---
apiVersion: batch/v1
items:
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n689h67h64h5d4hdfh56hf7h5dhbbh646h67dh79h557hc8h5cbh5b8h5fh56bh667h589h69h5c7hcbhb7h5d9h5f4h56dh58h8h5d6h59bh568q
    creationTimestamp: "2026-03-18T18:18:31Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: cinder_1f97
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"a6afaef2-a618-47c2-b5b5-1da2623760eb"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:18:31Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:18:36Z"
    name: cinder-1f97-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: cinder
      uid: a6afaef2-a618-47c2-b5b5-1da2623760eb
    resourceVersion: "30570"
    uid: 7547bb31-703f-4b07-aafc-7e879c89501d
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 7547bb31-703f-4b07-aafc-7e879c89501d
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 7547bb31-703f-4b07-aafc-7e879c89501d
          batch.kubernetes.io/job-name: cinder-1f97-account-create-update
          controller-uid: 7547bb31-703f-4b07-aafc-7e879c89501d
          job-name: cinder-1f97-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "cinder" ]; then
                GRANT_DATABASE="cinder"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'cinder_1f97'@'localhost';
            CREATE USER IF NOT EXISTS 'cinder_1f97'@'%';

            ALTER USER 'cinder_1f97'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'cinder_1f97'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'cinder_1f97'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'cinder_1f97'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "cinder_1f97" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='cinder_1f97' and host='localhost';" )

            if [[ ${username} != "cinder_1f97" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: cinder-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb:current-podified
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:18:36Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:18:36Z"
      lastTransitionTime: "2026-03-18T18:18:36Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:18:36Z"
      lastTransitionTime: "2026-03-18T18:18:36Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:18:31Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n565h65fh5h544h655h67fh75h597h6fhddh5c8h9dh65dh74hc9h5bbhfch68h79hdh5f7h5dfhd7h7bh57dh69h666h599h86h655h5f4h8dq
    creationTimestamp: "2026-03-18T18:18:53Z"
    generation: 1
    labels:
      service: cinder
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"328bb638-d29c-4e2b-9f5d-dfd22fa9b50e"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
            f:spec:
              f:containers:
                k:{"name":"cinder-b9df6-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/cinder/cinder.conf.d"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/machine-id"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"db-sync-config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
                k:{"name":"etc-machine-id"}:
                  .: {}
                  f:hostPath:
                    .: {}
                    f:path: {}
                    f:type: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:18:53Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:19:32Z"
    name: cinder-b9df6-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: cinder.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Cinder
      name: cinder-b9df6
      uid: 328bb638-d29c-4e2b-9f5d-dfd22fa9b50e
    resourceVersion: "32114"
    uid: 58d36d8e-98c7-4813-8889-4ad5b048902a
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 58d36d8e-98c7-4813-8889-4ad5b048902a
    suspend: false
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 58d36d8e-98c7-4813-8889-4ad5b048902a
          batch.kubernetes.io/job-name: cinder-b9df6-db-sync
          controller-uid: 58d36d8e-98c7-4813-8889-4ad5b048902a
          job-name: cinder-b9df6-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: KOLLA_BOOTSTRAP
            value: "TRUE"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-cinder-api:current-podified
          imagePullPolicy: IfNotPresent
          name: cinder-b9df6-db-sync
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/machine-id
            name: etc-machine-id
            readOnly: true
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data
            readOnly: true
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /etc/cinder/cinder.conf.d
            name: db-sync-config-data
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: db-sync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: cinder-cinder-b9df6
        serviceAccountName: cinder-cinder-b9df6
        terminationGracePeriodSeconds: 30
        volumes:
        - hostPath:
            path: /etc/machine-id
            type: ""
          name: etc-machine-id
        - name: scripts
          secret:
            defaultMode: 493
            secretName: cinder-b9df6-scripts
        - name: config-data
          secret:
            defaultMode: 420
            secretName: cinder-b9df6-config-data
        - name: db-sync-config-data
          secret:
            defaultMode: 420
            items:
            - key: 00-global-defaults.conf
              path: 00-global-defaults.conf
            - key: 02-global-custom.conf
              path: 02-global-custom.conf
            secretName: cinder-b9df6-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:19:32Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:19:32Z"
      lastTransitionTime: "2026-03-18T18:19:32Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:19:32Z"
      lastTransitionTime: "2026-03-18T18:19:32Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:18:53Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n4h5b6h59bh84h654h569h54ch5f5h65fhbbh569h68bhb7hc7hd6h56fh5c7h7chf5h5c8h94h5cdhf4h587hcdh665hd6h94h587hcbh698h688q
    creationTimestamp: "2026-03-18T18:18:30Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: cinder
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"50d1ca62-e403-4cc3-a188-be3ed81f1140"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:18:30Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:18:36Z"
    name: cinder-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: cinder
      uid: 50d1ca62-e403-4cc3-a188-be3ed81f1140
    resourceVersion: "30559"
    uid: cf9f73f3-be1e-45a2-bdf0-018460ce7531
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: cf9f73f3-be1e-45a2-bdf0-018460ce7531
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: cf9f73f3-be1e-45a2-bdf0-018460ce7531
          batch.kubernetes.io/job-name: cinder-db-create
          controller-uid: cf9f73f3-be1e-45a2-bdf0-018460ce7531
          job-name: cinder-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS cinder; ALTER DATABASE cinder CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE cinder;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb:current-podified
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:18:36Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:18:36Z"
      lastTransitionTime: "2026-03-18T18:18:36Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:18:36Z"
      lastTransitionTime: "2026-03-18T18:18:36Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:18:31Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: nfch5f6h6dhdh685h644h669hf4h58ch8bh5fdh5b5hffh559h57bh689h5fh596hfhbdh5bfhddh58bh679h58dh688h678h95hdh665h64fh695q
    creationTimestamp: "2026-03-18T18:18:20Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: glance_c37d
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"faa9833b-a928-4bc3-b6d5-c2fef512a48d"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:18:20Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:18:25Z"
    name: glance-c37d-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: glance
      uid: faa9833b-a928-4bc3-b6d5-c2fef512a48d
    resourceVersion: "30125"
    uid: 681b79ac-d4bc-4b3f-b90f-806a54753531
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 681b79ac-d4bc-4b3f-b90f-806a54753531
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 681b79ac-d4bc-4b3f-b90f-806a54753531
          batch.kubernetes.io/job-name: glance-c37d-account-create-update
          controller-uid: 681b79ac-d4bc-4b3f-b90f-806a54753531
          job-name: glance-c37d-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "glance" ]; then
                GRANT_DATABASE="glance"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'glance_c37d'@'localhost';
            CREATE USER IF NOT EXISTS 'glance_c37d'@'%';

            ALTER USER 'glance_c37d'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'glance_c37d'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'glance_c37d'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'glance_c37d'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "glance_c37d" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='glance_c37d' and host='localhost';" )

            if [[ ${username} != "glance_c37d" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: glance-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb:current-podified
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:18:25Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:18:25Z"
      lastTransitionTime: "2026-03-18T18:18:25Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:18:25Z"
      lastTransitionTime: "2026-03-18T18:18:25Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:18:20Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n566h59bh678h64ch58h7bhb7h64fhf7h65fh99hcfh699hfh5c8h577h576h676h5bbh56bh656h57h54ch58bh7dh595h58fh56ch5b7h549hch545q
    creationTimestamp: "2026-03-18T18:18:19Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: glance
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"6bf42e1e-3939-4480-9fc0-5cf1bd9fdb9d"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:18:19Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:18:25Z"
    name: glance-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: glance
      uid: 6bf42e1e-3939-4480-9fc0-5cf1bd9fdb9d
    resourceVersion: "30137"
    uid: 0f2fd97d-6bc0-457e-b2d8-09ccb02aa8b9
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 0f2fd97d-6bc0-457e-b2d8-09ccb02aa8b9
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 0f2fd97d-6bc0-457e-b2d8-09ccb02aa8b9
          batch.kubernetes.io/job-name: glance-db-create
          controller-uid: 0f2fd97d-6bc0-457e-b2d8-09ccb02aa8b9
          job-name: glance-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS glance; ALTER DATABASE glance CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE glance;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb:current-podified
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:18:25Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:18:25Z"
      lastTransitionTime: "2026-03-18T18:18:25Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:18:25Z"
      lastTransitionTime: "2026-03-18T18:18:25Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:18:19Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n55ch598h5f7h5c8h89h84h66fh6dhf8h659h5b8h568h587h84h75h564hc6h8bh5d7h68dh68ch84h56bh54fh5d7h9bh576hc7h5bdh664hc8hf4q
    creationTimestamp: "2026-03-18T18:18:30Z"
    generation: 1
    labels:
      service: glance
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"8bd777fb-1145-4379-89b3-3328d34c0a27"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
            f:spec:
              f:containers:
                k:{"name":"glance-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsGroup: {}
                    f:runAsUser: {}
                    f:seccompProfile:
                      .: {}
                      f:type: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/glance/glance.conf.d"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"db-sync-config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:18:30Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:19:18Z"
    name: glance-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: glance.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Glance
      name: glance-824c8
      uid: 8bd777fb-1145-4379-89b3-3328d34c0a27
    resourceVersion: "31595"
    uid: df118b34-f2c7-46b1-af6e-d88ed5e1f391
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: df118b34-f2c7-46b1-af6e-d88ed5e1f391
    suspend: false
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[{"name":"storage","namespace":"openstack","interface":"storage"}]'
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: df118b34-f2c7-46b1-af6e-d88ed5e1f391
          batch.kubernetes.io/job-name: glance-db-sync
          controller-uid: df118b34-f2c7-46b1-af6e-d88ed5e1f391
          job-name: glance-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-glance-api:current-podified
          imagePullPolicy: IfNotPresent
          name: glance-db-sync
          resources: {}
          securityContext:
            capabilities:
              drop:
              - MKNOD
            runAsGroup: 42415
            runAsUser: 42415
            seccompProfile:
              type: RuntimeDefault
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/glance/glance.conf.d
            name: db-sync-config-data
            readOnly: true
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: db-sync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: glance-glance-824c8
        serviceAccountName: glance-glance-824c8
        terminationGracePeriodSeconds: 30
        volumes:
        - name: db-sync-config-data
          secret:
            defaultMode: 420
            items:
            - key: 00-config.conf
              path: 00-config.conf
            - key: 01-config.conf
              path: 01-config.conf
            secretName: glance-824c8-config-data
        - name: config-data
          secret:
            defaultMode: 420
            secretName: glance-824c8-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:19:18Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:19:18Z"
      lastTransitionTime: "2026-03-18T18:19:18Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:19:18Z"
      lastTransitionTime: "2026-03-18T18:19:18Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:18:30Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n599h669h5d8hf5h694h586h574hcfh696h649h584h569h68h65bh5bhb6h655hbch65dh4hc8h97hfch586h655h5ffh664hd9hc6h554h54bh5bq
    creationTimestamp: "2026-03-18T18:18:53Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: ironic
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"d8e12fa9-2acc-4901-a0e2-8f91712426b8"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:18:53Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:19:00Z"
    name: ironic-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: ironic
      uid: d8e12fa9-2acc-4901-a0e2-8f91712426b8
    resourceVersion: "31307"
    uid: b6a5411d-f304-44cc-992b-95d570d77e3b
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: b6a5411d-f304-44cc-992b-95d570d77e3b
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: b6a5411d-f304-44cc-992b-95d570d77e3b
          batch.kubernetes.io/job-name: ironic-db-create
          controller-uid: b6a5411d-f304-44cc-992b-95d570d77e3b
          job-name: ironic-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS ironic; ALTER DATABASE ironic CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON ironic.* TO 'ironic'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON ironic.* TO 'ironic'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE ironic;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb:current-podified
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:19:00Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:19:00Z"
      lastTransitionTime: "2026-03-18T18:19:00Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:19:00Z"
      lastTransitionTime: "2026-03-18T18:19:00Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:18:53Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n669h695h7bh657hf7h54h596hfbh68hd7h99h74hf5h9dh678h559h5h5c4hc6hfdh587h59chfch88h659h8h596h7fhd7hf7h9bh5fbq
    creationTimestamp: "2026-03-18T18:19:04Z"
    generation: 1
    labels:
      service: ironic
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"093499d7-70d8-44d1-be58-23d8d9ab03d2"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"ironic-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:initContainers:
                .: {}
                k:{"name":"init"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabaseHost"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"DatabaseName"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"DeployHTTPURL"}:
                      .: {}
                      f:name: {}
                    k:{"name":"IngressDomain"}:
                      .: {}
                      f:name: {}
                    k:{"name":"IronicPassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                    k:{"name":"PodName"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"PodNamespace"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:fieldRef: {}
                    k:{"name":"ProvisionNetwork"}:
                      .: {}
                      f:name: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/merged"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data-merged"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"etc-podinfo"}:
                  .: {}
                  f:downwardAPI:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:19:04Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:19:52Z"
    name: ironic-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: ironic.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Ironic
      name: ironic
      uid: 093499d7-70d8-44d1-be58-23d8d9ab03d2
    resourceVersion: "33106"
    uid: 3631737c-96a8-436f-b799-96052fbc9986
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 3631737c-96a8-436f-b799-96052fbc9986
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 3631737c-96a8-436f-b799-96052fbc9986
          batch.kubernetes.io/job-name: ironic-db-sync
          controller-uid: 3631737c-96a8-436f-b799-96052fbc9986
          job-name: ironic-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/container-scripts/dbsync.sh
          command:
          - /bin/bash
          env:
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-conductor:current-podified
          imagePullPolicy: IfNotPresent
          name: ironic-db-sync
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data-merged
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: db-sync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        initContainers:
        - args:
          - -c
          - /usr/local/bin/container-scripts/init.sh
          command:
          - /bin/bash
          env:
          - name: IronicPassword
            valueFrom:
              secretKeyRef:
                key: IronicPassword
                name: osp-secret
          - name: PodName
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.name
          - name: PodNamespace
            valueFrom:
              fieldRef:
                apiVersion: v1
                fieldPath: metadata.namespace
          - name: ProvisionNetwork
          - name: DatabaseHost
            value: openstack.openstack.svc
          - name: DatabaseName
            value: ironic
          - name: DeployHTTPURL
          - name: IngressDomain
          image: quay.io/podified-antelope-centos9/openstack-ironic-conductor:current-podified
          imagePullPolicy: IfNotPresent
          name: init
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config-data
            readOnly: true
          - mountPath: /var/lib/config-data/merged
            name: config-data-merged
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: ironic-ironic
        serviceAccountName: ironic-ironic
        terminationGracePeriodSeconds: 30
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: ironic-scripts
        - name: config-data
          secret:
            defaultMode: 416
            secretName: ironic-config-data
        - emptyDir: {}
          name: config-data-merged
        - downwardAPI:
            defaultMode: 420
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.annotations['k8s.v1.cni.cncf.io/network-status']
              path: network-status
          name: etc-podinfo
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:19:52Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:19:52Z"
      lastTransitionTime: "2026-03-18T18:19:52Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:19:52Z"
      lastTransitionTime: "2026-03-18T18:19:52Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:19:04Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n5c6hbfh57chd5h74h99h5ch5c5h55ch597hbfh96h5fh675h598h5c5h4h64ch56h589h9fh5c6h67h59fhfh5fch697h698h585hcch5b6hcbq
    creationTimestamp: "2026-03-18T18:18:53Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: ironic_f681
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"a2b20da2-408b-4440-ac69-cf4bceaa429b"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:18:53Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:19:00Z"
    name: ironic-f681-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: ironic
      uid: a2b20da2-408b-4440-ac69-cf4bceaa429b
    resourceVersion: "31303"
    uid: fbdbf98d-35f6-4948-9b09-b7d5ff9d6b41
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: fbdbf98d-35f6-4948-9b09-b7d5ff9d6b41
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: fbdbf98d-35f6-4948-9b09-b7d5ff9d6b41
          batch.kubernetes.io/job-name: ironic-f681-account-create-update
          controller-uid: fbdbf98d-35f6-4948-9b09-b7d5ff9d6b41
          job-name: ironic-f681-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "ironic" ]; then
                GRANT_DATABASE="ironic"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'ironic_f681'@'localhost';
            CREATE USER IF NOT EXISTS 'ironic_f681'@'%';

            ALTER USER 'ironic_f681'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'ironic_f681'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'ironic_f681'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'ironic_f681'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "ironic_f681" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='ironic_f681' and host='localhost';" )

            if [[ ${username} != "ironic_f681" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: ironic-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb:current-podified
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:19:00Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:19:00Z"
      lastTransitionTime: "2026-03-18T18:19:00Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:19:00Z"
      lastTransitionTime: "2026-03-18T18:19:00Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:18:53Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n695h694h667h76hd9h5b7h659h75h68h5b6h64bhcbh596h5f4h85hcch6dh647hb9h5cbh67dh646h64h696h5fbh558h584h547hdh5f4h657h5c5q
    creationTimestamp: "2026-03-18T18:19:53Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: ironic_inspector_4c72
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"175429fd-57fa-4d18-9f21-37963993fff4"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:19:53Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:20:00Z"
    name: ironic-inspector-4c72-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: ironic-inspector
      uid: 175429fd-57fa-4d18-9f21-37963993fff4
    resourceVersion: "33546"
    uid: 81471666-eb54-470d-98c1-427ef62ad064
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 81471666-eb54-470d-98c1-427ef62ad064
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 81471666-eb54-470d-98c1-427ef62ad064
          batch.kubernetes.io/job-name: ironic-inspector-4c72-account-create-update
          controller-uid: 81471666-eb54-470d-98c1-427ef62ad064
          job-name: ironic-inspector-4c72-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "ironic_inspector" ]; then
                GRANT_DATABASE="ironic_inspector"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'ironic_inspector_4c72'@'localhost';
            CREATE USER IF NOT EXISTS 'ironic_inspector_4c72'@'%';

            ALTER USER 'ironic_inspector_4c72'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'ironic_inspector_4c72'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'ironic_inspector_4c72'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'ironic_inspector_4c72'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "ironic_inspector_4c72" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='ironic_inspector_4c72' and host='localhost';" )

            if [[ ${username} != "ironic_inspector_4c72" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: ironic-inspector-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb:current-podified
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:20:00Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:20:00Z"
      lastTransitionTime: "2026-03-18T18:20:00Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:20:00Z"
      lastTransitionTime: "2026-03-18T18:20:00Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:19:53Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n5c9h9h5f5h658h5h59ch699h98h658h586hfdh65h699h79h5dbh67fh666h69h654hd5h54bhdfh584h97hf9h9dhd7h574h5fhd8h7h5fq
    creationTimestamp: "2026-03-18T18:19:53Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: ironic_inspector
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"c69045bc-63d1-42a1-a0f9-3adb0402d770"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:19:53Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:20:01Z"
    name: ironic-inspector-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: ironic-inspector
      uid: c69045bc-63d1-42a1-a0f9-3adb0402d770
    resourceVersion: "33550"
    uid: 59a22041-16bc-41d3-87da-a1790b6c48c8
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 59a22041-16bc-41d3-87da-a1790b6c48c8
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 59a22041-16bc-41d3-87da-a1790b6c48c8
          batch.kubernetes.io/job-name: ironic-inspector-db-create
          controller-uid: 59a22041-16bc-41d3-87da-a1790b6c48c8
          job-name: ironic-inspector-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS ironic_inspector; ALTER DATABASE ironic_inspector CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON ironic_inspector.* TO 'ironic_inspector'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON ironic_inspector.* TO 'ironic_inspector'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE ironic_inspector;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb:current-podified
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:20:01Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:20:01Z"
      lastTransitionTime: "2026-03-18T18:20:01Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:20:01Z"
      lastTransitionTime: "2026-03-18T18:20:01Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:19:53Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n96h656h54bh59h5d7hc5h654h67fh75h9bh8fh676h66ch56ch687h5dbh678h654h6fhcdh676h5dbh696h5bdh586h557h576hbch56bh655h57bh586q
    creationTimestamp: "2026-03-18T18:20:08Z"
    generation: 1
    labels:
      component: inspector
      service: ironic
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:component: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"533bb499-99fb-4bb3-8c21-5156921fb167"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"ironic-inspector-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/podinfo"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/ironic"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/ironic-inspector/dhcp-hostsdir"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"etc-podinfo"}:
                  .: {}
                  f:downwardAPI:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"var-lib-ironic"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"var-lib-ironic-inspector-dhcp-hostsdir"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:20:08Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:20:46Z"
    name: ironic-inspector-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: ironic.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: IronicInspector
      name: ironic-inspector
      uid: 533bb499-99fb-4bb3-8c21-5156921fb167
    resourceVersion: "34627"
    uid: f5e4fdc8-52c3-4a09-bafd-f72261e83b4b
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: f5e4fdc8-52c3-4a09-bafd-f72261e83b4b
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: f5e4fdc8-52c3-4a09-bafd-f72261e83b4b
          batch.kubernetes.io/job-name: ironic-inspector-db-sync
          controller-uid: f5e4fdc8-52c3-4a09-bafd-f72261e83b4b
          job-name: ironic-inspector-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && /bin/bash -c 'ironic-inspector-dbsync
            --config-file /etc/ironic-inspector/inspector.conf --config-dir /etc/ironic-inspector/inspector.conf.d
            upgrade'
          command:
          - /bin/bash
          env:
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-ironic-inspector:current-podified
          imagePullPolicy: IfNotPresent
          name: ironic-inspector-db-sync
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config
            readOnly: true
            subPath: db-sync-config.json
          - mountPath: /var/lib/ironic
            name: var-lib-ironic
          - mountPath: /var/lib/ironic-inspector/dhcp-hostsdir
            name: var-lib-ironic-inspector-dhcp-hostsdir
          - mountPath: /etc/podinfo
            name: etc-podinfo
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: ironic-ironic
        serviceAccountName: ironic-ironic
        terminationGracePeriodSeconds: 30
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: ironic-inspector-scripts
        - name: config
          secret:
            defaultMode: 416
            secretName: ironic-inspector-config-data
        - emptyDir: {}
          name: var-lib-ironic
        - emptyDir: {}
          name: var-lib-ironic-inspector-dhcp-hostsdir
        - downwardAPI:
            defaultMode: 420
            items:
            - fieldRef:
                apiVersion: v1
                fieldPath: metadata.annotations['k8s.v1.cni.cncf.io/network-status']
              path: network-status
          name: etc-podinfo
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:20:46Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:20:46Z"
      lastTransitionTime: "2026-03-18T18:20:46Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:20:46Z"
      lastTransitionTime: "2026-03-18T18:20:46Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:20:08Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n54bh566h96h67h578hbh54fh67fh57fh657h646h5bbh589h597h58dhb6h6h94h8h5f8h688h5fch568h5c7h54hb5hc7h564hbfhbbh68ch58q
    creationTimestamp: "2026-03-18T18:18:20Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: keystone_10af
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"4476fe01-3972-40e4-b536-8e846c0b2293"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:18:20Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:18:25Z"
    name: keystone-10af-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: keystone
      uid: 4476fe01-3972-40e4-b536-8e846c0b2293
    resourceVersion: "30133"
    uid: bf2c6539-42cc-446f-b7b9-05e256e1a8d2
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: bf2c6539-42cc-446f-b7b9-05e256e1a8d2
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: bf2c6539-42cc-446f-b7b9-05e256e1a8d2
          batch.kubernetes.io/job-name: keystone-10af-account-create-update
          controller-uid: bf2c6539-42cc-446f-b7b9-05e256e1a8d2
          job-name: keystone-10af-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "keystone" ]; then
                GRANT_DATABASE="keystone"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'keystone_10af'@'localhost';
            CREATE USER IF NOT EXISTS 'keystone_10af'@'%';

            ALTER USER 'keystone_10af'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'keystone_10af'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'keystone_10af'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'keystone_10af'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "keystone_10af" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='keystone_10af' and host='localhost';" )

            if [[ ${username} != "keystone_10af" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: keystone-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb:current-podified
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:18:25Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:18:25Z"
      lastTransitionTime: "2026-03-18T18:18:25Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:18:25Z"
      lastTransitionTime: "2026-03-18T18:18:25Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:18:20Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n58ch9dh555h679h697h67fh9dhb9h5cdh597h699hb8h574h66hddh55fh7h659h655hffh56dh574h8ch698h85h56fh567hc7hf8h65bh5b8h65bq
    creationTimestamp: "2026-03-18T18:19:05Z"
    generation: 1
    labels:
      owner: keystone
      service: keystone
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:owner: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"47d9e238-f77f-4212-a363-bfff35016507"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
            f:spec:
              f:containers:
                k:{"name":"keystone-bootstrap"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_INTERNAL_URL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_PASSWORD"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                    k:{"name":"OS_BOOTSTRAP_PROJECT_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_PUBLIC_URL"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_REGION_ID"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_SERVICE_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OS_BOOTSTRAP_USERNAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/keystone/credential-keys"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/keystone/fernet-keys"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"credential-keys"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
                k:{"name":"fernet-keys"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:19:05Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:19:25Z"
    name: keystone-bootstrap
    namespace: openstack
    ownerReferences:
    - apiVersion: keystone.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: KeystoneAPI
      name: keystone
      uid: 47d9e238-f77f-4212-a363-bfff35016507
    resourceVersion: "31902"
    uid: d2a17562-6f8e-4d87-8662-be489ed4a991
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: d2a17562-6f8e-4d87-8662-be489ed4a991
    suspend: false
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: d2a17562-6f8e-4d87-8662-be489ed4a991
          batch.kubernetes.io/job-name: keystone-bootstrap
          controller-uid: d2a17562-6f8e-4d87-8662-be489ed4a991
          job-name: keystone-bootstrap
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_set_configs && keystone-manage bootstrap
          command:
          - /bin/bash
          env:
          - name: OS_BOOTSTRAP_PASSWORD
            valueFrom:
              secretKeyRef:
                key: AdminPassword
                name: osp-secret
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          - name: OS_BOOTSTRAP_INTERNAL_URL
            value: https://keystone-internal.openstack.svc:5000
          - name: OS_BOOTSTRAP_PROJECT_NAME
            value: admin
          - name: OS_BOOTSTRAP_PUBLIC_URL
            value: https://keystone-public-openstack.apps.sno.openstack.lab
          - name: OS_BOOTSTRAP_REGION_ID
            value: regionOne
          - name: OS_BOOTSTRAP_SERVICE_NAME
            value: keystone
          - name: OS_BOOTSTRAP_USERNAME
            value: admin
          image: quay.io/podified-antelope-centos9/openstack-keystone:current-podified
          imagePullPolicy: IfNotPresent
          name: keystone-bootstrap
          resources: {}
          securityContext:
            runAsUser: 0
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/lib/config-data/default
            name: config-data
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: keystone-api-config.json
          - mountPath: /etc/keystone/fernet-keys
            name: fernet-keys
            readOnly: true
          - mountPath: /etc/keystone/credential-keys
            name: credential-keys
            readOnly: true
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: keystone-keystone
        serviceAccountName: keystone-keystone
        terminationGracePeriodSeconds: 30
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: keystone-scripts
        - name: config-data
          secret:
            defaultMode: 420
            secretName: keystone-config-data
        - name: fernet-keys
          secret:
            defaultMode: 420
            items:
            - key: FernetKeys0
              path: "0"
            - key: FernetKeys1
              path: "1"
            - key: FernetKeys2
              path: "2"
            - key: FernetKeys3
              path: "3"
            - key: FernetKeys4
              path: "4"
            secretName: keystone
        - name: credential-keys
          secret:
            defaultMode: 420
            items:
            - key: CredentialKeys0
              path: "0"
            - key: CredentialKeys1
              path: "1"
            secretName: keystone
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:19:25Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:19:25Z"
      lastTransitionTime: "2026-03-18T18:19:25Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:19:25Z"
      lastTransitionTime: "2026-03-18T18:19:25Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:19:05Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n5c9h68dh5d9hd6h5c6hd9hd7h5h569hd8h8dhdfh674h96h65h688h66h59ch7dh586h5c7h688hfbh55bh688h5f9h579hdh547hb6h5dh8fq
    creationTimestamp: "2026-03-18T18:18:19Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: keystone
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"eb30dbf2-fe1a-436e-9149-d3eef590200d"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:18:19Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:18:25Z"
    name: keystone-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: keystone
      uid: eb30dbf2-fe1a-436e-9149-d3eef590200d
    resourceVersion: "30118"
    uid: 550ab585-8793-41db-af1f-c71d82a1db17
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 550ab585-8793-41db-af1f-c71d82a1db17
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 550ab585-8793-41db-af1f-c71d82a1db17
          batch.kubernetes.io/job-name: keystone-db-create
          controller-uid: 550ab585-8793-41db-af1f-c71d82a1db17
          job-name: keystone-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS keystone; ALTER DATABASE keystone CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE keystone;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb:current-podified
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:18:25Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:18:25Z"
      lastTransitionTime: "2026-03-18T18:18:25Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:18:25Z"
      lastTransitionTime: "2026-03-18T18:18:25Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:18:19Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n5bdh586h5b6h65fh5ddh698h57dhb8h5f5h6bh599h88h548h56ch584h68fh559h5f5hddh5d7h656h584hcdh689h688h8bh577h655h667hb6h7dhf9q
    creationTimestamp: "2026-03-18T18:18:31Z"
    generation: 1
    labels:
      owner: keystone
      service: keystone
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:owner: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"47d9e238-f77f-4212-a363-bfff35016507"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
            f:spec:
              f:containers:
                k:{"name":"keystone-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsGroup: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/keystone/keystone.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/my.cnf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"credential-keys"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
                k:{"name":"fernet-keys"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:18:31Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:18:51Z"
    name: keystone-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: keystone.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: KeystoneAPI
      name: keystone
      uid: 47d9e238-f77f-4212-a363-bfff35016507
    resourceVersion: "30786"
    uid: d31d18de-a6bf-4db2-95d2-487ec1a7b85b
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: d31d18de-a6bf-4db2-95d2-487ec1a7b85b
    suspend: false
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: d31d18de-a6bf-4db2-95d2-487ec1a7b85b
          batch.kubernetes.io/job-name: keystone-db-sync
          controller-uid: d31d18de-a6bf-4db2-95d2-487ec1a7b85b
          job-name: keystone-db-sync
      spec:
        containers:
        - args:
          - -c
          - keystone-manage db_sync
          command:
          - /bin/bash
          env:
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-keystone:current-podified
          imagePullPolicy: IfNotPresent
          name: keystone-db-sync
          resources: {}
          securityContext:
            capabilities:
              drop:
              - MKNOD
            runAsGroup: 42425
            runAsUser: 42425
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /etc/keystone/keystone.conf
            name: config-data
            readOnly: true
            subPath: keystone.conf
          - mountPath: /etc/my.cnf
            name: config-data
            readOnly: true
            subPath: my.cnf
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: keystone-keystone
        serviceAccountName: keystone-keystone
        terminationGracePeriodSeconds: 30
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: keystone-scripts
        - name: config-data
          secret:
            defaultMode: 420
            secretName: keystone-config-data
        - name: fernet-keys
          secret:
            defaultMode: 420
            items:
            - key: FernetKeys0
              path: "0"
            - key: FernetKeys1
              path: "1"
            - key: FernetKeys2
              path: "2"
            - key: FernetKeys3
              path: "3"
            - key: FernetKeys4
              path: "4"
            secretName: keystone
        - name: credential-keys
          secret:
            defaultMode: 420
            items:
            - key: CredentialKeys0
              path: "0"
            - key: CredentialKeys1
              path: "1"
            secretName: keystone
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:18:51Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:18:51Z"
      lastTransitionTime: "2026-03-18T18:18:51Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:18:51Z"
      lastTransitionTime: "2026-03-18T18:18:51Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:18:31Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n67fh88hcdh7ch5fch555h594hbfh569h54h699h556h575hd5hd9hf7h5c9hd4h547h644hcfh5f8h679h668h5bfh665h5f7h556h546h576hbbh9dq
    creationTimestamp: "2026-03-18T18:18:31Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: neutron_984d
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"0d32c1c4-0c28-4587-8a9e-3b52c252a700"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:18:31Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:18:37Z"
    name: neutron-984d-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: neutron
      uid: 0d32c1c4-0c28-4587-8a9e-3b52c252a700
    resourceVersion: "30590"
    uid: 9f59ffcb-1c1b-479d-a976-c0af3a0528e6
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 9f59ffcb-1c1b-479d-a976-c0af3a0528e6
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 9f59ffcb-1c1b-479d-a976-c0af3a0528e6
          batch.kubernetes.io/job-name: neutron-984d-account-create-update
          controller-uid: 9f59ffcb-1c1b-479d-a976-c0af3a0528e6
          job-name: neutron-984d-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "neutron" ]; then
                GRANT_DATABASE="neutron"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'neutron_984d'@'localhost';
            CREATE USER IF NOT EXISTS 'neutron_984d'@'%';

            ALTER USER 'neutron_984d'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'neutron_984d'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'neutron_984d'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'neutron_984d'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "neutron_984d" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='neutron_984d' and host='localhost';" )

            if [[ ${username} != "neutron_984d" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: neutron-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb:current-podified
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:18:37Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:18:37Z"
      lastTransitionTime: "2026-03-18T18:18:37Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:18:37Z"
      lastTransitionTime: "2026-03-18T18:18:37Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:18:31Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n587hbbh67dh666h95h57ch646h7h575h66hddhd4h7fh594h544h5cbh58dh5b6h75hf5h58fh86h5ch5cbh8fh56h565h55dh5c4h57hdfh8dq
    creationTimestamp: "2026-03-18T18:18:31Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: neutron
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"26288827-e32e-4a8e-8b91-99d5ff827476"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:18:31Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:18:36Z"
    name: neutron-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: neutron
      uid: 26288827-e32e-4a8e-8b91-99d5ff827476
    resourceVersion: "30566"
    uid: a745d196-b50a-4e33-802f-22b4cb59ea18
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: a745d196-b50a-4e33-802f-22b4cb59ea18
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: a745d196-b50a-4e33-802f-22b4cb59ea18
          batch.kubernetes.io/job-name: neutron-db-create
          controller-uid: a745d196-b50a-4e33-802f-22b4cb59ea18
          job-name: neutron-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS neutron; ALTER DATABASE neutron CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE neutron;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb:current-podified
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:18:36Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:18:36Z"
      lastTransitionTime: "2026-03-18T18:18:36Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:18:36Z"
      lastTransitionTime: "2026-03-18T18:18:36Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:18:31Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: nb8hdhf8h698h5d8hb8h587hb9h5d7h5bdhfbh9dhb4h596h76h668h5cbh558h555h67ch57hd4h5f9h5b7h9fh5c5h57chd5hcbhdfh74h79q
      k8s.v1.cni.cncf.io/networks: '[{"name":"internalapi","namespace":"openstack","interface":"internalapi"}]'
    creationTimestamp: "2026-03-18T18:18:53Z"
    generation: 1
    labels:
      service: neutron
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
            f:k8s.v1.cni.cncf.io/networks: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"6f830c3a-81da-4eb8-b1a7-77c80be230d6"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"neutron-db-sync"}:
                  .: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsGroup: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/default"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"httpd-config"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:18:53Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:19:37Z"
    name: neutron-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: neutron.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NeutronAPI
      name: neutron
      uid: 6f830c3a-81da-4eb8-b1a7-77c80be230d6
    resourceVersion: "32462"
    uid: f9538ac2-1ef4-4cf6-a417-6b160487cee6
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: f9538ac2-1ef4-4cf6-a417-6b160487cee6
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: f9538ac2-1ef4-4cf6-a417-6b160487cee6
          batch.kubernetes.io/job-name: neutron-db-sync
          controller-uid: f9538ac2-1ef4-4cf6-a417-6b160487cee6
          job-name: neutron-db-sync
      spec:
        containers:
        - env:
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-neutron-server:current-podified
          imagePullPolicy: IfNotPresent
          name: neutron-db-sync
          resources: {}
          securityContext:
            capabilities:
              drop:
              - MKNOD
            runAsGroup: 42435
            runAsNonRoot: true
            runAsUser: 42435
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/config-data/default
            name: config
            readOnly: true
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config
            readOnly: true
            subPath: db-sync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: neutron-neutron
        serviceAccountName: neutron-neutron
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config
          secret:
            defaultMode: 420
            secretName: neutron-config
        - name: httpd-config
          secret:
            defaultMode: 420
            secretName: neutron-httpd-config
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:19:37Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:19:37Z"
      lastTransitionTime: "2026-03-18T18:19:37Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:19:37Z"
      lastTransitionTime: "2026-03-18T18:19:37Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:18:53Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: nfdh657hdbhf9h58bh86hb4h644h669h65hdfh567h66hdh84h677h697hb8h6fh5bfh667h547h668h545hd5hc5hcfhd7h5d9hd4h55fh685q
    creationTimestamp: "2026-03-18T18:20:26Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_api_16af
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"2e399ef8-1b8e-4d97-b8d3-a0d16db31159"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:20:26Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:20:39Z"
    name: nova-api-16af-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: nova-api
      uid: 2e399ef8-1b8e-4d97-b8d3-a0d16db31159
    resourceVersion: "34474"
    uid: 23ff0ce2-7063-4574-a217-b4b767c8ea8c
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 23ff0ce2-7063-4574-a217-b4b767c8ea8c
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 23ff0ce2-7063-4574-a217-b4b767c8ea8c
          batch.kubernetes.io/job-name: nova-api-16af-account-create-update
          controller-uid: 23ff0ce2-7063-4574-a217-b4b767c8ea8c
          job-name: nova-api-16af-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "nova_api" ]; then
                GRANT_DATABASE="nova_api"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'nova_api_16af'@'localhost';
            CREATE USER IF NOT EXISTS 'nova_api_16af'@'%';

            ALTER USER 'nova_api_16af'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'nova_api_16af'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_api_16af'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_api_16af'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "nova_api_16af" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='nova_api_16af' and host='localhost';" )

            if [[ ${username} != "nova_api_16af" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: nova-api-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb:current-podified
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:20:39Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:20:39Z"
      lastTransitionTime: "2026-03-18T18:20:39Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:20:39Z"
      lastTransitionTime: "2026-03-18T18:20:39Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:20:26Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n55ch657h55h546h577h56dhc7hdbhc6hffh58fh98h56ch5d8h67fhd8h56bh5ffh57fh5dch56fh55bh555h7h6dh65h5d9h5cdh55ch79h5ch565q
    creationTimestamp: "2026-03-18T18:20:26Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_api
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"902eb837-3e4c-4050-93f4-742d882106ac"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:20:26Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:20:38Z"
    name: nova-api-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: nova-api
      uid: 902eb837-3e4c-4050-93f4-742d882106ac
    resourceVersion: "34443"
    uid: 51094208-b819-42bb-bf51-26b53cd1405f
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 51094208-b819-42bb-bf51-26b53cd1405f
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 51094208-b819-42bb-bf51-26b53cd1405f
          batch.kubernetes.io/job-name: nova-api-db-create
          controller-uid: 51094208-b819-42bb-bf51-26b53cd1405f
          job-name: nova-api-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS nova_api; ALTER DATABASE nova_api CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON nova_api.* TO 'nova_api'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON nova_api.* TO 'nova_api'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE nova_api;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb:current-podified
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:20:38Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:20:38Z"
      lastTransitionTime: "2026-03-18T18:20:38Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:20:38Z"
      lastTransitionTime: "2026-03-18T18:20:38Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:20:26Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n5fh55h54fh667h5f8h68ch9fh648h5dfh557h689h649h5bh556h56dh566h64dh67dh8dhd4h7bh646h56ch578h669h8dh5c9h699h78h5fdh7fh565q
    creationTimestamp: "2026-03-18T18:20:26Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_cell0_7471
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"c478d05d-1665-4285-9ab2-7878a1bb7eb5"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:20:26Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:20:39Z"
    name: nova-cell0-7471-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: nova-cell0
      uid: c478d05d-1665-4285-9ab2-7878a1bb7eb5
    resourceVersion: "34470"
    uid: dbd9a15e-0ad4-4309-a1c9-4346bad1ce30
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: dbd9a15e-0ad4-4309-a1c9-4346bad1ce30
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: dbd9a15e-0ad4-4309-a1c9-4346bad1ce30
          batch.kubernetes.io/job-name: nova-cell0-7471-account-create-update
          controller-uid: dbd9a15e-0ad4-4309-a1c9-4346bad1ce30
          job-name: nova-cell0-7471-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "nova_cell0" ]; then
                GRANT_DATABASE="nova_cell0"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'nova_cell0_7471'@'localhost';
            CREATE USER IF NOT EXISTS 'nova_cell0_7471'@'%';

            ALTER USER 'nova_cell0_7471'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'nova_cell0_7471'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_cell0_7471'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_cell0_7471'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "nova_cell0_7471" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='nova_cell0_7471' and host='localhost';" )

            if [[ ${username} != "nova_cell0_7471" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: nova-cell0-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb:current-podified
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:20:39Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:20:39Z"
      lastTransitionTime: "2026-03-18T18:20:39Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:20:39Z"
      lastTransitionTime: "2026-03-18T18:20:39Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:20:26Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: nb8h695h645h565h5b4hb9h98hc9h5d4h549hfdh5bfhd5h594h66fh75hf6h99h669h5h7bh64dh584h649h58dhf7h5f6h5d8h8ch565h54dh557q
    creationTimestamp: "2026-03-18T18:21:29Z"
    generation: 1
    labels:
      service: nova
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"c426ca1f-bcb3-4591-a6ce-4b9d354199b9"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"nova-manage"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CELL_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"INPUT_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:21:29Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:21:49Z"
    name: nova-cell0-cell-mapping
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Nova
      name: nova
      uid: c426ca1f-bcb3-4591-a6ce-4b9d354199b9
    resourceVersion: "35978"
    uid: f5c014bb-01b1-4561-b162-2971d5741b8d
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: f5c014bb-01b1-4561-b162-2971d5741b8d
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: f5c014bb-01b1-4561-b162-2971d5741b8d
          batch.kubernetes.io/job-name: nova-cell0-cell-mapping
          controller-uid: f5c014bb-01b1-4561-b162-2971d5741b8d
          job-name: nova-cell0-cell-mapping
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CELL_NAME
            value: cell0
          - name: INPUT_HASH
            value: n7bh5cfhdh568h697hbdh5b8h58h65fh7ch9dh688h675hb4h78hc6h5fbhfdh598h586h668h76h6ch5b8hb9h96h6bh599h74h658h59dh547q
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor:current-podified
          imagePullPolicy: IfNotPresent
          name: nova-manage
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/openstack/bin
            name: scripts
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: cell-mapping-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell0-manage-config-data
        - name: scripts
          secret:
            defaultMode: 480
            secretName: nova-cell0-manage-scripts
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:21:49Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:21:49Z"
      lastTransitionTime: "2026-03-18T18:21:49Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:21:49Z"
      lastTransitionTime: "2026-03-18T18:21:49Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:21:29Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n657h66ch9fh58ch5cfhbh87h659h668h589h97h85hbh5f5h54dh645h545h5b7h7dh9fh66fh579h5f9h5b4hd5h5b7h695h659h9ch696h54ch54fq
      k8s.v1.cni.cncf.io/networks: '[]'
    creationTimestamp: "2026-03-18T18:20:42Z"
    generation: 1
    labels:
      service: nova-conductor
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
            f:k8s.v1.cni.cncf.io/networks: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"bdd0feed-c07e-4b64-a517-cb1c45fb917b"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"nova-cell0-conductor-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CELL_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:20:42Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:21:23Z"
    name: nova-cell0-conductor-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NovaConductor
      name: nova-cell0-conductor
      uid: bdd0feed-c07e-4b64-a517-cb1c45fb917b
    resourceVersion: "35333"
    uid: aa0214bf-e610-48e9-9528-19a1401c13dd
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: aa0214bf-e610-48e9-9528-19a1401c13dd
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: aa0214bf-e610-48e9-9528-19a1401c13dd
          batch.kubernetes.io/job-name: nova-cell0-conductor-db-sync
          controller-uid: aa0214bf-e610-48e9-9528-19a1401c13dd
          job-name: nova-cell0-conductor-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CELL_NAME
            value: cell0
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor:current-podified
          imagePullPolicy: IfNotPresent
          name: nova-cell0-conductor-db-sync
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/openstack/bin
            name: scripts
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: nova-conductor-dbsync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell0-conductor-config-data
        - name: scripts
          secret:
            defaultMode: 480
            secretName: nova-cell0-conductor-scripts
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:21:23Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:21:23Z"
      lastTransitionTime: "2026-03-18T18:21:23Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:21:23Z"
      lastTransitionTime: "2026-03-18T18:21:23Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:20:42Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n57hb9h654h65ch668h5dch5cdh86h56fh54fh5ch99h686h67fh54chcbh595h549h55dh5f6h675h675hfdh64fh648h79hcfh5dfhbdh8dh9fh5d4q
    creationTimestamp: "2026-03-18T18:20:26Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_cell0
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"ea35cd25-b2c4-4cb1-8ae8-a05d57eff7e1"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:20:26Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:20:38Z"
    name: nova-cell0-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: nova-cell0
      uid: ea35cd25-b2c4-4cb1-8ae8-a05d57eff7e1
    resourceVersion: "34433"
    uid: 2b30de50-695b-4598-b381-b2bf692cd8b3
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 2b30de50-695b-4598-b381-b2bf692cd8b3
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 2b30de50-695b-4598-b381-b2bf692cd8b3
          batch.kubernetes.io/job-name: nova-cell0-db-create
          controller-uid: 2b30de50-695b-4598-b381-b2bf692cd8b3
          job-name: nova-cell0-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS nova_cell0; ALTER DATABASE nova_cell0 CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova_cell0'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova_cell0'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE nova_cell0;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb:current-podified
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:20:38Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:20:38Z"
      lastTransitionTime: "2026-03-18T18:20:38Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:20:38Z"
      lastTransitionTime: "2026-03-18T18:20:38Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:20:26Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n65bhb4hdh57hc8h657h5fdh5f6h649h5b4hbdh584h57ch569h5c4hc8h57fh546h584h88h5c9h57h68bh569h696hf5h557h9fh54bh5c8hb5h56dq
    creationTimestamp: "2026-03-18T18:20:26Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_cell1_5998
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"0d2cbcd9-7267-41ad-b9f5-5dbb63af86a4"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:20:26Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:20:39Z"
    name: nova-cell1-5998-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: nova-cell1
      uid: 0d2cbcd9-7267-41ad-b9f5-5dbb63af86a4
    resourceVersion: "34461"
    uid: 476ddee5-7b57-4b4e-91c4-98822ec9279f
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 476ddee5-7b57-4b4e-91c4-98822ec9279f
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 476ddee5-7b57-4b4e-91c4-98822ec9279f
          batch.kubernetes.io/job-name: nova-cell1-5998-account-create-update
          controller-uid: 476ddee5-7b57-4b4e-91c4-98822ec9279f
          job-name: nova-cell1-5998-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack-cell1.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack-cell1.openstack.svc -u root -P 3306"

            if [ -n "nova_cell1" ]; then
                GRANT_DATABASE="nova_cell1"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'nova_cell1_5998'@'localhost';
            CREATE USER IF NOT EXISTS 'nova_cell1_5998'@'%';

            ALTER USER 'nova_cell1_5998'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'nova_cell1_5998'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_cell1_5998'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'nova_cell1_5998'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "nova_cell1_5998" = "root" ]; then
                MYSQL_CMD="mysql -h openstack-cell1.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='nova_cell1_5998' and host='localhost';" )

            if [[ ${username} != "nova_cell1_5998" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: nova-cell1-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb:current-podified
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack-cell1
        serviceAccountName: galera-openstack-cell1
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-cell1-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:20:39Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:20:39Z"
      lastTransitionTime: "2026-03-18T18:20:39Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:20:39Z"
      lastTransitionTime: "2026-03-18T18:20:39Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:20:26Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n68dh6h94h65dh66bh574h688h698h5cfh97h665h65dh55h94hf5h8hd7h76h5ch554h68ch64dh696h5cdh58h5b7h67fh5f8h579h55bh657h695q
    creationTimestamp: "2026-03-18T18:22:20Z"
    generation: 1
    labels:
      service: nova
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"c426ca1f-bcb3-4591-a6ce-4b9d354199b9"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"nova-manage"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CELL_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"INPUT_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:22:20Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:22:31Z"
    name: nova-cell1-cell-mapping
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Nova
      name: nova
      uid: c426ca1f-bcb3-4591-a6ce-4b9d354199b9
    resourceVersion: "36885"
    uid: d9da5c58-0db8-4121-9099-58bb1476cdc8
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: d9da5c58-0db8-4121-9099-58bb1476cdc8
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: d9da5c58-0db8-4121-9099-58bb1476cdc8
          batch.kubernetes.io/job-name: nova-cell1-cell-mapping
          controller-uid: d9da5c58-0db8-4121-9099-58bb1476cdc8
          job-name: nova-cell1-cell-mapping
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CELL_NAME
            value: cell1
          - name: INPUT_HASH
            value: n5dbh56bh659h59ch55fh58fhffh99h597h54dh5d9h5f9h56dh584h58dh678h6h95h547h64ch5b7h5dbh54fh66hd9h4h6dh589h577h58h548h5c8q
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor:current-podified
          imagePullPolicy: IfNotPresent
          name: nova-manage
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/openstack/bin
            name: scripts
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: cell-mapping-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell1-manage-config-data
        - name: scripts
          secret:
            defaultMode: 480
            secretName: nova-cell1-manage-scripts
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:22:31Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:22:31Z"
      lastTransitionTime: "2026-03-18T18:22:31Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:22:31Z"
      lastTransitionTime: "2026-03-18T18:22:31Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:22:20Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n566hbch5d6h665h655h57fh8dh575h548h57dh76hbh7chd9hf7h6fh6ch698h558h599h59ch556h8bh568h64h596h87h556h68fh557h57bh645q
      k8s.v1.cni.cncf.io/networks: '[]'
    creationTimestamp: "2026-03-18T18:21:31Z"
    generation: 1
    labels:
      service: nova-conductor
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
            f:k8s.v1.cni.cncf.io/networks: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"b30933e6-3149-4c10-9da0-091ac7343a5e"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"nova-cell1-conductor-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CELL_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:21:31Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:21:51Z"
    name: nova-cell1-conductor-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: NovaConductor
      name: nova-cell1-conductor
      uid: b30933e6-3149-4c10-9da0-091ac7343a5e
    resourceVersion: "36027"
    uid: ad4f2243-7ff4-48e9-bd52-55d8cbabae1d
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: ad4f2243-7ff4-48e9-bd52-55d8cbabae1d
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: ad4f2243-7ff4-48e9-bd52-55d8cbabae1d
          batch.kubernetes.io/job-name: nova-cell1-conductor-db-sync
          controller-uid: ad4f2243-7ff4-48e9-bd52-55d8cbabae1d
          job-name: nova-cell1-conductor-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: CELL_NAME
            value: cell1
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor:current-podified
          imagePullPolicy: IfNotPresent
          name: nova-cell1-conductor-db-sync
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/openstack/bin
            name: scripts
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: nova-conductor-dbsync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell1-conductor-config-data
        - name: scripts
          secret:
            defaultMode: 480
            secretName: nova-cell1-conductor-scripts
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:21:51Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:21:51Z"
      lastTransitionTime: "2026-03-18T18:21:51Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:21:51Z"
      lastTransitionTime: "2026-03-18T18:21:51Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:21:31Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n57bh68ch57fh77h5bdh546h59ch567h64bh56fh5cch64h579hd5hdch696h5d8hfh5b9h68dh597h54ch5f8h7bhb6h68bhfdh66dh595h96h67dh68cq
    creationTimestamp: "2026-03-18T18:20:26Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: nova_cell1
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"a34de520-cb39-428f-b118-d13fdebeab6f"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:20:26Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:20:39Z"
    name: nova-cell1-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: nova-cell1
      uid: a34de520-cb39-428f-b118-d13fdebeab6f
    resourceVersion: "34466"
    uid: 847aae1e-73cd-419d-adc6-dd1bba1019fa
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 847aae1e-73cd-419d-adc6-dd1bba1019fa
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 847aae1e-73cd-419d-adc6-dd1bba1019fa
          batch.kubernetes.io/job-name: nova-cell1-db-create
          controller-uid: 847aae1e-73cd-419d-adc6-dd1bba1019fa
          job-name: nova-cell1-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack-cell1.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack-cell1.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS nova_cell1; ALTER DATABASE nova_cell1 CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack-cell1.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON nova_cell1.* TO 'nova_cell1'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON nova_cell1.* TO 'nova_cell1'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack-cell1.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE nova_cell1;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb:current-podified
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack-cell1
        serviceAccountName: galera-openstack-cell1
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-cell1-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:20:39Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:20:39Z"
      lastTransitionTime: "2026-03-18T18:20:39Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:20:39Z"
      lastTransitionTime: "2026-03-18T18:20:39Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:20:26Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n74h578h96h56ch86h6h57dhcbhcdhc4hf6h5c4h4h9ch5d4h6dh566h55fh5c7h54dhdhd4hbch5d5h548h67dh59hd5h5d4h5bfh585h5f5q
    creationTimestamp: "2026-03-18T18:22:20Z"
    generation: 1
    labels:
      service: nova
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"c426ca1f-bcb3-4591-a6ce-4b9d354199b9"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"nova-manage"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"INPUT_HASH"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/bin"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:22:20Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:22:27Z"
    name: nova-cell1-host-discover
    namespace: openstack
    ownerReferences:
    - apiVersion: nova.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: Nova
      name: nova
      uid: c426ca1f-bcb3-4591-a6ce-4b9d354199b9
    resourceVersion: "36822"
    uid: 185dad11-00f9-4ae5-b1ee-8ba7544afffb
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 185dad11-00f9-4ae5-b1ee-8ba7544afffb
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 185dad11-00f9-4ae5-b1ee-8ba7544afffb
          batch.kubernetes.io/job-name: nova-cell1-host-discover
          controller-uid: 185dad11-00f9-4ae5-b1ee-8ba7544afffb
          job-name: nova-cell1-host-discover
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: INPUT_HASH
            value: nch64bh5fbh68h5c4h598h9h66bh7ch5f9h64bhfhcch567h568h677h5bfh5c7hb5h664h69h58dh655h79hbbh544h57bh6dhd4h95h599h84q
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-nova-conductor:current-podified
          imagePullPolicy: IfNotPresent
          name: nova-manage
          resources: {}
          securityContext:
            runAsUser: 42436
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/openstack/bin
            name: scripts
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            subPath: host-discover-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: nova-nova
        serviceAccountName: nova-nova
        terminationGracePeriodSeconds: 30
        volumes:
        - name: config-data
          secret:
            defaultMode: 416
            secretName: nova-cell1-manage-config-data
        - name: scripts
          secret:
            defaultMode: 480
            secretName: nova-cell1-manage-scripts
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:22:27Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:22:27Z"
      lastTransitionTime: "2026-03-18T18:22:27Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:22:27Z"
      lastTransitionTime: "2026-03-18T18:22:27Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:22:20Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n5c8h5c8h69h675h7fhffhch7ch56dh569h5cch655hf8h558h667h568h664h7h5bbhc8h85h5c6h54bh8bh87h567h697h644h69hc8h9dh57dq
    creationTimestamp: "2026-03-18T18:18:20Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: placement_8850
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"798699b1-2bb0-4dea-9959-f9ace56f2184"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:18:20Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:18:25Z"
    name: placement-8850-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: placement
      uid: 798699b1-2bb0-4dea-9959-f9ace56f2184
    resourceVersion: "30129"
    uid: 9e928ad1-14a2-4b88-9881-3148189efa63
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 9e928ad1-14a2-4b88-9881-3148189efa63
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 9e928ad1-14a2-4b88-9881-3148189efa63
          batch.kubernetes.io/job-name: placement-8850-account-create-update
          controller-uid: 9e928ad1-14a2-4b88-9881-3148189efa63
          job-name: placement-8850-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack.openstack.svc -u root -P 3306"

            if [ -n "placement" ]; then
                GRANT_DATABASE="placement"
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'placement_8850'@'localhost';
            CREATE USER IF NOT EXISTS 'placement_8850'@'%';

            ALTER USER 'placement_8850'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'placement_8850'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'placement_8850'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'placement_8850'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "placement_8850" = "root" ]; then
                MYSQL_CMD="mysql -h openstack.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='placement_8850' and host='localhost';" )

            if [[ ${username} != "placement_8850" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: placement-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb:current-podified
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:18:25Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:18:25Z"
      lastTransitionTime: "2026-03-18T18:18:25Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:18:25Z"
      lastTransitionTime: "2026-03-18T18:18:25Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:18:20Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n94h649h678h9dh99h559h57bh9chdch65dh576h97h545hfch5f5h564h556h64fh597h79hf8h86hc6hf9h577h576h54dh674h688h67bhf9h676q
    creationTimestamp: "2026-03-18T18:18:20Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: placement
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"ddc50144-56a5-48fc-80be-5c4467e00b1b"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-database-create"}:
                  .: {}
                  f:command: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:18:20Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:18:25Z"
    name: placement-db-create
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBDatabase
      name: placement
      uid: ddc50144-56a5-48fc-80be-5c4467e00b1b
    resourceVersion: "30140"
    uid: 29a069ad-36a3-4360-a07d-aca1f5206c05
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 29a069ad-36a3-4360-a07d-aca1f5206c05
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 29a069ad-36a3-4360-a07d-aca1f5206c05
          batch.kubernetes.io/job-name: placement-db-create
          controller-uid: 29a069ad-36a3-4360-a07d-aca1f5206c05
          job-name: placement-db-create
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            mysql -h openstack.openstack.svc -u root -P 3306 -e "CREATE DATABASE IF NOT EXISTS placement; ALTER DATABASE placement CHARACTER SET 'utf8' COLLATE 'utf8_general_ci';"

            if [[ "${DatabasePassword}" != "" ]]; then
                # legacy; create database with username
                mysql -h openstack.openstack.svc -u root -P 3306 -e "GRANT ALL PRIVILEGES ON placement.* TO 'placement'@'localhost' IDENTIFIED BY '$DatabasePassword';GRANT ALL PRIVILEGES ON placement.* TO 'placement'@'%' IDENTIFIED BY '$DatabasePassword';"
            fi

            # echo the SHOW CREATE to ensure db was created; will return nonzero error code if
            # DB does not exist
            mysql -h openstack.openstack.svc -u root -P 3306 -NB -e "SHOW CREATE DATABASE placement;"
          image: quay.io/podified-antelope-centos9/openstack-mariadb:current-podified
          imagePullPolicy: IfNotPresent
          name: mariadb-database-create
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack
        serviceAccountName: galera-openstack
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:18:25Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:18:25Z"
      lastTransitionTime: "2026-03-18T18:18:25Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:18:25Z"
      lastTransitionTime: "2026-03-18T18:18:25Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:18:20Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n557h7bh5b4h5d4h574h679h68bhcbhbfh554h645h679h56bh689h5dchb6h56bh654h5b8h644h5f9h5bdh7dh648h547h5h658h687h65dh86h55dhcfq
    creationTimestamp: "2026-03-18T18:18:54Z"
    generation: 1
    labels:
      owner: placement
      service: placement
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:owner: {}
            f:service: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"dba6b762-37df-4249-a5b7-f76dea133088"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:metadata:
              f:annotations:
                .: {}
                f:k8s.v1.cni.cncf.io/networks: {}
            f:spec:
              f:containers:
                k:{"name":"placement-db-sync"}:
                  .: {}
                  f:args: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"KOLLA_BOOTSTRAP"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"KOLLA_CONFIG_STRATEGY"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/container-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                    k:{"mountPath":"/var/lib/kolla/config_files/config.json"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/openstack/config"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/var/log/placement"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"config-data"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"logs"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:18:54Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:19:16Z"
    name: placement-db-sync
    namespace: openstack
    ownerReferences:
    - apiVersion: placement.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: PlacementAPI
      name: placement
      uid: dba6b762-37df-4249-a5b7-f76dea133088
    resourceVersion: "31533"
    uid: 3f9da90f-3b64-4f3b-ba19-ea16c229708e
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 3f9da90f-3b64-4f3b-ba19-ea16c229708e
    suspend: false
    template:
      metadata:
        annotations:
          k8s.v1.cni.cncf.io/networks: '[]'
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 3f9da90f-3b64-4f3b-ba19-ea16c229708e
          batch.kubernetes.io/job-name: placement-db-sync
          controller-uid: 3f9da90f-3b64-4f3b-ba19-ea16c229708e
          job-name: placement-db-sync
      spec:
        containers:
        - args:
          - -c
          - /usr/local/bin/kolla_start
          command:
          - /bin/bash
          env:
          - name: KOLLA_BOOTSTRAP
            value: "true"
          - name: KOLLA_CONFIG_STRATEGY
            value: COPY_ALWAYS
          image: quay.io/podified-antelope-centos9/openstack-placement-api:current-podified
          imagePullPolicy: IfNotPresent
          name: placement-db-sync
          resources: {}
          securityContext:
            runAsUser: 42482
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/container-scripts
            name: scripts
            readOnly: true
          - mountPath: /var/log/placement
            name: logs
          - mountPath: /var/lib/openstack/config
            name: config-data
          - mountPath: /var/lib/kolla/config_files/config.json
            name: config-data
            readOnly: true
            subPath: placement-dbsync-config.json
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: placement-placement
        serviceAccountName: placement-placement
        terminationGracePeriodSeconds: 30
        volumes:
        - name: scripts
          secret:
            defaultMode: 493
            secretName: placement-scripts
        - name: config-data
          secret:
            defaultMode: 416
            secretName: placement-config-data
        - emptyDir: {}
          name: logs
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:19:16Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:19:16Z"
      lastTransitionTime: "2026-03-18T18:19:16Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:19:16Z"
      lastTransitionTime: "2026-03-18T18:19:16Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:18:54Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n64fh7bh67bh548hf6h665h5dbh54dhc8hcdh596h79h544h546h546h697h566h665h6ch65dhcbh5b7h586h646h569h569h89h689h549h676h598h56dq
    creationTimestamp: "2026-03-18T18:18:27Z"
    generation: 1
    labels:
      app: mariadbschema
      cr: root
      owner: mariadb-operator
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:app: {}
            f:cr: {}
            f:owner: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"11da5ad6-28a6-4ddd-b2c8-eb4861761425"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"mariadb-account-create-update"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"DatabasePassword"}:
                      .: {}
                      f:name: {}
                      f:valueFrom:
                        .: {}
                        f:secretKeyRef: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/var/lib/operator-scripts"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"operator-scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
          f:ttlSecondsAfterFinished: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:18:27Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:18:32Z"
    name: root-account-create-update
    namespace: openstack
    ownerReferences:
    - apiVersion: mariadb.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: MariaDBAccount
      name: openstack-cell1-mariadb-root
      uid: 11da5ad6-28a6-4ddd-b2c8-eb4861761425
    resourceVersion: "30448"
    uid: f11b0ed4-0099-4ad0-82d4-8393586bb904
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: f11b0ed4-0099-4ad0-82d4-8393586bb904
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: f11b0ed4-0099-4ad0-82d4-8393586bb904
          batch.kubernetes.io/job-name: root-account-create-update
          controller-uid: f11b0ed4-0099-4ad0-82d4-8393586bb904
          job-name: root-account-create-update
      spec:
        containers:
        - command:
          - /bin/sh
          - -c
          - |
            #!/bin/bash

            MYSQL_REMOTE_HOST="openstack-cell1.openstack.svc" source /var/lib/operator-scripts/mysql_root_auth.sh

            export DatabasePassword=${DatabasePassword:?"Please specify a DatabasePassword variable."}

            MYSQL_CMD="mysql -h openstack-cell1.openstack.svc -u root -P 3306"

            if [ -n "" ]; then
                GRANT_DATABASE=""
            else
                GRANT_DATABASE="*"
            fi

            # going for maximum compatibility here:
            # 1. MySQL 8 no longer allows implicit create user when GRANT is used
            # 2. MariaDB has "CREATE OR REPLACE", but MySQL does not
            # 3. create user with CREATE but then do all password and TLS with ALTER to
            #    support updates

            $MYSQL_CMD <<EOF
            CREATE USER IF NOT EXISTS 'root'@'localhost';
            CREATE USER IF NOT EXISTS 'root'@'%';

            ALTER USER 'root'@'localhost' IDENTIFIED BY '$DatabasePassword';
            ALTER USER 'root'@'%'  IDENTIFIED BY '$DatabasePassword';

            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'root'@'localhost';
            GRANT ALL PRIVILEGES ON ${GRANT_DATABASE}.* TO 'root'@'%';
            EOF

            # If we just changed the root password, update MYSQL_CMD to use the new password
            if [ "root" = "root" ]; then
                MYSQL_CMD="mysql -h openstack-cell1.openstack.svc -u root -p${DatabasePassword} -P 3306"
            fi

            # search for the account.  not using SHOW CREATE USER to avoid displaying
            # password hash
            username=$($MYSQL_CMD -NB -e "select user from mysql.user where user='root' and host='localhost';" )

            if [[ ${username} != "root" ]]; then
                exit 1
            fi
          env:
          - name: DatabasePassword
            valueFrom:
              secretKeyRef:
                key: DatabasePassword
                name: openstack-cell1-mariadb-root-db-secret
          image: quay.io/podified-antelope-centos9/openstack-mariadb:current-podified
          imagePullPolicy: IfNotPresent
          name: mariadb-account-create-update
          resources: {}
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /var/lib/operator-scripts
            name: operator-scripts
            readOnly: true
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext: {}
        serviceAccount: galera-openstack-cell1
        serviceAccountName: galera-openstack-cell1
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 420
            items:
            - key: mysql_root_auth.sh
              path: mysql_root_auth.sh
            name: openstack-cell1-scripts
          name: operator-scripts
    ttlSecondsAfterFinished: 600
  status:
    completionTime: "2026-03-18T18:18:32Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:18:32Z"
      lastTransitionTime: "2026-03-18T18:18:32Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:18:32Z"
      lastTransitionTime: "2026-03-18T18:18:32Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:18:27Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
- apiVersion: batch/v1
  kind: Job
  metadata:
    annotations:
      hash: n587h576h6dh5b9h55dhfh58ch5f9h548h668h669hf4hdfh8hb8h65dh55chcdh585h575h59dh64bh87h665h578h598h548h598h84h667h56bh5f8q
    creationTimestamp: "2026-03-18T18:17:54Z"
    generation: 1
    labels:
      job-name: swift-ring-rebalance
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            .: {}
            f:hash: {}
          f:labels:
            .: {}
            f:job-name: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"c0c7cbaf-e076-4128-a028-f02f491f255e"}: {}
        f:spec:
          f:backoffLimit: {}
          f:completionMode: {}
          f:completions: {}
          f:manualSelector: {}
          f:parallelism: {}
          f:podReplacementPolicy: {}
          f:suspend: {}
          f:template:
            f:spec:
              f:containers:
                k:{"name":"swift-ring-rebalance"}:
                  .: {}
                  f:command: {}
                  f:env:
                    .: {}
                    k:{"name":"CM_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"NAMESPACE"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OWNER_APIVERSION"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OWNER_KIND"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OWNER_NAME"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"OWNER_UID"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"SWIFT_MIN_PART_HOURS"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"SWIFT_PART_POWER"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                    k:{"name":"SWIFT_REPLICAS"}:
                      .: {}
                      f:name: {}
                      f:value: {}
                  f:image: {}
                  f:imagePullPolicy: {}
                  f:name: {}
                  f:resources: {}
                  f:securityContext:
                    .: {}
                    f:allowPrivilegeEscalation: {}
                    f:capabilities:
                      .: {}
                      f:drop: {}
                    f:runAsNonRoot: {}
                    f:runAsUser: {}
                  f:terminationMessagePath: {}
                  f:terminationMessagePolicy: {}
                  f:volumeMounts:
                    .: {}
                    k:{"mountPath":"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                    k:{"mountPath":"/etc/swift/dispersion.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/etc/swift/swift.conf"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/usr/local/bin/swift-ring-tool"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                      f:subPath: {}
                    k:{"mountPath":"/var/lib/config-data/ring-devices"}:
                      .: {}
                      f:mountPath: {}
                      f:name: {}
                      f:readOnly: {}
                  f:workingDir: {}
              f:dnsPolicy: {}
              f:restartPolicy: {}
              f:schedulerName: {}
              f:securityContext:
                .: {}
                f:seccompProfile:
                  .: {}
                  f:type: {}
              f:serviceAccount: {}
              f:serviceAccountName: {}
              f:terminationGracePeriodSeconds: {}
              f:volumes:
                .: {}
                k:{"name":"combined-ca-bundle"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:secretName: {}
                k:{"name":"dispersionconf"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:optional: {}
                    f:secretName: {}
                k:{"name":"etc-swift"}:
                  .: {}
                  f:emptyDir: {}
                  f:name: {}
                k:{"name":"ring-data-devices"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"scripts"}:
                  .: {}
                  f:configMap:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:name: {}
                  f:name: {}
                k:{"name":"swiftconf"}:
                  .: {}
                  f:name: {}
                  f:secret:
                    .: {}
                    f:defaultMode: {}
                    f:items: {}
                    f:secretName: {}
      manager: manager
      operation: Update
      time: "2026-03-18T18:17:54Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:completionTime: {}
          f:conditions: {}
          f:ready: {}
          f:startTime: {}
          f:succeeded: {}
          f:terminating: {}
          f:uncountedTerminatedPods: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-03-18T18:18:14Z"
    name: swift-ring-rebalance
    namespace: openstack
    ownerReferences:
    - apiVersion: swift.openstack.org/v1beta1
      blockOwnerDeletion: true
      controller: true
      kind: SwiftRing
      name: swift-ring
      uid: c0c7cbaf-e076-4128-a028-f02f491f255e
    resourceVersion: "29845"
    uid: 26bd119d-a0ae-4c10-bc17-0935ad9ce984
  spec:
    backoffLimit: 6
    completionMode: NonIndexed
    completions: 1
    manualSelector: false
    parallelism: 1
    podReplacementPolicy: TerminatingOrFailed
    selector:
      matchLabels:
        batch.kubernetes.io/controller-uid: 26bd119d-a0ae-4c10-bc17-0935ad9ce984
    suspend: false
    template:
      metadata:
        creationTimestamp: null
        labels:
          batch.kubernetes.io/controller-uid: 26bd119d-a0ae-4c10-bc17-0935ad9ce984
          batch.kubernetes.io/job-name: swift-ring-rebalance
          controller-uid: 26bd119d-a0ae-4c10-bc17-0935ad9ce984
          job-name: swift-ring-rebalance
      spec:
        containers:
        - command:
          - /usr/local/bin/swift-ring-tool
          - all
          env:
          - name: CM_NAME
            value: swift-ring-files
          - name: NAMESPACE
            value: openstack
          - name: OWNER_APIVERSION
            value: swift.openstack.org/v1beta1
          - name: OWNER_KIND
            value: SwiftRing
          - name: OWNER_NAME
            value: swift-ring
          - name: OWNER_UID
            value: c0c7cbaf-e076-4128-a028-f02f491f255e
          - name: SWIFT_MIN_PART_HOURS
            value: "1"
          - name: SWIFT_PART_POWER
            value: "10"
          - name: SWIFT_REPLICAS
            value: "1"
          image: quay.io/podified-antelope-centos9/openstack-swift-proxy-server:current-podified
          imagePullPolicy: IfNotPresent
          name: swift-ring-rebalance
          resources: {}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
              - ALL
            runAsNonRoot: true
            runAsUser: 42445
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          volumeMounts:
          - mountPath: /usr/local/bin/swift-ring-tool
            name: scripts
            readOnly: true
            subPath: swift-ring-tool
          - mountPath: /etc/swift/swift.conf
            name: swiftconf
            readOnly: true
            subPath: swift.conf
          - mountPath: /etc/swift
            name: etc-swift
          - mountPath: /var/lib/config-data/ring-devices
            name: ring-data-devices
            readOnly: true
          - mountPath: /etc/swift/dispersion.conf
            name: dispersionconf
            readOnly: true
            subPath: dispersion.conf
          - mountPath: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
            name: combined-ca-bundle
            readOnly: true
            subPath: tls-ca-bundle.pem
          workingDir: /etc/swift
        dnsPolicy: ClusterFirst
        restartPolicy: OnFailure
        schedulerName: default-scheduler
        securityContext:
          seccompProfile:
            type: RuntimeDefault
        serviceAccount: swift-swift
        serviceAccountName: swift-swift
        terminationGracePeriodSeconds: 30
        volumes:
        - configMap:
            defaultMode: 493
            items:
            - key: swift-ring-tool
              path: swift-ring-tool
            name: swift-ring-scripts
          name: scripts
        - name: swiftconf
          secret:
            defaultMode: 420
            items:
            - key: swift.conf
              path: swift.conf
            secretName: swift-conf
        - emptyDir: {}
          name: etc-swift
        - configMap:
            defaultMode: 420
            name: swift-ring-config-data
          name: ring-data-devices
        - name: dispersionconf
          secret:
            defaultMode: 420
            items:
            - key: dispersion.conf
              path: dispersion.conf
            optional: true
            secretName: swift-proxy-config-data
        - name: combined-ca-bundle
          secret:
            defaultMode: 292
            secretName: combined-ca-bundle
  status:
    completionTime: "2026-03-18T18:18:14Z"
    conditions:
    - lastProbeTime: "2026-03-18T18:18:14Z"
      lastTransitionTime: "2026-03-18T18:18:14Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: SuccessCriteriaMet
    - lastProbeTime: "2026-03-18T18:18:14Z"
      lastTransitionTime: "2026-03-18T18:18:14Z"
      message: Reached expected number of succeeded pods
      reason: CompletionsReached
      status: "True"
      type: Complete
    ready: 0
    startTime: "2026-03-18T18:17:54Z"
    succeeded: 1
    terminating: 0
    uncountedTerminatedPods: {}
kind: JobList
metadata:
  resourceVersion: "40038"