespace/jaeger created
service/jaeger created
statefulset.apps/jaeger created
namespace/kubegres-system created
Warning: unrecognized format "int32"
Warning: unrecognized format "int64"
customresourcedefinition.apiextensions.k8s.io/kubegres.kubegres.reactive-tech.io created
serviceaccount/kubegres-controller-manager created
role.rbac.authorization.k8s.io/kubegres-leader-election-role created
clusterrole.rbac.authorization.k8s.io/kubegres-kubegres-editor-role created
clusterrole.rbac.authorization.k8s.io/kubegres-kubegres-viewer-role created
clusterrole.rbac.authorization.k8s.io/kubegres-manager-role created
clusterrole.rbac.authorization.k8s.io/kubegres-metrics-auth-role created
clusterrole.rbac.authorization.k8s.io/kubegres-metrics-reader created
rolebinding.rbac.authorization.k8s.io/kubegres-leader-election-rolebinding created
clusterrolebinding.rbac.authorization.k8s.io/kubegres-manager-rolebinding created
clusterrolebinding.rbac.authorization.k8s.io/kubegres-metrics-auth-rolebinding created
service/kubegres-controller-manager-metrics-service created
deployment.apps/kubegres-controller-manager created
Waiting for deployment "kubegres-controller-manager" rollout to finish: 0 of 1 updated replicas are available...
deployment "kubegres-controller-manager" successfully rolled out
namespace/quickwit created
secret/postgres-cluster-auth created
kubegres.kubegres.reactive-tech.io/postgres created
Waiting for 1 pods to be ready...
partitioned roll out complete: 1 new pods have been updated...
"quickwit" already exists with the same configuration, skipping
Hang tight while we grab the latest from your chart repositories...
...Successfully got an update from the "quickwit" chart repository
Update Complete. ⎈Happy Helming!⎈
I1003 15:18:35.345230 50062 warnings.go:110] "Warning: spec.SessionAffinity is ignored for headless services"
NAME: quickwit
LAST DEPLOYED: Fri Oct 3 15:18:35 2025
NAMESPACE: quickwit
STATUS: deployed
REVISION: 1
TEST SUITE: None
partitioned roll out complete: 1 new pods have been updated...
partitioned roll out complete: 1 new pods have been updated...
partitioned roll out complete: 1 new pods have been updated...
partitioned roll out complete: 1 new pods have been updated...
Waiting for 1 pods to be ready...
partitioned roll out complete: 1 new pods have been updated...
partitioned roll out complete: 1 new pods have been updated...
Defaulted container "elasticsearch" out of: elasticsearch, elastic-internal-init-filesystem (init), elastic-internal-suspend (init)
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 83 100 83 0 0 155 0 --:--:-- --:--:-- --:--:-- 155
{
"acknowledged" : true,
"shards_acknowledged" : true,
"index" : "thorium"
}
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 135 100 42 100 93 1480 3279 --:--:-- --:--:-- --:--:-- 4821
{
"role" : {
"created" : true
}
}
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 174 100 23 100 151 382 2508 --:--:-- --:--:-- --:--:-- 2900
{
"created" : true
}
namespace/thorium created
configmap/banner created
secret/registry-token created
serviceaccount/thorium created
secret/thorium-account-token created
clusterrole.rbac.authorization.k8s.io/thorium-operator created
clusterrolebinding.rbac.authorization.k8s.io/thorium-operator-binding created
deployment.apps/operator created
ingress.networking.k8s.io/thorium-default-ingress created
Waiting for deployment "operator" rollout to finish: 0 of 1 updated replicas are available...
deployment "operator" successfully rolled out
thoriumcluster.sandia.gov/dev created
bh@apollo17:~/GitRepositories/thorium/minithor$ kubectl get pods -A
NAMESPACE NAME READY STATUS RESTARTS AGE
cert-manager cert-manager-548f7cf98c-cww7x 1/1 Running 0 3h41m
cert-manager cert-manager-cainjector-8798f647f-xwbln 1/1 Running 0 3h41m
cert-manager cert-manager-webhook-6c8678dc46-g88h7 1/1 Running 0 3h41m
elastic-system elastic-es-default-0 1/1 Running 0 3h41m
elastic-system elastic-kb-f957b8c8f-2tk4m 1/1 Running 0 3h41m
elastic-system elastic-operator-0 1/1 Running 0 3h41m
ingress-nginx ingress-nginx-admission-create-9qtg4 0/1 Completed 0 3h42m
ingress-nginx ingress-nginx-admission-patch-jb79q 0/1 Completed 0 3h42m
ingress-nginx ingress-nginx-controller-9cc49f96f-6c8cq 1/1 Running 0 3h42m
jaeger jaeger-0 1/1 Running 0 3h33m
kube-system calico-kube-controllers-59556d9b4c-kvwzc 1/1 Running 1 (3h43m ago) 3h44m
kube-system calico-node-jvcjs 1/1 Running 0 3h44m
kube-system coredns-66bc5c9577-b5kr9 1/1 Running 3 (3h43m ago) 3h44m
kube-system csi-hostpath-attacher-0 1/1 Running 4 (3h43m ago) 3h44m
kube-system csi-hostpath-resizer-0 1/1 Running 4 (3h44m ago) 3h44m
kube-system csi-hostpathplugin-q55lj 6/6 Running 6 (3h42m ago) 3h44m
kube-system etcd-minikube 1/1 Running 0 3h44m
kube-system kube-apiserver-minikube 1/1 Running 0 3h44m
kube-system kube-controller-manager-minikube 1/1 Running 0 3h44m
kube-system kube-ingress-dns-minikube 1/1 Running 0 3h42m
kube-system kube-proxy-qv9d7 1/1 Running 0 3h44m
kube-system kube-scheduler-minikube 1/1 Running 0 3h44m
kube-system snapshot-controller-7d9fbc56b8-5n8w8 1/1 Running 0 3h42m
kube-system snapshot-controller-7d9fbc56b8-wpknr 1/1 Running 0 3h42m
kube-system storage-provisioner 1/1 Running 1 (3h43m ago) 3h44m
kubegres-system kubegres-controller-manager-674b46dd45-qnmqc 1/1 Running 0 3h33m
minio minio-0 1/1 Running 0 3h33m
quickwit postgres-1-0 1/1 Running 0 3h32m
quickwit quickwit-control-plane-9b576cd77-zqc2w 1/1 Running 0 3h31m
quickwit quickwit-indexer-0 1/1 Running 0 3h31m
quickwit quickwit-janitor-5cf494f67-4db9k 1/1 Running 0 3h31m
quickwit quickwit-metastore-68fc7f8fc9-75prw 1/1 Running 0 3h31m
quickwit quickwit-searcher-0 1/1 Running 0 3h31m
redis redis-0 1/1 Running 0 3h41m
scylla-operator scylla-operator-644d549c9-jcqpj 1/1 Running 0 3h39m
scylla-operator webhook-server-9476cdc9c-fb8x7 1/1 Running 0 3h39m
scylla scylla-us-east-1-us-east-1a-0 4/4 Running 0 3h34m
thorium api-b785b487b-q2lwl 1/1 Running 0 3h29m
thorium event-handler-78bc649d5d-qmkt7 1/1 Running 0 3h28m
thorium node-provisioner-minikube 0/1 Completed 0 3h28m
thorium operator-57bd49fcf5-mxsx6 1/1 Running 0 3h30m
thorium scaler-877c45dfd-jcc4w 0/1 ContainerCreating 0 3h28m
thorium search-streamer-5545d5ff79-r74ft 1/1 Running 0 3h28m
bh@apollo17:~/GitRepositories/thorium/minithor$ kubectl get svc -A
NAMESPACE NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
cert-manager cert-manager ClusterIP 10.109.23.107 <none> 9402/TCP 3h41m
cert-manager cert-manager-cainjector ClusterIP 10.107.0.34 <none> 9402/TCP 3h41m
cert-manager cert-manager-webhook ClusterIP 10.109.255.185 <none> 443/TCP,9402/TCP 3h41m
default kubernetes ClusterIP 10.96.0.1 <none> 443/TCP 3h44m
elastic-system elastic-es-default ClusterIP None <none> 9200/TCP 3h41m
elastic-system elastic-es-http ClusterIP 10.101.93.182 <none> 9200/TCP 3h41m
elastic-system elastic-es-internal-http ClusterIP 10.110.89.33 <none> 9200/TCP 3h41m
elastic-system elastic-es-transport ClusterIP None <none> 9300/TCP 3h41m
elastic-system elastic-kb-http ClusterIP 10.101.155.148 <none> 5601/TCP 3h41m
elastic-system elastic-webhook-server ClusterIP 10.105.50.161 <none> 443/TCP 3h41m
ingress-nginx ingress-nginx-controller NodePort 10.102.47.187 <none> 80:32184/TCP,443:32657/TCP 3h43m
ingress-nginx ingress-nginx-controller-admission ClusterIP 10.111.18.73 <none> 443/TCP 3h43m
jaeger jaeger ClusterIP 10.105.225.188 <none> 16686/TCP 3h33m
kube-system csi-hostpath-attacher ClusterIP 10.107.18.39 <none> 12345/TCP 3h44m
kube-system csi-hostpath-resizer ClusterIP 10.97.4.90 <none> 12345/TCP 3h44m
kube-system kube-dns ClusterIP 10.96.0.10 <none> 53/UDP,53/TCP,9153/TCP 3h44m
kubegres-system kubegres-controller-manager-metrics-service ClusterIP 10.104.243.27 <none> 8443/TCP 3h33m
minio minio ClusterIP 10.105.70.68 <none> 9000/TCP 3h33m
quickwit postgres ClusterIP None <none> 5432/TCP 3h32m
quickwit quickwit-control-plane ClusterIP 10.108.139.99 <none> 7280/TCP,7281/TCP 3h31m
quickwit quickwit-headless ClusterIP None <none> 7282/UDP,7280/TCP,7281/TCP 3h31m
quickwit quickwit-indexer ClusterIP 10.104.196.84 <none> 7280/TCP,7281/TCP 3h31m
quickwit quickwit-janitor ClusterIP 10.101.216.112 <none> 7280/TCP,7281/TCP 3h31m
quickwit quickwit-metastore ClusterIP 10.96.61.0 <none> 7280/TCP,7281/TCP 3h31m
quickwit quickwit-searcher ClusterIP 10.96.234.110 <none> 7280/TCP,7281/TCP 3h31m
redis redis ClusterIP 10.105.189.118 <none> 6379/TCP 3h41m
scylla-operator scylla-operator-webhook ClusterIP 10.110.176.70 <none> 443/TCP 3h40m
scylla scylla-client ClusterIP 10.106.108.213 <none> 7000/TCP,7001/TCP,9042/TCP,9142/TCP,19042/TCP,19142/TCP,7199/TCP,10001/TCP,9180/TCP,5090/TCP,9100/TCP,9160/TCP 3h36m
scylla scylla-us-east-1-us-east-1a-0 ClusterIP 10.105.212.73 <none> 7000/TCP,7001/TCP,9042/TCP,9142/TCP,19042/TCP,19142/TCP,7199/TCP,10001/TCP,9180/TCP,5090/TCP,9100/TCP,9160/TCP 3h36m
thorium thorium-api ClusterIP 10.106.253.45 <none> 80/TCP 3h29m
bh@apollo17:~/GitRepositories/thorium/minithor$ kubectl describe ingress thorium-default-ingress -n thorium
Name: thorium-default-ingress
Labels: <none>
Namespace: thorium
Address: 192.168.49.2
Ingress Class: nginx
Default backend: <default>
Rules:
Host Path Backends
---- ---- --------
localhost
/ thorium-api:80 (10.244.120.96:80)
Annotations: kubernetes.io/ingress.class: nginx
nginx.ingress.kubernetes.io/proxy-body-size: 100m
nginx.ingress.kubernetes.io/ssl-redirect: false
Events: <none>
bh@apollo17:~/GitRepositories/thorium/minithor$ kubectl port-forward -n ingress-nginx svc/ingress-nginx-controller 8080:80
Forwarding from 127.0.0.1:8080 -> 80
Forwarding from [::1]:8080 -> 80
Handling connection for 8080
Handling connection for 8080
Handling connection for 8080
Handling connection for 8080
🐛 Summary
After installing and deploying minithor, http://localhost:8080 only delivers error 404.
To reproduce
https://github.com/cisagov/thorium/blob/main/minithor/README.md:Expected behavior